Florian Westphal 4d3a57f23d netfilter: conntrack: do not enable connection tracking unless needed ... Discussion during NFWS 2017 in Faro has shown that the current conntrack behaviour is unreasonable. Even if conntrack module is loaded on behalf of a single net namespace, its turned on for all namespaces, which is expensive. Commit 481fa37347 ("netfilter: conntrack: add nf_conntrack_default_on sysctl") attempted to provide an alternative to the 'default on' behaviour by adding a sysctl to change it. However, as Eric points out, the sysctl only becomes available once the module is loaded, and then its too late. So we either have to move the sysctl to the core, or, alternatively, change conntrack to become active only once the rule set requires this. This does the latter, conntrack is only enabled when a rule needs it. Reported-by: Eric Dumazet <edumazet@google.com> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2017-07-31 20:42:00 +02:00
..
acpi	More ACPI updates for v4.13-rc1	2017-07-10 15:19:40 -07:00
asm-generic	Merge branch 'work.uaccess-unaligned' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-15 11:17:52 -07:00
clocksource
crypto
drm	i915, amd and some core fixes + mediatek color support	2017-07-13 11:26:18 -07:00
dt-bindings	Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus	2017-07-15 10:59:54 -07:00
keys
kvm
linux	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-07-21 03:38:43 +01:00
math-emu
media	main drm pull for v4.13	2017-07-09 18:48:37 -07:00
memory
misc	cxl: Export library to support IBM XSL	2017-07-03 23:07:03 +10:00
net	netfilter: conntrack: do not enable connection tracking unless needed	2017-07-31 20:42:00 +02:00
pcmcia
ras	trace, ras: add ARM processor error trace event	2017-06-22 18:22:05 +01:00
rdma	IB/core: Remove NOIO QP create flag	2017-07-17 21:21:24 -04:00
rxrpc
scsi	Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending	2017-07-13 14:27:32 -07:00
soc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-07-05 12:31:59 -07:00
sound	ASoC: Updates for v4.13	2017-07-03 19:51:42 +02:00
target	iscsi-target: Add login_keys_workaround attribute for non RFC initiators	2017-07-11 10:56:39 -07:00
trace	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-07-21 03:38:43 +01:00
uapi	netfilter: nf_tables: Allow object names of up to 255 chars	2017-07-31 20:41:59 +02:00
video
xen	This is the first pull request for the new dma-mapping subsystem	2017-07-06 19:20:54 -07:00