[PATCH 0/3] netfilter: ip6t_NPT: improve NPTv6 implementation for gateway usage scenario

[Nikolai Merinov]

Hi,

My team, together with the prplFoundation, is working on NPTv6 support
in prplOS distribution for home gateways. During this work, we
encountered two issues with the current NPTv6 implemetnation:

1. Edge cases described in RFC 6296 are not handled.
2. A NPTv6 implementation requires integration with a connection
   tracking, since home gateways use stateful IPv6 firewall.

The integration with the connection tracking mechanism was inspired by
the IPVS implementation.

Andrey Kuznetsov (3):
  netfilter: ip6t_NPT: Align not mapped packets processing with RFC 6296
    requirements
  netfilter: ip6t_NPT: Align ICMPv6 error messages with RFC 6296
    requirements
  netfilter: ip6t_NPT: Adding conntrack compatibility to NPT sessions

 net/ipv6/netfilter/Kconfig    |   1 +
 net/ipv6/netfilter/ip6t_NPT.c | 107 +++++++++++++++++++++++++++++-----
 2 files changed, 92 insertions(+), 16 deletions(-)

-- 
2.55.0