Re: [PATCH nft v3] src: add connlimit stateful object support

On Wed, Nov 26, 2025 at 05:35:53PM +0100, Phil Sutter wrote:
> On Mon, Nov 24, 2025 at 06:35:57PM +0100, Fernando Fernandez Mancera wrote:
> > Add support for "ct count" stateful object. E.g
> > 
> > table ip mytable {
> > 	ct count ssh-connlimit { until 4 }
> > 	ct count http-connlimit { over 1000 }
> >         chain mychain {
> >                 type filter hook input priority filter; policy accept;
> >                 ct count name tcp dport map { 22 : "ssh-connlimit", 80 : "http-connlimit" } meta mark set 0x1
> >         }
> > }
> > 
> > The kernel code has been there for a long time but never used.
> > 
> > Signed-off-by: Fernando Fernandez Mancera <[email protected]>
> 
> Reviewed-by: Phil Sutter <[email protected]>

I have applied this patch that has been around for a while.

JFR: I had to make a minor rebase on top of main.