Connection Tracking: nf_conntrack

• Background

  • Linux did not support stateful connection tracking for IPv6
  • ip6_conntrack was implemented
    • lots of duplicate code

• what it is

  • Version independent connection tracking

• Status

  • Basic part already available at netfilter.org
  • IPv4 NAT...