On Tue, Apr 08, 2025 at 06:39:31PM +0200, Florian Westphal wrote: > Eric Woudstra <ericwo...@gmail.com> wrote: > > This adds the capability to conntrack 802.1ad, QinQ, PPPoE and PPPoE-in-Q > > packets that are passing a bridge. > > Conntrack is l2 agnostic, so this either requires distinct > ip addresses in the vlans/pppoe tunneled traffic or users > need to configure connection tracking zones manually to > ensure there are no collisions or traffic merges (i.e., > packet x from PPPoE won't be merged with frag from a vlan).
There are conntrack zones.