kernel/linux.git/include/net/netns, branch linux-2.6.28.y Linux kernel stable tree (mirror) https://git.radix-linux.su/kernel/linux.git/atom?h=linux-2.6.28.y 2008-10-20T10:31:54+00:00 netfilter: netns: use NFPROTO_NUMPROTO instead of NUMPROTO for tables array 2008-10-20T10:31:54+00:00 Patrick McHardy kaber@trash.net 2008-10-20T10:31:54+00:00 urn:sha1:10a03a42d140a029bcba531df2897839f3569871 The netfilter families have been decoupled from regular protocol families. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> ipv6: making ip and icmp statistics per/namespace 2008-10-08T18:16:45+00:00 Denis V. Lunev den@openvz.org 2008-10-08T17:36:03+00:00 urn:sha1:9261e53701121f83eb9482347d68833e95315362 Signed-off-by: Denis V. Lunev <den@openvz.org> Signed-off-by: David S. Miller <davem@davemloft.net> netfilter: netns nat: per-netns bysource hash 2008-10-08T09:35:11+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:11+00:00 urn:sha1:0c4c9288ada0e6642d511ef872f10a4781a896ff Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> netfilter: netns nat: per-netns NAT table 2008-10-08T09:35:10+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:10+00:00 urn:sha1:e099a173573ce1ba171092aee7bb3c72ea686e59 Same story as with iptable_filter, iptables_raw tables. Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> netfilter: netns nf_conntrack: per-netns conntrack accounting 2008-10-08T09:35:09+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:09+00:00 urn:sha1:d716a4dfbbdf0d4731d596a96e5f4b0d892ac168 Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl 2008-10-08T09:35:08+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:08+00:00 urn:sha1:c2a2c7e0cc39e7f9336cd67e8307a110bdba82f3 Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_checksum sysctl 2008-10-08T09:35:08+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:08+00:00 urn:sha1:c04d05529a6e0bf97183a2caf76a0c7f07f5b78c Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_count sysctl 2008-10-08T09:35:08+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:08+00:00 urn:sha1:802507071b72ed5025747126099cbc6d1542f596 Note, sysctl table is always duplicated, this is simpler and less special-cased. Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> netfilter: netns nf_conntrack: per-netns statistics 2008-10-08T09:35:07+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:07+00:00 urn:sha1:0d55af8791bfb42e04cc456b348910582f230343 Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net> netfilter: netns nf_conntrack: per-netns event cache 2008-10-08T09:35:07+00:00 Alexey Dobriyan adobriyan@gmail.com 2008-10-08T09:35:07+00:00 urn:sha1:6058fa6bb96a5b6145cba10c5171f09c2783ca69 Heh, last minute proof-reading of this patch made me think, that this is actually unneeded, simply because "ct" pointers will be different for different conntracks in different netns, just like they are different in one netns. Not so sure anymore. [Patrick: pointers will be different, flushing can only be done while inactive though and thus it needs to be per netns] Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net>