Re: [ovs-dev] [PATCH ovn] ovn-northd: Support mixing stateless/stateful ACLs with acl-stateful-bypass.

2020-08-19 Thread Dumitru Ceara
On 8/19/20 2:44 PM, Numan Siddique wrote: > On Wed, Aug 19, 2020 at 5:50 PM Dumitru Ceara wrote: >> >> On 8/17/20 5:49 PM, Numan Siddique wrote: >>> On Mon, Aug 17, 2020 at 8:57 PM Dumitru Ceara wrote: On 8/17/20 4:32 PM, Numan Siddique wrote: > On Wed, Aug 12, 2020 at 5:52 PM

Re: [ovs-dev] [PATCH ovn] ovn-northd: Support mixing stateless/stateful ACLs with acl-stateful-bypass.

2020-08-19 Thread Numan Siddique
On Wed, Aug 19, 2020 at 5:50 PM Dumitru Ceara wrote: > > On 8/17/20 5:49 PM, Numan Siddique wrote: > > On Mon, Aug 17, 2020 at 8:57 PM Dumitru Ceara wrote: > >> > >> On 8/17/20 4:32 PM, Numan Siddique wrote: > >>> On Wed, Aug 12, 2020 at 5:52 PM Dumitru Ceara wrote: > > A new

Re: [ovs-dev] [PATCH ovn] ovn-northd: Support mixing stateless/stateful ACLs with acl-stateful-bypass.

2020-08-19 Thread Dumitru Ceara
On 8/17/20 5:49 PM, Numan Siddique wrote: > On Mon, Aug 17, 2020 at 8:57 PM Dumitru Ceara wrote: >> >> On 8/17/20 4:32 PM, Numan Siddique wrote: >>> On Wed, Aug 12, 2020 at 5:52 PM Dumitru Ceara wrote: A new configuration option is added to Logical_Switch:

Re: [ovs-dev] [PATCH ovn] ovn-northd: Support mixing stateless/stateful ACLs with acl-stateful-bypass.

2020-08-17 Thread Numan Siddique
On Mon, Aug 17, 2020 at 8:57 PM Dumitru Ceara wrote: > > On 8/17/20 4:32 PM, Numan Siddique wrote: > > On Wed, Aug 12, 2020 at 5:52 PM Dumitru Ceara wrote: > >> > >> A new configuration option is added to Logical_Switch: > >> other_config:acl-stateful-bypass. This optional value determines which

Re: [ovs-dev] [PATCH ovn] ovn-northd: Support mixing stateless/stateful ACLs with acl-stateful-bypass.

2020-08-17 Thread Dumitru Ceara
On 8/17/20 4:32 PM, Numan Siddique wrote: > On Wed, Aug 12, 2020 at 5:52 PM Dumitru Ceara wrote: >> >> A new configuration option is added to Logical_Switch: >> other_config:acl-stateful-bypass. This optional value determines which >> traffic should completely bypass connection tracking when ACLs

Re: [ovs-dev] [PATCH ovn] ovn-northd: Support mixing stateless/stateful ACLs with acl-stateful-bypass.

2020-08-17 Thread Numan Siddique
On Wed, Aug 12, 2020 at 5:52 PM Dumitru Ceara wrote: > > A new configuration option is added to Logical_Switch: > other_config:acl-stateful-bypass. This optional value determines which > traffic should completely bypass connection tracking when ACLs are > processed. > > In specific scenarios CMSs

[ovs-dev] [PATCH ovn] ovn-northd: Support mixing stateless/stateful ACLs with acl-stateful-bypass.

2020-08-12 Thread Dumitru Ceara
A new configuration option is added to Logical_Switch: other_config:acl-stateful-bypass. This optional value determines which traffic should completely bypass connection tracking when ACLs are processed. In specific scenarios CMSs can predetermine which traffic must be firewalled statefully or