]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel
authorVadim Fedorenko <vfedorenko@yandex-team.ru>
Wed, 15 Feb 2017 13:33:56 +0000 (16:33 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 26 Sep 2017 12:06:33 +0000 (14:06 +0200)
commitb0803c62ff0efdaa511c7da115026818fb8d8613
tree04ac9b72baa4b26449e77429a45ab52e56a3524b
parentd8fb466403841bb193140163eac007c2bc798ec5
netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel

IPVS tunnel mode works as simple tunnel (see RFC 3168) copying ECN field
to outer header. That's result in packet drops on egress tunnels in case
the egress tunnel operates as ECN-capable with Full-functionality option
(like ip_tunnel and ip6_tunnel kernel modules), according to RFC 3168
section 9.1.1 recommendation.

This patch implements ECN full-functionality option into ipvs xmit code.

Cc: netdev@vger.kernel.org
Cc: lvs-devel@vger.kernel.org
Signed-off-by: Vadim Fedorenko <vfedorenko@yandex-team.ru>
Reviewed-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipvs/ip_vs_xmit.c