diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-07-26 13:25:19 +0200 |
|---|---|---|
| committer | Mergify <37929162+mergify[bot]@users.noreply.github.com> | 2024-07-30 07:47:39 +0000 |
| commit | a05251f766c68fbff506bc01f6c095350f904bb7 (patch) | |
| tree | f2bce85e35c4d366f451dc9b51f3b9d12616c74f /op-mode-definitions/show-conntrack.xml.in | |
| parent | 7db9c020e27289ec307cb821ac651af4dcef3cec (diff) | |
| download | vyos-1x-a05251f766c68fbff506bc01f6c095350f904bb7.tar.gz vyos-1x-a05251f766c68fbff506bc01f6c095350f904bb7.zip | |
vrf: T6603: conntrack ct_iface_map must only contain one entry for iifname/oifname
When any of the following features NAT, NAT66 or Firewall is enabled, for every
VRF on the CLI we install one rule into nftables for conntrack:
chain vrf_zones_ct_in {
type filter hook prerouting priority raw; policy accept;
counter packets 3113 bytes 32227 ct original zone set iifname map @ct_iface_map
counter packets 8550 bytes 80739 ct original zone set iifname map @ct_iface_map
counter packets 5644 bytes 67697 ct original zone set iifname map @ct_iface_map
}
This is superfluous.
(cherry picked from commit d6e9824f1612bd8c876437c071f31a1a0f44af5d)
Diffstat (limited to 'op-mode-definitions/show-conntrack.xml.in')
0 files changed, 0 insertions, 0 deletions