[ovs-dev] [PATCH] datapath: add transport ports in route lookup to enable IPsec policy match.

Ben Pfaff blp at ovn.org
Mon Jun 18 18:44:42 UTC 2018


On Mon, Jun 18, 2018 at 11:14:53AM -0700, Qiuyu Xiao wrote:
> This patch adds transport ports information for route lookup so that IPsec
> can select tunnel traffic (geneve, stt, vxlan) to do encryption.
> 
> The patch was tested for geneve, stt, and vxlan tunnel and the results
> show that IPsec policy can be set to only match the corresponding tunnel
> traffic.
> 
> Signed-off-by: Qiuyu Xiao <qiuyu.xiao.qyx at gmail.com>

Greg, once you have a look at this for the OVS tree's datapath module,
Qiuyu probably could use some assistance in pushing it upstream.


More information about the dev mailing list