netfilter: conntrack: use a single expectation table for all namespaces
We already include netns address in the hash and compare the netns pointers during lookup, so even if namespaces have overlapping addresses entries will be spread across the expectation table. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:

committed by
Pablo Neira Ayuso

parent
a9a083c387
commit
0a93aaedc4
@@ -94,7 +94,6 @@ struct netns_ct {
|
||||
int sysctl_checksum;
|
||||
|
||||
struct kmem_cache *nf_conntrack_cachep;
|
||||
struct hlist_head *expect_hash;
|
||||
struct ct_pcpu __percpu *pcpu_lists;
|
||||
struct ip_conntrack_stat __percpu *stat;
|
||||
struct nf_ct_event_notifier __rcu *nf_conntrack_event_cb;
|
||||
|
Reference in New Issue
Block a user