projects / cascardo / ovs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 66ad122) | patch
ipsec: install iptables rules that set IPsec bit in skb mark
authorAnsis Atteka <aatteka@nicira.com>
Tue, 21 Jan 2014 01:16:39 +0000 (17:16 -0800)
committerAnsis Atteka <aatteka@nicira.com>
Wed, 22 Jan 2014 01:12:00 +0000 (17:12 -0800)
commit2b5723094050a9e7b612809b5433f7a6fb9f953c
tree85bf11e2ebec1ac3d1a1292b042ccac2d2d54855tree | snapshot
parent66ad12231e2d2416a0356283f7662d406895a3eacommit | diff
ipsec: install iptables rules that set IPsec bit in skb mark

Without these two iptables rules (one for UDP encapsulated IPsec and
another for direct IPsec), ovs-vswitchd would incorrectly conclude
that GRE packet belonged to a plain GRE tunnel instead of IPsec GRE
tunnel.

Reported-by: Aryan TaheriMonfared <aryan.taherimonfared@uis.no>
Reported-by: Daniel Hiltgen <daniel@netkine.com>
Signed-off-by: Ansis Atteka <aatteka@nicira.com>
AUTHORS diff | blob | history
debian/openvswitch-ipsec.init diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.