Re: [resend] Solution for the problem conntrack in tc subsystem

2020-11-01 Thread wenxu
On 10/30/2020 6:59 AM, Marcelo Ricardo Leitner wrote: > Cc'ing Cong, Paul, Oz and Davide. > > On Thu, Oct 29, 2020 at 10:22:04AM +0800, wenxu wrote: >> Only do gso for the reassembly big packet is also can't fix all the >> case such for icmp packet. > Good point. And as we can't know that a fragm

Re: [resend] Solution for the problem conntrack in tc subsystem

2020-10-30 Thread Marcelo Ricardo Leitner
On Thu, Oct 29, 2020 at 07:59:36PM -0300, Marcelo Ricardo Leitner wrote: > Cc'ing Cong, Paul, Oz and Davide. > > On Thu, Oct 29, 2020 at 10:22:04AM +0800, wenxu wrote: > > Only do gso for the reassembly big packet is also can't fix all the > > case such for icmp packet. > > Good point. And as we

Re: [resend] Solution for the problem conntrack in tc subsystem

2020-10-29 Thread Marcelo Ricardo Leitner
Cc'ing Cong, Paul, Oz and Davide. On Thu, Oct 29, 2020 at 10:22:04AM +0800, wenxu wrote: > Only do gso for the reassembly big packet is also can't fix all the > case such for icmp packet. Good point. And as we can't know that a fragment was for an icmp packet before defraging it, this is quite im

[resend] Solution for the problem conntrack in tc subsystem

2020-10-28 Thread wenxu
Hi, Currently kernel tc subsystem can do conntrack things in cat_ct. But there is a problem need to fix.  For several fragment packets handle in act_ct.  The tcf_ct_handle_fragments will defrag the packets to a big one. But the after action will redirect mirror to a device which maybe lead