Reviewed: https://review.opendev.org/656359 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=31320156e464d27d8dfb9df82777b92e9eed1e2c Submitter: Zuul Branch: stable/queens
commit 31320156e464d27d8dfb9df82777b92e9eed1e2c Author: Brian Haley <email address hidden> Date: Mon Apr 22 18:53:45 2019 -0400
Revert iptables TCP checksum-fill code
To fix bug 1722584 we inserted a checksum-fill rule for metadata proxy replies. Recent kernels have disabled this support for TCP because it was invalid, and supposedly not doing anything, so let's get ahead of things and remove the code.
Kernel mailing list discussion is at https://lore.kernel.org/patchwork/patch/824819/
Partially reverts ed1c3b021751273e427d47fcf544c56bdabf97bb
Change-Id: Ib7cc8f82a91972f17987fb95130edc4069d9423f Related-bug: #1722584 (cherry picked from commit b1b8a438fe3cdc422b8deb61548f47d383ee2fe8)
Reviewed: https:/ /review. opendev. org/656359 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=31320156e46 4d27d8dfb9df827 77b92e9eed1e2c
Committed: https:/
Submitter: Zuul
Branch: stable/queens
commit 31320156e464d27 d8dfb9df82777b9 2e9eed1e2c
Author: Brian Haley <email address hidden>
Date: Mon Apr 22 18:53:45 2019 -0400
Revert iptables TCP checksum-fill code
To fix bug 1722584 we inserted a checksum-fill rule for
metadata proxy replies. Recent kernels have disabled
this support for TCP because it was invalid, and
supposedly not doing anything, so let's get ahead of
things and remove the code.
Kernel mailing list discussion is at /lore.kernel. org/patchwork/ patch/824819/
https:/
Partially reverts ed1c3b021751273 e427d47fcf544c5 6bdabf97bb
Change-Id: Ib7cc8f82a91972 f17987fb95130ed c4069d9423f 22b8deb61548f47 d383ee2fe8)
Related-bug: #1722584
(cherry picked from commit b1b8a438fe3cdc4