Is nf_conntrack respects network namespaces? Does it creates a separate table for each network namespace based on its sysctl limits, or does it share memory (and limits) between different network namespaces?

I've searched a lot, but wasn't able to find anything definitive.

1 Answer 1


I found a video [1] from 2015 with discussion of openvswitch and namespaces, and there was a rather strong confirmation that each namespace got a separate conntrack table with separate limits.

[1] Linux network namespaces support in OVS - OVS Conference 2015 https://www.youtube.com/watch?v=_xH3hyWGI6k

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.