On Tue, Feb 01, 2022 at 10:08:55AM +0700, Pham Thanh Tuyen wrote: > When the conntrack is created, the extension is created before the conntrack > is assigned confirmed and inserted into the hash table. But the function > ctnetlink_setup_nat() causes loss of helper in the mentioned situation. I > mention the template because it's seamless in the > __nf_ct_try_assign_helper() function. Please double check. Conntrack entries that are created via ctnetlink as IPS_CONFIRMED always set on. The helper code is only exercised from the packet path for conntrack entries that are newly created.
