On 8 Sep 2025, at 23:01, Ilya Maximets wrote:
> OVS adds matches on the DF/CSUM/etc bits of the tunnel info flags, but
> the DF bit is never actually extracted from the outer IP header during
> the tunnel decapsulation. This is not a huge problem, as we'll only
> match on what was parsed out, since matching on DF flag is not exposed
> through OpenFlow to the users. And since the bit is never extracted,
> we'll just always match on -df, which sort of "works", because the bit
> is never extracted and so it is never set. However, this causes
> misleading -df matches in the datapath flow dumps even if the packets
> actually have the DF bit set, which it is by default.
>
> Fix that by actually extracting the bit from the outer header while
> decapsulating tunneled traffic.
>
> Signed-off-by: Ilya Maximets <[email protected]>
Thanks for fixing this Ilya! The change looks good to me.
Acked-by: Eelco Chaudron <[email protected]>
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
