[ovs-build] Passed: ovsrobot/ovn#941 (series_199101 - 73dcaf0)

Travis CI builds at travis-ci.com
Wed Sep 2 16:39:02 UTC 2020


Build Update for ovsrobot/ovn
-------------------------------------

Build: #941
Status: Passed

Duration: 21 mins and 41 secs
Commit: 73dcaf0 (series_199101)
Author: Dumitru Ceara
Message: ovn-northd: Reduce number of flows generated for stateful ACLs.

Introduce two new stages in the logical switch pipeline:
- ls_in_acl_hint
- ls_out_acl_hint

Flows in these stages match on various combinations of conntrack flags to
determine how traffic might be processed in the ACL stage. Four possible
hints are set (there may be more than one set at the same time per packet):
- REGBIT_ACL_HINT_ALLOW_NEW: the packet might match an allow-related ACL in
  which case it will have to commit or update a connection to conntrack.
- REGBIT_ACL_HINT_ALLOW: the packet might match an allow-related ACL but
  the session already exists so no commit will be needed.
- REGBIT_ACL_HINT_DROP: the packet might match a drop/reject ACL but the
  session already exists so no commit will be needed.
- REGBIT_ACL_HINT_BLOCK: the packet might match a drop/reject ACL in which
  case it will have to commit or update a connection in conntrack.

These hints are used in the ls_in_acl/ls_out_acl tables and simplify the
match expressions for logical flows generated for ACLs reducing the number
of disjunctions in the match, therefore reducing the number of openflows
by a factor of 2 for allow-related ACLs and by a factor of 3 for drop/reject
ACLs.

Suggested-by: Han Zhou <hzhou at ovn.org>
Signed-off-by: Dumitru Ceara <dceara at redhat.com>
Signed-off-by: 0-day Robot <robot at bytheb.org>

View the changeset: https://github.com/ovsrobot/ovn/commit/73dcaf0ba370

View the full build log and details: https://travis-ci.com/github/ovsrobot/ovn/builds/182455460?utm_medium=notification&utm_source=email


--

You can unsubscribe from build emails from the ovsrobot/ovn repository going to https://travis-ci.com/account/preferences/unsubscribe?repository=9136199&utm_medium=notification&utm_source=email.
Or unsubscribe from *all* email updating your settings at https://travis-ci.com/account/preferences/unsubscribe?utm_medium=notification&utm_source=email.
Or configure specific recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-build/attachments/20200902/df27a26b/attachment-0001.html>


More information about the build mailing list