projects / cascardo / ovs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fb4e233) | patch
ipsec: install iptables rules that set IPsec bit in skb mark
authorAnsis Atteka <aatteka@nicira.com>
Tue, 21 Jan 2014 01:16:39 +0000 (17:16 -0800)
committerAnsis Atteka <aatteka@nicira.com>
Wed, 22 Jan 2014 01:12:10 +0000 (17:12 -0800)
commitf670af6ad7b92693071da4f1c1affff8ca668be5
tree1d3d045980a6eb6e809bd8da9306b278fc845b4etree | snapshot
parentfb4e23392858cdf8d961b8e15c5df13dddebfb87commit | diff
ipsec: install iptables rules that set IPsec bit in skb mark

Without these two iptables rules (one for UDP encapsulated IPsec and
another for direct IPsec), ovs-vswitchd would incorrectly conclude
that GRE packet belonged to a plain GRE tunnel instead of IPsec GRE
tunnel.

Reported-by: Aryan TaheriMonfared <aryan.taherimonfared@uis.no>
Reported-by: Daniel Hiltgen <daniel@netkine.com>
Signed-off-by: Ansis Atteka <aatteka@nicira.com>
AUTHORS diff | blob | history
debian/openvswitch-ipsec.init diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.