Message ID | cover.1575458463.git.sd@queasysnail.net |
---|---|
Headers | show |
Series | net: convert ipv6_stub to ip6_dst_lookup_flow | expand |
From: Sabrina Dubroca <sd@queasysnail.net> Date: Wed, 4 Dec 2019 15:35:51 +0100 > Xiumei Mu reported a bug in a VXLAN over IPsec setup: > > IPv6 | ESP | VXLAN > > Using this setup, packets go out unencrypted, because VXLAN over IPv6 > gets its route from ipv6_stub->ipv6_dst_lookup (in vxlan6_get_route), > which doesn't perform an XFRM lookup. > > This patchset first makes ip6_dst_lookup_flow suitable for some > existing users of ipv6_stub->ipv6_dst_lookup by adding a 'net' > argument, then converts all those users. Series applied, thanks.