-
Notifications
You must be signed in to change notification settings - Fork 23
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Alert for blocked ESP protocol as part of diagnose #886
Conversation
🤖 Created branch: z_pr886/sridhargaddam/issue-2658 |
79aa9e4
to
c5051e3
Compare
c5051e3
to
10f1ba2
Compare
10f1ba2
to
36b3f39
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks, a minor tweak still to ensure that “traffic” and “and” don’t end up stuck together.
When there is no NAT between the Gateway nodes and Libreswan cable-driver is used, IPsec protocol uses UDP/4500 port for exchanging the keys and ESP for data transfer. As part of subctl diagnose command, this PR now validates if there is a potential issue with ESP and returns appropriate error message. Related to: submariner-io/submariner#2658 Signed-off-by: Sridhar Gaddam <[email protected]>
36b3f39
to
e745bc9
Compare
🤖 Closed branches: [z_pr886/sridhargaddam/issue-2658] |
Release notes for the following PR. submariner-io/subctl#886 Signed-off-by: Sridhar Gaddam <[email protected]>
Release note PR: submariner-io/submariner-website#1010 |
Release notes for the following PR. submariner-io/subctl#886 Signed-off-by: Sridhar Gaddam <[email protected]>
Release notes for the following PR. submariner-io/subctl#886 Signed-off-by: Sridhar Gaddam <[email protected]>
Release notes for the following PR. submariner-io/subctl#886 Signed-off-by: Sridhar Gaddam <[email protected]>
Release notes for the following PR. submariner-io/subctl#886 Signed-off-by: Sridhar Gaddam <[email protected]>
Release notes for the following PR. submariner-io/subctl#886 Signed-off-by: Sridhar Gaddam <[email protected]>
Release notes for the following PR. submariner-io/subctl#886 Signed-off-by: Sridhar Gaddam <[email protected]>
When there is no NAT between the Gateway nodes and Libreswan cable-driver is used, IPsec protocol uses UDP/4500 port for exchanging the keys and ESP for data transfer. As part of subctl diagnose command, this PR now validates if there is a potential issue with ESP and returns appropriate error message.