The ICMP need frag could be generated after routing stage when the unSNAT already happened. Add flows that will ensure that we are keeping track of the CT state and do appropriate CT nat action later on.
Because the ICMP traffic is related to already existing one in this case we can use adjusted ct_commit_nat that will perform this action in SNAT zone. Ales Musil (2): actions: Adjust the ct_commit_nat action. northd: Explicitly handle SNAT for ICMP need frag. controller/chassis.c | 8 ++ include/ovn/actions.h | 12 ++- include/ovn/features.h | 1 + include/ovn/logical-fields.h | 3 + lib/actions.c | 69 ++++++++++--- lib/logical-fields.c | 4 + northd/northd.c | 192 ++++++++++++++++++++--------------- northd/northd.h | 1 + tests/ovn-northd.at | 118 ++++++++++++++------- tests/ovn.at | 27 ++++- tests/system-ovn-kmod.at | 3 +- utilities/ovn-trace.c | 2 +- 12 files changed, 300 insertions(+), 140 deletions(-) -- 2.43.0 _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev
