diff options
| author |   Fernando Fernandez Mancera <fmancera@suse.de> | 2026-03-30 17:19:34 +0200 |
|---|---|---|
| committer |   Florian Westphal <fw@strlen.de> | 2026-04-10 12:16:26 +0200 |
| commit | 84dee05d9d61884ee0986f5b4f3d69886f7dfeb0 (patch) | |
| tree | 85e6576a2329fac390dbd56aaca5cefad87e9837 /include/linux/soc/apple/git:/git.zx2c4.com/ssh:/git@git.zx2c4.com | |
| parent | netfilter: xt_socket: enable defrag after all other checks (diff) | |
netfilter: conntrack: remove UDP-Lite conntrack support
UDP-Lite (RFC 3828) socket support was recently retired from the core
networking stack. As a follow-up of that, drop the connection tracker
and NAT support for UDP-Lite in Netfilter.
This patch removes CONFIG_NF_CT_PROTO_UDPLITE and scrubs UDP-Lite
awareness from the conntrack core, NAT core, nft_ct, and ctnetlink.
Please note that stateless packet inspection, matching, ipsets or
logging support for IPPROTO_UDPLITE is preserved.
As conntrack no longer extracts UDP-Lite ports or tracks its L4 state,
when performing NAT the UDP-Lite checksum cannot be updated anymore.
That is an expected and acceptable consequence of removing UDP-Lite
conntrack module.
Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'include/linux/soc/apple/git:/git.zx2c4.com/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions