Re: [PATCH RFC PoC 0/3] nftables meets bpf

2018-02-21 Thread Florian Fainelli
On 02/21/2018 03:46 PM, Jakub Kicinski wrote: > On Tue, 20 Feb 2018 11:58:22 +0100, Pablo Neira Ayuso wrote: >> We also have a large range of TCAM based hardware offload outthere >> that will _not_ work with your BPF HW offload infrastructure. What >> this bpf infrastructure pushes into the kernel

Re: [PATCH RFC,WIP 0/5] Flow offload infrastructure

2017-11-03 Thread Florian Fainelli
Hi Pablo, On 11/03/2017 08:26 AM, Pablo Neira Ayuso wrote: > Hi, > > This patch adds the flow offload infrastructure for Netfilter. This adds > a new 'nf_flow_offload' module that registers a hook at ingress. Every > packet that hits the flow table is forwarded to where the flow table > entry

Re: nf_nat_tftp broken in 4.8?

2016-11-09 Thread Florian Fainelli
On 11/09/2016 01:56 PM, Florian Westphal wrote: > Florian Fainelli <f.faine...@gmail.com> wrote: >> After updating my workstation from 4.4 to 4.8, which also serves as a >> NAT gateway for local machines, I noticed that TFTP across this NAT box >&g

nf_nat_tftp broken in 4.8?

2016-11-09 Thread Florian Fainelli
Hi, After updating my workstation from 4.4 to 4.8, which also serves as a NAT gateway for local machines, I noticed that TFTP across this NAT box broke: - TFTP read request to the server, source port 3534 - server replies with a data packet to dst port 3534 - gateway sends an ICMP destination