Message ID | 20200803073305.702079-1-roid@mellanox.com |
---|---|
Headers | show |
Series | netfilter: conntrack: Fix CT offload timeout on heavily loaded systems | expand |
On Mon, Aug 03, 2020 at 10:33:03AM +0300, Roi Dayan wrote: > On heavily loaded systems the GC can take time to go over all existing > conns and reset their timeout. At that time other calls like from > nf_conntrack_in() can call of nf_ct_is_expired() and see the conn as > expired. To fix this when we set the offload bit we should also reset > the timeout instead of counting on GC to finish first iteration over > all conns before the initial timeout. > > First commit is to expose the function that updates the timeout. > Second commit is to use it from flow_offload_add(). Series applied to nf.git, thanks.