Skip to content

Commit e1ffc30

Browse files
kelsey-steelechessturo
authored andcommitted
configs: enable NF_CONNTRACK_ZONES and NETFILTER_XT_TARGET_CT
NF_CONNTRACK_ZONES=y NETFILTER_XT_TARGET_CT=m NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally, each connection needs to have a unique system wide identity. Connection tracking zones allow to have multiple connections using the same identity, as long as they are contained in different zones. NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify initial connection tracking parameters like events to be delivered and the helper to be used. Enabling these two configs to support Istio DNS proxy feature. Link: microsoft/WSL#8153 Signed-off-by: Kelsey Steele <kelseysteele@microsoft.com>
1 parent 0c5b2ca commit e1ffc30

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

arch/arm64/configs/config-wsl-arm64

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -992,7 +992,7 @@ CONFIG_NF_LOG_SYSLOG=y
992992
CONFIG_NETFILTER_CONNCOUNT=y
993993
CONFIG_NF_CONNTRACK_MARK=y
994994
# CONFIG_NF_CONNTRACK_SECMARK is not set
995-
# CONFIG_NF_CONNTRACK_ZONES is not set
995+
CONFIG_NF_CONNTRACK_ZONES=y
996996
# CONFIG_NF_CONNTRACK_PROCFS is not set
997997
CONFIG_NF_CONNTRACK_EVENTS=y
998998
# CONFIG_NF_CONNTRACK_TIMEOUT is not set
@@ -1066,7 +1066,7 @@ CONFIG_NETFILTER_XT_SET=y
10661066
CONFIG_NETFILTER_XT_TARGET_CHECKSUM=y
10671067
# CONFIG_NETFILTER_XT_TARGET_CLASSIFY is not set
10681068
# CONFIG_NETFILTER_XT_TARGET_CONNMARK is not set
1069-
# CONFIG_NETFILTER_XT_TARGET_CT is not set
1069+
CONFIG_NETFILTER_XT_TARGET_CT=m
10701070
# CONFIG_NETFILTER_XT_TARGET_DSCP is not set
10711071
CONFIG_NETFILTER_XT_TARGET_HL=y
10721072
# CONFIG_NETFILTER_XT_TARGET_HMARK is not set

arch/x86/configs/config-wsl

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1026,7 +1026,7 @@ CONFIG_NF_LOG_SYSLOG=y
10261026
CONFIG_NETFILTER_CONNCOUNT=y
10271027
CONFIG_NF_CONNTRACK_MARK=y
10281028
# CONFIG_NF_CONNTRACK_SECMARK is not set
1029-
# CONFIG_NF_CONNTRACK_ZONES is not set
1029+
CONFIG_NF_CONNTRACK_ZONES=y
10301030
# CONFIG_NF_CONNTRACK_PROCFS is not set
10311031
CONFIG_NF_CONNTRACK_EVENTS=y
10321032
# CONFIG_NF_CONNTRACK_TIMEOUT is not set
@@ -1101,7 +1101,7 @@ CONFIG_NETFILTER_XT_SET=y
11011101
CONFIG_NETFILTER_XT_TARGET_CHECKSUM=y
11021102
# CONFIG_NETFILTER_XT_TARGET_CLASSIFY is not set
11031103
# CONFIG_NETFILTER_XT_TARGET_CONNMARK is not set
1104-
# CONFIG_NETFILTER_XT_TARGET_CT is not set
1104+
CONFIG_NETFILTER_XT_TARGET_CT=m
11051105
# CONFIG_NETFILTER_XT_TARGET_DSCP is not set
11061106
CONFIG_NETFILTER_XT_TARGET_HL=y
11071107
# CONFIG_NETFILTER_XT_TARGET_HMARK is not set

0 commit comments

Comments
 (0)