mirror of
https://github.com/openvswitch/ovs
synced 2025-08-31 06:15:47 +00:00
conntrack: Add option to disable TCP sequence checking.
This may be needed in some special cases, such as to support some hardware offload implementations. Note that disabling TCP sequence number verification is not an optimization in itself, but supporting some hardware offload implementations may offer better performance. TCP sequence number verification is enabled by default. This option is only available for the userspace datapath. Access to this option is presently provided via 'dpctl' commands as the need for this option is quite node specific, by virtue of which nics are in use on a given node. A test is added to verify this option. Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2019-May/359188.html Signed-off-by: Darrell Ball <dlu998@gmail.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
This commit is contained in:
@@ -3426,6 +3426,8 @@ const struct dpif_class dpif_netlink_class = {
|
||||
NULL, /* ct_set_maxconns */
|
||||
NULL, /* ct_get_maxconns */
|
||||
NULL, /* ct_get_nconns */
|
||||
NULL, /* ct_set_tcp_seq_chk */
|
||||
NULL, /* ct_get_tcp_seq_chk */
|
||||
dpif_netlink_ct_set_limits,
|
||||
dpif_netlink_ct_get_limits,
|
||||
dpif_netlink_ct_del_limits,
|
||||
|
Reference in New Issue
Block a user