From bcf4aeb94a5245c7c815bbb1efa50660b4864a0c Mon Sep 17 00:00:00 2001
From: Andrei Vagin <avagin@google.com>
Date: Wed, 10 Jul 2024 14:40:16 -0700
Subject: [PATCH] tcpip/link/veth: don't report CapabilityTXChecksumOffload

While testing docker-in-gvisor, we found that veth devices with enabled
CapabilityTXChecksumOffload don't work as expected. Packets issued from the
gvisor sandbox have incorrect checksum-s.

PiperOrigin-RevId: 651157380
---
 pkg/tcpip/link/veth/veth.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkg/tcpip/link/veth/veth.go b/pkg/tcpip/link/veth/veth.go
index 06d48e2be..3deed6e6f 100644
--- a/pkg/tcpip/link/veth/veth.go
+++ b/pkg/tcpip/link/veth/veth.go
@@ -161,7 +161,8 @@ func (e *Endpoint) SetMTU(mtu uint32) {
 
 // Capabilities implements stack.LinkEndpoint.Capabilities.
 func (e *Endpoint) Capabilities() stack.LinkEndpointCapabilities {
-	return stack.CapabilityRXChecksumOffload | stack.CapabilityTXChecksumOffload | stack.CapabilitySaveRestore
+	// TODO(b/352384218): Enable CapabilityTXChecksumOffload.
+	return stack.CapabilityRXChecksumOffload | stack.CapabilitySaveRestore
 }
 
 // GSOMaxSize implements stack.GSOEndpoint.