netfilter: nf_conncount: Early exit in nf_conncount_lookup() and cleanup

Browse source

This patch is originally from Florian Westphal.

This patch does the following three tasks.

It applies the same early exit technique for nf_conncount_lookup().

Since now we keep the number of connections in 'struct nf_conncount_list',
we no longer need to return the count in nf_conncount_lookup().

Moreover, we expose the garbage collection function nf_conncount_gc_list()
for nft_connlimit.

Signed-off-by: Yi-Hung Wei <yihung.wei@gmail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Yi-Hung Wei 2018-07-02 17:33:41 -07:00 • committed by Pablo Neira Ayuso

parent cb2b36f5a9

commit 976afca1ce

3 changed files with 33 additions and 25 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

11

include/net/netfilter/nf_conntrack_count.h

View file

38

net/netfilter/nf_conncount.c

View file

9

net/netfilter/nft_connlimit.c

View file