[ovs-discuss] Learned flows lacking resubmit option

Ben Pfaff blp at nicira.com
Tue Nov 15 05:31:37 UTC 2011


On Tue, Nov 15, 2011 at 02:31:05PM +0900, Jari Sundell wrote:
> On Tue, Nov 15, 2011 at 2:08 PM, Ben Pfaff <blp at nicira.com> wrote:
> > On Tue, Nov 15, 2011 at 01:51:42PM +0900, Jari Sundell wrote:
> >> The new learn action seems to be lacking a way to add flows with the
> >> resubmit action, which would be useful when the routing happens after
> >> the flow is created. Is this a planned feature?
> >
> > It's not a planned feature.
> >
> > Can you give an example?
> 
> Basically I got a host with multiple virtual machines, and to keep the
> flow table sizes reasonable I've split up the filtering and routing
> into two parts; filtering what an instance is allowed to send, etc, in
> the first stage, then in the second stage do filtering what an
> instance is allowed to receive and sending to the right port.
> 
> So in order to avoid asking the controller for every single new
> connection made from the instance, the first stage needs to be able to
> add flows that can pass packets to the second stage table. If the
> requested feature is not available, I'll have to look into adding
> extra tables duplicating the second stage which instead saves the
> output port in the registry... Basically it'll get very messy.

Can't you just do
        learn(table=2, ...), resubmit(,2), resubmit(,3)
where table 2 is the learning table and table 3 is the second stage?



More information about the discuss mailing list