Skip to content

Commit 626873c

Browse files
vmytnyk-plvummakynes
authored andcommitted
netfilter: conntrack: fix udp offload timeout sysctl
`nf_flowtable_udp_timeout` sysctl option is available only if CONFIG_NFT_FLOW_OFFLOAD enabled. But infra for this flow offload UDP timeout was added under CONFIG_NF_FLOW_TABLE config option. So, if you have CONFIG_NFT_FLOW_OFFLOAD disabled and CONFIG_NF_FLOW_TABLE enabled, the `nf_flowtable_udp_timeout` is not present in sysfs. Please note, that TCP flow offload timeout sysctl option is present even CONFIG_NFT_FLOW_OFFLOAD is disabled. I suppose it was a typo in commit that adds UDP flow offload timeout and CONFIG_NF_FLOW_TABLE should be used instead. Fixes: 975c575 ("netfilter: conntrack: Introduce udp offload timeout configuration") Signed-off-by: Volodymyr Mytnyk <[email protected]> Signed-off-by: Pablo Neira Ayuso <[email protected]>
1 parent c7aab4f commit 626873c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

net/netfilter/nf_conntrack_standalone.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -823,7 +823,7 @@ static struct ctl_table nf_ct_sysctl_table[] = {
823823
.mode = 0644,
824824
.proc_handler = proc_dointvec_jiffies,
825825
},
826-
#if IS_ENABLED(CONFIG_NFT_FLOW_OFFLOAD)
826+
#if IS_ENABLED(CONFIG_NF_FLOW_TABLE)
827827
[NF_SYSCTL_CT_PROTO_TIMEOUT_UDP_OFFLOAD] = {
828828
.procname = "nf_flowtable_udp_timeout",
829829
.maxlen = sizeof(unsigned int),

0 commit comments

Comments
 (0)