[ovs-discuss] openvswitch: netlink: Flow actions may not be safe on all matching packets - MPLS packets hitting flood entry

Farhad Sunavala fsbiz at yahoo.com
Thu Jan 14 06:43:00 UTC 2016

I keep getting several of these messages in kern.log
Jan 10 19:27:42 controller-160kernel: [175640.463342] openvswitch: netlink: Flow actions may not be safe onall matching packets.

The packets being dropped are MPLS packets which need to be sent over a VXLAN tunnel.

Specifically, "unknown destination" MPLS packets matching the multicast flood entry shown below
cookie=0x8e9ca45d1a13c3ab, duration=12089.542s,table=22, n_packets=3724, n_bytes=364064, priority=1,dl_vlan=2actions=pop_vlan,set_field:0x203d->tun_id,output:2,output:4"

In addition, this only happens when there are atleast two tunnels through which the packets need to be flooded out.The problem does not happen if the flow entry is as follows
cookie=0x8e9ca45d1a13c3ab, duration=12089.542s, table=22, n_packets=3724, n_bytes=364064, priority=1,dl_vlan=2 actions=pop_vlan,set_field:0x203d->tun_id,output:2"

ovs_nla_copy_actions() is most probably returning an error.  Any pointers.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/ovs-discuss/attachments/20160114/e34461e4/attachment-0002.html>

More information about the discuss mailing list