On Thu, Aug 26, 2021 at 03:54:18PM +0200, Florian Westphal wrote: > Two recent commits switched inet rt and nexthop exception > hashes from jhash to siphash. > > If those two spots are problematic then conntrack is affected > as well, so switch voer to siphash too. > > While at it, add a hard upper limit on chain lengths and reject > insertion if this is hit. Applied, thanks. I've taken this 3/3 version: https://patchwork.ozlabs.org/project/netfilter-devel/patch/20210826135422.31063-5-fw@xxxxxxxxx/