Hi Ilya Maximets,
> The rules look mostly fine. I think the main problem you have is priority.
> Default priority for OF rules (if not specified) is 32768, so your new rules
> with priority 50 are too low in a priority list and not getting hit.
I tried this again with the default flow at priority 50 and mine at 499 but I
still couldn't get the flow to hit.
However, I observed that if the source address is set to anything other than
`2403:400:31da:ffff::18:6`, which is an address that exists on the phy `br-phy`
interface, the lookup is a hit and the action taken.
Is there anything that prevents the address from being set to that of something
that is already configured on an interface?
For example,
$ ip addr
35: br-phy: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc fq_codel
state UNKNOWN group default qlen 1000
link/ether de:03:37:e2:1f:ef brd ff:ff:ff:ff:ff:ff
inet6 2403:400:31da:ffff::18:6/128 scope global
valid_lft forever preferred_lft forever
inet6 fe80::dc03:37ff:fee2:1fef/64 scope link
valid_lft forever preferred_lft forever
Set the source address to `2403:400:31da:ffff::18:5`. In the flow entry,
`set(ipv6(src=2403:400:31da:ffff::18:5))` is applied in actions.
===
$ /usr/bin/ovs-ofctl add-flow br-phy
"priority=499,ipv6,ipv6_dst=2403:400:31da:ffff::18:3,actions=set_field:2403:400:31da:ffff::18:5->ipv6_src,normal"
$ /usr/bin/ovs-appctl dpctl/dump-flows -m netdev@ovs-netdev | grep 192.168.1.33
ufid:acc4b3bc-4958-412d-90c2-9bc4b3fbfac7,
skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(dpdk-vm101),packet_type(ns=0,id=0),eth(src=52:54:00:3d:cd:0c/00:00:00:00:00:00,dst=00:00:00:00:00:01/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=100.87.18.60/0.0.0.0,dst=192.168.1.33/0.0.0.0,proto=1/0,tos=0/0x3,ttl=64/0,frag=no),icmp(type=8/0,code=0/0),
packets:407, bytes:39886, used:0.661s, dp:ovs,
actions:tnl_push(tnl_port(vxlan_sys_4789),header(size=70,type=4,eth(dst=90:0a:84:9e:95:70,src=de:03:37:e2:1f:ef,dl_type=0x86dd),ipv6(src=fe80::dc03:37ff:fee2:1fef,dst=2403:400:31da:ffff::18:3,label=0,proto=17,tclass=0x0,hlimit=64),udp(src=0,dst=4789,csum=0xffff),vxlan(flags=0x8000000,vni=0x1)),out_port(br-phy)),set(ipv6(src=2403:400:31da:ffff::18:5)),push_vlan(vid=304,pcp=0),exit_p0,
dp-extra-info:miniflow_bits(4,1)
===
Set the source address to `2403:400:31da:ffff::18:6`. This is a configured
address on `br-phy`. The `set(ipv6(src=<addr>))` part is no longer applied.
===
$ /usr/bin/ovs-ofctl add-flow br-phy
"priority=499,ipv6,ipv6_dst=2403:400:31da:ffff::18:3,actions=set_field:2403:400:31da:ffff::18:6->ipv6_src,normal"
$ /usr/bin/ovs-appctl dpctl/dump-flows -m netdev@ovs-netdev | grep 192.168.1.33
ufid:acc4b3bc-4958-412d-90c2-9bc4b3fbfac7,
skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(dpdk-vm101),packet_type(ns=0,id=0),eth(src=52:54:00:3d:cd:0c/00:00:00:00:00:00,dst=00:00:00:00:00:01/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=100.87.18.60/0.0.0.0,dst=192.168.1.33/0.0.0.0,proto=1/0,tos=0/0x3,ttl=64/0,frag=no),icmp(type=8/0,code=0/0),
packets:423, bytes:41454, used:0.803s, dp:ovs,
actions:tnl_push(tnl_port(vxlan_sys_4789),header(size=70,type=4,eth(dst=90:0a:84:9e:95:70,src=de:03:37:e2:1f:ef,dl_type=0x86dd),ipv6(src=fe80::dc03:37ff:fee2:1fef,dst=2403:400:31da:ffff::18:3,label=0,proto=17,tclass=0x0,hlimit=64),udp(src=0,dst=4789,csum=0xffff),vxlan(flags=0x8000000,vni=0x1)),out_port(br-phy)),push_vlan(vid=304,pcp=0),exit_p0,
dp-extra-info:miniflow_bits(4,1)
$ /usr/bin/ovs-ofctl dump-flows br-phy
cookie=0x0, duration=170.787s, table=0, n_packets=251, n_bytes=40328,
priority=499,ipv6,ipv6_dst=2403:400:31da:ffff::18:3
actions=load:0x180006->NXM_NX_IPV6_SRC[0..63],load:0x2403040031daffff->NXM_NX_IPV6_SRC[64..127],NORMAL
cookie=0x0, duration=1136.132s, table=0, n_packets=10175, n_bytes=1116852,
priority=10 actions=NORMAL
===
Regards,
Derrick
_______________________________________________
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
