Include module nf_conntrack in WSL2 kernel

[c0ffeec0der]

Is your feature request related to a problem? Please describe.
Yes, Istio issue 37885 WSL2 kernel (5.10.60.1-microsoft-standard-WSL2) does not have nf_conntrack module

Describe the solution you'd like
Include module nf_conntrack

Describe alternatives you've considered
N/A

Additional context
Without the module istio dns proxy will not run. for more details check Istio issue 37885

[elsaco]

@c0ffeec0der this is a list of Netfilter Conntrack options enabled in WSL kernel:

tux@ubuntu:~/kernel/Microsoft$ grep -i conntrack config-wsl
CONFIG_NF_CONNTRACK=y
CONFIG_NF_CONNTRACK_MARK=y
# CONFIG_NF_CONNTRACK_SECMARK is not set
# CONFIG_NF_CONNTRACK_ZONES is not set
# CONFIG_NF_CONNTRACK_PROCFS is not set
CONFIG_NF_CONNTRACK_EVENTS=y
# CONFIG_NF_CONNTRACK_TIMEOUT is not set
# CONFIG_NF_CONNTRACK_TIMESTAMP is not set
# CONFIG_NF_CONNTRACK_LABELS is not set
CONFIG_NF_CONNTRACK_AMANDA=y
CONFIG_NF_CONNTRACK_FTP=y
CONFIG_NF_CONNTRACK_H323=y
CONFIG_NF_CONNTRACK_IRC=y
CONFIG_NF_CONNTRACK_BROADCAST=y
CONFIG_NF_CONNTRACK_NETBIOS_NS=y
# CONFIG_NF_CONNTRACK_SNMP is not set
CONFIG_NF_CONNTRACK_PPTP=y
CONFIG_NF_CONNTRACK_SANE=y
CONFIG_NF_CONNTRACK_SIP=y
CONFIG_NF_CONNTRACK_TFTP=y
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
# CONFIG_NF_CONNTRACK_BRIDGE is not set

CONFIG_NF_CONNTRACK is enabled and built into the kernel blob already.

Open /proc/config.gz to see all your running kernel options.

[c0ffeec0der]

Thanks @elsaco

How to enable "# CONFIG_NF_CONNTRACK_ZONES is not set"?

Can I refer to the steps listed here? Or can this be part of next wsl - - update? Thanks

[elsaco]

@c0ffeec0der to enable CONFIG_NF_CONNTRACK_ZONES download the latest WSL2-Linux_kernel from https://github.com/microsoft/WSL2-Linux-Kernel/archive/refs/tags/linux-msft-wsl-5.10.102.1.tar.gz and compile a new kernel. After a successful build, copy the new bzImage to the Windows filesystem and reference the new kernel in your .wslconfig file. Run wsl --shutdown to make sure the new kernel is used for new WSL instances.

This is a make config screenshot with the above setting enabled:

[c0ffeec0der]

@elsaco Thank you very much! I am able to compile the kernel