Reviewed: https://review.opendev.org/719909 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=8f280339096ed702928f704fd20543ce4370c0d4 Submitter: Zuul Branch: stable/pike
commit 8f280339096ed702928f704fd20543ce4370c0d4 Author: Brian Haley <email address hidden> Date: Mon Apr 22 18:53:45 2019 -0400
Revert iptables TCP checksum-fill code
To fix bug 1722584 we inserted a checksum-fill rule for metadata proxy replies. Recent kernels have disabled this support for TCP because it was invalid, and supposedly not doing anything, so let's get ahead of things and remove the code.
Kernel mailing list discussion is at https://lore.kernel.org/patchwork/patch/824819/
Partially reverts ed1c3b021751273e427d47fcf544c56bdabf97bb
Depends-On: https://review.opendev.org/#/c/725213/ Change-Id: Ib7cc8f82a91972f17987fb95130edc4069d9423f Related-bug: #1722584 (cherry picked from commit b1b8a438fe3cdc422b8deb61548f47d383ee2fe8) (cherry picked from commit 31320156e464d27d8dfb9df82777b92e9eed1e2c)
Reviewed: https:/ /review. opendev. org/719909 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=8f280339096 ed702928f704fd2 0543ce4370c0d4
Committed: https:/
Submitter: Zuul
Branch: stable/pike
commit 8f280339096ed70 2928f704fd20543 ce4370c0d4
Author: Brian Haley <email address hidden>
Date: Mon Apr 22 18:53:45 2019 -0400
Revert iptables TCP checksum-fill code
To fix bug 1722584 we inserted a checksum-fill rule for
metadata proxy replies. Recent kernels have disabled
this support for TCP because it was invalid, and
supposedly not doing anything, so let's get ahead of
things and remove the code.
Kernel mailing list discussion is at /lore.kernel. org/patchwork/ patch/824819/
https:/
Partially reverts ed1c3b021751273 e427d47fcf544c5 6bdabf97bb
Depends-On: https:/ /review. opendev. org/#/c/ 725213/ f17987fb95130ed c4069d9423f 22b8deb61548f47 d383ee2fe8) d8dfb9df82777b9 2e9eed1e2c)
Change-Id: Ib7cc8f82a91972
Related-bug: #1722584
(cherry picked from commit b1b8a438fe3cdc4
(cherry picked from commit 31320156e464d27