Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2d771cd8 authored by Janusz Krzysztofik's avatar Janusz Krzysztofik Committed by David S. Miller
Browse files

[IPV4] LVS: Allow to send ICMP unreachable responses when real-servers are removed 

this is a small patch by Janusz Krzysztofik to ip_route_output_slow()
that allows VIP-less LVS linux director to generate packets
originating >From VIP if sysctl_ip_nonlocal_bind is set.

In a nutshell, the intention is for an LVS linux director to be able
to send ICMP unreachable responses to end-users when real-servers are
removed.

http://archive.linuxvirtualserver.org/html/lvs-users/2007-01/msg00106.html



Signed-off-by: default avatarSimon Horman <horms@verge.net.au>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent fa0b2d1d

net/ipv4/route.c

+2 −2
Original line number Original line Diff line number Diff line
@@ -2396,7 +2396,7 @@ static int ip_route_output_slow(struct rtable **rp, const struct flowi *oldflp) 




		/* It is equivalent to inet_addr_type(saddr) == RTN_LOCAL */

		/* It is equivalent to inet_addr_type(saddr) == RTN_LOCAL */

		dev_out = ip_dev_find(oldflp->fl4_src);

		dev_out = ip_dev_find(oldflp->fl4_src);

		if (dev_out == NULL)

		if ((dev_out == NULL) && !(sysctl_ip_nonlocal_bind))

			goto out;

			goto out;





		/* I removed check for oif == dev_out->oif here.

		/* I removed check for oif == dev_out->oif here.
@@ -2407,7 +2407,7 @@ static int ip_route_output_slow(struct rtable **rp, const struct flowi *oldflp) 
		      of another iface. --ANK

		      of another iface. --ANK

		 */

		 */





		if (oldflp->oif == 0

		if (dev_out && oldflp->oif == 0

		    && (MULTICAST(oldflp->fl4_dst) || oldflp->fl4_dst == htonl(0xFFFFFFFF))) {

		    && (MULTICAST(oldflp->fl4_dst) || oldflp->fl4_dst == htonl(0xFFFFFFFF))) {

			/* Special hack: user can direct multicasts

			/* Special hack: user can direct multicasts

			   and limited broadcast via necessary interface

			   and limited broadcast via necessary interface