On Fri, Sep 11, 2015 at 6:59 PM, Jesse Gross <je...@nicira.com> wrote: > Currently, when doing userspace tunneling we don't perform much in > the way of integrity checks on the incoming IP header. The case of > tunneling is different from the usual case of switching since we are > acting as the endpoint here and should not allow invalid packets to > pass. > > This adds checks for IP checksum, version, total length, and options and > drops packets that don't pass. > > Signed-off-by: Jesse Gross <je...@nicira.com>
Looks good. Acked-by: Pravin B Shelar <pshe...@nicira.com> _______________________________________________ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev
