Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-22 Thread Joe Stringer
On 22 February 2016 at 17:32, Russell Bryant wrote: > > > On Mon, Feb 22, 2016 at 7:25 PM, Joe Stringer wrote: >> >> On 19 February 2016 at 06:53, Russell Bryant wrote: >> > On 02/18/2016 07:37 PM, Joe Stringer wrote: >> >> On 17 February 2016 at 18:12, Justin Pettit wrote: >> >>> >> On Fe

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-22 Thread Russell Bryant
On Mon, Feb 22, 2016 at 7:25 PM, Joe Stringer wrote: > On 19 February 2016 at 06:53, Russell Bryant wrote: > > On 02/18/2016 07:37 PM, Joe Stringer wrote: > >> On 17 February 2016 at 18:12, Justin Pettit wrote: > >>> > On Feb 5, 2016, at 1:30 PM, Russell Bryant wrote: > > >

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-22 Thread Joe Stringer
On 19 February 2016 at 06:53, Russell Bryant wrote: > On 02/18/2016 07:37 PM, Joe Stringer wrote: >> On 17 February 2016 at 18:12, Justin Pettit wrote: >>> On Feb 5, 2016, at 1:30 PM, Russell Bryant wrote: Thank you for the write-up! This approach sounds great to me. Some >

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-19 Thread Russell Bryant
On 02/18/2016 07:37 PM, Joe Stringer wrote: > On 17 February 2016 at 18:12, Justin Pettit wrote: >> >>> On Feb 5, 2016, at 1:30 PM, Russell Bryant wrote: >>> >>> >>> Thank you for the write-up! This approach sounds great to me. Some >>> small questions... >>> >>> 1) If we're only using 1 bit fo

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-19 Thread Russell Bryant
On 02/17/2016 09:12 PM, Justin Pettit wrote: > >> On Feb 5, 2016, at 1:30 PM, Russell Bryant wrote: >> >> >> Thank you for the write-up! This approach sounds great to me. Some >> small questions... >> >> 1) If we're only using 1 bit for now, is there any reason to use >> ct_label over ct_mark?

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-18 Thread Joe Stringer
On 17 February 2016 at 18:12, Justin Pettit wrote: > >> On Feb 5, 2016, at 1:30 PM, Russell Bryant wrote: >> >> >> Thank you for the write-up! This approach sounds great to me. Some >> small questions... >> >> 1) If we're only using 1 bit for now, is there any reason to use >> ct_label over ct_

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-18 Thread Joe Stringer
On 8 February 2016 at 22:53, Han Zhou wrote: > On Fri, Feb 5, 2016 at 1:30 PM, Russell Bryant wrote: >> >> On 02/05/2016 02:22 AM, Justin Pettit wrote: >> > Joe and I spent some time today discussing our options. This is >> > pretty tricky to get right and most of the options that come >> > imme

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-18 Thread Russell Bryant
On 02/17/2016 09:12 PM, Justin Pettit wrote: >> I'm happy to work on the OVN implementation of this approach assuming no >> alternative supplants it. It sounds fun. :-) > > I haven't had a chance to do any coding lately, so if you want to look at it, > that'd be great! OK. I'm working on it.

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-17 Thread Justin Pettit
> On Feb 5, 2016, at 1:30 PM, Russell Bryant wrote: > > > Thank you for the write-up! This approach sounds great to me. Some > small questions... > > 1) If we're only using 1 bit for now, is there any reason to use > ct_label over ct_mark? The docs in ovs-ofctl(8) seem to suggest they're >

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-08 Thread Han Zhou
On Fri, Feb 5, 2016 at 1:30 PM, Russell Bryant wrote: > > On 02/05/2016 02:22 AM, Justin Pettit wrote: > > Joe and I spent some time today discussing our options. This is > > pretty tricky to get right and most of the options that come > > immediately to mind have subtle corner cases. We're plan

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-05 Thread Russell Bryant
On 02/05/2016 02:22 AM, Justin Pettit wrote: > Joe and I spent some time today discussing our options. This is > pretty tricky to get right and most of the options that come > immediately to mind have subtle corner cases. We're planning to > whiteboard more options tomorrow, but I wanted to get d

Re: [ovs-dev] [OVN] Applying ACL changes to existing connections

2016-02-04 Thread Justin Pettit
Joe and I spent some time today discussing our options. This is pretty tricky to get right and most of the options that come immediately to mind have subtle corner cases. We're planning to whiteboard more options tomorrow, but I wanted to get down what's my personal favorite and see what peopl