tree a7d192ce684e8e9b070cc62fc936388647d27e41
parent e5eaac2beb54f0a16ff851125082d9faeb475572
author Ritaro Takenaka <ritarot634@gmail.com> 1652784930 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> 1652888066 +0200

netfilter: flowtable: move dst_check to packet path

Fixes sporadic IPv6 packet loss when flow offloading is enabled.

IPv6 route GC and flowtable GC are not synchronized.
When dst_cache becomes stale and a packet passes through the flow before
the flowtable GC teardowns it, the packet can be dropped.
So, it is necessary to check dst every time in packet path.

Fixes: 227e1e4d0d6c ("netfilter: nf_flowtable: skip device lookup from interface index")
Signed-off-by: Ritaro Takenaka <ritarot634@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>