This patch series adds vtap mode support for Network Functions in OVN.
Unlike the existing inline mode where traffic is redirected through the
network function, vtap mode mirrors (clones) the traffic matching the
ACL to the network function while allowing the original packet to
continue to its destination unmodified.
Key Differences from Inline Mode:
---------------------------------
- Traffic is mirrored, not redirected
- Only inport is required (no outport needed)
- Original traffic flow is unaffected
- NF health is determined by port binding status (no health check
probes)
- Fallback behaviour is always fail-open for VTAP NFs
Naveen Yerramneni (7):
tests: Stabilize Network function inline packet flow tests.
northd: Always clear ct_state on localnet port egress.
ovn-nb, NEWS, tests: Use correct option name lsp_learn_fdb.
ovn-nb: Network Function vtap mode schema changes.
ovn-nbctl: Network Function vtap mode commands.
controller: Network Function vtap mode physical flow changes.
northd, tests: Network Function vtap mode logical flow changes.
V2:
==
- Rebase on top of main
V3:
==
- Rebase on top of main
- Fix intermittent UT failure
V4:
==
- Rebase on top of main
- Address review comments from Dumitru
- New patches:
- tests: Stabilize Network function inline packet flow tests
- northd: Always clear ct_state on localnet port egress
- ovn-nb, NEWS, tests: Use correct option name lsp_learn_fdb
Documentation/ref/ovn-logical-flows.7.rst | 294 ++++++-----
NEWS | 7 +-
controller/physical.c | 35 +-
northd/northd.c | 431 +++++++++++++---
ovn-nb.ovsschema | 9 +-
ovn-nb.xml | 77 ++-
tests/ovn-macros.at | 5 +
tests/ovn-nbctl.at | 46 +-
tests/ovn-northd.at | 267 +++++++++-
tests/ovn.at | 566 +++++++++++++++-------
tests/system-ovn.at | 285 ++++++++++-
utilities/ovn-nbctl.8.xml | 55 ++-
utilities/ovn-nbctl.c | 72 ++-
13 files changed, 1714 insertions(+), 435 deletions(-)
--
2.43.5
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
