Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-11-26 Thread Vladislav Odintsov
Hi Dumitru, Numan, I’ve sent a corresponding patch to openvswitch with my findings. It’d be great if you can take a look on it. Thanks. https://patchwork.ozlabs.org/project/openvswitch/patch/20211126205942.9354-1-odiv...@gmail.com/ Regards, Vladislav Odintsov > On 21 Sep 2021, at 14:43, Dumitru

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-21 Thread Dumitru Ceara
On 9/21/21 1:33 PM, Vladislav Odintsov wrote: > Hi Dumitru, Hi Vladislav, > > are you talking about any specific _mising_ patch? No, sorry for the confusion. I just meant there's a bug in the OOT module that was probably already fixed in the in-tree one so, likely, one would have to figure out

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-21 Thread Vladislav Odintsov
Hi Dumitru, are you talking about any specific _mising_ patch? Regards, Vladislav Odintsov > On 16 Sep 2021, at 19:09, Dumitru Ceara wrote: > > On 9/16/21 4:18 PM, Vladislav Odintsov wrote: >> Sorry, by OOT I meant non-inbox kmod. >> I’ve tried to use inbox kernel module (from kernel package)

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-16 Thread Dumitru Ceara
On 9/16/21 4:18 PM, Vladislav Odintsov wrote: > Sorry, by OOT I meant non-inbox kmod. > I’ve tried to use inbox kernel module (from kernel package) and problem > resolved. > > Regards, > Vladislav Odintsov > >> On 16 Sep 2021, at 17:17, Vladislav Odintsov wrote: >> >> Hi Dumitru, >> >> I’ve tri

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-16 Thread Vladislav Odintsov
Sorry, by OOT I meant non-inbox kmod. I’ve tried to use inbox kernel module (from kernel package) and problem resolved. Regards, Vladislav Odintsov > On 16 Sep 2021, at 17:17, Vladislav Odintsov wrote: > > Hi Dumitru, > > I’ve tried to exclude OOT OVS kernel module. > With OVN 20.06.3 + OVS 2

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-16 Thread Vladislav Odintsov
Hi Dumitru, I’ve tried to exclude OOT OVS kernel module. With OVN 20.06.3 + OVS 2.13.4 the problem solved. Could you please try with OOT kmod? For me it looks like a bug in OOT OVS kernel module code. Thanks. Regards, Vladislav Odintsov > On 16 Sep 2021, at 11:02, Dumitru Ceara wrote: > > O

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-16 Thread Dumitru Ceara
On 9/16/21 2:50 AM, Vladislav Odintsov wrote: > Hi Dumitru, > > thanks for your reply. > > Regards, > Vladislav Odintsov > >> On 15 Sep 2021, at 11:24, Dumitru Ceara wrote: >> >> Hi Vladislav, >> >> On 9/13/21 6:14 PM, Vladislav Odintsov wrote: >>> Hi Numan, >>> >>> I’ve checked with OVS 2.16.0

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-15 Thread Vladislav Odintsov
Hi Dumitru, thanks for your reply. Regards, Vladislav Odintsov > On 15 Sep 2021, at 11:24, Dumitru Ceara wrote: > > Hi Vladislav, > > On 9/13/21 6:14 PM, Vladislav Odintsov wrote: >> Hi Numan, >> >> I’ve checked with OVS 2.16.0 and OVN master. The problem persists. >> Symptoms are the same.

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-15 Thread Dumitru Ceara
Hi Vladislav, On 9/13/21 6:14 PM, Vladislav Odintsov wrote: > Hi Numan, > > I’ve checked with OVS 2.16.0 and OVN master. The problem persists. > Symptoms are the same. > > # grep ct_zero_snat /var/log/openvswitch/ovs-vswitchd.log > 2021-09-13T16:10:01.792Z|00019|ofproto_dpif|INFO|system@ovs-syst

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-13 Thread Vladislav Odintsov
Hi Numan, I’ve checked with OVS 2.16.0 and OVN master. The problem persists. Symptoms are the same. # grep ct_zero_snat /var/log/openvswitch/ovs-vswitchd.log 2021-09-13T16:10:01.792Z|00019|ofproto_dpif|INFO|system@ovs-system: Datapath supports ct_zero_snat Regards, Vladislav Odintsov > On 13 S

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-13 Thread Numan Siddique
On Mon, Sep 13, 2021 at 8:10 AM Vladislav Odintsov wrote: > > Hi, > > we’ve encountered a next problem with stateful ACLs. > > Suppose, we have one logical switch (ls1) and attached to it a VIF type > logical ports (lsp1, lsp2). > Each logical port has a linux VM besides it. > > Logical ports res

Re: [ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-13 Thread Vladislav Odintsov
There’s a typo in my previous mail. Please, see inline fix. Regards, Vladislav Odintsov > On 13 Sep 2021, at 15:09, Vladislav Odintsov wrote: > > Hi, > > we’ve encountered a next problem with stateful ACLs. > > Suppose, we have one logical switch (ls1) and attached to it a VIF type > logical

[ovs-dev] [ovn] problem: long tcp session instantiation with stateful ACLs

2021-09-13 Thread Vladislav Odintsov
Hi, we’ve encountered a next problem with stateful ACLs. Suppose, we have one logical switch (ls1) and attached to it a VIF type logical ports (lsp1, lsp2). Each logical port has a linux VM besides it. Logical ports reside in port group (pg1) and two ACLs are created within this PG: to-lport o