Re: netfilter expected behavior for established connections

On Wed, 12 Mar 2025 at 14:04, Antonio Ojea
<[email protected]> wrote:
>
> On Wed, 12 Mar 2025 at 13:51, Florian Westphal <[email protected]> wrote:
> >
> > Antonio Ojea <[email protected]> wrote:
> > > Is there some kind of optimization that just directly copies the data
> > > without going through netfilter hooks or am I doing something wrong?
> >
> > Looks lke whatever environment you are using has bpf progs in place
> > that change packet flow, or some other proprietrary modules.
>
>
> hmm, I'm building a vanilla kernel and running it with virtme-ng (but
> it is indeed a controlled host)
>
> vng -v -r arch/x86/boot/bzImage --user=root
>
> let me try to run in a different and more clean environment and report back

Ok,this is working in a ewn Debian VM:
Linux instance-20250312-132718 6.1.0-31-cloud-amd64 #1 SMP
PREEMPT_DYNAMIC Debian 6.1.128-1 (2025-02-07) x86_64 GNU/Linux

At least I know I should not use my first environment for these
things, sorry about that.

Florian, do you mind if I submit the selftest patch?
I really want to get confidence this behavior does not regress, since
we are probably building a feature based on it