neutron/neutron/agent/common
Oleg Bondarev d581cf07cd Clear skb mark on encapsulating packets
Looks like by default OVS tunnels inherit skb marks from
tunneled packets. As a result Neutron IPTables marks set in
qrouter namespace are inherited by VXLAN encapsulating packets.
These marks may conflict with marks used by underlying networking
(like Calico) and lead to VXLAN tunneled packets being dropped.

This patch ensures that skb marks are cleared by OVS before entering
a tunnel to avoid conflicts with IPTables rules in default namespace.

Closes-Bug: #1839252
Change-Id: Id029be51bffe4188dd7f2155db16b21d19da1698
(cherry picked from commit 7627735252)
2019-08-12 17:19:06 +04:00
..
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
base_polling.py OVS agent support on Hyper-V 2015-03-25 13:48:33 -07:00
ip_lib.py Fix neutron-openvswitch-agent Windows support 2018-08-28 06:53:11 +00:00
ovs_lib.py Clear skb mark on encapsulating packets 2019-08-12 17:19:06 +04:00
polling.py Fixes "OVS Agent doesn't start on Windows" 2016-03-15 03:14:05 +00:00
resource_processing_queue.py Improve port dhcp Provisioning 2019-04-06 07:32:01 +00:00
utils.py Fix neutron-openvswitch-agent Windows support 2018-08-28 06:53:11 +00:00