vrouter: fragmentation does not work on vhost interfaces

Bug #1440680 reported by Anand H. Krishnan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Fix Committed
High
Anand H. Krishnan
R2.1
Fix Committed
Critical
Anand H. Krishnan

Bug Description

Currently, fragments from 'vhost' interface undergo fragment table lookup, which is unnecessary. Because the head doesn't undergo flow table lookup and hence no fragment table addition, subsequent lookups will fail and hence packets are dropped in the attempt to generate the flow key. To, prevent this, never subject packets from vhost (and from other interfaces on whom policy is not enabled) to flow key formation.

Tags: vrouter
Changed in juniperopenstack:
importance: Undecided → High
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : master

Review in progress for https://review.opencontrail.org/8912
Submitter: Anand H. Krishnan (<email address hidden>)

Changed in juniperopenstack:
status: New → In Progress
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/8912
Committed: http://github.org/Juniper/contrail-vrouter/commit/886fdb76f5f9dc62681b93a84b0c63a96b9531b2
Submitter: Zuul
Branch: master

commit 886fdb76f5f9dc62681b93a84b0c63a96b9531b2
Author: Anand H. Krishnan <email address hidden>
Date: Mon Apr 6 15:10:59 2015 +0530

Do not try to form flow keys for packets from 'vhost' interface

Currently, fragments from 'vhost' interface undergo fragment table
lookup in an attempt to generate the flow key, which is unnecessary.
Since the head doesn't undergo flow table lookup and hence no fragment
table addition, lookups for subsequent fragments in the fragment table,
in an attempt to generate flow key, will fail and thus packets are
dropped. To, prevent this, never subject packets from vhost (and from
other interfaces on whom policy is disabled) to flow key formation
procedure.

Change-Id: If25a3f0d5cb329fce6341af0e9168ddfb97ef73c
Closes-BUG: #1440680

Changed in juniperopenstack:
status: In Progress → Fix Committed
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : R2.1

Review in progress for https://review.opencontrail.org/8945
Submitter: Anand H. Krishnan (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/8945
Committed: http://github.org/Juniper/contrail-vrouter/commit/23564735ccf73a6cbdb0a32f02f41d8153823f6d
Submitter: Zuul
Branch: R2.1

commit 23564735ccf73a6cbdb0a32f02f41d8153823f6d
Author: Anand H. Krishnan <email address hidden>
Date: Mon Apr 6 15:10:59 2015 +0530

Do not try to form flow keys for packets from 'vhost' interface

Currently, fragments from 'vhost' interface undergo fragment table
lookup in an attempt to generate the flow key, which is unnecessary.
Since the head doesn't undergo flow table lookup and hence no fragment
table addition, lookups for subsequent fragments in the fragment table,
in an attempt to generate flow key, will fail and thus packets are
dropped. To, prevent this, never subject packets from vhost (and from
other interfaces on whom policy is disabled) to flow key formation
procedure.

Change-Id: If25a3f0d5cb329fce6341af0e9168ddfb97ef73c
Closes-BUG: #1440680

information type: Proprietary → Public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.