[ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.
muthukrishnan.t at tataelxsi.co.in
Mon Oct 17 06:40:58 UTC 2016
Dear Ben ,
Thanks you for your response.
Is there any option to commit this patch to the earlier branches (i.e) OVS 2.5.x . Kindly let me know if there is a provision and procedure for the same.
From: Ben Pfaff <blp at ovn.org>
Sent: Thursday, October 13, 2016 11:49:01 PM
To: Muthukrishnan Thangasamy
Cc: dev at openvswitch.org
Subject: Re: [ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.
The commit message says:
openvswitch: Allow external IPsec tunnel management.
OVS GRE IPsec tunnel support has multiple issues, Therefore
it was deprecated in OVS 2.6.
Following patch removes support for GRE IPsec and allows external
IPsec tunnel management for any type of tunnel not just GRE.
e.g. user can encrypt Geneve or VxLan traffic.
It can be done by using openflow pipeline to set skb-mark
and using IPsec keying daemons to implement IPsec tunnels.
This packet can be matched for the skb-mark to encrypt
selective tunnel traffic.
Signed-off-by: Pravin B Shelar <pshelar at ovn.org>
Acked-by: Ansis Atteka <aatteka at ovn.org>
On Thu, Oct 13, 2016 at 06:06:10AM +0000, Muthukrishnan Thangasamy wrote:
> Dear Ben ,
> Thank you for your response.
> Could you please throw some light on ,any specific reason why OVS stopped support for ovs-monitor-ipsec and decided to remove support for ipsec altogether in ovs.
> From: Ben Pfaff <blp at ovn.org>
> Sent: Thursday, September 29, 2016 8:43:43 PM
> To: Muthukrishnan Thangasamy
> Cc: dev at openvswitch.org
> Subject: Re: [ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.
> On Thu, Sep 29, 2016 at 07:13:55AM +0000, Muthukrishnan Thangasamy wrote:
> > From 76e504a38a3c556884782323459cc6862a38747c Mon Sep 17 00:00:00 2001
> > From: Muthukrishnan T <muthukrishnan.t at tataelxsi.co.in>
> > Date: Thu, 29 Sep 2016 12:21:29 +0530
> > Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel mode options support.
> We just removed ovs-monitor-ipsec, so this can't be applied.
More information about the dev