[ovs-dev] [L3 In-Band 4/9] secchan: Tighten in-band traffic always allowed into switch

Ben Pfaff blp at nicira.com
Tue Sep 1 00:16:44 UTC 2009


Justin Pettit <jpettit at nicira.com> writes:

> In-band control sets up a bunch of invisible flows that allow the switch
> and controller to communicate over OpenFlow.  The rules may have been a
> bit too permissive, since it allowed any traffic to reach the
> connection's interface.  This set of changes tries to tighten that to
> only OpenFlow traffic and ARPs.

Would you mind adding some text to the log that mentions briefly
the network topologies (etc.) that you tested or had in mind when
you wrote up this change?  I think that this is needed, otherwise
later we will have less chance of actually understanding what we
had in mind.




More information about the dev mailing list