[ovs-dev] [PATCH V3 18/24] datapath: support asymmetric conntrack

Yi-Hung Wei yihung.wei at gmail.com
Wed Sep 30 22:37:20 UTC 2020

On Wed, Sep 16, 2020 at 10:38 AM Greg Rose <gvrose8192 at gmail.com> wrote:
> From: aaron conole <aconole at redhat.com>
> Upstream commit:
>     commit 5d50aa83e2c8e91ced2cca77c198b468ca9210f4
>     author: aaron conole <aconole at redhat.com>
>     date:   tue dec 3 16:34:13 2019 -0500
>     openvswitch: support asymmetric conntrack
>     the openvswitch module shares a common conntrack and nat infrastructure
>     exposed via netfilter.  it's possible that a packet needs both snat and
>     dnat manipulation, due to e.g. tuple collision.  netfilter can support
>     this because it runs through the nat table twice - once on ingress and
>     again after egress.  the openvswitch module doesn't have such capability.
>     like netfilter hook infrastructure, we should run through nat twice to
>     keep the symmetry.
>     fixes: 05752523e565 ("openvswitch: interface with nat.")
>     signed-off-by: aaron conole <aconole at redhat.com>
>     signed-off-by: david s. miller <davem at davemloft.net>
> Fixes: c5f6c06b58d6 ("datapath: Interface with NAT.")
> Cc: aaron conole <aconole at redhat.com>
> Acked-by: Aaron Conole <aconole at redhat.com>
> Signed-off-by: Greg Rose <gvrose8192 at gmail.com>
> ---

Acked-by: Yi-Hung Wei <yihung.wei at gmail.com>

More information about the dev mailing list