Re: [ovs-dev] [PATCH] datapath: Fix mysterious GRE-over-IPSEC problems.

2011-03-30 Thread Ben Pfaff
On Wed, Mar 30, 2011 at 02:08:11PM -0700, Jesse Gross wrote: > On Wed, Mar 2, 2011 at 4:49 PM, Ben Pfaff wrote: > > We've noticed that packets that go up to userspace and then back down to > > the kernel and then enter an GRE tunnel that is then ESP encapsulated > > by IPSEC end up with a bad ESP

Re: [ovs-dev] [PATCH] datapath: Fix mysterious GRE-over-IPSEC problems.

2011-03-30 Thread Jesse Gross
On Wed, Mar 2, 2011 at 4:49 PM, Ben Pfaff wrote: > We've noticed that packets that go up to userspace and then back down to > the kernel and then enter an GRE tunnel that is then ESP encapsulated > by IPSEC end up with a bad ESP "next header" value: it ends up as zero > instead of 0x2f (IPPROTO_GR

[ovs-dev] [PATCH] datapath: Fix mysterious GRE-over-IPSEC problems.

2011-03-02 Thread Ben Pfaff
We've noticed that packets that go up to userspace and then back down to the kernel and then enter an GRE tunnel that is then ESP encapsulated by IPSEC end up with a bad ESP "next header" value: it ends up as zero instead of 0x2f (IPPROTO_GRE). I'm still investigating but in the meantime the "big