[ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.

Ben Pfaff blp at ovn.org
Thu Oct 13 18:19:01 UTC 2016


The commit message says:

    openvswitch: Allow external IPsec tunnel management.
    
    OVS GRE IPsec tunnel support has multiple issues, Therefore
    it was deprecated in OVS 2.6.
    
    Following patch removes support for GRE IPsec and allows external
    IPsec tunnel management for any type of tunnel not just GRE.
    e.g. user can encrypt Geneve or VxLan traffic.
    
    It can be done by using openflow pipeline to set skb-mark
    and using IPsec keying daemons to implement IPsec tunnels.
    This packet can be matched for the skb-mark to encrypt
    selective tunnel traffic.
    
    VMware-BZ: 1710701
    Signed-off-by: Pravin B Shelar <pshelar at ovn.org>
    Acked-by: Ansis Atteka <aatteka at ovn.org>


On Thu, Oct 13, 2016 at 06:06:10AM +0000, Muthukrishnan Thangasamy wrote:
> Dear Ben ,
> 
> 
> Thank you for your response.
> 
> 
> Could you please throw some light on ,any specific reason why OVS stopped support for ovs-monitor-ipsec and decided to remove support for ipsec altogether in ovs.
> 
> 
> Regards
> 
> Muthukrishnan
> 
> 9952012433
> 
> ________________________________
> From: Ben Pfaff <blp at ovn.org>
> Sent: Thursday, September 29, 2016 8:43:43 PM
> To: Muthukrishnan Thangasamy
> Cc: dev at openvswitch.org
> Subject: Re: [ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.
> 
> On Thu, Sep 29, 2016 at 07:13:55AM +0000, Muthukrishnan Thangasamy wrote:
> > From 76e504a38a3c556884782323459cc6862a38747c Mon Sep 17 00:00:00 2001
> > From: Muthukrishnan T <muthukrishnan.t at tataelxsi.co.in>
> > Date: Thu, 29 Sep 2016 12:21:29 +0530
> > Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.
> 
> We just removed ovs-monitor-ipsec, so this can't be applied.



More information about the dev mailing list