netdev - Re: [PATCH net-next v4 2/2] openvswitch: Add timeout support to ct action

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Thu, 28 Mar 2019 16:53:51 -0700 (PDT)
From:   David Miller <davem@...emloft.net>
To:     yihung.wei@...il.com
Cc:     netdev@...r.kernel.org, pshelar@....org, pablo@...filter.org
Subject: Re: [PATCH net-next v4 2/2] openvswitch: Add timeout support to ct
 action

From: Yi-Hung Wei <yihung.wei@...il.com>
Date: Tue, 26 Mar 2019 11:31:14 -0700

> Add support for fine-grain timeout support to conntrack action.
> The new OVS_CT_ATTR_TIMEOUT attribute of the conntrack action
> specifies a timeout to be associated with this connection.
> If no timeout is specified, it acts as is, that is the default
> timeout for the connection will be automatically applied.
> 
> Example usage:
> $ nfct timeout add timeout_1 inet tcp syn_sent 100 established 200
> $ ovs-ofctl add-flow br0 in_port=1,ip,tcp,action=ct(commit,timeout=timeout_1)
> 
> CC: Pravin Shelar <pshelar@....org>
> CC: Pablo Neira Ayuso <pablo@...filter.org>
> Signed-off-by: Yi-Hung Wei <yihung.wei@...il.com>
> ---
> v1-> v2: Utilize nf_ct_set_timeout().
> v2-> v4: No change in this patch, the build issue is resolved by patch 1.

Applied.