Re: [ovs-discuss] MAC binding aging refresh mechanism

2023-05-25 Thread Ales Musil via discuss
On Fri, May 26, 2023 at 7:58 AM Han Zhou wrote: > > > On Thu, May 25, 2023 at 9:19 AM Ilya Maximets wrote: > > > > On 5/25/23 14:08, Ales Musil via discuss wrote: > > > Hi, > > > > > > to improve the MAC binding aging mechanism we need a way to ensure > that rows which are still in use are prese

Re: [ovs-discuss] MAC binding aging refresh mechanism

2023-05-25 Thread Han Zhou via discuss
On Thu, May 25, 2023 at 9:19 AM Ilya Maximets wrote: > > On 5/25/23 14:08, Ales Musil via discuss wrote: > > Hi, > > > > to improve the MAC binding aging mechanism we need a way to ensure that rows which are still in use are preserved. This doesn't happen with current implementation. > > > > I pro

Re: [ovs-discuss] OVS HW offload not working

2023-05-25 Thread Frode Nordahl via discuss
tor. 25. mai 2023, 22:29 skrev Robert Navarro : > Once you get the instance >> to use a VF instead of a virtio nic you should add its representor >> port to the OVS bridge. > > > Interesting, I didn't know this. > > Given that the instance has to use PCI Passthrough does that mean live > migration

Re: [ovs-discuss] Ping over dpdk bridge failed after upgrade to OVS 2.17.3

2023-05-25 Thread Alex Yeh (ayeh) via discuss
Hi Ilya, Thanks for you reply. We did further investigation and from the finding it seems related to the QEMU/libvirt version. The ping starts to work on DPDK bridge after we rollback the QEMU/libvirt version. Are you aware if there any new config needed to use the newer QEMU version? Alex N

Re: [ovs-discuss] OVS HW offload not working

2023-05-25 Thread Robert Navarro via discuss
> > Once you get the instance > to use a VF instead of a virtio nic you should add its representor > port to the OVS bridge. Interesting, I didn't know this. Given that the instance has to use PCI Passthrough does that mean live migrations are no longer possible? I think that was one of the big

Re: [ovs-discuss] OVS NDP proxy / nd_options_type

2023-05-25 Thread Sesterhenn, Maximilian via discuss
Hello together, I would like to follow up on this. Meanwhile I was able to find the following discussion [1] in this mailing list some time ago which looks like is about the same topic. Is this something that's currently not possible within OVS? If so, are there plans to add this? I had a look

Re: [ovs-discuss] MAC binding aging refresh mechanism

2023-05-25 Thread Ilya Maximets via discuss
On 5/25/23 14:08, Ales Musil via discuss wrote: > Hi, > > to improve the MAC binding aging mechanism we need a way to ensure that rows > which are still in use are preserved. This doesn't happen with current > implementation. > > I propose the following solution which should solve the issue, an

Re: [ovs-discuss] Help: reproduce CVE-2023-1668

2023-05-25 Thread David Morel via discuss
> The mf_set_mask_l3_prereqs() should be executed before the > mf_set_flow_value_masked(). The only thing that necessary is that > we mask "l3 prerequisites" whenever we set the actual fields. > The order is not very important. Ok, should be good with the way I did my first version then, thanks fo

Re: [ovs-discuss] Help: reproduce CVE-2023-1668

2023-05-25 Thread Ilya Maximets via discuss
On 5/25/23 15:35, David Morel wrote: >> I think, the issue should still be there, though I didn't check. >> Why exactly porting of the mf_set_mask_l3_prereqs() is a problem? >> do_xlate_actions() looks different in 2.5.3, but it still performs >> same mf_are_prereqs_ok() check. Can't you just add

Re: [ovs-discuss] Help: reproduce CVE-2023-1668

2023-05-25 Thread David Morel via discuss
> I think, the issue should still be there, though I didn't check. > Why exactly porting of the mf_set_mask_l3_prereqs() is a problem? > do_xlate_actions() looks different in 2.5.3, but it still performs > same mf_are_prereqs_ok() check. Can't you just add the call in the > body of the if as it is

[ovs-discuss] OVS-DPDK ConnTrack Update Racing Condition

2023-05-25 Thread Lazuardi Nasution via discuss
Hi, Continuing my posting on "ovs-vswitchd crashes several times a day", it seems that I find some racing conditions on the conntrack update. Without enabling debugging logs, I find logs like the following frequently. 2023-05-25T12:48:07.270Z|02757|conntrack(pmd-c47/id:101)|WARN|Unable to NAT due

[ovs-discuss] MAC binding aging refresh mechanism

2023-05-25 Thread Ales Musil via discuss
Hi, to improve the MAC binding aging mechanism we need a way to ensure that rows which are still in use are preserved. This doesn't happen with current implementation. I propose the following solution which should solve the issue, any questions or comments are welcome. If there isn't anything maj

[ovs-discuss] BFD WITH ECMP NOT WORK!

2023-05-25 Thread wangchuanlei via discuss
Hello, I use command create static route with bfd, by following cmd (1) uuid='ovn-nbctl create bfd logical_port=lrp0 dst_ip=192.168.3.2 status=down` (2) ovn-nbctl --bfd=$uuid --ecmp lr-route-add r0 240.0.0.0/8 192.168.3.2 And the lr-port lrp0 and the vm(192.168.3.2) are in different com

Re: [ovs-discuss] OVS HW offload not working

2023-05-25 Thread Frode Nordahl via discuss
On Thu, May 25, 2023 at 9:03 AM Robert Navarro wrote: > > Hi Frode, > > Thanks for the fast reply! > > Replies in-line as well. > > On Wed, May 24, 2023 at 11:41 PM Frode Nordahl > wrote: >> >> Hello, Robert, >> >> See my response in-line below. >> >> On Thu, May 25, 2023 at 8:20 AM Robert Navar

Re: [ovs-discuss] OVS HW offload not working

2023-05-25 Thread Robert Navarro via discuss
Hi Frode, Thanks for the fast reply! Replies in-line as well. On Wed, May 24, 2023 at 11:41 PM Frode Nordahl wrote: > Hello, Robert, > > See my response in-line below. > > On Thu, May 25, 2023 at 8:20 AM Robert Navarro via discuss > wrote: > > > > Hello, > > > > I've followed the directions h