[pve-devel] [PATCH many 00/14] fix #5180: migrate conntrack state on live migration

[Christoph Heiss]

v2 available: https://lore.proxmox.com/pve-devel/20250424111941.730528-1-c.heiss@proxmox.com/

On Mon Mar 17, 2025 at 3:11 PM CET, Christoph Heiss wrote:
> Fixes #5180 [0].
>
> This implements migration of per-VM conntrack state on live-migration.
>
> The core of the implementation are in patch #7 & #8. See there for more
> details.
>
> Patch #1 - #3 implement CONNMARK'ing any VM traffic with their unique
> VMID. This is needed later on to filter conntrack entries for the
> migration. These three patches can be applied independently,
> CONNMARK'ing traffic does not have any visible impact.
>
> Patch #13 & #14 are marked RFC, as I'm not sure if we need/should
> implement that. But it's working well and cleanup of old resources is
> always good IMHO.
>
> Currently, remote/inter-cluster migration is not supported and indicated
> to the user with a warning. See also patch #8 for a bit more in-depth
> explanation.
>
> Needed dependency bumps between packages are indicated in the notes
> appropriately.
>
> [0] https://bugzilla.proxmox.com/show_bug.cgi?id=5180