Thanks Ales! There are cases where some logical_routers have more MAC_binding entries and need to be flush more frequently than others. In cases like noisy neighbors, bloating mac_binding table, We may need to increase the frequency of flushing mac_binding table for that specific logical_router. If we want to flush the percentage of mac_binding entries per logical_router, is it possible to configure mac_binding_removal_limit in terms of the percentage of entries of LR?
Our scale is big, When we trigger flushing mac entries for all LRs at a single point of time, that triggers lot of cpu load on ovn central because of ARP learning. Is it possible to trigger flushing MAC_binding table entries of each LR at different times? Thanks Srini On Tue, Feb 6, 2024 at 10:45 PM Ales Musil <amu...@redhat.com> wrote: > > > On Tue, Feb 6, 2024 at 6:30 PM Sri kor <esrik...@gmail.com> wrote: > >> Thanks Akes for your inputs. >> I have been monitoring all the table update using ovsdb-mon >> <https://github.com/amorenoz/ovsdb-mon> . I dont see any addition or >> deletion in MAC_binding table updates. I have been running this script >> overnight. There was no change in the count and the table entries. I am >> suspecting that I might have missed some configuration parameter. I am >> referring here >> <https://github.com/ovn-org/ovn/blob/branch-23.09/northd/aging.c#L116> >> >> *_uuid : 82d23fff-c341-451f-9208-4429a1b204ec* >> >> *datapath : 99b6b710-80f9-432b-8c96-0f99d2dea8da* >> >> *ip : "172.27.6.45"* >> >> *logical_port : >> a_ed1328b3_0bb2_4af0_a648_0f01b0363a9e_lrp_8c9bff10_2ae8_4fef_8720_dcde1a5e54dd* >> >> *mac : "7e:2e:7f:6b:32:54"* >> >> *timestamp : 1705947447229* >> >> >> *[root@ovnkube-db-0 ~]# ovsdb-client get-schema-version >> tcp:10.71.1.2:6642 <http://10.71.1.2:6642> --no-leader-only20.29.0* >> >> > I'm sorry I should have spotted the mistake right away. It is indeed the > wrong configuration. Both options are supposed to be set per logical router > [0] instead of NB_Global table. > > >> >> On Tue, Feb 6, 2024 at 4:02 AM Ales Musil <amu...@redhat.com> wrote: >> >>> >>> >>> On Tue, Feb 6, 2024 at 1:23 AM Sri kor via discuss < >>> ovs-discuss@openvswitch.org> wrote: >>> >>>> Hi Team, >>>> >>>> I have configured mac_binding_age_threshold to 1sec and >>>> mac_binding_removal_limit="5000". I was expecting mac_binding table entries >>>> to be flushed, but it's not happening. We are currently using 23.09.1. Is >>>> it a known issue ? >>>> Please advise from below logs. >>>> >>> >>> Hi, >>> in 23.09 we added a mechanism that will refresh MAC bindings that are >>> still in use [0]. Is it possible that there is some traffic flowing which >>> will keep those MAC bindings alive? >>> It also might be a coincidence, but deleted mac bindings might be >>> populated back again so the overall count is the same. I would suggest >>> monitoring MAC binding doesn't have any traffic flowing to see if it goes >>> away. >>> >>> Also the mac_binding_removal_limit option imposes delay for deletion. If >>> this limit is reached next aging can happen only after 5 seconds. >>> >>> >>>> >>>> thanks, >>>> Srini >>>> [root@ovnkube-db-0 log]# ovn-nbctl --version >>>> ovn-nbctl 23.09.1 >>>> Open vSwitch Library 3.2.2 >>>> DB Schema 7.1.0 >>>> >>>> [root@ovnkube-db-0 log]# ovn-nbctl --no-leader-only find NB_global >>>> _uuid : d01b9c57-29c5-4b86-8de5-c03a9f30825b >>>> connections : [6c9c0c05-af2a-43ab-9164-24588e8b0a3c] >>>> external_ids : {} >>>> hv_cfg : 12935 >>>> hv_cfg_timestamp : 1705104326732 >>>> ipsec : false >>>> name : "" >>>> nb_cfg : 13573 >>>> nb_cfg_timestamp : 1707178571143 >>>> options : {mac_binding_age_threshold="1", >>>> mac_binding_removal_limit="5000", mac_prefix="fe:58:59", >>>> max_tunid="16711680", northd_internal_version="23.09.1-20.29.0-71.6", >>>> northd_probe_interval="5000", ovn-garp-max-timeout-sec="60", >>>> svc_monitor_mac="5a:7f:14:6c:47:da"} >>>> sb_cfg : 13573 >>>> sb_cfg_timestamp : 1707178571869 >>>> ssl : [] >>>> [root@ovnkube-db-0 log]# ovn-Sbctl --no-leader-only find SB_global >>>> bash: ovn-Sbctl: command not found >>>> [root@ovnkube-db-0 log]# ovn-sbctl --no-leader-only find SB_global >>>> _uuid : 8bb031f1-a428-449d-9559-c4c326e91f2d >>>> connections : [a501a7ba-8970-4dc3-94db-0088ab951aa5] >>>> external_ids : {} >>>> ipsec : false >>>> nb_cfg : 13573 >>>> options : {mac_binding_age_threshold="1", >>>> mac_binding_removal_limit="5000", mac_prefix="fe:58:59", >>>> max_tunid="16711680", northd_internal_version="23.09.1-20.29.0-71.6", >>>> northd_probe_interval="5000", ovn-garp-max-timeout-sec="60", >>>> svc_monitor_mac="5a:7f:14:6c:47:da"} >>>> ssl : [] >>>> [root@ovnkube-db-0 ~]# while true; do ovn-sbctl --no-leader-only list >>>> MAC_Binding | grep mac | wc; sleep 10;done >>>> 10546 31638 442932 >>>> 10546 31638 442932 >>>> 10546 31638 442932 >>>> 10546 31638 442932 >>>> 10546 31638 442932 >>>> 10546 31638 442932 >>>> 10546 31638 442932 >>>> _______________________________________________ >>>> discuss mailing list >>>> disc...@openvswitch.org >>>> https://mail.openvswitch.org/mailman/listinfo/ovs-discuss >>>> >>> >>> Hopefully some of this is helpful. >>> >>> Best regards, >>> Ales >>> >>> [0] >>> https://github.com/ovn-org/ovn/commit/e1ab41ee32aa2782db82406b8bd9cda0e1fabc3c >>> >>> >>> -- >>> >>> Ales Musil >>> >>> Senior Software Engineer - OVN Core >>> >>> Red Hat EMEA <https://www.redhat.com> >>> >>> amu...@redhat.com >>> <https://red.ht/sig> >>> >> > Best regards, > Ales > > [0] https://github.com/ovn-org/ovn/blob/branch-23.09/ovn-nb.xml#L165 > -- > > Ales Musil > > Senior Software Engineer - OVN Core > > Red Hat EMEA <https://www.redhat.com> > > amu...@redhat.com > <https://red.ht/sig> >
_______________________________________________ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss