On Sat, Sep 12, 2015 at 5:13 PM, Pravin Shelar <[email protected]> wrote:
> On Fri, Sep 11, 2015 at 6:59 PM, Jesse Gross <[email protected]> wrote:
>> Currently, when doing userspace tunneling we don't perform much in
>> the way of integrity checks on the incoming IP header. The case of
>> tunneling is different from the usual case of switching since we are
>> acting as the endpoint here and should not allow invalid packets to
>> pass.
>>
>> This adds checks for IP checksum, version, total length, and options and
>> drops packets that don't pass.
>>
>> Signed-off-by: Jesse Gross <[email protected]>
>
> Looks good.
>
> Acked-by: Pravin B Shelar <[email protected]>

Thanks, applied to master.
_______________________________________________
dev mailing list
[email protected]
http://openvswitch.org/mailman/listinfo/dev

Reply via email to