On Fri, Dec 2, 2022 at 7:57 AM Francois via discuss <
[email protected]> wrote:

> Greetings
> We run ovs 2.17 on our stacks, and we use ovn through OVN-Kubernetes
>
> I notice that when tracing a flow that goes through an ovn
> loadbalancer, I get a "no live bucket" message, and ofproto/trace does
> not give the full trace of the packet:
>
> ovs-appctl ofproto/trace br-int
>
> in_port=27,dl_dst=0a:58:0a:e1:18:01,dl_src=0a:58:0a:e1:18:09,tcp,nw_src=10.225.24.9,nw_dst=10.224.0.1,nw_ttl=60,tcp_dst=443
> ..
> 19. ct_state=+new+trk,tcp,metadata=0x30,nw_dst=10.224.0.1,tp_dst=443,
> priority 120, cookie 0xb3a567e9
>     set_field:0/0x2000000000000000000000000->xxreg0
>     set_field:0xae000010000000000000000/0xffffffff0000000000000000->xxreg0
>     set_field:0x1bb00000000/0xffff00000000->xxreg0
>     group:399
>      -> no live bucket
>
> this group matches a select that I can get from the ovn-controller:
> # ovs-appctl -t /var/run/ovn/ovn-controller.8726.ctl group-table-list
> | grep 399\$
>
> type=select,selection_method=dp_hash,bucket=bucket_id=0,weight:100,actions=ct(nat(dst=
> 10.64.245.116:6443
> ),commit,table=20,zone=NXM_NX_REG13[0..15],exec(set_field:2/2->ct_mark)),bucket=bucket_id=1,weight:
> 100,actions=ct(nat(dst=10.64.245.20:6443
> ),commit,table=20,zone=NXM_NX_REG13[0..15],exec(set_field:2/2->ct_mark)),bucket=bucket_id=2,weight:100,actions=ct(nat(dst=
> 10.64.245.68:6443),commit,table=20,zone=N
> XM_NX_REG13[0..15],exec(set_field:2/2->ct_mark)): 399
>
> Would you know if there is a way to display the full trace when doing
> ofproto/trace?
>
> Cheers
> F
> _______________________________________________
> discuss mailing list
> [email protected]
> https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
>
>
Hi Francois,

in order to select the bucket you need to also specify dp_hash to any value
except zero. In your case something like:

ovs-appctl ofproto/trace br-int
dp_hash=1,in_port=27,dl_dst=0a:58:0a:e1:18:01,dl_src=0a:58:0a:e1:18:09,tcp,nw_src=10.225.24.9,nw_dst=10.224.0.1,nw_ttl=60,tcp_dst=443


That should help.

Kind regards,
Ales Musil.

-- 

Ales Musil

Senior Software Engineer - OVN Core

Red Hat EMEA <https://www.redhat.com>

[email protected]    IM: amusil
<https://red.ht/sig>
_______________________________________________
discuss mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Reply via email to