[ovs-dev] [PATCH] datapath: Fix mysterious GRE-over-IPSEC problems.

Ben Pfaff blp at nicira.com
Wed Mar 30 22:09:08 UTC 2011


On Wed, Mar 30, 2011 at 02:08:11PM -0700, Jesse Gross wrote:
> On Wed, Mar 2, 2011 at 4:49 PM, Ben Pfaff <blp at nicira.com> wrote:
> > We've noticed that packets that go up to userspace and then back down to
> > the kernel and then enter an GRE tunnel that is then ESP encapsulated
> > by IPSEC end up with a bad ESP "next header" value: it ends up as zero
> > instead of 0x2f (IPPROTO_GRE). ?I'm still investigating but in the
> > meantime the "big hammer" of just putting packets from userspace into
> > a freshly allocated skb fixes the problem.
> >
> > Signed-off-by: Ben Pfaff <blp at nicira.com>
> > Bug #4769.
> 
> It doesn't seem like we're likely to find out the real cause of this
> problem any time soon and since this at least avoids the problem it
> probably makes sense to push it.
> 
> Acked-by: Jesse Gross <jesse at nicira.com>

I added your ack, revised the change log slightly, and pushed this.



More information about the dev mailing list