Reviewed: https://review.opendev.org/656357 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=dde99aa719d623b4cc20b2f850ea9f519da85a87 Submitter: Zuul Branch: stable/stein
commit dde99aa719d623b4cc20b2f850ea9f519da85a87 Author: Brian Haley <email address hidden> Date: Mon Apr 22 18:53:45 2019 -0400
Revert iptables TCP checksum-fill code
To fix bug 1722584 we inserted a checksum-fill rule for metadata proxy replies. Recent kernels have disabled this support for TCP because it was invalid, and supposedly not doing anything, so let's get ahead of things and remove the code.
Kernel mailing list discussion is at https://lore.kernel.org/patchwork/patch/824819/
Partially reverts ed1c3b021751273e427d47fcf544c56bdabf97bb
Change-Id: Ib7cc8f82a91972f17987fb95130edc4069d9423f Related-bug: #1722584 (cherry picked from commit b1b8a438fe3cdc422b8deb61548f47d383ee2fe8)
Reviewed: https:/ /review. opendev. org/656357 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=dde99aa719d 623b4cc20b2f850 ea9f519da85a87
Committed: https:/
Submitter: Zuul
Branch: stable/stein
commit dde99aa719d623b 4cc20b2f850ea9f 519da85a87
Author: Brian Haley <email address hidden>
Date: Mon Apr 22 18:53:45 2019 -0400
Revert iptables TCP checksum-fill code
To fix bug 1722584 we inserted a checksum-fill rule for
metadata proxy replies. Recent kernels have disabled
this support for TCP because it was invalid, and
supposedly not doing anything, so let's get ahead of
things and remove the code.
Kernel mailing list discussion is at /lore.kernel. org/patchwork/ patch/824819/
https:/
Partially reverts ed1c3b021751273 e427d47fcf544c5 6bdabf97bb
Change-Id: Ib7cc8f82a91972 f17987fb95130ed c4069d9423f 22b8deb61548f47 d383ee2fe8)
Related-bug: #1722584
(cherry picked from commit b1b8a438fe3cdc4