[ovs-dev] [RFC] ovn: Securing from compromised host - removal of MAC_Binding

We have been working on a series of changes to make ovn-northd the sole writer to the OVN southbound database and turn ovn-controller into a read-only client of this database. One of the changes required is to drop the usage of the MAC_Bindings table. Approaches: 1) Drop the use of the

Re: [ovs-dev] [PATCH ovs V1 1/9] dpif-hw-acc: New dpif provider

On 17 November 2016 at 10:12, Rony Efraim wrote: >> * ufid_to_handle/handle_to_ufid - I'm a little confused by these, UFID >> is supposed to uniquely identify a flow and that's what a handle does >> (at least for a particular device, right?) so at a naive first look I >>

Re: [ovs-dev] [PATCH] datapath: compat: vxlan: Avoid possible NULL dereference in vxlan_gro_receive.

On 13 November 2016 at 21:42, 张东亚 wrote: > Hi, > > Maybe it's caused by I manually copy patch to web gmail, thanks a lot for > merging that. For what it's worth, git-send-email(1) can be configured to use gmail for sending/receiving patches and will make sure that the

[ovs-dev] OVS-DPDK design summit notes

Hi, There was lots of good discussion at the recent OVS-DPDK design summit [1] with 40+ people. Robin and I put together a summary of notes/items that people in the room thought should be worked on, along with some names of people who volunteered. Feel free to correct/add. thanks, Kevin. [1]

Re: [ovs-dev] [PATCH ovs V1 7/9] dpif-hw-acc: operate implementation

On 1 November 2016 at 07:53, Paul Blakey wrote: > added operate implemenation using tc for flow offload, > supporting flow get, flow put, and flow del. > > Signed-off-by: Paul Blakey > Signed-off-by: Shahar Klein > --- >

Re: [ovs-dev] [PATCH] sflow: Expose ethernet and vlan stats via sFlow

I'm wondering if the ethernet stats block is going to mean anything for virtual interfaces. What if we only export it for physical interfaces? That might reduce the overhead significantly. (Maybe your patch already does this - I haven't read it carefully enough to be sure). Neil -- Neil

Re: [ovs-dev] [PATCH ovs V1 1/9] dpif-hw-acc: New dpif provider

> On Monday, November 14, 2016 10:44 PM, Joe Stringer [mailto:j...@ovn.org] > worte: > On 1 November 2016 at 07:53, Paul Blakey wrote: > > Added infrastructure for a new provider that will be able to send > > some flows to supporting HW for offloading. > > > >

[ovs-dev] Fwd: [dpdk-dev] [PATCH 00/22] Generic flow API (rte_flow)

Cross posting [1] to [ovs-dev] as this API would likely form the basis of any hardware offload in the OVS-DPDK datapath and OVS folks may wish to review. I'd recommend reading the links in the cover letter below to understand the motivation and design choices for the API. [1]

Re: [ovs-dev] [PATCH 2/2] rhel: Support ovn-ctl args through env vars.

On Thu, Nov 17, 2016 at 10:46 AM, Simon Horman wrote: > On Thu, Nov 17, 2016 at 08:39:28AM -0500, Russell Bryant wrote: > > Update the systemd units for ovn-controller and ovn-northd to support > > passing additional arguments to the ovn-ctl scripts through

Re: [ovs-dev] [PATCH 0/3] ovs-vswitchd: Port protected mode

On Mon, Nov 14, 2016 at 12:30:37AM +1100, Ben Kelly wrote: > Port protected mode is available in some switching ASICs (b53 etc) and > Cisco also implements this feature. >

Re: [ovs-dev] [PATCH] FAQ: Fix current LTS version

On Mon, Nov 14, 2016 at 03:09:45PM +, O'Reilly, Darragh wrote: > Signed-off-by: Darragh O'Reilly > --- > FAQ.rst | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) Thanks, I applied this to master and backported it to branch-2.5 and branch-2.6.

Re: [ovs-dev] [PATCH] .mailmap: Document file format.

On Thu, Nov 17, 2016 at 08:41:30AM -0500, Russell Bryant wrote: > Note that official file format documentation is in git-shortlog(1), but > provide a simple quick reference for the two types of entries currently > used in this file. > > A third type of entry was used previously, but this commit

Re: [ovs-dev] [PATCH 2/2] rhel: Support ovn-ctl args through env vars.

On Thu, Nov 17, 2016 at 08:39:28AM -0500, Russell Bryant wrote: > Update the systemd units for ovn-controller and ovn-northd to support > passing additional arguments to the ovn-ctl scripts through environment > variables. Also add some documentation to the top of these files that > describes how

Re: [ovs-dev] [PATCH 1/2] ovn-ctl: Fix --ovn-controller-log.

On Thu, Nov 17, 2016 at 08:39:27AM -0500, Russell Bryant wrote: > This option was documented, but didn't actually work because > it wasn't used when starting ovn-controller. > > Signed-off-by: Russell Bryant Acked-by: Simon Horman

Re: [ovs-dev] [PATCH branch-v2.5] ofproto-dpif-xlate: Fix duplicate multicast packets

On Tue, Nov 15, 2016 at 10:32:49AM +, O'Reilly, Darragh wrote: > When iterating the list of mrouters, skip any that are not on the same > vlan as the multicast packet to be forwarded. This bug was causing > duplicate packets when more than one mrouter was behind a trunk port. > > Reported-at:

[ovs-dev] [PATCH] .mailmap: Document file format.

Note that official file format documentation is in git-shortlog(1), but provide a simple quick reference for the two types of entries currently used in this file. A third type of entry was used previously, but this commit simplifies them into one of the two forms documented. Signed-off-by:

Re: [ovs-dev] [PATCH] rhel: Environment file option for northd service

On Thu, Nov 17, 2016 at 6:42 AM, Babu Shanmugam wrote: > > > On Wednesday 16 November 2016 10:07 PM, Russell Bryant wrote: > > > > On Wed, Nov 16, 2016 at 4:02 AM, Babu Shanmugam > wrote: > >> >> >> On Wednesday 16 November 2016 11:45 AM, Babu Shanmugam

[ovs-dev] [PATCH 1/2] ovn-ctl: Fix --ovn-controller-log.

This option was documented, but didn't actually work because it wasn't used when starting ovn-controller. Signed-off-by: Russell Bryant --- ovn/utilities/ovn-ctl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ovn/utilities/ovn-ctl b/ovn/utilities/ovn-ctl