Zhiping du fc990d1111 netfilter: nf_nat: skip nat clash resolution for same-origin entries ... [upstream commit 4e35c1cb9460] It is possible that two concurrent packets originating from the same socket of a connection-less protocol (e.g. UDP) can end up having different IP_CT_DIR_REPLY tuples which results in one of the packets being dropped. To illustrate this, consider the following simplified scenario: 1. Packet A and B are sent at the same time from two different threads by same UDP socket. No matching conntrack entry exists yet. Both packets cause allocation of a new conntrack entry. 2. get_unique_tuple gets called for A. No clashing entry found. conntrack entry for A is added to main conntrack table. 3. get_unique_tuple is called for B and will find that the reply tuple of B is already taken by A. It will allocate a new UDP source port for B to resolve the clash. 4. conntrack entry for B cannot be added to main conntrack table because its ORIGINAL direction is clashing with A and the REPLY directions of A and B are not the same anymore due to UDP source port reallocation done in step 3. This patch modifies nf_conntrack_tuple_taken so it doesn't consider colliding reply tuples if the IP_CT_DIR_ORIGINAL tuples are equal. [ Florian: simplify patch to not use .allow_clash setting and always ignore identical flows ] Signed-off-by: Martynas Pumputis <martynas@weave.works> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Zhiping Du <zhipingdu@tencent.com>		2020-05-29 10:40:38 +08:00
..
6lowpan	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
9p	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
802	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
8021q	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
appletalk	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
atm	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ax25	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
batman-adv	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
bluetooth	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
bpf	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
bridge	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
caif	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
can	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ceph	ceph: quota: add initial infrastructure to support cephfs quotas	2020-01-02 12:23:05 +08:00
core	auth_gss fix: rpcsec_gss_exit_net has no chance to run when use-gss-proxy==1	2020-01-02 12:13:47 +08:00
dcb	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
dccp	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
decnet	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
dns_resolver	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
dsa	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ethernet	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
hsr	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ieee802154	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ife	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ipv4	net: increase tcp rmem default	2020-05-29 10:40:04 +08:00
ipv6	arm64/gcc: Fix the net compile error when using gcc 8.3.0	2020-01-02 12:14:33 +08:00
ipx	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
iucv	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
kcm	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
key	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
l2tp	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
l3mdev	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
lapb	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
llc	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
mac80211	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
mac802154	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
mpls	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
ncsi	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
netfilter	netfilter: nf_nat: skip nat clash resolution for same-origin entries	2020-05-29 10:40:38 +08:00
netlabel	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
netlink	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
netrom	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
nfc	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
nsh	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
openvswitch	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
packet	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
phonet	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
psample	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
qrtr	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
rds	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
rfkill	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
rose	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
rxrpc	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
sched	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
sctp	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
smc	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
strparser	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
sunrpc	nsfs: fix netns proc warning	2020-01-02 14:55:31 +08:00
switchdev	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tipc	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
tls	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
toa	wireless/db: fix error info	2020-01-02 14:51:30 +08:00
unix	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
vmw_vsock	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
wimax	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
wireless	wireless/db: fix error info	2020-01-02 14:51:30 +08:00
x25	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
xfrm	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
Kconfig	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
Makefile	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
compat.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
socket.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00
sysctl_net.c	Init Repo base on 4.14.105 long term, and add base tlinux kernel interfaces	2020-01-02 10:51:04 +08:00