[ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.

Muthukrishnan Thangasamy muthukrishnan.t at tataelxsi.co.in
Mon Oct 17 06:40:58 UTC 2016


Dear Ben ,


Thanks you for your response.


Is there any option to commit this patch to the earlier branches (i.e) OVS 2.5.x . Kindly let me know if there is a provision and procedure for the same.


Regards

Muthukrishnan

9952012433

________________________________
From: Ben Pfaff <blp at ovn.org>
Sent: Thursday, October 13, 2016 11:49:01 PM
To: Muthukrishnan Thangasamy
Cc: dev at openvswitch.org
Subject: Re: [ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.

The commit message says:

    openvswitch: Allow external IPsec tunnel management.

    OVS GRE IPsec tunnel support has multiple issues, Therefore
    it was deprecated in OVS 2.6.

    Following patch removes support for GRE IPsec and allows external
    IPsec tunnel management for any type of tunnel not just GRE.
    e.g. user can encrypt Geneve or VxLan traffic.

    It can be done by using openflow pipeline to set skb-mark
    and using IPsec keying daemons to implement IPsec tunnels.
    This packet can be matched for the skb-mark to encrypt
    selective tunnel traffic.

    VMware-BZ: 1710701
    Signed-off-by: Pravin B Shelar <pshelar at ovn.org>
    Acked-by: Ansis Atteka <aatteka at ovn.org>


On Thu, Oct 13, 2016 at 06:06:10AM +0000, Muthukrishnan Thangasamy wrote:
> Dear Ben ,
>
>
> Thank you for your response.
>
>
> Could you please throw some light on ,any specific reason why OVS stopped support for ovs-monitor-ipsec and decided to remove support for ipsec altogether in ovs.
>
>
> Regards
>
> Muthukrishnan
>
> 9952012433
>
> ________________________________
> From: Ben Pfaff <blp at ovn.org>
> Sent: Thursday, September 29, 2016 8:43:43 PM
> To: Muthukrishnan Thangasamy
> Cc: dev at openvswitch.org
> Subject: Re: [ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.
>
> On Thu, Sep 29, 2016 at 07:13:55AM +0000, Muthukrishnan Thangasamy wrote:
> > From 76e504a38a3c556884782323459cc6862a38747c Mon Sep 17 00:00:00 2001
> > From: Muthukrishnan T <muthukrishnan.t at tataelxsi.co.in>
> > Date: Thu, 29 Sep 2016 12:21:29 +0530
> > Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.
>
> We just removed ovs-monitor-ipsec, so this can't be applied.



More information about the dev mailing list