Re: [PATCH net 07/10] ipvs: filter some flags received in the backup server
Pablo Neira Ayuso <[email protected]>
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.netfilter-devel |
|---|---|
| Message-ID | <aqz41q27anhvSbed@chamomile> |
On Thu, Sep 17, 2026 at 07:04:11PM -0700, Jakub Kicinski wrote: > This is an AI-generated review of your patch. The human sending this > email has considered the AI review valid, or at least plausible. > --- > ipvs: filter some flags received in the backup server > > This adds ip_vs_sync_validate_flags() to the backup receive path so that > sync records carrying the NO_CPORT+TEMPLATE combination or ONE_PACKET are > dropped, and it also applies IP_VS_CONN_F_BACKUP_MASK to the flags taken > from version 0 messages for consistency with version 1. > > A few questions about the new validation below. Julian wants to post a v2.