From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from Chamillionaire.breakpoint.cc (Chamillionaire.breakpoint.cc [91.216.245.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3AFED304968; Wed, 28 Jan 2026 15:54:42 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=91.216.245.30 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769615684; cv=none; b=h3WFLCFfIaEJ2+8OPqNCfmAOqwkXLhA+R5Pp1RZjoKn/JufK/rJvQaZs6PGnHw+RIN8ckQTH8xLCTsVYdlP5W3yeiAKSZaYqKZCTa6wn1zkBRV/slyON49YsKdK6i8k5b3w+nXxnexrmFFwilqwZn4EWXtwkgz2OnmIQp4qhVLQ= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769615684; c=relaxed/simple; bh=qUS9d/ckayBRL8ZTvLaQC3nCL6OtpqBjZM0ezsHILbU=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=i/WaOP0i25omY7b/w5nMDsGa4krjUeCDXgIjvLk+6xlss/X8uouBFTngVYeUtj7IlC6ap+e2cOFsU2oTabAoLzZRAwAo0X36+sDLC75ev4k6p14DjlVsvh/yPCLyRhLVoxJD6OzfnoaF+Gg34n7OzOrrIUhg0pOanKpQepzGt9M= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=strlen.de; spf=pass smtp.mailfrom=strlen.de; arc=none smtp.client-ip=91.216.245.30 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=strlen.de Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=strlen.de Received: by Chamillionaire.breakpoint.cc (Postfix, from userid 1003) id 8D994605E7; Wed, 28 Jan 2026 16:54:40 +0100 (CET) Date: Wed, 28 Jan 2026 16:54:41 +0100 From: Florian Westphal To: Eric Woudstra Cc: Pablo Neira Ayuso , netfilter-devel@vger.kernel.org, netdev@vger.kernel.org, bridge@lists.linux.dev, Simon Horman , Paolo Abeni , Jakub Kicinski , Phil Sutter , Ido Schimmel , Nikolay Aleksandrov , Eric Dumazet , "David S. Miller" , Jozsef Kadlecsik Subject: Re: [PATCH v17 nf-next 0/4] conntrack: bridge: add double vlan, pppoe and pppoe-in-q Message-ID: References: <20251109192427.617142-1-ericwouds@gmail.com> <6d77bdc4-a385-43bf-a8a5-6787f99d2b7d@gmail.com> Precedence: bulk X-Mailing-List: netdev@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6d77bdc4-a385-43bf-a8a5-6787f99d2b7d@gmail.com> Eric Woudstra wrote: > > include/net/netfilter/nf_tables_ipv4.h | 21 +++-- > > include/net/netfilter/nf_tables_ipv6.h | 21 +++-- > > net/bridge/netfilter/nf_conntrack_bridge.c | 92 ++++++++++++++++++---- > > net/netfilter/nft_chain_filter.c | 59 ++++++++++++-- > > net/netfilter/utils.c | 28 +++++-- > > 5 files changed, 176 insertions(+), 45 deletions(-) > > > > Can I kindly ask, what is the status of this patch-set? Rotting, sorry. At this time most of the patchwork queue management is done by me, there are several other patchsets also vying for attention and syzbot just reported UaF regression in rbtree, so I will be busy with that for a while. I decided to defer this: 1. There were no other 'Please lets apply this' reviews so far 2. We are close to a new kernel release, hence time window to accept features as opposed to fixes is shrinking. 3. You patchset changes how packets get processed both by conntrack and nf_tables bridge family. Yes, its done as-advertised but still, this has known impact. Hence I would prefer to apply this early in the cycle not at the last minute. Futhermore its a change that, if it causes issues down the road, might back us into a corner where we can neither fix things in a backwards compatible way without breaking the new feature. In case there is no further feedback by the time the next development cycle starts I will apply this series as-is (or ask for a rebase in case its no longer applicable). I apologize for the inconvenience.