Re: Stateless NAT in nftables with maps for performance

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



You all are amazing.  Thank you for all that you do!

My echo/reply base icmp functionality for v4 is working atleast at a cursory glance, without further testing I'm not sure what other parts of icmp are not working with this approach.

> On 09/12/2025 8:23 AM  Florian Westphal <fw@xxxxxxxxx> wrote:
> 
>  
> Florian Westphal <fw@xxxxxxxxx> wrote:
> > ip daddr set ip daddr map @dnat_map
> 
> Forgot the usual disclaimer: this breaks icmp(v6).
> 
> There is a reason for existence of stateful nat after all.





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux