Pablo Neira Ayuso c80f10bc97 netfilter: nf_conncount: speculative garbage collection on empty lists ...

Instead of removing a empty list node that might be reintroduced soon
thereafter, tentatively place the empty list node on the list passed to
tree_nodes_free(), then re-check if the list is empty again before erasing
it from the tree.

[ Florian: rebase on top of pending nf_conncount fixes ]

Fixes: 5c789e131c ("netfilter: nf_conncount: Add list lock and gc worker, and RCU for init tree search")
Reviewed-by: Shawn Bohrer <[email protected]>
Signed-off-by: Florian Westphal <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>

2018-12-29 02:45:22 +01:00

..

ipv4

netfilter: add missing error handling code for register functions

2018-11-27 00:35:19 +01:00

ipv6

netfilter: add missing error handling code for register functions

2018-11-27 00:35:19 +01:00

br_netfilter.h

net: convert bridge_nf to use skb extension infrastructure

2018-12-19 11:21:37 -08:00

nf_conntrack_acct.h

netfilter: conntrack: remove empty pernet fini stubs

2018-12-21 00:51:54 +01:00

nf_conntrack_core.h

netfilter: conntrack: pass nf_hook_state to packet and error handlers

2018-09-20 17:54:37 +02:00

nf_conntrack_count.h

netfilter: nf_conncount: speculative garbage collection on empty lists

2018-12-29 02:45:22 +01:00

nf_conntrack_ecache.h

netfilter: conntrack: remove empty pernet fini stubs

2018-12-21 00:51:54 +01:00

nf_conntrack_expect.h

…

nf_conntrack_extend.h

…

nf_conntrack_helper.h

netfilter: conntrack: remove empty pernet fini stubs

2018-12-21 00:51:54 +01:00

nf_conntrack_l4proto.h

netfilter: conntrack: add nf_{tcp,udp,sctp,icmp,dccp,icmpv6,generic}_pernet()

2018-11-03 13:28:02 +01:00

nf_conntrack_labels.h

…

nf_conntrack_seqadj.h

…

nf_conntrack_synproxy.h

…

nf_conntrack_timeout.h

netfilter: nf_tables: rework ct timeout set support

2018-08-29 13:04:38 +02:00

nf_conntrack_timestamp.h

netfilter: conntrack: remove empty pernet fini stubs

2018-12-21 00:51:54 +01:00

nf_conntrack_tuple.h

…

nf_conntrack_zones.h

…

nf_conntrack.h

netfilter: conntrack: udp: only extend timeout to stream mode after 2s

2018-12-21 00:48:38 +01:00

nf_dup_netdev.h

…

nf_flow_table.h

netfilter: nf_flow_table: make nf_flow_table_iterate() static

2018-11-12 16:40:55 +01:00

nf_log.h

netfilter: check if the socket netns is correct.

2018-06-28 22:21:32 +09:00

nf_nat_core.h

netfilter: add struct nf_nat_hook and use it

2018-05-23 09:26:07 +02:00

nf_nat_helper.h

…

nf_nat_l3proto.h

netfilter: nat: remove nf_nat_l4proto struct

2018-12-17 23:33:31 +01:00

nf_nat_l4proto.h

netfilter: nat: remove nf_nat_l4proto struct

2018-12-17 23:33:31 +01:00

nf_nat_redirect.h

…

nf_nat.h

netfilter: nf_nat: add nat hook register functions to nf_nat

2018-05-23 09:14:05 +02:00

nf_queue.h

…

nf_socket.h

netfilter: Decrease code duplication regarding transparent socket option

2018-06-03 00:02:01 +02:00

nf_tables_core.h

netfilter: nf_tables: add SECMARK support

2018-09-28 14:28:29 +02:00

nf_tables_ipv4.h

…

nf_tables_ipv6.h

…

nf_tables.h

netfilter: nf_tables: asynchronous release

2018-09-17 11:40:07 +02:00

nf_tproxy.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

2018-07-20 22:28:28 -07:00

nft_fib.h

…

nft_masq.h

…

nft_redir.h

…

nft_reject.h

…

xt_rateest.h

…