Commit d671fd82 authored by Faicker Mo's avatar Faicker Mo Committed by Florian Westphal

netfilter: conntrack: allow insertion clash of gre protocol

NVGRE tunnel is used in the VM-to-VM communications. The VM packets
are encapsulated in NVGRE and sent from the host. For NVGRE
there are two tuples(outer sip and outer dip) in the host conntrack item.
Insertion clashes are more likely to happen if the concurrent connections
are sent from the VM.
Signed-off-by: default avatarFaicker Mo <faicker.mo@ucloud.cn>
Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
parent a2a0ffb0
...@@ -296,6 +296,7 @@ void nf_conntrack_gre_init_net(struct net *net) ...@@ -296,6 +296,7 @@ void nf_conntrack_gre_init_net(struct net *net)
/* protocol helper struct */ /* protocol helper struct */
const struct nf_conntrack_l4proto nf_conntrack_l4proto_gre = { const struct nf_conntrack_l4proto nf_conntrack_l4proto_gre = {
.l4proto = IPPROTO_GRE, .l4proto = IPPROTO_GRE,
.allow_clash = true,
#ifdef CONFIG_NF_CONNTRACK_PROCFS #ifdef CONFIG_NF_CONNTRACK_PROCFS
.print_conntrack = gre_print_conntrack, .print_conntrack = gre_print_conntrack,
#endif #endif
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment