npf icon indicating copy to clipboard operation
npf copied to clipboard
verified publisher icon rmind

ALG mechanism needs improvements

Open rmind opened this issue 5 years ago • 0 comments

  • Race condition when unloading ALG module: npf_nat_freealg() vs lock-free readers.
  • Inspection as a loop in npf_alg_conn() is not particularly efficient. It could be optimized to be: 1) per-protocol 2) only limited to ALGs which perform inspection, rather than all.
  • npf_alg_exec() should only be performed if the NAT entry has an associated ALG; it is currently applicable only for the dynamic NAT anyway. If there will be ALGs operating with the static NAT, then npfa_funcs_t::snat could be added.

rmind avatar May 23 '20 16:05 rmind