[ovs-dev] ipf question

[Darrell Ball]

On Fri, Nov 15, 2019 at 6:03 PM Li,Rongqing <lirongqing at baidu.com> wrote:

> 发件人: Darrell Ball <dlu998 at gmail.com>
> 发送时间: 2019年11月15日 22:58
> 收件人: Li,Rongqing
> 抄送: ovs dev
> 主题: Re: ipf question
>
>
> >Let me paraphrase, just to confirm we are on the same page.
> >IIUC, for example, in the case of a 33 fragment packet, in the first pass
> all 33 fragments enter ipf, then are >reassembled, pass thru conntrack
> >and then the frags sent out, while in the second pass, only 32 fragments
> enter conntrack/ipf, while index 32 >fragment is being forwarded out
> without going thru conntrack/ipf ?
>
> true.
> the second pass is recirculation
> and index 32 fragment is not into contrack/ipf, and send out to vm
> directly.
>

can you check what rule is being hit by that fragment packet vs others and
then compare the pkt metadata


> if  I change  NETDEV_MAX_BURST to 64, it works
>

good test


>
> thanks
>
> -RongQing
>
>
>
>
>