[ovs-build] Passed: ovsrobot/ovn#1045 (series_203988 - 76383be)

Travis CI builds at travis-ci.com
Thu Sep 24 17:18:06 UTC 2020


Build Update for ovsrobot/ovn
-------------------------------------

Build: #1045
Status: Passed

Duration: 19 mins and 0 secs
Commit: 76383be (series_203988)
Author: Numan Siddique
Message: ovn-northd: Optimize logical flow generation for reject ACLs.

ovn-northd adds below lflows for a reject ACL with a match - M

match = (ip4 && tcp && 'M') action = tcp_reject{}
match = (ip6 && tcp && 'M') action = tcp_reject{}
match = (ip4 && 'M') action = icmp4{}
match = (ip6 && 'M') action = icmp6{}

This approach has a couple of problems:
   - ovn-controller can reject the lflows if there are invalid matches.
     Eg. If match 'M' is - 'ip4 && udp'.

   - In a large scale deployment, this could result in lot of invalid
     logical flows and increase the size of the SB DB.

This patch addresses this problem by providing an option to the CMS
to specify the l3 protocol and l4 protocol as hints. A new column
'options' is added to the ACL table with the options -
options:l3-protocol and options:l4-protocol.

ovn-northd will now generate only the required lflows for the reject
ACL. If no options are set, then it falls back to the default scenario.

Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1876990
Reported-by: Ilya Maximets <i.maximets at ovn.org>
Signed-off-by: Numan Siddique <numans at ovn.org>
Signed-off-by: 0-day Robot <robot at bytheb.org>

View the changeset: https://github.com/ovsrobot/ovn/commit/76383be754d0

View the full build log and details: https://travis-ci.com/github/ovsrobot/ovn/builds/186496556?utm_medium=notification&utm_source=email


--

You can unsubscribe from build emails from the ovsrobot/ovn repository going to https://travis-ci.com/account/preferences/unsubscribe?repository=9136199&utm_medium=notification&utm_source=email.
Or unsubscribe from *all* email updating your settings at https://travis-ci.com/account/preferences/unsubscribe?utm_medium=notification&utm_source=email.
Or configure specific recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-build/attachments/20200924/67cfd544/attachment.html>


More information about the build mailing list