Fernando Fernandez Mancera be102eb6a0 netfilter: nf_conncount: rework API to use sk_buff directly ... When using nf_conncount infrastructure for non-confirmed connections a duplicated track is possible due to an optimization introduced since commit d265929930 ("netfilter: nf_conncount: reduce unnecessary GC"). In order to fix this introduce a new conncount API that receives directly an sk_buff struct. It fetches the tuple and zone and the corresponding ct from it. It comes with both existing conncount variants nf_conncount_count_skb() and nf_conncount_add_skb(). In addition remove the old API and adjust all the users to use the new one. This way, for each sk_buff struct it is possible to check if there is a ct present and already confirmed. If so, skip the add operation. Fixes: d265929930 ("netfilter: nf_conncount: reduce unnecessary GC") Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2025-11-28 00:05:49 +00:00
..
ipv4	…
ipv6	…
br_netfilter.h	…
nf_bpf_link.h	…
nf_conntrack.h	…
nf_conntrack_acct.h	…
nf_conntrack_act_ct.h	…
nf_conntrack_bpf.h	…
nf_conntrack_bridge.h	…
nf_conntrack_core.h	…
nf_conntrack_count.h	netfilter: nf_conncount: rework API to use sk_buff directly	2025-11-28 00:05:49 +00:00
nf_conntrack_ecache.h	…
nf_conntrack_expect.h	…
nf_conntrack_extend.h	…
nf_conntrack_helper.h	…
nf_conntrack_l4proto.h	…
nf_conntrack_labels.h	…
nf_conntrack_seqadj.h	…
nf_conntrack_synproxy.h	…
nf_conntrack_timeout.h	…
nf_conntrack_timestamp.h	…
nf_conntrack_tuple.h	…
nf_conntrack_zones.h	…
nf_dup_netdev.h	…
nf_flow_table.h	netfilter: flowtable: Add IPIP rx sw acceleration	2025-11-28 00:00:38 +00:00
nf_hooks_lwtunnel.h	…
nf_log.h	…
nf_nat.h	…
nf_nat_helper.h	…
nf_nat_masquerade.h	…
nf_nat_redirect.h	…
nf_queue.h	…
nf_reject.h	…
nf_socket.h	…
nf_synproxy.h	…
nf_tables.h	…
nf_tables_core.h	…
nf_tables_ipv4.h	…
nf_tables_ipv6.h	…
nf_tables_offload.h	…
nf_tproxy.h	…
nft_fib.h	…
nft_meta.h	…
nft_reject.h	…
xt_rateest.h	…