On Sat, Sep 12, 2015 at 5:13 PM, Pravin Shelar <pshe...@nicira.com> wrote: > On Fri, Sep 11, 2015 at 6:59 PM, Jesse Gross <je...@nicira.com> wrote: >> Currently, when doing userspace tunneling we don't perform much in >> the way of integrity checks on the incoming IP header. The case of >> tunneling is different from the usual case of switching since we are >> acting as the endpoint here and should not allow invalid packets to >> pass. >> >> This adds checks for IP checksum, version, total length, and options and >> drops packets that don't pass. >> >> Signed-off-by: Jesse Gross <je...@nicira.com> > > Looks good. > > Acked-by: Pravin B Shelar <pshe...@nicira.com>
Thanks, applied to master. _______________________________________________ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev
