Hi Stephen, Yeah I think the current behavior with the “acl_del_list” was what we arrived to after the discussion on the list, but the macip ACL behavior never got updated. One can harmonize the behavior, though to ensure no pain it would take some time -
1) add a startup config variable (off by default) that would make the behavior for macip ACLs same as for policy ACLs (and implement this behavior) 2) <a release later> flip the default of this variable - the behavior is now the same, with easy fallback. 3) <another one or two more release later> remove the variable. Does this make sense ? --a > On 5 Nov 2018, at 16:06, Stephen Jones <[email protected]> wrote: > > VPP handles deleting ACL's and MACIP's differently. In the file > /vpp/src/plugins/acl/acl.c > > The function `acl_del_list` checks to see if the ACL being deleted is being > referenced by an interface and returns an error if it is. > > The function `macip_acl_del_list` will remove the MACIP and remove any > references to it. > > Should they be different in the way they handle being deleted? > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > > View/Reply Online (#11105): https://lists.fd.io/g/vpp-dev/message/11105 > Mute This Topic: https://lists.fd.io/mt/27860061/675608 > Group Owner: [email protected] > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [[email protected]] > -=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11111): https://lists.fd.io/g/vpp-dev/message/11111 Mute This Topic: https://lists.fd.io/mt/27860061/21656 Group Owner: [email protected] Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
