On Thu, Mar 02, 2023 at 01:03:32PM +0100, Lorenzo Bianconi wrote:
> Drop ip packets with ct status set to invalid in post snat and
> lb_aff_learn router stages.
> Skip ICMPv{4,6} error messages packet in ct.inv rules in order to avoid
> to introduce too complicated code.
>
> Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2160685
> Signed-off-by: Lorenzo Bianconi <lorenzo.bianc...@redhat.com>
> ---
> Changes since v1:
> - skip ICMPv{4,6} error messages packet in ct.inv rules
> - this series is based on the following series not yet applied in ovn master:
> https://patchwork.ozlabs.org/project/ovn/list/?series=343841
...
> diff --git a/tests/ovn-northd.at b/tests/ovn-northd.at
> index 230d8ed53..2cbd5d9dd 100644
> --- a/tests/ovn-northd.at
> +++ b/tests/ovn-northd.at
> @@ -3773,7 +3773,6 @@ AT_CHECK([grep "lr_in_dnat" lr0flows | sort], [0], [dnl
> table=8 (lr_in_dnat ), priority=70 , match=(ct.rel && !ct.est &&
> !ct.new && ct_mark.skip_snat == 1), action=(flags.skip_snat_for_lb = 1;
> ct_commit_nat;)
> ])
>
> -
> check ovn-nbctl --wait=sb set logical_router lr0
> options:lb_force_snat_ip="20.0.0.4 aef0::4"
>
> ovn-sbctl dump-flows lr0 > lr0flows
nit: This hunk does not seem to be related to the rest of the series.
_______________________________________________
dev mailing list
d...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
