[ovs-dev] [PATCH] tnl-neigh: Use outgoing ofproto version.
vdasari at gmail.com
Wed Aug 14 15:43:12 UTC 2019
Looks good Flavio.
Acked-By: Vasu Dasari <vdasari at gmail.com>
On Tue, Aug 13, 2019 at 12:45 PM Flavio Leitner via dev <
ovs-dev at openvswitch.org> wrote:
> On Tue, Aug 13, 2019 at 01:34:04PM -0300, Flavio Leitner via dev wrote:
> > When a packet needs to be encapsulated in userspace, the endpoint
> > address needs to be resolved to fill in the headers. If it is not,
> > then currently OvS sends either a Neighbor Solicitation (IPv6)
> > or an ARP Query (IPv4) to resolve it.
> > The problem is that the NS/ARP packet will go through the flow
> > rules in the new bridge, but inheriting the ofproto table version
> > from the original packet to be encapsulated. When those versions
> > don't match, the result is unexpected because no flow rules might
> > be visible, which would cause the default table rule to be used
> > to drop the packet. Or only part of the flow rules would be visible
> > and so on.
> > Since the NS/ARP packet is created by OvS and will be injected in
> > the outgoing bridge, use the corresponding ofproto version instead.
> Please backport this up to 2.9 at least.
> dev mailing list
> dev at openvswitch.org
More information about the dev