With incremental processing packet-ins handling in the ovn-controller should not trigger logical flow processing. One such case of packet-in handling is ovn-controller generating ICMP/TCP reset packets due to use of ACL reject action. Ensure that logical flow processing is not happening by watching coverage counters.
Signed-off-by: Jakub Sitnicki <[email protected]> --- tests/ovn.at | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/tests/ovn.at b/tests/ovn.at index 4a5316510..18d2ab692 100644 --- a/tests/ovn.at +++ b/tests/ovn.at @@ -9556,6 +9556,10 @@ ovn-nbctl --log acl-add sw0 from-lport 1000 "inport == \"sw0-p11\"" reject ovn-nbctl --log acl-add sw0 from-lport 1000 "inport == \"sw0-p21\"" reject OVS_WAIT_UNTIL([test 3 = $(ovn-sbctl lflow-list | grep 'icmp4 {' | wc -l)]) +for i in 1 2 3; do + count_before="$(as hv$i ovs-appctl -t ovn-controller coverage/read-count lflow_run) $count_before" +done + test_ip_packet 11 1 000000000011 000000000021 $(ip_to_hex 192 168 1 11) $(ip_to_hex 192 168 1 21) 0000 7d8d fcfe test_ip_packet 21 2 000000000021 000000000011 $(ip_to_hex 192 168 1 21) $(ip_to_hex 192 168 1 11) 0000 7d8d fcfe test_ip_packet 31 3 000000000031 000000000012 $(ip_to_hex 192 168 1 31) $(ip_to_hex 192 168 1 12) 0000 7d82 fcfe @@ -9568,8 +9572,12 @@ test_tcp_syn_packet 31 3 000000000031 000000000012 $(ip_to_hex 192 168 1 31) $(i for i in 1 2 3; do OVN_CHECK_PACKETS([hv$i/vif${i}1-tx.pcap], [vif${i}1.expected]) + count_after="$(as hv$i ovs-appctl -t ovn-controller coverage/read-count lflow_run) $count_after" done +# Check that hitting reject rule doesn't trigger lflow processing +AT_CHECK([test X"$count_before" = X"$count_after"], [0]) + OVN_CLEANUP([hv1], [hv2], [hv3]) AT_CLEANUP -- 2.14.3 _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
