linux-stable/net/openvswitch
Aaron Conole 22f73f807e openvswitch: support asymmetric conntrack
[ Upstream commit 5d50aa83e2 ]

The openvswitch module shares a common conntrack and NAT infrastructure
exposed via netfilter.  It's possible that a packet needs both SNAT and
DNAT manipulation, due to e.g. tuple collision.  Netfilter can support
this because it runs through the NAT table twice - once on ingress and
again after egress.  The openvswitch module doesn't have such capability.

Like netfilter hook infrastructure, we should run through NAT twice to
keep the symmetry.

Fixes: 05752523e5 ("openvswitch: Interface with NAT.")
Signed-off-by: Aaron Conole <aconole@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-12-21 10:47:34 +01:00
..
actions.c net: openvswitch: fix csum updates for MPLS actions 2019-07-31 07:28:45 +02:00
conntrack.c openvswitch: support asymmetric conntrack 2019-12-21 10:47:34 +01:00
conntrack.h
datapath.c openvswitch: remove another BUG_ON() 2019-12-05 15:38:17 +01:00
datapath.h openvswitch: fix skb_panic due to the incorrect actions attrlen 2017-08-16 14:12:37 -07:00
dp_notify.c
flow.c openvswitch: Fix pop_vlan action for double tagged frames 2018-01-02 20:31:10 +01:00
flow.h openvswitch: Optimize operations for OvS flow_stats. 2017-07-19 13:49:39 -07:00
flow_netlink.c openvswitch: fix flow actions reallocation 2019-04-17 08:37:47 +02:00
flow_netlink.h
flow_table.c openvswitch: Optimize operations for OvS flow_stats. 2017-07-19 13:49:39 -07:00
flow_table.h
Kconfig
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
vport-geneve.c
vport-gre.c
vport-internal_dev.c net: ovs: fix return type of ndo_start_xmit function 2019-11-24 08:22:48 +01:00
vport-internal_dev.h
vport-netdev.c
vport-netdev.h
vport-vxlan.c vxlan: get rid of redundant vxlan_dev.flags 2017-06-20 13:37:02 -04:00
vport.c
vport.h