aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/net/openvswitch/conntrack.c
AgeCommit message (Expand)AuthorFilesLines
2025-03-13Revert "openvswitch: switch to per-action label counting in conntrack"Xin Long1-12/+18
2024-08-19netfilter: move nf_ct_netns_get out of nf_conncount_initXin Long1-3/+2
2024-08-15openvswitch: switch to per-action label counting in conntrackXin Long1-18/+12
2024-07-05openvswitch: prepare for stolen verdict coming from conntrack and nat engineFlorian Westphal1-10/+37
2024-06-21openvswitch: get related ct labels from its master if it is not confirmedXin Long1-1/+6
2024-04-24net: openvswitch: Fix Use-After-Free in ovs_ct_exitHyunwoo Kim1-2/+2
2024-04-05net: openvswitch: fix unwanted error log on timeout policy probingIlya Maximets1-2/+3
2023-11-08net/sched: act_ct: Always fill offloading tuple iifidxVlad Buslov1-1/+1
2023-08-15genetlink: remove userhdr from struct genl_infoJakub Kicinski1-1/+1
2023-08-14net: openvswitch: add misc error drop reasonsAdrian Moreno1-1/+2
2023-07-20openvswitch: set IPS_CONFIRMED in tmpl status only when commit is set in conn...Xin Long1-68/+10
2023-02-10net: extract nf_ct_handle_fragments to nf_conntrack_ovsXin Long1-44/+1
2023-02-10openvswitch: move key and ovs_cb update out of handle_fragmentsXin Long1-12/+25
2023-02-10net: extract nf_ct_skb_network_trim function to nf_conntrack_ovsXin Long1-32/+4
2023-02-09openvswitch: Use string_is_terminated() helperAndy Shevchenko1-2/+3
2023-02-01openvswitch: use skb_ip_totlen in conntrackXin Long1-1/+1
2022-12-12net: move the nat function to nf_nat_ovs for ovs and tcXin Long1-127/+10
2022-12-12openvswitch: return NF_DROP when fails to add nat ext in ovs_ct_natXin Long1-1/+1
2022-12-12openvswitch: return NF_ACCEPT when OVS_CT_NAT is not set in info natXin Long1-2/+4
2022-12-12openvswitch: delete the unncessary skb_pull_rcsum call in ovs_ct_nat_executeXin Long1-11/+6
2022-11-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-4/+4
2022-11-18netfilter: conntrack: Fix data-races around ct markDaniel Xu1-4/+4
2022-11-08net: move add ct helper function to nf_conntrack_helper for ovs and tcXin Long1-39/+5
2022-11-08net: move the ct helper function to nf_conntrack_helper for ovs and tcXin Long1-60/+1
2022-10-12openvswitch: add nf_ct_is_confirmed check before assigning the helperXin Long1-1/+2
2022-09-27net: openvswitch: allow conntrack in non-initial user namespaceMichael Weiß1-5/+8
2022-08-29genetlink: start to validate reserved header bytesJakub Kicinski1-0/+1
2022-06-08net: openvswitch: fix misuse of the cached connection on tuple changesIlya Maximets1-1/+3
2022-03-21openvswitch: always update flow key after natAaron Conole1-59/+59
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski1-5/+10
2022-01-09net: prefer nf_ct_put instead of nf_conntrack_putFlorian Westphal1-4/+10
2022-01-09netfilter: conntrack: convert to refcount_t apiFlorian Westphal1-1/+0
2022-01-04net: openvswitch: Fill act ct extensionPaul Blakey1-0/+6
2021-05-10net: openvswitch: Remove unnecessary skb_nfct()Yejune Deng1-7/+4
2021-04-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-4/+4
2021-04-05openvswitch: fix send of uninitialized stack memory in ct limit replyIlya Maximets1-4/+4
2021-04-04net: openvswitch: Use 'skb_push_rcsum()' instead of hand coding itChristophe JAILLET1-4/+2
2021-03-16net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ctwenxu1-3/+5
2020-12-08net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_g...Zheng Yongjun1-5/+1
2020-11-20net: openvswitch: Be liberal in tcp conntrack.Numan Siddique1-0/+8
2020-10-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-9/+13
2020-10-08openvswitch: handle DNAT tuple collisionDumitru Ceara1-9/+13
2020-10-04net: openvswitch: Constify static struct genl_small_opsRikard Falkeborn1-1/+1
2020-10-02genetlink: move to smaller ops wherever possibleJakub Kicinski1-3/+3
2020-09-18net: openswitch: reuse the helper variable to improve the code readablityZeng Tao1-2/+2
2020-08-23treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva1-2/+2
2020-08-03openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()Peilin Ye1-18/+20
2020-04-20net: openvswitch: ovs_ct_exit to be done under ovs_lockTonghao Zhang1-1/+2
2019-12-04openvswitch: support asymmetric conntrackAaron Conole1-0/+11
2019-10-06openvswitch: Allow attaching helper in later commitYi-Hung Wei1-8/+13
2019-08-28openvswitch: Properly set L4 keys on "later" IP fragmentsGreg Rose1-0/+5
2019-08-25openvswitch: Fix conntrack cache with timeoutYi-Hung Wei1-0/+13
2019-08-24openvswitch: Fix log message in ovs conntrackYi-Hung Wei1-1/+1
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295Thomas Gleixner1-9/+1
2019-05-08openvswitch: Replace removed NF_NAT_NEEDED with IS_ENABLED(CONFIG_NF_NAT)Geert Uytterhoeven1-2/+2
2019-05-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-6/+20
2019-05-05openvswitch: check for null pointer return from nla_nest_start_noflagColin Ian King1-0/+4
2019-04-30openvswitch: load and reference the NAT helper.Flavio Leitner1-6/+20
2019-04-27genetlink: optionally validate strictly/dumpsJohannes Berg1-0/+3
2019-04-27netlink: make nla_nest_start() add NLA_F_NESTED flagMichal Kubecek1-3/+3
2019-04-08netfilter: replace NF_NAT_NEEDED with IS_ENABLED(CONFIG_NF_NAT)Florian Westphal1-9/+9
2019-04-02openvswitch: use after free in __ovs_ct_free_action()Dan Carpenter1-1/+1
2019-03-28openvswitch: Add timeout support to ct actionYi-Hung Wei1-1/+29
2019-03-26openvswitch: add seqadj extension when NAT is used.Flavio Leitner1-0/+6
2019-03-22genetlink: make policy common to familyJohannes Berg1-3/+1
2019-02-27netfilter: nat: remove nf_nat_l3proto.h and nf_nat_core.hFlorian Westphal1-3/+1
2019-02-27netfilter: nat: merge nf_nat_ipv4,6 into nat coreFlorian Westphal1-4/+4
2019-01-18netfilter: conntrack: avoid unneeded nf_conntrack_l4proto lookupsFlorian Westphal1-1/+1
2018-11-30openvswitch: fix spelling mistake "execeeds" -> "exceeds"Colin Ian King1-1/+1
2018-11-03openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELSArnd Bergmann1-1/+2
2018-10-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-2/+6
2018-10-04openvswitch: load NAT helperFlavio Leitner1-0/+4
2018-10-01Revert "openvswitch: Fix template leak in error cases."Flavio Leitner1-4/+2
2018-09-20netfilter: conntrack: pass nf_hook_state to packet and error handlersFlorian Westphal1-2/+6
2018-07-18ipv6: remove dependency of nf_defrag_ipv6 on ipv6 moduleFlorian Westphal1-0/+1
2018-07-18netfilter: Remove useless param helper of nf_ct_helper_ext_addGao Feng1-1/+1
2018-07-16openvswitch: use nf_ct_get_tuplepr, invert_tupleprFlorian Westphal1-14/+3
2018-05-25openvswitch: Support conntrack zone limitYi-Hung Wei1-1/+550
2018-04-24netfilter: add NAT support for shifted portmap rangesThierry Du Tre1-2/+2
2018-02-01openvswitch: Remove padding from packet before L3+ conntrack processingEd Swierk1-0/+34
2018-01-02openvswitch: drop unneeded newlineJulia Lawall1-2/+2
2017-10-22openvswitch: conntrack: mark expected switch fall-throughGustavo A. R. Silva1-0/+1
2017-10-10openvswitch: add ct_clear actionEric Garver1-0/+11
2017-09-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-2/+2
2017-08-24netfilter: conntrack: make protocol tracker pointers constFlorian Westphal1-2/+2
2017-08-11openvswitch: Remove unnecessary newlines from OVS_NLERR usesJoe Perches1-9/+5
2017-07-24openvswitch: fix potential out of bound access in parse_ctLiping Zhang1-2/+5
2017-07-15openvswitch: Fix for force/commit action failuresGreg Rose1-15/+36
2017-05-15netfilter: introduce nf_conntrack_helper_put helper functionLiping Zhang1-2/+2
2017-05-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-1/+29
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-5/+0
2017-04-24openvswitch: Delete conntrack entry clashing with an expectation.Jarno Rajahalme1-1/+29
2017-04-24openvswitch: Add eventmask support to CT action.Jarno Rajahalme1-0/+27
2017-04-24openvswitch: Typo fix.Jarno Rajahalme1-1/+1
2017-04-15netfilter: remove nf_ct_is_untrackedFlorian Westphal1-5/+0
2017-03-28openvswitch: Fix refcount leak on force commit.Jarno Rajahalme1-2/+2
2017-03-01ipv6: orphan skbs in reassembly unitEric Dumazet1-1/+0
2017-02-20openvswitch: Set event bit after initializing labels.Jarno Rajahalme1-3/+6
2017-02-09openvswitch: Pack struct sw_flow_key.Jarno Rajahalme1-20/+20
2017-02-09openvswitch: Add force commit.Jarno Rajahalme1-2/+24
2017-02-09openvswitch: Add original direction conntrack tuple to sw_flow_key.Jarno Rajahalme1-6/+80
2017-02-09openvswitch: Inherit master's labels.Jarno Rajahalme1-14/+31
2017-02-09openvswitch: Refactor labels initialization.Jarno Rajahalme1-42/+62
2017-02-09openvswitch: Simplify labels length logic.Jarno Rajahalme1-11/+9
2017-02-09openvswitch: Unionize ovs_key_ct_label with a u32 array.Jarno Rajahalme1-7/+8
2017-02-09openvswitch: Do not trigger events for unconfirmed connections.Jarno Rajahalme1-6/+22
2017-02-09openvswitch: Use inverted tuple in ovs_ct_find_existing() if NATted.Jarno Rajahalme1-2/+22
2017-02-09openvswitch: Fix comments for skb->_nfctJarno Rajahalme1-7/+7
2017-02-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-7/+5
2017-02-02netfilter: add and use nf_ct_set helperFlorian Westphal1-4/+2
2017-02-02skbuff: add and use skb_nfct helperFlorian Westphal1-3/+3
2017-01-15openvswitch: maintain correct checksum state in conntrack actionsLance Richardson1-2/+4
2016-12-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+4
2016-11-30openvswitch: Fix skb leak in IPv6 reassembly.Daniele Di Proietto1-1/+4
2016-11-03netfilter: handle NF_REPEAT from nf_conntrack_in()Pablo Neira Ayuso1-6/+2
2016-09-04openvswitch: Free tmpl with tmpl_free.Joe Stringer1-1/+1
2016-08-03openvswitch: Remove incorrect WARN_ONCE().Jarno Rajahalme1-7/+1
2016-07-22netfilter: conntrack: support a fixed size of 128 distinct labelsFlorian Westphal1-2/+2
2016-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+12
2016-06-29openvswitch: fix conntrack netlink event deliverySamuel Gauthier1-2/+12
2016-06-25openvswitch: Only set mark and labels with a commit flag.Jarno Rajahalme1-25/+51
2016-06-25openvswitch: Set mark and labels before confirming.Jarno Rajahalme1-19/+14
2016-05-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+13
2016-05-11openvswitch: Fix cached ct with helper.Joe Stringer1-0/+13
2016-05-05openvswitch: __nf_ct_l{3,4}proto_find() always return a valid pointerPablo Neira Ayuso1-8/+0
2016-04-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-1/+1
2016-04-21openvswitch: Orphan skbs before IPv6 defragJoe Stringer1-0/+1
2016-04-18netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used'Florian Westphal1-1/+1
2016-03-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-10/+11
2016-03-28openvswitch: call only into reachable nf-nat codeArnd Bergmann1-8/+8
2016-03-28openvswitch: Fix checking for new expected connections.Jarno Rajahalme1-2/+3
2016-03-28openvswitch: Use proper buffer size in nla_memcpyHaishuang Yan1-1/+2
2016-03-14openvswitch: Interface with NAT.Jarno Rajahalme1-26/+498
2016-03-14openvswitch: Delay conntrack helper call for new connections.Jarno Rajahalme1-5/+16
2016-03-14openvswitch: Handle NF_REPEAT in conntrack action.Jarno Rajahalme1-2/+8
2016-03-14openvswitch: Find existing conntrack entry after upcall.Jarno Rajahalme1-13/+90
2016-03-14openvswitch: Update the CT state key only after nf_conntrack_in().Jarno Rajahalme1-3/+4
2016-03-14openvswitch: Add commentary to conntrack.cJarno Rajahalme1-1/+20
2016-03-14netfilter: Remove IP_CT_NEW_REPLY definition.Jarno Rajahalme1-2/+0
2015-12-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+4
2015-12-29openvswitch: Fix template leak in error cases.Joe Stringer1-2/+4
2015-12-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-20/+5
2015-12-11openvswitch: Respect conntrack zone even if invalidJoe Stringer1-2/+5
2015-12-11openvswitch: Fix helper reference leakJoe Stringer1-1/+8
2015-11-23netfilter: ipv6: avoid nf_iterate recursionFlorian Westphal1-6/+5
2015-11-23netfilter: ipv6: nf_defrag: avoid/free clone operationsFlorian Westphal1-14/+0
2015-11-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+20
2015-10-27openvswitch: Fix skb leak using IPv6 defragJoe Stringer1-0/+7
2015-10-27openvswitch: Fix double-free on ip_defrag() errorsJoe Stringer1-4/+13
2015-10-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-9/+15
2015-10-21openvswitch: Serialize nested ct actions if providedJoe Stringer1-4/+10
2015-10-21openvswitch: Mark connections new when not confirmed.Joe Stringer1-5/+5
2015-10-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-45/+44
2015-10-12ipv6: Pass struct net into nf_ct_frag6_gatherEric W. Biederman1-1/+1
2015-10-12ipv4: Pass struct net into ip_defrag and ip_check_defragEric W. Biederman1-1/+1
2015-10-07openvswitch: Change CT_ATTR_FLAGS to CT_ATTR_COMMITJoe Stringer1-7/+6
2015-10-07openvswitch: Extend ct_state match field to 32 bitsJoe Stringer1-1/+1
2015-10-05openvswitch: Rename LABEL->LABELSJoe Stringer1-37/+37
2015-09-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+5
2015-09-18netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tupleEric W. Biederman1-1/+1
2015-09-17openvswitch: Fix IPv6 exthdr handling with ct helpers.Joe Stringer1-3/+5
2015-08-28openvswitch: Fix conntrack compilation without mark.Joe Stringer1-3/+14
2015-08-28openswitch: fix typo CONFIG_NF_CONNTRACK_LABELValentin Rothberg1-1/+1
2015-08-27openvswitch: Allow attaching helpers to ct actionJoe Stringer1-2/+107
2015-08-27openvswitch: Allow matching on conntrack labelJoe Stringer1-2/+126
2015-08-27openvswitch: Allow matching on conntrack markJoe Stringer1-3/+64
2015-08-27openvswitch: Add conntrack actionJoe Stringer1-0/+454