Conjunctive matches are currently disabled in OVN. Use of constructs such as port groups and address sets in ACLs can potentially result in flows with identical matches being generated. These flows, when added to OVS, result in unpredictable behavior.
This patch set aims to fix this by consolidating conjunctions with identical matches to a single flow. In addition, this patch series introduces behavior to limit the total number of conjunction flows installed. This hopefully should result in less risk of reaching the maximum number of resubmits during packet processing. Mark Michelson (3): Revert conjunctive match removal patches. Combine conjunctions with identical matches into one flow. Limit the number of generated conjunctions. TODO.rst | 10 - controller/lflow.c | 16 +- controller/ofctrl.c | 142 +++++- controller/ofctrl.h | 12 + include/ovn/expr.h | 2 + lib/expr.c | 15 +- tests/ovn.at | 1265 +++------------------------------------------------ 7 files changed, 233 insertions(+), 1229 deletions(-) -- 2.14.5 _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev
