kernel-fxtec-pro1x/net/openvswitch
Aaron Conole 6f99afcc24 openvswitch: support asymmetric conntrack
[ Upstream commit 5d50aa83e2c8e91ced2cca77c198b468ca9210f4 ]

The openvswitch module shares a common conntrack and NAT infrastructure
exposed via netfilter.  It's possible that a packet needs both SNAT and
DNAT manipulation, due to e.g. tuple collision.  Netfilter can support
this because it runs through the NAT table twice - once on ingress and
again after egress.  The openvswitch module doesn't have such capability.

Like netfilter hook infrastructure, we should run through NAT twice to
keep the symmetry.

Fixes: 05752523e5 ("openvswitch: Interface with NAT.")
Signed-off-by: Aaron Conole <aconole@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-12-21 10:57:14 +01:00
..
actions.c net: openvswitch: fix csum updates for MPLS actions 2019-07-28 08:29:24 +02:00
conntrack.c openvswitch: support asymmetric conntrack 2019-12-21 10:57:14 +01:00
conntrack.h
datapath.c openvswitch: remove another BUG_ON() 2019-12-05 09:21:31 +01:00
datapath.h
dp_notify.c
flow.c
flow.h
flow_netlink.c openvswitch: fix flow actions reallocation 2019-04-17 08:38:41 +02:00
flow_netlink.h
flow_table.c
flow_table.h
Kconfig
Makefile
meter.c
meter.h
vport-geneve.c
vport-gre.c
vport-internal_dev.c net: ovs: fix return type of ndo_start_xmit function 2019-11-24 08:19:17 +01:00
vport-internal_dev.h
vport-netdev.c
vport-netdev.h
vport-vxlan.c
vport.c
vport.h