]> git.proxmox.com Git - ovs.git/commit
conntrack: Check all addresses for ephemeral ports.
authorDarrell Ball <dlu998@gmail.com>
Mon, 17 Dec 2018 22:43:12 +0000 (14:43 -0800)
committerBen Pfaff <blp@ovn.org>
Tue, 18 Dec 2018 22:12:25 +0000 (14:12 -0800)
commit8417e688bc3ca05247befb9ab00a6b98f2e4d9de
tree9dc3ec3ebf3c678fc9bdbe521cff8fc79a7693ea
parentac04639a16547129f96d8127312715a281184d34
conntrack: Check all addresses for ephemeral ports.

When fallback to ephemeral ports triggers to find a NAT translation,
it may happen that the full address range is not explored; i.e. if
all ephemeral ports are being used for the address range >= the
first address checked and there are other addresses in the
available range, then they would not be explored for availability.
The likelihood of hitting this condition is rare. The fix is to
reset the first address to the minimum address when starting to
search ephemeral ports.  Found by inspection.

Fixes: 286de2729955 ("dpdk: Userspace Datapath: Introduce NAT Support.")
Signed-off-by: Darrell Ball <dlu998@gmail.com>
Signed-off-by: Ben Pfaff <blp@ovn.org>
lib/conntrack.c