On Tue, Mar 7, 2023 at 6:22 AM Eric Dumazet <edumazet@xxxxxxxxxx> wrote: > > Customers using GKE 1.25 and 1.26 are facing conntrack issues > root caused to commit c9c3b6811f74 ("netfilter: conntrack: make > max chain length random"). > > Even if we assume Uniform Hashing, a bucket often reachs 8 chained > items while the load factor of the hash table is smaller than 0.5 > Sorry for the messed patch title. This should have been: netfilter: conntrack: adopt safer max chain length Florian, Pablo, let me know if you want me to send a v2, thanks !