Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Thu, 23 Mar 2023 15:33:38 +0100
From:   Simon Horman <simon.horman@corigine.com>
To:     Paul Blakey <paulb@nvidia.com>
Cc:     Pablo Neira Ayuso <pablo@netfilter.org>,
        Jozsef Kadlecsik <kadlec@netfilter.org>,
        Florian Westphal <fw@strlen.de>,
        netfilter-devel@vger.kernel.org, Oz Shlomo <ozsh@nvidia.com>,
        Roi Dayan <roid@nvidia.com>, Vlad Buslov <vladbu@nvidia.com>,
        Saeed Mahameed <saeedm@nvidia.com>,
        "David S. Miller" <davem@davemloft.net>,
        Eric Dumazet <edumazet@google.com>,
        Jakub Kicinski <kuba@kernel.org>,
        Paolo Abeni <pabeni@redhat.com>, coreteam@netfilter.org,
        netdev@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: Re: [PATCH nf-next 1/1] netfilter: ctnetlink: Support offloaded
 conntrack entry deletion
Message-ID: <ZBxjQjfLRwayvVKm@corigine.com>
References: <1679470532-163226-1-git-send-email-paulb@nvidia.com>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1679470532-163226-1-git-send-email-paulb@nvidia.com>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?QzRTNLzG/fMBrftGcuS2/BWeORQLzlONKfuBcBBBJAQ9Hj3h6FgzGi5cnxUT?=
 =?us-ascii?Q?Bb4B7aM5snNHm1OAtlZ+0cehidE8/+W02F2pM/zloAPy59GS31DtOCxC6BUR?=
 =?us-ascii?Q?AxHjnj6zK/cjtwpECOPGzmD3rrbzhOLKWqf3/wdwyOepjtR31AuOujxXN+Up?=
 =?us-ascii?Q?wOG+5fxDWkgV0XUvBUKTlcWq4d9JZB/7pn78f62tpu5Rs5GgjcdyxN76nZ8Z?=
 =?us-ascii?Q?mo5vc4K1oaS8RRAjaw8T0hktUSeyftRlHRQy6iM2wdO5VDCuyT/9CCvD4MXW?=
 =?us-ascii?Q?1R6HUGd1MpBFdGgy10d5PDjDee3y+GWbfeDnRi1dwFF84xT8D4K2E1ND/7LK?=
 =?us-ascii?Q?1nC17t7saD6r1opjhwXKPpigcCy0KP9EYy6H7xOMxfTAyXmtEOPHb3tSM5kC?=
 =?us-ascii?Q?rjFEIQo4rHBvD8/kswADim0hZssBcoMJO1uxu3hzDwN7G1ibkscDqUQehjSh?=
 =?us-ascii?Q?JWDuMxScoWbzkEzXAIaTzTaSgEClMtjT6V1Gk5DRnfwhrP1SHA9vZJ4+0/6S?=
 =?us-ascii?Q?wPylvZqdpYOMxvMokomEmE9FUmQ5/nEO5zF1H2jB3g4UPpInZOgsOX+gWib2?=
 =?us-ascii?Q?Ru/TkgM2J3AwFBPX9NdIfVkpx2XtNuTdFm2i5oe5JZJxF8AYjEOgVGMcDT2n?=
 =?us-ascii?Q?jcbi4L65/L7WF7/MPPlhV9fbAOup9ki3bCQeby/D7174liMbxS4awAmxXKGe?=
 =?us-ascii?Q?KOOAVxgflcDRnxlwXgN5jmU59zr9k0SPz0k4132Qf7ImpzIROuR5G9BskaH3?=
 =?us-ascii?Q?3pczPDpsCNQsFhNLarXcTq3twrLNXbqyWR3R9I/nbTkwK8YWOS4NrVABg5Ge?=
 =?us-ascii?Q?j1LzOxsaqW1bUt8U/ePvKNwjiyCGdaiSxnOW73gHbQU69PtcNmbMYkH/87vE?=
 =?us-ascii?Q?d/L6PAhl7TQvU4UEeGlWAX/4Y+P6/WxiKrhUpHiG2ZvqSK4kzwhdjsYfQzkX?=
 =?us-ascii?Q?zq+yQ3DlSPTvpS1uvgQErYCO2Ty5d60XBKqXH6glxp9ejmHkZA6gJJ+OjtzZ?=
 =?us-ascii?Q?ELJ+sjS+z+Dnw7jxh2MaPbwQR/GyggoTdqKiDCxkGdJQIwzajW1n1qUwDWQj?=
 =?us-ascii?Q?j30x0Kw1UqguCGo/HBbCYFipLM5A3O1CNqjN+z4MnANHjsGDBTNsDjOMj/8F?=
 =?us-ascii?Q?aOgH3deDJNQd6w2QkeVU/jZ2KNQNzWUoD81q4LJY3vbsjGad8S4ZBgWJFuRv?=
 =?us-ascii?Q?F8+syzwCOPNdg2nYejBRUlCcCN2nYyoHLS1Nmt5vXfDbfdEZuHwWoEfBeNab?=
 =?us-ascii?Q?ct+u30lLJgVDwFOWOCyv7dXfBHT7KWBAzc2U9tYbKun8295hC7z8esbGDsXG?=
 =?us-ascii?Q?/IhrsIJicNWBCwGyL/z337H9flFfpomAQwZp01iWYdbD7QJUR2xAOVdyZVLa?=
 =?us-ascii?Q?om8QZR5j9rKMv7Vdv9FD440hzeBUG10zVg/RdxxvikWiZXOnxY/5zCc9/s9Y?=
 =?us-ascii?Q?TeFRG1ODBQ+jNPor/3GApWyuYkgi7l1aI9kUtadL3zdTFzr86fDagV5C/MGG?=
 =?us-ascii?Q?BB9LJxyv8jiI4PPW9Us1hpiUxlGdH5dyvAnOyVwkimyKNavDPsJ5rQhGCzmX?=
 =?us-ascii?Q?aQ7rxx3+eJS0SeKdEt7nIQwasUlkXOTlnp4XWwQtWjvKuFCdC+sCe72M17Td?=
 =?us-ascii?Q?mfYPQoDXpEGlDD5QMh8/eqjFVK9ejOtWSd8bqaZD9LRqH+HGFUpMe2BS7QJp?=
 =?us-ascii?Q?3S1qyQ=3D=3D?=
X-OriginatorOrg: corigine.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 77015f8b-ec5d-45c4-678d-08db2bab9b68
X-MS-Exchange-CrossTenant-AuthSource: PH0PR13MB4842.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Mar 2023 14:33:45.2321
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: fe128f2c-073b-4c20-818e-7246a585940c
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: TM5KwQQvoRDHzw34Iur8UeuS9ThwDXw1fghxs+mtN/nfVBWwS82r7V1v8KgTadaHTOojlj7F6/fIi9XcIIpTDZ/fkdkxNPmWY/sEjS62w6Q=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR13MB4871
X-Spam-Status: No, score=-0.0 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
        RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS
        autolearn=unavailable autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Wed, Mar 22, 2023 at 09:35:32AM +0200, Paul Blakey wrote:
> Currently, offloaded conntrack entries (flows) can only be deleted
> after they are removed from offload, which is either by timeout,
> tcp state change or tc ct rule deletion. This can cause issues for
> users wishing to manually delete or flush existing entries.
> 
> Support deletion of offloaded conntrack entries.
> 
> Example usage:
>  # Delete all offloaded (and non offloaded) conntrack entries
>  # whose source address is 1.2.3.4
>  $ conntrack -D -s 1.2.3.4
>  # Delete all entries
>  $ conntrack -F
> 
> Signed-off-by: Paul Blakey <paulb@nvidia.com>

Reviewed-by: Simon Horman <simon.horman@corigine.com>