https://www.spinics.net/lists/netfilter-devel/ Archive updates for Linux TCP/IP Netfilter Devel en-us Thu, 18 Sep 2025 23:39:54 GMT Thu, 18 Sep 2025 23:39:54 GMT http://blogs.law.harvard.edu/tech/rss https://www.spinics.net/lists/netfilter-devel/msg93080.html Re: [PATCH] net/netfilter/ipvs: Fix data-race in ip_vs_add_service / ip_vs_out_hook Thu, 18 Sep 2025 23:32:47 GMT https://www.spinics.net/lists/netfilter-devel/msg93080.html https://www.spinics.net/lists/netfilter-devel/msg93079.html Re: [PATCH] net/netfilter/ipvs: Fix data-race in ip_vs_add_service / ip_vs_out_hook Thu, 18 Sep 2025 23:31:39 GMT https://www.spinics.net/lists/netfilter-devel/msg93079.html https://www.spinics.net/lists/netfilter-devel/msg93078.html [ANNOUNCE] nftables 1.0.6.1 (stable) release Wed, 17 Sep 2025 23:16:31 GMT https://www.spinics.net/lists/netfilter-devel/msg93078.html https://www.spinics.net/lists/netfilter-devel/msg93073.html Re: [nft PATCH] trace: Fix for memleak in trace_alloc_list() error path Wed, 17 Sep 2025 20:35:20 GMT https://www.spinics.net/lists/netfilter-devel/msg93073.html https://www.spinics.net/lists/netfilter-devel/msg93072.html [PATCH] net/netfilter/ipvs: Fix data-race in ip_vs_add_service / ip_vs_out_hook Wed, 17 Sep 2025 20:23:55 GMT https://www.spinics.net/lists/netfilter-devel/msg93072.html https://www.spinics.net/lists/netfilter-devel/msg93066.html Re: [PATCH nf-next v2 3/3] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 19:18:56 GMT https://www.spinics.net/lists/netfilter-devel/msg93066.html https://www.spinics.net/lists/netfilter-devel/msg93065.html Re: [PATCH nft 12/12] src: replace compound_expr_alloc() by type safe function Wed, 17 Sep 2025 19:18:45 GMT https://www.spinics.net/lists/netfilter-devel/msg93065.html https://www.spinics.net/lists/netfilter-devel/msg93043.html Re: [PATCH nf-next v2 3/3] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 19:17:11 GMT https://www.spinics.net/lists/netfilter-devel/msg93043.html https://www.spinics.net/lists/netfilter-devel/msg93064.html [PATCH nf-next 0/2] netfilter: nft_set_pipapo: speed up insertions Wed, 17 Sep 2025 19:16:54 GMT https://www.spinics.net/lists/netfilter-devel/msg93064.html https://www.spinics.net/lists/netfilter-devel/msg93063.html Re: [PATCH 2/6] setftests: net: netfilter: fix spelling mistakes in output Wed, 17 Sep 2025 19:16:53 GMT https://www.spinics.net/lists/netfilter-devel/msg93063.html https://www.spinics.net/lists/netfilter-devel/msg93042.html Re: [PATCH nf-next 2/2] netfilter: nft_set_pipapo: use avx2 algorithm for insertions too Wed, 17 Sep 2025 19:16:52 GMT https://www.spinics.net/lists/netfilter-devel/msg93042.html https://www.spinics.net/lists/netfilter-devel/msg93077.html Re: [PATCH nf-next 1/2] netfilter: nft_set_pipapo_avx2: split lookup function in two parts Wed, 17 Sep 2025 19:12:40 GMT https://www.spinics.net/lists/netfilter-devel/msg93077.html https://www.spinics.net/lists/netfilter-devel/msg93076.html [PATCH] netfilter: ebtables: Use vmalloc_array() to improve code Wed, 17 Sep 2025 19:11:31 GMT https://www.spinics.net/lists/netfilter-devel/msg93076.html https://www.spinics.net/lists/netfilter-devel/msg93067.html Re: [PATCH nf-next 2/2] netfilter: nft_set_pipapo: use avx2 algorithm for insertions too Wed, 17 Sep 2025 19:09:43 GMT https://www.spinics.net/lists/netfilter-devel/msg93067.html https://www.spinics.net/lists/netfilter-devel/msg93029.html [PATCH nft-testing v3 0/2] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 19:07:54 GMT https://www.spinics.net/lists/netfilter-devel/msg93029.html https://www.spinics.net/lists/netfilter-devel/msg93037.html Re: nftables 1.0.6.y stable branch updates (strike 2) Wed, 17 Sep 2025 19:07:18 GMT https://www.spinics.net/lists/netfilter-devel/msg93037.html https://www.spinics.net/lists/netfilter-devel/msg93032.html [conntrack-tools PATCH] nfct: helper: Extend error message for EEXIST Wed, 17 Sep 2025 19:06:18 GMT https://www.spinics.net/lists/netfilter-devel/msg93032.html https://www.spinics.net/lists/netfilter-devel/msg93031.html Re: [PATCH nf-next v2 0/3] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 19:05:07 GMT https://www.spinics.net/lists/netfilter-devel/msg93031.html https://www.spinics.net/lists/netfilter-devel/msg93030.html Re: [PATCH nf-next 2/2] netfilter: nft_set_pipapo: use avx2 algorithm for insertions too Wed, 17 Sep 2025 19:05:06 GMT https://www.spinics.net/lists/netfilter-devel/msg93030.html https://www.spinics.net/lists/netfilter-devel/msg93028.html Re: [PATCH nf-next 2/2] netfilter: nft_set_pipapo: use avx2 algorithm for insertions too Wed, 17 Sep 2025 18:57:59 GMT https://www.spinics.net/lists/netfilter-devel/msg93028.html https://www.spinics.net/lists/netfilter-devel/msg93069.html [PATCH nft] src: ensure chain policy evaluation when specified Wed, 17 Sep 2025 18:55:00 GMT https://www.spinics.net/lists/netfilter-devel/msg93069.html https://www.spinics.net/lists/netfilter-devel/msg93068.html [PATCH nf-next v2 3/3] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 18:54:01 GMT https://www.spinics.net/lists/netfilter-devel/msg93068.html https://www.spinics.net/lists/netfilter-devel/msg93027.html [PATCH nft-testing v3 2/2] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 18:53:56 GMT https://www.spinics.net/lists/netfilter-devel/msg93027.html https://www.spinics.net/lists/netfilter-devel/msg93062.html Re: [nft PATCH 00/14] json: Do not reduce single-item arrays on output Wed, 17 Sep 2025 18:52:10 GMT https://www.spinics.net/lists/netfilter-devel/msg93062.html https://www.spinics.net/lists/netfilter-devel/msg93061.html [PATCH nf-next 2/2] netfilter: nft_set_pipapo: use avx2 algorithm for insertions too Wed, 17 Sep 2025 18:51:58 GMT https://www.spinics.net/lists/netfilter-devel/msg93061.html https://www.spinics.net/lists/netfilter-devel/msg93060.html [PATCH net-next v2 4/7] net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers Wed, 17 Sep 2025 18:48:16 GMT https://www.spinics.net/lists/netfilter-devel/msg93060.html https://www.spinics.net/lists/netfilter-devel/msg93059.html [PATCH net-next v2 1/7] net: Add skb_dstref_steal and skb_dstref_restore Wed, 17 Sep 2025 18:47:20 GMT https://www.spinics.net/lists/netfilter-devel/msg93059.html https://www.spinics.net/lists/netfilter-devel/msg93025.html [PATCH nft-testing v3 1/2] netfilter: nft_set_pipapo*: Move FPU handling to pipapo_get_avx2() Wed, 17 Sep 2025 18:47:13 GMT https://www.spinics.net/lists/netfilter-devel/msg93025.html https://www.spinics.net/lists/netfilter-devel/msg93057.html [PATCH net-next v2 7/7] net: Add skb_dst_check_unset Wed, 17 Sep 2025 18:46:04 GMT https://www.spinics.net/lists/netfilter-devel/msg93057.html https://www.spinics.net/lists/netfilter-devel/msg93056.html Re: modprobe returns 0 upon -EEXIST from insmod Wed, 17 Sep 2025 18:45:50 GMT https://www.spinics.net/lists/netfilter-devel/msg93056.html https://www.spinics.net/lists/netfilter-devel/msg93051.html [nf-next v2] netfilter: ctnetlink: remove refcounting in dying list dumping Wed, 17 Sep 2025 18:44:28 GMT https://www.spinics.net/lists/netfilter-devel/msg93051.html https://www.spinics.net/lists/netfilter-devel/msg93024.html [PATCH net-next v2 2/7] xfrm: Switch to skb_dstref_steal to clear dst_entry Wed, 17 Sep 2025 18:43:56 GMT https://www.spinics.net/lists/netfilter-devel/msg93024.html https://www.spinics.net/lists/netfilter-devel/msg93050.html [PATCH nf-next v6 2/2] selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest Wed, 17 Sep 2025 18:43:04 GMT https://www.spinics.net/lists/netfilter-devel/msg93050.html https://www.spinics.net/lists/netfilter-devel/msg93023.html [PATCH net-next v2 5/7] staging: octeon: Convert to skb_dst_drop Wed, 17 Sep 2025 18:42:27 GMT https://www.spinics.net/lists/netfilter-devel/msg93023.html https://www.spinics.net/lists/netfilter-devel/msg93049.html Re: modprobe returns 0 upon -EEXIST from insmod Wed, 17 Sep 2025 18:41:29 GMT https://www.spinics.net/lists/netfilter-devel/msg93049.html https://www.spinics.net/lists/netfilter-devel/msg93048.html Re: [PATCH nft 1/2] evaluate: check XOR RHS operand is a constant value Wed, 17 Sep 2025 18:41:17 GMT https://www.spinics.net/lists/netfilter-devel/msg93048.html https://www.spinics.net/lists/netfilter-devel/msg93047.html [PATCH nf-next v6 0/2] Add IPIP flowtable SW acceleratio Wed, 17 Sep 2025 18:40:38 GMT https://www.spinics.net/lists/netfilter-devel/msg93047.html https://www.spinics.net/lists/netfilter-devel/msg93046.html [PATCH nf-next v2 2/3] netfilter: nft_set_pipapo_avx2: Drop the comment regarding protection Wed, 17 Sep 2025 18:38:28 GMT https://www.spinics.net/lists/netfilter-devel/msg93046.html https://www.spinics.net/lists/netfilter-devel/msg93045.html Re: [nft PATCH 00/14] json: Do not reduce single-item arrays on output Wed, 17 Sep 2025 18:37:39 GMT https://www.spinics.net/lists/netfilter-devel/msg93045.html https://www.spinics.net/lists/netfilter-devel/msg93044.html [nf PATCH] netfilter: conntrack: helper: Replace -EEXIST by -EBUSY Wed, 17 Sep 2025 18:36:36 GMT https://www.spinics.net/lists/netfilter-devel/msg93044.html https://www.spinics.net/lists/netfilter-devel/msg93038.html Re: [PATCH nft 00/12] replace compound_expr_*() by type safe function Wed, 17 Sep 2025 18:36:02 GMT https://www.spinics.net/lists/netfilter-devel/msg93038.html https://www.spinics.net/lists/netfilter-devel/msg93034.html Re: [PATCH nft 01/12] segtree: incorrect type when aggregating concatenated set ranges Wed, 17 Sep 2025 18:35:15 GMT https://www.spinics.net/lists/netfilter-devel/msg93034.html https://www.spinics.net/lists/netfilter-devel/msg93033.html Re: [PATCH nf-next 0/3] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 18:35:05 GMT https://www.spinics.net/lists/netfilter-devel/msg93033.html https://www.spinics.net/lists/netfilter-devel/msg93009.html [PATCH nf-next v6 1/2] net: netfilter: Add IPIP flowtable SW acceleration Wed, 17 Sep 2025 18:31:56 GMT https://www.spinics.net/lists/netfilter-devel/msg93009.html https://www.spinics.net/lists/netfilter-devel/msg93075.html [PATCH nf-next v2 1/3] netfilter: nft_set_pipapo: Store real pointer, adjust later. Wed, 17 Sep 2025 18:27:45 GMT https://www.spinics.net/lists/netfilter-devel/msg93075.html https://www.spinics.net/lists/netfilter-devel/msg93074.html [PATCH nft,v2] src: ensure chain policy evaluation when specified Wed, 17 Sep 2025 18:26:54 GMT https://www.spinics.net/lists/netfilter-devel/msg93074.html https://www.spinics.net/lists/netfilter-devel/msg93001.html [PATCH 2/6] setftests: net: netfilter: fix spelling mistakes in output Wed, 17 Sep 2025 18:25:08 GMT https://www.spinics.net/lists/netfilter-devel/msg93001.html https://www.spinics.net/lists/netfilter-devel/msg93071.html Re: [PATCH nf-next 1/2] netfilter: nft_set_pipapo_avx2: split lookup function in two parts Wed, 17 Sep 2025 18:24:45 GMT https://www.spinics.net/lists/netfilter-devel/msg93071.html https://www.spinics.net/lists/netfilter-devel/msg93000.html [PATCH nf-next 1/2] netfilter: nft_set_pipapo_avx2: split lookup function in two parts Wed, 17 Sep 2025 18:24:18 GMT https://www.spinics.net/lists/netfilter-devel/msg93000.html https://www.spinics.net/lists/netfilter-devel/msg93070.html [PATCH net-next v2 6/7] chtls: Convert to skb_dst_reset Wed, 17 Sep 2025 18:23:28 GMT https://www.spinics.net/lists/netfilter-devel/msg93070.html https://www.spinics.net/lists/netfilter-devel/msg93058.html [PATCH net-next v2 3/7] netfilter: Switch to skb_dstref_steal to clear dst_entry Wed, 17 Sep 2025 18:21:53 GMT https://www.spinics.net/lists/netfilter-devel/msg93058.html https://www.spinics.net/lists/netfilter-devel/msg93055.html Re: [PATCH nf-next] netfilter: ctnetlink: remove refcounting in dying list dumping Wed, 17 Sep 2025 18:20:28 GMT https://www.spinics.net/lists/netfilter-devel/msg93055.html https://www.spinics.net/lists/netfilter-devel/msg93054.html [PATCH net-next v2 0/7] net: Convert to skb_dstref_steal and skb_dstref_restore Wed, 17 Sep 2025 18:20:18 GMT https://www.spinics.net/lists/netfilter-devel/msg93054.html https://www.spinics.net/lists/netfilter-devel/msg93053.html Re: [PATCH nf-next v2 3/3] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 18:20:09 GMT https://www.spinics.net/lists/netfilter-devel/msg93053.html https://www.spinics.net/lists/netfilter-devel/msg93052.html Re: [PATCH nf-next v2 3/3] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 18:20:01 GMT https://www.spinics.net/lists/netfilter-devel/msg93052.html https://www.spinics.net/lists/netfilter-devel/msg93039.html Re: [nft PATCH 00/14] json: Do not reduce single-item arrays on output Wed, 17 Sep 2025 18:14:17 GMT https://www.spinics.net/lists/netfilter-devel/msg93039.html https://www.spinics.net/lists/netfilter-devel/msg93040.html [PATCH nf-next v2 0/3] netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch Wed, 17 Sep 2025 18:14:12 GMT https://www.spinics.net/lists/netfilter-devel/msg93040.html https://www.spinics.net/lists/netfilter-devel/msg93041.html [PATCH net-next v2] netfilter: nft_payload: Use csum_replace4() instead of opencoding Wed, 17 Sep 2025 18:14:09 GMT https://www.spinics.net/lists/netfilter-devel/msg93041.html https://www.spinics.net/lists/netfilter-devel/msg93036.html Re: [PATCH nft 1/2] evaluate: check XOR RHS operand is a constant value Wed, 17 Sep 2025 18:13:46 GMT https://www.spinics.net/lists/netfilter-devel/msg93036.html https://www.spinics.net/lists/netfilter-devel/msg93035.html Re: [PATCH nf-next 1/2] netfilter: nft_set_pipapo_avx2: split lookup function in two parts Wed, 17 Sep 2025 18:13:24 GMT https://www.spinics.net/lists/netfilter-devel/msg93035.html https://www.spinics.net/lists/netfilter-devel/msg93026.html [PATCH nft] fib: restore JSON output for relational expressions Wed, 17 Sep 2025 18:06:42 GMT https://www.spinics.net/lists/netfilter-devel/msg93026.html https://www.spinics.net/lists/netfilter-devel/msg92979.html Re: [PATCH net-next 1/6] netfilter: ctnetlink: remove refcounting in dying list dumping Wed, 17 Sep 2025 18:05:44 GMT https://www.spinics.net/lists/netfilter-devel/msg92979.html https://www.spinics.net/lists/netfilter-devel/msg92998.html Re: [nft PATCH 00/14] json: Do not reduce single-item arrays on output Wed, 17 Sep 2025 18:05:11 GMT https://www.spinics.net/lists/netfilter-devel/msg92998.html https://www.spinics.net/lists/netfilter-devel/msg92999.html Re: [PATCH] netfilter: conntrack: drop expectations before freeing templates Wed, 17 Sep 2025 18:04:27 GMT https://www.spinics.net/lists/netfilter-devel/msg92999.html https://www.spinics.net/lists/netfilter-devel/msg92984.html Re: [PATCH net] netfilter: br_netfilter: reread nf_conn from skb after confirm() Wed, 17 Sep 2025 18:04:16 GMT https://www.spinics.net/lists/netfilter-devel/msg92984.html https://www.spinics.net/lists/netfilter-devel/msg92967.html Re: [PATCH 1/7 nft v2] src: add tunnel template support Wed, 17 Sep 2025 17:58:38 GMT https://www.spinics.net/lists/netfilter-devel/msg92967.html https://www.spinics.net/lists/netfilter-devel/msg92966.html Re: [PATCH 1/2 libnftnl v3] tunnel: rework options Wed, 17 Sep 2025 17:58:31 GMT https://www.spinics.net/lists/netfilter-devel/msg92966.html https://www.spinics.net/lists/netfilter-devel/msg92993.html [PATCH net v2] netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm Wed, 17 Sep 2025 17:57:53 GMT https://www.spinics.net/lists/netfilter-devel/msg92993.html https://www.spinics.net/lists/netfilter-devel/msg92994.html Re: [PATCH nft] src: fix memory leak in anon chain error handling Wed, 17 Sep 2025 17:55:46 GMT https://www.spinics.net/lists/netfilter-devel/msg92994.html https://www.spinics.net/lists/netfilter-devel/msg92972.html Re: [PATCH nft-testing v3 1/2] netfilter: nft_set_pipapo*: Move FPU handling to pipapo_get_avx2() Wed, 17 Sep 2025 17:55:15 GMT https://www.spinics.net/lists/netfilter-devel/msg92972.html https://www.spinics.net/lists/netfilter-devel/msg93018.html [syzbot ci] Re: net: Convert to skb_dstref_steal and skb_dstref_restore Wed, 17 Sep 2025 17:54:47 GMT https://www.spinics.net/lists/netfilter-devel/msg93018.html https://www.spinics.net/lists/netfilter-devel/msg93014.html Re: [PATCH 1/7 nft v2] src: add tunnel template support Wed, 17 Sep 2025 17:52:43 GMT https://www.spinics.net/lists/netfilter-devel/msg93014.html https://www.spinics.net/lists/netfilter-devel/msg92965.html [PATCH] netfilter: conntrack: drop expectations before freeing templates Wed, 17 Sep 2025 17:50:35 GMT https://www.spinics.net/lists/netfilter-devel/msg92965.html https://www.spinics.net/lists/netfilter-devel/msg92968.html Re: [PATCH] netfilter: conntrack: drop expectations before freeing templates Wed, 17 Sep 2025 17:50:17 GMT https://www.spinics.net/lists/netfilter-devel/msg92968.html https://www.spinics.net/lists/netfilter-devel/msg92964.html Re: [nf-next 0/2] netfilter: nf_tables: make set flush more resistant to memory pressure Wed, 17 Sep 2025 17:48:58 GMT https://www.spinics.net/lists/netfilter-devel/msg92964.html https://www.spinics.net/lists/netfilter-devel/msg93004.html Re: [nf-next 0/2] netfilter: nf_tables: make set flush more resistant to memory pressure Wed, 17 Sep 2025 17:47:29 GMT https://www.spinics.net/lists/netfilter-devel/msg93004.html https://www.spinics.net/lists/netfilter-devel/msg92986.html Re: [PATCH 1/7 nft v2] src: add tunnel template support Wed, 17 Sep 2025 17:47:22 GMT https://www.spinics.net/lists/netfilter-devel/msg92986.html https://www.spinics.net/lists/netfilter-devel/msg93020.html Re: [PATCH] netfilter: conntrack: drop expectations before freeing templates Wed, 17 Sep 2025 17:47:05 GMT https://www.spinics.net/lists/netfilter-devel/msg93020.html https://www.spinics.net/lists/netfilter-devel/msg92988.html Re: [PATCH net-next v2 0/7] net: Convert to skb_dstref_steal and skb_dstref_restore Wed, 17 Sep 2025 17:45:53 GMT https://www.spinics.net/lists/netfilter-devel/msg92988.html https://www.spinics.net/lists/netfilter-devel/msg92991.html [PATCH net] netfilter: br_netfilter: reread nf_conn from skb after confirm() Wed, 17 Sep 2025 17:44:55 GMT https://www.spinics.net/lists/netfilter-devel/msg92991.html https://www.spinics.net/lists/netfilter-devel/msg92970.html Re: [PATCH net v2] netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm Wed, 17 Sep 2025 17:44:50 GMT https://www.spinics.net/lists/netfilter-devel/msg92970.html https://www.spinics.net/lists/netfilter-devel/msg92963.html Re: [PATCH] netfilter: conntrack: drop expectations before freeing templates Wed, 17 Sep 2025 17:44:36 GMT https://www.spinics.net/lists/netfilter-devel/msg92963.html https://www.spinics.net/lists/netfilter-devel/msg92962.html Re: [PATCH] netfilter: conntrack: drop expectations before freeing templates Wed, 17 Sep 2025 17:44:32 GMT https://www.spinics.net/lists/netfilter-devel/msg92962.html