diff options
author | Aaron Conole <[email protected]> | 2022-03-18 08:43:19 -0400 |
---|---|---|
committer | Jakub Kicinski <[email protected]> | 2022-03-21 22:29:10 -0700 |
commit | 60b44ca6bd7518dd38fa2719bc9240378b6172c3 (patch) | |
tree | 88c003c460c70e52093cd3e8a631ae0ad620a5e8 /net/lapb/lapb_subr.c | |
parent | ed0c99dc0f499ff8b6e75b5ae6092ab42be1ad39 (diff) |
openvswitch: always update flow key after nat
During NAT, a tuple collision may occur. When this happens, openvswitch
will make a second pass through NAT which will perform additional packet
modification. This will update the skb data, but not the flow key that
OVS uses. This means that future flow lookups, and packet matches will
have incorrect data. This has been supported since
5d50aa83e2c8 ("openvswitch: support asymmetric conntrack").
That commit failed to properly update the sw_flow_key attributes, since
it only called the ovs_ct_nat_update_key once, rather than each time
ovs_ct_nat_execute was called. As these two operations are linked, the
ovs_ct_nat_execute() function should always make sure that the
sw_flow_key is updated after a successful call through NAT infrastructure.
Fixes: 5d50aa83e2c8 ("openvswitch: support asymmetric conntrack")
Cc: Dumitru Ceara <[email protected]>
Cc: Numan Siddique <[email protected]>
Signed-off-by: Aaron Conole <[email protected]>
Acked-by: Eelco Chaudron <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'net/lapb/lapb_subr.c')
0 files changed, 0 insertions, 0 deletions