[ovs-dev] [vn-nbctl]:The range of "PRIORITY" for "ovn-nbctl acl-add " command is wrong.

From e3171edd7f4e06de0fa7f900c223969b46653c9d Fri Dec 23 15:19:00 2016 From: zhaojingjing Date: Fri Dec 23 15:26:28 2016 +0800 Subject: [PATCH] datapath:ovn/utilities/ovn-nbctl.8.xml b/ovn/utilities/ovn-nbctl.8.xml： ovn-nbctl:The range of "PRIORITY" for

[ovs-dev] 答复: ovn-nbctl: Not Specify the type of Logical switch port.

>From 812f44a9cb6862f3b487e23154a9e114040c40a2 Mon Dec 12 10:42:00 2016 From: zhaojingjing Date: Mon Dec 12 10:48:33 2016 +0800 Subject: [PATCH] datapath:ovn/utilities/ovn-nbctl.8.xml b/ovn/utilities/ovn-nbctl.8.xml,

[ovs-dev] [PATCH v2 2/2] ofproto-dpif-xlate: optimize 100% sampling

For 100% sampling, no need to use sample action. Just use userspace action for optimizing. Signed-off-by: Benli Ye --- ofproto/ofproto-dpif-xlate.c | 26 +- tests/ofproto-dpif.at| 10 +- 2 files changed, 22 insertions(+), 14

[ovs-dev] [PATCH] ovn: Support ARP proxy in logical switches.

This patch support "arp_proxy" option for logical switch ports. If a lsp with arp_proxy=true, all the arp request to known ipv4 addresses on the ls will be responded with the arp proxy lsp's MAC address, except when the arp request come from the arp proxy lsp itself. Signed-off-by: Han Zhou

Re: [ovs-dev] [PATCH v2 2/3] conntrack: Return NEW for IPv6 ND packets without tracking.

Some comments inline On 12/22/16, 6:36 PM, "Daniele Di Proietto" wrote: The userspace connection tracker treats Neighbor Discovery packets as invalid, because they're not checked against any connection. This in inconsistent with the kernel connection

Re: [ovs-dev] [PATCH v2 3/3] conntrack: Use 'maybe_related' insted of 'related'.

On 12/22/16, 6:36 PM, "Daniele Di Proietto" wrote: This is just a naming change. When we extract the key of an ICMP error message we suspect that it might be related, but we're not sure until we perform a lookup in the connection table.

Re: [ovs-dev] [PATCH v3 2/3] netdev-dpdk: Arbitrary 'dpdk' port naming

2016-12-22 3:05 GMT-08:00 Kevin Traynor : > On 12/22/2016 10:02 AM, Kevin Traynor wrote: >> On 12/21/2016 07:35 PM, Daniele Di Proietto wrote: >>> 2016-12-21 10:18 GMT-08:00 Kevin Traynor : On 12/21/2016 03:02 AM, Daniele Di Proietto wrote: >

[ovs-dev] [PATCH v2 3/3] conntrack: Use 'maybe_related' insted of 'related'.

This is just a naming change. When we extract the key of an ICMP error message we suspect that it might be related, but we're not sure until we perform a lookup in the connection table. Suggested-by: Darrell Ball Signed-off-by: Daniele Di Proietto ---

[ovs-dev] [PATCH v2 2/3] conntrack: Return NEW for IPv6 ND packets without tracking.

The userspace connection tracker treats Neighbor Discovery packets as invalid, because they're not checked against any connection. This in inconsistent with the kernel connection tracker which always returns 'CS_NEW'. Therefore, this commit makes the userspace connection tracker conforming with

[ovs-dev] [PATCH v2 1/3] conntrack: Do not create new connections from ICMP errors.

ICMP error packets (e.g. destination unreachable messages) are considered 'related' to another connection and are treated as part of that. However: * We shouldn't create new entries in the connection table if the original connection is not found. This is consistent with what the kernel

Re: [ovs-dev] [PATCH v2] odp-execute: Optimize IP header modification in OVS datapath

2016-12-22 2:05 GMT-08:00 Zoltán Balogh : > Hi Daniele, > > Thank you for the confirmation. I've used Ivy Bridge Xeon E5-2658 v2 running > at 3GHz. This is an older architecture than yours. Your results look better > for the new patch. I think we should take the new

Re: [ovs-dev] [PATCH 1/2] conntrack: Do not create new connections from ICMP errors.

I tested an alternative diff for conntrack.c part below In summary: 1) I think the outermost selection should be based on the “conn” check in process_one. This is the main decision point. This is also makes it easier to modify going forward. The change boils down to a check in “conn is not

Re: [ovs-dev] [PATCH] table: correct documented default format in man pages

On Thu, Dec 22, 2016 at 02:45:50PM -0500, Lance Richardson wrote: > There are currently five users of the table formatting library, > all of which default to "list" except for ovsdb-client which > defaults to "table". The library current default is "table", > and the table.man man page fragment

Re: [ovs-dev] [PATCH v5] ovn-ctl: add support for SSL nb/sb db connections

I see that Numan acked this. Russell, are you satisfied? Thanks, Ben. On Thu, Dec 22, 2016 at 01:54:44PM -0500, Lance Richardson wrote: > Add support for SSL connections to OVN northbound and/or > southbound databases. > > To improve security, the NB and SB ovsdb daemons no longer > have open

Re: [ovs-dev] [PATCH] docs: Add FAQ to the main page.

On Thu, Dec 22, 2016 at 07:26:50PM +, Stephen Finucane wrote: > On Thu, 2016-12-22 at 11:24 -0800, Joe Stringer wrote: > > Signed-off-by: Joe Stringer > > /me tries to recall whether OVS uses Acked-by or Reviewed-by... > > Acked-by: Stephen Finucane I use

Re: [ovs-dev] [PATCH v7] netdev-dpdk: Enable Rx checksum offloading feature on DPDK physical ports.

On Fri, Dec 16, 2016 at 4:03 PM, Chandran, Sugesh wrote: > > > Regards > _Sugesh > >> -Original Message- >> From: Pravin Shelar [mailto:pshe...@ovn.org] >> Sent: Friday, December 16, 2016 7:50 AM >> To: Chandran, Sugesh >> Cc: ovs dev

Re: [ovs-dev] [PATCH] docs: Add FAQ to the main page.

On Thu, 2016-12-22 at 11:24 -0800, Joe Stringer wrote: > Signed-off-by: Joe Stringer /me tries to recall whether OVS uses Acked-by or Reviewed-by... Acked-by: Stephen Finucane > --- >  Documentation/index.rst | 2 ++ >  1 file changed, 2 insertions(+) > > diff

[ovs-dev] Ventas - Tipo de Clientes, Nichos y Territorios

12 conferencias pregrabadas / Durante 3 meses Póliza indispensable para los responsables de Ventas 12 conferencias en cada póliza, pregrabadas, inéditas, para capacitar a todo su personal Al adquirir la Póliza de Capacitación, usted obtiene acceso a 12 temas enfocados al área de

[ovs-dev] [PATCH] atlocal: Fix findcommand function style.

Signed-off-by: Joe Stringer --- tests/atlocal.in | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/atlocal.in b/tests/atlocal.in index 1353b46fd1ef..5b151c3d84c3 100644 --- a/tests/atlocal.in +++ b/tests/atlocal.in @@ -126,7 +126,7 @@ fi # Look for a

Re: [ovs-dev] [PATCH v2 1/6] doc: Add info on building documentation

Thanks! I applied all of these to master. ___ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Re: [ovs-dev] [PATCH 1/2] conntrack: Do not create new connections from ICMP errors.

I am reviewing this. Thanks Darrell On 12/22/16, 9:38 AM, "ovs-dev-boun...@openvswitch.org on behalf of Ben Pfaff" wrote: Who is the right person to review this? Darrell, are you planning to review it? Thanks,

Re: [ovs-dev] [PATCH v4] ovn-ctl: add support for SSL nb/sb db connections

On Thu, Dec 22, 2016 at 11:32 PM, Ben Pfaff wrote: > Russell and Numan, are you happy with this? > > ​I am happy with this. Thanks Numan ​ > In the manpage, I see that some command-line options are shown with == > instead of =; please fix. > > Acked-by: Ben Pfaff

Re: [ovs-dev] [PATCH v4] ovn-ctl: add support for SSL nb/sb db connections

Russell and Numan, are you happy with this? In the manpage, I see that some command-line options are shown with == instead of =; please fix. Acked-by: Ben Pfaff On Thu, Dec 22, 2016 at 11:34:46AM -0500, Lance Richardson wrote: > Add support for SSL connections to OVN northbound

[ovs-dev] [PATCH v3 3/3] ofproto-dpif: Make ofproto/trace output easier to read.

"ovs-appctl ofproto/trace" is invaluable for debugging, but as the users of Open vSwitch have evolved it has failed to keep up with the times. It's pretty easy to design OpenFlow tables and pipelines that resubmit dozens of times. Each resubmit causes an additional tab of indentation, so the

[ovs-dev] [PATCH v3 2/3] ofproto-dpif: Break trace functionality into a separate source file.

An upcoming commit will rewrite much of the ofproto/trace functionality. As the mechanism behind this grows and evolves, it makes sense to move it into its own file, especially since ofproto-dpif.c is too big anyway. Signed-off-by: Ben Pfaff Acked-by: Lance Richardson

[ovs-dev] [PATCH v3 1/3] ofproto-dpif: Unhide structure contents.

Until now, ofproto-dpif.c has hidden the definitions of several structures, such as struct ofproto_dpif and struct rule_dpif. This kind of information hiding is often beneficial, because it forces code outside the file with the definition to use the documented interfaces. However, in this case

[ovs-dev] [PATCH v3 0/3] make ofproto/trace output easier to read

This series seeks to make the output of ofproto/trace easier to read, especially in complicated situations. v1->v2: - Patch 4 extended and revised to make it suitable for review and no longer RFC. v2->v3: - Patch 1 from v2 was applied to master, so it has been dropped. - Rebased

Re: [ovs-dev] [PATCH v3] ovn-ctl: add support for SSL nb/sb db connections

On Thu, Dec 22, 2016 at 08:07:02AM -0500, Lance Richardson wrote: > > From: "Lance Richardson" > > To: "Ben Pfaff" , nusid...@redhat.com, "Russell Bryant" > > > > Cc: d...@openvswitch.org > > Sent: Thursday, December 22, 2016 7:51:16 AM > >

Re: [ovs-dev] [PATCH 5/5] lib: Add support for tftp ct helper.

On 21 December 2016 at 17:06, Daniele Di Proietto wrote: > 2016-12-20 13:28 GMT-08:00 Joe Stringer : >> The kernel datapath provides support for TFTP helpers, so add support >> for this ALG to the commandline and OpenFlow encoding/decoding. >> >> Signed-off-by:

Re: [ovs-dev] [PATCH 1/2] conntrack: Do not create new connections from ICMP errors.

Who is the right person to review this? Darrell, are you planning to review it? Thanks, Ben. On Tue, Dec 20, 2016 at 12:25:06PM -0800, Daniele Di Proietto wrote: > ICMP error packets (e.g. destination unreachable messages) are > considered 'related' to another connection and are treated as

Re: [ovs-dev] [PATCH 2/3] ovsdb-idl: Properly handle conditional monitor update error

On Tue, Dec 20, 2016 at 01:47:16AM -0800, Andy Zhou wrote: > From: andy zhou > > When generating conditional monitoring update request, current code > failed to update idl's 'request-id'. This bug causes the reply > message of the update request, regardless an ACK or a NACK, be >

Re: [ovs-dev] [PATCH v1 2/2] ofproto-dpif-xlate: optimize 100% sampling

On Thu, Dec 15, 2016 at 08:41:30PM -0800, Benli Ye wrote: > For 100% sampling, no need to use sample action. Just use > userspace action for optimizing. This seems reasonable, thank you. Can you repost this with a Signed-off-by? ___ dev mailing list

Re: [ovs-dev] [PATCH 1/3] ovsdb-idl: Avoid sending redundant conditional monitoring updates

On Tue, Dec 20, 2016 at 01:47:15AM -0800, Andy Zhou wrote: > In case connection is reset when there are buffered but unsent > conditions, these conditions will be sent as the new "monitor_cond" > message that will be sent after the idl reconnects. > > Without this patch, those conditions will be

Re: [ovs-dev] [PATCH v1 1/2] sflow: restrict sampling from 1 to UINT32_MAX

On Thu, Dec 15, 2016 at 08:41:29PM -0800, Benli Ye wrote: > When sampling field is 0, no need to generate sample or > the inner action. Thanks for the patch. The change to compose_sample_action() makes sense to me. I don't think that we should change the database schema because the benefit of

[ovs-dev] AM CONFIDING IN YOU.

Dear Friend, I am Mrs Vera Ouedrago,I work as a Business Relationship Manager with one of the banks in Ouagadougou Burkina Faso. I am contacting you with regards to a discreet and lucrative sensitive business venture available to my knowledge by virtue of my position in the Bank as a head

Re: [ovs-dev] [PATCH] route-table: Stop netlink log message when routes withdrawn

On Wed, Dec 14, 2016 at 03:31:02PM +1300, Tony van der Peet wrote: > When a route is withdrawn (blackholed) the netlink message doesn't include > an RTA_OIF element. This results in an "unexpected netlink message > contents" log message because this element is not optional. > > Given that the

Re: [ovs-dev] [ovs]Specify the range of the tag for "ovn-nbctl lsp-add" command

On Wed, Dec 14, 2016 at 09:29:13AM +0800, zhou.huij...@zte.com.cn wrote: > commit 6e3a951654756f4dbd2b853980b710df66763a56 > Author: zhaojingjing > Date: Wed Dec 14 09:19:20 2016 +0800 > > Specify the range of the tag for "ovn-nbctl lsp-add" command Hi, thanks

Re: [ovs-dev] [PATCH v3] ovn-ctl: add support for SSL nb/sb db connections

> From: "Lance Richardson" > To: "Ben Pfaff" , nusid...@redhat.com, "Russell Bryant" > > Cc: d...@openvswitch.org > Sent: Thursday, December 22, 2016 7:51:16 AM > Subject: Re: [PATCH v3] ovn-ctl: add support for SSL nb/sb db connections > > >

Re: [ovs-dev] [PATCH v3] ovn-ctl: add support for SSL nb/sb db connections

> From: "Ben Pfaff" > To: "Lance Richardson" > Cc: d...@openvswitch.org, nusid...@redhat.com > Sent: Thursday, December 22, 2016 12:04:05 AM > Subject: Re: [PATCH v3] ovn-ctl: add support for SSL nb/sb db connections > > On Wed, Dec 21, 2016 at 06:35:43PM

Re: [ovs-dev] [PATCH v3 2/3] netdev-dpdk: Arbitrary 'dpdk' port naming

On 12/22/2016 10:02 AM, Kevin Traynor wrote: > On 12/21/2016 07:35 PM, Daniele Di Proietto wrote: >> 2016-12-21 10:18 GMT-08:00 Kevin Traynor : >>> On 12/21/2016 03:02 AM, Daniele Di Proietto wrote: 2016-12-20 14:08 GMT-08:00 Kevin Traynor : > On

[ovs-dev] [RFC v4 5/5] ovn: distributed NAT flows

This patch implements the flows required in the ingress and egress pipeline stages in order to support NAT on a distributed logical router. NAT functionality is associated with the logical router gateway port. The flows that carry out NAT functionality all have match conditions on inport or

[ovs-dev] [RFC v4 4/5] ovn: avoid snat recirc only on gateway routers

Currently, for performance reasons on gateway routers, ct_snat that does not specify an IP address does not immediately trigger recirculation. On gateway routers, ct_snat that does not specify an IP address happens in the UNSNAT pipeline stage, which is followed by the DNAT pipeline stage that

[ovs-dev] [RFC v4 3/5] ovn: move load balancing flows after NAT flows

This will make it easy for distributed NAT to reuse some of the existing code for NAT flows, while leaving load balancing and defrag as functionality specific to gateway routers. There is no intent to change any functionality in this patch. Signed-off-by: Mickey Spiegel

[ovs-dev] [RFC v4 2/5] ovn: Introduce "chassisredirect" port binding

Currently OVN handles all logical router ports in a distributed manner, creating instances on each chassis. The logical router ingress and egress pipelines are traversed locally on the source chassis. In order to support advanced features such as one-to-many NAT (aka IP masquerading), where

[ovs-dev] [RFC v4 1/5] ovn: add is_chassis_resident match expression component

This patch introduces a new match expression component is_chassis_resident(). Unlike match expression comparisons, is_chassis_resident is not pushed down to OpenFlow. It is a conditional that is evaluated in the controller during expr_simplify(), when it is replaced by a boolean expression. The

Re: [ovs-dev] Sync on PTAP, EXT-382 and NSH

Thanks for the good meeting. Here are my notes: Date: 2016-12-21, 17-18:30 CET Participants: Jarno R, Ben P, Ben M-C, Jiri B, Simon H, Zoltan B, Jan S Summary: * Discussed making PTAP, EXT-382 and NSH available as extensions to OF 1.3. o No big deal for the match fields and the

Re: [ovs-dev] [PATCH v2] odp-execute: Optimize IP header modification in OVS datapath

Hi Daniele, Thank you for the confirmation. I've used Ivy Bridge Xeon E5-2658 v2 running at 3GHz. This is an older architecture than yours. Your results look better for the new patch. I think we should take the new patch. Best regards, Zoltan -Original Message- From: Daniele Di

Re: [ovs-dev] [PATCH v3 2/3] netdev-dpdk: Arbitrary 'dpdk' port naming

On 12/21/2016 07:35 PM, Daniele Di Proietto wrote: > 2016-12-21 10:18 GMT-08:00 Kevin Traynor : >> On 12/21/2016 03:02 AM, Daniele Di Proietto wrote: >>> 2016-12-20 14:08 GMT-08:00 Kevin Traynor : On 12/15/2016 11:54 AM, Ciara Loftus wrote: >

[ovs-dev] [PATCH v2 2/6] doc: Misc fixes to 'bash-completion'

Fix some minor formatting issues with this document. Signed-off-by: Stephen Finucane --- Documentation/intro/install/bash-completion.rst | 27 ++--- 1 file changed, 11 insertions(+), 16 deletions(-) diff --git

[ovs-dev] [PATCH v2 5/6] doc: Recommend compressed PNG images where possible

ASCII images take up less space but are significantly less readable than proper images. Signed-off-by: Stephen Finucane --- .../internals/contributing/documentation-style.rst| 15 --- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git

[ovs-dev] [PATCH v2 3/6] doc: Document various language bindings

Signed-off-by: Stephen Finucane --- Documentation/automake.mk | 1 + Documentation/index.rst| 4 +- Documentation/topics/index.rst | 1 + Documentation/topics/language-bindings.rst | 60 ++ 4 files

[ovs-dev] [PATCH v2 1/6] doc: Add info on building documentation

I know how to do this, but does anyone else? Let's make it obvious and ease the cognitive load on the great folks writing docs. Links to the various packaging guides, previously missing, are included on the main page. Signed-off-by: Stephen Finucane ---

[ovs-dev] [PATCH] OVN: fix OCF symbolic link lost after ovn-common upgrade

The directory "/usr/lib/ocf/resource.d/ovn/" is only removed on uninstall and can not be removed while upgrading Signed-off-by: Guoshuai Li --- rhel/openvswitch-fedora.spec.in | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git