Comment 3 for bug 1440680

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/8912
Committed: http://github.org/Juniper/contrail-vrouter/commit/886fdb76f5f9dc62681b93a84b0c63a96b9531b2
Submitter: Zuul
Branch: master

commit 886fdb76f5f9dc62681b93a84b0c63a96b9531b2
Author: Anand H. Krishnan <email address hidden>
Date: Mon Apr 6 15:10:59 2015 +0530

Do not try to form flow keys for packets from 'vhost' interface

Currently, fragments from 'vhost' interface undergo fragment table
lookup in an attempt to generate the flow key, which is unnecessary.
Since the head doesn't undergo flow table lookup and hence no fragment
table addition, lookups for subsequent fragments in the fragment table,
in an attempt to generate flow key, will fail and thus packets are
dropped. To, prevent this, never subject packets from vhost (and from
other interfaces on whom policy is disabled) to flow key formation
procedure.

Change-Id: If25a3f0d5cb329fce6341af0e9168ddfb97ef73c
Closes-BUG: #1440680