netdev-vport: Warn on IPsec tunnels when ovs-monitor-ipsec not running.
authorJustin Pettit <jpettit@nicira.com>
Fri, 11 Mar 2011 23:18:30 +0000 (15:18 -0800)
committerJustin Pettit <jpettit@nicira.com>
Sun, 13 Mar 2011 18:06:50 +0000 (11:06 -0700)
commit5059eff3bdd5a8ddd5b9d0559b3d36f2b2ad2a7a
treebf46b25c430954b65c4f749ddfde783506fb9b17
parenta4b2e516ffd0aa466f2d0182c89a91ce5d23d9a4
netdev-vport: Warn on IPsec tunnels when ovs-monitor-ipsec not running.

IPsec tunnels are only supported on Debian systems running
ovs-monitor-ipsec.  Since that daemon configures IPsec, ovs-vswitchd
doesn't know whether IPsec will actually work.  With this commit, a
warning is printed that it is unlikely to work unless that daemon is
started.

There is a more serious issue that IPsec traffic can pass unencrypted if
that daemon is not running.  To fix that problem, changes to the kernel
module will need to occur.  A future commit will address that issue, but
this earlier warning will be useful regardless.

Bug #4854
lib/netdev-vport.c