Oz Shlomo 975c57504d netfilter: conntrack: Introduce udp offload timeout configuration ... UDP connections may be offloaded from nf conntrack to nf flow table. Offloaded connections are aged after 30 seconds of inactivity. Once aged, ownership is returned to conntrack with a hard coded pickup time of 30 seconds, after which the connection may be deleted. eted. The current aging intervals may be too aggressive for some users. Provide users with the ability to control the nf flow table offload aging and pickup time intervals via sysctl parameter as a pre-step for configuring the nf flow table GC timeout intervals. Signed-off-by: Oz Shlomo <ozsh@nvidia.com> Reviewed-by: Paul Blakey <paulb@nvidia.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2021-06-07 12:23:37 +02:00
..
ipset	netfilter: use nfnetlink_unicast()	2021-05-29 01:04:53 +02:00
ipvs	netfilter: Remove leading spaces in Kconfig	2021-05-29 01:04:52 +02:00
core.c
Kconfig	netfilter: Remove leading spaces in Kconfig	2021-05-29 01:04:52 +02:00
Makefile
nf_conncount.c
nf_conntrack_acct.c
nf_conntrack_amanda.c
nf_conntrack_broadcast.c
nf_conntrack_core.c	netfilter: nftables: add nf_ct_pernet() helper function	2021-06-07 12:23:37 +02:00
nf_conntrack_ecache.c	netfilter: nftables: add nf_ct_pernet() helper function	2021-06-07 12:23:37 +02:00
nf_conntrack_expect.c	netfilter: nftables: add nf_ct_pernet() helper function	2021-06-07 12:23:37 +02:00
nf_conntrack_extend.c
nf_conntrack_ftp.c
nf_conntrack_h323_asn1.c
nf_conntrack_h323_main.c	netfilter: fix clang-12 fmt string warnings	2021-06-01 23:53:51 +02:00
nf_conntrack_h323_types.c
nf_conntrack_helper.c	netfilter: nftables: add nf_ct_pernet() helper function	2021-06-07 12:23:37 +02:00
nf_conntrack_irc.c
nf_conntrack_labels.c
nf_conntrack_netbios_ns.c
nf_conntrack_netlink.c	netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use it	2021-06-07 12:23:36 +02:00
nf_conntrack_pptp.c
nf_conntrack_proto.c	netfilter: nftables: add nf_ct_pernet() helper function	2021-06-07 12:23:37 +02:00
nf_conntrack_proto_dccp.c
nf_conntrack_proto_generic.c
nf_conntrack_proto_gre.c
nf_conntrack_proto_icmp.c
nf_conntrack_proto_icmpv6.c
nf_conntrack_proto_sctp.c
nf_conntrack_proto_tcp.c	netfilter: conntrack: Introduce tcp offload timeout configuration	2021-06-07 12:23:37 +02:00
nf_conntrack_proto_udp.c	netfilter: conntrack: Introduce udp offload timeout configuration	2021-06-07 12:23:37 +02:00
nf_conntrack_sane.c
nf_conntrack_seqadj.c
nf_conntrack_sip.c
nf_conntrack_snmp.c
nf_conntrack_standalone.c	netfilter: conntrack: Introduce udp offload timeout configuration	2021-06-07 12:23:37 +02:00
nf_conntrack_tftp.c
nf_conntrack_timeout.c
nf_conntrack_timestamp.c
nf_dup_netdev.c
nf_flow_table_core.c
nf_flow_table_inet.c
nf_flow_table_ip.c
nf_flow_table_offload.c
nf_internals.h
nf_log.c
nf_log_syslog.c
nf_nat_amanda.c
nf_nat_core.c
nf_nat_ftp.c
nf_nat_helper.c
nf_nat_irc.c
nf_nat_masquerade.c
nf_nat_proto.c
nf_nat_redirect.c
nf_nat_sip.c
nf_nat_tftp.c
nf_queue.c
nf_sockopt.c
nf_synproxy_core.c
nf_tables_api.c	netfilter: nf_tables: remove nft_ctx_init_from_setattr()	2021-06-07 12:23:36 +02:00
nf_tables_core.c	netfilter: nf_tables: add and use nft_thoff helper	2021-05-29 01:04:54 +02:00
nf_tables_offload.c
nf_tables_trace.c	netfilter: nf_tables: add and use nft_thoff helper	2021-05-29 01:04:54 +02:00
nfnetlink.c	netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use it	2021-06-07 12:23:36 +02:00
nfnetlink_acct.c	netfilter: use nfnetlink_unicast()	2021-05-29 01:04:53 +02:00
nfnetlink_cthelper.c	netfilter: use nfnetlink_unicast()	2021-05-29 01:04:53 +02:00
nfnetlink_cttimeout.c	netfilter: use nfnetlink_unicast()	2021-05-29 01:04:53 +02:00
nfnetlink_log.c	netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use it	2021-06-07 12:23:36 +02:00
nfnetlink_osf.c
nfnetlink_queue.c	netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use it	2021-06-07 12:23:36 +02:00
nft_bitwise.c
nft_byteorder.c
nft_chain_filter.c	netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec()	2021-05-29 01:04:54 +02:00
nft_chain_nat.c	netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec()	2021-05-29 01:04:54 +02:00
nft_chain_route.c	netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec()	2021-05-29 01:04:54 +02:00
nft_cmp.c
nft_compat.c	netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use it	2021-06-07 12:23:36 +02:00
nft_connlimit.c
nft_counter.c
nft_ct.c
nft_dup_netdev.c
nft_dynset.c
nft_exthdr.c	netfilter: nf_tables: add and use nft_thoff helper	2021-05-29 01:04:54 +02:00
nft_fib.c
nft_fib_inet.c
nft_fib_netdev.c
nft_flow_offload.c	netfilter: nf_tables: add and use nft_thoff helper	2021-05-29 01:04:54 +02:00
nft_fwd_netdev.c
nft_hash.c
nft_immediate.c
nft_limit.c
nft_log.c
nft_lookup.c	netfilter: nf_tables: prefer direct calls for set lookups	2021-05-29 01:04:27 +02:00
nft_masq.c
nft_meta.c
nft_nat.c
nft_numgen.c
nft_objref.c	netfilter: add and use nft_set_do_lookup helper	2021-05-28 21:11:41 +02:00
nft_osf.c
nft_payload.c	netfilter: nf_tables: add and use nft_thoff helper	2021-05-29 01:04:54 +02:00
nft_queue.c
nft_quota.c
nft_range.c
nft_redir.c
nft_reject.c
nft_reject_inet.c	netfilter: nf_tables: add and use nft_sk helper	2021-05-29 01:04:53 +02:00
nft_reject_netdev.c
nft_rt.c
nft_set_bitmap.c	netfilter: nf_tables: prefer direct calls for set lookups	2021-05-29 01:04:27 +02:00
nft_set_hash.c	netfilter: nf_tables: prefer direct calls for set lookups	2021-05-29 01:04:27 +02:00
nft_set_pipapo.c
nft_set_pipapo.h	netfilter: nf_tables: prefer direct calls for set lookups	2021-05-29 01:04:27 +02:00
nft_set_pipapo_avx2.c	netfilter: nft_set_pipapo_avx2: fix up description warnings	2021-06-01 23:53:51 +02:00
nft_set_pipapo_avx2.h	netfilter: nf_tables: prefer direct calls for set lookups	2021-05-29 01:04:27 +02:00
nft_set_rbtree.c	netfilter: nf_tables: prefer direct calls for set lookups	2021-05-29 01:04:27 +02:00
nft_socket.c
nft_synproxy.c	netfilter: nf_tables: add and use nft_thoff helper	2021-05-29 01:04:54 +02:00
nft_tproxy.c	netfilter: nf_tables: add and use nft_thoff helper	2021-05-29 01:04:54 +02:00
nft_tunnel.c
nft_xfrm.c
utils.c
x_tables.c
xt_addrtype.c
xt_AUDIT.c	netfilter: fix clang-12 fmt string warnings	2021-06-01 23:53:51 +02:00
xt_bpf.c
xt_cgroup.c
xt_CHECKSUM.c
xt_CLASSIFY.c
xt_cluster.c
xt_comment.c
xt_connbytes.c
xt_connlabel.c
xt_connlimit.c
xt_connmark.c
xt_CONNSECMARK.c
xt_conntrack.c
xt_cpu.c
xt_CT.c	netfilter: xt_CT: Remove redundant assignment to ret	2021-05-29 01:04:53 +02:00
xt_dccp.c
xt_devgroup.c
xt_dscp.c
xt_DSCP.c
xt_ecn.c
xt_esp.c
xt_hashlimit.c
xt_helper.c
xt_HL.c
xt_hl.c
xt_HMARK.c
xt_IDLETIMER.c
xt_ipcomp.c
xt_iprange.c
xt_ipvs.c
xt_l2tp.c
xt_LED.c
xt_length.c
xt_limit.c	netfilter: x_tables: improve limit_mt scalability	2021-05-29 01:04:52 +02:00
xt_LOG.c
xt_mac.c
xt_mark.c
xt_MASQUERADE.c
xt_multiport.c
xt_nat.c
xt_NETMAP.c
xt_nfacct.c
xt_NFLOG.c
xt_NFQUEUE.c
xt_osf.c
xt_owner.c
xt_physdev.c
xt_pkttype.c
xt_policy.c
xt_quota.c
xt_rateest.c
xt_RATEEST.c
xt_realm.c
xt_recent.c
xt_REDIRECT.c
xt_repldata.h
xt_sctp.c
xt_SECMARK.c
xt_set.c
xt_socket.c
xt_state.c
xt_statistic.c
xt_string.c
xt_TCPMSS.c
xt_tcpmss.c
xt_TCPOPTSTRIP.c
xt_tcpudp.c
xt_TEE.c
xt_time.c
xt_TPROXY.c
xt_TRACE.c
xt_u32.c