[ovs-git] [openvswitch/ovs] d770a8: ovn-northd: Don't deliver even broadcast packets t...
GitHub
noreply at github.com
Fri Sep 11 20:49:03 UTC 2015
Branch: refs/heads/master
Home: https://github.com/openvswitch/ovs
Commit: d770a8305e16bda180249fcd9faa118e01ac2ab9
https://github.com/openvswitch/ovs/commit/d770a8305e16bda180249fcd9faa118e01ac2ab9
Author: Ben Pfaff <blp at nicira.com>
Date: 2015-09-11 (Fri, 11 Sep 2015)
Changed paths:
M ovn/northd/ovn-northd.c
Log Message:
-----------
ovn-northd: Don't deliver even broadcast packets to disabled logical ports.
Until now, the priority-100 flow for broadcast and multicast packets caused
such packets to be delivered to disabled logical ports. This commit makes
ovn-northd add a priority-150 flow for each disabled logical port to
override that behavior.
Found by inspection.
Signed-off-by: Ben Pfaff <blp at nicira.com>
Acked-by: Justin Pettit <jpettit at nicira.com>
Commit: 96af668a82016d17c6300f0cfad5cd156f850545
https://github.com/openvswitch/ovs/commit/96af668a82016d17c6300f0cfad5cd156f850545
Author: Ben Pfaff <blp at nicira.com>
Date: 2015-09-11 (Fri, 11 Sep 2015)
Changed paths:
M ovn/northd/ovn-northd.c
Log Message:
-----------
ovn-northd: Minor logical flow table optimizations.
There's no need to add a priority-0 "drop" flow, because OVN logical flow
tables always drop non-matching packets.
There's no need to add a "drop" flow for ingress port security on disabled
logical ports, because no other flow would allow those packets; it's
more efficient to omit the logical flow entirely.
Finally, there's no need to add disabled logical ports to the MC_UNKNOWN
multicast group, since packets won't be delivered to a disabled logical
port anyway. (This is just an optimization; the packets were dropped in
the egress pipeline anyway.)
Found by inspection.
Signed-off-by: Ben Pfaff <blp at nicira.com>
Acked-by: Justin Pettit <jpettit at nicira.com>
Compare: https://github.com/openvswitch/ovs/compare/d824b5b77e3d...96af668a8201
More information about the git
mailing list