On 9/9/25 11:59 AM, Eelco Chaudron wrote: > > > On 8 Sep 2025, at 23:01, Ilya Maximets wrote: > >> OVS adds matches on the DF/CSUM/etc bits of the tunnel info flags, but >> the DF bit is never actually extracted from the outer IP header during >> the tunnel decapsulation. This is not a huge problem, as we'll only >> match on what was parsed out, since matching on DF flag is not exposed >> through OpenFlow to the users. And since the bit is never extracted, >> we'll just always match on -df, which sort of "works", because the bit >> is never extracted and so it is never set. However, this causes >> misleading -df matches in the datapath flow dumps even if the packets >> actually have the DF bit set, which it is by default. >> >> Fix that by actually extracting the bit from the outer header while >> decapsulating tunneled traffic. >> >> Signed-off-by: Ilya Maximets <i.maxim...@ovn.org> > > Thanks for fixing this Ilya! The change looks good to me. > > Acked-by: Eelco Chaudron <echau...@redhat.com> >
Thanks! Applied and backported down to 3.3. Best regards, Ilya Maximets. _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev
