[ovs-dev] [PATCH 0/3] Reintroduce conjunctive matches

Mark Michelson mmichels at redhat.com
Fri Oct 25 21:06:28 UTC 2019


Conjunctive matches are currently disabled in OVN. Use of constructs
such as port groups and address sets in ACLs can potentially result in
flows with identical matches being generated. These flows, when added to
OVS, result in unpredictable behavior.

This patch set aims to fix this by consolidating conjunctions with
identical matches to a single flow. In addition, this patch series
introduces behavior to limit the total number of conjunction flows
installed. This hopefully should result in less risk of reaching the
maximum number of resubmits during packet processing.

Mark Michelson (3):
  Revert conjunctive match removal patches.
  Combine conjunctions with identical matches into one flow.
  Limit the number of generated conjunctions.

 TODO.rst            |   10 -
 controller/lflow.c  |   16 +-
 controller/ofctrl.c |  142 +++++-
 controller/ofctrl.h |   12 +
 include/ovn/expr.h  |    2 +
 lib/expr.c          |   15 +-
 tests/ovn.at        | 1265 +++------------------------------------------------
 7 files changed, 233 insertions(+), 1229 deletions(-)

-- 
2.14.5



More information about the dev mailing list