Thread (26 messages) 26 messages, 5 authors, 8d ago

Re: [PATCH net 07/10] ipvs: filter some flags received in the backup server

From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2026-09-18 08:39:55
Also in: netfilter-devel

On Thu, Sep 17, 2026 at 07:04:11PM -0700, Jakub Kicinski wrote:
This is an AI-generated review of your patch. The human sending this
email has considered the AI review valid, or at least plausible.
---
ipvs: filter some flags received in the backup server

This adds ip_vs_sync_validate_flags() to the backup receive path so that
sync records carrying the NO_CPORT+TEMPLATE combination or ONE_PACKET are
dropped, and it also applies IP_VS_CONN_F_BACKUP_MASK to the flags taken
from version 0 messages for consistency with version 1.

A few questions about the new validation below.
Julian wants to post a v2.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help