Is nf_conntrack
respects network namespaces? Does it creates a separate table for each network namespace based on its sysctl limits, or does it share memory (and limits) between different network namespaces?
I've searched a lot, but wasn't able to find anything definitive.