Re: [ovs-discuss] Re:Re: [HELP] Question about icmp pkt marked Invalid by userspace conntrack

2019-10-31 Thread Darrell Ball
On Thu, Oct 31, 2019 at 3:04 AM txfh2007 via discuss < ovs-discuss@openvswitch.org> wrote: > Hi Ben && Darrell: > This patch works, but after merging this patch I have found the iperf > throughout decrease from 5Gbps+ to 500Mbps. what is the 5Gbps number ? Is that

Re: [ovs-discuss] Re:Re: [HELP] Question about icmp pkt marked Invalid by userspace conntrack

2019-10-11 Thread Darrell Ball
This is fixed via 9171c63532ee9cbc63bb8cfae364ab071f44389b 2.10.4/3/2 will have it On Thu, Oct 10, 2019 at 6:56 PM txfh2007 via discuss < ovs-discuss@openvswitch.org> wrote: > Hi Ben: > This is my tcpdump result and the userspace datapath cache flow: > >Note: the icmp reply got by ovs

[ovs-discuss] Fwd: FW: [HELP] Question about icmp pkt marked Invalid by userspace conntrack

2019-10-10 Thread Darrell Ball
1/ Pls provide a hexdump capture of the request and corresponding reply packets. 2/ Also, I would check 2.10.4 or latest 2.10. On 10/10/19, 7:51 AM, "ovs-discuss-boun...@openvswitch.org on behalf of txfh2007 via discuss" wrote: Hi all: I was using OVS-DPDK(version 2.10-1), and I

Re: [ovs-dev] [PATCH] tests: Only run test on kernel datapath

2019-10-04 Thread Darrell Ball
on. > >>>> > >>>> Also change the name of the test to make it more informativeand > >>>> less redundant and add comments with a short explanation. > >>>> > >>>> Fixes: d7fd61a ("tests: Add check for correct l3l4 conntrack f

Re: [ovs-dev] [PATCH v2] tests: Add check for correct l3l4 conntrack frag reassembly

2019-10-04 Thread Darrell Ball
On Fri, Oct 4, 2019 at 7:05 AM Gregory Rose wrote: > > On 10/3/2019 6:56 PM, Darrell Ball wrote: > > Thanks for the patch > > > > This approach will not work for the userspace datapath > > > > Few issues off the top of my head: > > > > 1/

Re: [ovs-dev] [PATCH v2] tests: Add check for correct l3l4 conntrack frag reassembly

2019-10-03 Thread Darrell Ball
On Thu, Oct 3, 2019 at 6:56 PM Darrell Ball wrote: > Thanks for the patch > > This approach will not work for the userspace datapath > > Few issues off the top of my head: > > 1/ packet-out frees the packet (which is a fragment in this case) after > completion >

Re: [ovs-dev] [PATCH v2] tests: Add check for correct l3l4 conntrack frag reassembly

2019-10-03 Thread Darrell Ball
out the packet Alternatively, if you want to use this simplified approach, you can disable the test for the userspace datapath. Darrell On Thu, Oct 3, 2019 at 10:46 AM Greg Rose wrote: > Two commits recently fixed an issue with setting the corrrect l3 and l4 > flow informatio

[ceph-users] Re: RAM recommendation with large OSDs?

2019-10-02 Thread Darrell Enns
OSD/node count? Is the concern just the large rebalance if a node fails and takes out a large portion of the OSDs at once? -Original Message- From: Paul Emmerich Sent: Tuesday, October 01, 2019 3:00 PM To: Darrell Enns Cc: ceph-users@ceph.io Subject: Re: [ceph-users] RAM recommendation

[ceph-users] RAM recommendation with large OSDs?

2019-10-01 Thread Darrell Enns
The standard advice is "1GB RAM per 1TB of OSD". Does this actually still hold with large OSDs on bluestore? Can it be reasonably reduced with tuning? >From the docs, it looks like bluestore should target the "osd_memory_target" >value by default. This is a fixed value (4GB by default), which

Re: [ovs-dev] [PATCH] datapath: Fix conntrack cache with timeout

2019-09-29 Thread Darrell Ball
Thanks for the patch Looks good and matches the upstream version, including the rcu deference fixup. Thanks for remembering to add the requested test incremental, post fix. Darrell On Fri, Sep 27, 2019 at 2:14 PM Yi-Hung Wei wrote: > This patch is from the following upstream net-next com

Re: [ovs-dev] [PATCH branch-2.6] conntrack: Fix ICMPv4 error data L4 length check.

2019-09-28 Thread Darrell Ball
Thanks for doing this Vishal ! Except for minor patch formatting issues (inline), this is fine and also tests fine. On Fri, Sep 27, 2019 at 10:54 PM Vishal Deep Ajmera < vishal.deep.ajm...@ericsson.com> wrote: > From: Darrell Ball > > The ICMPv4 error data L4 length check was

Re: [ovs-dev] [patch v3] conntrack: Add option to disable TCP sequence checking.

2019-09-25 Thread Darrell Ball
On Wed, Sep 25, 2019 at 1:46 PM Ben Pfaff wrote: > On September 25, 2019 1:42:36 PM PDT, Darrell Ball > wrote: >> >> Thank you >> >> Pls see inline >> >> On Wed, Sep 25, 2019 at 10:26 AM Ben Pfaff wrote: >> >>> On Tue, Sep 24, 201

[ovs-dev] [patch v4] conntrack: Add option to disable TCP sequence checking.

2019-09-25 Thread Darrell Ball
. Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2019-May/359188.html Signed-off-by: Darrell Ball --- v4: Splice tcp sequence number check in tcp_conn_update() out as a function for clarity (Ben). Fix up some dpctl man page comments (Ben). s/ckk/chk/ for 'tcp_seq_chk

Re: [ovs-dev] [patch v3] conntrack: Add option to disable TCP sequence checking.

2019-09-25 Thread Darrell Ball
Thank you Pls see inline On Wed, Sep 25, 2019 at 10:26 AM Ben Pfaff wrote: > On Tue, Sep 24, 2019 at 03:47:35PM -0700, Darrell Ball wrote: > > This may be needed in some special cases, such as to support some > hardware > > offload implementations. Note that disabling T

Re: [ovs-dev] [patch v6] conntrack: Optimize recirculations.

2019-09-25 Thread Darrell Ball
On Wed, Sep 25, 2019 at 10:51 AM Ben Pfaff wrote: > On Mon, Aug 26, 2019 at 09:05:44AM -0700, Darrell Ball wrote: > > Cache the 'conn' context and use it when it is valid. The cached 'conn' > > context will get reset if it is not expected to be valid; the cost to do > &g

[ovs-dev] [patch v3] conntrack: Add option to disable TCP sequence checking.

2019-09-24 Thread Darrell Ball
. Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2019-May/359188.html Signed-off-by: Darrell Ball --- v3: Make manpage comments more verbose. Expand commit message comments. v2: Per particular requirement, support 'no-tcp-seq-chk' rather than 'liberal' mode. NEWS

Re: [ovs-dev] [patch v2] conntrack: Add option to disable TCP sequence checking.

2019-09-24 Thread Darrell Ball
Thanks Ben I just noticed I sent another version here https://patchwork.ozlabs.org/patch/1153283/ but there were a couple of issues that deserve a resend. It might need a rebase as well Darrell On Tue, Sep 24, 2019 at 3:18 PM Ben Pfaff wrote: > On Wed, Jun 12, 2019 at 12:44:18PM -0

Re: [ovs-dev] [patch v1] conntrack: Fix 'check_orig_tuple()' Valgrind false positive.

2019-09-24 Thread Darrell Ball
Thanks Ben Would you mind applying to 2.12 as well. Darrell On Tue, Sep 24, 2019 at 2:34 PM Ben Pfaff wrote: > On Mon, Sep 23, 2019 at 04:44:33PM -0700, Darrell Ball wrote: > > Valgrind reported that 'pkt->md.ct_orig_tuple.ipv4.ipv4_proto' is > > uninitialized in

[ovs-dev] [patch v1] conntrack: Fix 'check_orig_tuple()' Valgrind false positive.

2019-09-23 Thread Darrell Ball
4733c527da ("conntrack: Validate accessing of conntrack data in pkt_metadata.") CC: Yifeng Sun Signed-off-by: Darrell Ball --- lib/conntrack.c | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/lib/conntrack.c b/lib/conntrack.c index fd71e6c..b56ef06 100644 --- a/l

[Vocab] Diabetes reversed by... Stainless Steel?

2019-09-03 Thread Darrell
No images ? Please Click Here 3 ways to reverse diabetes and high blood pressure

Re: BGP Enabled transit in Chicago (River North) and equipment recommendation

2019-09-03 Thread Darrell Budic
I’ve had BGP from comcast business in River North before, not sure what their minimum bandwidth is for that. Tunnels may be simplest at that bandwidth level. > On Sep 3, 2019, at 12:52 PM, Florian Brandstetter via NANOG > wrote: > > Might be worth to consider running a software router on that

[ovs-dev] [patch v2] conntrack: Fix 'reverse_nat_packet()' variable datatype.

2019-08-30 Thread Darrell Ball
und by inspection. Fixes: edd1bef468c0 ("dpdk: Add more ICMP Related NAT support.") Signed-off-by: Darrell Ball --- v2: Elaborate added comments. lib/conntrack.c | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/lib/conntrack.c b/lib/conntrack.c index e5266e5..6452d82 100

[ovs-dev] [patch v1] conntrack: Fix 'reverse_nat_packet()' variable datatype.

2019-08-29 Thread Darrell Ball
und by inspection. Fixes: edd1bef468c0 ("dpdk: Add more ICMP Related NAT support.") Signed-off-by: Darrell Ball --- lib/conntrack.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/conntrack.c b/lib/conntrack.c index e5266e5..79d2711 100644 --- a/lib/conntrack.c +++ b/li

Re: [Gluster-users] Brick Reboot => VMs slowdown, client crashes

2019-08-29 Thread Darrell Budic
. Your cluster will go write only if it loses two nodes though, but you can always make a change to the server-quorum-ratio later if you need to keep it running temporarily. Hope that makes sense of what’s going on for you, -Darrell > On Aug 23, 2019, at 5:06 PM, Carl Sirotic > wrot

Re: [Gluster-users] Question about Healing estimated time ...

2019-08-29 Thread Darrell Budic
Depends on your disks, your network, some CPU since you’re using a dispersed volume, and the amount of data you’ve got on them. Watch this heal and see how long it takes to baseline your system. If you’ve got 10G and SSDs, it’s probably not going to take too long. If you’ve got 1G, HDDs, and

Re: [ovs-dev] [patch v2] conntrack: Fix ICMPv4 error data L4 length check.

2019-08-29 Thread Darrell Ball
On Thu, Aug 29, 2019 at 7:37 AM Ben Pfaff wrote: > On Tue, Aug 27, 2019 at 04:59:02PM -0700, Darrell Ball wrote: > > The ICMPv4 error data L4 length check was found to be too strict for TCP, > > expecting a minimum of 20 rather than 8 bytes. This worked by > > hapens

Re: [ovs-dev] [PATCH v3] userspace: Enable non-bridge port as tunnel endpoint.

2019-08-29 Thread Darrell Ball
On Thu, Aug 29, 2019 at 8:40 AM Yifeng Sun wrote: > Thanks Ben and Darrell, let me check it out. > Can you also add a use case description ? >From a controller POV, defining which interface is a vtep can be done in one place and distributed to the rest of the system; it is not

Re: Topband: Inverted L in contact with leaves

2019-08-29 Thread AB2E Darrell
as the element, and then gradually shorten them to adjust for resonance, depending on how the SWR looks. In the past, the L has worked great for me. I now have about 115 countries confirmed on 160, all with an L. 73 and best of luck with the project, Darrell AB2E From

Re: [ovs-dev] [PATCH v3] userspace: Enable non-bridge port as tunnel endpoint.

2019-08-28 Thread Darrell Ball
Thanks for the patch How about writing a system test ? Darrell On Wed, Aug 28, 2019 at 10:50 AM Yifeng Sun wrote: > For userspace datapath, currently only the bridge itself, the LOCAL port, > can be the tunnel endpoint to encap/decap tunnel packets. This patch > enables non-br

Re: [ovs-dev] [patch v1] conntrack: Fix ICMPV4 error data L4 length check.

2019-08-28 Thread Darrell Ball
On Wed, Aug 28, 2019 at 1:43 AM Vishal Deep Ajmera < vishal.deep.ajm...@ericsson.com> wrote: > That is interesting > > i just tried applying on top of tree and I see that the git applies some > changes (2 lines) > > in extract_l4_icmp6() rather the intended extract_l4_icmp() as in the > patch I

[ovs-dev] [patch v2] conntrack: Fix ICMPv4 error data L4 length check.

2019-08-27 Thread Darrell Ball
") CC: Daniele Di Proietto Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2019-August/361949.html Reported-by: Vishal Deep Ajmera Signed-off-by: Vishal Deep Ajmera Co-authored-by: Vishal Deep Ajmera Signed-off-by: Darrell Ball --- v2: Rebase to fix git applying to wron

Re: [ovs-dev] [patch v1] conntrack: Fix ICMPV4 error data L4 length check.

2019-08-27 Thread Darrell Ball
On Tue, Aug 27, 2019 at 2:02 AM Vishal Deep Ajmera < vishal.deep.ajm...@ericsson.com> wrote: > Hi Darrell, > > Thanks for the patch. When I applied the patch to latest master, > I see that we take care of length check (< 8) only for ICMPv6 and > not for ICMPv4. That is

Re: [ovs-dev] [PATCH] conntrack: Correct length check for tcp packet inside ICMP data.

2019-08-26 Thread Darrell Ball
On Fri, Aug 23, 2019 at 9:09 AM Darrell Ball wrote: > Thanks for the patch > > Goes back to release 2.6/day one :-). > > I'll provide more feedback after today. > I sent an alternative patch here https://mail.openvswitch.org/pipermail/ovs-dev/2019-August/362013.htm

Re: [ovs-dev] [patch v1] conntrack: Fix ICMPV4 error data L4 length check.

2019-08-26 Thread Darrell Ball
Resent this patch, as it had a bad e-mail address Darrell On Mon, Aug 26, 2019 at 9:06 AM Darrell Ball wrote: > The ICMP error data L4 length check was found to be too strict for TCP, > expecting a minimum of 20 rather than 8 bytes. This worked by > hapenstance for other inner

[ovs-dev] [patch v1] conntrack: Fix ICMPV4 error data L4 length check.

2019-08-26 Thread Darrell Ball
s-dev/2019-August/361949.html Reported-by: Vishal Deep Ajmera Signed-off-by: Vishal Deep Ajmera Co-authored-by: Vishal Deep Ajmera Signed-off-by: Darrell Ball --- lib/conntrack.c | 38 ++ lib/packets.h | 3 +++ 2 files changed, 25 insertions(+), 16 deletion

[ovs-dev] [patch v1] conntrack: Fix ICMPV4 error data L4 length check.

2019-08-26 Thread Darrell Ball
s-dev/2019-August/361949.html Reported-by: Vishal Deep Ajmera Signed-off-by: Vishal Deep Ajmera Co-authored-by: Vishal Deep Ajmera Signed-off-by: Darrell Ball --- lib/conntrack.c | 38 ++ lib/packets.h | 3 +++ 2 files changed, 25 insertions(+), 16 deletion

[ovs-dev] [patch v2] conntrack: Add option to disable TCP sequence checking.

2019-08-26 Thread Darrell Ball
. Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2019-May/359188.html Signed-off-by: Darrell Ball --- v2: Per particular requirement, support 'no-tcp-seq-chk' rather than 'liberal' mode. Make manpage comments more verbose. Expand commit message comments. lib/conntrack

[ovs-dev] [patch v6] conntrack: Optimize recirculations.

2019-08-26 Thread Darrell Ball
. A negative test is added to check the resetting of the cached 'conn'. Signed-off-by: Darrell Ball --- v6: a/ Added 'conn' reset for mpls push case to force 'invalid', for consistency reasons. b/ Add missed lock around 'conn->mark' and 'conn->label' access in 'process_on

Re: [ovs-dev] [PATCH] conntrack: Correct length check for tcp packet inside ICMP data.

2019-08-23 Thread Darrell Ball
Thanks for the patch Goes back to release 2.6/day one :-). I'll provide more feedback after today. On Fri, Aug 23, 2019 at 6:20 AM Vishal Deep Ajmera < vishal.deep.ajm...@ericsson.com> wrote: > An ICMP packet with type destination or host not reachable also carries > 28 bytes of ICMP data

Re: [ovs-dev] [PATCH] conntrack: check the result of extract_l3_ipv4/6

2019-08-21 Thread Darrell Ball
On Wed, Aug 21, 2019 at 3:13 PM Ben Pfaff wrote: > On Mon, Aug 19, 2019 at 08:35:11AM -0700, Darrell Ball wrote: > > Thanks for the patch > > > > On Sun, Aug 18, 2019 at 11:01 PM Li RongQing > wrote: > > > > > the result of extract_l3_ipv4/6 should be c

Re: [ovs-dev] [PATCH v2 9/9] system-traffic: Add zone-based conntrack timeout policy test

2019-08-20 Thread Darrell Ball
On Mon, Aug 12, 2019 at 5:22 PM Yi-Hung Wei wrote: > On Sun, Aug 11, 2019 at 12:30 PM Darrell Ball wrote: > > > > I did some further testing and ran into another issue; in this case, > one, I did not expect. > > > > I added an additional sending of packet

Re: [ovs-dev] [PATCH v4 4/9] ct-dpif, dpif-netlink: Add conntrack timeout policy support

2019-08-20 Thread Darrell Ball
On Tue, Aug 20, 2019 at 12:30 PM Yi-Hung Wei wrote: > On Tue, Aug 20, 2019 at 12:46 AM Darrell Ball wrote: > > After fixing a bug in my proposed incremental and adding tracking of an > already removed sub timeout policy: > > Pls double check. > > Thanks for the pro

Re: [ovs-dev] [PATCH v4 4/9] ct-dpif, dpif-netlink: Add conntrack timeout policy support

2019-08-20 Thread Darrell Ball
On Mon, Aug 19, 2019 at 7:41 PM Darrell Ball wrote: > > > On Mon, Aug 19, 2019 at 12:42 PM Darrell Ball wrote: > >> >> >> On Mon, Aug 19, 2019 at 10:52 AM Yi-Hung Wei >> wrote: >> >>> On Fri, Aug 16, 2019 at 5:07 PM Darrell Ball wrote: >

Re: [ovs-dev] [PATCH v4 4/9] ct-dpif, dpif-netlink: Add conntrack timeout policy support

2019-08-19 Thread Darrell Ball
On Mon, Aug 19, 2019 at 12:42 PM Darrell Ball wrote: > > > On Mon, Aug 19, 2019 at 10:52 AM Yi-Hung Wei wrote: > >> On Fri, Aug 16, 2019 at 5:07 PM Darrell Ball wrote: >> > >> > Thanks for the patch >> > >> > Pls let me know if this incr

Re: [ovs-dev] [PATCH v4 6/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-19 Thread Darrell Ball
On Mon, Aug 19, 2019 at 11:12 AM Yi-Hung Wei wrote: > On Fri, Aug 16, 2019 at 5:10 PM Darrell Ball wrote: > > > > Thanks for the patch > > > > Pls let me know if the following incremental works for you. > > > > diff --git a/ofproto/ofproto-dpif.c b/o

Re: [Gluster-users] Brick Reboot => VMs slowdown, client crashes

2019-08-19 Thread Darrell Budic
but I suspect these two need another round or six of tuning to tell if they are making a difference. I use the throughput-performance tuned profile on my servers, so you should be in good shape there. > On Aug 19, 2019, at 12:22 PM, Guy Boisvert > wrote: > > On 2019-08-19 12:08 p

Re: [Gluster-users] Brick Reboot => VMs slowdown, client crashes

2019-08-19 Thread Darrell Budic
y interested about these settings. > > Also, is it possible to turn the shard feature AFTER the volume was started > to be used ? > > > Carl > > On 2019-08-19 12:08 p.m., Darrell Budic wrote: >> You also need to make sure your volume is setup properly for best >

Re: [ovs-dev] [PATCH v4 4/9] ct-dpif, dpif-netlink: Add conntrack timeout policy support

2019-08-19 Thread Darrell Ball
On Mon, Aug 19, 2019 at 10:52 AM Yi-Hung Wei wrote: > On Fri, Aug 16, 2019 at 5:07 PM Darrell Ball wrote: > > > > Thanks for the patch > > > > Pls let me know if this incremental works for you. > > Main change is logging fix for timeout policy deletion. > &g

Re: [Gluster-users] Brick Reboot => VMs slowdown, client crashes

2019-08-19 Thread Darrell Budic
You also need to make sure your volume is setup properly for best performance. Did you apply the gluster virt group to your volumes, or at least features.shard = on on your VM volume? > On Aug 19, 2019, at 11:05 AM, Carl Sirotic > wrote: > > Yes, I made sure there was no heal. > This is what

Re: [ovs-dev] [PATCH] conntrack: check the result of extract_l3_ipv4/6

2019-08-19 Thread Darrell Ball
Thanks for the patch On Sun, Aug 18, 2019 at 11:01 PM Li RongQing wrote: > the result of extract_l3_ipv4/6 should be checked in reverse_nat_packet > when it is false, meaning this packet is wrong, should not do handle it > continually > > Signed-off-by: Li RongQing > --- > lib/conntrack.c |

Re: [ovs-dev] [PATCH v4 6/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-16 Thread Darrell Ball
Thanks for the patch Pls let me know if the following incremental works for you. diff --git a/ofproto/ofproto-dpif.c b/ofproto/ofproto-dpif.c index 244155a..cb8b51e 100644 --- a/ofproto/ofproto-dpif.c +++ b/ofproto/ofproto-dpif.c @@ -168,6 +168,12 @@ struct ct_timeout_policy {

Re: [ovs-dev] [PATCH v4 4/9] ct-dpif, dpif-netlink: Add conntrack timeout policy support

2019-08-16 Thread Darrell Ball
Thanks for the patch Pls let me know if this incremental works for you. Main change is logging fix for timeout policy deletion. Darrell diff --git a/lib/dpif-netlink.c b/lib/dpif-netlink.c index 1d4ee60..00d957b 100644 --- a/lib/dpif-netlink.c +++ b/lib/dpif-netlink.c @@ -2822,11 +2822,10

Re: [ovs-dev] [PATCH v4 0/9] Support zone-based conntrack timeout policy

2019-08-15 Thread Darrell Ball
ebounce in previous version(s); maybe I missed it in my quick check of v4; I'll check more later. Anyways, we need some debouncing. Also the vlog rate limiting may need adjustment to throttle more. Thanks Darrell On Thu, Aug 15, 2019 at 12:31 PM Yi-Hung Wei wrote: > This patch series enables z

Re: [ovs-dev] [PATCH v3 2/9] ovs-vsctl: Add conntrack zone commands.

2019-08-15 Thread Darrell Ball
On Thu, Aug 15, 2019 at 10:53 AM William Tu wrote: > Thanks for the review. > > On Mon, Aug 12, 2019 at 09:54:42PM -0700, Darrell Ball wrote: > > Thanks for the patch > > > > Thanks for the fixups; mostly minor comments inline. > > > > On Mon, Aug 1

Re: [ovs-dev] [PATCH v3 4/9] ct-dpif, dpif-netlink: Add conntrack timeout policy support

2019-08-14 Thread Darrell Ball
Thanks for the patch mostly minor comments On Mon, Aug 12, 2019 at 5:54 PM Yi-Hung Wei wrote: > This patch first defines the dpif interface for a datapath to support > adding, deleting, getting and dumping conntrack timeout policy. > The timeout policy is identified by a 4 bytes unsigned

Re: [ovs-dev] [PATCH v3 6/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-14 Thread Darrell Ball
On Wed, Aug 14, 2019 at 1:28 PM Yi-Hung Wei wrote: > On Tue, Aug 13, 2019 at 7:46 PM Darrell Ball wrote: > > > > Thanks for the patch > > > > Some high level comments: > > > > 1/ The ct_tp_kill_list code is still in common code > > I think we

Re: [ovs-dev] [PATCH v3 1/9] ovs-vswitchd: Add Datapath, CT_Zone, and CT_Zone_Policy tables.

2019-08-14 Thread Darrell Ball
On Wed, Aug 14, 2019 at 9:47 AM Yi-Hung Wei wrote: > On Mon, Aug 12, 2019 at 7:46 PM Darrell Ball wrote: > >> diff --git a/vswitchd/vswitch.ovsschema b/vswitchd/vswitch.ovsschema > >> index f7c6eb8983cd..c0a2242ad345 100644 > >> --- a/vswitchd/vswitch

Re: [ovs-dev] [PATCH v3 9/9] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-08-13 Thread Darrell Ball
On Tue, Aug 13, 2019 at 8:03 PM Darrell Ball wrote: > Thanks for the patch > > few more comments > > On Mon, Aug 12, 2019 at 5:57 PM Yi-Hung Wei wrote: > >> This patch derives the timeout policy based on ct zone from the >> internal data structure that we maintai

Re: [ovs-dev] [PATCH v3 9/9] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-08-13 Thread Darrell Ball
Thanks for the patch few more comments On Mon, Aug 12, 2019 at 5:57 PM Yi-Hung Wei wrote: > This patch derives the timeout policy based on ct zone from the > internal data structure that we maintain on dpif layer. > > It also adds a system traffic test to verify the zone-based conntrack >

Re: [ovs-dev] [PATCH v3 6/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-13 Thread Darrell Ball
Thanks for the patch Some high level comments: 1/ The ct_tp_kill_list code is still in common code I think we discussed moving that to the dpif backer code ct_timeout_policy_unref() is adding to this deferred kill list which is not needed for userspace datapath. 2/

Re: [ovs-dev] [PATCH v3 9/9] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-08-13 Thread Darrell Ball
On Tue, Aug 13, 2019 at 2:33 PM Yi-Hung Wei wrote: > On Tue, Aug 13, 2019 at 11:43 AM Darrell Ball wrote: > > Sure, circling back to this part > > > > yep, it is the Linux In-tree kernel module rather than OVS tree module > > > > dball@ubuntu:~/ovs$ modinfo

Re: [ovs-dev] [PATCH v3 9/9] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-08-13 Thread Darrell Ball
On Tue, Aug 13, 2019 at 11:01 AM Yi-Hung Wei wrote: > On Mon, Aug 12, 2019 at 7:35 PM Darrell Ball wrote: > > > > Thanks for the patch > > > > Not a full review; I just did a quick run of the test using a more > recent kernel version > > > > dball@u

Re: [ovs-dev] [PATCH v3 2/9] ovs-vsctl: Add conntrack zone commands.

2019-08-12 Thread Darrell Ball
Thanks for the patch Thanks for the fixups; mostly minor comments inline. On Mon, Aug 12, 2019 at 5:53 PM Yi-Hung Wei wrote: > From: William Tu > > The patch adds commands creating/deleting/listing conntrack zone > timeout policies: > $ ovs-vsctl {add,del,list}-zone-tp dp zone=zone_id ... >

Re: [ovs-dev] [PATCH v3 1/9] ovs-vswitchd: Add Datapath, CT_Zone, and CT_Zone_Policy tables.

2019-08-12 Thread Darrell Ball
Thanks for the patch On Mon, Aug 12, 2019 at 5:52 PM Yi-Hung Wei wrote: > From: Justin Pettit > > Signed-off-by: Justin Pettit > Signed-off-by: Yi-Hung Wei > Co-authored-by: Yi-Hung Wei > --- > vswitchd/vswitch.ovsschema | 51 - > vswitchd/vswitch.xml | 275 >

Re: [ovs-dev] [PATCH v3 9/9] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-08-12 Thread Darrell Ball
0:00:00:00,dst=92:48:5b:47:e2:63/00:00:00:00:00:00),eth_type(0x0800),ipv4(src= 10.1.1.1/0.0.0.0,dst=10.1.1.2/0.0.0.0,proto=1,tos=0/0,ttl=64/0,frag=no),icmp(type=8/0,code=0/0), actions:ct(commit,zone=5,timeout=ovs_tp_0_icmp4),3 2019-08-13T02:19:09Z|1|daemon_unix|WARN|/home/dball/ovs/_gcc/te

Re: [ovs-dev] [PATCH v3 0/9] Support zone-based conntrack timeout policy

2019-08-12 Thread Darrell Ball
ixes. > * ct-dpif > - Fold in diff suggestion from Justin. > * bridge, ofproto-dpif > - Restruct the ofproto and dpif layer support for zone based timeout > policy. > * system traffic test > - Fix bug reported by Darrell. > which one ? > * Address re

Re: [ovs-dev] [PATCH v2 9/9] system-traffic: Add zone-based conntrack timeout policy test

2019-08-12 Thread Darrell Ball
On Mon, Aug 12, 2019 at 5:15 PM Yi-Hung Wei wrote: > On Sun, Aug 11, 2019 at 12:30 PM Darrell Ball wrote: > > > > I did some further testing and ran into another issue; in this case, > one, I did not expect. > > > > I added an additional sending of packet

Re: [ovs-dev] [PATCH v2 9/9] system-traffic: Add zone-based conntrack timeout policy test

2019-08-12 Thread Darrell Ball
On Mon, Aug 12, 2019 at 5:22 PM Yi-Hung Wei wrote: > On Sun, Aug 11, 2019 at 12:30 PM Darrell Ball wrote: > > > > I did some further testing and ran into another issue; in this case, > one, I did not expect. > > > > I added an additional sending of packet

Re: [ovs-dev] [PATCH v2 9/9] system-traffic: Add zone-based conntrack timeout policy test

2019-08-11 Thread Darrell Ball
c=10.1.1.2,dst=10.1.1.1,sport=,dport=),zone=5 On Tue, Aug 6, 2019 at 12:16 PM Darrell Ball wrote: > > > On Tue, Aug 6, 2019 at 11:07 AM Yi-Hung Wei wrote: > >> On Tue, Aug 6, 2019 at 10:21 AM Darrell Ball wrote: >> > >> > >> > I did

Re: [ovs-dev] [PATCH v2 8/9] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-08-11 Thread Darrell Ball
On Fri, Aug 9, 2019 at 1:10 PM Justin Pettit wrote: > > > On Aug 1, 2019, at 3:07 PM, Yi-Hung Wei wrote: > > > > diff --git a/lib/dpif-provider.h b/lib/dpif-provider.h > > index 79a2314500cf..57b32ccb610f 100644 > > --- a/lib/dpif-provider.h > > +++ b/lib/dpif-provider.h > > @@ -536,6 +536,11

Re: [ovs-dev] [PATCH v2 5/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-11 Thread Darrell Ball
On Fri, Aug 9, 2019 at 1:23 PM Justin Pettit wrote: > > > On Aug 7, 2019, at 11:40 AM, Darrell Ball wrote: > > > > There are 3 behaviors with the patchset that are datapath specific > > > > 1/ Unwildcarding of commit flows with timeout policies > > A

RE: Narrator

2019-08-08 Thread Darrell Bowles via Talk
Yes that is correct. Narrator once you bring it up, will give you a window with what is new and other items. Thanks, Darrell -Original Message- From: Talk On Behalf Of Debby Franson via Talk Sent: Thursday, August 8, 2019 5:10 PM To: Window-Eyes Discussion List Cc: Debby Franson

Re: [ovs-dev] [PATCH v2 2/9] ovs-vsctl: Add conntrack zone commands.

2019-08-07 Thread Darrell Ball
On Wed, Aug 7, 2019 at 1:37 PM William Tu wrote: > Thanks for the review. > > On Mon, Aug 05, 2019 at 04:12:02PM -0700, Darrell Ball wrote: > > Thanks for the patch > > > > I noticed '--may-exist' and '--if-exists' are supported now for > > add--zone-tp/d

Re: [ovs-dev] [PATCH v2 5/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-07 Thread Darrell Ball
On Wed, Aug 7, 2019 at 11:51 AM Darrell Ball wrote: > > > On Wed, Aug 7, 2019 at 11:40 AM Darrell Ball wrote: > >> >> >> On Tue, Aug 6, 2019 at 9:57 PM Justin Pettit wrote: >> >>> >>> > On Aug 5, 2019, at 8:07 PM, Darrell Ball wrot

Re: [ovs-dev] [PATCH v2 5/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-07 Thread Darrell Ball
On Wed, Aug 7, 2019 at 11:40 AM Darrell Ball wrote: > > > On Tue, Aug 6, 2019 at 9:57 PM Justin Pettit wrote: > >> >> > On Aug 5, 2019, at 8:07 PM, Darrell Ball wrote: >> > >> > On Thu, Aug 1, 2019 at 3:10 PM Yi-Hung Wei >> wrote: >> &

Re: [ovs-dev] [PATCH v2 5/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-07 Thread Darrell Ball
On Tue, Aug 6, 2019 at 9:57 PM Justin Pettit wrote: > > > On Aug 5, 2019, at 8:07 PM, Darrell Ball wrote: > > > > On Thu, Aug 1, 2019 at 3:10 PM Yi-Hung Wei wrote: > > > >> +struct ct_timeout_policy { > >> +struct uuid uuid; > >&g

Re: [ovs-dev] [PATCH v2 9/9] system-traffic: Add zone-based conntrack timeout policy test

2019-08-06 Thread Darrell Ball
On Tue, Aug 6, 2019 at 11:07 AM Yi-Hung Wei wrote: > On Tue, Aug 6, 2019 at 10:21 AM Darrell Ball wrote: > > > > > > I did some more testing and found a similar problem as in V1. > > > > This test can be run successfully once and then fails after

Re: [ovs-dev] [PATCH v2 8/9] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-08-06 Thread Darrell Ball
On Mon, Aug 5, 2019 at 8:51 PM Darrell Ball wrote: > Thanks for the patch > > The main comment I had from the V1 patch was adding the check > > +if (ofc->flags & NX_CT_F_COMMIT) { > > in compose_conntrack_action() > > I see that was done. > > Aft

Re: [ovs-dev] [PATCH v2 9/9] system-traffic: Add zone-based conntrack timeout policy test

2019-08-06 Thread Darrell Ball
On Mon, Aug 5, 2019 at 9:03 PM Darrell Ball wrote: > Thanks for the patch > > I see the test is much improved now from V1 and passes - thanks > > Ideally, tests should be associated with some code for context > It could be folded into patch 8 > I did some more testin

Re: [ovs-dev] [PATCH v2 9/9] system-traffic: Add zone-based conntrack timeout policy test

2019-08-05 Thread Darrell Ball
Thanks for the patch I see the test is much improved now from V1 and passes - thanks Ideally, tests should be associated with some code for context It could be folded into patch 8 On Thu, Aug 1, 2019 at 3:12 PM Yi-Hung Wei wrote: > This patch adds a system traffic test to verify the

Re: [ovs-dev] [PATCH v2 8/9] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-08-05 Thread Darrell Ball
Thanks for the patch The main comment I had from the V1 patch was adding the check +if (ofc->flags & NX_CT_F_COMMIT) { in compose_conntrack_action() I see that was done. After a quick scan, I had one minor comment inline. On Thu, Aug 1, 2019 at 3:12 PM Yi-Hung Wei wrote: > This patch

Re: [ovs-dev] [PATCH v2 5/9] ofproto-dpif: Consume CT_Zone, and CT_Timeout_Policy tables

2019-08-05 Thread Darrell Ball
Thanks for the patch comments inline On Thu, Aug 1, 2019 at 3:10 PM Yi-Hung Wei wrote: > This patch consumes the CT_Zone and CT_Timeout_Policy tables, maintains > the zone-based timeout policy in the vswitchd. Whenever there is a > database change, vswitchd will read the datapath, CT_Zone, and

Re: [ovs-dev] [PATCH v2 4/9] ct-dpif, dpif-netlink: Add conntrack timeout policy support

2019-08-05 Thread Darrell Ball
Thanks for the patch I am going to avoid commenting on style or code conciseness in the interests of time On Thu, Aug 1, 2019 at 3:10 PM Yi-Hung Wei wrote: > This patch first defines the dpif interface for a datapath to support > adding, deleting, getting and dumping conntrack timeout policy.

Re: [ovs-dev] [PATCH v2 1/9] ovs-vswitchd: Add Datapath, CT_Zone, and CT_Zone_Policy tables.

2019-08-05 Thread Darrell Ball
One comment fix: s/ "min": 0, "max": "65535"}},/ "min": 0, "max": "65536"}},/ On Mon, Aug 5, 2019 at 4:09 PM Darrell Ball wrote: > Thanks for the patch > > I avoided duplicate comments from what Justin suggested >

Re: [ovs-dev] [PATCH v2 2/9] ovs-vsctl: Add conntrack zone commands.

2019-08-05 Thread Darrell Ball
Thanks for the patch I noticed '--may-exist' and '--if-exists' are supported now for add--zone-tp/del-zone-tp - thanks The check for duplicate timeout policies now correctly checks all key and values - thanks Some more comments inline I am trying to avoid duplicate comment from Justin, so I just

Re: [ovs-dev] [PATCH v2 1/9] ovs-vswitchd: Add Datapath, CT_Zone, and CT_Zone_Policy tables.

2019-08-05 Thread Darrell Ball
Thanks for the patch I avoided duplicate comments from what Justin suggested comments inline On Thu, Aug 1, 2019 at 3:08 PM Yi-Hung Wei wrote: > From: Justin Pettit > > From: Justin Pettit > > Signed-off-by: Justin Pettit > --- > vswitchd/vswitch.ovsschema | 43 +++- >

RE: Windows Update 1903

2019-08-03 Thread Darrell Bowles via Talk
Press Windows and then type winver and press enter. Thanks, Darrell -Original Message- From: Talk On Behalf Of Carol Smith via Talk Sent: Saturday, August 3, 2019 1:42 PM To: Window-Eyes Discussion List Cc: Carol Smith Subject: Re: Windows Update 1903 This may be a silly question

[ovirt-users] Re: Linux VM keeps crashing on copying files "with lost communication with qemu"

2019-08-02 Thread Darrell Budic
on anything similar. -Darrell > On Aug 2, 2019, at 9:23 AM, kevin.do...@manchester.ac.uk wrote: > > HI > I think it is a bug with qemu, and isci disks. Has anyone else seen this > issue VM crashes and lost communication with qemu Can I update qemu ? if so > what is the late

Re: [ovs-dev] [PATCH 00/12] Support zone-based conntrack timeout policy

2019-07-31 Thread Darrell Ball
On Wed, Jul 31, 2019 at 1:25 AM Ilya Maximets wrote: > On 29.07.2019 21:53, Yi-Hung Wei wrote: > > Hi Ilya, > > > > Thanks for your comment. > > > > On Mon, Jul 29, 2019 at 2:22 AM Ilya Maximets > wrote: > >> > >> Hi everyone, > >> > >> My 2 cents for the feature design: > >> > >> From the

Re: [ovs-dev] [PATCH] OVN: fix DNAT/SNAT system-ovn unit tests

2019-07-30 Thread Darrell Ball
Thanks Lorenzo Looks good I did not retest this patch, but it is the same code you sent before that I had tested On Mon, Jul 29, 2019 at 4:41 AM Lorenzo Bianconi < lorenzo.bianc...@redhat.com> wrote: > Fix conntrack checks in the following tests in tests/system-ovn.at: > - ovn -- DNAT and SNAT

Re: [ovs-dev] [PATCH] test: do not require python2 for CHECK_CONNTRACK macro

2019-07-30 Thread Darrell Ball
On Tue, Jul 30, 2019 at 10:41 AM Mark Michelson wrote: > Why do these macros require python at all? > alg test tools > > On 7/29/19 7:48 AM, Lorenzo Bianconi wrote: > > Do not strictly require python2 for CHECK_CONNTRACK macro definitions in > > system-{kmod,userspace}-macros.at > > > >

Re: [ovs-dev] [PATCH] test: do not require python2 for CHECK_CONNTRACK macro

2019-07-30 Thread Darrell Ball
Thanks Lorenzo Looks good On Mon, Jul 29, 2019 at 4:48 AM Lorenzo Bianconi < lorenzo.bianc...@redhat.com> wrote: > Do not strictly require python2 for CHECK_CONNTRACK macro definitions in > system-{kmod,userspace}-macros.at > > Signed-off-by: Lorenzo Bianconi > --- >

Re: [ovs-dev] [PATCH 05/12] ct-dpif: Add conntrack timeout policy support in dpif layer

2019-07-29 Thread Darrell Ball
On Mon, Jul 29, 2019 at 3:51 PM Yi-Hung Wei wrote: > On Mon, Jul 29, 2019 at 1:12 PM Darrell Ball wrote: > >> > "is_default" - can you explain this one ? > >> > >> This flag is used to configure the default timeout policy in the > >> datapath

Re: [ovs-dev] [PATCH 03/12] ovs-vsctl: Add datapath and CT zone commands.

2019-07-29 Thread Darrell Ball
added one more comment. On Fri, Jul 26, 2019 at 4:10 PM Darrell Ball wrote: > added one more comment for now > > > On Fri, Jul 26, 2019 at 11:13 AM Darrell Ball wrote: > >> Thanks for the patch >> >> Not a full review; just some initial testing >> >&g

Re: [ovs-dev] [PATCH 00/12] Support zone-based conntrack timeout policy

2019-07-29 Thread Darrell Ball
On Mon, Jul 29, 2019 at 11:53 AM Yi-Hung Wei wrote: > Hi Ilya, > > Thanks for your comment. > > On Mon, Jul 29, 2019 at 2:22 AM Ilya Maximets > wrote: > > > > Hi everyone, > > > > My 2 cents for the feature design: > > > > From the user's perspective: > > > > * 'add-dp'/'del-dp' commands looks

Re: [ovs-dev] [PATCH 05/12] ct-dpif: Add conntrack timeout policy support in dpif layer

2019-07-29 Thread Darrell Ball
On Mon, Jul 29, 2019 at 12:37 PM Yi-Hung Wei wrote: > On Fri, Jul 26, 2019 at 11:41 AM Darrell Ball wrote: > > > > Thanks for the patch > > > > I found this patch hard to review since it does not contain > implementations > > The same comment applies to

Re: [ovs-dev] [PATCH 05/12] ct-dpif: Add conntrack timeout policy support in dpif layer

2019-07-29 Thread Darrell Ball
On Fri, Jul 26, 2019 at 11:41 AM Darrell Ball wrote: > Thanks for the patch > > I found this patch hard to review since it does not contain implementations > The same comment applies to Patch 6 > I think Patches 5-7 can be combined into one patch, which will make review > easi

Re: [ovs-dev] [PATCH 08/12] datapath-config: Consume datapath, CT_Zone, and CT_Timeout_Policy tables

2019-07-28 Thread Darrell Ball
One more comment Not a full review; just focusing on the more important parts for now. On Fri, Jul 26, 2019 at 5:44 PM Darrell Ball wrote: > Thanks for the patch; not a full review > > On Thu, Jul 25, 2019 at 4:29 PM Yi-Hung Wei wrote: > >> This patch reads the

Re: [ovs-dev] [PATCH 12/12] system-traffic: Add zone-based conntrack timeout policy test

2019-07-27 Thread Darrell Ball
One more comment inline regarding to the cleanup part On Fri, Jul 26, 2019 at 9:27 AM Darrell Ball wrote: > Thanks for the patch > > Comments inline > > On Thu, Jul 25, 2019 at 4:31 PM Yi-Hung Wei wrote: > >> This patch adds a system traffic test to verify the zone-ba

Re: [ovs-dev] [PATCH 11/12] ofproto-dpif-xlate: Translate timeout policy in ct action

2019-07-27 Thread Darrell Ball
One more comment inline On Thu, Jul 25, 2019 at 10:02 PM Darrell Ball wrote: > Thanks for the patch > > Few comments inline > > On Thu, Jul 25, 2019 at 4:30 PM Yi-Hung Wei wrote: > >> This patch derives the timeout policy based on ct zone from the >> inte

<    1   2   3   4   5   6   7   8   9   10   >