linux/Documentation/networking
Pablo Neira Ayuso fd72f265bb netfilter: conntrack: remove DCCP protocol support
The DCCP socket family has now been removed from this tree, see:

  8bb3212be4 ("Merge branch 'net-retire-dccp-socket'")

Remove connection tracking and NAT support for this protocol, this
should not pose a problem because no DCCP traffic is expected to be seen
on the wire.

As for the code for matching on dccp header for iptables and nftables,
mark it as deprecated and keep it in place. Ruleset restoration is an
atomic operation. Without dccp matching support, an astray match on dccp
could break this operation leaving your computer with no policy in
place, so let's follow a more conservative approach for matches.

Add CONFIG_NFT_EXTHDR_DCCP which is set to 'n' by default to deprecate
dccp extension support. Similarly, label CONFIG_NETFILTER_XT_MATCH_DCCP
as deprecated too and also set it to 'n' by default.

Code to match on DCCP protocol from ebtables also remains in place, this
is just a few checks on IPPROTO_DCCP from _check() path which is
exercised when ruleset is loaded. There is another use of IPPROTO_DCCP
from the _check() path in the iptables multiport match. Another check
for IPPROTO_DCCP from the packet in the reject target is also removed.

So let's schedule removal of the dccp matching for a second stage, this
should not interfer with the dccp retirement since this is only matching
on the dccp header.

Cc: "David S. Miller" <davem@davemloft.net>
Cc: Eric Dumazet <edumazet@google.com>
Cc: Jakub Kicinski <kuba@kernel.org>
Cc: Paolo Abeni <pabeni@redhat.com>
Cc: Kuniyuki Iwashima <kuniyu@amazon.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2025-07-03 13:51:39 +02:00
..
caif
device_drivers docs: fbnic: explain the ring config 2025-07-01 12:48:28 +02:00
devlink devlink: Extend devlink rate API with traffic classes bandwidth management 2025-07-02 15:39:05 -07:00
diagnostic Documentation: networking: update PHY error counter diagnostics in twisted pair guide 2025-01-14 11:44:19 +01:00
dsa net: dsa: Rename IFLA_DSA_MASTER to IFLA_DSA_CONDUIT 2023-10-24 13:08:14 -07:00
mac80211_hwsim
net_cachelines tcp: remove RFC3517/RFC6675 hint state: lost_skb_hint, lost_cnt_hint 2025-06-17 16:19:04 -07:00
netlink_spec tools: ynl: move python code to separate sub-directory 2025-01-09 12:53:27 -08:00
pse-pd net: pse-pd: Add support for PSE PIs 2024-04-18 18:27:33 -07:00
6lowpan.rst
6pack.rst
af_xdp.rst Revert "xsk: Document ability to redirect to any socket bound to the same umem" 2024-06-05 09:43:05 +02:00
alias.rst
arcnet-hardware.rst Update Christoph's Email address and make it consistent 2025-05-12 23:50:31 -07:00
arcnet.rst
atm.rst
ax25.rst Documentation: netdev: fix dead link in ax25.rst 2023-09-18 12:56:58 +01:00
bareudp.rst docs: net: bareudp: fix spelling and grammar mistakes 2024-11-30 13:54:28 -08:00
batman-adv.rst batman-adv: Use consistent name for mesh interface 2025-02-22 11:36:22 +01:00
bonding.rst docs: net: bonding: fix typos 2024-12-18 17:27:35 -08:00
bridge.rst Documentation: update mailing list addresses 2024-02-21 13:44:21 -07:00
can_ucan_protocol.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
can.rst documentation: networking: can: Document alloc_candev_mqs() 2025-06-10 10:20:11 +02:00
cdc_mbim.rst Fix spelling mistake 2024-11-28 12:08:32 +01:00
checksum-offloads.rst
dctcp.rst
devmem.rst net: add devmem TCP TX documentation 2025-05-13 11:12:48 +02:00
dns_resolver.rst dns_resolver: correct module name in dns resolver documentation 2024-03-26 10:15:36 +01:00
driver.rst net: docs: update the sample code in driver.rst 2023-04-13 13:30:21 +02:00
eql.rst
ethtool-netlink.rst doc: ethtool: mark ETHTOOL_GRXFHINDIR as reimplemented 2025-06-25 15:24:14 -07:00
failover.rst
fib_trie.rst
filter.rst ARC: Add eBPF JIT support 2024-05-12 16:51:36 -07:00
gen_stats.rst
generic_netlink.rst
generic-hdlc.rst
gtp.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
ieee802154.rst Documentation: ieee802154: fix grammar 2024-10-28 21:14:27 +01:00
ila.rst
index.rst net: Retire DCCP socket. 2025-04-11 18:58:10 -07:00
ioam6-sysctl.rst
iou-zcrx.rst net: add documentation for io_uring zcrx 2025-02-17 05:41:09 -07:00
ip_dynaddr.rst
ip-sysctl.rst docs: net: sysctl documentation cleanup 2025-06-26 15:02:00 +02:00
ipsec.rst
ipv6.rst
ipvlan.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
ipvs-sysctl.rst ipvs: run_estimation should control the kthread tasks 2022-12-10 22:44:43 +01:00
iso15765-2.rst Documentation/networking: fix basic node example document ISO 15765-2 2025-02-08 11:28:11 +01:00
j1939.rst can: j1939: Extend stack documentation with buffer size behavior 2025-02-19 11:10:53 +01:00
kapi.rst net-shapers: implement NL get operation 2024-10-10 08:30:22 -07:00
kcm.rst docs/kcm: Fix typo "BFP" 2025-03-24 12:20:42 -07:00
l2tp.rst documentation/networking: update l2tp docs 2024-08-11 04:38:49 +01:00
lapb-module.rst
mac80211-auth-assoc-deauth.txt
mac80211-injection.rst
mctp.rst
mpls-sysctl.rst
mptcp-sysctl.rst mptcp: sysctl: add available_path_managers 2025-03-20 10:14:49 +01:00
mptcp.rst doc: new 'mptcp' page in 'networking' 2024-06-01 15:18:01 -07:00
msg_zerocopy.rst docs: net: description of MSG_ZEROCOPY for AF_VSOCK 2023-10-15 13:19:42 +01:00
multi-pf-netdev.rst tools: ynl: move python code to separate sub-directory 2025-01-09 12:53:27 -08:00
multiqueue.rst
napi.rst documentation: networking: Add NAPI config 2025-02-14 17:09:19 -08:00
net_dim.rst dim: pass dim_sample to net_dim() by reference 2024-11-03 12:36:54 -08:00
net_failover.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
netconsole.rst docs: netconsole: document msgid feature 2025-06-18 10:46:10 +01:00
netdev-features.rst net: enable driver support for netmem TX 2025-05-13 11:12:49 +02:00
netdevices.rst netdev: fix the locking for netdev notifications 2025-04-17 18:55:14 -07:00
netfilter-sysctl.rst
netif-msg.rst
netmem.rst net: enable driver support for netmem TX 2025-05-13 11:12:49 +02:00
nexthop-group-resilient.rst
nf_conntrack-sysctl.rst netfilter: conntrack: remove DCCP protocol support 2025-07-03 13:51:39 +02:00
nf_flowtable.rst
nfc.rst
oa-tc6-framework.rst Documentation: networking: add OPEN Alliance 10BASE-T1x MAC-PHY serial interface 2024-09-11 20:53:42 -07:00
openvswitch.rst
operstates.rst
packet_mmap.rst docs: networking: packet_mmap: replace dead links with archive.org links 2024-10-28 15:47:10 -07:00
page_pool.rst net: page_pool: expose page pool stats via netlink 2023-11-28 15:48:39 +01:00
phonet.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
phy-link-topology.rst Documentation: networking: document phy_link_topology 2024-08-23 13:04:35 +01:00
phy.rst net: phy: introduce core support for phy-mode = "10g-qxgmii" 2024-06-18 13:28:26 +02:00
pktgen.rst pktgen: Introducing 'SHARED' flag for testing with non-shared skb 2023-09-28 16:25:14 +02:00
plip.rst
ppp_generic.rst
proc_net_tcp.rst
radiotap-headers.rst
rds.rst Doc: networking: Fix various typos in rds.rst 2025-05-27 12:17:39 +02:00
regulatory.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
representors.rst Documentation: Add documentation for eswitch attribute 2024-03-28 18:20:08 -07:00
rxrpc.rst rxrpc: Remove deadcode 2025-04-24 17:03:45 -07:00
scaling.rst net: move aRFS rmap management and CPU affinity to core 2025-02-26 19:51:37 -08:00
sctp.rst
secid.rst
seg6-sysctl.rst
segmentation-offloads.rst
sfp-phylink.rst doc: sfp-phylink: update the porting guide with PCS handling 2024-03-07 15:27:05 +01:00
skbuff.rst
smc-sysctl.rst net/smc: add sysctl for max conns per lgr for SMC-R v2.1 2023-11-24 12:13:14 +00:00
snmp_counter.rst docs: automarkup: linkify git revs 2023-11-17 13:13:24 -07:00
sriov.rst docs: net: document guidance of implementing the SR-IOV NDOs 2024-06-21 10:18:45 +01:00
statistics.rst docs: networking: Allow creating cross-references statistics ABI 2025-02-18 13:42:46 -07:00
strparser.rst docs: networking: strparser: Fix a typo 2025-03-24 12:14:16 -07:00
switchdev.rst net: rename netns_local to netns_immutable 2025-03-04 12:44:48 +01:00
sysfs-tagging.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
tc-actions-env-rules.rst
tc-queue-filters.rst
tcp_ao.rst Documentation: networking/tcp_ao: typo and grammar fixes 2024-10-03 16:38:48 -07:00
tcp-thin.rst
team.rst
timestamping.rst docs: networking: timestamping: improve stacked PHC sentence 2025-05-13 15:40:54 -07:00
tipc.rst Documentation: tipc: fix formatting issue in tipc.rst 2024-11-19 11:17:13 +01:00
tls-handshake.rst net/handshake: Enable the SNI extension to work properly 2023-05-24 22:05:24 -07:00
tls-offload-layers.svg
tls-offload-reorder-bad.svg
tls-offload-reorder-good.svg
tls-offload.rst Documentation: tls_offload: fix typos and grammar 2024-11-28 12:09:06 +01:00
tls.rst docs: tls: document TLS1.3 key updates 2024-12-16 12:47:30 +00:00
tproxy.rst docs: tproxy: fix formatting for nft code block 2025-04-29 00:00:26 +02:00
tuntap.rst
udplite.rst
vrf.rst
vxlan.rst
x25-iface.rst docs: networking: fix x25-iface.rst heading & index order 2023-05-10 10:31:46 +01:00
x25.rst
xdp-rx-metadata.rst xdp: Add VLAN tag hint 2023-12-13 16:16:40 -08:00
xfrm_device.rst xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} 2025-04-16 11:01:41 +02:00
xfrm_proc.rst xfrm: Add dir validation to "in" data path lookup 2024-05-01 10:06:27 +02:00
xfrm_sync.rst
xfrm_sysctl.rst
xsk-tx-metadata.rst xsk: Add launch time hardware offload support to XDP Tx metadata 2025-02-20 15:13:45 -08:00