git://git.onelab.eu / sliver-openvswitch.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4701460) | patch
secchan: Tighten in-band traffic always allowed into switch
authorJustin Pettit <jpettit@nicira.com>
Wed, 8 Jul 2009 22:41:42 +0000 (15:41 -0700)
committerJustin Pettit <jpettit@nicira.com>
Tue, 1 Sep 2009 21:48:34 +0000 (14:48 -0700)
commita5f37a2deb0e62663c9919cc1abe3e5214ad0251
tree6336c0902067a27ad27ac2b2d88fe599f1ac967dtree | snapshot
parent4701460af0e19588ec3c0fb2db11e4e2779e0444commit | diff
secchan: Tighten in-band traffic always allowed into switch

In-band control sets up a bunch of invisible flows that allow the switch
and controller to communicate over OpenFlow.  The rules may have been a
bit too permissive, since it allowed any traffic to reach the
connection's interface.  This set of changes tries to tighten that to
only OpenFlow traffic and ARPs.
secchan/in-band.c diff | blob | history
sliver-openvswitch