On Wed, Jun 2, 2021 at 12:22 AM Han Zhou wrote:
>
>
>
> On Tue, Jun 1, 2021 at 12:28 PM Ihar Hrachyshka wrote:
> >
> > On Thu, May 20, 2021 at 9:55 PM Han Zhou wrote:
> > >
> > >
> > >
> > > On Thu, May 20, 2021 at 3:22 PM Han Zhou wrote:
> > > >
> > > >
> > > >
> > > > On Mon, May 17, 2021 at
On Tue, Jun 1, 2021 at 12:28 PM Ihar Hrachyshka wrote:
>
> On Thu, May 20, 2021 at 9:55 PM Han Zhou wrote:
> >
> >
> >
> > On Thu, May 20, 2021 at 3:22 PM Han Zhou wrote:
> > >
> > >
> > >
> > > On Mon, May 17, 2021 at 2:47 PM Ihar Hrachyshka
wrote:
> > > >
> > > > While we *should not* circumv
On Thu, May 20, 2021 at 6:22 PM Han Zhou wrote:
>
>
>
> On Mon, May 17, 2021 at 2:47 PM Ihar Hrachyshka wrote:
> >
> > While we *should not* circumvent conntrack when a stateful ACL of higher
> > priority is present on the switch, we should do so only when
> > allow-stateless and allow-stateful d
On Thu, May 20, 2021 at 9:55 PM Han Zhou wrote:
>
>
>
> On Thu, May 20, 2021 at 3:22 PM Han Zhou wrote:
> >
> >
> >
> > On Mon, May 17, 2021 at 2:47 PM Ihar Hrachyshka wrote:
> > >
> > > While we *should not* circumvent conntrack when a stateful ACL of higher
> > > priority is present on the swi
On Thu, May 20, 2021 at 3:22 PM Han Zhou wrote:
>
>
>
> On Mon, May 17, 2021 at 2:47 PM Ihar Hrachyshka
wrote:
> >
> > While we *should not* circumvent conntrack when a stateful ACL of higher
> > priority is present on the switch, we should do so only when
> > allow-stateless and allow-stateful d
On Mon, May 17, 2021 at 2:47 PM Ihar Hrachyshka wrote:
>
> While we *should not* circumvent conntrack when a stateful ACL of higher
> priority is present on the switch, we should do so only when
> allow-stateless and allow-stateful directions are the same, otherwise we
> should still skip conntrac
While we *should not* circumvent conntrack when a stateful ACL of higher
priority is present on the switch, we should do so only when
allow-stateless and allow-stateful directions are the same, otherwise we
should still skip conntrack for allow-stateless ACLs.
Fixes: 3187b9fef1 ("ovn-northd: intro