Re: [ovs-dev] [PATCH] vtep: add ACLs to VTEP schema

2015-09-12 Thread Bruce Davie
> On Sep 10, 2015, at 3:07 PM, Justin Pettit wrote: > > >> On Aug 25, 2015, at 1:03 PM, Bruce Davie wrote: >> >> diff --git a/vtep/vtep.xml b/vtep/vtep.xml >> index ff8d0fe..a554dcf 100644 >> --- a/vtep/vtep.xml >> +++ b/vtep/vtep.xml >> @@ -367,7 +367,7 @@ >> >> >> The

Re: [ovs-dev] [PATCH] vtep: add ACLs to VTEP schema

2015-09-11 Thread Gurucharan Shetty
Alex pointed out off-list that vtep-ctl still works. I think I badly phrased the previous comment. What I intended to say was that we dont have new commands for new features that nee tables added. I guess, one can still use database commands dorectly. Sorry for the confusion. > On Sep 10, 201

Re: [ovs-dev] [PATCH] vtep: add ACLs to VTEP schema

2015-09-10 Thread Gurucharan Shetty
One point that I would like to bring to attention is that vtep-ctl no longer matches VTEP schema (even without this patch). On Thu, Sep 10, 2015 at 3:07 PM, Justin Pettit wrote: > >> On Aug 25, 2015, at 1:03 PM, Bruce Davie wrote: >> >> diff --git a/vtep/vtep.xml b/vtep/vtep.xml >> index ff8d0fe

Re: [ovs-dev] [PATCH] vtep: add ACLs to VTEP schema

2015-09-10 Thread Justin Pettit
> On Aug 25, 2015, at 1:03 PM, Bruce Davie wrote: > > diff --git a/vtep/vtep.xml b/vtep/vtep.xml > index ff8d0fe..a554dcf 100644 > --- a/vtep/vtep.xml > +++ b/vtep/vtep.xml > @@ -367,7 +367,7 @@ > > > The HSC writes the key-value pairs in the > - column to spe

Re: [ovs-dev] [PATCH] vtep: add ACLs to VTEP schema

2015-08-26 Thread Bruce Davie
A couple of folks have pointed out that the way we attach ACLs to either physical ports or to pairs leaves some room for ambiguity. My proposal is that we discourage the use of both types of ACLs on the same physical port. We can’t enforce this (AFAIK) in the database itself, but we can recomm

[ovs-dev] [PATCH] vtep: add ACLs to VTEP schema

2015-08-25 Thread Bruce Davie
Two new tables are added to the VTEP schema, for ACL entries and ACLs (which are groups of entries). The physical port table is modified to allow ACLs to be associated with ports, and the logical router table is modified to allow ACLs to be attached to logical router ports. Signed-off-by: Bruce Da