Re: [ovs-dev] [openstack-dev] [neutron] moving openvswitch ports between namespaces considered harmful

2015-02-15 Thread Kevin Benton
What is the status of the conntrack integration with respect to availability in distributions? The lack of state tracking has blocked the ability for us to get rid of namespaces for the L3 agent (because of SNAT) and the filtering bridge between the VM and OVS (stateful firewall for security groups

Re: [ovs-dev] [RFC net-next 3/4] openvswitch: Add conntrack action.

2015-02-15 Thread Nicolas Dichtel
Le 15/02/2015 20:13, Thomas Graf a écrit : On 02/15/15 at 11:06am, Joe Stringer wrote: On 15 February 2015 at 07:08, Nicolas Dichtel wrote: Le 15/02/2015 05:47, Joe Stringer a écrit : Right, it was more of a general sanity check which is likely unneeded. I'm not aware of any particular case t

Re: [ovs-dev] [RFC net-next 3/4] openvswitch: Add conntrack action.

2015-02-15 Thread Thomas Graf
On 02/15/15 at 11:06am, Joe Stringer wrote: > On 15 February 2015 at 07:08, Nicolas Dichtel > wrote: > > Le 15/02/2015 05:47, Joe Stringer a écrit : > >> Right, it was more of a general sanity check which is likely unneeded. > >> I'm not aware of any particular case that this handles. > > > > I a

Re: [ovs-dev] [PATCH/RFC v2 3/8] Support decoding of NMX selection method

2015-02-15 Thread Simon Horman
On Sun, Feb 15, 2015 at 08:51:31AM -0800, Ben Pfaff wrote: > On Fri, Feb 13, 2015 at 06:14:28PM -0500, Simon Horman wrote: > > On Fri, Feb 13, 2015 at 02:55:58PM -0800, Ben Pfaff wrote: > > > On Fri, Jan 30, 2015 at 11:41:51AM +0900, Simon Horman wrote: > > > > This is in preparation for supporting

Re: [ovs-dev] Stochastic group select using kernel module

2015-02-15 Thread Ben Pfaff
On Sun, Feb 15, 2015 at 01:58:21PM +0100, Rhaban Hark wrote: > we want to achieve round-robin over different action-buckets in a group > table. Since we expect packets with identical headers (same ip & mac > address), the current implementation is not sufficient. As far as i know ovs > is using the

Re: [ovs-dev] [RFC net-next 3/4] openvswitch: Add conntrack action.

2015-02-15 Thread Joe Stringer
On 15 February 2015 at 07:08, Nicolas Dichtel wrote: > Le 15/02/2015 05:47, Joe Stringer a écrit : > >> On 14 February 2015 at 11:56, Thomas Graf wrote: >>> >>> On 02/14/15 at 12:13am, Joe Stringer wrote: >>> >>> [..] >>> +static bool skb_has_valid_nfct(const struct net *net, u16 zone,

[ovs-dev] BONUS TNB ---- Gong Xi Fa Cai

2015-02-15 Thread TNB, Kuala Lumpur
Tenaga Nasional Berhad (TNB HQ) 129 Jalan Bangsar, 59200 Kuala Lumpur, Kuala Lumpur, Malaysia Ini adalah satu pemberitahuan rasmi daripada ibu pejabat daripada Tenaga Nasional Berhad sempena Persatuan Air Malaysia (PAM) untuk memaklumkan anda mengenai Hadiah Khas Eksklusif Tenaga Nasional Berh

Re: [ovs-dev] [PATCH/RFC v2 3/8] Support decoding of NMX selection method

2015-02-15 Thread Ben Pfaff
On Fri, Feb 13, 2015 at 06:14:28PM -0500, Simon Horman wrote: > On Fri, Feb 13, 2015 at 02:55:58PM -0800, Ben Pfaff wrote: > > On Fri, Jan 30, 2015 at 11:41:51AM +0900, Simon Horman wrote: > > > This is in preparation for supporting group mod and desc reply > > > messages with an NMX selection meth

Re: [ovs-dev] [PATCH] docs: update CONTRIBUTING.md

2015-02-15 Thread Ben Pfaff
On Tue, Feb 10, 2015 at 02:46:22PM +, Mark Kavanagh wrote: > Patches that modify existing code can break expected behaviour. > Flag this by testing the patch with 'make check' prior to submission. > > Furthermore, it is not sufficient to only test patches that add files > using 'make distcheck

Re: [ovs-dev] Error

2015-02-15 Thread Ben Pfaff
OpenFlow 1.3 is your best bet; it is well supported by OVS and widely supported by other switches too. On Sun, Feb 15, 2015 at 04:38:40PM +0300, Amer wrote: > Thank you Ben > This means I need to upgrade to a new openflow version, > Which version you suggest. > > Best regards, > Amer > > > On ١

Re: [ovs-dev] [openstack-dev] [neutron] moving openvswitch ports between namespaces considered harmful

2015-02-15 Thread Thomas Graf
[Sorry for the resend, I had to subscribe to openstack-dev first, maybe worth removing the subscribe requirement for outsiders] [Copying ovs-dev] On 02/13/15 at 01:47pm, Miguel Ángel Ajo wrote: > Sorry, I forgot about > > 5) If we put all our OVS/OF bridge logic in just one bridge (instead

Re: [ovs-dev] [openstack-dev] [neutron] moving openvswitch ports between namespaces considered harmful

2015-02-15 Thread Thomas Graf
[Copying ovs-dev] On 02/13/15 at 01:47pm, Miguel Ángel Ajo wrote: > Sorry, I forgot about > > 5) If we put all our OVS/OF bridge logic in just one bridge (instead of N: > br-tun, br-int, br-ex, br-xxx), > the performance should be yet higher, since, as far as I understood, > flow rule

Re: [ovs-dev] [RFC net-next 3/4] openvswitch: Add conntrack action.

2015-02-15 Thread Nicolas Dichtel
Le 15/02/2015 05:47, Joe Stringer a écrit : On 14 February 2015 at 11:56, Thomas Graf wrote: On 02/14/15 at 12:13am, Joe Stringer wrote: [..] +static bool skb_has_valid_nfct(const struct net *net, u16 zone, +const struct sk_buff *skb) +{ + enum ip_conntrack_in

Re: [ovs-dev] Stochastic group select using kernel module

2015-02-15 Thread Simon Horman
Hi, On Sun, Feb 15, 2015 at 01:58:21PM +0100, Rhaban Hark wrote: > Hi, > > we want to achieve round-robin over different action-buckets in a group > table. Since we expect packets with identical headers (same ip & mac > address), the current implementation is not sufficient. As far as i know ovs

Re: [ovs-dev] Error

2015-02-15 Thread Amer
Thank you Ben This means I need to upgrade to a new openflow version, Which version you suggest. Best regards, Amer > On ١٣‏/٠٢‏/٢٠١٥, at ٧:٣٣ م, Ben Pfaff wrote: > >> On Fri, Feb 13, 2015 at 11:27:48AM +0300, Amer wrote: >> I am trying to change the size of VLAN tag, I have changed the size >

[ovs-dev] Stochastic group select using kernel module

2015-02-15 Thread Rhaban Hark
Hi, we want to achieve round-robin over different action-buckets in a group table. Since we expect packets with identical headers (same ip & mac address), the current implementation is not sufficient. As far as i know ovs is using the hashed mac address to determine the selected bucket. Base