IMHO it was removed by subsequent VRF commit/backout by accident. IPsec to local addresses do not work since.
Affects: #VSTOR-71337 Signed-off-by: Alexey Kuznetsov <kuz...@acronis.com>
From a2394e5cd2ea56217c69975e41b2247a44c82705 Mon Sep 17 00:00:00 2001 From: Alexey Kuznetsov <kuz...@acronis.com> Date: Sun, 30 Jul 2023 19:56:33 +0300 Subject: net/ipv6: resurrect commit a0a9f33b..., update flowi6_oif in ip6_dst_lookup_flow if not set IMHO it was removed by subsequent VRF commit/backout by accident. IPsec to local addresses do not work since. Affects: #VSTOR-71337 Signed-off-by: Alexey Kuznetsov <kuz...@acronis.com> --- net/ipv6/ip6_output.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/net/ipv6/ip6_output.c b/net/ipv6/ip6_output.c index b1f2534..4b77cb0 100644 --- a/net/ipv6/ip6_output.c +++ b/net/ipv6/ip6_output.c @@ -1202,6 +1202,8 @@ struct dst_entry *ip6_dst_lookup_flow(struct net *net, const struct sock *sk, st return ERR_PTR(err); if (final_dst) fl6->daddr = *final_dst; + if (!fl6->flowi6_oif) + fl6->flowi6_oif = dst->dev->ifindex; return xfrm_lookup_route(net, dst, flowi6_to_flowi(fl6), sk, 0); } -- 1.8.3.1
_______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel
