datapath: Fix mysterious GRE-over-IPSEC problems.
authorBen Pfaff <blp@nicira.com>
Wed, 30 Mar 2011 21:54:26 +0000 (14:54 -0700)
committerBen Pfaff <blp@nicira.com>
Wed, 30 Mar 2011 21:54:26 +0000 (14:54 -0700)
commit3f19d399f51def640101001f28387baade399621
treec93b52c4bdfdf3f9dae19d3f2e9c1b17298cf1b6
parent33065c43aa9dfcd32d2ef223cf7a1030acc40490
datapath: Fix mysterious GRE-over-IPSEC problems.

We've noticed that packets that go up to userspace and then back down to
the kernel and then enter an GRE tunnel that is then ESP encapsulated
by IPSEC end up with a bad ESP "next header" value: it ends up as zero
instead of 0x2f (IPPROTO_GRE).  Just putting packets from userspace into
a freshly allocated skb fixes the problem.

The underlying problem that this works around is still unknown.

Signed-off-by: Ben Pfaff <blp@nicira.com>
Acked-by: Jesse Gross <jesse@nicira.com>
Bug #4769.
datapath/datapath.c