netfilter: flowtable: Set offload timeouts according to proto values
authorOz Shlomo <ozsh@nvidia.com>
Thu, 3 Jun 2021 12:12:35 +0000 (15:12 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 7 Jun 2021 10:23:38 +0000 (12:23 +0200)
commit1d91d2e1a7f767aa8c11d8507ecf268f787734ec
treef608edfa1896c9e43e155337ecab630baf1e4ef6
parent975c57504da1114551fdb3a91ed61dda7739613e
netfilter: flowtable: Set offload timeouts according to proto values

Currently the aging period for tcp/udp connections is hard coded to
30 seconds. Aged tcp/udp connections configure a hard coded 120/30
seconds pickup timeout for conntrack.
This configuration may be too aggressive or permissive for some users.

Dynamically configure the nf flow table GC timeout intervals according
to the user defined values.

Signed-off-by: Oz Shlomo <ozsh@nvidia.com>
Reviewed-by: Paul Blakey <paulb@nvidia.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_flow_table.h
net/netfilter/nf_flow_table_core.c
net/netfilter/nf_flow_table_offload.c