Re: [ovs-discuss] In ovs-userconntrack_20151115 Branch - ICMP Blocked port can be hacked, if same icmp request id is used while sending the packet from the blocked side of the firewall.

2016-05-18 Thread soumyadeep.chowdhury
Hi Daniele, Its much cleaner approach. Thanks for the update. One more question: Is your latest userconntrack branch merged with ovs-v2.5.0 already ? Regards, Soumyadeep -Original Message- From: Daniele Di Proietto [mailto:diproiet...@vmware.com] Sent: Tuesday, May 17, 2016 6:31 AM To:

Re: [ovs-discuss] In ovs-userconntrack_20151115 Branch - ICMP Blocked port can be hacked, if same icmp request id is used while sending the packet from the blocked side of the firewall.

2016-05-13 Thread soumyadeep.chowdhury
Hi Daniele, Adding sequence number to the tuple will not solve the issue. As a hacker can still track the seq number along with the id (by looking at the icmp echo request packet) and send the similar packet back to the firewall, and it can pass through. Instead, Firewall needs to be intellige

Re: [ovs-discuss] what is revalidator thread

2016-02-16 Thread soumyadeep.chowdhury
Thanks Flavio. Looks useful. -Original Message- From: Flavio Leitner [mailto:f...@sysclose.org] Sent: Tuesday, February 16, 2016 5:32 PM To: Soumyadeep Chowdhury (NEP) Cc: discuss@openvswitch.org Subject: Re: [ovs-discuss] what is revalidator thread On Mon, 15 Feb 2016 09:05:32 + wr

[ovs-discuss] what is revalidator thread

2016-02-15 Thread soumyadeep.chowdhury
Hi, Can someone please help me to understand - - what is the revalidator thread and why we need it. - What is the relationship between revalidator and garbadge-collector - Is revalidator thread only linked to upcall handler. I can see it gets created in udpif paral

Re: [ovs-discuss] conntrack in userspace with OVS + DPDK

2016-02-08 Thread soumyadeep.chowdhury
Thanks Deniele, I can't see any design note in your repo (https://github.com/ddiproietto/ovs/tree/userconntrack_20151115) regarding conntrack in userspace. I have already gone through - 1. conntrack related presentations given during fall conference 2. code walkthrough in your repo for

Re: [ovs-discuss] conntrack in userspace with OVS + DPDK

2016-02-02 Thread soumyadeep.chowdhury
Thanks Ben. Hi Daniele, We are looking for host-mode statefull virtual firewall implementation in OVS+DPDK environment. And having conntack in usersape work along with OVS-DPDK is the first step and the right direction to go with. As you have already started working on this and we have similar