Hi,

<tl;dr> Commit 355fef6f2 seems to break connectivity in my setup</tl;dr>

I am working on an OpenStack deploy with ovs 2.16 and initially thought the
issue was a neutron problem so have been logging bug information here:
https://bugs.launchpad.net/openvswitch/+bug/1964117

It's a fairly standard OpenStack setup with two ovs bridges br-int and
br-tun. Port security is enabled so there are additional openflows rules
against br-int to enforce that. IPv6 is being used.

With ovs 2.15 I can ping and connect to a remote server (using IPv6). After
upgrading
to 2.16 connectivity is lost. A git bisect led me to commit 355fef6f2
so I have created a deb for ovs 2.16 that includes a patch that backs this
commit out and
connectivity is restored. (The deb is in this ppa
https://launchpad.net/~gnuoy/+archive/ubuntu/focal-xena/+packages )

With both 2.15 and 2.16 the flow tables seem to me to be the same (just
changes
of cookie value and minor reordering of rules with the same priority). Using
ofproto/trace seems to show the packet should be permitted in both the
working
and broken setup.

I am no ovs expert but I do notice that the flow rules for br-int include
resubmits and clones which are mentioned in the commit message for
355fef6f2.

These are the flows for both br-int and br-tun:

$ sudo ovs-ofctl dump-flows br-int

    [47/90215]
 cookie=0xb10d352167cfbb61, duration=3203.525s, table=0, n_packets=0,
n_bytes=0, priority=65535,vlan_tci=0x0fff/0x1fff actions=drop

 cookie=0xb10d352167cfbb61, duration=3203.014s, table=0, n_packets=0,
n_bytes=0, priority=5,in_port="int-br-data",dl_dst=fa:16:3f:75:5a:42
actions=resubmit(,4)
 cookie=0xb10d352167cfbb61, duration=3203.013s, table=0, n_packets=0,
n_bytes=0, priority=5,in_port="patch-tun",dl_dst=fa:16:3f:75:5a:42
actions=resubmit(,3)
 cookie=0xb10d352167cfbb61, duration=3203.024s, table=0, n_packets=0,
n_bytes=0, priority=4,in_port="int-br-data",dl_src=fa:16:3f:0c:17:4e
actions=resubmit(,2)
 cookie=0xb10d352167cfbb61, duration=3203.019s, table=0, n_packets=0,
n_bytes=0, priority=2,in_port="patch-tun",dl_src=fa:16:3f:0c:17:4e
actions=resubmit(,1)
 cookie=0xb10d352167cfbb61, duration=3203.010s, table=0, n_packets=0,
n_bytes=0, priority=4,in_port="int-br-data",dl_src=fa:16:3f:92:0b:ef
actions=resubmit(,2)
 cookie=0xb10d352167cfbb61, duration=3203.005s, table=0, n_packets=0,
n_bytes=0, priority=2,in_port="patch-tun",dl_src=fa:16:3f:92:0b:ef
actions=resubmit(,1)
 cookie=0xb10d352167cfbb61, duration=3203.001s, table=0, n_packets=0,
n_bytes=0, priority=4,in_port="int-br-data",dl_src=fa:16:3f:c7:ed:cf
actions=resubmit(,2)
 cookie=0xb10d352167cfbb61, duration=3202.996s, table=0, n_packets=0,
n_bytes=0, priority=2,in_port="patch-tun",dl_src=fa:16:3f:c7:ed:cf
actions=resubmit(,1)
 cookie=0xb10d352167cfbb61, duration=3202.991s, table=0, n_packets=0,
n_bytes=0, priority=4,in_port="int-br-data",dl_src=fa:16:3f:e1:d0:19
actions=resubmit(,2)
 cookie=0xb10d352167cfbb61, duration=3202.986s, table=0, n_packets=0,
n_bytes=0, priority=2,in_port="patch-tun",dl_src=fa:16:3f:e1:d0:19
actions=resubmit(,1)
 cookie=0xb10d352167cfbb61, duration=3203.065s, table=0, n_packets=0,
n_bytes=0, priority=2,in_port="int-br-data" actions=drop

 cookie=0xb10d352167cfbb61, duration=3203.531s, table=0, n_packets=2198,
n_bytes=319080, priority=0 actions=resubmit(,60)

 cookie=0xb10d352167cfbb61, duration=3203.068s, table=1, n_packets=0,
n_bytes=0, priority=1 actions=drop

 cookie=0xb10d352167cfbb61, duration=3203.067s, table=2, n_packets=0,
n_bytes=0, priority=1 actions=drop

 cookie=0xb10d352167cfbb61, duration=3203.070s, table=23, n_packets=0,
n_bytes=0, priority=0 actions=drop

 cookie=0xb10d352167cfbb61, duration=3203.527s, table=24, n_packets=0,
n_bytes=0, priority=0 actions=drop

 cookie=0xb10d352167cfbb61, duration=3197.873s, table=60, n_packets=990,
n_bytes=110840, priority=100,in_port="o-hm0"
actions=load:0x3->NXM_NX_REG5[],load:0x1->NXM_NX_REG6[],resubmit(,71)

 cookie=0xb10d352167cfbb61, duration=3197.873s, table=60, n_packets=1062,
n_bytes=166220, priority=90,dl_vlan=1,dl_dst=fa:16:3e:76:b2:58
actions=load:0x3->NXM_NX_REG5[],load:0x1->NXM_NX_REG6[],strip_vlan,re
submit(,81)


 cookie=0xb10d352167cfbb61, duration=3203.529s, table=60, n_packets=146,
n_bytes=42020, priority=3 actions=NORMAL

 cookie=0xb10d352167cfbb61, duration=3203.523s, table=62, n_packets=0,
n_bytes=0, priority=3 actions=NORMAL

 cookie=0xb10d352167cfbb61, duration=3201.302s, table=71, n_packets=444,
n_bytes=52272, priority=110,ct_state=+trk actions=ct_clear,resubmit(,71)

 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0,
priority=95,icmp6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,icmp_type
=130 actions=resubmit(,94)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0,
priority=95,icmp6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,icmp_type
=133 actions=resubmit(,94)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0,
priority=95,icmp6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,icmp_type
=135 actions=resubmit(,94)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0,
priority=95,icmp6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fe80::f816:3eff:fe76:b258,icmp_type=130
actions
=resubmit(,94)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0,
priority=95,icmp6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fe80::f816:3eff:fe76:b258,icmp_type=133
actions
=resubmit(,94)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=126,
n_bytes=10836,
priority=95,icmp6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fe80::f816:3eff:fe76:b258,icmp_type=135
a
ctions=resubmit(,94)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=132,
n_bytes=10312,
priority=95,icmp6,reg5=0x3,in_port="o-hm0",icmp_type=136,nd_target=fc00:622:627d:e8c:f816:3eff:fe76:b258
actions=resub
mit(,94)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=90,
n_bytes=7020,
priority=95,icmp6,reg5=0x3,in_port="o-hm0",icmp_type=136,nd_target=fe80::f816:3eff:fe76:b258
actions=resubmit(,94)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=50,
n_bytes=17800,
priority=80,udp,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,nw_src=0.0.0.0,tp_src=68,tp_dst=67
actions=resubmit(,
73)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0,
priority=80,udp6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,tp_src=546
,tp_dst=547 actions=resubmit(,73)


 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0,
priority=80,udp6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fe80::f816:3eff:fe76:b258,tp_src=546,tp_dst=547

actions=resubmit(,73)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0, priority=70,udp,reg5=0x3,in_port="o-hm0",tp_src=67,tp_dst=68
actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0, priority=70,udp6,reg5=0x3,in_port="o-hm0",tp_src=547,tp_dst=546
actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0, priority=70,icmp6,reg5=0x3,in_port="o-hm0",icmp_type=134
actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=444,
n_bytes=52272,
priority=65,ipv6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258
acti
ons=ct(table=72,zone=NXM_NX_REG6[0..15])
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=148,
n_bytes=12600,
priority=65,ipv6,reg5=0x3,in_port="o-hm0",dl_src=fa:16:3e:76:b2:58,ipv6_src=fe80::f816:3eff:fe76:b258
actions=ct(table
=72,zone=NXM_NX_REG6[0..15])
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=71, n_packets=0,
n_bytes=0, priority=10,reg5=0x3,in_port="o-hm0"
actions=ct_clear,resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3202.667s, table=71, n_packets=0,
n_bytes=0, priority=0 actions=drop
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=441,
n_bytes=51942, priority=74,ct_state=+est-rel-rpl,ipv6,reg5=0x3
actions=resubmit(,73)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=0,
n_bytes=0, priority=74,ct_state=+est-rel-rpl,ip,reg5=0x3
actions=resubmit(,73)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=3,
n_bytes=330, priority=74,ct_state=+new-est,ipv6,reg5=0x3
actions=resubmit(,73)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=0,
n_bytes=0, priority=74,ct_state=+new-est,ip,reg5=0x3 actions=resubmit(,73)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=148,
n_bytes=12600, priority=50,ct_state=+inv+trk actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=0,
n_bytes=0, priority=50,ct_mark=0x1,reg5=0x3 actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=0,
n_bytes=0, priority=50,ct_state=+est-rel+rpl,ct_zone=1,ct_mark=0,reg5=0x3
actions=resubmit(,94)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=0,
n_bytes=0,
priority=50,ct_state=-new-est+rel-inv,ct_zone=1,ct_mark=0,reg5=0x3
actions=resubmit(,94)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=0,
n_bytes=0, priority=40,ct_state=-est,reg5=0x3 actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=0,
n_bytes=0, priority=40,ct_state=+est,ip,reg5=0x3
actions=ct(commit,zone=NXM_NX_REG6[0..15],exec(load:0x1->NXM_NX_CT_MARK[]))
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=72, n_packets=0,
n_bytes=0, priority=40,ct_state=+est,ipv6,reg5=0x3
actions=ct(commit,zone=NXM_NX_REG6[0..15],exec(load:0x1->NXM_NX_CT_MARK[]))
 cookie=0xb10d352167cfbb61, duration=3202.388s, table=72, n_packets=0,
n_bytes=0, priority=0 actions=drop
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=73, n_packets=0,
n_bytes=0, priority=100,reg6=0x1,dl_dst=fa:16:3e:76:b2:58
actions=load:0x3->NXM_NX_REG5[],resubmit(,81)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=73, n_packets=0,
n_bytes=0, priority=90,ct_state=+new-est,ip,reg5=0x3
actions=ct(commit,zone=NXM_NX_REG6[0..15]),resubmit(,91)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=73, n_packets=3,
n_bytes=330, priority=90,ct_state=+new-est,ipv6,reg5=0x3
actions=ct(commit,zone=NXM_NX_REG6[0..15]),resubmit(,91)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=73, n_packets=491,
n_bytes=69742, priority=80,reg5=0x3 actions=resubmit(,94)
 cookie=0xb10d352167cfbb61, duration=3202.112s, table=73, n_packets=0,
n_bytes=0, priority=0 actions=drop
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=0,
n_bytes=0, priority=100,arp,reg5=0x3 actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=0,
n_bytes=0, priority=100,icmp6,reg5=0x3,icmp_type=130 actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=280,
n_bytes=24080, priority=100,icmp6,reg5=0x3,icmp_type=135
actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=126,
n_bytes=9828, priority=100,icmp6,reg5=0x3,icmp_type=136
actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=0,
n_bytes=0, priority=95,udp,reg5=0x3,tp_src=67,tp_dst=68
actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=0,
n_bytes=0, priority=95,udp6,reg5=0x3,tp_src=547,tp_dst=546
actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=0,
n_bytes=0, priority=90,ct_state=-trk,ip,reg5=0x3
actions=ct(table=82,zone=NXM_NX_REG6[0..15])
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=656,
n_bytes=132312, priority=90,ct_state=-trk,ipv6,reg5=0x3
actions=ct(table=82,zone=NXM_NX_REG6[0..15])
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=81, n_packets=0,
n_bytes=0, priority=80,ct_state=+trk,reg5=0x3 actions=resubmit(,82)
 cookie=0xb10d352167cfbb61, duration=3201.842s, table=81, n_packets=0,
n_bytes=0, priority=0 actions=drop
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0, priority=77,ct_state=+est-rel-rpl,udp6,reg5=0x3,tp_dst=5555
actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=213,
n_bytes=80126, priority=77,ct_state=+new-est,udp6,reg5=0x3,tp_dst=5555
actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:"o-hm0",resu
bmit(,92)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0, priority=75,ct_state=+est-rel-rpl,icmp6,reg5=0x3
actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0, priority=75,ct_state=+new-est,icmp6,reg5=0x3
actions=ct(commit,zone=NXM_NX_REG6[0..15]),output:"o-hm0",resubmit(,92)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0, priority=50,ct_state=+inv+trk actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0, priority=50,ct_mark=0x1,reg5=0x3 actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=443,
n_bytes=52186,
priority=50,ct_state=+est-rel+rpl,ct_zone=1,ct_mark=0,reg5=0x3
actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0,
priority=50,ct_state=-new-est+rel-inv,ct_zone=1,ct_mark=0,reg5=0x3
actions=output:"o-hm0"
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0, priority=40,ct_state=-est,reg5=0x3 actions=resubmit(,93)
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0, priority=40,ct_state=+est,ip,reg5=0x3
actions=ct(commit,zone=NXM_NX_REG6[0..15],exec(load:0x1->NXM_NX_CT_MARK[]))
 cookie=0xb10d352167cfbb61, duration=3197.873s, table=82, n_packets=0,
n_bytes=0, priority=40,ct_state=+est,ipv6,reg5=0x3
actions=ct(commit,zone=NXM_NX_REG6[0..15],exec(load:0x1->NXM_NX_CT_MARK[]))
 cookie=0xb10d352167cfbb61, duration=3201.581s, table=82, n_packets=0,
n_bytes=0, priority=0 actions=drop
 cookie=0xb10d352167cfbb61, duration=3200.767s, table=91, n_packets=3,
n_bytes=330, priority=1 actions=resubmit(,94)
 cookie=0xb10d352167cfbb61, duration=3200.486s, table=92, n_packets=213,
n_bytes=80126, priority=0 actions=drop
 cookie=0xb10d352167cfbb61, duration=3200.201s, table=93, n_packets=148,
n_bytes=12600, priority=0 actions=drop
 cookie=0xb10d352167cfbb61, duration=3201.034s, table=94, n_packets=842,
n_bytes=98240, priority=1 actions=NORMAL


$ sudo ovs-ofctl dump-flows br-tun
 cookie=0xb9492681bd7477d2, duration=3284.564s, table=0, n_packets=934,
n_bytes=108974, priority=1,in_port="patch-int" actions=resubmit(,1)
 cookie=0xb9492681bd7477d2, duration=3278.661s, table=0, n_packets=2520,
n_bytes=240838, priority=1,in_port="gre-ac140036" actions=resubmit(,3)
 cookie=0xb9492681bd7477d2, duration=3278.632s, table=0, n_packets=51,
n_bytes=18156, priority=1,in_port="gre-ac14009b" actions=resubmit(,3)
 cookie=0xb9492681bd7477d2, duration=3278.598s, table=0, n_packets=51,
n_bytes=18156, priority=1,in_port="gre-ac140098" actions=resubmit(,3)
 cookie=0xb9492681bd7477d2, duration=3278.576s, table=0, n_packets=0,
n_bytes=0, priority=1,in_port="gre-ac1400d5" actions=resubmit(,3)
 cookie=0xb9492681bd7477d2, duration=3284.943s, table=0, n_packets=8,
n_bytes=782, priority=0 actions=drop
 cookie=0xb9492681bd7477d2, duration=3284.561s, table=1, n_packets=934,
n_bytes=108974, priority=0 actions=resubmit(,2)
 cookie=0xb9492681bd7477d2, duration=3284.941s, table=2, n_packets=0,
n_bytes=0, priority=1,arp,dl_dst=ff:ff:ff:ff:ff:ff actions=resubmit(,21)
 cookie=0xb9492681bd7477d2, duration=3284.939s, table=2, n_packets=883,
n_bytes=90818, priority=0,dl_dst=00:00:00:00:00:00/01:00:00:00:00:00
actions=resubmit(,20)
 cookie=0xb9492681bd7477d2, duration=3284.937s, table=2, n_packets=51,
n_bytes=18156, priority=0,dl_dst=01:00:00:00:00:00/01:00:00:00:00:00
actions=resubmit(,22)
 cookie=0xb9492681bd7477d2, duration=3279.730s, table=3, n_packets=1312,
n_bytes=222130, priority=1,tun_id=0x2c1 actions=mod_vlan_vid:1,resubmit(,9)
 cookie=0xb9492681bd7477d2, duration=3284.936s, table=3, n_packets=1310,
n_bytes=55020, priority=0 actions=drop
 cookie=0xb9492681bd7477d2, duration=3284.934s, table=4, n_packets=0,
n_bytes=0, priority=0 actions=drop
 cookie=0xb9492681bd7477d2, duration=3284.933s, table=6, n_packets=0,
n_bytes=0, priority=0 actions=drop
 cookie=0xb9492681bd7477d2, duration=3284.517s, table=9, n_packets=0,
n_bytes=0, priority=1,dl_src=fa:16:3f:0c:17:4e actions=output:"patch-int"
 cookie=0xb9492681bd7477d2, duration=3284.504s, table=9, n_packets=0,
n_bytes=0, priority=1,dl_src=fa:16:3f:92:0b:ef actions=output:"patch-int"
 cookie=0xb9492681bd7477d2, duration=3284.494s, table=9, n_packets=0,
n_bytes=0, priority=1,dl_src=fa:16:3f:c7:ed:cf actions=output:"patch-int"
 cookie=0xb9492681bd7477d2, duration=3284.484s, table=9, n_packets=0,
n_bytes=0, priority=1,dl_src=fa:16:3f:e1:d0:19 actions=output:"patch-int"
 cookie=0xb9492681bd7477d2, duration=3284.562s, table=9, n_packets=1312,
n_bytes=222130, priority=0 actions=resubmit(,10)
 cookie=0xb9492681bd7477d2, duration=3284.931s, table=10, n_packets=1312,
n_bytes=222130, priority=1
actions=learn(table=20,hard_timeout=300,priority=1,cookie=0xb9492681bd7477d2,NXM_OF_VLAN_TCI[0..11],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],load:0->NXM_OF_VLAN_TCI[],load:NXM_NX_TUN_ID[]->NXM_NX_TUN_ID[],output:OXM_OF_IN_PORT[]),output:"patch-int"
 cookie=0xb9492681bd7477d2, duration=3278.649s, table=20, n_packets=705,
n_bytes=76454, priority=2,dl_vlan=1,dl_dst=fa:16:3e:0e:46:59
actions=strip_vlan,load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140036"
 cookie=0xb9492681bd7477d2, duration=3278.645s, table=20, n_packets=178,
n_bytes=14364, priority=2,dl_vlan=1,dl_dst=fa:16:3e:94:66:0c
actions=strip_vlan,load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140036"
 cookie=0xb9492681bd7477d2, duration=3278.640s, table=20, n_packets=0,
n_bytes=0, priority=2,dl_vlan=1,dl_dst=fa:16:3e:b5:c4:91
actions=strip_vlan,load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140036"
 cookie=0xb9492681bd7477d2, duration=3278.608s, table=20, n_packets=0,
n_bytes=0, priority=2,dl_vlan=1,dl_dst=fa:16:3e:67:9f:39
actions=strip_vlan,load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac14009b"
 cookie=0xb9492681bd7477d2, duration=3278.584s, table=20, n_packets=0,
n_bytes=0, priority=2,dl_vlan=1,dl_dst=fa:16:3e:7b:cf:a8
actions=strip_vlan,load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140098"
 cookie=0xb9492681bd7477d2, duration=3278.568s, table=20, n_packets=0,
n_bytes=0, priority=2,dl_vlan=1,dl_dst=fa:16:3e:cb:fb:84
actions=strip_vlan,load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac1400d5"
 cookie=0xb9492681bd7477d2, duration=3275.205s, table=20, n_packets=0,
n_bytes=0, hard_timeout=300,
priority=1,vlan_tci=0x0001/0x0fff,dl_dst=fa:16:3e:94:66:0c
actions=load:0->NXM_OF_VLAN_TCI[],load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140036"
 cookie=0xb9492681bd7477d2, duration=3258.380s, table=20, n_packets=0,
n_bytes=0, hard_timeout=300,
priority=1,vlan_tci=0x0001/0x0fff,dl_dst=fa:16:3e:7b:cf:a8
actions=load:0->NXM_OF_VLAN_TCI[],load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140098"
 cookie=0xb9492681bd7477d2, duration=3252.836s, table=20, n_packets=0,
n_bytes=0, hard_timeout=300,
priority=1,vlan_tci=0x0001/0x0fff,dl_dst=fa:16:3e:0e:46:59
actions=load:0->NXM_OF_VLAN_TCI[],load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140036"
 cookie=0xb9492681bd7477d2, duration=3218.392s, table=20, n_packets=0,
n_bytes=0, hard_timeout=300,
priority=1,vlan_tci=0x0001/0x0fff,dl_dst=fa:16:3e:67:9f:39
actions=load:0->NXM_OF_VLAN_TCI[],load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac14009b"
 cookie=0xb9492681bd7477d2, duration=3193.485s, table=20, n_packets=0,
n_bytes=0, hard_timeout=300,
priority=1,vlan_tci=0x0001/0x0fff,dl_dst=fa:16:3e:b5:c4:91
actions=load:0->NXM_OF_VLAN_TCI[],load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140036"
 cookie=0xb9492681bd7477d2, duration=3284.928s, table=20, n_packets=0,
n_bytes=0, priority=0 actions=resubmit(,22)
 cookie=0xb9492681bd7477d2, duration=3284.926s, table=21, n_packets=0,
n_bytes=0, priority=0 actions=resubmit(,22)
 cookie=0xb9492681bd7477d2, duration=3278.572s, table=22, n_packets=51,
n_bytes=18156, priority=1,dl_vlan=1
actions=strip_vlan,load:0x2c1->NXM_NX_TUN_ID[],output:"gre-ac140098",output:"gre-ac140036",output:"gre-ac1400d5",output:"gre-ac14009b"
 cookie=0xb9492681bd7477d2, duration=3284.924s, table=22, n_packets=0,
n_bytes=0, priority=0 actions=drop

This is a trace of a ping packet through the br-int flows:

sudo ovs-appctl ofproto/trace br-int in_port="o-hm0"
fa163e0e4659fa163e76b25886dd6005a07800403a40fc000622627d0e8cf8163efffe76b258fc000622627d0e8cf8163efffe0e465980
0011da0002002197442b6200000000a151010000000000101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f3031323334353637
Flow:
icmp6,in_port=3,vlan_tci=0x0000,dl_src=fa:16:3e:76:b2:58,dl_dst=fa:16:3e:0e:46:59,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,ipv6_dst=fc00:622:627d:e8c:f816:3eff:fe0e:4659,ipv6_label=0x5a078,nw_to
s=0,nw_ecn=0,nw_ttl=64,icmp_type=128,icmp_code=0


bridge("br-int")
----------------
 0. priority 0, cookie 0xb10d352167cfbb61
    goto_table:60
60. in_port=3, priority 100, cookie 0xb10d352167cfbb61
    set_field:0x3->reg5
    set_field:0x1->reg6
    resubmit(,71)
71.
ipv6,reg5=0x3,in_port=3,dl_src=fa:16:3e:76:b2:58,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,
priority 65, cookie 0xb10d352167cfbb61
    ct(table=72,zone=NXM_NX_REG6[0..15])
    drop

     -> A clone of the packet is forked to recirculate. The forked pipeline
will be resumed at table 72.
     -> Sets the packet to an untracked state, and clears all the conntrack
fields.

Final flow:
icmp6,reg5=0x3,reg6=0x1,in_port=3,vlan_tci=0x0000,dl_src=fa:16:3e:76:b2:58,dl_dst=fa:16:3e:0e:46:59,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,ipv6_dst=fc00:622:627d:e8c:f816:3eff:fe0e:4659,
ipv6_label=0x5a078,nw_tos=0,nw_ecn=0,nw_ttl=64,icmp_type=128,icmp_code=0
Megaflow:
recirc_id=0,ct_state=-trk,eth,icmp6,in_port=3,dl_src=fa:16:3e:76:b2:58,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,nw_frag=no,icmp_type=0x80/0xfe,nd_target=::
                                  Datapath actions: ct(zone=1),recirc(0x84)




===============================================================================


recirc(0x84) - resume conntrack with default ct_state=trk|new (use
--ct-next to customize)
===============================================================================

Flow:
recirc_id=0x84,ct_state=new|trk,ct_zone=1,eth,icmp6,reg5=0x3,reg6=0x1,in_port=3,vlan_tci=0x0000,dl_src=fa:16:3e:76:b2:58,dl_dst=fa:16:3e:0e:46:59,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,ipv6_ds
t=fc00:622:627d:e8c:f816:3eff:fe0e:4659,ipv6_label=0x5a078,nw_tos=0,nw_ecn=0,nw_ttl=64,icmp_type=128,icmp_code=0

bridge("br-int")
----------------
    thaw
        Resuming from table 72
72. ct_state=+new-est,ipv6,reg5=0x3, priority 74, cookie 0xb10d352167cfbb61
    resubmit(,73)
73. ct_state=+new-est,ipv6,reg5=0x3, priority 90, cookie 0xb10d352167cfbb61
    ct(commit,zone=NXM_NX_REG6[0..15])
    drop
     -> Sets the packet to an untracked state, and clears all the conntrack
fields.
    resubmit(,91)
91. priority 1, cookie 0xb10d352167cfbb61
    resubmit(,94)
94. priority 1, cookie 0xb10d352167cfbb61
    NORMAL
     -> no learned MAC for destination, flooding

    bridge("br-data")
    -----------------
         0. in_port=1, priority 2, cookie 0x492cbb097156b413
            goto_table:1
         1. priority 0, cookie 0x492cbb097156b413
            goto_table:2
         2. in_port=1, priority 2, cookie 0x492cbb097156b413
            drop

bridge("br-tun")
----------------
 0. in_port=1, priority 1, cookie 0xb9492681bd7477d2
    goto_table:1
 1. priority 0, cookie 0xb9492681bd7477d2
    goto_table:2
 2. dl_dst=00:00:00:00:00:00/01:00:00:00:00:00, priority 0, cookie
0xb9492681bd7477d2
    goto_table:20
20. dl_vlan=1,dl_dst=fa:16:3e:0e:46:59, priority 2, cookie
0xb9492681bd7477d2
    pop_vlan
    set_field:0x2c1->tun_id
    output:3
     -> output to kernel tunnel

Final flow:
recirc_id=0x84,eth,icmp6,reg5=0x3,reg6=0x1,in_port=3,vlan_tci=0x0000,dl_src=fa:16:3e:76:b2:58,dl_dst=fa:16:3e:0e:46:59,ipv6_src=fc00:622:627d:e8c:f816:3eff:fe76:b258,ipv6_dst=fc00:622:627d:e8c:f
816:3eff:fe0e:4659,ipv6_label=0x5a078,nw_tos=0,nw_ecn=0,nw_ttl=64,icmp_type=128,icmp_code=0
Megaflow:
pkt_mark=0,recirc_id=0x84,ct_state=+new-est-rel-rpl,eth,ipv6,in_port=3,dl_src=fa:16:3e:76:b2:58,dl_dst=fa:16:3e:0e:46:59,nw_ecn=0,nw_frag=no
Datapath actions:
ct(commit,zone=1),set(tunnel(tun_id=0x2c1,src=172.20.0.247,dst=172.20.0.54,ttl=64,flags(df|key))),6,push_vlan(vid=1,pcp=0),1

Thanks
Liam
_______________________________________________
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Reply via email to