Hello, I thought you will have some separate patch that adds code to be used in v2 but if you prefer I can release v2, so that you can add followup patch[es] based on that. Regards -- Julian Anastaso
Hello, Let me know If you prefer to add GUE code that we can use in this patchset, I can test it easily. I'll delay with v2 to incorporate any needed changes. Regards -- Julian Anastasov <ja@xxxxxx>
Hello, Yes but fou.c strips the headers in all cases while in IPVS we should do it only when connection is found because we do not want to mess with non-IPVS traffic. We can even safely return NF_ACC
Hi Julian, I think that the gue-specific portions of the above, which is most of ipvs_udp_decap() should be a separate helper which is part of net/gue.h or net/ipv4/fou.c - this seems to be a subset
Recognize UDP tunnels in received ICMP errors and properly strip the tunnel headers. GUE is what we have for now. Signed-off-by: Julian Anastasov <ja@xxxxxx> -- net/netfilter/ipvs/ip_vs_core.c | 58 +