linux/Documentation/networking
Jakub Kicinski 03a1569c2b netfilter pull request nf-next-26-04-10
-----BEGIN PGP SIGNATURE-----
 
 iQJdBAABCABHFiEEgKkgxbID4Gn1hq6fcJGo2a1f9gAFAmnYzgIbFIAAAAAABAAO
 bWFudTIsMi41KzEuMTIsMiwyDRxmd0BzdHJsZW4uZGUACgkQcJGo2a1f9gCfDw/+
 KWf9fUlsE3uaxK889hfR0QU5ANQ03Ix1eVvr6Vh0Y5Za1glZDUuls0EsH0ej7/36
 ZQqAu2vaevHTVZl3EhAS1vu8KBcldl36YEtvJsQXFkFuOoO3F/dBdttwAif2tzv8
 ammqXOKicRHok1A3cy8R1fkGFAHpfn5BjBc68A0+SY1N2NFVdVNS9BP4p7tuSdkk
 JCj3TdDmBcddZ3SnY/z27S4+8jUL3e7HEAbsMApzIERcxe1w/6gEbb5Oa6AUwtHT
 2SwQlUyhBa6gx2tARgUsHcck5QiW8b1tX7y1tzyo2q6rw78m1Eublib5nYCav/w8
 9pSjRLlzSYBQ22e3wz7WqFXZRaM5+O38s3Moxfn/xrQblTk8CyW/5zGQJKivW9oG
 LEirCPbL6U6ZB/2Uy+3EvzG5TBP3cppB5sXaQfMdSQ03wvYFXMN35hb54ePZW6CX
 Db3lCwimOuXq+hkjVzZIU9ZmGr03oNohFX1GA0gDqrWtc9KsEKW8/KQvX61N8QK3
 YEMIZ6fbMkstCY98fS3j6r6+V1he6wzcZpsqjd9FACYXtf8LQbPvoMA4BfcGR8+X
 iQVEZcrvdGa39VH1TQFlXJIe/Pv+9tZ+CF44MsrNyYH0mD4gTInajklO3lkw/YQj
 RQTHJLal9RCF9gVZRqHgkpE8vUj0mtUkp6Atz6En4mU=
 =C/nr
 -----END PGP SIGNATURE-----

Merge tag 'nf-next-26-04-10' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next

Florian Westphal says:

====================
netfilter: updates for net-next

1-3) IPVS updates from Julian Anastasov to enhance visibility into
     IPVS internal state by exposing hash size, load factor etc and
     allows userspace to tune the load factor used for resizing hash
     tables.

4) reject empty/not nul terminated device names from xt_physdev.
   This isn't a bug fix; existing code doesn't require a c-string.
   But clean this up anyway because conceptually the interface name
   definitely should be a c-string.

5) Switch nfnetlink to skb_mac_header helpers that didn't exist back
   when this code was written.  This gives us additional debug checks
   but is not intended to change functionality.

6) Let the xt ttl/hoplimit match reject unknown operator modes.
   This is a cleanup, the evaluation function simply returns false when
   the mode is out of range.  From Marino Dzalto.

7) xt_socket match should enable defrag after all other checks. This
   bug is harmless, historically defrag could not be disabled either
   except by rmmod.

8) remove UDP-Lite conntrack support, from Fernando Fernandez Mancera.

9) Avoid a couple -Wflex-array-member-not-at-end warnings in the old
   xtables 32bit compat code, from Gustavo A. R. Silva.

10) nftables fwd expression should drop packets when their ttl/hl has
    expired.  This is a bug fix deferred, its not deemed important
    enough for -rc8.
11) Add additional checks before assuming the mac header is an ethernet
    header, from Zhengchuan Liang.

* tag 'nf-next-26-04-10' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next:
  netfilter: require Ethernet MAC header before using eth_hdr()
  netfilter: nft_fwd_netdev: check ttl/hl before forwarding
  netfilter: x_tables: Avoid a couple -Wflex-array-member-not-at-end warnings
  netfilter: conntrack: remove UDP-Lite conntrack support
  netfilter: xt_socket: enable defrag after all other checks
  netfilter: xt_HL: add pr_fmt and checkentry validation
  netfilter: nfnetlink: prefer skb_mac_header helpers
  netfilter: x_physdev: reject empty or not-nul terminated device names
  ipvs: add conn_lfactor and svc_lfactor sysctl vars
  ipvs: add ip_vs_status info
  ipvs: show the current conn_tab size to users
====================

Link: https://patch.msgid.link/20260410112352.23599-1-fw@strlen.de
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2026-04-12 09:39:21 -07:00
..
caif
device_drivers docs/mlx5: Fix typo subfuction 2026-03-26 18:30:47 -07:00
devlink devlink: Document resource scope filtering 2026-04-08 19:55:39 -07:00
diagnostic Documentation: use a source-read extension for the index link boilerplate 2026-01-23 11:59:34 -07:00
dsa net: dsa: remove struct platform_data 2026-04-08 19:38:52 -07:00
mac80211_hwsim
net_cachelines tcp: implement RFC 7323 window retraction receiver requirements 2026-03-14 08:01:49 -07:00
pse-pd net: pse-pd: Add support for PSE PIs 2024-04-18 18:27:33 -07:00
xfrm net: Move XFRM documentation into its own subdirectory 2025-11-12 08:30:03 +01:00
6lowpan.rst
6pack.rst net: 6pack: Demote "How to turn on 6pack support" section heading 2025-10-21 10:57:45 +02:00
af_xdp.rst net: xsk: introduce XDP_MAX_TX_SKB_BUDGET setsockopt 2025-07-10 14:48:29 +02:00
alias.rst
arcnet-hardware.rst Documentation: ARCnet: Update obsolete contact info 2025-10-31 18:08:08 -07:00
arcnet.rst Documentation: ARCnet: Update obsolete contact info 2025-10-31 18:08:08 -07:00
atm.rst
ax25.rst Documentation: networking: ax25: update the mailing list info. 2025-10-21 17:41:57 -07:00
bareudp.rst docs: net: bareudp: fix spelling and grammar mistakes 2024-11-30 13:54:28 -08:00
batman-adv.rst batman-adv: Use consistent name for mesh interface 2025-02-22 11:36:22 +01:00
bonding.rst bonding: support aggregator selection based on port priority 2025-09-09 10:56:02 +02:00
bridge.rst docs: net: bridge: document stp_mode attribute 2026-04-10 15:52:25 -07:00
can_ucan_protocol.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
can.rst linux-can-fixes-for-6.18-20251014 2025-10-15 17:56:20 -07:00
cdc_mbim.rst Fix spelling mistake 2024-11-28 12:08:32 +01:00
checksum-offloads.rst
dctcp.rst
devmem.rst net: add devmem TCP TX documentation 2025-05-13 11:12:48 +02:00
dns_resolver.rst net: dns_resolver: Fix request-key cross-reference 2025-09-26 15:21:38 -07:00
driver.rst net: docs: update the sample code in driver.rst 2023-04-13 13:30:21 +02:00
eql.rst
ethtool-netlink.rst net: ethtool: add ethtool COALESCE_RX_CQE_FRAMES/NSECS 2026-03-18 20:01:10 -07:00
failover.rst
fib_trie.rst
filter.rst ARC: Add eBPF JIT support 2024-05-12 16:51:36 -07:00
gen_stats.rst
generic_netlink.rst
generic-hdlc.rst
gtp.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
ieee802154.rst Documentation: ieee802154: fix grammar 2024-10-28 21:14:27 +01:00
ila.rst
index.rst Networking changes for 7.0 2026-02-11 19:31:52 -08:00
ioam6-sysctl.rst
iou-zcrx.rst io_uring/zcrx: document area chunking parameter 2026-01-14 02:13:37 +00:00
ip_dynaddr.rst
ip-sysctl.rst inet: add ip_local_port_step_width sysctl to improve port usage distribution 2026-03-10 18:59:39 -07:00
ipsec.rst
ipv6.rst
ipvlan.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
ipvs-sysctl.rst ipvs: add conn_lfactor and svc_lfactor sysctl vars 2026-04-10 12:16:26 +02:00
iso15765-2.rst Documentation/networking: fix basic node example document ISO 15765-2 2025-02-08 11:28:11 +01:00
j1939.rst can: j1939: Extend stack documentation with buffer size behavior 2025-02-19 11:10:53 +01:00
kapi.rst net-shapers: implement NL get operation 2024-10-10 08:30:22 -07:00
kcm.rst docs/kcm: Fix typo "BFP" 2025-03-24 12:20:42 -07:00
l2tp.rst documentation/networking: update l2tp docs 2024-08-11 04:38:49 +01:00
lapb-module.rst
mac80211-auth-assoc-deauth.txt
mac80211-injection.rst
mctp.rst
mpls-sysctl.rst
mptcp-sysctl.rst mptcp: make ADD_ADDR retransmission timeout adaptive 2025-09-09 18:57:45 -07:00
mptcp.rst Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2025-09-11 17:40:13 -07:00
msg_zerocopy.rst docs: net: description of MSG_ZEROCOPY for AF_VSOCK 2023-10-15 13:19:42 +01:00
multi-pf-netdev.rst tools: ynl: move python code to separate sub-directory 2025-01-09 12:53:27 -08:00
multiqueue.rst
napi.rst net: Extend NAPI threaded polling to allow kthread based busy polling 2025-11-03 18:11:40 -08:00
net_dim.rst dim: pass dim_sample to net_dim() by reference 2024-11-03 12:36:54 -08:00
net_failover.rst Documentation: net: net_failover: Separate cloud-ifupdown-helper and reattach-vf.sh code blocks marker 2025-10-17 16:28:29 -07:00
netconsole.rst Documentation: netconsole: Separate literal code blocks for full and short netcat command name versions 2025-10-31 16:54:22 -07:00
netdev-features.rst net: enable driver support for netmem TX 2025-05-13 11:12:49 +02:00
netdevices.rst net: Implement netdev_nl_queue_create_doit 2026-04-09 18:21:45 -07:00
netfilter-sysctl.rst
netif-msg.rst
netmem.rst net: enable driver support for netmem TX 2025-05-13 11:12:49 +02:00
nexthop-group-resilient.rst
nf_conntrack-sysctl.rst netfilter: conntrack: remove DCCP protocol support 2025-07-03 13:51:39 +02:00
nf_flowtable.rst
nfc.rst net: nfc: Format userspace interface subsection headings 2025-10-21 10:57:45 +02:00
oa-tc6-framework.rst Documentation: networking: add OPEN Alliance 10BASE-T1x MAC-PHY serial interface 2024-09-11 20:53:42 -07:00
openvswitch.rst
operstates.rst
packet_mmap.rst docs: networking: packet_mmap: replace dead links with archive.org links 2024-10-28 15:47:10 -07:00
page_pool.rst net: page_pool: expose page pool stats via netlink 2023-11-28 15:48:39 +01:00
phonet.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
phy-link-topology.rst Documentation: networking: document phy_link_topology 2024-08-23 13:04:35 +01:00
phy-port.rst Documentation: networking: Document the phy_port infrastructure 2026-01-13 18:52:36 -08:00
phy.rst net: phy: remove unused fixup unregistering functions 2026-01-15 19:48:26 -08:00
pktgen.rst pktgen: Introducing 'SHARED' flag for testing with non-shared skb 2023-09-28 16:25:14 +02:00
plip.rst
ppp_generic.rst
proc_net_tcp.rst
psp.rst psp: add documentation 2025-09-18 12:32:06 +02:00
radiotap-headers.rst
rds.rst Documentation: Fix networking typos 2025-08-18 10:31:20 -06:00
regulatory.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
representors.rst Documentation: Add documentation for eswitch attribute 2024-03-28 18:20:08 -07:00
rxrpc.rst Documentation: rxrpc: Demote three sections 2025-09-24 18:12:10 -07:00
scaling.rst net-sysfs: use rps_tag_ptr and remove metadata from rps_sock_flow_table 2026-03-04 16:54:09 -08:00
sctp.rst
secid.rst
seg6-sysctl.rst doc: fix seg6_flowlabel path 2025-10-12 22:51:37 +01:00
segmentation-offloads.rst net: gso: restore ids of outer ip headers correctly 2025-09-25 12:42:49 +02:00
sfp-phylink.rst doc: sfp-phylink: update the porting guide with PCS handling 2024-03-07 15:27:05 +01:00
skbuff.rst
smc-sysctl.rst net/smc: Add documentation for limit_smc_hs and hs_ctrl 2026-03-10 17:53:03 -07:00
snmp_counter.rst docs: automarkup: linkify git revs 2023-11-17 13:13:24 -07:00
sriov.rst docs: net: document guidance of implementing the SR-IOV NDOs 2024-06-21 10:18:45 +01:00
statistics.rst net: docs: add missing features that can have stats 2025-10-20 18:31:25 -07:00
strparser.rst docs: networking: strparser: Fix a typo 2025-03-24 12:14:16 -07:00
switchdev.rst net: rename netns_local to netns_immutable 2025-03-04 12:44:48 +01:00
sysfs-tagging.rst Documentation: networking: correct spelling 2023-01-31 13:00:47 +01:00
tc-actions-env-rules.rst
tc-queue-filters.rst
tcp_ao.rst Documentation: networking/tcp_ao: typo and grammar fixes 2024-10-03 16:38:48 -07:00
tcp-thin.rst
team.rst
timestamping.rst net: remove legacy way to get/set HW timestamp config 2026-01-20 18:21:27 -08:00
tipc.rst Documentation: tipc: fix formatting issue in tipc.rst 2024-11-19 11:17:13 +01:00
tls-handshake.rst net/handshake: Fixed grammar mistake 2026-02-27 19:24:08 -08:00
tls-offload-layers.svg
tls-offload-reorder-bad.svg
tls-offload-reorder-good.svg
tls-offload.rst docs: tls: Enhance TLS resync async process documentation 2026-01-17 15:26:13 -08:00
tls.rst net/tls: support setting the maximum payload size 2025-10-27 16:13:42 -07:00
tproxy.rst docs: tproxy: fix formatting for nft code block 2025-04-29 00:00:26 +02:00
tuntap.rst
udplite.rst
vrf.rst
vxlan.rst
x25-iface.rst docs: networking: fix x25-iface.rst heading & index order 2023-05-10 10:31:46 +01:00
x25.rst
xdp-rx-metadata.rst doc: xdp: Clarify driver implementation for XDP Rx metadata 2025-07-16 16:36:11 -07:00
xsk-tx-metadata.rst xsk: Add launch time hardware offload support to XDP Tx metadata 2025-02-20 15:13:45 -08:00