diff options
| author | Ye Yin <hustcat@gmail.com> | 2017-10-26 16:57:05 +0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2017-11-04 22:37:42 +0900 |
| commit | 2b5ec1a5f9738ee7bf8f5ec0526e75e00362c48f (patch) | |
| tree | ad668d857492b840266537b4d64f7b4e96ee97a8 /include | |
| parent | 24de79e5008a928beb2c7ccc2396f15065613363 (diff) | |
| download | linux-2b5ec1a5f9738ee7bf8f5ec0526e75e00362c48f.tar.gz linux-2b5ec1a5f9738ee7bf8f5ec0526e75e00362c48f.tar.bz2 linux-2b5ec1a5f9738ee7bf8f5ec0526e75e00362c48f.zip | |
netfilter/ipvs: clear ipvs_property flag when SKB net namespace changed
When run ipvs in two different network namespace at the same host, and one
ipvs transport network traffic to the other network namespace ipvs.
'ipvs_property' flag will make the second ipvs take no effect. So we should
clear 'ipvs_property' when SKB network namespace changed.
Fixes: 621e84d6f373 ("dev: introduce skb_scrub_packet()")
Signed-off-by: Ye Yin <hustcat@gmail.com>
Signed-off-by: Wei Zhou <chouryzhou@gmail.com>
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include')
| -rw-r--r-- | include/linux/skbuff.h | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/include/linux/skbuff.h b/include/linux/skbuff.h index 72299ef00061..d448a4804aea 100644 --- a/include/linux/skbuff.h +++ b/include/linux/skbuff.h @@ -3770,6 +3770,13 @@ static inline void nf_reset_trace(struct sk_buff *skb) #endif } +static inline void ipvs_reset(struct sk_buff *skb) +{ +#if IS_ENABLED(CONFIG_IP_VS) + skb->ipvs_property = 0; +#endif +} + /* Note: This doesn't put any conntrack and bridge info in dst. */ static inline void __nf_copy(struct sk_buff *dst, const struct sk_buff *src, bool copy) |