diff options
| author | Felix Fietkau <nbd@nbd.name> | 2023-03-23 21:44:10 +0100 |
|---|---|---|
| committer | Felix Fietkau <nbd@nbd.name> | 2023-03-24 10:15:23 +0100 |
| commit | f84c94060fda7f8400f5ef1d94e072dce98977ad (patch) | |
| tree | ce3c7f940198c34134b984cc1f74a53968533467 /target/linux/generic/hack-5.15 | |
| parent | 808014c00726befdcedee5060bd65bbc6b2cc7c2 (diff) | |
| download | upstream-f84c94060fda7f8400f5ef1d94e072dce98977ad.tar.gz upstream-f84c94060fda7f8400f5ef1d94e072dce98977ad.tar.bz2 upstream-f84c94060fda7f8400f5ef1d94e072dce98977ad.zip | |
kernel: enable conntrack counter updates for iptables xt_FLOWOFFLOAD
Ensures that packet/byte counters in /proc/net/nf_conntrack are updated
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Diffstat (limited to 'target/linux/generic/hack-5.15')
| -rw-r--r-- | target/linux/generic/hack-5.15/650-netfilter-add-xt_FLOWOFFLOAD-target.patch | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/target/linux/generic/hack-5.15/650-netfilter-add-xt_FLOWOFFLOAD-target.patch b/target/linux/generic/hack-5.15/650-netfilter-add-xt_FLOWOFFLOAD-target.patch index 961a930bb3..aa6c668558 100644 --- a/target/linux/generic/hack-5.15/650-netfilter-add-xt_FLOWOFFLOAD-target.patch +++ b/target/linux/generic/hack-5.15/650-netfilter-add-xt_FLOWOFFLOAD-target.patch @@ -98,7 +98,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name> obj-$(CONFIG_NETFILTER_XT_TARGET_LED) += xt_LED.o --- /dev/null +++ b/net/netfilter/xt_FLOWOFFLOAD.c -@@ -0,0 +1,697 @@ +@@ -0,0 +1,698 @@ +/* + * Copyright (C) 2018-2021 Felix Fietkau <nbd@nbd.name> + * @@ -752,6 +752,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name> +{ + INIT_DELAYED_WORK(&tbl->work, xt_flowoffload_hook_work); + tbl->ft.type = &flowtable_inet; ++ tbl->ft.flags = NF_FLOWTABLE_COUNTER; + + return nf_flow_table_init(&tbl->ft); +} @@ -770,7 +771,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name> + if (ret) + goto cleanup; + -+ flowtable[1].ft.flags = NF_FLOWTABLE_HW_OFFLOAD; ++ flowtable[1].ft.flags |= NF_FLOWTABLE_HW_OFFLOAD; + + ret = xt_register_target(&offload_tg_reg); + if (ret) |