Re: [ovs-discuss] [OVN] egress ACLs on Port Groups seem broken

2018-06-19 Thread Daniel Alvarez Sanchez
Hi Han, I'm sending the patch now which fixes it but feel free to modify it. Thanks! Daniel On Wed, Jun 20, 2018 at 12:06 AM, Han Zhou wrote: > > > On Tue, Jun 19, 2018 at 2:53 PM, Daniel Alvarez Sanchez < > dalva...@redhat.com> wrote: > > > > > > > > On Tue, Jun 19, 2018 at 10:37 PM, Daniel Alv

Re: [ovs-discuss] [OVN] egress ACLs on Port Groups seem broken

2018-06-19 Thread Han Zhou
On Tue, Jun 19, 2018 at 2:53 PM, Daniel Alvarez Sanchez wrote: > > > > On Tue, Jun 19, 2018 at 10:37 PM, Daniel Alvarez Sanchez < dalva...@redhat.com> wrote: >> >> Sorry, the problem seems to be that this ACL is not added in the Port Groups case for some reason (I checked wrong lflows log I had):

Re: [ovs-discuss] [OVN] egress ACLs on Port Groups seem broken

2018-06-19 Thread Daniel Alvarez Sanchez
On Tue, Jun 19, 2018 at 10:37 PM, Daniel Alvarez Sanchez < dalva...@redhat.com> wrote: > Sorry, the problem seems to be that this ACL is not added in the Port > Groups case for some reason (I checked wrong lflows log I had): > s/ACL/Logical Flow > > _uuid : 5a1bce6c-e4ed-4a1f-8150-c

Re: [ovs-discuss] [OVN] egress ACLs on Port Groups seem broken

2018-06-19 Thread Daniel Alvarez Sanchez
Sorry, the problem seems to be that this ACL is not added in the Port Groups case for some reason (I checked wrong lflows log I had): _uuid : 5a1bce6c-e4ed-4a1f-8150-cb855bbac037 actions : "reg0[0] = 1; next;" external_ids: {source="ovn-northd.c:2931", stage-name=

Re: [ovs-discuss] [OVN] egress ACLs on Port Groups seem broken

2018-06-19 Thread Daniel Alvarez Sanchez
Hi folks, Sorry for not being clear enough. In the tcpdump we can see the SYN packets being sent by port1 but retransmitted as it looks like the response to that SYN never reaches its destination. This is confirmed through the DP flows: $ sudo ovs-dpctl dump-flows recirc_id(0),in_port(3),eth(src

Re: [ovs-discuss] [OVN] egress ACLs on Port Groups seem broken

2018-06-18 Thread Han Zhou
On Mon, Jun 18, 2018 at 1:43 PM, Daniel Alvarez Sanchez wrote: > > Hi all, > > I'm writing the code to implement the port groups in networking-ovn (the OpenStack integration project with OVN). I found out that when a boot a VM, looks like the egress traffic (from VM) is not working properly. The V

Re: [ovs-discuss] [OVN] egress ACLs on Port Groups seem broken

2018-06-18 Thread Ben Pfaff
On Mon, Jun 18, 2018 at 10:43:22PM +0200, Daniel Alvarez Sanchez wrote: > I'm writing the code to implement the port groups in networking-ovn (the > OpenStack integration project with OVN). I found out that when a boot a VM, > looks like the egress traffic (from VM) is not working properly. The VM

[ovs-discuss] [OVN] egress ACLs on Port Groups seem broken

2018-06-18 Thread Daniel Alvarez Sanchez
Hi all, I'm writing the code to implement the port groups in networking-ovn (the OpenStack integration project with OVN). I found out that when a boot a VM, looks like the egress traffic (from VM) is not working properly. The VM port belongs to 3 Port Groups: 1. Default drop port group with the f