Hi, Ilya. That's unfortunate! We'll start planning for an upgrade soon then.
Thanks for your help again. Regards, Jasper Ras. ________________________________ From: Ilya Maximets <[email protected]> Sent: 13 January 2026 22:20 To: Jasper Ras <[email protected]>; [email protected] <[email protected]> Cc: Ali Yousefian <[email protected]>; [email protected] <[email protected]> Subject: Re: [ovs-discuss] OVN CoPP/meter ineffective On 1/13/26 5:05 PM, Jasper Ras via discuss wrote: > Good afternoon, > > We've been trying to apply CoPP but are failing to get it to work and at this > point we're running out of options. We are running OVN 24.03.5 with OVS > 2.17.9. > > The following commands were used to set it up: > $ ovn-nbctl meter-add limit-dns drop 5000 pktps 3000 > $ ovn-nbctl copp-add limit dns limit-dns > $ ovn-nbctl ls-copp-add limit neutron-639803c1-b2e5-4d7b-9708-587884aaf6f1 > > We've tried various variations on the meter including changing it up to kbps > instead of pktps, none of them seem to have an effect. > > We send a high rate of DNS packets from external sources to a VM on this > cloud and check the pinctrl_total_pin_pkts go up way over this 5000 pktps. We > have measurements of the tap device on the hypervisor that correspond to the > number pin_pkts we see (well over our limit). > > We can see that openvswitch includes meter_id=1 in the relevant action: > > $ sudo ovs-ofctl dump-flows br-int | grep meter > .. udp6 omitted .. > cookie=0x378e70b9, duration=246.880s, table=32, n_packets=12754501, > n_bytes=867306085, idle_age=0, priority=100,udp,metadata=0x7,tp_dst=53 > actions=controller(userdata=00.00.00.06.00.00.00.00.00.01.de.10.00.00.00.64,pause,meter_id=1),resubmit(,33) > > However if we then check our meter stats, it indicates that it isn't being > hit whatsoever: > > $ sudo ovs-ofctl -O OpenFlow13 meter-stats br-int > OFPST_METER reply (OF1.3) (xid=0x2): > meter:1 flow_count:0 packet_in_count:0 byte_in_count:0 duration:762.659s > bands: > 0: packet_count:0 byte_count:0 > > Please advise. Hi, Jasper. I think you're hitting a bug in OVS fixed in the following commit: https://github.com/openvswitch/ovs/commit/bf7c0b0a90b2b6154088ec990ec21e41702c015d It makes OVS ignore the meter in controller action with a pause. It was fixed in v2.17.11 release. I'd suggest moving to at least v2.17.12, which is the last released version in 2.17 series. However, OVS 2.17 is EoL in general and doesn't receive any bug fixes as of February last year. You need to upgrade to the current LTS, which is OVS 3.3 or the latest stable OVS 3.6, if you want to get fixes for bugs discovered in 2025 onwards. Note: OVS 3.3 will reach EoL in Feb 2027. v3.7 release, that is planned for the next month, is likely going to be a new LTS and will be supported until Feb 2029. Best regards, Ilya Maximets. Kind regards, Jasper Ras Software Engineer [group.one] group.one Carlsgatan 3 | 211 20 Malm? | Sweden group.one<https://www.group.one> | LinkedIn<https://www.linkedin.com/company/group-dot-one/>
_______________________________________________ discuss mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
