[ovs-dev] Mail System Error - Returned Mail

2015-11-06 Thread MAILER-DAEMON
___ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev

Re: [ovs-dev] [PATCH 3/6] ofproto: Allow xlate_actions() to fail.

2015-11-06 Thread Jarno Rajahalme
New version of this is included in the NAT series, as I recall it depends on this. Jarno > On Nov 4, 2015, at 11:31 AM, Joe Stringer wrote: > > On 28 October 2015 at 20:07, Jarno Rajahalme > wrote: >> Sometimes xlate_actions() fails due to too deep recursion, t

Re: [ovs-dev] [PATCH 4/6] ofp-actions: Fix conntrack action usable_protocols handling.

2015-11-06 Thread Jarno Rajahalme
Pushed with the change proposed, thanks for the review! Jarno > On Nov 4, 2015, at 11:38 AM, Joe Stringer wrote: > > On 28 October 2015 at 20:07, Jarno Rajahalme wrote: >> Restrictions from embedded actions should be folded in rather than discarded. >> >> Signed-off-by: Jarno Rajahalme >

Re: [ovs-dev] [PATCH 5/6] upcall: Check for recirc_id in ukey_create_from_dpif_flow()

2015-11-06 Thread Jarno Rajahalme
Pushed, Jarno > On Nov 4, 2015, at 11:40 AM, Joe Stringer wrote: > > On 28 October 2015 at 20:07, Jarno Rajahalme wrote: >> Filter out not only flows with recirculation actions, but also flows >> with non-zero recirculation id in flow key when creating ukeys from >> datapath flows, as such f

Re: [ovs-dev] [PATCH 2/6] upcall: Eliminate dead code.

2015-11-06 Thread Jarno Rajahalme
Pushed to master, Jarno > On Nov 4, 2015, at 11:02 AM, Joe Stringer wrote: > > On 28 October 2015 at 20:07, Jarno Rajahalme wrote: >> Signed-off-by: Jarno Rajahalme > > Acked-by: Joe Stringer ___ dev mailing list dev@openvswitch.org http://open

Re: [ovs-dev] [PATCH 1/6] tests: Strip more variable output from conntrack output.

2015-11-06 Thread Jarno Rajahalme
Pushed to master, thanks for the review! Jarno > On Nov 4, 2015, at 11:00 AM, Joe Stringer wrote: > > On 28 October 2015 at 20:07, Jarno Rajahalme wrote: >> 'conntrack' output format varies depending on the system >> configuration, i.e., conntrack accounting or timestamping is enabled. >> Mo

Re: [ovs-dev] [PATCH 3/6] ofproto: Allow xlate_actions() to fail.

2015-11-06 Thread Jarno Rajahalme
> On Nov 4, 2015, at 11:31 AM, Joe Stringer wrote: > > On 28 October 2015 at 20:07, Jarno Rajahalme > wrote: >> Sometimes xlate_actions() fails due to too deep recursion, too many >> MPLS labels, or missing recirculation context. Make xlate_actions() >> fail in th

Re: [ovs-dev] [PATCH] lib: allow group access to Unix domain sockets

2015-11-06 Thread Ansis Atteka
On 10 October 2015 at 01:10, Andy Zhou wrote: > By default, Unix domain sockets are created with file system permission > mode of 0700. Only the process of the belongs to the same user can > How about: s/Only the process of the belongs to the same user/This means that only processes that run unde

Re: [ovs-dev] [PATCH 1/2] AUTHORS: Update Justin Pettit's email address.

2015-11-06 Thread Kyle Mestery
On Fri, Nov 6, 2015 at 4:48 PM, Ben Pfaff wrote: > On Fri, Nov 06, 2015 at 02:00:30PM -0800, Justin Pettit wrote: > > Signed-off-by: Justin Pettit > > Acked-by: Ben Pfaff > My address isn't that cool, but: Acked-By: Kyle Mestery :) > ___ > dev m

Re: [ovs-dev] [PATCH 2/2] TODO.md: Remove old item.

2015-11-06 Thread Justin Pettit
> On Nov 6, 2015, at 2:27 PM, Russell Bryant wrote: > > If the only issue was the bad link, I think it was: > > http://openvswitch.org/pipermail/dev/2013-November/034299.html > > Of course, if you don't think the todo item is interesting anymore in > general, removing seems fine. In either ca

Re: [ovs-dev] [PATCH 0/7] Enable NSH based Service Function Chaining support in OVS

2015-11-06 Thread Jesse Gross
On Tue, Nov 3, 2015 at 10:20 AM, Liu, Mengke wrote: > Hi, Jesse > > For NSH implementation in OVS, we have two more topics want to discuss with > you: > Except for NSH encapsulation format of “VxLAN GPE + NSH”, we also want to > support another encapsulation mode defined in NSH SPEC: “Ethernet +

[ovs-dev] [PATCH v2 1/8] ofproto: Allow xlate_actions() to fail.

2015-11-06 Thread Jarno Rajahalme
Sometimes xlate_actions() fails due to too deep recursion, too many MPLS labels, or missing recirculation context. Make xlate_actions() fail in these circumstances, so that we can install a drop flow instead of a flow with partially translated actions. Before this action it was possible that the

[ovs-dev] [PATCH v2 6/8] system-tests: Workaround for pyftpdlib bug handling IPv6 addresses.

2015-11-06 Thread Jarno Rajahalme
Hack around a bug in pyftpdlib that rejects EPRT connection due to mismatching textual representation of the IPv6 address when the address is not in the normalized format. This happens when the control connection is mangled by Linux NAT. Signed-off-by: Jarno Rajahalme --- tests/test-l7.py | 4 +

[ovs-dev] [PATCH v2 0/8] Support NAT in OVS conntrack action.

2015-11-06 Thread Jarno Rajahalme
This series adds support for a NAT extension to the conntrack action. The datapath support is added by a corresponding patch series at the upstream netdev mailing list, targeting the net-next tree. This means that this series (when applied to OVS master) must be paired with a current net-next kern

[ovs-dev] [PATCH v2 5/8] system-tests: Add IPv6 FTP system test.

2015-11-06 Thread Jarno Rajahalme
Signed-off-by: Jarno Rajahalme --- tests/system-traffic.at | 50 + 1 file changed, 50 insertions(+) diff --git a/tests/system-traffic.at b/tests/system-traffic.at index eeafd24..0999f03 100644 --- a/tests/system-traffic.at +++ b/tests/system-traffi

[ovs-dev] [PATCH v2 8/8] conntrack action: Add support for NAT.

2015-11-06 Thread Jarno Rajahalme
Extend OVS conntrack interface to cover NAT. New nested nat action may be included with a CT action. A bare nat action only mangles existing connections. If a nat action with src or dst range attribute is included, new (non-committed) connections are mangled according to the nat attributes. Thi

[ovs-dev] [PATCH v2 3/8] system-tests: Make bridge creation more consistent.

2015-11-06 Thread Jarno Rajahalme
Create all bridges with the same set of supported OpenFlow protocols and fail-safe-mode secure, so that each test explicitly specifies flow handling. Signed-off-by: Jarno Rajahalme --- tests/system-kmod-macros.at | 6 +-- tests/system-traffic.at | 105 +---

[ovs-dev] [PATCH v2 2/8] ofproto: Enable in-place modification for recirc actions.

2015-11-06 Thread Jarno Rajahalme
When modifying an existing datapath flow with recirculation actions, the references to old (if any) recirculation actions need to be freed, and references to new recirculation actions need to be stored. Signed-off-by: Jarno Rajahalme Acked-by: Joe Stringer --- ofproto/ofproto-dpif-rid.h| 63

[ovs-dev] [PATCH v2 4/8] system-tests: Use '--bundle'

2015-11-06 Thread Jarno Rajahalme
Use OpenFlow bundles for setting up flow tables. This has the benefit that when debugging test failures, no packet gets processed by partially set-up flow table, which may seem confusing. Signed-off-by: Jarno Rajahalme --- tests/system-traffic.at | 61 ---

[ovs-dev] [PATCH v2 7/8] packets: Reorder CS_* flags to remove gap.

2015-11-06 Thread Jarno Rajahalme
This changes the conntrack state flags used in the OpenFlow interface to match the ones we currently use in the datapath. While these do not need to be synced, it is nice to get rid of the gap. This should be merged before the first OVS release with connection tracking, or not at all. Signed-off

[ovs-dev] [RFC PATCH net-next v2 7/8] openvswitch: Delay conntrack helper call for new connections.

2015-11-06 Thread Jarno Rajahalme
There is no need to help connections that are not confirmed, so we can delay helping new connections to the time when they are confirmed. This change is needed for NAT support, and having this as a separate patch will make the following NAT patch a bit easier to review. Signed-off-by: Jarno Rajaha

[ovs-dev] [RFC PATCH net-next v2 8/8] openvswitch: Interface with NAT.

2015-11-06 Thread Jarno Rajahalme
Extend OVS conntrack interface to cover NAT. New nested OVS_CT_ATTR_NAT attribute may be used to include NAT with a CT action. A bare OVS_CT_ATTR_NAT only mangles existing and expected connections. If OVS_NAT_ATTR_SRC or OVS_NAT_ATTR_DST is included within the nested attributes, new (non-committed

Re: [ovs-dev] [PATCH v2] INSTALL.DPDK: Mention issue with QEMU v2.4.0 & dpdkvhostuser

2015-11-06 Thread Daniele Di Proietto
I applied this to master, thanks. We should remember to remove this when we move to DPDK 2.2 On 05/11/2015 03:14, "Ciara Loftus" wrote: >Currently when using QEMU v2.4.0+, two (or more) dpdkvhostuser ports >cannot >be unbound from the kernel driver in the guest without causing the >ovs-vswitchd

[ovs-dev] [RFC PATCH net-next v2 6/8] openvswitch: Handle NF_REPEAT in conntrack action.

2015-11-06 Thread Jarno Rajahalme
Repeat the nf_conntrack_in() call when it returns NF_REPEAT. This avoids dropping a SYN packet re-opening an existing TCP connection. Signed-off-by: Jarno Rajahalme --- net/openvswitch/conntrack.c | 10 -- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/net/openvswitch/con

[ovs-dev] [RFC PATCH net-next v2 0/8] openvswitch: NAT support.

2015-11-06 Thread Jarno Rajahalme
This series adds NAT support to openvswitch kernel module. A few changes are needed to the netfilter code to facilitate this (patches 1-3/8). Patches 4-7 make the openvswitch kernel module ready for the patch 8 that adds the NAT support for calling into netfilter NAT code from the openvswitch con

[ovs-dev] [RFC PATCH net-next v2 5/8] openvswitch: Find existing conntrack entry after upcall.

2015-11-06 Thread Jarno Rajahalme
Add a new function ovs_ct_find_existing() to find an existing conntrack entry for which this packet was already applied to. This is only to be called when there is evidence that the packet was already tracked and committed, but we lost the ct reference due to an userspace upcall. ovs_ct_find_exis

[ovs-dev] [RFC PATCH net-next v2 3/8] netfilter: Allow calling into nat helper without skb_dst.

2015-11-06 Thread Jarno Rajahalme
NAT checksum recalculation code assumes existence of skb_dst, which becomes a problem for a later patch in the series ("openvswitch: Interface with NAT."). Simplify this by removing the check on skb_dst, as the checksum will be dealt with later in the stack. Suggested-by: Pravin Shelar Signed-of

[ovs-dev] [RFC PATCH net-next v2 2/8] netfilter: Factor out nf_ct_get_info().

2015-11-06 Thread Jarno Rajahalme
Define a new inline function to map conntrack status to enum ip_conntrack_info. This removes the need to otherwise duplicate this code in a later patch ("openvswitch: Find existing conntrack entry after upcall."). Signed-off-by: Jarno Rajahalme --- include/net/netfilter/nf_conntrack.h | 15

[ovs-dev] [RFC PATCH net-next v2 4/8] openvswitch: Update the CT state key only after nf_conntrack_in().

2015-11-06 Thread Jarno Rajahalme
Only a successful nf_conntrack_in() call can effect a connection state change, so if suffices to update the key only after the nf_conntrack_in() returns. This change is needed for the later NAT patches. Signed-off-by: Jarno Rajahalme --- net/openvswitch/conntrack.c | 9 ++--- 1 file changed

[ovs-dev] [RFC PATCH net-next v2 1/8] netfilter: Remove IP_CT_NEW_REPLY definition.

2015-11-06 Thread Jarno Rajahalme
Remove the definition of IP_CT_NEW_REPLY from the kernel as it does not make sense. This allows the definition of IP_CT_NUMBER to be simplified as well. Signed-off-by: Jarno Rajahalme --- include/uapi/linux/netfilter/nf_conntrack_common.h | 12 +--- net/openvswitch/conntrack.c

[ovs-dev] [PATCH] ovs-router: Report ovs/route/add errors as errors.

2015-11-06 Thread Ben Pfaff
The _error version should be used to report errors. Signed-off-by: Ben Pfaff --- lib/ovs-router.c | 11 ++- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/lib/ovs-router.c b/lib/ovs-router.c index 2f093e8..50737a2 100644 --- a/lib/ovs-router.c +++ b/lib/ovs-router.c @@ -27

Re: [ovs-dev] [PATCH 2/2] TODO.md: Remove old item.

2015-11-06 Thread Ben Pfaff
On Fri, Nov 06, 2015 at 02:00:31PM -0800, Justin Pettit wrote: > The patchwork instance has been recreated, so this doesn't point any > place valid. > > Signed-off-by: Justin Pettit Acked-by: Ben Pfaff ___ dev mailing list dev@openvswitch.org http://o

Re: [ovs-dev] [PATCH 1/2] AUTHORS: Update Justin Pettit's email address.

2015-11-06 Thread Ben Pfaff
On Fri, Nov 06, 2015 at 02:00:30PM -0800, Justin Pettit wrote: > Signed-off-by: Justin Pettit Acked-by: Ben Pfaff ___ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev

Re: [ovs-dev] [PATCH 2/2] TODO.md: Remove old item.

2015-11-06 Thread Russell Bryant
On 11/06/2015 05:00 PM, Justin Pettit wrote: > The patchwork instance has been recreated, so this doesn't point any > place valid. > > Signed-off-by: Justin Pettit > --- > TODO.md |9 - > 1 files changed, 0 insertions(+), 9 deletions(-) > > diff --git a/TODO.md b/TODO.md > index e2d

Re: [ovs-dev] [PATCH 1/2] AUTHORS: Update Justin Pettit's email address.

2015-11-06 Thread Russell Bryant
On 11/06/2015 05:00 PM, Justin Pettit wrote: > Signed-off-by: Justin Pettit > --- > AUTHORS |2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/AUTHORS b/AUTHORS > index cb1cf57..3d630e6 100644 > --- a/AUTHORS > +++ b/AUTHORS > @@ -96,7 +96,7 @@ Joe Perches

[ovs-dev] [PATCH 2/2] TODO.md: Remove old item.

2015-11-06 Thread Justin Pettit
The patchwork instance has been recreated, so this doesn't point any place valid. Signed-off-by: Justin Pettit --- TODO.md |9 - 1 files changed, 0 insertions(+), 9 deletions(-) diff --git a/TODO.md b/TODO.md index e2db33b..b4542b7 100644 --- a/TODO.md +++ b/TODO.md @@ -68,15 +68,6

[ovs-dev] [PATCH 1/2] AUTHORS: Update Justin Pettit's email address.

2015-11-06 Thread Justin Pettit
Signed-off-by: Justin Pettit --- AUTHORS |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/AUTHORS b/AUTHORS index cb1cf57..3d630e6 100644 --- a/AUTHORS +++ b/AUTHORS @@ -96,7 +96,7 @@ Joe Perches j...@perches.com Joe Stringerjoestrin...@nicira.com

Re: [ovs-dev] [PATCH 2/2] vlog: change log file owner when switching user

2015-11-06 Thread Ansis Atteka
On 10 October 2015 at 01:07, Andy Zhou wrote: > vlog log file can be created when parsing --log-file option, before switch user, in case the --user option is also specified. This > this does not read fluently. How about: s/switch user/switching user? does not directly causing errors for the r

Re: [ovs-dev] Sflow monitoring on tunnel ports sends outter header information instead of inner header

2015-11-06 Thread Neil McKee
The sFlow sampling is enabled on ingress to every bridge port (except for "patch ports" between bridges). So the headers you see will depend on which port the samples came from, and where the tunnel encapsulation is being added. For example, consider the following OVN setup: br-ext <-> linux

[ovs-dev] Desgrange created regional teams, generally from France, to take in riders who would not otherwise have qualified.

2015-11-06 Thread Christine Frachette
Particle physics has affected the philosophy of science greatly. Shrewsbury road in 2000. Physical Education, Art and Design and selected Modern Foreign Languages. Nakiwala, daughter of Semwanga, of the Ngonge clan.Wrath shows up and takes on both Len and Kit in their Survive Modes. Halloween sp

Re: [ovs-dev] [PATCH 1/1] ovsdb-idl: Add additional support for change tracking.

2015-11-06 Thread Ansari, Shad
> > > First, I like this. Thank you for doing the work. > > I see a few style errors, e.g. the { should be on a line of its own > here: > static bool > ovsdb_idl_track_is_set(struct ovsdb_idl_table *table) { > > ovsdb_idl_track_is_set() seems expensive given that it is being executed >

Re: [ovs-dev] [ICMP v2 7/7] ovn-northd: Support pinging logical router ports.

2015-11-06 Thread Russell Bryant
On 11/03/2015 06:48 PM, Justin Pettit wrote: > Signed-off-by: Justin Pettit I haven't tested this yet, but it all looks right to me with fresh eyes. Acked-by: Russell Bryant -- Russell Bryant ___ dev mailing list dev@openvswitch.org http://openvswit

Re: [ovs-dev] [ICMP v2 7/7] ovn-northd: Support pinging logical router ports.

2015-11-06 Thread Russell Bryant
On 11/06/2015 02:52 AM, Justin Pettit wrote: > >> On Nov 5, 2015, Russell Bryan wrote: > >> >>> + "inport == %s && (ip4.dst == "IP_FMT" || ip4.dst == "IP_FMT") && " >> >> You've got a duplicate condition here, checking ip4.dst == IP_FMT twice. > > Yes, but I set them to two different values-

[ovs-dev] Sflow monitoring on tunnel ports sends outter header information instead of inner header

2015-11-06 Thread Liran Schour
Hi all, Recently I noticed that the behavior of sflow agent in OVS has changed. In the past sflow monitoring on traffic that goes through tunnel ports had sent the inner header information (virtual flow). When I try to do the same sflow monitoring with the current master branch I get the informa

Re: [ovs-dev] how ovs sends port-shut message to controller ?

2015-11-06 Thread tech_kals Kals
Hi Ben, Thanks for your response. I want to use OVS APIs to inform the controller about port shutdown. But, I don't find any direct API/function to do so. For example, *ofproto_port_add() *could be called to add a port into an openflow bridge and *ofproto_port_del() *can be called to remove a po

[ovs-dev] Delivery reports about your e-mail

2015-11-06 Thread nancygrealtor
The original message was received at Fri, 6 Nov 2015 14:59:16 +0530 from aol.com [146.184.238.46] - The following addresses had permanent fatal errors - dev@openvswitch.org - Transcript of session follows - ... while talking to openvswitch.org.: 550 5.1.2 ... Host unknown (Name se

[ovs-dev] Returned mail: Data format error

2015-11-06 Thread Mail Delivery Subsystem
___ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev