Revision 13c62f5371e3eb4fc3400cfa26e64ca75f888008 authored by Marcelo Ricardo Leitner on 09 June 2021, 14:23:56 UTC, committed by David S. Miller on 09 June 2021, 22:34:51 UTC
This this the counterpart of 8aa7b526dc0b ("openvswitch: handle DNAT
tuple collision") for act_ct. From that commit changelog:
"""
With multiple DNAT rules it's possible that after destination
translation the resulting tuples collide.
...
Netfilter handles this case by allocating a null binding for SNAT at
egress by default. Perform the same operation in openvswitch for DNAT
if no explicit SNAT is requested by the user and allocate a null binding
for SNAT for packets in the "original" direction.
"""
Fixes: 95219afbb980 ("act_ct: support asymmetric conntrack")
Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent d2e381c
| File | Mode | Size |
|---|---|---|
| .gitignore | -rw-r--r-- | 85 bytes |
| Kconfig | -rw-r--r-- | 4.1 KB |
| Makefile | -rw-r--r-- | 4.8 KB |
| blacklist.c | -rw-r--r-- | 5.7 KB |
| blacklist.h | -rw-r--r-- | 135 bytes |
| blacklist_hashes.c | -rw-r--r-- | 166 bytes |
| blacklist_nohashes.c | -rw-r--r-- | 122 bytes |
| common.c | -rw-r--r-- | 1.2 KB |
| common.h | -rw-r--r-- | 216 bytes |
| revocation_certificates.S | -rw-r--r-- | 495 bytes |
| system_certificates.S | -rw-r--r-- | 1.1 KB |
| system_keyring.c | -rw-r--r-- | 8.5 KB |
Computing file changes ...
