[ovs-build] Passed: dceara/ovs#47 (userspace_ct_zone_fix - d9e9692)

[Travis CI]

Build Update for dceara/ovs
-------------------------------------

Build: #47
Status: Passed

Duration: 48 mins and 46 secs
Commit: d9e9692 (userspace_ct_zone_fix)
Author: Dumitru Ceara
Message: conntrack: Reset ct_state when entering a new zone.

When a new conntrack zone is entered, the ct_state field is zeroed in
order to avoid using state information from different zones.

One such scenario is when a packet is double NATed. Assuming two zones
and 3 flows performing the following actions in order on the packet:
1. ct(zone=5,nat), recirc
2. ct(zone=1), recirc
3. ct(zone=1,nat)

If at step #1 the packet matches an existing NAT entry, it will get
translated and pkt->md.ct_state is set to CS_DST_NAT or CS_SRC_NAT.
At step #2 the new tuple might match an existing connection and
pkt->md.ct_zone is set to 1.
If at step #3 the packet matches an existing NAT entry in zone 1,
handle_nat() will be called to perform the translation but it will
return early because the packet's zone matches the conntrack zone and
the ct_state field still contains CS_DST_NAT or CS_SRC_NAT from the
translations in zone 5.

In order to reliably detect when a packet enters a new conntrack zone
we also need to zero out the pkt->md.ct_zone field when initializing
metadata in pkt_metadata_init().

CC: Darrell Ball <dlu998 at gmail.com>
Signed-off-by: Dumitru Ceara <dceara at redhat.com>

View the changeset: https://github.com/dceara/ovs/compare/cefdd80a29eb^...d9e9692285df

View the full build log and details: https://travis-ci.org/dceara/ovs/builds/643836448?utm_medium=notification&utm_source=email

--

You can unsubscribe from build emails from the dceara/ovs repository going to https://travis-ci.org/account/preferences/unsubscribe?repository=25057358&utm_medium=notification&utm_source=email.
Or unsubscribe from *all* email updating your settings at https://travis-ci.org/account/preferences/unsubscribe?utm_medium=notification&utm_source=email.
Or configure specific recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-build/attachments/20200130/0af12172/attachment.html>