From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C733B4CF49B; Sat, 17 Oct 2026 16:59:48 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1792256389; cv=none; b=DXpE1rg5Rj/I7OtkRDSSXO5dRycK+0WktOkhUPkth6JAbTSri+LWJvJ8G1eHt1HuQvu4IYXUrd+Tkd23WZIfDFTIOUnnY8iUgk7SLc6oJ5OeAiruQ5gg5QrnynPBomH10Sd5XbNo3hRzja4mJvf5urNlI7N9RFFy4dJuwF4VvFE= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1792256389; c=relaxed/simple; bh=Es3AloTv7ayWRTvy4EDIWYIPSvMMz4HjBtGlLGY9inU=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=Yc7G9WsvIU9pYsRTEh7ITjNBGbu9GISCxhZMQFZWkcOF9ZGap2GHBA+856t+/RFUhm/I0+6qIpXsw8yVO35jtpxS0w+Nkat/WL3wQcbne+s/FotepaitB897zks8ieoYrpKCLoF8WTSow1SbfXjn6A66KDHLVvAohp95MnuZhJw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=FEYqwL/A; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="FEYqwL/A" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 2B17A1F000C4; Sat, 17 Oct 2026 16:59:47 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1792256388; bh=tcLq/eQ9bpM6IOf6vYCtgaYdc+z6YVUrDAQRm9Mv2Qo=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=FEYqwL/AsUiO0zLqlkB4MaW/ye4mH9Y/uKw/AOt/nbanYADtieD4/7EsI3+PTdHm+ a5JnLIvbrm+J6BGccVdzwPociVIRfxd/L8Y8lQYJJSJy06xW3GbS/WUMM/VFQFmoEJ pvZPtq5K+ZRIDF7YvjrhatbOFhwDZXdg5Wk2ro+k= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, Julian Anastasov , Pablo Neira Ayuso , Sasha Levin Subject: [PATCH 6.6 0221/1674] ipvs: do not create invisible templates Date: Sat, 17 Oct 2026 17:41:33 +0200 Message-ID: <20261017160436.819485962@linuxfoundation.org> X-Mailer: git-send-email 2.56.0 In-Reply-To: <20261017160431.119607952@linuxfoundation.org> References: <20261017160431.119607952@linuxfoundation.org> User-Agent: quilt/0.69 X-stable: review X-Patchwork-Hint: ignore Precedence: bulk X-Mailing-List: patches@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit 6.6-stable review patch. If anyone has any objections, please let me know. ------------------ From: Julian Anastasov [ Upstream commit 616cf5c06934364ab1002b420ebe975850b4b208 ] The IP_VS_CONN_F_ONE_PACKET flag was implemented for normal connections. When conn template inherits this flag from dest->conn_flags it will not be hashed. As result, we will create new template for every new normal connection. Fix it to allow one template to be used by many normal connections. Fixes: 26ec037f9841 ("IPVS: one-packet scheduling") Link: https://netdev-ai.bots.linux.dev/sashiko/#/patchset/20260916231652.127456-1-pablo%40netfilter.org Signed-off-by: Julian Anastasov Signed-off-by: Pablo Neira Ayuso Signed-off-by: Sasha Levin --- net/netfilter/ipvs/ip_vs_conn.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/netfilter/ipvs/ip_vs_conn.c b/net/netfilter/ipvs/ip_vs_conn.c index f0a00e902450b..252fb49c36d07 100644 --- a/net/netfilter/ipvs/ip_vs_conn.c +++ b/net/netfilter/ipvs/ip_vs_conn.c @@ -590,6 +590,9 @@ ip_vs_bind_dest(struct ip_vs_conn *cp, struct ip_vs_dest *dest) if (cp->protocol != IPPROTO_UDP) conn_flags &= ~IP_VS_CONN_F_ONE_PACKET; flags = cp->flags; + /* Only visible templates can control multiple connections */ + if (flags & IP_VS_CONN_F_TEMPLATE) + conn_flags &= ~IP_VS_CONN_F_ONE_PACKET; /* Bind with the destination and its corresponding transmitter */ if (flags & IP_VS_CONN_F_SYNC) { /* Synced conns are hashed, so they can not get this flag */ -- 2.53.0