Received: by 2002:a05:6a10:6744:0:0:0:0 with SMTP id w4csp2300220pxu; Fri, 9 Oct 2020 13:04:03 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzC+tKxtaKJvXcNg0yBL+u+klE0XFlTOOZ8CQBLkThodWFmYqKI6Oa+0GIlFBk/tJy88XcN X-Received: by 2002:a17:906:7f8c:: with SMTP id f12mr16506955ejr.8.1602273843622; Fri, 09 Oct 2020 13:04:03 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1602273843; cv=none; d=google.com; s=arc-20160816; b=v3nMteUCxbNHUJFIyRYYS0GtutLu9Zrfwc/J1mzmq76Mgjir8DTfWnGOIlGbCtbQa1 36jtvny/BFymXpeYbRmJbW3cgTRfhMbRvAvi8oToni7lLRpxcRdq8+yEAnn/fnDRTL28 A4h1Dvi9BxiiJS6eK6NtQbqyD0Zz12P1qC+RTzSWq1O3wuLcI/jXS048km7HHcyylgp2 T00gODDGU6H3NEoWv1NMGXNxwdwU12AZQn7MvPr9gGpM3XwiMV0ALxx52OS7Lp9hvZSJ Yr7hKgFSBJ+1SrM1Wn11YdHZS697nc0Dr36Ic9DFlSFv/BZ+BME6xxtkWjbmqJf5j8i2 9bAA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=2qC/FqQbzG5/8jBosr6Y+NLl7/pG/587C+U8/pqT5iw=; b=S4JrtSHxX7J6pDHsLNmZtxJ3gdW2KCSJ7AymOQI6gfIchc3aKBREUho9sXyjbjY32V xP4T+qvJame3dDl+hnrVFTSGVCC5pN5jr8eHMUHOzdJvgtRzSVavf8MhccDEu26uTbUz e2JhndqyMVR7ldHmfAsN1FoOR7v06Zd+UcyxriUV6S98qDxi/xS+S6maa9z8AuugtMtX Dl0EKgGTaI2lZ8m7lMTJ0jX5flyVdZkXPKQdQLHjEAJi0WTel502P6LS7HmXYCIT2IqB LC8++dkCq160kEOdaZCpBVniJUQ9SHHvAxT5W/82BNHbF4T2Q13QWkzBdXXI0UuuB/Ey DfdQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@arista.com header.s=googlenew header.b=RRUTeULR; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=arista.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id n10si6321179ejb.405.2020.10.09.13.03.40; Fri, 09 Oct 2020 13:04:03 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@arista.com header.s=googlenew header.b=RRUTeULR; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=arista.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1732677AbgJIUCs (ORCPT + 99 others); Fri, 9 Oct 2020 16:02:48 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48518 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2388755AbgJIUAt (ORCPT ); Fri, 9 Oct 2020 16:00:49 -0400 Received: from mail-qv1-xf42.google.com (mail-qv1-xf42.google.com [IPv6:2607:f8b0:4864:20::f42]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 161C3C0613DA for ; Fri, 9 Oct 2020 13:00:33 -0700 (PDT) Received: by mail-qv1-xf42.google.com with SMTP id t6so1236028qvz.4 for ; Fri, 09 Oct 2020 13:00:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arista.com; s=googlenew; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=2qC/FqQbzG5/8jBosr6Y+NLl7/pG/587C+U8/pqT5iw=; b=RRUTeULREpVOpNCQWXgAIZtaaHU8E5Qq14J1066Xjyg4JyW+HUwF9cBse1Bm1R4yvF odnAPK0J/+XH5En6zvKFETGOP1FMbcrshZcR4wRbd0JMtk2CJfn9aGg5UNteTQysd1FJ S3euxOGxf2xPj1vwUUU2L+IztRLTks0tkt1bWKWHHOCklQliwV5W67dfYAWKVunbtxfi j28syp4AXrV/3kw8gQNOTUgNLA6WjIhFU6TNExHEV6kET3+rFz5mYpN+8kd7pWnBwVoS zMXfZjguwobHwKpMm5I/i8fOhAeRaU4YfcBNFouYTO3atevtpgWq6lDkTu7XR39ArfeS YDWA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=2qC/FqQbzG5/8jBosr6Y+NLl7/pG/587C+U8/pqT5iw=; b=gB7rQNBjZIi/2qzZvbXOhAbOjMvaR8teGHrwozRsgU7iicKslXgyjML2lFRnlld1nK phXgyeWtn6KUM7Uh+vx8tWtEZTD4Paaoe04yt55tsZ4YxpP4zrTMc7vVJ288GKYci/de QsXRaqwQGsV6QSbRZGR8+jPaDAyolnR+FBbEIDqPg+mxz3ed/e4S+POlMFrHlKINpz39 b/2Sgvs33EI/KEQfjE0MtaOWyAbChUXBK40x7iR6GiP8wz6NPwOb+0QIs4BcuxP1Wry+ 1x6uIt5zPknmdVBCQVQUxFmf3BGecl19YFpmnLAJacKuZ6JLER7YYoGeLTAoiAb2HXPe SDAg== X-Gm-Message-State: AOAM530vujI1q+sXM4WuGwAQ2g4D/dbvuegQeQaJtmMeAo/+VnxK8vN2 EZYSmjgC6tjeDPSid2nLDzyRl1LaxH8UAyrDg8CNOg== X-Received: by 2002:a0c:9a4e:: with SMTP id q14mr14190214qvd.22.1602273632019; Fri, 09 Oct 2020 13:00:32 -0700 (PDT) MIME-Version: 1.0 References: <20201007193252.7009D95C169C@us180.sjc.aristanetworks.com> <20201009110323.GC5723@breakpoint.cc> <20201009185552.GF5723@breakpoint.cc> In-Reply-To: From: Francesco Ruggeri Date: Fri, 9 Oct 2020 13:00:21 -0700 Message-ID: Subject: Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register To: Jozsef Kadlecsik Cc: Florian Westphal , open list , netdev , coreteam@netfilter.org, netfilter-devel@vger.kernel.org, Jakub Kicinski , David Miller , Pablo Neira Ayuso Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Oct 9, 2020 at 12:49 PM Jozsef Kadlecsik wrote: > What is the rationale behind "remove the conntrack hooks when there are no > rule left referring to conntrack"? Performance optimization? That seems to be the case. See commit 4d3a57f23dec ("netfilter: conntrack: do not enable connection tracking unless needed"). Francesco