On Fri, Sep 11, 2015 at 6:59 PM, Jesse Gross <[email protected]> wrote: > Currently, when doing userspace tunneling we don't perform much in > the way of integrity checks on the incoming IP header. The case of > tunneling is different from the usual case of switching since we are > acting as the endpoint here and should not allow invalid packets to > pass. > > This adds checks for IP checksum, version, total length, and options and > drops packets that don't pass. > > Signed-off-by: Jesse Gross <[email protected]>
Looks good. Acked-by: Pravin B Shelar <[email protected]> _______________________________________________ dev mailing list [email protected] http://openvswitch.org/mailman/listinfo/dev
