netfilter: flowtable: tear down flow entries with stale dst from GC

Browse source

In case of route updates, tear down flow entries with stale dst to give
them a chance to obtain a fresh route.

This is specifically useful for hardware offloaded entries, where the
flowtable software dataplane sees no packet, where the existing check
for stale dst entries does not help.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2026-07-10 09:54:09 +02:00

parent 16aecbe303

commit edd51a2334

3 changed files with 10 additions and 8 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

8

include/net/netfilter/nf_flow_table.h

View file

2

net/netfilter/nf_flow_table_core.c

View file

8

net/netfilter/nf_flow_table_ip.c

View file