Re: [PATCH nf v2] netfilter: conntrack: connection timeout after re-register

[Francesco Ruggeri]

On Fri, Oct 9, 2020 at 12:49 PM Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx> wrote:
> What is the rationale behind "remove the conntrack hooks when there are no
> rule left referring to conntrack"? Performance optimization?

That seems to be the case. See commit 4d3a57f23dec ("netfilter: conntrack:
do not enable connection tracking unless needed").

Francesco