[ovs-dev] [PATCH ovn branch-22.06 v2] IPsec: Add option to force NAT-T encapsulation

2022-07-23 Thread Andreas Karis
-by: Andreas Karis Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2041681 Signed-off-by: Numan Siddique (cherry picked from commit d6dd8e49551141159f040406202f8550c18a1846) --- Documentation/tutorials/ovn-ipsec.rst | 24 NEWS | 4

[ovs-dev] [PATCH ovn branch-22.06] IPsec: Add option to force NAT-T encapsulation

2022-07-22 Thread Andreas Karis
-by: Andreas Karis Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2041681 Signed-off-by: Numan Siddique (cherry picked from commit d6dd8e49551141159f040406202f8550c18a1846) Conflicts: NEWS --- Documentation/tutorials/ovn-ipsec.rst | 24 NEWS

[ovs-dev] [PATCH branch-2.17] ovs-monitor-ipsec: Allow custom options per tunnel.

2022-07-22 Thread Andreas Karis
Tunnels in LibreSwan and OpenSwan allow for many options to be set on a per tunnel basis. Pass through any options starting with ipsec_ to the connection in the configuration file. Administrators are responsible for picking valid key/value pairs. Signed-off-by: Andreas Karis Acked-by: Mike

[ovs-dev] [PATCH ovn v4 1/1] IPsec: Add option to force NAT-T encapsulation

2022-06-06 Thread Andreas Karis
-by: Andreas Karis Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2041681 --- Documentation/tutorials/ovn-ipsec.rst | 24 NEWS | 4 controller/encaps.c | 15 +++ tests/ovn-ipsec.at| 3

[ovs-dev] [PATCH ovn v3 1/1] IPsec: Add option to force NAT-T encapsulation

2022-06-01 Thread Andreas Karis
-by: Andreas Karis Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2041681 --- Documentation/tutorials/ovn-ipsec.rst | 19 +++ NEWS | 3 +++ controller/encaps.c | 15 +++ tests/ovn-ipsec.at| 3 +++ 4

[ovs-dev] [PATCH ovn v2 1/1] IPsec: Add option to force NAT-T encapsulation

2022-06-01 Thread Andreas Karis
Provide an option to enforce NAT-T UDP encapsulation (encapsulation=true or forceencaps=true depending on the chosen backend). This may be required in environments where firewalls drop ESP traffic but where NAT-T detection fails because packets are not subject to NAT. Signed-off-by: Andreas Karis

[ovs-dev] [PATCH ovn 1/1] IPsec: Add option to force NAT-T encapsulation

2022-06-01 Thread Andreas Karis
Provide an option to enforce NAT-T UDP encapsulation (encapsulation=true or forceencaps=true depending on the chosen backend). This may be required in environments where firewalls drop ESP traffic but where NAT-T detection fails because packets are not subject to NAT. Signed-off-by: Andreas Karis

Re: [ovs-dev] [PATCH v2] ovs-monitor-ipsec: Allow custom options per tunnel

2022-04-26 Thread Andreas Karis
: > On 3/2/22 14:40, Andreas Karis wrote: > > Tunnels in LibreSwan and OpenSwan allow for many options to be set on a > > per tunnel basis. Pass through any options starting with ipsec_ to the > > connection in the configuration file. Administrators are responsible for > > pi

[ovs-dev] [PATCH v2] ovs-monitor-ipsec: Allow custom options per tunnel

2022-03-02 Thread Andreas Karis
Tunnels in LibreSwan and OpenSwan allow for many options to be set on a per tunnel basis. Pass through any options starting with ipsec_ to the connection in the configuration file. Administrators are responsible for picking valid key/value pairs. Signed-off-by: Andreas Karis --- Documentation

[ovs-dev] [PATCH] ovs-monitor-ipsec: Allow custom options per tunnel

2022-03-02 Thread Andreas Karis
Tunnels in LibreSwan and OpenSwan allow for many options to be set on a per tunnel basis. Pass through any options starting with ipsec_ to the connection in the configuration file. Administrators are responsible for picking valid key/value pairs. Signed-off-by: Andreas Karis --- Documentation

Re: [ovs-dev] [PATCH] ovs-monitor-ipsec: Add force-encapsulation option to force NAT-T

2022-03-01 Thread Andreas Karis
Thank you, I posted a new version. On Fri, Feb 25, 2022 at 10:17 PM Mike Pattrick wrote: > On Thu, 2022-01-20 at 16:33 +0100, Andreas Karis wrote: > > Both LibreSwan and OpenSwan allow administrators to unconditionally > > force enable NAT-T for ESP. This may help to surmo

[ovs-dev] [PATCH v2] ovs-monitor-ipsec: Add force-encapsulation option to force NAT-T

2022-03-01 Thread Andreas Karis
of ovs-monitor-ipsec Signed-off-by: Andreas Karis --- ipsec/ovs-monitor-ipsec.in | 31 +++ utilities/ovs-ctl.in | 7 +++ 2 files changed, 30 insertions(+), 8 deletions(-) diff --git a/ipsec/ovs-monitor-ipsec.in b/ipsec/ovs-monitor-ipsec.in index 89a36fe17

[ovs-dev] [PATCH] ovs-monitor-ipsec: Add force-encapsulation option to force NAT-T

2022-01-20 Thread Andreas Karis
of ovs-monitor-ipsec Signed-off-by: Andreas Karis --- ipsec/ovs-monitor-ipsec.in | 29 + utilities/ovs-ctl.in | 7 +++ 2 files changed, 28 insertions(+), 8 deletions(-) diff --git a/ipsec/ovs-monitor-ipsec.in b/ipsec/ovs-monitor-ipsec.in index 89a36fe17

[ovs-dev] [PATCH v2 1/1] utilities: gdb debug commands fix typos

2019-01-01 Thread Andreas Karis
Fix minor typos in ovs_gdb debug script. Signed-off-by: Andreas Karis --- utilities/gdb/ovs_gdb.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/utilities/gdb/ovs_gdb.py b/utilities/gdb/ovs_gdb.py index cb9778c69..fab69cc8e 100644 --- a/utilities/gdb/ovs_gdb.py +++ b

[ovs-dev] [PATCH 1/1] utilities: gdb debug commands fix typos

2018-12-31 Thread Andreas Karis
Fix minor typos in ovs_gdb debug script. --- utilities/gdb/ovs_gdb.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/utilities/gdb/ovs_gdb.py b/utilities/gdb/ovs_gdb.py index cb9778c69..fab69cc8e 100644 --- a/utilities/gdb/ovs_gdb.py +++ b/utilities/gdb/ovs_gdb.py @@