diff options
| author |   Vladimir Isaev <visaev@netgate.com> | 2020-08-27 13:34:50 +0300 |
|---|---|---|
| committer |   Andrew Yourtchenko <ayourtch@gmail.com> | 2020-09-16 10:15:24 +0000 |
| commit | 95a77a2360c4315ab8a1178202d71d59e3b8c21f (patch) | |
| tree | 288aa1ad33a3fe2f974346006126626229250c78 /extras/selinux/vpp-custom.fc | |
| parent | 1f18c50174fcc0013e85f7f867e550c1e1871080 (diff) | |
nat: Fix next feature for ED with multiple workers
Multiple (> 1) workers leads to handoff node being enabled.
This node pops next feature index to nat.arc_next to make sure
that packet will be pushed to the next feature in the arc.
But node nat44-ed-in2out-output also pops next feature and changes
arc_next. So actual next feature will be skipped in that case.
It leads to all nat44-ed-in2out packets being dropped if we have
multiple workers (handoff node enabled).
To resolve this a new node was added (nat-pre-in2out-output) to fill
arc_next in single worker case and multiple worker case is already
handled by handoff node.
Type: fix
Signed-off-by: Vladimir Isaev <visaev@netgate.com>
Change-Id: I9dfba68f00164d2d5ab867224871811bef4411ed
(cherry picked from commit 8fb4d10dc208fb3f284fe79e838343797cb2d813)
Diffstat (limited to 'extras/selinux/vpp-custom.fc')
0 files changed, 0 insertions, 0 deletions