Re: [ovs-dev] [PATCH v3 09/10] tests: ipsec: Check that nodes can ping each other in the NxN test.

[Eelco Chaudron]

On 1 Nov 2024, at 2:23, Ilya Maximets wrote:

> Expand the NxN test with the network connectivity check between all the
> nodes.  Unfortunately, we can't really run this test with Libreswan 4.x,
> since, due to internal issues in these versions, we are getting into
> states where everything is loaded and active, but no traffic can pass.
> This is an internal issue in Libreswan that we can't workaround from
> the outside.  So, the fix is required in Libreswan itself.  4.5 and
> earlier versions seem to not be affected by this problem, at least not
> severely affected, but it's easier to just cut off all the 4.x versions
> from the test.
>
> 3.32 version from Ubuntu 22.04 and Libreswna 5.1 work just fine with
> this test.
>
> Test is relatively long, but it is very valuable, IMO.  Besides
> stressing ovs-monitor-ipsec with various failure and asynchronous
> connection establishment conditions, which are important for OVS, it
> also was used to reproduce and fix several bugs in Libreswan 4.x.
> Unfortunately, not all the issues are understood and fixed yet.
>
> Signed-off-by: Ilya Maximets <i.maxim...@ovn.org>

With the SKIP_IF addition, this looks good to me.

Acked-by: Eelco Chaudron <echau...@redhat.com>

_______________________________________________
dev mailing list
d...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-dev