[ovs-dev] ovs dpdk : userspace connection tracker cannot support L7?

Joe Stringer joe at ovn.org
Fri Aug 5 00:57:04 UTC 2016


On 2 August 2016 at 19:30, Yangyongqiang (Tony, Shannon)
<yangyongqiang at huawei.com> wrote:
> Hello,
>
> We read the connection tracker code, and find this patch can not parse ftp protocol.
>
> Whether the userspace connection tracker only has L4 feather or has L7 feather too ?
>
> If the ct cannot L7, then ovs dpdk cannot be used for stateful security group, so do we have a plan for supporting L7?

In the userspace datapath (dpdk), there is no support for IP
fragmentation or ALGs today. Only the linux kernel datapath has
support for these.



More information about the dev mailing list