Skip to content

Commit

Permalink
netfilter: flowtable: Remove redundant hw refresh bit
Browse files Browse the repository at this point in the history
commit c07531c upstream.

Offloading conns could fail for multiple reasons and a hw refresh bit is
set to try to reoffload it in next sw packet.
But it could be in some cases and future points that the hw refresh bit
is not set but a refresh could succeed.
Remove the hw refresh bit and do offload refresh if requested.
There won't be a new work entry if a work is already pending
anyway as there is the hw pending bit.

Fixes: 8b3646d ("net/sched: act_ct: Support refreshing the flow table entries")
Signed-off-by: Roi Dayan <roid@nvidia.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
  • Loading branch information
roidayan authored and gregkh committed Jun 3, 2021
1 parent fe6921e commit 6d6bc8c
Show file tree
Hide file tree
Showing 3 changed files with 5 additions and 6 deletions.
1 change: 0 additions & 1 deletion include/net/netfilter/nf_flow_table.h
Expand Up @@ -126,7 +126,6 @@ enum nf_flow_flags {
NF_FLOW_HW,
NF_FLOW_HW_DYING,
NF_FLOW_HW_DEAD,
NF_FLOW_HW_REFRESH,
NF_FLOW_HW_PENDING,
};

Expand Down
3 changes: 1 addition & 2 deletions net/netfilter/nf_flow_table_core.c
Expand Up @@ -259,8 +259,7 @@ void flow_offload_refresh(struct nf_flowtable *flow_table,
{
flow->timeout = nf_flowtable_time_stamp + NF_FLOW_TIMEOUT;

if (likely(!nf_flowtable_hw_offload(flow_table) ||
!test_and_clear_bit(NF_FLOW_HW_REFRESH, &flow->flags)))
if (likely(!nf_flowtable_hw_offload(flow_table)))
return;

nf_flow_offload_add(flow_table, flow);
Expand Down
7 changes: 4 additions & 3 deletions net/netfilter/nf_flow_table_offload.c
Expand Up @@ -753,10 +753,11 @@ static void flow_offload_work_add(struct flow_offload_work *offload)

err = flow_offload_rule_add(offload, flow_rule);
if (err < 0)
set_bit(NF_FLOW_HW_REFRESH, &offload->flow->flags);
else
set_bit(IPS_HW_OFFLOAD_BIT, &offload->flow->ct->status);
goto out;

set_bit(IPS_HW_OFFLOAD_BIT, &offload->flow->ct->status);

out:
nf_flow_offload_destroy(flow_rule);
}

Expand Down

0 comments on commit 6d6bc8c

Please sign in to comment.