projects / cascardo / ovs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 64ca947) | patch
ipsec: install iptables rules that set IPsec bit in skb mark
authorAnsis Atteka <aatteka@nicira.com>
Tue, 21 Jan 2014 01:16:39 +0000 (17:16 -0800)
committerAnsis Atteka <aatteka@nicira.com>
Wed, 22 Jan 2014 01:12:16 +0000 (17:12 -0800)
commit7849d3e4cab657eb42b513b0d9ad656fc38259bd
tree1a9e18ba9ce1417cb861ce0caf02b531358c9cd6tree | snapshot
parent64ca9472f0b0f40b94abe2adf5d397bdf3d5e7b3commit | diff
ipsec: install iptables rules that set IPsec bit in skb mark

Without these two iptables rules (one for UDP encapsulated IPsec and
another for direct IPsec), ovs-vswitchd would incorrectly conclude
that GRE packet belonged to a plain GRE tunnel instead of IPsec GRE
tunnel.

Reported-by: Aryan TaheriMonfared <aryan.taherimonfared@uis.no>
Reported-by: Daniel Hiltgen <daniel@netkine.com>
Signed-off-by: Ansis Atteka <aatteka@nicira.com>
AUTHORS diff | blob | history
debian/openvswitch-ipsec.init diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.