Hello everyone
I have some confused about "Crossproducting" in ovn-sb
I create acl in ovn-sb like this
match : "tcp.src == {10000, 20000} && tcp.dst == {10000,
20000} && ip4.src == {1.1.1.1/32, 2.2.2.2/32} && ip4.dst == {1.1.1.1/32,
2.2.2.2/32}"
ovs-ofctl dump-flows like this
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=2.2.2.2,tp_src=20000,tp_dst=20000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=2.2.2.2,tp_src=10000,tp_dst=10000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=1.1.1.1,tp_src=10000,tp_dst=20000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=1.1.1.1,tp_src=10000,tp_dst=10000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=1.1.1.1,tp_src=10000,tp_dst=20000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=1.1.1.1,tp_src=20000,tp_dst=20000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=1.1.1.1,tp_src=20000,tp_dst=10000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=2.2.2.2,tp_src=10000,tp_dst=20000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=2.2.2.2,tp_src=20000,tp_dst=10000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=2.2.2.2,tp_src=10000,tp_dst=20000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=2.2.2.2,tp_src=20000,tp_dst=10000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=2.2.2.2,tp_src=10000,tp_dst=10000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=2.2.2.2,tp_src=20000,tp_dst=20000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=1.1.1.1,tp_src=20000,tp_dst=20000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=1.1.1.1,tp_src=20000,tp_dst=10000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0,
idle_age=5,
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=1.1.1.1,tp_src=10000,tp_dst=10000
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
Lot of flows!!! It is not same as description in expr.h:203 which use
conjunction match
so whick kind of match in ovn-sb will use conjunction match?
_______________________________________________
dev mailing list
d...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
