Fernando Fernandez Mancera be102eb6a0 netfilter: nf_conncount: rework API to use sk_buff directly ... When using nf_conncount infrastructure for non-confirmed connections a duplicated track is possible due to an optimization introduced since commit d265929930 ("netfilter: nf_conncount: reduce unnecessary GC"). In order to fix this introduce a new conncount API that receives directly an sk_buff struct. It fetches the tuple and zone and the corresponding ct from it. It comes with both existing conncount variants nf_conncount_count_skb() and nf_conncount_add_skb(). In addition remove the old API and adjust all the users to use the new one. This way, for each sk_buff struct it is possible to check if there is a ct present and already confirmed. If so, skip the add operation. Fixes: d265929930 ("netfilter: nf_conncount: reduce unnecessary GC") Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2025-11-28 00:05:49 +00:00
..
Kconfig	…
Makefile	…
actions.c	…
conntrack.c	…
conntrack.h	…
datapath.c	…
datapath.h	…
dp_notify.c	…
drop.h	…
flow.c	…
flow.h	…
flow_netlink.c	…
flow_netlink.h	…
flow_table.c	…
flow_table.h	…
meter.c	…
meter.h	…
openvswitch_trace.c	…
openvswitch_trace.h	…
vport-geneve.c	…
vport-gre.c	…
vport-internal_dev.c	…
vport-internal_dev.h	…
vport-netdev.c	…
vport-netdev.h	…
vport-vxlan.c	…
vport.c	…
vport.h	…