Skip to content
Commit e2ef5203 authored by Numan Siddique's avatar Numan Siddique Committed by Jakub Kicinski
Browse files

net: openvswitch: Be liberal in tcp conntrack.



There is no easy way to distinguish if a conntracked tcp packet is
marked invalid because of tcp_in_window() check error or because
it doesn't belong to an existing connection. With this patch,
openvswitch sets liberal tcp flag for the established sessions so
that out of window packets are not marked invalid.

A helper function - nf_ct_set_tcp_be_liberal(nf_conn) is added which
sets this flag for both the directions of the nf_conn.

Suggested-by: default avatarFlorian Westphal <fw@strlen.de>
Signed-off-by: default avatarNuman Siddique <nusiddiq@redhat.com>
Acked-by: default avatarFlorian Westphal <fw@strlen.de>
Link: https://lore.kernel.org/r/20201116130126.3065077-1-nusiddiq@redhat.com


Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
parent 4082c502
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment