{"push_id":1253217860,"size":1,"distinct_size":1,"ref":"refs/heads/branch-2.6","head":"b177ece03104da725ae461f6132d0d781dc184a4","before":"1093d50c1dc9cb78718428786870b92d24631d20","commits":[{"sha":"b177ece03104da725ae461f6132d0d781dc184a4","author":{"name":"Jesse Gross","email":"e326a52b2b5f672cf13118b8b27319b216d61d7d@kernel.org"},"message":"ovn: Set critical bit in Geneve option.\n\nCurrently the Geneve option type that OVN uses is 0, which in\nGeneve marks this as non-critical. Non-critical means that if a\nreceiver does not recognize this option, it is free to ignore it\nand continue processing the packet.\n\nOVN uses its option to transmit things like input and output port\nwhich are used to enforce security policies and direct packets to\ntheir correct location. If the recipicient of a packet ignored this\ninformation then it would likely be a security hole. This would seem\nto qualify the option as critical.\n\nThere's no issue in an instance of OVN as currently written - the\nreceiver will always match on the option data. However, if a\ntheoretical future version that did not use this option was connected\nor a third-party component was introduced then it's possible that this\nmight be accidentally ignored.\n\nThis patch changes the option type used by OVN to include the\ncritical bit to properly mark the intention. Obviously, this will\ncause interoperability issues with any existing deployments but\nit should be fine while OVN is still labeled as experimental.\n\nSigned-off-by: Jesse Gross <jesse@kernel.org>\nAcked-by: Russell Bryant <russell@ovn.org>","distinct":true,"url":"https://api.github.com/repos/noironetworks/ovs/commits/b177ece03104da725ae461f6132d0d781dc184a4"}]}
{"actor":{"display_login":"noirobot"}}