Re: [ovs-dev] [PATCH ovn 2/3] Honor allow priority when stateless present

2021-05-25 Thread Ihar Hrachyshka
On Thu, May 20, 2021 at 5:58 PM Han Zhou wrote: > > > > On Mon, May 17, 2021 at 2:47 PM Ihar Hrachyshka wrote: > > > > For each allow-stateless ACL, a rule was added earlier in the pipeline > > that circumvented setting REGBIT_CONNTRACK_DEFRAG regardless of > > whether other, e.g. allow ACLs with

Re: [ovs-dev] [PATCH ovn 2/3] Honor allow priority when stateless present

2021-05-20 Thread Han Zhou
On Mon, May 17, 2021 at 2:47 PM Ihar Hrachyshka wrote: > > For each allow-stateless ACL, a rule was added earlier in the pipeline > that circumvented setting REGBIT_CONNTRACK_DEFRAG regardless of > whether other, e.g. allow ACLs with higher priority were present. > > Now, when allow-stateless ACLs

[ovs-dev] [PATCH ovn 2/3] Honor allow priority when stateless present

2021-05-17 Thread Ihar Hrachyshka
For each allow-stateless ACL, a rule was added earlier in the pipeline that circumvented setting REGBIT_CONNTRACK_DEFRAG regardless of whether other, e.g. allow ACLs with higher priority were present. Now, when allow-stateless ACLs are present on the switch with other allow-related ACLs, for each