diff options
| author | Jesse Gross <jesse@nicira.com> | 2013-08-06 12:57:15 -0700 |
|---|---|---|
| committer | Jesse Gross <jesse@nicira.com> | 2013-08-13 14:39:51 -0700 |
| commit | ed2e72459317c689c46d3f1d279945485ff34fda (patch) | |
| tree | 94c773d81dcdcbc9805c93c873d151cf3f4dc12a /ofproto/tunnel.h | |
| parent | 62a7cc71f56ff6a2e943db3d1db238bf7ecd8bc9 (diff) | |
| download | openvswitch-ed2e72459317c689c46d3f1d279945485ff34fda.tar.gz | |
tunnel: Clear IPSEC_MARK on input rather than output.
Currently we remove the IPSEC_MARK flag from all packets that are
egressing on non-tunnel ports. However, this behavior is confusing
if we allow OpenFlow controllers to match and set the pkt_mark field
because the tunnel behavior applies even on non-tunnel ports.
This instead clears the mark on tunnel input which should have the
same effect for tunnel ports. However, on non-tunnel traffic (or
even for traffic entering on a tunnel port but leaving on a non-
tunnel port) it allows the mark to pass through without change.
Signed-off-by: Jesse Gross <jesse@nicira.com>
Acked-by: Andy Zhou <azhou@nicira.com>
Diffstat (limited to 'ofproto/tunnel.h')
| -rw-r--r-- | ofproto/tunnel.h | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/ofproto/tunnel.h b/ofproto/tunnel.h index afe78ab80..27a2f7dbc 100644 --- a/ofproto/tunnel.h +++ b/ofproto/tunnel.h @@ -20,9 +20,6 @@ #include <stdint.h> #include "flow.h" -/* skb mark used for IPsec tunnel packets */ -#define IPSEC_MARK 1 - /* Tunnel port emulation layer. * * These functions emulate tunnel virtual ports based on the outer |