to make it
clear the default ioctl behaviour has changed.
From: David Ahern
Sent: 23 May 2018 08:44
To: David Miller; dsah...@kernel.org
Cc: netdev@vger.kernel.org; Thomas Winter; ido...@mellanox.com;
sha...@cumulusnetworks.com; ro...@cumulusnetworks.com
> On Wed, May 02, 2018 at 12:58:56PM -0600, David Ahern wrote:
> > On 5/2/18 12:53 PM, Ido Schimmel wrote:
> > >
> > > So this fixes the issue for me. To reproduce:
> > >
> > > # ip -6 address add 2001:db8::1/64 dev dummy0
> > > # ip -6 address add 2001:db8::1/64 dev dummy1
> > >
> > > This repr
It is valid to have static routes where the nexthop
is an interface not an address such as tunnels.
For IPv4 it was possible to use ECMP on these routes
but not for IPv6.
Signed-off-by: Thomas Winter
Cc: David Ahern
Cc: "David S. Miller"
Cc: Alexey Kuznetsov
Cc: Hideaki
Signed-off-by: Thomas Winter
Cc: "David S. Miller"
Cc: Alexey Kuznetsov
Cc: Hideaki YOSHIFUJI
---
net/ipv4/ip_tunnel.c | 13 +++--
1 file changed, 3 insertions(+), 10 deletions(-)
diff --git a/net/ipv4/ip_tunnel.c b/net/ipv4/ip_tunnel.c
index d786a8441bce..6d21068f9b55 10064
oop as the skb->mark is the mark of the encapsulated traffic and route
selected by init_tunnel_flow is via tunnel itself.
Regards,
Thomas Winter
From: David Miller
Sent: 25 January 2018 10:31
To: Thomas Winter
Cc: netdev@vger.kernel.org; kuz...@ms2.inr
This allows marks set by connmark in iptables
to be used for route lookups.
Signed-off-by: Thomas Winter
Cc: "David S. Miller"
Cc: Alexey Kuznetsov
Cc: Hideaki YOSHIFUJI
---
net/ipv4/ip_tunnel.c | 13 ++---
1 file changed, 10 insertions(+), 3 deletions(-)
diff --git
I don't think we've seen this issue but patch looks good.
From: David Ahern
Sent: 11 June 2017 11:33
To: David Miller; sha...@cumulusnetworks.com
Cc: netdev@vger.kernel.org; Thomas Winter; niko...@cumulusnetworks.com;
yot...@mellano
The skb->dev that is passed into ip_mr_input is
the loX device for VRFs. When we lookup a vif
for this dev, none is found as we do not create
vifs for loopbacks. Instead lookup a vif for the
actual device that the packet was received on,
eg the vlan.
Signed-off-by: Thomas Winter
cc: David Ah
such logging for any conntrack helper.
Is this a good change? Or did I miss something really obvious?
Regards,
Thomas Winter
example iptables rules:
Chain FIREWALL_RULE_12 (1 references)
target prot opt source destination
LOGtcp -- anywhere
