Ilya Maximets writes:
> On 3/13/24 12:08, Paolo Valerio wrote:
>> Recent kernels introduced a mechanism that allows to evict colliding
>> entries in a closing state whereas they were previously considered as
>> parts of a non-recoverable clash.
>> This new behavior makes "conntrack - SNAT with po
On 3/13/24 12:08, Paolo Valerio wrote:
> Recent kernels introduced a mechanism that allows to evict colliding
> entries in a closing state whereas they were previously considered as
> parts of a non-recoverable clash.
> This new behavior makes "conntrack - SNAT with port range with
> exhaustion tes