diff options
| author |   Huajian Yang <huajianyang@asrmicro.com> | 2025-04-17 17:29:53 +0800 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2025-05-05 13:13:08 +0200 |
| commit | aa04c6f45b9224b949aa35d4fa5f8d0ba07b23d4 (patch) | |
| tree | 84955fd7e07c5cc802e1bf2ecad2389053d6b729 /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | ipv4: Honor "ignore_routes_with_linkdown" sysctl in nexthop selection (diff) | |
| download | wireguard-linux-aa04c6f45b9224b949aa35d4fa5f8d0ba07b23d4.tar.xz wireguard-linux-aa04c6f45b9224b949aa35d4fa5f8d0ba07b23d4.zip | |
netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
The config NF_CONNTRACK_BRIDGE will change the bridge forwarding for
fragmented packets.
The original bridge does not know that it is a fragmented packet and
forwards it directly, after NF_CONNTRACK_BRIDGE is enabled, function
nf_br_ip_fragment and br_ip6_fragment will check the headroom.
In original br_forward, insufficient headroom of skb may indeed exist,
but there's still a way to save the skb in the device driver after
dev_queue_xmit.So droping the skb will change the original bridge
forwarding in some cases.
Fixes: 3c171f496ef5 ("netfilter: bridge: add connection tracking system")
Signed-off-by: Huajian Yang <huajianyang@asrmicro.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions