Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update application version to latest version from networkservicemesh/…
…cmd-forwarder-vpp@main networkservicemesh/cmd-forwarder-vpp# networkservicemesh/cmd-forwarder-vpp PR link: https://github.com/networkservicemesh/cmd-forwarder-vpp/pull/ networkservicemesh/cmd-forwarder-vpp commit message: commit 5fc9f248bfac3bdecabea19dfdd030f0712406b3 Author: Ed Warnicke <[email protected]> Date: Fri May 14 20:45:16 2021 -0500 Block AF_PACKET bound tunnel interface from communication (#191) When binding to the tunnel interface with AF_PACKET, we should *not* respond to anything except valid tunnel packets. vppinit does this by applying a DENYALL ACL. Individual tunnel chain elements are then responsible for poking a 'hole' in the DENYALL ACL for themselves. See: https://github.com/networkservicemesh/sdk-vpp/tree/main/pkg/networkservice/mechanisms/vxlan/vxlanacl Signed-off-by: Ed Warnicke <[email protected]> Signed-off-by: NSMBot <[email protected]>
- Loading branch information