Re: [PATCH net-next 6/7] openvswitch: Add force commit.

2017-02-07 Thread Jarno Rajahalme
> On Feb 7, 2017, at 2:15 PM, Joe Stringer wrote: > > On 2 February 2017 at 17:10, Jarno Rajahalme wrote: >> Stateful network admission policy may allow connections to one >> direction and reject connections initiated in the other direction. >> After policy change

Re: [PATCH net-next 6/7] openvswitch: Add force commit.

2017-02-07 Thread Joe Stringer
On 7 February 2017 at 17:03, Jarno Rajahalme wrote: > > On Feb 7, 2017, at 2:15 PM, Joe Stringer wrote: > > On 2 February 2017 at 17:10, Jarno Rajahalme wrote: > > Stateful network admission policy may allow connections to one > direction and reject

Re: [PATCH net-next 6/7] openvswitch: Add force commit.

2017-02-07 Thread Joe Stringer
On 2 February 2017 at 17:10, Jarno Rajahalme wrote: > Stateful network admission policy may allow connections to one > direction and reject connections initiated in the other direction. > After policy change it is possible that for a new connection an > overlapping conntrack entry

Re: [PATCH net-next 6/7] openvswitch: Add force commit.

2017-02-07 Thread Pravin Shelar
On Mon, Feb 6, 2017 at 11:28 PM, Joe Stringer wrote: > On 6 February 2017 at 09:08, Pravin Shelar wrote: >> On Thu, Feb 2, 2017 at 5:10 PM, Jarno Rajahalme wrote: >>> Stateful network admission policy may allow connections to one >>> direction and

Re: [PATCH net-next 6/7] openvswitch: Add force commit.

2017-02-06 Thread Joe Stringer
On 6 February 2017 at 09:08, Pravin Shelar wrote: > On Thu, Feb 2, 2017 at 5:10 PM, Jarno Rajahalme wrote: >> Stateful network admission policy may allow connections to one >> direction and reject connections initiated in the other direction. >> After policy

Re: [PATCH net-next 6/7] openvswitch: Add force commit.

2017-02-06 Thread Pravin Shelar
On Thu, Feb 2, 2017 at 5:10 PM, Jarno Rajahalme wrote: > Stateful network admission policy may allow connections to one > direction and reject connections initiated in the other direction. > After policy change it is possible that for a new connection an > overlapping conntrack

[PATCH net-next 6/7] openvswitch: Add force commit.

2017-02-02 Thread Jarno Rajahalme
Stateful network admission policy may allow connections to one direction and reject connections initiated in the other direction. After policy change it is possible that for a new connection an overlapping conntrack entry already exist, where the connection original direction is opposed to the new