When Linux conntrack is no longer your friend
Connection tracking (“conntrack”) is a core feature of the Linux kernel's networking stack. It allows the kernel to track all logical network connections or flows and thus identify all packets that constitute each flow, so they can be processed sequentially together. Conntrack is an important kernel feature used in several key cases: NAT relies on information from conntrack […]
