Bug 2111270

Summary:	netfilter: rebase conntrack to 5.19
Product:	Red Hat Enterprise Linux 9	Reporter:	Florian Westphal <fwestpha>
Component:	kernel	Assignee:	Florian Westphal <fwestpha>
kernel sub component:	Netfilter	QA Contact:	yiche <yiche>
Status:	CLOSED ERRATA	Docs Contact:
Severity:	low
Priority:	medium	CC:	egarver, jiji, network-qe
Version:	9.1	Keywords:	FeatureBackport, Triaged
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	kernel-5.14.0-149.el9	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-11-15 11:10:03 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Florian Westphal 2022-07-26 22:33:33 UTC

The upstream kernel carries a number of enhancements in the connection tracking module:  Remove a few indirect calls from the code and increase the connection add/remove rate.

This is done by:
1. removal of  unconfirmed/dying list
2. avoid allocation of "ecache" extension unless its needed (detect if userspace requested the feature, in virtually all cases, it won't be active/needed)
3. get rid of a local_bh_disable/enable section for the normal case (no l7 helper such as ftp, h323...).

Backport all changes pending for the 5.19 release.

Comment 16 errata-xmlrpc 2022-11-15 11:10:03 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: kernel security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:8267