Route tags ("ic-route-tag") are a convenient way to identify where an
IC route comes from, but the only way to act on them when learning
routes is the "ic-route-filter-tag" option on a Logical_Router_Port,
and it is limited in two ways.
First, it only ever worked with a single tag: the learned route's tag
was compared to the option value with a plain strcmp(), so a
comma-separated value silently matched nothing and the filter became a
no-op. So, a new configuration is "ic-route-learn-tag-rules" is added.
It will permit the following configurations:
- "allow:<tags>": only the routes whose "ic-route-tag" is one of
<tags> are learned. Every other route, the untagged ones included,
is not learned.
- "block:<tags>": the routes whose "ic-route-tag" is one of <tags> are
not learned. Every other route, the untagged ones included, is
learned.
It will be possible to configure many tags to allow or block.
Lucas Vargas Dias (1):
ic: Add tag rules to filter the routes learned from a TS.
NEWS | 7 ++
TODO.rst | 2 +
ic/ovn-ic.c | 122 +++++++++++++++++++++++++++++++-
ovn-nb.xml | 61 ++++++++++++++++
tests/ovn-ic.at | 180 ++++++++++++++++++++++++++++++++++++++++++++++++
5 files changed, 370 insertions(+), 2 deletions(-)
--
2.43.0
--
_'Esta mensagem é direcionada apenas para os endereços constantes no
cabeçalho inicial. Se você não está listado nos endereços constantes no
cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa
mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão
imediatamente anuladas e proibidas'._
* **'Apesar do Magazine Luiza tomar
todas as precauções razoáveis para assegurar que nenhum vírus esteja
presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por
quaisquer perdas ou danos causados por esse e-mail ou por seus anexos'.*
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev