Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bugfix: TCP src port is unset on the TCP DNS response flow #5078

Merged
merged 1 commit into from
Jun 9, 2023

Commits on Jun 8, 2023

  1. Bugfix: TCP src port is unset on the TCP DNS response flow

    This change is to resolve an issue in ANP with FQDN rules which has sent all TCP
    packets marked with ack and psh flags to antrea-agent rather than only sent the
    DNS response packets.
    
    The root cause is the existing code would add a match pair with tp_dst=0 into
    the service match pairs even if no dst port is set in the ANP prtocols. Then
    the DNS logic has picked a wrong service match pair to generate the OpenFlow
    entries.
    
    This change directly generates the conjunctive match conditions for DNS response
    packets rather than calling `getServiceMatchPairs` to make the logic simply.
    
    Signed-off-by: wenyingd <wenyingd@vmware.com>
    wenyingd committed Jun 8, 2023
    Configuration menu
    Copy the full SHA
    19a24ad View commit details
    Browse the repository at this point in the history