Re: [PATCH nf] netfilter: restore default behavior for nf_conntrack_events

Florian Westphal
2024-06-06T08:53:54Z

Nicolas Dichtel <nicolas.dichtel@6wind.com> wrote:
> I understand it's "sad" to keep nf_conntrack_events=1, but this change breaks
> the backward compatibility. A container migrated to a host with a recent kernel
> is broken.
> Usually, in the networking stack, sysctl are added to keep the legacy behavior
> and enable new systems to use "modern" features. There are a lot of examples :)

Weeks of work down the drain. I wonder if we can make any changes aside
from bug fixes in the future.