Age | Commit message (Expand) | Author | Files | Lines |
2025-03-13 | Revert "openvswitch: switch to per-action label counting in conntrack" | Xin Long | 1 | -12/+18 |
2024-08-19 | netfilter: move nf_ct_netns_get out of nf_conncount_init | Xin Long | 1 | -3/+2 |
2024-08-15 | openvswitch: switch to per-action label counting in conntrack | Xin Long | 1 | -18/+12 |
2024-07-05 | openvswitch: prepare for stolen verdict coming from conntrack and nat engine | Florian Westphal | 1 | -10/+37 |
2024-06-21 | openvswitch: get related ct labels from its master if it is not confirmed | Xin Long | 1 | -1/+6 |
2024-04-24 | net: openvswitch: Fix Use-After-Free in ovs_ct_exit | Hyunwoo Kim | 1 | -2/+2 |
2024-04-05 | net: openvswitch: fix unwanted error log on timeout policy probing | Ilya Maximets | 1 | -2/+3 |
2023-11-08 | net/sched: act_ct: Always fill offloading tuple iifidx | Vlad Buslov | 1 | -1/+1 |
2023-08-15 | genetlink: remove userhdr from struct genl_info | Jakub Kicinski | 1 | -1/+1 |
2023-08-14 | net: openvswitch: add misc error drop reasons | Adrian Moreno | 1 | -1/+2 |
2023-07-20 | openvswitch: set IPS_CONFIRMED in tmpl status only when commit is set in conn... | Xin Long | 1 | -68/+10 |
2023-02-10 | net: extract nf_ct_handle_fragments to nf_conntrack_ovs | Xin Long | 1 | -44/+1 |
2023-02-10 | openvswitch: move key and ovs_cb update out of handle_fragments | Xin Long | 1 | -12/+25 |
2023-02-10 | net: extract nf_ct_skb_network_trim function to nf_conntrack_ovs | Xin Long | 1 | -32/+4 |
2023-02-09 | openvswitch: Use string_is_terminated() helper | Andy Shevchenko | 1 | -2/+3 |
2023-02-01 | openvswitch: use skb_ip_totlen in conntrack | Xin Long | 1 | -1/+1 |
2022-12-12 | net: move the nat function to nf_nat_ovs for ovs and tc | Xin Long | 1 | -127/+10 |
2022-12-12 | openvswitch: return NF_DROP when fails to add nat ext in ovs_ct_nat | Xin Long | 1 | -1/+1 |
2022-12-12 | openvswitch: return NF_ACCEPT when OVS_CT_NAT is not set in info nat | Xin Long | 1 | -2/+4 |
2022-12-12 | openvswitch: delete the unncessary skb_pull_rcsum call in ovs_ct_nat_execute | Xin Long | 1 | -11/+6 |
2022-11-29 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | Jakub Kicinski | 1 | -4/+4 |
2022-11-18 | netfilter: conntrack: Fix data-races around ct mark | Daniel Xu | 1 | -4/+4 |
2022-11-08 | net: move add ct helper function to nf_conntrack_helper for ovs and tc | Xin Long | 1 | -39/+5 |
2022-11-08 | net: move the ct helper function to nf_conntrack_helper for ovs and tc | Xin Long | 1 | -60/+1 |
2022-10-12 | openvswitch: add nf_ct_is_confirmed check before assigning the helper | Xin Long | 1 | -1/+2 |
2022-09-27 | net: openvswitch: allow conntrack in non-initial user namespace | Michael Weiß | 1 | -5/+8 |
2022-08-29 | genetlink: start to validate reserved header bytes | Jakub Kicinski | 1 | -0/+1 |
2022-06-08 | net: openvswitch: fix misuse of the cached connection on tuple changes | Ilya Maximets | 1 | -1/+3 |
2022-03-21 | openvswitch: always update flow key after nat | Aaron Conole | 1 | -59/+59 |
2022-01-09 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next | Jakub Kicinski | 1 | -5/+10 |
2022-01-09 | net: prefer nf_ct_put instead of nf_conntrack_put | Florian Westphal | 1 | -4/+10 |
2022-01-09 | netfilter: conntrack: convert to refcount_t api | Florian Westphal | 1 | -1/+0 |
2022-01-04 | net: openvswitch: Fill act ct extension | Paul Blakey | 1 | -0/+6 |
2021-05-10 | net: openvswitch: Remove unnecessary skb_nfct() | Yejune Deng | 1 | -7/+4 |
2021-04-09 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | Jakub Kicinski | 1 | -4/+4 |
2021-04-05 | openvswitch: fix send of uninitialized stack memory in ct limit reply | Ilya Maximets | 1 | -4/+4 |
2021-04-04 | net: openvswitch: Use 'skb_push_rcsum()' instead of hand coding it | Christophe JAILLET | 1 | -4/+2 |
2021-03-16 | net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct | wenxu | 1 | -3/+5 |
2020-12-08 | net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_g... | Zheng Yongjun | 1 | -5/+1 |
2020-11-20 | net: openvswitch: Be liberal in tcp conntrack. | Numan Siddique | 1 | -0/+8 |
2020-10-08 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | Jakub Kicinski | 1 | -9/+13 |
2020-10-08 | openvswitch: handle DNAT tuple collision | Dumitru Ceara | 1 | -9/+13 |
2020-10-04 | net: openvswitch: Constify static struct genl_small_ops | Rikard Falkeborn | 1 | -1/+1 |
2020-10-02 | genetlink: move to smaller ops wherever possible | Jakub Kicinski | 1 | -3/+3 |
2020-09-18 | net: openswitch: reuse the helper variable to improve the code readablity | Zeng Tao | 1 | -2/+2 |
2020-08-23 | treewide: Use fallthrough pseudo-keyword | Gustavo A. R. Silva | 1 | -2/+2 |
2020-08-03 | openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() | Peilin Ye | 1 | -18/+20 |
2020-04-20 | net: openvswitch: ovs_ct_exit to be done under ovs_lock | Tonghao Zhang | 1 | -1/+2 |
2019-12-04 | openvswitch: support asymmetric conntrack | Aaron Conole | 1 | -0/+11 |
2019-10-06 | openvswitch: Allow attaching helper in later commit | Yi-Hung Wei | 1 | -8/+13 |
2019-08-28 | openvswitch: Properly set L4 keys on "later" IP fragments | Greg Rose | 1 | -0/+5 |
2019-08-25 | openvswitch: Fix conntrack cache with timeout | Yi-Hung Wei | 1 | -0/+13 |
2019-08-24 | openvswitch: Fix log message in ovs conntrack | Yi-Hung Wei | 1 | -1/+1 |
2019-06-05 | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295 | Thomas Gleixner | 1 | -9/+1 |
2019-05-08 | openvswitch: Replace removed NF_NAT_NEEDED with IS_ENABLED(CONFIG_NF_NAT) | Geert Uytterhoeven | 1 | -2/+2 |
2019-05-05 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next | David S. Miller | 1 | -6/+20 |
2019-05-05 | openvswitch: check for null pointer return from nla_nest_start_noflag | Colin Ian King | 1 | -0/+4 |
2019-04-30 | openvswitch: load and reference the NAT helper. | Flavio Leitner | 1 | -6/+20 |
2019-04-27 | genetlink: optionally validate strictly/dumps | Johannes Berg | 1 | -0/+3 |
2019-04-27 | netlink: make nla_nest_start() add NLA_F_NESTED flag | Michal Kubecek | 1 | -3/+3 |
2019-04-08 | netfilter: replace NF_NAT_NEEDED with IS_ENABLED(CONFIG_NF_NAT) | Florian Westphal | 1 | -9/+9 |
2019-04-02 | openvswitch: use after free in __ovs_ct_free_action() | Dan Carpenter | 1 | -1/+1 |
2019-03-28 | openvswitch: Add timeout support to ct action | Yi-Hung Wei | 1 | -1/+29 |
2019-03-26 | openvswitch: add seqadj extension when NAT is used. | Flavio Leitner | 1 | -0/+6 |
2019-03-22 | genetlink: make policy common to family | Johannes Berg | 1 | -3/+1 |
2019-02-27 | netfilter: nat: remove nf_nat_l3proto.h and nf_nat_core.h | Florian Westphal | 1 | -3/+1 |
2019-02-27 | netfilter: nat: merge nf_nat_ipv4,6 into nat core | Florian Westphal | 1 | -4/+4 |
2019-01-18 | netfilter: conntrack: avoid unneeded nf_conntrack_l4proto lookups | Florian Westphal | 1 | -1/+1 |
2018-11-30 | openvswitch: fix spelling mistake "execeeds" -> "exceeds" | Colin Ian King | 1 | -1/+1 |
2018-11-03 | openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS | Arnd Bergmann | 1 | -1/+2 |
2018-10-08 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next | David S. Miller | 1 | -2/+6 |
2018-10-04 | openvswitch: load NAT helper | Flavio Leitner | 1 | -0/+4 |
2018-10-01 | Revert "openvswitch: Fix template leak in error cases." | Flavio Leitner | 1 | -4/+2 |
2018-09-20 | netfilter: conntrack: pass nf_hook_state to packet and error handlers | Florian Westphal | 1 | -2/+6 |
2018-07-18 | ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module | Florian Westphal | 1 | -0/+1 |
2018-07-18 | netfilter: Remove useless param helper of nf_ct_helper_ext_add | Gao Feng | 1 | -1/+1 |
2018-07-16 | openvswitch: use nf_ct_get_tuplepr, invert_tuplepr | Florian Westphal | 1 | -14/+3 |
2018-05-25 | openvswitch: Support conntrack zone limit | Yi-Hung Wei | 1 | -1/+550 |
2018-04-24 | netfilter: add NAT support for shifted portmap ranges | Thierry Du Tre | 1 | -2/+2 |
2018-02-01 | openvswitch: Remove padding from packet before L3+ conntrack processing | Ed Swierk | 1 | -0/+34 |
2018-01-02 | openvswitch: drop unneeded newline | Julia Lawall | 1 | -2/+2 |
2017-10-22 | openvswitch: conntrack: mark expected switch fall-through | Gustavo A. R. Silva | 1 | -0/+1 |
2017-10-10 | openvswitch: add ct_clear action | Eric Garver | 1 | -0/+11 |
2017-09-03 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next | David S. Miller | 1 | -2/+2 |
2017-08-24 | netfilter: conntrack: make protocol tracker pointers const | Florian Westphal | 1 | -2/+2 |
2017-08-11 | openvswitch: Remove unnecessary newlines from OVS_NLERR uses | Joe Perches | 1 | -9/+5 |
2017-07-24 | openvswitch: fix potential out of bound access in parse_ct | Liping Zhang | 1 | -2/+5 |
2017-07-15 | openvswitch: Fix for force/commit action failures | Greg Rose | 1 | -15/+36 |
2017-05-15 | netfilter: introduce nf_conntrack_helper_put helper function | Liping Zhang | 1 | -2/+2 |
2017-05-03 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf | David S. Miller | 1 | -1/+29 |
2017-05-01 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next | David S. Miller | 1 | -5/+0 |
2017-04-24 | openvswitch: Delete conntrack entry clashing with an expectation. | Jarno Rajahalme | 1 | -1/+29 |
2017-04-24 | openvswitch: Add eventmask support to CT action. | Jarno Rajahalme | 1 | -0/+27 |
2017-04-24 | openvswitch: Typo fix. | Jarno Rajahalme | 1 | -1/+1 |
2017-04-15 | netfilter: remove nf_ct_is_untracked | Florian Westphal | 1 | -5/+0 |
2017-03-28 | openvswitch: Fix refcount leak on force commit. | Jarno Rajahalme | 1 | -2/+2 |
2017-03-01 | ipv6: orphan skbs in reassembly unit | Eric Dumazet | 1 | -1/+0 |
2017-02-20 | openvswitch: Set event bit after initializing labels. | Jarno Rajahalme | 1 | -3/+6 |
2017-02-09 | openvswitch: Pack struct sw_flow_key. | Jarno Rajahalme | 1 | -20/+20 |
2017-02-09 | openvswitch: Add force commit. | Jarno Rajahalme | 1 | -2/+24 |
2017-02-09 | openvswitch: Add original direction conntrack tuple to sw_flow_key. | Jarno Rajahalme | 1 | -6/+80 |
2017-02-09 | openvswitch: Inherit master's labels. | Jarno Rajahalme | 1 | -14/+31 |
2017-02-09 | openvswitch: Refactor labels initialization. | Jarno Rajahalme | 1 | -42/+62 |
2017-02-09 | openvswitch: Simplify labels length logic. | Jarno Rajahalme | 1 | -11/+9 |
2017-02-09 | openvswitch: Unionize ovs_key_ct_label with a u32 array. | Jarno Rajahalme | 1 | -7/+8 |
2017-02-09 | openvswitch: Do not trigger events for unconfirmed connections. | Jarno Rajahalme | 1 | -6/+22 |
2017-02-09 | openvswitch: Use inverted tuple in ovs_ct_find_existing() if NATted. | Jarno Rajahalme | 1 | -2/+22 |
2017-02-09 | openvswitch: Fix comments for skb->_nfct | Jarno Rajahalme | 1 | -7/+7 |
2017-02-03 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next | David S. Miller | 1 | -7/+5 |
2017-02-02 | netfilter: add and use nf_ct_set helper | Florian Westphal | 1 | -4/+2 |
2017-02-02 | skbuff: add and use skb_nfct helper | Florian Westphal | 1 | -3/+3 |
2017-01-15 | openvswitch: maintain correct checksum state in conntrack actions | Lance Richardson | 1 | -2/+4 |
2016-12-03 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | David S. Miller | 1 | -1/+4 |
2016-11-30 | openvswitch: Fix skb leak in IPv6 reassembly. | Daniele Di Proietto | 1 | -1/+4 |
2016-11-03 | netfilter: handle NF_REPEAT from nf_conntrack_in() | Pablo Neira Ayuso | 1 | -6/+2 |
2016-09-04 | openvswitch: Free tmpl with tmpl_free. | Joe Stringer | 1 | -1/+1 |
2016-08-03 | openvswitch: Remove incorrect WARN_ONCE(). | Jarno Rajahalme | 1 | -7/+1 |
2016-07-22 | netfilter: conntrack: support a fixed size of 128 distinct labels | Florian Westphal | 1 | -2/+2 |
2016-06-30 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | David S. Miller | 1 | -2/+12 |
2016-06-29 | openvswitch: fix conntrack netlink event delivery | Samuel Gauthier | 1 | -2/+12 |
2016-06-25 | openvswitch: Only set mark and labels with a commit flag. | Jarno Rajahalme | 1 | -25/+51 |
2016-06-25 | openvswitch: Set mark and labels before confirming. | Jarno Rajahalme | 1 | -19/+14 |
2016-05-15 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | David S. Miller | 1 | -0/+13 |
2016-05-11 | openvswitch: Fix cached ct with helper. | Joe Stringer | 1 | -0/+13 |
2016-05-05 | openvswitch: __nf_ct_l{3,4}proto_find() always return a valid pointer | Pablo Neira Ayuso | 1 | -8/+0 |
2016-04-24 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next | David S. Miller | 1 | -1/+1 |
2016-04-21 | openvswitch: Orphan skbs before IPv6 defrag | Joe Stringer | 1 | -0/+1 |
2016-04-18 | netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used' | Florian Westphal | 1 | -1/+1 |
2016-03-28 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf | David S. Miller | 1 | -10/+11 |
2016-03-28 | openvswitch: call only into reachable nf-nat code | Arnd Bergmann | 1 | -8/+8 |
2016-03-28 | openvswitch: Fix checking for new expected connections. | Jarno Rajahalme | 1 | -2/+3 |
2016-03-28 | openvswitch: Use proper buffer size in nla_memcpy | Haishuang Yan | 1 | -1/+2 |
2016-03-14 | openvswitch: Interface with NAT. | Jarno Rajahalme | 1 | -26/+498 |
2016-03-14 | openvswitch: Delay conntrack helper call for new connections. | Jarno Rajahalme | 1 | -5/+16 |
2016-03-14 | openvswitch: Handle NF_REPEAT in conntrack action. | Jarno Rajahalme | 1 | -2/+8 |
2016-03-14 | openvswitch: Find existing conntrack entry after upcall. | Jarno Rajahalme | 1 | -13/+90 |
2016-03-14 | openvswitch: Update the CT state key only after nf_conntrack_in(). | Jarno Rajahalme | 1 | -3/+4 |
2016-03-14 | openvswitch: Add commentary to conntrack.c | Jarno Rajahalme | 1 | -1/+20 |
2016-03-14 | netfilter: Remove IP_CT_NEW_REPLY definition. | Jarno Rajahalme | 1 | -2/+0 |
2015-12-31 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | David S. Miller | 1 | -2/+4 |
2015-12-29 | openvswitch: Fix template leak in error cases. | Joe Stringer | 1 | -2/+4 |
2015-12-18 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next | David S. Miller | 1 | -20/+5 |
2015-12-11 | openvswitch: Respect conntrack zone even if invalid | Joe Stringer | 1 | -2/+5 |
2015-12-11 | openvswitch: Fix helper reference leak | Joe Stringer | 1 | -1/+8 |
2015-11-23 | netfilter: ipv6: avoid nf_iterate recursion | Florian Westphal | 1 | -6/+5 |
2015-11-23 | netfilter: ipv6: nf_defrag: avoid/free clone operations | Florian Westphal | 1 | -14/+0 |
2015-11-01 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | David S. Miller | 1 | -4/+20 |
2015-10-27 | openvswitch: Fix skb leak using IPv6 defrag | Joe Stringer | 1 | -0/+7 |
2015-10-27 | openvswitch: Fix double-free on ip_defrag() errors | Joe Stringer | 1 | -4/+13 |
2015-10-24 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | David S. Miller | 1 | -9/+15 |
2015-10-21 | openvswitch: Serialize nested ct actions if provided | Joe Stringer | 1 | -4/+10 |
2015-10-21 | openvswitch: Mark connections new when not confirmed. | Joe Stringer | 1 | -5/+5 |
2015-10-20 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | David S. Miller | 1 | -45/+44 |
2015-10-12 | ipv6: Pass struct net into nf_ct_frag6_gather | Eric W. Biederman | 1 | -1/+1 |
2015-10-12 | ipv4: Pass struct net into ip_defrag and ip_check_defrag | Eric W. Biederman | 1 | -1/+1 |
2015-10-07 | openvswitch: Change CT_ATTR_FLAGS to CT_ATTR_COMMIT | Joe Stringer | 1 | -7/+6 |
2015-10-07 | openvswitch: Extend ct_state match field to 32 bits | Joe Stringer | 1 | -1/+1 |
2015-10-05 | openvswitch: Rename LABEL->LABELS | Joe Stringer | 1 | -37/+37 |
2015-09-26 | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | David S. Miller | 1 | -3/+5 |
2015-09-18 | netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple | Eric W. Biederman | 1 | -1/+1 |
2015-09-17 | openvswitch: Fix IPv6 exthdr handling with ct helpers. | Joe Stringer | 1 | -3/+5 |
2015-08-28 | openvswitch: Fix conntrack compilation without mark. | Joe Stringer | 1 | -3/+14 |
2015-08-28 | openswitch: fix typo CONFIG_NF_CONNTRACK_LABEL | Valentin Rothberg | 1 | -1/+1 |
2015-08-27 | openvswitch: Allow attaching helpers to ct action | Joe Stringer | 1 | -2/+107 |
2015-08-27 | openvswitch: Allow matching on conntrack label | Joe Stringer | 1 | -2/+126 |
2015-08-27 | openvswitch: Allow matching on conntrack mark | Joe Stringer | 1 | -3/+64 |
2015-08-27 | openvswitch: Add conntrack action | Joe Stringer | 1 | -0/+454 |