Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-14 Thread Mickey Spiegel
On Sat, Aug 13, 2016 at 10:02 PM, Ben Pfaff wrote: > On Fri, Jul 29, 2016 at 05:28:26PM +, Mickey Spiegel wrote: > > Could you expand on why priorities in a single stage aren't enough to > > satisfy the use case? > > > > > > If two features are configured independently with a

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-13 Thread Ben Pfaff
On Fri, Jul 29, 2016 at 05:28:26PM +, Mickey Spiegel wrote: > Could you expand on why priorities in a single stage aren't enough to > satisfy the use case? > > > If two features are configured independently with a mix of > prioritized allow and drop rules, then with a single stage, a > new

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Darrell Ball
>>>>>> >>>>>>> On Sat, Jul 30, 2016 at 4:19 PM, Mickey Spiegel < >>>>>>> mickeys@gmail.com> >>>>>>> wrote: >>>>>>> >>>>>>> > On Fri, Jul 29, 2016 at 10:28 AM, Mickey Spie

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Mickey Spiegel
: >>>>>> >>>>>> > On Fri, Jul 29, 2016 at 10:28 AM, Mickey Spiegel < >>>>>> emspi...@us.ibm.com> >>>>>> > wrote: >>>>>> > > >>>>>> > > -"dev&q

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Darrell Ball
>>>> > > >>>>> > > -----"dev" <dev-boun...@openvswitch.org> wrote: - >>>>> > >> To: Mickey Spiegel <mickeys@gmail.com> >>>>> > >> From: Russell Bryant >>>>> &g

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Russell Bryant
On Tue, Aug 2, 2016 at 3:35 PM, Guru Shetty wrote: > > > On 2 August 2016 at 12:27, Russell Bryant wrote: > >> >> >> On Tue, Aug 2, 2016 at 3:17 PM, Guru Shetty wrote: >> >>> >>> >>> On 2 August 2016 at 12:01, Russell Bryant wrote:

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Guru Shetty
On 2 August 2016 at 12:27, Russell Bryant wrote: > > > On Tue, Aug 2, 2016 at 3:17 PM, Guru Shetty wrote: > >> >> >> On 2 August 2016 at 12:01, Russell Bryant wrote: >> >>> >>> On Tue, Aug 2, 2016 at 1:29 PM, Guru Shetty wrote: >>>

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Russell Bryant
On Tue, Aug 2, 2016 at 3:17 PM, Guru Shetty wrote: > > > On 2 August 2016 at 12:01, Russell Bryant wrote: > >> >> On Tue, Aug 2, 2016 at 1:29 PM, Guru Shetty wrote: >> >>> The 2 ct_commit for deletion of firewall rules will likely be tricky. >>>

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Guru Shetty
On 2 August 2016 at 12:01, Russell Bryant wrote: > > On Tue, Aug 2, 2016 at 1:29 PM, Guru Shetty wrote: > >> The 2 ct_commit for deletion of firewall rules will likely be tricky. This >> will need unit tests. >> > > I don't think I understand the concern. Can you

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Russell Bryant
29, 2016 at 10:28 AM, Mickey Spiegel <emspi...@us.ibm.com >>>> > >>>> > wrote: >>>> > > >>>> > > -"dev" <dev-boun...@openvswitch.org> wrote: - >>>> > >> To: Mickey Spiegel <mickeys@gmail.com>

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Russell Bryant
On Tue, Aug 2, 2016 at 1:29 PM, Guru Shetty wrote: > The 2 ct_commit for deletion of firewall rules will likely be tricky. This > will need unit tests. > I don't think I understand the concern. Can you expand a bit on what you mean by "2 ct_commit for deletion of firewall rules"?

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Darrell Ball
ot; <dev-boun...@openvswitch.org> wrote: - >>> > >> To: Mickey Spiegel <mickeys....@gmail.com> >>> > >> From: Russell Bryant >>> > >> Sent by: "dev" >>> > >> Date: 07/29/2016 10:02AM >>> > >

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Mickey Spiegel
>> From: Russell Bryant >> > >> Sent by: "dev" >> > >> Date: 07/29/2016 10:02AM >> > >> Cc: ovs dev <dev@openvswitch.org> >> > >> Subject: Re: [ovs-dev] [PATCH] ovn: Add second ACL stage >> > >> >> &g

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Guru Shetty
ot;dev" <dev-boun...@openvswitch.org> wrote: - > >> > >> To: Mickey Spiegel <mickeys....@gmail.com> > >> > >> From: Russell Bryant > >> > >> Sent by: "dev" > >> > >> Date: 07/2

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Darrell Ball
t; > > > -"dev" <dev-boun...@openvswitch.org> wrote: - > > >> To: Mickey Spiegel <mickeys@gmail.com> > > >> From: Russell Bryant > > >> Sent by: "dev" > > >> Date: 07/29/2016 10:02AM > > >

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-08-02 Thread Russell Bryant
iegel <mickeys@gmail.com> > >> From: Russell Bryant > >> Sent by: "dev" > >> Date: 07/29/2016 10:02AM > >> Cc: ovs dev <dev@openvswitch.org> > >> Subject: Re: [ovs-dev] [PATCH] ovn: Add second ACL stage > >> > >&g

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-07-30 Thread Mickey Spiegel
gt;> Date: 07/29/2016 10:02AM >> Cc: ovs dev <dev@openvswitch.org> >> Subject: Re: [ovs-dev] [PATCH] ovn: Add second ACL stage >> >> On Fri, Jul 29, 2016 at 12:47 AM, Mickey Spiegel <mickeys@gmail.com> >> wrote: >> >>> >>> This pa

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-07-29 Thread Mickey Spiegel
-"dev" <dev-boun...@openvswitch.org> wrote: - To: Mickey Spiegel <mickeys@gmail.com> From: Russell Bryant Sent by: "dev" Date: 07/29/2016 10:02AM Cc: ovs dev <dev@openvswitch.org> Subject: Re: [ovs-dev] [PATCH] ovn: Add second ACL stage On

Re: [ovs-dev] [PATCH] ovn: Add second ACL stage

2016-07-29 Thread Russell Bryant
On Fri, Jul 29, 2016 at 12:47 AM, Mickey Spiegel wrote: > > This patch adds a second logical switch ingress ACL stage, and > correspondingly a second logical switch egress ACL stage. This > allows for more than one ACL-based feature to be applied in the > ingress and

[ovs-dev] [PATCH] ovn: Add second ACL stage

2016-07-28 Thread Mickey Spiegel
From: Mickey Spiegel This patch adds a second logical switch ingress ACL stage, and correspondingly a second logical switch egress ACL stage. This allows for more than one ACL-based feature to be applied in the ingress and egress logical switch pipelines. The features