From: Florian Westphal <fw@strlen.de>
To: Julian Anastasov <ja@ssi.bg>
Cc: Duan Jiong <djduanjiong@gmail.com>,
pablo@netfilter.org, netdev@vger.kernel.org,
lvs-devel@vger.kernel.org
Subject: Re: [PATCH] ipvs: skip ipvs snat processing when packet dst is not vip
Date: Tue, 20 May 2025 15:44:37 +0200 [thread overview]
Message-ID: <aCyHRcHJOhU9Ieih@strlen.de> (raw)
In-Reply-To: <df6af9cc-35ff-5c3e-3e67-ed2f93a17691@ssi.bg>
Julian Anastasov <ja@ssi.bg> wrote:
> But the following packet is different from your
> initial posting. Why client connects directly to the real server?
> Is it allowed to have two conntracks with equal reply tuple
> 192.168.99.4:8080 -> 192.168.99.6:15280 and should we support
> such kind of setups?
I don't even see how it would work, if you allow
C1 -> S
C2 -> S
... in conntrack and you receive packet from S, does that need to
go to C1 or C2?
Such duplicate CT entries are free'd (refused) at nf_confirm (
conntrack table insertion) time.
next prev parent reply other threads:[~2025-05-20 13:45 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-05-19 10:32 [PATCH] ipvs: skip ipvs snat processing when packet dst is not vip Duan Jiong
2025-05-19 20:11 ` Julian Anastasov
2025-05-20 1:52 ` Duan Jiong
2025-05-20 13:27 ` Julian Anastasov
2025-05-20 13:44 ` Florian Westphal [this message]
2025-05-21 2:04 ` Duan Jiong
2025-05-21 2:01 ` Duan Jiong
2025-05-20 7:14 ` kernel test robot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=aCyHRcHJOhU9Ieih@strlen.de \
--to=fw@strlen.de \
--cc=djduanjiong@gmail.com \
--cc=ja@ssi.bg \
--cc=lvs-devel@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.