I would try using version 1.11, which allows wildcarding in the kernel. You'll need to upgrade both your userspace and kernel to get the benefit. The benefit will depend on your flow table, but most users should see a substantial increase in flow set up rate.
--Justin On Sep 23, 2013, at 3:57 PM, Andrey Korolyov <[email protected]> wrote: > Hello, > > Recently discovered that one of our clients had started portscanning > using some windows utility, bringing ovs-vswitchd to begin packetdrop > in openflow mode at just 300pps to unique addresses, so 300 > flows/second was created. For regular legitimate TCP vswitchd may > survive about 10kpps and about 1000 flows/second on my tests so this > seems somehow strange. I am using version 1.7 of userspace utilities, > shoud I upgrade to 1.9+? > _______________________________________________ > discuss mailing list > [email protected] > http://openvswitch.org/mailman/listinfo/discuss _______________________________________________ discuss mailing list [email protected] http://openvswitch.org/mailman/listinfo/discuss
