Skip to content

v0.3.1

Choose a tag to compare

@realityone realityone released this 04 Apr 15:57
· 54 commits to main since this release

What's Changed

Conntrack reliability

  • Switched conntrack maps from LruHashMap to HashMap — active connections are never silently evicted when the map is full
  • New connections insert conntrack entries before rewriting the packet; if the map is full, the packet passes through without NAT instead of being rewritten with no return path
  • Failed CONNTRACK_IN insert rolls back the partial CONNTRACK_OUT entry