netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel
authorVadim Fedorenko <vfedorenko@yandex-team.ru>
Wed, 15 Feb 2017 13:33:56 +0000 (16:33 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 26 Sep 2017 12:06:33 +0000 (14:06 +0200)
commitb621129f4f08c8d42ac4de2e77a07c5cf0c4b740
tree04ac9b72baa4b26449e77429a45ab52e56a3524b
parentb4391db42308c9940944b5d7be5ca4b78fb88dd0
netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel

IPVS tunnel mode works as simple tunnel (see RFC 3168) copying ECN field
to outer header. That's result in packet drops on egress tunnels in case
the egress tunnel operates as ECN-capable with Full-functionality option
(like ip_tunnel and ip6_tunnel kernel modules), according to RFC 3168
section 9.1.1 recommendation.

This patch implements ECN full-functionality option into ipvs xmit code.

Cc: netdev@vger.kernel.org
Cc: lvs-devel@vger.kernel.org
Signed-off-by: Vadim Fedorenko <vfedorenko@yandex-team.ru>
Reviewed-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipvs/ip_vs_xmit.c