Re: [ovs-dev] conjunctive match in ovn

2017-10-12 Thread Wei Li
  table=4 (ls_out_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (outport == "372e3aa6-1041-435d-9536-8f1c9e49196b" && ip4 && ip4.src == $as_ip4_6a8f4283_ba60_4d1c_9dec_28d027eadef2 && tcp && tcp.dst >= 1 && tcp.dst

Re: [ovs-dev] conjunctive match in ovn

2017-10-12 Thread Ben Pfaff
On Thu, Oct 12, 2017 at 05:35:13PM +0800, Wei Li wrote: > Hello everyone > > I have some confused about "Crossproducting" in ovn-sb > > I create acl in ovn-sb like this > match   : "tcp.src == {1, 2} && tcp.dst == {1, > 2} && ip4.src == {1.1.1.1/32, 2.2.2.2/32} &&

[ovs-dev] conjunctive match in ovn

2017-10-12 Thread Wei Li
Hello everyone I have some confused about "Crossproducting" in ovn-sb I create acl in ovn-sb like this match   : "tcp.src == {1, 2} && tcp.dst == {1, 2} && ip4.src == {1.1.1.1/32, 2.2.2.2/32} && ip4.dst == {1.1.1.1/32, 2.2.2.2/32}" ovs-ofctl dump-flows  like this