]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel
authorVadim Fedorenko <vfedorenko@yandex-team.ru>
Wed, 15 Feb 2017 13:33:56 +0000 (16:33 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 26 Sep 2017 12:06:33 +0000 (14:06 +0200)
commitc6515196f06dc02bd11ca54051a3b87c1b55312b
tree04ac9b72baa4b26449e77429a45ab52e56a3524b
parent452af7f8a31b9414a5815f065c57e8982363b59c
netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel

IPVS tunnel mode works as simple tunnel (see RFC 3168) copying ECN field
to outer header. That's result in packet drops on egress tunnels in case
the egress tunnel operates as ECN-capable with Full-functionality option
(like ip_tunnel and ip6_tunnel kernel modules), according to RFC 3168
section 9.1.1 recommendation.

This patch implements ECN full-functionality option into ipvs xmit code.

Cc: netdev@vger.kernel.org
Cc: lvs-devel@vger.kernel.org
Signed-off-by: Vadim Fedorenko <vfedorenko@yandex-team.ru>
Reviewed-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipvs/ip_vs_xmit.c