[Bug 1736] nftables - dynamic update for verdict map from the packet path

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1736

--- Comment #13 from dinhtrason at gmail.com ---
(In reply to Pablo Neira Ayuso from comment #11)
> This affinity map also needs to deal with two packets racing to set up the
> affinity?
> 
>          chain endpoint-1 {
>                  counter packets 2 bytes 224
>                  update @affinity-mappings { ip saddr : 11.0.2.2 } meta
> l4proto tcp dnat to 11.0.2.2 : 5001
>                  # lost race, re-lookup to use existing mapping
>                  meta l4proto tcp dnat to ip saddr map @affinity-mappings :
> 5001
>                  # not found, should not ever happen
>                  counter drop
>          }

I did not even think about the race condition. Thanks for highlighting this
special case.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20240321/c79a35d9/attachment.html>