diff options
| author | Vladislav Odintsov <odivlad@gmail.com> | 2021-11-26 23:59:42 +0300 |
|---|---|---|
| committer | Ilya Maximets <i.maximets@ovn.org> | 2021-12-09 15:18:23 +0100 |
| commit | 72745ab0cdecf78ef5d1b487e3e030d9defe9114 (patch) | |
| tree | 39bfbfa4979d5e0af9812ddede0c7f98f4dd6be6 /Documentation | |
| parent | 18db7ec5eb8338749a8dc0c1707589707565965d (diff) | |
| download | openvswitch-72745ab0cdecf78ef5d1b487e3e030d9defe9114.tar.gz | |
compat: handle NF_REPEAT error on nf_conntrack_in.
In patch [1] rpl_nf_conntrack_in was backported as static inline
function without do..while loop handling NF_REPEAT error.
In patch [2] rpl_nf_conntrack_in backported function was removed
from compat/include/net/netfilter/nf_conntrack_core.h as an unused.
As a result the do..while loop around nf_conntrack_in was lost and
this caused problems on old RHEL kernels with the tcp SYN
loss on a connection with same 5-tuple, which ran in last
nf_conntrack_tcp_timeout_time_wait. The connection could be
initiated on a tcp SYN retry after one second.
1: https://github.com/openvswitch/ovs/commit/4fdec8986a203b0dc9d9c183c932826967572e0f
2: https://github.com/openvswitch/ovs/commit/e9b33ad780f3bc712a5de6be9e1e0803fadcd249
Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2021-September/387623.html
Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2021-October/388424.html
Signed-off-by: Vladislav Odintsov <odivlad@gmail.com>
Reviewed-by: Greg Rose <gvrose8192@gmail.com>
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
Diffstat (limited to 'Documentation')
0 files changed, 0 insertions, 0 deletions