mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Check for advertise IP when deriving ipsec nodes
- We need to compare the node notification IP with the advertise address otherwise when the advertise address is different from the local address (this is for the public address outside of the host that maps 1-to-1 to the local private address) the local IP will be acocunted as an ipsec host and extra states will be programmed for it. Signed-off-by: Alessandro Boch <aboch@docker.com>
This commit is contained in:
parent
88b76892f3
commit
8bc99ae906
1 changed files with 1 additions and 1 deletions
|
@ -95,7 +95,7 @@ func (d *driver) checkEncryption(nid string, rIP net.IP, vxlanID uint32, isLocal
|
|||
switch {
|
||||
case isLocal:
|
||||
if err := d.peerDbNetworkWalk(nid, func(pKey *peerKey, pEntry *peerEntry) bool {
|
||||
if !lIP.Equal(pEntry.vtep) {
|
||||
if !aIP.Equal(pEntry.vtep) {
|
||||
nodes[pEntry.vtep.String()] = pEntry.vtep
|
||||
}
|
||||
return false
|
||||
|
|
Loading…
Add table
Reference in a new issue