Re: [ovs-dev] [PATCH ovn v2 1/4] Honor allow-related priority when stateless present

2021-06-01 Thread Han Zhou
On Tue, Jun 1, 2021 at 2:38 PM Ihar Hrachyshka wrote: > > For each allow-stateless ACL, a rule was added earlier in the pipeline > that circumvented setting REGBIT_CONNTRACK_DEFRAG regardless of > whether other, e.g. allow-related ACLs with higher priority were > present. > > Now, when allow-state

[ovs-dev] [PATCH ovn v2 1/4] Honor allow-related priority when stateless present

2021-06-01 Thread Ihar Hrachyshka
For each allow-stateless ACL, a rule was added earlier in the pipeline that circumvented setting REGBIT_CONNTRACK_DEFRAG regardless of whether other, e.g. allow-related ACLs with higher priority were present. Now, when allow-stateless ACLs are present on the switch, for each allow-related, insert