[Bug 1736] nftables - dynamic update for verdict map from the packet path

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1736

--- Comment #11 from Pablo Neira Ayuso <pablo at netfilter.org> ---
This affinity map also needs to deal with two packets racing to set up the
affinity?

         chain endpoint-1 {
                 counter packets 2 bytes 224
                 update @affinity-mappings { ip saddr : 11.0.2.2 } meta l4proto
tcp dnat to 11.0.2.2 : 5001
                 # lost race, re-lookup to use existing mapping
                 meta l4proto tcp dnat to ip saddr map @affinity-mappings :
5001
                 # not found, should not ever happen
                 counter drop
         }

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20240321/bbfefec3/attachment.html>