Thanks a lot Matt for the quick inputs.
We are interested in packets destined for our interfaces only. Hence, I will
try with ip4-local.
--
Thanks & Regards,
Murthy
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#17215):
Can anyone please check and revert on this config ?
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#17214): https://lists.fd.io/g/vpp-dev/message/17214
Mute This Topic: https://lists.fd.io/mt/76099289/21656
Mute #vpp-memif:
Hi Satya,
A node on ip4-local will process packets which have a destination IPv4
address that is local to VPP. Usually these are addresses configured on a
VPP interface but they can also be addresses in a NAT pool or any other
address which has a local path in the FIB. If those are the only
Neale,
No worries. Enjoy your vacation
If the fix for issue 1 works where ACL and ABF can co-exist on an
interface, we can configure ACL for all deny/drop scenarios and ABF only
for the permit and forwarding traffic. So like you said, we will
configure ABFs always with forwarding paths with
Make sense!
Thank much, Neale.
--
Regards,
Balaji.
From: "Neale Ranns (nranns)"
Date: Wednesday, August 12, 2020 at 10:20 AM
To: "Balaji Venkatraman (balajiv)"
Cc: "vpp-dev@lists.fd.io" , Venkat
, Andrew Yourtchenko
Subject: Re: [vpp-dev] ABF and ACL co-existence on an Interface
Hi
Hi Balaji,
Access control happens before forwarding, so the ABF plugin specifies a
runs-after dependency on the ACL plugin
So if the same tuple is specified in the access lists used by the two features,
then that flow is first subject to access control, then, if it is permitted, to
Thank you Andrew for providing the fix. We will try the patch and let you
know how it holds.
Regarding the second issue, it appears to be some defensive check missing
for the forwarding paths.
The test scenario was to delete an ABF policy with no forwarding paths.
Create was successful.
Will wait
Hi Neale,
Just wondering what the behavior ought to be if we had a ACL policy to drop on
an IP address and ABF has one to fwd it.. Which one prevails?
Thanks!
--
Regards,
Balaji.
--
Regards,
Balaji.
From: "Neale Ranns (nranns)"
Date: Tuesday, August 11, 2020 at 8:30 AM
To: Venkat , Andrew
> On Aug 12, 2020, at 10:12 AM, Benoit Ganne (bganne) wrote:
>
> Hi Christian,
>
> Thanks for the head's up.
>
>> I think maybe the right thing to do here is create a custom cmake build
>> rule to stage the entire python package in build-root/build*
>
> Alternatively, do you know if we can
Hi Christian,
Thanks for the head's up.
> I think maybe the right thing to do here is create a custom cmake build
> rule to stage the entire python package in build-root/build*
Alternatively, do you know if we can add an arbitrary file to be packaged by
setup.py? If we could just tell
Minus the typo this time:
vpp# ip table 1
vpp# set int ip table 1
From: vpp-dev@lists.fd.io On Behalf Of Dave Barach via
lists.fd.io
Sent: Wednesday, August 12, 2020 9:08 AM
To: techi...@gmail.com; vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] Unable to create fib table and add interfaces in vpp
Got it. Thanks
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#17201): https://lists.fd.io/g/vpp-dev/message/17201
Mute This Topic: https://lists.fd.io/mt/76146302/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe:
“... create fib table and add interface to it.”
You need to actually create the table:
vpp# ip table 1
vpp# set int ip table 1
From: vpp-dev@lists.fd.io On Behalf Of techi...@gmail.com
Sent: Wednesday, August 12, 2020 8:47 AM
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Unable to create fib
Hello Team,
I have two physical NIC attached to vpp-dpdk. vpp throws following error when I
try to create fib table and add interface to it.
set interface ip table GigabitEthernet4/0/0 1 ---> set interface ip table:
no such table 1
"set interface ip table" command should create table for
Hi,
I have an application that uses vapi to connect to vpp. If I restart VPP, my
application gets stuck at the first vapi call. I then have to restart my
application to bring back it to normal state. I think this is due to a broken
connection.
Is there a way to reconnect to vpp without
FWIW I looked at this briefly but started rat-holing trying to better integrate
the python packaging (which I am somewhat familiar with) with cmake (which I
know almost nothing about).
I think maybe the right thing to do here is create a custom cmake build rule to
stage the entire python
Hi,
We have a query on one of the requirements we have.
1. We would like to tap all the ip4 packets into our custom graph node.
2. But, we want to tap the ip packets only after reassembly is completed, if
fragments are received.
I was looking at ip-local feature arc, if this works for our
Hello Ben,
I tried below configuration, Packet rx on physical nic are visible in
application through memif, and they are written-back successfully to memif. but
they are not reaching intended destination.
vppctl create interface memif id 0 master
vppctl set int state memif0/0 up
vppctl set int
Hi Venkat,
Cool, thanks a lot!
So the first issue is acl-related,
you can try out the https://gerrit.fd.io/r/c/vpp/+/28251
ACL plugin uses its own heap to get better isolation
from the rest of the world, but the lookup
contexts are sitting in the global heap -
and accidentally it was being
19 matches
Mail list logo
