Re: [PATCH net] openvswitch: Fix cached ct with helper.

2016-05-10 Thread Joe Stringer
On 10 May 2016 at 16:55, Jarno Rajahalme wrote: > This would result in inconsistent helper assignment if a first CT action > assigns a helper and a further CT action tries to assign a different helper; > Typically the second helper assignment would be ignored, but if the >

Re: [PATCH net] openvswitch: Fix cached ct with helper.

2016-05-10 Thread Jarno Rajahalme
This would result in inconsistent helper assignment if a first CT action assigns a helper and a further CT action tries to assign a different helper; Typically the second helper assignment would be ignored, but if the unconfirmed conntrack entry is lost due to an upcall the second helper

[PATCH net] openvswitch: Fix cached ct with helper.

2016-05-10 Thread Joe Stringer
When using conntrack helpers from OVS, a common configuration is to perform a lookup without specifying a helper, then go through a firewalling policy, only to decide to attach a helper afterwards. In this case, the initial lookup will cause a ct entry to be attached to the skb, then the later