Skip to content

Commit

Permalink
Fix IPsec for IPv6 overlays
Browse files Browse the repository at this point in the history
When using IPv6, the IPsec configuration (ipsec.conf) generated by
ovs-monitor-ipsec for strongSwan is currently not correct. A patch has
been submitted upstream, but until it is accepted and merged, we apply a
temporary version of the patch.

This was tested for a VXLAN overlay in an IPv6-only cluster.

Fixes antrea-io#3151

Signed-off-by: Antonin Bas <abas@vmware.com>
  • Loading branch information
antoninbas committed Mar 17, 2022
1 parent 4db3c18 commit 62598ee
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions build/images/ovs/apply-patches.sh
Original file line number Diff line number Diff line change
Expand Up @@ -88,6 +88,11 @@ if version_lt "$OVS_VERSION" "2.14.1" ; then
git apply
fi

# This patch is necessary to ensure that ovs-monitor-ipsec generates a correct IPsec configuration
# for strongSwan when using IPv6.
curl https://github.com/openvswitch/ovs/commit/e59194b606078d90b73f86092f9b76385afa73f0.patch | \
git apply

# OVS hardcodes the installation path to /usr/lib/python3.7/dist-packages/ but this location
# does not seem to be in the Python path in Ubuntu 20.04. There may be a better way to do this,
# but this seems like an acceptable workaround.
Expand Down

0 comments on commit 62598ee

Please sign in to comment.