In order to make mac_binding ageing process more reliable, track ARP
replies/NA for the selected mac_binding raw in the OFTABLE_MAC_CACHE_USE
table.
Acked-by: Ales Musil <amu...@redhat.com>
Acked-by: Mark Michelson <mmich...@redhat.com>
Signed-off-by: Lorenzo Bianconi <lorenzo.bianc...@redhat.com>
---
controller/lflow.c | 29 ++++++++++++++++++++++-------
controller/mac-cache.c | 3 ++-
tests/ovn.at | 8 +++++++-
3 files changed, 31 insertions(+), 9 deletions(-)
diff --git a/controller/lflow.c b/controller/lflow.c
index a98577a65..c39602fbd 100644
--- a/controller/lflow.c
+++ b/controller/lflow.c
@@ -1353,6 +1353,12 @@ consider_neighbor_flow(struct ovsdb_idl_index
*sbrec_port_binding_by_name,
struct match get_arp_match = MATCH_CATCHALL_INITIALIZER;
struct match lookup_arp_match = MATCH_CATCHALL_INITIALIZER;
struct match mb_cache_use_match = MATCH_CATCHALL_INITIALIZER;
+ struct match lookup_arp_for_stats_match = MATCH_CATCHALL_INITIALIZER;
+
+ match_set_dl_src(&lookup_arp_match, mac_addr);
+ match_set_metadata(&lookup_arp_match, htonll(pb->datapath->tunnel_key));
+ match_set_reg(&lookup_arp_match, MFF_LOG_INPORT - MFF_REG0,
+ pb->tunnel_key);
if (strchr(ip, '.')) {
ovs_be32 ip_addr;
@@ -1364,11 +1370,17 @@ consider_neighbor_flow(struct ovsdb_idl_index
*sbrec_port_binding_by_name,
match_set_reg(&get_arp_match, 0, ntohl(ip_addr));
- match_set_reg(&lookup_arp_match, 0, ntohl(ip_addr));
match_set_dl_type(&lookup_arp_match, htons(ETH_TYPE_ARP));
+ lookup_arp_for_stats_match = lookup_arp_match;
+
+ match_set_reg(&lookup_arp_match, 0, ntohl(ip_addr));
match_set_dl_type(&mb_cache_use_match, htons(ETH_TYPE_IP));
match_set_nw_src(&mb_cache_use_match, ip_addr);
+
+ match_set_arp_opcode_masked(&lookup_arp_for_stats_match, 2, 0xff);
+ match_set_arp_spa_masked(&lookup_arp_for_stats_match, ip_addr,
+ htonl(0xffffffff));
} else {
struct in6_addr ip6;
if (!ipv6_parse(ip, &ip6)) {
@@ -1380,22 +1392,23 @@ consider_neighbor_flow(struct ovsdb_idl_index
*sbrec_port_binding_by_name,
memcpy(&value, &ip6, sizeof(value));
match_set_xxreg(&get_arp_match, 0, ntoh128(value));
- match_set_xxreg(&lookup_arp_match, 0, ntoh128(value));
match_set_dl_type(&lookup_arp_match, htons(ETH_TYPE_IPV6));
match_set_nw_proto(&lookup_arp_match, 58);
match_set_icmp_code(&lookup_arp_match, 0);
+ lookup_arp_for_stats_match = lookup_arp_match;
+
+ match_set_xxreg(&lookup_arp_match, 0, ntoh128(value));
match_set_dl_type(&mb_cache_use_match, htons(ETH_TYPE_IPV6));
match_set_ipv6_src(&mb_cache_use_match, &ip6);
+
+ match_set_icmp_type(&lookup_arp_for_stats_match, 136);
+ match_set_nd_target(&lookup_arp_for_stats_match, &ip6);
}
match_set_metadata(&get_arp_match, htonll(pb->datapath->tunnel_key));
match_set_reg(&get_arp_match, MFF_LOG_OUTPORT - MFF_REG0, pb->tunnel_key);
- match_set_metadata(&lookup_arp_match, htonll(pb->datapath->tunnel_key));
- match_set_reg(&lookup_arp_match, MFF_LOG_INPORT - MFF_REG0,
- pb->tunnel_key);
-
match_set_dl_src(&mb_cache_use_match, mac_addr);
match_set_reg(&mb_cache_use_match, MFF_LOG_INPORT - MFF_REG0,
pb->tunnel_key);
@@ -1415,7 +1428,6 @@ consider_neighbor_flow(struct ovsdb_idl_index
*sbrec_port_binding_by_name,
ofpbuf_clear(&ofpacts);
put_load(&value, sizeof value, MFF_LOG_FLAGS, MLF_LOOKUP_MAC_BIT, 1,
&ofpacts);
- match_set_dl_src(&lookup_arp_match, mac_addr);
ofctrl_add_flow(flow_table, OFTABLE_MAC_LOOKUP, priority,
b ? b->header_.uuid.parts[0] : smb->header_.uuid.parts[0],
&lookup_arp_match, &ofpacts,
@@ -1423,6 +1435,9 @@ consider_neighbor_flow(struct ovsdb_idl_index
*sbrec_port_binding_by_name,
if (b) {
ofpbuf_clear(&ofpacts);
+ ofctrl_add_flow(flow_table, OFTABLE_MAC_CACHE_USE, priority,
+ b->header_.uuid.parts[0], &lookup_arp_for_stats_match,
+ &ofpacts, &b->header_.uuid);
ofctrl_add_flow(flow_table, OFTABLE_MAC_CACHE_USE, priority,
b->header_.uuid.parts[0], &mb_cache_use_match,
&ofpacts, &b->header_.uuid);
diff --git a/controller/mac-cache.c b/controller/mac-cache.c
index d00b571f7..1a7a43bae 100644
--- a/controller/mac-cache.c
+++ b/controller/mac-cache.c
@@ -376,7 +376,8 @@ mac_binding_stats_process_flow_stats(struct ovs_list
*stats_list,
.mac = ofp_stats->match.flow.dl_src
};
- if (ofp_stats->match.flow.dl_type == htons(ETH_TYPE_IP)) {
+ if (ofp_stats->match.flow.dl_type == htons(ETH_TYPE_IP) ||
+ ofp_stats->match.flow.dl_type == htons(ETH_TYPE_ARP)) {
stats->data.mb.ip = in6_addr_mapped_ipv4(ofp_stats->match.flow.nw_src);
} else {
stats->data.mb.ip = ofp_stats->match.flow.ipv6_src;
diff --git a/tests/ovn.at b/tests/ovn.at
index a9f933822..de5034903 100644
--- a/tests/ovn.at
+++ b/tests/ovn.at
@@ -35145,7 +35145,11 @@ port_key_1=$(printf "0x%x" $(as hv1 fetch_column
port_binding tunnel_key logical
dp_key_2=$(printf "0x%x" $(as hv1 fetch_column datapath tunnel_key
external_ids:name=gw-2))
port_key_2=$(printf "0x%x" $(as hv1 fetch_column port_binding tunnel_key
logical_port=gw-2-public))
-table=" table=OFTABLE_MAC_CACHE_USE,
priority=100,ip,reg14=${port_key_1},metadata=${dp_key_1},dl_src=00:00:00:00:10:10,nw_src=192.168.10.10
actions=drop
+table=" table=OFTABLE_MAC_CACHE_USE,
priority=100,arp,reg14=${port_key_1},metadata=${dp_key_1},dl_src=00:00:00:00:10:10,arp_spa=192.168.10.10,arp_op=2
actions=drop
+ table=OFTABLE_MAC_CACHE_USE,
priority=100,arp,reg14=${port_key_1},metadata=${dp_key_1},dl_src=00:00:00:00:10:20,arp_spa=192.168.10.20,arp_op=2
actions=drop
+ table=OFTABLE_MAC_CACHE_USE,
priority=100,arp,reg14=${port_key_2},metadata=${dp_key_2},dl_src=00:00:00:00:10:10,arp_spa=192.168.10.10,arp_op=2
actions=drop
+ table=OFTABLE_MAC_CACHE_USE,
priority=100,arp,reg14=${port_key_2},metadata=${dp_key_2},dl_src=00:00:00:00:10:20,arp_spa=192.168.10.20,arp_op=2
actions=drop
+ table=OFTABLE_MAC_CACHE_USE,
priority=100,ip,reg14=${port_key_1},metadata=${dp_key_1},dl_src=00:00:00:00:10:10,nw_src=192.168.10.10
actions=drop
table=OFTABLE_MAC_CACHE_USE,
priority=100,ip,reg14=${port_key_1},metadata=${dp_key_1},dl_src=00:00:00:00:10:20,nw_src=192.168.10.20
actions=drop
table=OFTABLE_MAC_CACHE_USE,
priority=100,ip,reg14=${port_key_2},metadata=${dp_key_2},dl_src=00:00:00:00:10:10,nw_src=192.168.10.10
actions=drop
table=OFTABLE_MAC_CACHE_USE,
priority=100,ip,reg14=${port_key_2},metadata=${dp_key_2},dl_src=00:00:00:00:10:20,nw_src=192.168.10.20
actions=drop"
@@ -35193,6 +35197,8 @@ OVS_WAIT_UNTIL([
])
AT_CHECK_UNQUOTED([as hv1 ovs-ofctl dump-flows br-int
table=OFTABLE_MAC_CACHE_USE --no-stats | strip_cookie | sort], [0], [dnl
+ table=OFTABLE_MAC_CACHE_USE,
priority=100,arp,reg14=${port_key_2},metadata=${dp_key_2},dl_src=00:00:00:00:10:10,arp_spa=192.168.10.10,arp_op=2
actions=drop
+ table=OFTABLE_MAC_CACHE_USE,
priority=100,arp,reg14=${port_key_2},metadata=${dp_key_2},dl_src=00:00:00:00:10:20,arp_spa=192.168.10.20,arp_op=2
actions=drop
table=OFTABLE_MAC_CACHE_USE,
priority=100,ip,reg14=${port_key_2},metadata=${dp_key_2},dl_src=00:00:00:00:10:10,nw_src=192.168.10.10
actions=drop
table=OFTABLE_MAC_CACHE_USE,
priority=100,ip,reg14=${port_key_2},metadata=${dp_key_2},dl_src=00:00:00:00:10:20,nw_src=192.168.10.20
actions=drop
])
--
2.48.1
_______________________________________________
dev mailing list
d...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
