Hi all,
I'm using OVS-DPDK of version 2.17.1 .
** 1. This is my vxlan topology **
```
### HOST-1, use ovs-dpdk
HOST-1
--
br-int
|
- (br-int)
| |
vxlan1 pf0hpf
br-phy(192.168.10.20)
|
(br-phy)
|
p0
[root@localhost ~]# ovs-vsct
Ok, no problem
Simon Horman 于2023年6月8日 周四22:51写道:
> On Thu, Jun 08, 2023 at 10:32:45PM +0800, Peng He wrote:
> > This patch has a bug, it needs 2 patches to realize the purpose in fact.
> I
> > can rebase if needed
>
> I am unclear on any need.
> Perhaps it's best to drop this for now.
> And revi
On 6/8/23 3:52 PM, Paolo Valerio wrote:
Brian Haley writes:
Hi Paolo,
On 4/19/23 2:40 PM, Paolo Valerio wrote:
During the creation of a new connection, there's a chance both key and
rev_key end up having the same hash. This is more common in the case
of all-zero snat with no collisions. In t
Thanks for the rebase Ales. I pushed the series to main.
On 6/8/23 03:29, Ales Musil wrote:
Add FDB mechanism that is very similar to
already existing MAC binding aging mechanism.
There are two new config options to achieve that
"fdb_age_threshold" that si configurable per
logical switch and "f
In theory, this idea is great. By removing the recheck, our CI will
potentially turn red more often, resulting in us investigating our tests
to resolve what makes them flaky. Eventually, we will resolve all of the
flakes and CI will be green. From that point on, any time the CI turns
red, it wi
Brian Haley writes:
> Hi Paolo,
>
> On 4/19/23 2:40 PM, Paolo Valerio wrote:
>> During the creation of a new connection, there's a chance both key and
>> rev_key end up having the same hash. This is more common in the case
>> of all-zero snat with no collisions. In that case, once the
>> connecti
The signal_fds pipe and wevent are a mechanism to wake up the process
after it received a signal and stored the number for the future
processing. They are not intended for inter-process communication.
However, in the current code, descriptors are not closed on fork().
The main scenario where we u
On 6/8/23 17:20, Ales Musil wrote:
> Use the backtrace functions that is provided by libc,
> this allows us to get backtrace that is independent of
> the current memory map of the process. Which in turn can
> be used for debugging/tracing purpose. The backtrace
> is not 100% accurate due to various
Thank you all for your work! It's appreciated.
Il giorno gio, 08/06/2023 alle 00.00 +0200, Ilya Maximets ha scritto:
> On 6/7/23 10:24, David Marchand wrote:
> > Some venerable AMD processors do not support querying extended features
> > (EAX=7) with cpuid.
> > In this case, it is not a programmat
Subject: How to upgrade firmware for the Ruckus ICX7150 Campus layer 3
network switch
Author: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL)
Country: Singapore
Date of upgrading firmware: 8 Jun 2023 Thursday
Reference guide 1: copy tftp flash
Link:
https://docs.ruckuswireless.com/fast
On Thu, Jun 8, 2023 at 2:04 AM Han Zhou wrote:
>
> On Wed, Jun 7, 2023 at 12:47 PM Mark Michelson wrote:
> >
> > The current state of development in OVN has resulted in many discussions
> > happening about how things should change. The main points of the
> > discussions have been:
> >
> > * Recen
Use the backtrace functions that is provided by libc,
this allows us to get backtrace that is independent of
the current memory map of the process. Which in turn can
be used for debugging/tracing purpose. The backtrace
is not 100% accurate due to various optimizations, most
notably "-fomit-frame-po
On Thu, Jun 8, 2023 at 3:20 PM Ilya Maximets wrote:
> On 5/30/23 09:34, Ales Musil wrote:
> > Use the backtrace functions that is provided by libc,
> > this allows us to get backtrace that is independent of
> > the current memory map of the process. Which in turn can
> > be used for debugging/tra
On Thu, Jun 08, 2023 at 10:32:45PM +0800, Peng He wrote:
> This patch has a bug, it needs 2 patches to realize the purpose in fact. I
> can rebase if needed
I am unclear on any need.
Perhaps it's best to drop this for now.
And revisit if the need arises.
___
On Mon, Jun 05, 2023 at 03:39:02PM +0200, Eelco Chaudron wrote:
> Make the read of the current seq->value atomic, i.e., not needing to
> acquire the global mutex when reading it. On 64-bit systems, this
> incurs no overhead, and it will avoid the mutex and potentially
> a system call.
>
> For incr
On Sat, Apr 06, 2019 at 01:59:13PM +, ? ? wrote:
> When we configured bond that use recirc and configure mirror, we
> observed that mirror destination has duplicated outputs. This is
> because bond's frozen_state is not updated to reflect the mirror
> already composed the output, and when the
On Wed, Jun 07, 2023 at 12:21:08PM +0200, David Marchand wrote:
> Hello,
>
> On Tue, Jun 6, 2023 at 7:10 AM Eli Britstein wrote:
> > >> >
> > >> > Vport's offloads are done on the tracked orig-in-port, but the flow
> > >> > itself is associated in the vport's map.
> > >> >
> > >> > Removing the p
Thanks for the review, will send a v2
Eelco Chaudron 于2023年6月8日 周四21:48写道:
>
>
> On 2 Jun 2023, at 20:42, Peng He wrote:
>
> > OVS allows overlapping megaflows, as long as the actions of these
> > megaflows are equal. However, the current implementation of action
> > modification relies on flow_l
Hi,
I’ve sent the first part (OF probing disable) -
https://patchwork.ozlabs.org/project/ovn/patch/20230608141555.1339905-1-odiv...@gmail.com/
Regarding configuration on the OVS side, I see it’s not working like I wrote
before, I’ve deceived myself :)
I’ve written some code in ovn-controller, w
If ipf ctx is needed this one is needed too, if not, you can drop the patch
Simon Horman 于2023年6月8日 周四22:16写道:
> On Thu, Mar 10, 2022 at 04:41:15AM +, Peng He wrote:
> > the flow->in_port value is previously ignored. We normally use
> > the the md->in_port of the first packet in the batch to
This patch has a bug, it needs 2 patches to realize the purpose in fact. I
can rebase if needed
Simon Horman 于2023年6月8日 周四22:19写道:
> On Sun, May 17, 2020 at 01:08:47PM +0800, hepeng.0320 wrote:
> > From: hepeng
> >
> > if the tunnel is specified as "remote_ip=flow", we can try to generate a
> m
On Wed, Jun 07, 2023 at 09:33:33AM +0300, Vladislav Odintsov wrote:
> It is possible to parametrize ovs-ctl script to start ovsdb-server with
> DB_SCHEME other than Open_vSwitch. This scheme may not have currently
> required table "SSL" with "key", "cert" and "cacert" columns.
>
> This patch adds
On Wed, Jun 07, 2023 at 09:33:32AM +0300, Vladislav Odintsov wrote:
> Default is yes (current behavior). This means that after start process
> will be run in background. When "no" is given, process is run in
> foreground with `exec` call, which replaces current process (ovs-ctl) with
> wanted ovs
On Wed, Jun 07, 2023 at 03:08:32PM +0200, Ilya Maximets wrote:
> Initial change set is preserved for as long as the monitor itself.
> However, if a new client has a condition on a column that is not
> one of the monitored columns, this column will be added to the
> monitor via ovsdb_monitor_conditi
On Sun, May 17, 2020 at 01:08:47PM +0800, hepeng.0320 wrote:
> From: hepeng
>
> if the tunnel is specified as "remote_ip=flow", we can try to generate a
> megaflow
> which ignores all source address, such as source mac, source IP address
> in the outter header of the packet. This can reduce the
On Thu, Mar 10, 2022 at 04:41:15AM +, Peng He wrote:
> the flow->in_port value is previously ignored. We normally use
> the the md->in_port of the first packet in the batch to get the
> value. However, since some actions might need to be redo due to
> the fix of ipf issues, we might have an emp
OpenFlow connection is established over unix socket, which is a reliable
connection and doesn't require additional probing.
With this patch openflow probing in ovn-controller -> ovs-vswitchd
direction is disabled for all three connections:
- OF flows management connection,
- OF features negoti
Thanks, Dumitru!
> On 8 Jun 2023, at 16:31, Dumitru Ceara wrote:
>
> On 5/30/23 14:41, Vladislav Odintsov wrote:
>> Depending on the udp service, it can reply with some udp data.
>> In that case ovn-controller will warn with next message:
>>
>> pinctrl(ovn_pinctrl0)|WARN|handle service check: U
On Thu, Mar 10, 2022 at 01:55:30AM +, Peng He wrote:
> From: Peng He
>
> ipf_postprocess will emit packets into the datapath pipeline ignoring
> the conntrack context, this might casuse weird issues when a packet
> batch has less space to hold all the fragments belonging to single
> packet.
>
If we want to catch new failures faster we have a better chance if CI
doesn't auto-retry (once).
Signed-off-by: Dumitru Ceara
---
NOTE: Sending this as RFC to start the discussion with the community.
---
.ci/linux-build.sh | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.
On 2 Jun 2023, at 20:42, Peng He wrote:
> OVS allows overlapping megaflows, as long as the actions of these
> megaflows are equal. However, the current implementation of action
> modification relies on flow_lookup instead of ufid, this could result
> in looking up a wrong megaflow and make the u
On 6/7/23 17:34, Ihar Hrachyshka wrote:
> This is perfect now.
>
> Reviewed-By: Ihar Hrachyshka
>
Thanks, Ihar! I applied this to main and backported it to all stable
branches down to 22.09.
___
dev mailing list
d...@openvswitch.org
https://mail.ope
On 6/8/23 09:07, Ales Musil wrote:
> Skip GARP packet with link-local (ip6.dst == ff00::/8)
> address being advertised when "always_learn_from_arp_request=false",
> this should prevent huge grow of MAC Binding table. To keep the option
> consistent overwrite the previous MAC with LLA if it was
> al
On 5/30/23 14:41, Vladislav Odintsov wrote:
> Depending on the udp service, it can reply with some udp data.
> In that case ovn-controller will warn with next message:
>
> pinctrl(ovn_pinctrl0)|WARN|handle service check: Unsupported protocol - [11]
>
> This is not something abnormal, so it needs
On 5/30/23 11:54, Xavier Simonart wrote:
> When a port is removed from a logical switch, the ct-zone is
> flushed, then the ct-zone-id is removed from external_ids.
> This is done in two steps (ct-zone-id is removed when the transaction
> flushing the ct_zone is complete).
> ovn-nbctl --wait=hv syn
On 5/30/23 11:26, Xavier Simonart wrote:
> Fixes: 52cb9c3b41c2 ("ovn-controller: Fixed missing flows after interface
> deletion")
> Signed-off-by: Xavier Simonart
> ---
> tests/ovn.at | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/tests/ovn.at b/tests/ovn.at
> index 6f9fbbfd2..b2ac2e0
On 5/29/23 15:25, Ales Musil wrote:
> The "ovn mirroring" test wasn't waiting for the flows
> to be properly installed. That could lead to
> smaller number of packets being mirrored thus failing
> the test.
>
> Fixes: a88b62025a8d ("mirror: fix ovn mirror support with IPv6")
> Signed-off-by: Ales
On 5/29/23 15:25, Ales Musil wrote:
> The "Tiered ACLs" test was syncing on sb and in one
> case it wasn't syncing at all. That could lead to
> some packets passing/being dropped due to race
> between the northd creating the flows and controller
> installing them.
>
> Fixes: 119f14e05cb4 ("northd:
On 6/6/23 21:07, Mark Michelson wrote:
> For the series:
>
> Acked-by: Mark Michelson
>
> On 5/31/23 16:10, Ihar Hrachyshka wrote:
>> This will be used in a later patch to calculate tunneling overhead for
>> effective path MTU.
>>
>> Acked-by: Dumitru Ceara
>> Signed-off-by: Ihar Hrachyshka
>>
On 6/6/23 21:07, Mark Michelson wrote:
> For the entire series:
>
> Acked-by: Mark Michelson
>
> On 5/31/23 16:08, Ihar Hrachyshka wrote:
>> This will be used in a later patch to calculate tunneling overhead for
>> effective path MTU.
>>
>> Acked-by: Dumitru Ceara
>> Signed-off-by: Ihar Hrachys
On 6/6/23 21:07, Mark Michelson wrote:
> For the series:
>
> Acked-by: Mark Michelson
>
> On 5/31/23 16:04, Ihar Hrachyshka wrote:
>> This will be used in a later patch to calculate tunneling overhead for
>> effective path MTU.
>>
>> Acked-by: Dumitru Ceara
>> Signed-off-by: Ihar Hrachyshka
>>
On 5/30/23 09:34, Ales Musil wrote:
> Use the backtrace functions that is provided by libc,
> this allows us to get backtrace that is independent of
> the current memory map of the process. Which in turn can
> be used for debugging/tracing purpose. The backtrace
> is not 100% accurate due to variou
On 18 May 2023, at 22:08, Mike Pattrick wrote:
> Several xlate actions used in recursive translation currently store a
> large amount of information on the stack. This can result in handler
> threads quickly running out of stack space despite before
> xlate_resubmit_resource_check() is able to t
On 6/8/23 07:57, Han Zhou wrote:
> On Wed, Jun 7, 2023 at 2:05 PM Numan Siddique wrote:
>>
>> On Fri, Jun 2, 2023 at 12:12 AM Han Zhou wrote:
>>>
>>> Maintain a set of lsp names that are referenced in the column
>>> "ip_port_mappings" of load_balancer records (used for health check
>>> purpose),
Ack, I will try to see if I can get GH actions.
It would also be better to have everything integrated in one place.
I remember the discussion and the PR… I had some comments which never got
addressed.
Windows is pretty slow when starting processes ,especially if the builtin AV is
not disabled f
On 6/8/23 11:01, Alin Serdean wrote:
>
> Ack. I will try to see if I can address it by the end of the week.
>
> Thanks for clarifying the questions.
>
> Would GH actions be better than appveyor?
Functionally, I don't think they are that much different.
But GHA is better integrated into our CI,
Thank you for the patch!
—
Alin.
> On 2 Jun 2023, at 12:24, Ilya Maximets wrote:
>
> On 5/31/23 22:29, Alin Serdean wrote:
>> Acked-by: Alin Gabriel Serdean
>
> Thanks! I applied this one patch.
>
> Best regards, Ilya Maximets.
>
>>
>>>
On 31 May 2023, at 21:23, Ilya Maximets wrot
Ack. I will try to see if I can address it by the end of the week.
Thanks for clarifying the questions.
Would GH actions be better than appveyor?
—
Alin.
On 2 Jun 2023, at 12:25, Ilya Maximets wrote:
>
> On 6/1/23 13:50, Ilya Maximets wrote:
>>> On 5/31/23 23:05, Alin Serdean wrote:
>>>
>>
On 6/1/23 16:50, Mark Michelson wrote:
> Hi Lorenzo,
>
> THis looks good to me
>
> Acked-by: Mark Michelson
>
> On 5/29/23 16:27, Lorenzo Bianconi wrote:
>> In the current codebase for distributed gw router port use-case,
>> it is not possible to add a load balancer that redirects the traffic
>
On Wed, Jun 07, 2023 at 11:09:58AM +0200, Eelco Chaudron wrote:
...
> >> We moved the per cpu upcall counter allocation to the existing vport
> >> alloc and free functions to solve this.
> >>
> >> Fixes: 95637d91fefd ("net: openvswitch: release vport resources on
> >> failure")
> >> Fixes: 1933ea
Bleep bloop. Greetings Ales Musil, I am a robot and I have tried out your
patch.
Thanks for your contribution.
I encountered some error that I wasn't expecting. See the details below.
checkpatch:
WARNING: Line is 84 characters long (recommended limit is 79)
#299 FILE: ovn-nb.xml:174:
Add FDB aging mechanism that utilizes the
timestamp column in FDB table. When the timestamp
exceeds the threshold set for specified logical
switch it will be removed from DB.
The threshold is configurable per logical switch
via other_config "fdb_age_threshold" in seconds.
The default value is 0 wh
Add timestamp column which will store timestamp when the
FDB row is created or updated. This can be utilized by
FDB aging mechanism.
Signed-off-by: Ales Musil
Acked-by: Mark Michelson
---
v2: Rebase on top of current main.
---
controller/pinctrl.c | 23 ---
northd/ovn-northd
Rename the mac-binding-aging module to aging
to reflect that it will be used for more than single
aging mechanism. This is preparation for FDB aging
mechainsm.
Signed-off-by: Ales Musil
Acked-by: Mark Michelson
---
v2: Rebase on top of current main.
---
northd/{mac-binding-aging.c => aging.c} |
Some of the pieces for MAC binding aging can be reused,
in order to do that extract them to separate context struct
that holds everything that is not MAC binding specific.
This is preparation for FDB aging mechanism.
Signed-off-by: Ales Musil
Acked-by: Mark Michelson
---
v2: Rebase on top of cur
Add feature indication to every chassis about FDB
timestamp support. In case the northd and SB DB is
updated before ovn-controller, which would trigger
aging loop as the new row would be added with timestamp
being 0. That would trigger constant aging mechanism.
Signed-off-by: Ales Musil
Acked-by:
Add FDB mechanism that is very similar to
already existing MAC binding aging mechanism.
There are two new config options to achieve that
"fdb_age_threshold" that si configurable per
logical switch and "fdb_removal_limit" which
allows to specify bulk removal limit.
The feature is disabled by defau
On Tue, Jun 6, 2023 at 11:37 PM Ales Musil wrote:
>
> The incremental processing is broken for addresses
> that have mask which could "erase" portion of the address
> itself e.g. 10.16.0.47/4, after applying the mask with token
> parser the address becomes 0.0.0.0/4, which is fine for
> logical fl
Skip GARP packet with link-local (ip6.dst == ff00::/8)
address being advertised when "always_learn_from_arp_request=false",
this should prevent huge grow of MAC Binding table. To keep the option
consistent overwrite the previous MAC with LLA if it was
already stored in DB.
Reported-at: https://bug
59 matches
Mail list logo