<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - nftables - dynamic update for verdict map from the packet path"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1736#c7">Comment # 7</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - nftables - dynamic update for verdict map from the packet path"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1736">bug 1736</a>
from <span class="vcard"><a class="email" href="mailto:dinhtrason@gmail.com" title="dinhtrason@gmail.com">dinhtrason@gmail.com</a>
</span></b>
<pre>
<span class="quote">> Can you use the conntrack mark (instead of the packet mark)?
>
> Looking at your ruleset, that makes sense to me, because this also allows to
> debug via `conntrack -L' what endpoint has being selected for a given flow,
> also for netfilter logging as well as `conntrack -E' for event reporting.
>
> You do use conntrack, because I can see 'dnat to' is used in your ruleset
> after the endpoint is selected based on the affinity, note that the stateful
> NAT engine requires conntrack.
> </span >
That makes sense.
<span class="quote">> I have attached a sketch ruleset I build from your link, I mangled it to use
> ct mark.</span >
Thanks for your quick reply. I'll give it a try.
<span class="quote">> vm-001 ~ # nft --file /tmp/test.txt
> /tmp/test.txt:17:70-73: Error: syntax error, unexpected vmap
> add rule ip loadbalancer service-ABC ip saddr map @affinity-mappings vmap @epToChain</span >
BTW, I had a commit to support the case. Could you please let me know how I can
send the patch? I refer to the guide
<a href="https://wiki.nftables.org/wiki-nftables/index.php/Portal:DeveloperDocs/Patch_submission_guidelines">https://wiki.nftables.org/wiki-nftables/index.php/Portal:DeveloperDocs/Patch_submission_guidelines</a>,
but could not see the email address that I can send the patch to.
Thanks!</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>