The commit message says:
openvswitch: Allow external IPsec tunnel management.
OVS GRE IPsec tunnel support has multiple issues, Therefore
it was deprecated in OVS 2.6.
Following patch removes support for GRE IPsec and allows external
IPsec tunnel management for any type of tunnel not just GRE.
e.g. user can encrypt Geneve or VxLan traffic.
It can be done by using openflow pipeline to set skb-mark
and using IPsec keying daemons to implement IPsec tunnels.
This packet can be matched for the skb-mark to encrypt
selective tunnel traffic.
VMware-BZ: 1710701
Signed-off-by: Pravin B Shelar <pshe...@ovn.org>
Acked-by: Ansis Atteka <aatt...@ovn.org>
On Thu, Oct 13, 2016 at 06:06:10AM +0000, Muthukrishnan Thangasamy wrote:
> Dear Ben ,
>
>
> Thank you for your response.
>
>
> Could you please throw some light on ,any specific reason why OVS stopped
> support for ovs-monitor-ipsec and decided to remove support for ipsec
> altogether in ovs.
>
>
> Regards
>
> Muthukrishnan
>
> 9952012433
>
> ________________________________
> From: Ben Pfaff <b...@ovn.org>
> Sent: Thursday, September 29, 2016 8:43:43 PM
> To: Muthukrishnan Thangasamy
> Cc: dev@openvswitch.org
> Subject: Re: [ovs-dev] Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan
> support and IPsec tunnel mode options support.
>
> On Thu, Sep 29, 2016 at 07:13:55AM +0000, Muthukrishnan Thangasamy wrote:
> > From 76e504a38a3c556884782323459cc6862a38747c Mon Sep 17 00:00:00 2001
> > From: Muthukrishnan T <muthukrishna...@tataelxsi.co.in>
> > Date: Thu, 29 Sep 2016 12:21:29 +0530
> > Subject: [PATCH] ovs-monitor-ipsec: ipsec_vxlan support and IPsec tunnel
> > mode options support.
>
> We just removed ovs-monitor-ipsec, so this can't be applied.
_______________________________________________
dev mailing list
dev@openvswitch.org
http://openvswitch.org/mailman/listinfo/dev
