mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-23 09:19:51 +00:00
[NETFILTER]: Honour source routing for LVS-NAT
For policy routing, packets originating from this machine itself may be routed differently to packets passing through. We want this packet to be routed as if it came from this machine itself. So re-compute the routing information using ip_route_me_harder(). This patch is derived from work by Ken Brownfield Cc: Ken Brownfield <krb@irridia.com> Signed-off-by: Simon Horman <horms@verge.net.au> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
b4c4ed175f
commit
901eaf6c8f
1 changed files with 10 additions and 0 deletions
|
@ -813,6 +813,16 @@ ip_vs_out(unsigned int hooknum, struct sk_buff **pskb,
|
||||||
skb->nh.iph->saddr = cp->vaddr;
|
skb->nh.iph->saddr = cp->vaddr;
|
||||||
ip_send_check(skb->nh.iph);
|
ip_send_check(skb->nh.iph);
|
||||||
|
|
||||||
|
/* For policy routing, packets originating from this
|
||||||
|
* machine itself may be routed differently to packets
|
||||||
|
* passing through. We want this packet to be routed as
|
||||||
|
* if it came from this machine itself. So re-compute
|
||||||
|
* the routing information.
|
||||||
|
*/
|
||||||
|
if (ip_route_me_harder(pskb, RTN_LOCAL) != 0)
|
||||||
|
goto drop;
|
||||||
|
skb = *pskb;
|
||||||
|
|
||||||
IP_VS_DBG_PKT(10, pp, skb, 0, "After SNAT");
|
IP_VS_DBG_PKT(10, pp, skb, 0, "After SNAT");
|
||||||
|
|
||||||
ip_vs_out_stats(cp, skb);
|
ip_vs_out_stats(cp, skb);
|
||||||
|
|
Loading…
Reference in a new issue