<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Sep 23, 2020 at 7:51 AM Tony Liu <<a href="mailto:tonyliu0592@hotmail.com">tonyliu0592@hotmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">That MAC is also in table 19.<br>
==========================<br>
  table=19(ls_in_l2_lkup      ), priority=110  , match=(eth.dst == 1a:d2:77:6e:42:98), action=(handle_svc_check(inport);)<br>
==========================<br>
<br>
Thanks!<br>
Tony<br>
> -----Original Message-----<br>
> From: Tony Liu <<a href="mailto:tonyliu0592@hotmail.com" target="_blank" class="md-opjjpmhoiojifppkkcdabiobhakljdgm_doc">tonyliu0592@hotmail.com</a>><br>
> Sent: Tuesday, September 22, 2020 7:19 PM<br>
> To: ovs-discuss <<a href="mailto:ovs-discuss@openvswitch.org" target="_blank" class="md-opjjpmhoiojifppkkcdabiobhakljdgm_doc">ovs-discuss@openvswitch.org</a>><br>
> Subject: [ovn] MAC in table acl and lb<br>
> <br>
> Hi,<br>
> <br>
> When I look at a datapath ingress pipeline, =========================<br>
>   table=3 (ls_in_pre_acl      ), priority=110  , match=(eth.dst ==<br>
> 1a:d2:77:6e:42:98), action=(next;)<br>
>   table=3 (ls_in_pre_acl      ), priority=0    , match=(1),<br>
> action=(next;)<br>
>   table=4 (ls_in_pre_lb       ), priority=110  , match=(eth.dst ==<br>
> 1a:d2:77:6e:42:98), action=(next;)<br>
>   table=4 (ls_in_pre_lb       ), priority=110  , match=(nd || nd_rs ||<br>
> nd_ra || icmp4.type == 3 ||icmp6.type == 1 || (tcp && tcp.flags == 20)),<br>
> action=(next;)<br>
>   table=4 (ls_in_pre_lb       ), priority=0    , match=(1),<br>
> action=(next;)<br>
>   table=5 (ls_in_pre_stateful ), priority=100  , match=(reg0[0] == 1),<br>
> action=(ct_next;)<br>
>   table=5 (ls_in_pre_stateful ), priority=0    , match=(1),<br>
> action=(next;)<br>
>   table=6 (ls_in_acl          ), priority=34000, match=(eth.dst ==<br>
> 1a:d2:77:6e:42:98), action=(next;)<br>
>   table=6 (ls_in_acl          ), priority=0    , match=(1),<br>
> action=(next;)<br>
>   table=7 (ls_in_qos_mark     ), priority=0    , match=(1),<br>
> action=(next;)<br>
>   table=8 (ls_in_qos_meter    ), priority=0    , match=(1),<br>
> action=(next;)<br>
>   table=9 (ls_in_lb           ), priority=0    , match=(1),<br>
> action=(next;)<br>
> =========================<br>
> What's that MAC 1a:d2:77:6e:42:98? What's it for in acl and lb tables?<br>
> I can't find any port with that MAC.<br>
> This datapath is for a LS that is created from OpenStack.<br></blockquote><div><br></div><div><br></div><div>Hi Tony,</div><div><br></div><div>This mac is used for service monitoring. ovn-northd generates this mac. You can see this by running - ovn-nbctl list NB_Global.</div><div><br></div><div>Service monitoring is used by OVN octavia provider driver for health checks.</div><div><br></div><div>Look into the NB table - Load_Balancer_Health_Check and SB table - Service_Monitor in the man pages for more details.</div><div><br></div><div>You see the flows in acl and lb tables to basically skip the service monitor reply packets  from being sent to conntrack.</div><div>These packets will be sent to ovn-controller as packet-ins.</div><div><br></div><div>[1] - <a href="https://www.ovn.org/support/dist-docs/ovn-nb.5.html">https://www.ovn.org/support/dist-docs/ovn-nb.5.html</a></div><div>[2] - <a href="https://www.ovn.org/support/dist-docs/ovn-sb.5.html">https://www.ovn.org/support/dist-docs/ovn-sb.5.html</a></div><div><br></div><div>Thanks</div><div>Numan</div><div><br></div><div>Thanks</div><div>Numan</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
> <br>
> Thanks!<br>
> Tony<br>
<br>
_______________________________________________<br>
discuss mailing list<br>
<a href="mailto:discuss@openvswitch.org" target="_blank" class="md-opjjpmhoiojifppkkcdabiobhakljdgm_doc">discuss@openvswitch.org</a><br>
<a href="https://mail.openvswitch.org/mailman/listinfo/ovs-discuss" rel="noreferrer" target="_blank" class="md-opjjpmhoiojifppkkcdabiobhakljdgm_doc">https://mail.openvswitch.org/mailman/listinfo/ovs-discuss</a><br>
<br>
</blockquote></div></div>