Currently, the native (userspace) tunneling functionality is not appropriately applying tunnel headers during translation. In a typical 2-bridge configuration with an integration bridge which connects to a tunnel port, plus an underlay bridge which provides connectivity to the physical network, translation occurs the same for both bridges. However, you would expect that once traffic egresses a tunnel on the integration bridge, it would be encapsulated and the lookup in the underlay bridge should occur based on an encapsulated packet. For example, when sending UDP packets through an integration bridge GRE tunnel, the packet would then match on rules in the underlay bridge that match on UDP packets, rather than on GRE packets.
Patch #1 is a simple revert of the patch which broke this functionality. Patch #2 adds a new test to the unit testsuite to prevent breakage in future. Joe Stringer (1): Revert "tunneling: Avoid recirculation on datapath." William Tu (1): tunnel-tests: Add test to match tunnel traffic. lib/dpif-netdev.c | 18 ++- ofproto/ofproto-dpif-xlate.c | 280 ++++++++++++++++++++---------------------- tests/ofproto-dpif.at | 11 +- tests/ovn.at | 6 +- tests/tunnel-push-pop-ipv6.at | 10 +- tests/tunnel-push-pop.at | 81 +++++++++++- 6 files changed, 242 insertions(+), 164 deletions(-) -- 2.12.0 _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev