David S. Miller c42d7121fb
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next ...
Pablo Neira Ayuso says:
====================
Netfilter/IPVS updates for net-next
The following patchset contains Netfilter/IPVS updates for net-next,
they are:
1) Count pre-established connections as active in "least connection"
schedulers such that pre-established connections to avoid overloading
backend servers on peak demands, from Michal Kubecek via Simon Horman.
2) Address a race condition when resizing the conntrack table by caching
the bucket size when fulling iterating over the hashtable in these
three possible scenarios: 1) dump via /proc/net/nf_conntrack,
2) unlinking userspace helper and 3) unlinking custom conntrack timeout.
From Liping Zhang.
3) Revisit early_drop() path to perform lockless traversal on conntrack
eviction under stress, use del_timer() as synchronization point to
avoid two CPUs evicting the same entry, from Florian Westphal.
4) Move NAT hlist_head to nf_conn object, this simplifies the existing
NAT extension and it doesn't increase size since recent patches to
align nf_conn, from Florian.
5) Use rhashtable for the by-source NAT hashtable, also from Florian.
6) Don't allow --physdev-is-out from OUTPUT chain, just like
--physdev-out is not either, from Hangbin Liu.
7) Automagically set on nf_conntrack counters if the user tries to
match ct bytes/packets from nftables, from Liping Zhang.
8) Remove possible_net_t fields in nf_tables set objects since we just
simply pass the net pointer to the backend set type implementations.
9) Fix possible off-by-one in h323, from Toby DiPasquale.
10) early_drop() may be called from ctnetlink patch, so we must hold
rcu read size lock from them too, this amends Florian's patch #3
coming in this batch, from Liping Zhang.
11) Use binary search to validate jump offset in x_tables, this
addresses the O(n!) validation that was introduced recently
resolve security issues with unpriviledge namespaces, from Florian.
12) Fix reference leak to connlabel in error path of nft_ct, from Zhang.
13) Three updates for nft_log: Fix log prefix leak in error path. Bail
out on loglevel larger than debug in nft_log and set on the new
NF_LOG_F_COPY_LEN flag when snaplen is specified. Again from Zhang.
14) Allow to filter rule dumps in nf_tables based on table and chain
names.
15) Simplify connlabel to always use 128 bits to store labels and
get rid of unused function in xt_connlabel, from Florian.
16) Replace set_expect_timeout() by mod_timer() from the h323 conntrack
helper, by Gao Feng.
17) Put back x_tables module reference in nft_compat on error, from
Liping Zhang.
18) Add a reference count to the x_tables extensions cache in
nft_compat, so we can remove them when unused and avoid a crash
if the extensions are rmmod, again from Zhang.
====================
Signed-off-by: David S. Miller <davem@davemloft.net >
2016-07-24 22:02:36 -07:00
2016-04-05 16:53:41 -07:00
2016-07-10 20:13:53 +02:00
2016-05-09 11:07:28 +02:00
2016-05-30 23:00:22 +02:00
2016-05-09 16:18:37 +02:00
2016-02-04 18:25:55 +01:00
2016-05-17 10:15:34 +05:30
2016-03-04 23:50:27 -06:00
2016-04-05 16:57:15 +02:00
2016-04-14 14:03:25 +02:00
2016-05-29 20:21:41 +01:00
2016-01-27 14:32:48 -08:00
2016-06-02 17:59:44 +01:00
2016-06-30 07:44:23 +01:00
2016-07-19 21:46:33 -07:00
2016-07-14 13:34:28 -07:00
2016-05-26 09:36:10 -07:00
2016-05-10 15:44:18 -07:00
2016-07-18 21:35:23 +02:00
2016-03-02 20:05:23 +01:00
2016-07-03 10:55:07 +02:00
2016-03-02 20:05:23 +01:00
2016-03-02 20:05:23 +01:00
2016-04-25 14:11:10 +01:00
2016-04-29 16:44:47 +02:00
2016-04-21 00:01:21 +02:00
2016-06-09 22:21:29 -07:00
2016-03-17 12:50:55 -07:00
2016-06-30 05:03:36 -04:00
2016-01-21 14:47:08 -08:00
2016-05-17 18:06:18 +01:00
2016-03-17 15:09:34 -07:00
2016-05-18 13:14:02 -07:00
2016-04-25 18:51:31 +01:00
2016-06-15 10:32:25 -04:00
2016-03-17 15:09:34 -07:00
2016-06-24 17:03:12 -07:00
2016-06-04 21:32:40 -04:00
2016-04-09 03:12:58 +02:00
2016-05-23 17:53:39 -07:00
2016-03-11 14:00:03 +02:00
2016-03-07 16:11:14 -08:00
2016-05-05 09:58:52 +02:00
2016-06-29 15:18:47 -07:00
2016-03-15 16:55:16 -07:00
2016-03-15 16:55:16 -07:00
2016-04-04 10:41:08 -07:00
2016-05-04 23:41:14 +02:00
2016-05-13 14:01:43 +02:00
2016-01-24 03:47:37 +01:00
2016-01-24 03:49:03 +01:00
2016-06-07 22:07:09 -04:00
2016-05-05 13:03:29 -06:00
2016-02-19 22:54:09 -05:00
2016-05-09 09:24:02 -07:00
2016-04-25 19:13:44 -06:00
2016-04-12 15:07:36 -06:00
2016-05-26 19:34:26 -07:00
2016-05-10 08:41:37 -06:00
2016-05-19 19:12:14 -07:00
2016-07-20 11:59:21 -07:00
2016-03-25 11:37:57 -04:00
2016-04-04 10:41:08 -07:00
2016-03-03 21:18:29 +11:00
2016-02-22 08:51:38 +01:00
2016-03-22 15:36:02 -07:00
2016-04-20 17:50:06 +08:00
2016-04-25 15:45:14 -04:00
2016-07-01 16:30:38 -04:00
2016-01-27 09:10:29 -05:00
2016-06-01 14:56:57 -07:00
2016-04-19 16:54:26 -07:00
2016-01-27 12:38:03 +01:00
2016-04-22 11:38:56 -07:00
2016-05-20 17:58:30 -07:00
2016-03-22 15:36:02 -07:00
2016-02-08 19:04:55 +01:00
2016-05-19 19:12:14 -07:00
2016-05-19 19:12:14 -07:00
2016-03-25 19:10:03 +01:00
2016-05-23 11:48:48 -07:00
2016-02-20 14:11:01 -08:00
2016-05-03 14:59:30 -07:00
2016-02-20 14:11:01 -08:00
2016-05-06 14:58:25 +02:00
2016-04-08 22:41:36 +02:00
2016-05-06 14:58:25 +02:00
2016-06-02 23:05:27 +02:00
2016-05-06 14:58:22 +02:00
2016-05-19 19:12:14 -07:00
2016-05-13 14:01:59 +02:00
2016-03-22 15:36:02 -07:00
2016-04-15 22:35:44 +08:00
2016-03-01 16:55:48 -08:00
2016-05-26 20:00:28 -07:00
2016-06-20 10:41:51 -07:00
2016-04-12 14:14:21 -07:00
2016-05-19 19:12:14 -07:00
2016-04-15 11:20:32 -07:00
2016-05-03 11:20:07 +09:00
2016-03-10 17:12:09 -05:00
2016-05-20 21:26:15 -07:00
2016-06-05 10:36:01 -07:00
2016-02-11 15:33:38 +00:00
2016-05-31 22:12:43 +05:30
2016-05-09 15:33:29 +02:00
2016-05-09 15:33:29 +02:00
2016-04-12 21:07:06 +05:30
2016-02-09 13:05:23 +01:00
2016-02-11 19:23:28 -08:00
2016-06-03 09:57:35 +02:00
2016-05-27 16:03:22 -07:00
2016-05-17 15:48:12 -04:00
2016-07-01 16:37:06 +02:00
2016-04-18 14:45:08 -04:00
2016-03-29 16:30:56 -04:00
2016-02-25 22:12:26 -08:00
2016-04-15 08:49:47 -07:00
2016-03-15 16:55:16 -07:00
2016-05-02 16:24:49 +02:00
2016-05-31 22:17:05 +05:30
2016-05-02 19:49:28 -04:00
2016-07-24 00:53:32 -04:00
2016-02-29 08:35:10 +01:00
2016-03-17 15:09:34 -07:00
2016-05-27 17:14:05 -07:00
2016-06-01 10:29:39 +02:00
2016-05-07 10:32:33 -07:00
2016-04-19 22:04:53 +02:00
2016-05-19 19:12:14 -07:00
2016-03-14 00:17:28 -04:00
2016-05-17 17:11:27 -07:00
2016-05-20 17:58:30 -07:00
2016-05-10 15:43:09 -04:00
2016-03-17 15:09:34 -07:00
2016-02-20 12:53:31 +01:00
2016-05-20 17:58:30 -07:00
2016-05-28 15:48:31 -04:00
2016-03-17 15:09:34 -07:00
2016-07-15 14:54:27 +09:00
2016-05-20 17:58:30 -07:00
2016-05-19 19:12:14 -07:00
2016-05-20 17:58:30 -07:00
2016-04-30 14:01:37 -07:00
2016-05-04 22:39:17 +02:00
2016-05-04 22:39:17 +02:00
2016-06-18 22:11:39 -07:00
2016-06-30 12:06:20 +02:00
2016-07-08 13:23:12 +02:00
2016-03-11 14:58:58 -05:00
2016-05-03 16:00:54 -04:00
2016-02-06 02:59:51 -05:00
2016-02-11 09:59:22 -05:00
2016-05-01 09:23:52 -04:00
2016-06-10 23:22:55 -07:00
2016-06-24 17:07:33 -07:00
2016-02-22 08:51:37 +01:00
2016-02-15 12:42:38 +00:00
2016-03-25 16:37:42 -07:00
2016-05-03 18:23:02 +01:00
2016-05-03 18:23:02 +01:00
2016-03-22 15:36:02 -07:00
2016-05-09 19:39:17 +02:00
2016-05-16 15:12:02 -05:00
2016-04-20 15:42:24 -04:00
2016-06-09 23:34:42 -07:00
2016-05-02 13:42:51 +02:00
2016-05-11 22:37:54 +02:00
2016-05-02 13:42:51 +02:00
2016-05-02 13:42:50 +02:00
2016-06-17 20:47:11 -07:00
2016-05-16 11:14:29 -04:00
2016-01-28 14:19:12 -08:00
2016-05-05 22:35:54 -04:00
2016-06-24 08:23:16 +02:00
2016-05-20 17:58:30 -07:00
2016-06-24 17:23:52 -07:00
2016-03-22 15:36:02 -07:00
2016-05-20 22:20:48 -07:00
2016-05-20 21:26:15 -07:00
2016-05-23 17:04:14 -07:00
2016-04-11 22:44:15 +01:00
2016-04-11 22:44:15 +01:00
2016-03-22 15:36:02 -07:00
2016-05-25 16:12:05 +02:00
2016-02-09 11:54:23 +01:00
2016-06-08 11:47:06 +02:00
2016-05-09 12:36:46 -04:00
2016-04-28 16:23:16 -07:00
2016-05-06 12:51:10 -06:00
2016-03-17 15:09:34 -07:00
2016-01-20 17:09:18 -08:00
2016-03-09 15:43:42 -08:00
2016-05-17 12:06:35 +02:00
2016-05-16 14:47:16 -07:00
2016-05-19 09:21:36 -07:00
2016-01-20 17:09:18 -08:00
2016-02-22 22:44:04 -05:00
2016-03-14 12:19:46 -04:00
2016-05-03 15:07:35 -07:00
2016-06-10 23:24:53 -07:00
2016-04-11 21:15:48 -04:00
2016-07-23 10:25:54 +09:00
2016-05-27 15:23:32 -07:00
2016-03-17 13:47:50 -07:00
2016-05-19 19:12:14 -07:00
2016-05-19 19:12:14 -07:00
2016-07-15 11:53:02 -07:00
2016-03-15 16:55:16 -07:00
2016-03-20 16:47:13 -04:00
2016-05-19 19:12:14 -07:00
2016-05-26 15:35:44 -07:00
2016-06-24 17:23:52 -07:00
2016-02-18 19:46:30 +01:00
2016-03-15 16:55:16 -07:00
2016-04-28 11:44:19 +02:00
2016-05-20 17:58:30 -07:00
2016-04-01 15:00:10 +02:00
2016-07-16 20:19:43 -07:00
2016-07-16 20:19:43 -07:00
2016-02-07 19:10:12 -08:00
2016-06-05 10:36:01 -07:00
2016-04-22 12:26:23 -07:00
2016-07-01 05:32:17 -04:00
2016-06-03 19:37:21 -04:00
2016-07-24 00:53:32 -04:00
2016-03-02 20:05:26 +01:00
2016-02-18 11:42:22 -05:00
2016-05-17 15:48:12 -04:00
2016-05-17 15:47:55 -04:00
2016-05-17 15:05:23 -07:00
2016-04-04 10:41:08 -07:00
2016-05-26 10:33:33 -07:00
2016-05-23 17:04:14 -07:00
2016-04-25 15:09:11 -04:00
2016-03-23 12:34:17 +01:00
2016-05-19 19:12:14 -07:00
2016-03-01 20:36:58 +01:00
2016-02-16 13:04:58 -05:00
2016-03-21 19:30:06 -04:00
2016-05-02 09:13:35 -06:00
2016-05-01 14:01:00 -07:00
2016-05-12 07:07:42 -05:00
2016-05-16 07:22:35 -05:00
2016-05-02 09:00:56 -05:00
2016-05-09 15:33:29 +02:00
2016-07-16 21:32:58 -07:00
2016-06-08 08:18:06 -05:00
2016-06-09 14:38:22 -05:00
2016-06-03 07:27:55 -05:00
2016-04-15 11:52:28 +03:00
2016-04-26 10:19:38 +05:30
2016-05-23 17:04:14 -07:00
2016-05-19 19:12:14 -07:00
2016-03-15 16:55:16 -07:00
2016-06-03 15:06:22 -07:00
2016-03-15 16:55:16 -07:00
2016-05-19 19:12:14 -07:00
2016-03-17 15:09:34 -07:00
2016-05-20 17:58:30 -07:00
2016-05-20 17:58:30 -07:00
2016-04-08 11:08:12 -05:00
2016-03-07 11:39:16 -06:00
2016-05-19 13:10:54 -07:00
2016-05-03 10:35:49 -05:00
2016-05-20 17:58:30 -07:00
2016-07-15 14:23:56 -07:00
2016-02-11 18:35:48 -08:00
2016-02-11 18:35:48 -08:00
2016-03-14 15:43:11 -04:00
2016-05-10 15:06:19 -04:00
2016-02-18 19:46:33 +01:00
2016-04-09 03:10:50 +02:00
2016-03-17 02:32:04 +01:00
2016-04-22 02:29:17 +02:00
2016-05-05 01:38:44 +02:00
2016-04-22 01:32:37 +02:00
2016-04-22 01:32:37 +02:00
2016-04-14 09:01:47 -06:00
2016-04-22 10:29:05 +02:00
2016-03-15 16:55:16 -07:00
2016-05-19 19:12:14 -07:00
2016-07-11 13:48:02 -04:00
2016-03-02 16:44:27 +01:00
2016-02-15 07:02:32 +01:00
2016-03-02 17:13:02 -08:00
2016-05-20 17:58:30 -07:00
2016-02-16 13:04:58 -05:00
2016-04-09 03:10:50 +02:00
2016-04-25 23:47:44 +02:00
2016-03-10 09:43:36 -08:00
2016-03-03 14:23:43 -08:00
2016-07-01 05:32:17 -04:00
2016-06-23 18:37:05 +02:00
2016-02-09 19:01:11 +00:00
2016-03-17 15:09:34 -07:00
2016-02-09 13:05:23 +01:00
2016-02-09 13:05:23 +01:00
2016-07-23 10:25:54 +09:00
2016-05-20 17:58:30 -07:00
2016-07-06 10:51:14 +01:00
2016-07-06 10:51:14 +01:00
2016-04-14 21:14:03 -04:00
2016-04-23 18:51:33 -04:00
2016-07-06 10:51:14 +01:00
2016-03-31 13:37:37 -07:00
2016-03-31 13:37:37 -07:00
2016-03-05 21:30:41 +09:00
2016-05-12 15:50:19 -07:00
2016-05-31 22:12:43 +05:30
2016-03-30 15:42:03 +02:00
2016-06-29 21:24:53 +02:00
2016-02-24 09:12:45 +01:00
2016-04-05 10:56:32 +02:00
2016-03-22 15:36:02 -07:00
2016-03-22 15:36:02 -07:00
2016-03-22 15:36:02 -07:00
2016-07-15 14:54:27 +09:00
2016-03-10 16:04:24 -08:00
2016-05-06 11:09:00 -07:00
2016-03-14 17:08:15 +01:00
2016-06-15 14:08:34 -07:00
2016-04-13 10:42:20 +02:00
2016-05-26 00:04:58 -04:00
2016-06-22 09:10:00 +01:00
2016-04-15 16:53:14 -04:00
2016-06-24 15:09:37 -07:00
2016-02-16 09:26:27 +00:00
2016-05-31 11:59:06 -07:00
2016-05-17 14:41:03 -07:00
2016-04-30 09:26:55 -07:00
2016-04-14 12:56:09 -07:00
2016-06-03 08:37:25 +02:00
2016-04-30 09:26:55 -07:00
2016-04-30 09:26:55 -07:00
2016-01-20 17:09:18 -08:00
2016-01-22 18:08:52 -05:00
2016-05-23 17:04:14 -07:00
2016-07-01 05:32:17 -04:00
2016-07-06 10:35:22 -07:00
2016-05-19 19:12:14 -07:00
2016-05-19 19:12:14 -07:00
2016-05-26 15:35:44 -07:00
2016-06-28 09:08:51 -04:00
2016-05-08 23:46:14 -04:00
2016-02-23 19:59:55 -08:00
2016-03-25 16:37:42 -07:00
2016-05-03 14:59:30 -07:00
2016-06-28 08:54:23 -04:00
2016-04-21 10:47:26 +10:00
2016-05-19 19:12:14 -07:00
2016-05-28 15:42:50 -04:00
2016-02-25 11:27:16 +01:00
2016-05-20 17:58:30 -07:00
2016-04-29 17:37:10 -07:00
2016-05-20 17:58:30 -07:00
2016-03-14 14:55:26 -04:00
2016-06-01 22:25:48 +08:00
2016-07-17 19:59:26 +02:00
2016-03-17 15:09:34 -07:00
2016-05-19 19:12:14 -07:00
2016-03-02 17:13:17 -08:00
2016-06-01 21:13:43 +02:00
2016-05-06 10:42:29 +02:00
2016-05-18 18:55:19 -07:00
2016-03-15 16:55:16 -07:00
2016-03-09 11:58:41 -05:00
2016-04-26 15:47:32 -07:00
2016-01-28 11:58:02 -08:00
2016-05-20 20:57:27 -07:00
2016-05-23 17:04:14 -07:00
2016-05-04 16:55:11 -04:00
2016-02-10 13:19:03 +00:00
2016-04-07 16:53:29 -04:00
2016-04-08 19:46:28 -04:00
2016-04-13 12:02:28 -07:00
2016-05-03 14:32:07 -07:00
2016-05-20 17:58:30 -07:00
2016-04-06 16:14:24 +01:00
2016-02-22 16:10:08 -07:00
2016-02-09 11:21:07 +01:00
2016-06-10 23:03:55 -07:00
2016-03-02 17:01:57 +02:00
2016-03-02 17:01:57 +02:00
2016-03-17 15:09:34 -07:00
2016-05-23 11:48:48 -07:00
2016-05-19 19:12:14 -07:00
2016-02-07 21:36:02 -08:00
2016-02-24 09:09:45 +01:00
2016-03-16 21:11:19 +01:00
2016-01-29 13:31:10 -05:00
2016-03-03 14:42:50 -07:00
2016-05-27 20:09:16 -04:00
2016-05-20 17:58:30 -07:00
c42d7121fb