[ovs-dev] Sync on PTAP, EXT-382 and NSH: Mon 2017-03-13, 17:00 CET

2017-03-06 Thread Jan Scheurich
Hi, Please be invited to our next sync meeting: Mon 13 March, 5pm CET. Agenda: * Review/Discussion of current patch packages, e.g. o Display format for packet_type field in match and flow keys o packet_type in struct dp_packet or struct pkt_metadata * Status/Planning of

[ovs-dev] [PATCH v4] ovn: Modify the DHCPv4 router option to optional

2017-03-06 Thread Guoshuai Li
Co-authored-by: Dong Jun Signed-off-by: Guoshuai Li Acked-by: Numan Siddique --- NEWS| 2 ++ ovn/northd/ovn-northd.c | 10 +++--- ovn/ovn-nb.xml | 16 3 files changed, 13 insertions(+),

[ovs-dev] [PATCH V2] ovn: Modify the DHCPV4 router option to optional

2017-03-06 Thread Guoshuai Li
Co-authored-by: Dong Jun Signed-off-by: Guoshuai Li --- NEWS| 2 ++ ovn/northd/ovn-northd.c | 10 +++--- ovn/ovn-nb.xml | 3 ++- 3 files changed, 7 insertions(+), 8 deletions(-) diff --git a/NEWS b/NEWS index

[ovs-dev] [PATCH v2 2/2] ovn-northd ipam: Support IPv6 dynamic assignment

2017-03-06 Thread nusiddiq
From: Numan Siddique OVN will generate the IPv6 address for a logical port if requested using the IPv6 prefix and the MAC address (as IEEE EUI64 identifier). To generate the IPv6 address, CMS should define the IPv6 prefix in the 'Logical_switch.other_config:ipv6_prefix'

[ovs-dev] [PATCH v2 1/2] ovn-northd ipam: Support 'exclude_ips' option

2017-03-06 Thread nusiddiq
From: Numan Siddique If the CMS wants to make use of ovn ipam it can now provide a list of IPv4 addresses and a range of IPv4 addresses which will be excluded from the dynamic address assignment. To support this, a new option 'exclude_ips' is added in the

[ovs-dev] [PATCH v2 0/2] ovn-northd: IPAM changes

2017-03-06 Thread nusiddiq
From: Numan Siddique This patch series supports 'exclude_ip's option and IPv6 dynamic assignment. v2 -> v1 * P2 to support IPv6 dynamic assigment is added. Numan Siddique (2): ovn-northd ipam: Support 'exclude_ips' option ovn-northd ipam: Support IPv6

[ovs-dev] [PATCH v3 16/22] odp: Support conntrack orig tuple key.

2017-03-06 Thread Jarno Rajahalme
Userspace support for datapath original direction conntrack tuple. Signed-off-by: Jarno Rajahalme --- build-aux/extract-ofp-fields| 3 + include/openvswitch/flow.h | 15 ++- include/openvswitch/match.h | 16 +++ include/openvswitch/meta-flow.h | 136

[ovs-dev] [PATCH v3 22/22] tests: Add an FTP test without conntrack.

2017-03-06 Thread Jarno Rajahalme
If FTP tests with conntrack fail, it is informative to know if the problem is with the FTP client and/or server, or with conntrack itself. Signed-off-by: Jarno Rajahalme Acked-by: Joe Stringer --- tests/system-traffic.at | 29 + 1 file

[ovs-dev] [PATCH v3 20/22] conntrack: Force commit.

2017-03-06 Thread Jarno Rajahalme
Userspace support for force commit. Signed-off-by: Jarno Rajahalme Acked-by: Joe Stringer --- include/openvswitch/ofp-actions.h | 7 +++- lib/conntrack.c | 16 ++-- lib/conntrack.h | 2 +- lib/dpif-netdev.c

[ovs-dev] [PATCH v3 17/22] actions: Add resubmit with conntrack tuple.

2017-03-06 Thread Jarno Rajahalme
Add resubmit option to use the conntrack original direction tuple swapped with the corresponding packet header fields during the lookup. This could allow the same ACL table be used for admitting return and/or related traffic as is used for admitting the original direction traffic. Signed-off-by:

[ovs-dev] [PATCH v3 21/22] datapath: Add a missing comment.

2017-03-06 Thread Jarno Rajahalme
Make openvswitch.h better match upstream by adding a missing comment. Signed-off-by: Jarno Rajahalme --- datapath/linux/compat/include/linux/openvswitch.h | 2 ++ 1 file changed, 2 insertions(+) diff --git a/datapath/linux/compat/include/linux/openvswitch.h

[ovs-dev] [PATCH v3 19/22] datapath: Add force commit.

2017-03-06 Thread Jarno Rajahalme
Upstream patch: commit dd41d33f0b033885211a5d6f3ee19e73238aa9ee Author: Jarno Rajahalme Date: Thu Feb 9 11:22:00 2017 -0800 openvswitch: Add force commit. Stateful network admission policy may allow connections to one direction and reject connections

[ovs-dev] [PATCH v3 18/22] compat: nf_ct_delete compat.

2017-03-06 Thread Jarno Rajahalme
Upstream commit: commit f330a7fdbe1611104622faff7e614a246a7d20f0 Author: Florian Westphal Date: Thu Aug 25 15:33:31 2016 +0200 netfilter: conntrack: get rid of conntrack timer With stats enabled this eats 80 bytes on x86_64 per nf_conn entry, as Eric

[ovs-dev] [PATCH v3 13/22] datapath: Add original direction conntrack tuple to sw_flow_key.

2017-03-06 Thread Jarno Rajahalme
Upstream commit: commit 9dd7f8907c3705dc7a7a375d1c6e30b06e6daffc Author: Jarno Rajahalme Date: Thu Feb 9 11:21:59 2017 -0800 openvswitch: Add original direction conntrack tuple to sw_flow_key. Add the fields of the conntrack original direction 5-tuple to

[ovs-dev] [PATCH v3 15/22] ofp-util: Ignore unknown fields in ofputil_decode_packet_in2().

2017-03-06 Thread Jarno Rajahalme
The decoder of packet_in messages should not fail on encountering unknown metadata fields. This allows the switch to add new features without breaking controllers. The controllers should, however, copy the metadata fields from the packet_int to packet_out so that the switch gets back the full

[ovs-dev] [PATCH v3 14/22] flow: Make room after ct_state.

2017-03-06 Thread Jarno Rajahalme
'ct_state' currently only needs 8 bits, so we can make room for a new CT field introduced in the next patch. Signed-off-by: Jarno Rajahalme --- include/openvswitch/flow.h | 3 ++- lib/flow.c | 3 ++- lib/match.c| 8 lib/packets.h

[ovs-dev] [PATCH v3 12/22] lib: Check match and action prerequisities with 'match'.

2017-03-06 Thread Jarno Rajahalme
Supply the match mask to prerequisities checking when available. This allows checking for zero-valued matches. Non-zero valued matches imply the presense of corresponding mask bits, but for zero valued matches we must explicitly check the mask, too. This is required now only for conntrack

[ovs-dev] [PATCH v3 11/22] netlink: Simplify nl_msg_start_nested().

2017-03-06 Thread Jarno Rajahalme
Since there is no data to copy nl_msg_put_unspec_uninit() may be used directly, rather than via nl_msg_put_unspec(). Signed-off-by: Jarno Rajahalme Acked-by: Joe Stringer --- lib/netlink.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[ovs-dev] [PATCH v3 09/22] datapath: Refactor labels initialization.

2017-03-06 Thread Jarno Rajahalme
Upstream commit: Refactoring conntrack labels initialization makes changes in later patches easier to review. Signed-off-by: Jarno Rajahalme Acked-by: Pravin B Shelar Acked-by: Joe Stringer Signed-off-by: David S. Miller

[ovs-dev] [PATCH v3 10/22] datapath: Inherit master's labels.

2017-03-06 Thread Jarno Rajahalme
Upstream commit: commit 09aa98ad496d6b11a698b258bc64d7f64c55d682 Author: Jarno Rajahalme Date: Thu Feb 9 11:21:58 2017 -0800 openvswitch: Inherit master's labels. We avoid calling into nf_conntrack_in() for expected connections, as that would remove the

[ovs-dev] [PATCH v3 08/22] datapath: Simplify labels length logic.

2017-03-06 Thread Jarno Rajahalme
Upstream commit: commit b87cec3814ccc7f6afb0a1378ee7e5110d07cdd3 Author: Jarno Rajahalme Date: Thu Feb 9 11:21:56 2017 -0800 openvswitch: Simplify labels length logic. Since 23014011ba42 ("netfilter: conntrack: support a fixed size of 128 distinct

[ovs-dev] [PATCH v3 07/22] datapath: Unionize ovs_key_ct_label with a u32 array.

2017-03-06 Thread Jarno Rajahalme
Upstream commit: commit cb80d58fae76d8ea93555149b2b16e19b89a1f4f Author: Jarno Rajahalme Date: Thu Feb 9 11:21:55 2017 -0800 openvswitch: Unionize ovs_key_ct_label with a u32 array. Make the array of labels in struct ovs_key_ct_label an union, adding a

[ovs-dev] [PATCH v3 05/22] datapath: Use inverted tuple in ovs_ct_find_existing() if NATted.

2017-03-06 Thread Jarno Rajahalme
Upstream commit: commit 9ff464db50e437eef131f719cc2e9902eea9c607 Author: Jarno Rajahalme Date: Thu Feb 9 11:21:53 2017 -0800 openvswitch: Use inverted tuple in ovs_ct_find_existing() if NATted. The conntrack lookup for existing connections fails to invert

[ovs-dev] [PATCH v3 02/22] datapath: add and use skb_nfct helper

2017-03-06 Thread Jarno Rajahalme
From: Florian Westphal Upstream commit: commit cb9c68363efb6d1f950ec55fb06e031ee70db5fc Author: Florian Westphal Date: Mon Jan 23 18:21:56 2017 +0100 skbuff: add and use skb_nfct helper Followup patch renames skb->nfct and changes its

[ovs-dev] [PATCH v3 01/22] datapath: Allow compiling against Linux 4.10

2017-03-06 Thread Jarno Rajahalme
OVS in-tree datapath compiles against Linux 4.10 kernel, so allow it. Signed-off-by: Jarno Rajahalme Acked-by: Joe Stringer --- acinclude.m4 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/acinclude.m4 b/acinclude.m4 index 19cffe0..5ffb5a7

[ovs-dev] [PATCH v3 00/22] Conntrack enhancements

2017-03-06 Thread Jarno Rajahalme
This patch set backports the recent upstream conntrack fixes and new features to the OVS tree kernel module, and adds the OVS userspace support. Patch 1/22 is an unrelated datapath backport, and patch 22/22 allows compiling against Linux 4.10. Each new feature is introduced in two different

[ovs-dev] [PATCH] ofproto-dpif-xlate: fix build.

2017-03-06 Thread Jarno Rajahalme
Recent patch 27d931da3ac ("ofproto-dpif: Enhance execute_controller_action().") missed some new action enumerations added previously. Fixes: 27d931da3ac ("ofproto-dpif: Enhance execute_controller_action().") Signed-off-by: Jarno Rajahalme --- ofproto/ofproto-dpif-xlate.c | 2 ++

Re: [ovs-dev] [PATCH 1/3] ofproto-dpif: Enhance execute_controller_action().

2017-03-06 Thread Andy Zhou
On Thu, Mar 2, 2017 at 2:59 PM, Jarno Rajahalme wrote: > With the notes below: > > Acked-by: Jarno Rajahalme Thanks for the review, I have pushed all patches in the series with most comments applied as suggested. > >> On Feb 16, 2017, at 5:11 PM, Andy Zhou

Re: [ovs-dev] [PATCH v2] conntrack: Fix checks for TCP, UDP, and IPv6 header sizes.

2017-03-06 Thread Ben Pfaff
On Mon, Mar 06, 2017 at 11:00:05AM -0800, Daniele Di Proietto wrote: > 2017-03-03 21:18 GMT-08:00 Ben Pfaff : > > Otherwise a malformed packet could cause a read up to about 40 bytes past > > the end of the packet. The packet would still likely be dropped because > > of checksum

Re: [ovs-dev] [PATCH v3] packaging: Make Fedora spec file CentOS compatible

2017-03-06 Thread Leif Madsen
This patch v3 is ready for review. I've tested it on various distribution versions ( https://copr.fedorainfracloud.org/coprs/leifmadsen/ovs-master/build/522596/) and am satisfied I've accounted for all of the feedback previously received including: * reverting changes to Vagrantfile because

[ovs-dev] [PATCH v3] packaging: Make Fedora spec file CentOS compatible

2017-03-06 Thread Leif Madsen
On CentOS, the package names aren't prefixed with python2, but rather are prefixed with simply python. This change addresses that and fixes up some documentation that was outdated, and updates the Vagrantfile to use the proper spec file and package names. Signed-off-by: Leif Madsen

[ovs-dev] [PATCH v2] packaging: Make Fedora spec file CentOS compatible

2017-03-06 Thread Leif Madsen
On CentOS, the package names aren't prefixed with python2, but rather are prefixed with simply python. This change addresses that and fixes up some documentation that was outdated, and updates the Vagrantfile to use the proper spec file and package names. Signed-off-by: Leif Madsen

Re: [ovs-dev] [PATCH] ofproto-dpif-xlate: Allow sending BFD messages even when RSTP port is not forwarding

2017-03-06 Thread Joe Stringer
On 20 February 2017 at 04:27, Mika Väisänen wrote: > Interworking of BFD and RSTP does not work, as currently BFD messages are > dropped if RSTP port is not in forwarding mode. To correct this problem, > an extra check is added to allow BFD messages to be sent even when >

Re: [ovs-dev] [PATCH v2] dpdk: Redirect DPDK log to OVS logging subsystem.

2017-03-06 Thread Aaron Conole
Ilya Maximets writes: > This should be helpful for have all the logs in one place. > 'ovs-appctl vlog' commands for 'dpdk' module can be used > to configure the log level. Lower bound for DPDK logging > (--log-level) still can be passed through 'dpdk-extra' field. > >

Re: [ovs-dev] [PATCH v2] conntrack: Fix checks for TCP, UDP, and IPv6 header sizes.

2017-03-06 Thread Daniele Di Proietto
2017-03-03 21:18 GMT-08:00 Ben Pfaff : > Otherwise a malformed packet could cause a read up to about 40 bytes past > the end of the packet. The packet would still likely be dropped because > of checksum verification. > > Reported-by: Bhargava Shastry

Re: [ovs-dev] [PATCH] FAQ: Add another question about do-nothing flows.

2017-03-06 Thread Ben Pfaff
On Mon, Mar 06, 2017 at 09:53:02AM -0800, Guru Shetty wrote: > On 6 March 2017 at 08:11, Ben Pfaff wrote: > > > Signed-off-by: Ben Pfaff > > > > Acked-by: Gurucharan Shetty Thanks, applied to master. ___

Re: [ovs-dev] [PATCH] FAQ: Add another question about do-nothing flows.

2017-03-06 Thread Guru Shetty
On 6 March 2017 at 08:11, Ben Pfaff wrote: > Signed-off-by: Ben Pfaff > Acked-by: Gurucharan Shetty > --- > Documentation/faq/openflow.rst | 21 + > 1 file changed, 21 insertions(+) > > diff --git a/Documentation/faq/openflow.rst

Re: [ovs-dev] [PATCH v2] datapath-windows: Fix GENEVE option header

2017-03-06 Thread Guru Shetty
On 6 March 2017 at 08:16, Alin Serdean wrote: > From: Alin Serdean > > The GENEVE option header is defined in big endian, however we support only > little endian on Windows at the moment. > > This patch changes the GENEVE option

[ovs-dev] [PATCH v2] windows: Fix uninitialized variable in netlink-socket

2017-03-06 Thread Alin Serdean
From: Alin Serdean The variable `request_nlmsg` was used without being initialized. This patch assigns a value to it before being used. Found by inspection. Signed-off-by: Alin Gabriel Serdean --- v2: Change commit title ---

[ovs-dev] [PATCH v2] datapath-windows: Fix GENEVE option header

2017-03-06 Thread Alin Serdean
From: Alin Serdean The GENEVE option header is defined in big endian, however we support only little endian on Windows at the moment. This patch changes the GENEVE option header into little endian. Found while testing. Signed-off-by: Alin Gabriel Serdean

Re: [ovs-dev] [PATCH] ovn: Modify the DHCP router option to optional

2017-03-06 Thread Ben Pfaff
On Mon, Mar 06, 2017 at 02:55:20PM +0800, Guoshuai Li wrote: > Co-authored-by: Dong Jun > Signed-off-by: Guoshuai Li Please update the documentation as well, and add an item to NEWS mentioning the change. Thanks, Ben.

[ovs-dev] [PATCH] FAQ: Add another question about do-nothing flows.

2017-03-06 Thread Ben Pfaff
Signed-off-by: Ben Pfaff --- Documentation/faq/openflow.rst | 21 + 1 file changed, 21 insertions(+) diff --git a/Documentation/faq/openflow.rst b/Documentation/faq/openflow.rst index 529e3f50aadf..376e64eb4482 100644 --- a/Documentation/faq/openflow.rst +++

[ovs-dev] Cómo Vender con Éxito + 11 temas

2017-03-06 Thread Ventas - Plan Integral -descuentos de mes
Plan Integral Indispensable para los Responsables de Ventas 12 conferencias en cada Plan, pregrabadas, inéditas, para capacitar a todo su personal. Al adquirir el Plan de Capacitación, usted obtiene acceso a 12 temas enfocados al área de Ventas; temas especializados que han sido cuidadosamente

Re: [ovs-dev] [PATCH] fedora: Add python3-openvswitch split package

2017-03-06 Thread Leif Madsen
On Fri, Mar 3, 2017 at 6:55 AM, Flavio Leitner wrote: > Perhaps you could check if %{python3_pkgversion} or %{__python3} is > defined instead, so in case someone install python3 support on older > distros the spec will do the right thing. > I'm following some python2 to python3

[ovs-dev] WordPress Design, Web Design & Web Development

2017-03-06 Thread Monika Sharma
Hello, Hope you are well!! I am Monika and I work with experienced IT professionals who are into: * Website Design & Development * Graphic Design & Flash * Logo Design * Brochure Design * Website Templates * Website Maintenance * Mobile Apps Development (Android )

Re: [ovs-dev] dpif-netdev: Assign ports to pmds on non-local numa node.

2017-03-06 Thread Jan Scheurich
I support Billy's point here. There are a number of constraints/trade-offs that can lead to an OVS deployments in OpenStack with e.g. a single PMD. Without this change, a dual socket system is effectively rendered use-less. At least one socket is lost for running VMs. BR, Jan > -Original