]> git.proxmox.com Git - ovs.git/commit
openvswitch: Allow external IPsec tunnel management.
authorPravin B Shelar <pshelar@ovn.org>
Sat, 24 Sep 2016 18:44:53 +0000 (11:44 -0700)
committerPravin B Shelar <pshelar@ovn.org>
Tue, 27 Sep 2016 18:06:09 +0000 (11:06 -0700)
commit2b02d770c4cb381ec32cd4b7b1e991c42b448884
tree2ffe1064105f5cb7f20f4b884a66af7d7158a586
parent5e8bc3c549ca9bfa02c5525c02cb4ee12ef1f06e
openvswitch: Allow external IPsec tunnel management.

OVS GRE IPsec tunnel support has multiple issues, Therefore
it was deprecated in OVS 2.6.

Following patch removes support for GRE IPsec and allows external
IPsec tunnel management for any type of tunnel not just GRE.
e.g. user can encrypt Geneve or VxLan traffic.

It can be done by using openflow pipeline to set skb-mark
and using IPsec keying daemons to implement IPsec tunnels.
This packet can be matched for the skb-mark to encrypt
selective tunnel traffic.

VMware-BZ: 1710701
Signed-off-by: Pravin B Shelar <pshelar@ovn.org>
Acked-by: Ansis Atteka <aatteka@ovn.org>
24 files changed:
NEWS
README.md
debian/automake.mk
debian/control
debian/openvswitch-ipsec.dirs [deleted file]
debian/openvswitch-ipsec.init [deleted file]
debian/openvswitch-ipsec.install [deleted file]
debian/ovs-monitor-ipsec [deleted file]
lib/netdev-vport.c
lib/netdev.h
ofproto/ofproto-dpif-ipfix.c
ofproto/ofproto-dpif-sflow.c
ofproto/tunnel.c
tests/automake.mk
tests/ofproto-macros.at
tests/ovn-controller.at
tests/ovs-monitor-ipsec.at [deleted file]
tests/testsuite.at
tests/tunnel-push-pop-ipv6.at
tests/tunnel-push-pop.at
tests/tunnel.at
utilities/bugtool/ovs-bugtool.in
utilities/ovs-appctl.8.in
vswitchd/vswitch.xml