Re: [PATCH net 0/4] net/sched: reset conntrack after packet munging
Ilya Maximets <[email protected]>
| Newsgroups | org.kernel.vger.netdev |
|---|---|
| Message-ID | <[email protected]> |
On 8/20/26 1:58 PM, Jamal Hadi Salim wrote: > >> And that doesn't solve BPF (can sit anywhere) or OVS (no idea here if >> its affected or not). > > OVS is very likely affected. OVS should not be affected. OVS doesn't allow arbitrary changes. It can change mac/ip addresses or ports, but it can't change protocol numbers or other things specific to a protocol in the original skb. Unlike pedit or bpf that can just write data at random offsets. The only way to dramatically change the packet is to push/pop a new header like mpls or nsh, but that triggers a full packet re-parsing and no metadata about the original packet should survive. If it does, that would be a bug in OVS. Best regards, Ilya Maximets.