Re: [PATCH net 0/4] net/sched: reset conntrack after packet munging

Ilya Maximets <[email protected]>
Newsgroups org.kernel.vger.netdev
Message-ID <[email protected]>
On 8/20/26 1:58 PM, Jamal Hadi Salim wrote:
> 
>> And that doesn't solve BPF (can sit anywhere) or OVS (no idea here if
>> its affected or not).
> 
> OVS is very likely affected.
OVS should not be affected.  OVS doesn't allow arbitrary changes.
It can change mac/ip addresses or ports, but it can't change protocol
numbers or other things specific to a protocol in the original skb.
Unlike pedit or bpf that can just write data at random offsets.

The only way to dramatically change the packet is to push/pop a new
header like mpls or nsh, but that triggers a full packet re-parsing
and no metadata about the original packet should survive.  If it does,
that would be a bug in OVS.

Best regards, Ilya Maximets.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.