[ovs-dev] conjunctive match in ovn

[Wei Li]

Hello everyone

I have some confused about "Crossproducting" in ovn-sb

I create acl in ovn-sb like this
match               : "tcp.src == {10000, 20000} && tcp.dst == {10000, 
20000} && ip4.src == {1.1.1.1/32, 2.2.2.2/32} && ip4.dst == {1.1.1.1/32, 
2.2.2.2/32}"

ovs-ofctl dump-flows  like this

cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=2.2.2.2,tp_src=20000,tp_dst=20000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=2.2.2.2,tp_src=10000,tp_dst=10000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=1.1.1.1,tp_src=10000,tp_dst=20000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=1.1.1.1,tp_src=10000,tp_dst=10000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=1.1.1.1,tp_src=10000,tp_dst=20000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=1.1.1.1,tp_src=20000,tp_dst=20000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=1.1.1.1,tp_src=20000,tp_dst=10000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=2.2.2.2,tp_src=10000,tp_dst=20000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=2.2.2.2,tp_src=20000,tp_dst=10000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=2.2.2.2,tp_src=10000,tp_dst=20000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=2.2.2.2,tp_src=20000,tp_dst=10000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=2.2.2.2,tp_src=10000,tp_dst=10000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=2.2.2.2,tp_src=20000,tp_dst=20000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=1.1.1.1,tp_src=20000,tp_dst=20000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=1.1.1.1,nw_dst=1.1.1.1,tp_src=20000,tp_dst=10000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)
  cookie=0x19db4271, duration=5.002s, table=44, n_packets=0, n_bytes=0, 
idle_age=5, 
priority=2002,tcp,metadata=0x5,nw_src=2.2.2.2,nw_dst=1.1.1.1,tp_src=10000,tp_dst=10000 
actions=load:0x1->NXM_NX_XXREG0[97],resubmit(,45)

Lot of flows!!!   It is not same as description in expr.h:203 which use 
conjunction match

so whick kind of match in ovn-sb will use conjunction match?