Do not try to form flow keys for packets from 'vhost' interface
Currently, fragments from 'vhost' interface undergo fragment table
lookup in an attempt to generate the flow key, which is unnecessary.
Since the head doesn't undergo flow table lookup and hence no fragment
table addition, lookups for subsequent fragments in the fragment table,
in an attempt to generate flow key, will fail and thus packets are
dropped. To, prevent this, never subject packets from vhost (and from
other interfaces on whom policy is disabled) to flow key formation
procedure.
Reviewed: https:/ /review. opencontrail. org/8945 github. org/Juniper/ contrail- vrouter/ commit/ 23564735ccf73a6 cbdb0a32f02f41d 8153823f6d
Committed: http://
Submitter: Zuul
Branch: R2.1
commit 23564735ccf73a6 cbdb0a32f02f41d 8153823f6d
Author: Anand H. Krishnan <email address hidden>
Date: Mon Apr 6 15:10:59 2015 +0530
Do not try to form flow keys for packets from 'vhost' interface
Currently, fragments from 'vhost' interface undergo fragment table
lookup in an attempt to generate the flow key, which is unnecessary.
Since the head doesn't undergo flow table lookup and hence no fragment
table addition, lookups for subsequent fragments in the fragment table,
in an attempt to generate flow key, will fail and thus packets are
dropped. To, prevent this, never subject packets from vhost (and from
other interfaces on whom policy is disabled) to flow key formation
procedure.
Change-Id: If25a3f0d5cb329 fce6341af0e9168 ddfb97ef73c
Closes-BUG: #1440680