mirror of
https://github.com/jmcorgan/fips.git
synced 2026-10-05 19:18:25 +00:00
Johnathan Corgan
7e8130ebf3
The gateway pins a mapping while conntrack shows sessions to its virtual IP. On a kernel with no readable conntrack source every mapping reads zero sessions, so session pinning is silently off, and an operator learned that only from a warning at the first failed tick. The gateway now reads conntrack once at startup, through the same reader the tick uses, and logs one line: which source answered and that session pinning is on, or that no source is readable and session pinning is off, with the error. The integration test asks the gateway's namespace whether the proc file exists and checks that the matching line appears exactly once.