Re: [PATCHv4 net-next 05/10] openvswitch: Add conntrack action

On 08/18/15 at 04:39pm, Joe Stringer wrote:

Expose the kernel connection tracker via OVS. Userspace components can
make use of the "ct()" action, followed by "recirculate", to populate
the conntracking state in the OVS flow key, and subsequently match on
that state.

Example ODP flows allowing traffic from 1->2, only replies from 2->1:
in_port=1,tcp,action=ct(commit,zone=1),2
in_port=2,ct_state=-trk,tcp,action=ct(zone=1),recirc(1)
recirc_id=1,in_port=2,ct_state=+trk+est-new,tcp,action=1

IP fragments are handled by transparently assembling them as part of the
ct action. The maximum received unit (MRU) size is tracked so that
refragmentation can occur during output.

IP frag handling contributed by Andy Zhou.

Signed-off-by: Joe Stringer <redacted>
Signed-off-by: Justin Pettit <redacted>
Signed-off-by: Andy Zhou <redacted>

OVS bits look great.

Acked-by: Thomas Graf <tgraf@suug.ch>