[ovs-git] [openvswitch/ovs] d770a8: ovn-northd: Don't deliver even broadcast packets t...

GitHub noreply at github.com
Fri Sep 11 20:49:03 UTC 2015


  Branch: refs/heads/master
  Home:   https://github.com/openvswitch/ovs
  Commit: d770a8305e16bda180249fcd9faa118e01ac2ab9
      https://github.com/openvswitch/ovs/commit/d770a8305e16bda180249fcd9faa118e01ac2ab9
  Author: Ben Pfaff <blp at nicira.com>
  Date:   2015-09-11 (Fri, 11 Sep 2015)

  Changed paths:
    M ovn/northd/ovn-northd.c

  Log Message:
  -----------
  ovn-northd: Don't deliver even broadcast packets to disabled logical ports.

Until now, the priority-100 flow for broadcast and multicast packets caused
such packets to be delivered to disabled logical ports.  This commit makes
ovn-northd add a priority-150 flow for each disabled logical port to
override that behavior.

Found by inspection.

Signed-off-by: Ben Pfaff <blp at nicira.com>
Acked-by: Justin Pettit <jpettit at nicira.com>


  Commit: 96af668a82016d17c6300f0cfad5cd156f850545
      https://github.com/openvswitch/ovs/commit/96af668a82016d17c6300f0cfad5cd156f850545
  Author: Ben Pfaff <blp at nicira.com>
  Date:   2015-09-11 (Fri, 11 Sep 2015)

  Changed paths:
    M ovn/northd/ovn-northd.c

  Log Message:
  -----------
  ovn-northd: Minor logical flow table optimizations.

There's no need to add a priority-0 "drop" flow, because OVN logical flow
tables always drop non-matching packets.

There's no need to add a "drop" flow for ingress port security on disabled
logical ports, because no other flow would allow those packets; it's
more efficient to omit the logical flow entirely.

Finally, there's no need to add disabled logical ports to the MC_UNKNOWN
multicast group, since packets won't be delivered to a disabled logical
port anyway.  (This is just an optimization; the packets were dropped in
the egress pipeline anyway.)

Found by inspection.

Signed-off-by: Ben Pfaff <blp at nicira.com>
Acked-by: Justin Pettit <jpettit at nicira.com>


Compare: https://github.com/openvswitch/ovs/compare/d824b5b77e3d...96af668a8201


More information about the git mailing list