Re: Confirming conntrack behavior on environments with multiple network namespaces

On Fri, 26 Sept 2025 at 16:03, Florian Westphal <[email protected]> wrote:

> Not sure we should add one, it will result in some overhead for no good
> reason.  Maybe /proc/slabinfo is enough for your use case?
>
> nf_conntrack has its own (global) memory pool, it should provide a
> reasonably good estimate across all netns.

interesting, just to confirm, can I approximate the load factor using
active_objects / buckets, with

active_objects=$(sudo awk '$1 == "nf_conntrack" {print $2}' /proc/slabinfo)
buckets=$(cat /proc/sys/net/netfilter/nf_conntrack_buckets)

that sounds really good