Hi,
The following patchset contains a small batch of Netfilter/IPVS updates
for net-next:
1) Remove unused genmask parameter in nf_tables_addchain()
2) Speed up reads from /proc/net/ip_vs_conn, from Florian Westphal.
3) Skip empty buckets in hashlimit to avoid atomic operations that results
in false positive reports by syzbot with lockdep enabled, patch from
Eric Dumazet.
4) Add conntrack event timestamps available via ctnetlink,
from Florian Westphal.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git nf-next-25-01-11
Thanks.
----------------------------------------------------------------
The following changes since commit 3e5908172c05ab1511f2a6719b806d6eda6e1715:
Merge tag 'ieee802154-for-net-next-2025-01-03' of git://git.kernel.org/pub/scm/linux/kernel/git/wpan/wpan-next (2025-01-04 17:02:55 -0800)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git tags/nf-next-25-01-11
for you to fetch changes up to 601731fc7c6111bbca49ce3c9499c2e4d426079d:
netfilter: conntrack: add conntrack event timestamp (2025-01-09 14:42:16 +0100)
----------------------------------------------------------------
netfilter pull request 25-01-11
----------------------------------------------------------------
Eric Dumazet (1):
netfilter: xt_hashlimit: htable_selective_cleanup() optimization
Florian Westphal (2):
ipvs: speed up reads from ip_vs_conn proc file
netfilter: conntrack: add conntrack event timestamp
tuqiang (1):
netfilter: nf_tables: remove the genmask parameter
include/net/netfilter/nf_conntrack_ecache.h | 12 ++++++
include/uapi/linux/netfilter/nfnetlink_conntrack.h | 1 +
net/netfilter/ipvs/ip_vs_conn.c | 50 ++++++++++++----------
net/netfilter/nf_conntrack_ecache.c | 23 ++++++++++
net/netfilter/nf_conntrack_netlink.c | 25 +++++++++++
net/netfilter/nf_tables_api.c | 7 ++-
net/netfilter/xt_hashlimit.c | 6 ++-
7 files changed, 97 insertions(+), 27 deletions(-)