On Mon, Aug 06, 2018 at 11:04:30AM -0700, Qiuyu Xiao wrote: > This patch series reintroduce IPsec support for OVS tunneling and enable OVN > to > use IPsec tunnels. GRE, VXLAN, GENEVE, and STT IPsec tunnels are supported. > StrongSwan and LibreSwan IKE daemons are supported. > > Changes from v1 to v2 > --------------------- > 1. Merge the ovs-monitor-ipsec code to a single patch. Add LibreSwan IKE > daemon support. > 2. Add ovs-monitor-ipsec to flake8 check. > 3. Use openssl to extract CN from certificate so that users don't need to > specify the CN information in the configuration interface. > 4. Improve documentations as suggested. > > Changes from v2 to v3 > --------------------- > 1. Add scripts and rules to create ovs-ipsec RPM package. > 2. Add Documentation/tutorials/ipsec.rst which gives a step-by-step OVS IPsec > tutorial. Modify Documentation/howto/ipsec.rst which gives a detailed > description on OVS IPsec configuration modes. > 3. Modify ovs-pki to generate x.509 version 3 certificate when do self-sign. > 4. IPsec tunnel interface needs 'local_ip' information. Modify ovn-controller > to add 'local_ip' when IPsec is enabled. > 5. Add a section on ovn/ovn-architecture.7.xml to introduce ovn IPsec. > > Changes from v3 to v4 > --------------------- > 1. Split the datapath patch to three patches (geneve, vxlan, stt). > 2. Add tutorial for OVN RBAC and OVN IPsec. > > Changes from v4 to v5 > --------------------- > 1. Fix coding style issues in ovs-monitor-ipsec. > 2. Improve IPsec and OVN-IPsec tutorials as suggested.
Thanks for posting a new version. It looks like this version of the series still includes patches that have already been applied to master. They should be dropped now that they are in OVS. Would you mind rebasing against master and then reposting the series? I do not know how much you have used Git. One way to do the above is with: git fetch git rebase origin/master _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
