• Joe Stringer's avatar
    openvswitch: Allow attaching helpers to ct action · cae3a262
    Joe Stringer authored
    Add support for using conntrack helpers to assist protocol detection.
    The new OVS_CT_ATTR_HELPER attribute of the CT action specifies a helper
    to be used for this connection. If no helper is specified, then helpers
    will be automatically applied as per the sysctl configuration of
    net.netfilter.nf_conntrack_helper.
    
    The helper may be specified as part of the conntrack action, eg:
    ct(helper=ftp). Initial packets for related connections should be
    committed to allow later packets for the flow to be considered
    established.
    
    Example ovs-ofctl flows allowing FTP connections from ports 1->2:
    in_port=1,tcp,action=ct(helper=ftp,commit),2
    in_port=2,tcp,ct_state=-trk,action=ct(recirc)
    in_port=2,tcp,ct_state=+trk-new+est,action=1
    in_port=2,tcp,ct_state=+trk+rel,action=1
    Signed-off-by: default avatarJoe Stringer <joestringer@nicira.com>
    Acked-by: default avatarThomas Graf <tgraf@suug.ch>
    Acked-by: default avatarPravin B Shelar <pshelar@nicira.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    cae3a262
conntrack.c 17.5 KB