linux/net/openvswitch
Joe Stringer cae3a26275 openvswitch: Allow attaching helpers to ct action
Add support for using conntrack helpers to assist protocol detection.
The new OVS_CT_ATTR_HELPER attribute of the CT action specifies a helper
to be used for this connection. If no helper is specified, then helpers
will be automatically applied as per the sysctl configuration of
net.netfilter.nf_conntrack_helper.

The helper may be specified as part of the conntrack action, eg:
ct(helper=ftp). Initial packets for related connections should be
committed to allow later packets for the flow to be considered
established.

Example ovs-ofctl flows allowing FTP connections from ports 1->2:
in_port=1,tcp,action=ct(helper=ftp,commit),2
in_port=2,tcp,ct_state=-trk,action=ct(recirc)
in_port=2,tcp,ct_state=+trk-new+est,action=1
in_port=2,tcp,ct_state=+trk+rel,action=1

Signed-off-by: Joe Stringer <joestringer@nicira.com>
Acked-by: Thomas Graf <tgraf@suug.ch>
Acked-by: Pravin B Shelar <pshelar@nicira.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-08-27 11:40:43 -07:00
..
actions.c openvswitch: Allow matching on conntrack label 2015-08-27 11:40:43 -07:00
conntrack.c openvswitch: Allow attaching helpers to ct action 2015-08-27 11:40:43 -07:00
conntrack.h openvswitch: Allow matching on conntrack label 2015-08-27 11:40:43 -07:00
datapath.c openvswitch: Allow matching on conntrack label 2015-08-27 11:40:43 -07:00
datapath.h openvswitch: Allow matching on conntrack label 2015-08-27 11:40:43 -07:00
dp_notify.c openvswitch: Move dev pointer into vport itself 2015-07-21 10:39:07 -07:00
flow_netlink.c openvswitch: Allow matching on conntrack label 2015-08-27 11:40:43 -07:00
flow_netlink.h openvswitch: Allow matching on conntrack label 2015-08-27 11:40:43 -07:00
flow_table.c ip_tunnels: add IPv6 addresses to ip_tunnel_key 2015-08-20 15:42:36 -07:00
flow_table.h openvswitch: Add support for unique flow IDs. 2015-01-26 15:45:50 -08:00
flow.c openvswitch: Allow matching on conntrack label 2015-08-27 11:40:43 -07:00
flow.h openvswitch: Allow matching on conntrack label 2015-08-27 11:40:43 -07:00
Kconfig openvswitch: Add conntrack action 2015-08-27 11:40:43 -07:00
Makefile openvswitch: Add conntrack action 2015-08-27 11:40:43 -07:00
vport-geneve.c ip_tunnels: use tos and ttl fields also for IPv6 2015-08-20 15:42:36 -07:00
vport-gre.c openvswitch: Use regular GRE net_device instead of vport 2015-08-10 14:03:54 -07:00
vport-internal_dev.c openvswitch: Abstract vport name through ovs_vport_name() 2015-07-21 10:39:07 -07:00
vport-internal_dev.h openvswitch: introduce rtnl ops stub 2014-07-01 14:40:17 -07:00
vport-netdev.c route: move lwtunnel state to dst_entry 2015-08-20 15:42:36 -07:00
vport-netdev.h openvswitch: Move tunnel destroy function to oppenvswitch module. 2015-08-10 14:03:54 -07:00
vport-vxlan.c openvswitch: Move tunnel destroy function to oppenvswitch module. 2015-08-10 14:03:54 -07:00
vport.c openvswitch: Add conntrack action 2015-08-27 11:40:43 -07:00
vport.h ip_tunnels: use tos and ttl fields also for IPv6 2015-08-20 15:42:36 -07:00