On 23 August 2017 at 03:03, Rohith Basavaraja
<[email protected]> wrote:
> Hi,
>
>
>
> I see that if I have following rules, i.e not allow any new connections and
> allow only established and related flows,
>
>
>
> cookie=0x6900001, duration=2819.230s, table=244, n_packets=2, n_bytes=196,
> priority=50, ct_state=+new+trk,metadata=0x1a530000000000/0x1fffff0000000000
> actions=drop
>
> cookie=0x6900000, duration=15546.577s, table=244, n_packets=0, n_bytes=0,
> priority=62020,ct_state=-new-est+rel-inv+trk actions=resubmit(,220)
>
> cookie=0x6900000, duration=15546.552s, table=244, n_packets=3819,
> n_bytes=431050, priority=62020,ct_state=-new+est-rel-inv+trk
> actions=resubmit(,220)
>
>
>
> We are still seeing that new connections are getting allowed, we see this
> behavior/issue only OVS + DPDK and not in OVS kernel mode.
>
>
>
> Wanted to check if this issue is already reported elsewhere or it’s new
> issue.

I haven't heard any reports like this before; could you come up with a
minimal test case that exhibits this behaviour? It's hard to get a
good sense of what's going on without the full set of rules being hit.
_______________________________________________
discuss mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Reply via email to