Re: [PATCH nft v3] src: add connlimit stateful object support

[Phil Sutter <phil@nwl.cc>]

On Mon, Nov 24, 2025 at 06:35:57PM +0100, Fernando Fernandez Mancera wrote:
> Add support for "ct count" stateful object. E.g
> 
> table ip mytable {
> 	ct count ssh-connlimit { until 4 }
> 	ct count http-connlimit { over 1000 }
>         chain mychain {
>                 type filter hook input priority filter; policy accept;
>                 ct count name tcp dport map { 22 : "ssh-connlimit", 80 : "http-connlimit" } meta mark set 0x1
>         }
> }
> 
> The kernel code has been there for a long time but never used.
> 
> Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>

Reviewed-by: Phil Sutter <phil@nwl.cc>

Thanks, Phil