netfilter: conntrack: use a single expectation table for all namespaces
authorFlorian Westphal <fw@strlen.de>
Thu, 5 May 2016 22:51:49 +0000 (00:51 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 May 2016 09:50:01 +0000 (11:50 +0200)
commit0a93aaedc46af2c5feecfb1066d98bfb491ec0b8
tree66c730e6537deccb35773c294ed0462aa2ebda72
parenta9a083c3878f28e9d368f6dfb1a79a6f04ad8123
netfilter: conntrack: use a single expectation table for all namespaces

We already include netns address in the hash and compare the netns pointers
during lookup, so even if namespaces have overlapping addresses entries
will be spread across the expectation table.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_conntrack_expect.h
include/net/netns/conntrack.h
net/ipv4/netfilter/nf_conntrack_l3proto_ipv4_compat.c
net/netfilter/nf_conntrack_expect.c
net/netfilter/nf_conntrack_helper.c
net/netfilter/nf_conntrack_netlink.c