Re: [ovs-dev] [PATCH] windows-installer: Update DriverVersion to be streamlined to OVS version

On Thu, Apr 13, 2017 at 04:51:40PM +, Alin Serdean wrote: > Patch: > https://github.com/openvswitch/ovs/commit/0c15b76511e78a1f84dec49138d7169c2f3eedf6 > introduced a version variable for the MSI itself but did not propagate it > too the driver version (used by the windows certificate tests).

Re: [ovs-dev] [PATCH v2] windows: Crash when the handle communication device cannot be found

On Thu, Apr 13, 2017 at 07:25:45PM +, Alin Serdean wrote: > From: Alin Serdean > > When trying to uninstall/disable the OVS extension the driver will > fail to unload properly(require reboot)/hang until ovs-vswitchd is closed. > > The root cause of this

[ovs-dev] [PATCH 6/6] doc: Remove latex output configuration

From: Stephen Finucane We don't care about building LaTeX documentation, so there's no need to keep this build cruft around. Signed-off-by: Stephen Finucane Signed-off-by: Ben Pfaff --- Documentation/automake.mk | 4 +--- 1 file changed, 1

[ovs-dev] [PATCH 5/6] doc: Convert ovs-test to rST

From: Stephen Finucane Signed-off-by: Stephen Finucane Signed-off-by: Ben Pfaff --- Documentation/automake.mk | 1 + Documentation/conf.py | 3 + Documentation/ref/index.rst | 1 +

[ovs-dev] [PATCH 4/6] doc: Convert ovs-vlan-test to rST

From: Stephen Finucane Let's start with a simple one that lets us focus on setting up most of the required "infrastructure" for building man pages using Sphinx. This changes the 'check-htmldocs' target to 'check-docs' as its now responsible for building man page docs too.

[ovs-dev] [PATCH 2/6] doc: Avoid need to generate conf.py.

It's awkward to have to at the same time generate conf.py from conf.py.in and to keep both versions in the repository. This avoids the issue. Signed-off-by: Ben Pfaff --- Documentation/automake.mk | 10 -- Documentation/conf.py | 23 ++- Documentation/conf.py.in | 349

[ovs-dev] [PATCH 1/6] doc: Also delete stamp file in clean-docs target.

Otherwise "make docs-check" won't necessarily do anything since its apparent target is up to date. Signed-off-by: Ben Pfaff --- Documentation/automake.mk | 1 + 1 file changed, 1 insertion(+) diff --git a/Documentation/automake.mk b/Documentation/automake.mk index

[ovs-dev] [PATCH 0/6] Sphinx for Manpages

This is Stephen Finucane's RFC series from https://mail.openvswitch.org/pipermail/ovs-dev/2017-April/330666.html with my changes plus two extra patches at the beginning. Please see my comments on the former postings for more on the changes that I made. Ben Pfaff (2): doc: Also delete stamp

Re: [ovs-dev] [RFC 3/4] doc: Convert ovs-test to rST

On Mon, Apr 10, 2017 at 01:12:29PM +0100, Stephen Finucane wrote: > Signed-off-by: Stephen Finucane > --- > See comment on the previous change Thanks again, I made similar changes to this one as I did to the previous. ___ dev mailing

Re: [ovs-dev] [RFC 2/4] doc: Convert ovs-vlan-test to rST

Thank you! rST is much more readable than nroff. I have some comments below. On Mon, Apr 10, 2017 at 01:12:28PM +0100, Stephen Finucane wrote: > Let's start with a simple one that lets us focus on setting up most of > the required "infrastructure" for building man pages using Sphinx. > > There

Re: [ovs-dev] OVS performance with Kernel Datapath of Linux upstream vs Linux OVS tree.

Thanks Jarno! On Fri, 14 Apr 2017, 2:53 AM Jarno Rajahalme, wrote: > On Apr 12, 2017, at 9:00 PM, Kapil Adhikesavalu > wrote: > > Hi Jarno, > > That's great! Thanks for the clarification. So, if anything it should only > improve the performance when I move

[ovs-dev] (no subject)

I am Sgt Adam John , I have a Secured Monetary deal for you and it'slegitimate,$25,000,000.00 USD This message was sent using IMP, the Internet Messaging Program. ___ dev mailing list

[ovs-dev] [PATCH] ofp-parse: Fix match parsing with [x..y]=z format.

Commit 21b2fa617126 ("ofp-parse: Allow match field names in actions and brackets in matches.") added support for matching a consecutive set of bits with the [x..y]=z format, but the copying of the parsed value ('z') to the match was done from a wrong offset, so that the actual value matched would

Re: [ovs-dev] [PATCH ovs V7 19/24] netdev-vport: Use common offloads interface

On 7 April 2017 at 06:13, Roi Dayan wrote: > From: Paul Blakey > > netdev vports are backed by actualy netdev at the kernel > level, so they can use the common netdev-tc offloads interface > for flow offloading (if enabled). > > Signed-off-by: Paul Blakey

Re: [ovs-dev] [PATCH ovs V7 15/24] netdev-tc-offloads: Implement netdev flow del using tc interface

On 7 April 2017 at 06:13, Roi Dayan wrote: > From: Paul Blakey > > Signed-off-by: Paul Blakey > Reviewed-by: Roi Dayan > Reviewed-by: Simon Horman > --- > lib/netdev-tc-offloads.c | 33

Re: [ovs-dev] [PATCH ovs V7 02/24] netdev: Adding a new netdev api to be used for offloading flows

On 7 April 2017 at 06:12, Roi Dayan wrote: > From: Paul Blakey > > Signed-off-by: Paul Blakey > Reviewed-by: Roi Dayan > Reviewed-by: Simon Horman > --- > diff --git a/lib/netdev.h

Re: [ovs-dev] [PATCH ovs V7 11/24] dpif-netlink: Use netdev flow put api to insert a flow

On 7 April 2017 at 06:12, Roi Dayan wrote: > From: Paul Blakey > > Using the new netdev flow api operate will now try and > offload flows to the relevant netdev of the input port. > Other operate methods flows will come in later patches. > > Signed-off-by:

Re: [ovs-dev] [PATCH ovs V7 02/24] netdev: Adding a new netdev api to be used for offloading flows

On 7 April 2017 at 06:12, Roi Dayan wrote: > From: Paul Blakey > > Signed-off-by: Paul Blakey > Reviewed-by: Roi Dayan > Reviewed-by: Simon Horman > --- > @@ -769,6 +777,49 @@ struct

Re: [ovs-dev] [PATCH ovs V7 09/24] netdev-tc-offloads: Add ufid to tc/netdev map

On 7 April 2017 at 06:12, Roi Dayan wrote: > From: Paul Blakey > > Flows offloaded to tc are identified by priority > and handle pair while OVS flows are identified by ufid. > Added a hash map to convert between the two for later > retrieval and deleting of

Re: [ovs-dev] [PATCH ovs V7 08/24] dpif-netlink: Dump netdevs flows on flow dump

On 7 April 2017 at 06:12, Roi Dayan wrote: > From: Paul Blakey > > While dumping flows, dump flows that were offloaded to > netdev and parse them back to dpif flow. > > Signed-off-by: Paul Blakey > Reviewed-by: Roi Dayan

Re: [ovs-dev] [RFC 1/4] doc: Add man page section to documentation guide

On Mon, Apr 10, 2017 at 01:12:27PM +0100, Stephen Finucane wrote: > We also replace 'reST' with the far more common 'rST'. > > Signed-off-by: Stephen Finucane Thank you very much. This is generally good, but I have a few comments. > @@ -90,6 +90,12 @@ File Names > > -

Re: [ovs-dev] [RFC 0/4] Introduce Sphinx for man pages

On Mon, Apr 10, 2017 at 01:12:26PM +0100, Stephen Finucane wrote: > This series introduces the use of Sphinx for building man pages. There are a > couple of reasons for doing this: > > - roff is ruff to write > > Sorry. roff is an old markup format that's mostly used for man pages today. >

[ovs-dev] [PATCH 2/2] dpif: Log packet metadata on execute.

Debug log output for execute operations is missing the packet metadata, which can be instrumental in tracing what the datapath should be executing. No reason to have the metadata on the debug output, so add it there. Signed-off-by: Jarno Rajahalme --- lib/dpif.c | 7 +++ 1

Re: [ovs-dev] [PATCH 1/5] netlink: extended ACK reporting

On 13/04/2017 12:24, "Johannes Berg" wrote: > On Thu, 2017-04-13 at 16:05 +0200, Nicolas Dichtel wrote: > > > Sure. It was just to mention that attribute 0 exists somewhere. > > The other 0 attribute is OVS_TUNNEL_KEY_ATTR_ID. > > That looks like some really awkward

Re: [ovs-dev] OVS performance with Kernel Datapath of Linux upstream vs Linux OVS tree.

> On Apr 12, 2017, at 9:00 PM, Kapil Adhikesavalu wrote: > > Hi Jarno, > > That's great! Thanks for the clarification. So, if anything it should only > improve the performance when I move to OVS tree kernel module. > > Yes, assuming you will be using a recent OVS

Re: [ovs-dev] [PATCH branch-2.7 00/25] Backports for branch-2.7

On 13 April 2017 at 14:08, Joe Stringer wrote: > On 15 March 2017 at 16:31, Jarno Rajahalme wrote: >> These are (mostly) datapath backports from master that fix existing >> features in branch-2.7 and/or make the datapath compilable with later >> Linux kernel code. >

Re: [ovs-dev] [PATCH branch-2.7 00/25] Backports for branch-2.7

On 15 March 2017 at 16:31, Jarno Rajahalme wrote: > These are (mostly) datapath backports from master that fix existing > features in branch-2.7 and/or make the datapath compilable with later > Linux kernel code. Hi Jarno, This series was bigger than I expected, based on the

[ovs-dev] [PATCH v3 5/7] dpif-netlink-rtnl: add GRE creation support

Creates GRE devices using rtnetlink and tunnel metadata. Co-Authored-by: Thadeu Lima de Souza Cascardo Signed-off-by: Thadeu Lima de Souza Cascardo Signed-off-by: Eric Garver --- lib/dpif-netlink-rtnl.c | 100

[ovs-dev] [PATCH v3 2/7] dpif-netlink: break up code that creates compat ports

This breaks up creating compat ports so we can reuse some of the code to create ports with rtnetlink. Co-authored-by: Thadeu Lima de Souza Cascardo Signed-off-by: Thadeu Lima de Souza Cascardo Signed-off-by: Eric Garver Acked-by: Joe

[ovs-dev] [PATCH v3 7/7] dpif-netlink: Probe for out-of-tree tunnels, decides used interface

On dpif init, probe for whether tunnels are created using in-tree (upstream linux) or out-of-tree (OVS). This is done by probing for the existence of "ovs_geneve" via rtnetlink. This is used to determine how to create the tunnel devices. For out-of-tree tunnels, only try genetlink/compat. For

[ovs-dev] [PATCH v3 6/7] dpif-netlink-rtnl: add GENEVE creation support

Creates GENEVE devices using rtnetlink and tunnel metadata. Co-Authored-by: Thadeu Lima de Souza Cascardo Signed-off-by: Thadeu Lima de Souza Cascardo Signed-off-by: Eric Garver --- lib/dpif-netlink-rtnl.c | 115

[ovs-dev] [PATCH v3 4/7] dpif-netlink-rtnl: add VXLAN creation support

Creates VXLAN devices using rtnetlink and tunnel metadata. Co-Authored-by: Thadeu Lima de Souza Cascardo Signed-off-by: Thadeu Lima de Souza Cascardo Signed-off-by: Eric Garver --- lib/dpif-netlink-rtnl.c | 182

[ovs-dev] [PATCH v3 1/7] netdev: get device type from vport prefix if it uses one

From: Thadeu Lima de Souza Cascardo If the device name uses a vport prefix, then use that vport type. Since these names are reserved, we can assume this is the right type. This is important when we are querying the datapath right after vswitch has started and using the

[ovs-dev] [PATCH v3 0/7] create tunnel devices using rtnetlink interface

This series adds support for the creation of tunnels using the rtnetlink interface. This will open the possibility for new features and flags on those vports without the need to change vport compatibility code. Support for STT and LISP have not been added because these are not upstream yet, so we

Re: [ovs-dev] [PATCH] dpctl: add examples to the manpage

On 13 April 2017 at 13:30, Aaron Conole wrote: > Joe Stringer writes: > >> On 21 March 2017 at 13:32, Aaron Conole wrote: >>> Signed-off-by: Aaron Conole >>> --- >> >> Hi Aaron, thanks for the patch. Feedback below, I

Re: [ovs-dev] [PATCH] doc: Fix broken formatting in releases FAQ

Thank you! I applied this to master. ___ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Re: [ovs-dev] [PATCH] docs: Automatically extract version from NEWS

On Thu, 2017-04-13 at 11:22 -0700, Ben Pfaff wrote: > On Wed, Apr 12, 2017 at 12:32:24PM +0100, Stephen Finucane wrote: > > Parse the version and release from the NEWS file. This looks a bit > > hacky, but the NEWS file is generally well formatted and should be > > reliable enough for our

Re: [ovs-dev] [PATCH v2] doc: Link to release FAQ from DPDK install guide

On Mon, Apr 10, 2017 at 03:15:07PM +0100, Stephen Finucane wrote: > I wanted to find the mappings of DPDK versions to OVS versions. This was > a little more difficult than expected. Resolve the issue by linking to > it from the DPDK install guide. > > Signed-off-by: Stephen Finucane

Re: [ovs-dev] [PATCH] dpctl: add examples to the manpage

Joe Stringer writes: > On 21 March 2017 at 13:32, Aaron Conole wrote: >> Signed-off-by: Aaron Conole >> --- > > Hi Aaron, thanks for the patch. Feedback below, I can apply if you're > happy with it. LGTM, thanks! >> lib/dpctl.man | 35

Re: [ovs-dev] [PATCH] dpctl: add examples to the manpage

On 21 March 2017 at 13:32, Aaron Conole wrote: > Signed-off-by: Aaron Conole > --- Hi Aaron, thanks for the patch. Feedback below, I can apply if you're happy with it. > lib/dpctl.man | 35 +++ > 1 file changed, 35

Re: [ovs-dev] [datapath backport 10/10] datapath: Openvswitch: Refactor sample and recirc actions implementation

On 6 April 2017 at 17:18, Andy Zhou wrote: > Upstream commit: > Openvswitch: Refactor sample and recirc actions implementation > > Added clone_execute() that both the sample and the recirc > action implementation can use. > > Signed-off-by: Andy Zhou

Re: [ovs-dev] [datapath backport 09/10] datapath: openvswitch: Optimize sample action for the clone use cases

On 6 April 2017 at 17:18, Andy Zhou wrote: > Upstream commit: > openvswitch: Optimize sample action for the clone use cases > > With the introduction of open flow 'clone' action, the OVS user space > can now translate the 'clone' action into kernel datapath 'sample' >

[ovs-dev] [PATCH v2] windows: Crash when the handle communication device cannot be found

From: Alin Serdean When trying to uninstall/disable the OVS extension the driver will fail to unload properly(require reboot)/hang until ovs-vswitchd is closed. The root cause of this behavior is because the handles from ovs-vswitchd to the kernel communication

Re: [ovs-dev] [datapath backport 01/10] dapatah: Fix missing CONFIG_NF_CONNTRACK_LABLES check

On Thu, Apr 13, 2017 at 11:10 AM, Joe Stringer wrote: > On 6 April 2017 at 17:18, Andy Zhou wrote: >> This config flag was not consistently checked. Fix it. >> >> Signed-off-by: Andy Zhou > > nf_ct_labels_find() already changes its implementation

Re: [ovs-dev] [datapath backport 03/10] compat: ipv6: orphan skbs in reassembly unit.

On Thu, Apr 13, 2017 at 11:31 AM, Joe Stringer wrote: > On 6 April 2017 at 17:18, Andy Zhou wrote: >> From: Eric Dumazet >> >> Upstream commit: >> ipv6: orphan skbs in reassembly unit >> >> Andrey reported a use-after-free in IPv6 stack.

Re: [ovs-dev] [PATCH 1/5] dpif-netdev: Skip EMC lookup when EMC is disabled.

On 04/13/2017 07:30 PM, Bodireddy, Bhanuprakash wrote: >> On 04/13/2017 07:11 PM, Kevin Traynor wrote: >>> On 03/12/2017 05:33 PM, Bhanuprakash Bodireddy wrote: Conditional EMC insert patch gives the flexibility to configure the probability of flow insertion in to EMC. This also allows

Re: [ovs-dev] [datapath backport 08/10] datapath: openvswitch: Refactor recirc key allocation.

On 6 April 2017 at 17:18, Andy Zhou wrote: > Upstream commit: > openvswitch: Refactor recirc key allocation. > > The logic of allocating and copy key for each 'exec_actions_level' > was specific to execute_recirc(). However, future patches will reuse > as well.

Re: [ovs-dev] [datapath backport 07/10] datapath: openvswitch: Deferred fifo API change.

On 6 April 2017 at 17:18, Andy Zhou wrote: > Upstream commit: > openvswitch: Deferred fifo API change. > > add_deferred_actions() API currently requires actions to be passed in > as a fully encoded netlink message. So far both 'sample' and 'recirc' > actions happens

Re: [ovs-dev] [datapath backport 06/10] datapath: openvswitch: Add missing case OVS_TUNNEL_KEY_ATTR_PAD

On 6 April 2017 at 17:18, Andy Zhou wrote: > From: Kris Murphy > > openvswitch: Add missing case OVS_TUNNEL_KEY_ATTR_PAD > > Added a case for OVS_TUNNEL_KEY_ATTR_PAD to the switch statement > in ip_tun_from_nlattr in order to prevent the

Re: [ovs-dev] [datapath backport 03/10] compat: ipv6: orphan skbs in reassembly unit.

On 6 April 2017 at 17:18, Andy Zhou wrote: > From: Eric Dumazet > > Upstream commit: > ipv6: orphan skbs in reassembly unit > > Andrey reported a use-after-free in IPv6 stack. > > Issue here is that we free the socket while it still has skb >

Re: [ovs-dev] [PATCH 1/5] dpif-netdev: Skip EMC lookup when EMC is disabled.

>On 04/13/2017 07:11 PM, Kevin Traynor wrote: >> On 03/12/2017 05:33 PM, Bhanuprakash Bodireddy wrote: >>> Conditional EMC insert patch gives the flexibility to configure the >>> probability of flow insertion in to EMC. This also allows an option >>> to entirely disable EMC by setting

Re: [ovs-dev] [datapath backport 02/10] datapath: Pack struct sw_flow_key.

On 6 April 2017 at 17:18, Andy Zhou wrote: > From: Jarno Rajahalme > > Upstream commit: > openvswitch: Pack struct sw_flow_key. > > struct sw_flow_key has two 16-bit holes. Move the most matched > conntrack match fields there. In some typical cases this

Re: [ovs-dev] [PATCH] docs: Automatically extract version from NEWS

On Wed, Apr 12, 2017 at 12:32:24PM +0100, Stephen Finucane wrote: > Parse the version and release from the NEWS file. This looks a bit > hacky, but the NEWS file is generally well formatted and should be > reliable enough for our purposes. > > Signed-off-by: Stephen Finucane >

Re: [ovs-dev] [PATCH 1/5] dpif-netdev: Skip EMC lookup when EMC is disabled.

On 04/13/2017 07:11 PM, Kevin Traynor wrote: > On 03/12/2017 05:33 PM, Bhanuprakash Bodireddy wrote: >> Conditional EMC insert patch gives the flexibility to configure the >> probability of flow insertion in to EMC. This also allows an option to >> entirely disable EMC by setting

Re: [ovs-dev] [PATCH 1/5] dpif-netdev: Skip EMC lookup when EMC is disabled.

On 03/12/2017 05:33 PM, Bhanuprakash Bodireddy wrote: > Conditional EMC insert patch gives the flexibility to configure the > probability of flow insertion in to EMC. This also allows an option to > entirely disable EMC by setting 'emc-insert-inv-prob=0' which can be > useful at large number of

Re: [ovs-dev] [datapath backport 01/10] dapatah: Fix missing CONFIG_NF_CONNTRACK_LABLES check

On 6 April 2017 at 17:18, Andy Zhou wrote: > This config flag was not consistently checked. Fix it. > > Signed-off-by: Andy Zhou nf_ct_labels_find() already changes its implementation based on CONFIG_NF_CONNTRACK_LABELS so the OVS code doesn't have to become more

[ovs-dev] [PATCH 2/2] lib/automake.mk: don't install runtime directories

The Open vSwitch run, log, and DB directories are installed as part of the normal `make install` process. However, this means they are created with user and group ownership that may conflict with the desired user. For example, running `make install` as root will install those files as root:root,

[ovs-dev] [PATCH 1/2] install-doc: suggest to use ovs-ctl for start/stop

The install documentation guided users to manually start/stop daemons. This is good information to have, but with the existence of ovs-ctl, is probably not the best way to start guiding new users of ovs. Suggest that users start by running ovs-ctl start, and document the ability to selectively

[ovs-dev] [PATCH 0/2] installation: remove the runtime directories

This series refactors the documentation and then changes the 'make install' behavior so that it does not automatically create the runtime directories, because they will have ownership of root:root, instead of a user-defined option that may be passed to ovs-ctl. RFC discussion here:

[ovs-dev] [PATCH] debian, xenserver: Update logrotate config to match RHEL.

Commit 618a5b45ae8b ("rhel: Avoid logrotate error if /var/run/openvswitch does not exist") updated the RHEL logrotate configuration. This commit makes similar changes for Debian, by synchronizing with the RHEL version. In particular: - Indent to match logrotate.conf(5) examples. - Use

Re: [ovs-dev] Minutes: OvS Offload Discussion at Netdev 2.1

On 12 April 2017 at 15:57, Simon Horman wrote: > On Wed, Apr 12, 2017 at 03:01:29PM -0300, Flavio Leitner wrote: >> On Sat, Apr 08, 2017 at 04:47:57PM -0400, Simon Horman wrote: >> > At Netdev 2.1 a meeting was held to discuss OvS offload. Minutes of the >> >

Re: [ovs-dev] [RFC 0/5] role-based access controls for ovsdb-server, ovn-sb

> From: "Ben Pfaff" > To: "Lance Richardson" > Cc: d...@openvswitch.org, "mickeys dev" , "Russell > Bryant" > Sent: Thursday, 13 April, 2017 12:03:28 PM > Subject: Re: [RFC 0/5] role-based access controls for

Re: [ovs-dev] [PATCH 2/2] rhel: Avoid logrotate error if /var/run/openvswitch does not exist

On Thu, Apr 13, 2017 at 11:48:20AM +0200, Timothy Redaelli wrote: > Avoid also errors if an ovs server didn't start correctly or it crashed > without > deleting the pid file. > > Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1441524 > Signed-off-by: Timothy Redaelli

Re: [ovs-dev] [PATCH 1/2] rhel/etc_logrotate.d_openvswitch: Fix coding style

On Thu, Apr 13, 2017 at 11:48:19AM +0200, Timothy Redaelli wrote: > Replace tabs by 4 spaces and indent the postrotate script like the > examples in 'man logrotate.conf' > > Signed-off-by: Timothy Redaelli Thanks! I applied this to master.

Re: [ovs-dev] [PATCH] Add NAT information to the logical routers in nbctl show output

On Thu, Apr 13, 2017 at 10:11:58AM +0100, Lucas Alvares Gomes wrote: > This patch is changing the print_lr() function in ovn-nbctl.c to include > logical router NAT information as part of the output (external ip, > logical ip and type). > > Signed-off-by: Lucas Alvares Gomes

[ovs-dev] [PATCH] windows-installer: Update DriverVersion to be streamlined to OVS version

Patch: https://github.com/openvswitch/ovs/commit/0c15b76511e78a1f84dec49138d7169c2f3eedf6 introduced a version variable for the MSI itself but did not propagate it too the driver version (used by the windows certificate tests). This patch updates the driver version. Signed-off-by: Alin Gabriel

Re: [ovs-dev] [PATCH] docs: Update version numbers in doc config.

On Wed, Apr 12, 2017 at 11:05:44AM -0400, Russell Bryant wrote: > On Wed, Apr 12, 2017 at 9:12 AM, Stephen Finucane wrote: > > I realized that about 10 minutes ago after diving further into the git > > history of NEWS :) Why '.90' , out of curiosity? > > It predates my

Re: [ovs-dev] [PATCH v3] python: Allow tuning the session probe_interval from IDL

On Tue, Apr 11, 2017 at 11:00 AM, Lucas Alvares Gomes wrote: > This patch is adding a new parameter called "probe_interval" to the > constructor of the Idl class. This new parameter will be used to tune > the database connection probing for that IDL session, some users

Re: [ovs-dev] [RFC 0/5] role-based access controls for ovsdb-server, ovn-sb

On Wed, Apr 12, 2017 at 09:30:42AM -0400, Lance Richardson wrote: > > From: "Lance Richardson" > > To: "Ben Pfaff" > > Cc: d...@openvswitch.org, "mickeys dev" , "Russell > > Bryant" > > Sent: Thursday, 6 April, 2017

Re: [ovs-dev] OVN meeting report

On Wed, Apr 12, 2017 at 06:09:28PM +0500, Valentine Sinitsyn wrote: > Hi, > > On 04.04.2017 15:29, Valentine Sinitsyn wrote: > >On 03.04.2017 20:29, Valentine Sinitsyn wrote: > >>Hi Ben, > >> > >>On 23.03.2017 08:11, Ben Pfaff wrote: > >>>Hello everyone. I am not sure whether I am going to be

Re: [ovs-dev] [RFC][PATCH] netdev-dpdk: add support for TSO

> >"Kavanagh, Mark B" writes: > >>>Hi Mark, >>> >>>Mark Kavanagh writes: >>> TCP Segmentation Offload (TSO) is a feature which enables the TCP/IP network stack to delegate segmentation of a TCP segment to the NIC, thus saving

Re: [ovs-dev] [RFC v2 0/5] role-based access controls for ovsdb-server, ovn-sb

> From: "Lance Richardson" > To: d...@openvswitch.org, b...@ovn.org, russ...@ovn.org, "mickeys dev" > > Sent: Thursday, 13 April, 2017 11:00:21 AM > Subject: [ovs-dev] [RFC v2 0/5] role-based access controls for ovsdb-server, > ovn-sb > > This

[ovs-dev] [RFC v2 3/5] ovsdb: add support for role-based access controls

Add suport for ovsdb RBAC (role-based access control). This includes: - Support for new "--rbac " command-line option to ovsdb-server, to specify the RBAC roles table to be used. This table has one row per role, with each row having a "name" column (role name) and a

[ovs-dev] [RFC v2 5/5] ovn-sbctl: support setting rbac role for remote connections

Add support for specifying rbac "role" when setting remote connection configuration in southbound database. Signed-off-by: Lance Richardson --- v2: no changes ovn/utilities/ovn-sbctl.c | 12 ++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git

[ovs-dev] [RFC v2 4/5] ovn: add rbac tables to ovn southbound schema

Add rbac "roles" and "permissions" tables to ovn southbound database schema, add support to ovn-northd for managing these tables. Signed-off-by: Lance Richardson --- v2: - Corrected authorization setup for Chassis and Encap tables. ovn/northd/ovn-northd.c | 190

[ovs-dev] [RFC v2 2/5] ovsdb: refactor utility functions into separate file

Move local db access functions to a new file and make give them global scope so they can be included in the ovsdb library and used by other ovsdb library functions. Signed-off-by: Lance Richardson --- v2: - Renamed functions in ovsdb-util.c to have "ovsdb_util_" prefix.

[ovs-dev] [RFC v2 0/5] role-based access controls for ovsdb-server, ovn-sb

This series implements role-based access control infrastructure for ovsdb-server, and uses that infrastructure to apply role-based access controls to the OVN_Southbound database. This implementation follows the outline discussed at:

[ovs-dev] [RFC v2 1/5] stream: store stream peer id with stream state

Keep track of authenticated ID for stream peer. For SSL connections, the authenticated ID is the CN (Common Name) field from the peer's SSL certificate. Signed-off-by: Lance Richardson --- v2: - Accomodate OpenSSL 1.1 deprecation of ASN1_STRING_data(). - Added comment

[ovs-dev] SugarCRM Updated Directory

Hi, Would you be interested in acquiring *SugarCRM Users* contact information in excel sheet for unlimited marketing usage? We also provide IT Decision Makers, Sales and Marketing Decision Makers, C-level Titles and Decision Makers from all Departments. We also have companies using:

Re: [ovs-dev] [RFC][PATCH] netdev-dpdk: add support for TSO

"Kavanagh, Mark B" writes: >>Hi Mark, >> >>Mark Kavanagh writes: >> >>> TCP Segmentation Offload (TSO) is a feature which enables >>> the TCP/IP network stack to delegate segmentation of a TCP >>> segment to the NIC, thus saving compute

[ovs-dev] [PATCH 2/2] rhel: Avoid logrotate error if /var/run/openvswitch does not exist

Avoid also errors if an ovs server didn't start correctly or it crashed without deleting the pid file. Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1441524 Signed-off-by: Timothy Redaelli --- rhel/etc_logrotate.d_openvswitch | 8 +--- 1 file changed, 5

[ovs-dev] [PATCH 1/2] rhel/etc_logrotate.d_openvswitch: Fix coding style

Replace tabs by 4 spaces and indent the postrotate script like the examples in 'man logrotate.conf' Signed-off-by: Timothy Redaelli --- rhel/etc_logrotate.d_openvswitch | 14 +++--- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git

[ovs-dev] [PATCH] Add NAT information to the logical routers in nbctl show output

This patch is changing the print_lr() function in ovn-nbctl.c to include logical router NAT information as part of the output (external ip, logical ip and type). Signed-off-by: Lucas Alvares Gomes --- ovn/utilities/ovn-nbctl.c | 12 1 file changed, 12

Re: [ovs-dev] [RFC][PATCH] netdev-dpdk: add support for TSO

>Hi Mark, > >Mark Kavanagh writes: > >> TCP Segmentation Offload (TSO) is a feature which enables >> the TCP/IP network stack to delegate segmentation of a TCP >> segment to the NIC, thus saving compute resources. >> >> This commit adds support for TSO in the DPDK

Re: [ovs-dev] [PATCH v5] tunneling: Avoid recirculation on datapath by computing the recirculate actions at translate time.

Can anyone have a look on this patch?? Regards _Sugesh > -Original Message- > From: Chandran, Sugesh > Sent: Tuesday, April 11, 2017 11:14 AM > To: d...@openvswitch.org; b...@ovn.org > Cc: Chandran, Sugesh ; Zoltán Balogh > >