On Tue, Mar 21, 2023 at 01:59:06PM -0400, Mark Michelson wrote:
> Prior to this commit, ACLs were evaluated and acted on in a single
> stage. With this commit, evaluation of ACLs and acting on an ACL's
> decision are separated into two stages.
> 
> The acl_eval stage checks the ACL match and will set a bit to indicate
> the verdict of the ACL. The acl_action stage then checks the relevant
> bits to determine how to proceed. If no ACLs are matched, then the
> default ACL action is taken.
> 
> A couple of notes about updated tests:
> - For test cases where I just had to increment a table number, I changed
>   the check so the table numbers are masked. This should prevent similar
>   changes from being needed later.
> - The port security test changes may seem odd. The issue here is that
>   the ls_out_apply_port_sec table number changed from 9 to 10. This
>   means that this table's flows now sort to a lower position than
>   before. This is why the check had to change for this test.
> 
> Signed-off-by: Mark Michelson <mmich...@redhat.com>

Hi Mark,

this does not appear to apply on top of main any more.
_______________________________________________
dev mailing list
d...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to