openvswitch: Reset upper layer protocol info on internal devices.
It's possible that packets that are sent on internal devices (from the OVS perspective) have already traversed the local IP stack. After they go through the internal device, they will again travel through the IP stack which may get confused by the presence of existing information in the skb. The problem can be observed when switching between namespaces. This clears out that information to avoid problems but deliberately leaves other metadata alone. This is to provide maximum flexibility in chaining together OVS and other Linux components. Signed-off-by: Jesse Gross <jesse@nicira.com>
This commit is contained in:
Родитель
caf2ee14bb
Коммит
7fe99e2d43
|
@ -24,6 +24,9 @@
|
||||||
#include <linux/ethtool.h>
|
#include <linux/ethtool.h>
|
||||||
#include <linux/skbuff.h>
|
#include <linux/skbuff.h>
|
||||||
|
|
||||||
|
#include <net/dst.h>
|
||||||
|
#include <net/xfrm.h>
|
||||||
|
|
||||||
#include "datapath.h"
|
#include "datapath.h"
|
||||||
#include "vport-internal_dev.h"
|
#include "vport-internal_dev.h"
|
||||||
#include "vport-netdev.h"
|
#include "vport-netdev.h"
|
||||||
|
@ -209,6 +212,11 @@ static int internal_dev_recv(struct vport *vport, struct sk_buff *skb)
|
||||||
int len;
|
int len;
|
||||||
|
|
||||||
len = skb->len;
|
len = skb->len;
|
||||||
|
|
||||||
|
skb_dst_drop(skb);
|
||||||
|
nf_reset(skb);
|
||||||
|
secpath_reset(skb);
|
||||||
|
|
||||||
skb->dev = netdev;
|
skb->dev = netdev;
|
||||||
skb->pkt_type = PACKET_HOST;
|
skb->pkt_type = PACKET_HOST;
|
||||||
skb->protocol = eth_type_trans(skb, netdev);
|
skb->protocol = eth_type_trans(skb, netdev);
|
||||||
|
|
Загрузка…
Ссылка в новой задаче