Re: [ovs-dev] RFC: conntrack Initial Design

2014-07-13 Thread loy wolfe
1) it's better to support connmark: save__mark & restore__mark, this is very useful. 2) besides conntrack callback as an action, can we support other netfilter chain hook callback(PREROUTING-raw, FORWARDING-filter...), also as an action in the OVS flow table? This is not same as linuxbridge iptabl

Re: [ovs-dev] RFC: conntrack Initial Design

2014-06-06 Thread Thomas Graf
On 05/22/14 at 01:39pm, Justin Pettit wrote: > Below, is a first cut of the design document I wrote for integrating with the > connection tracker.  As I mentioned at my OpenStack presentation, I have a > prototype that (largely) implements this, but it's not ready to be shared > yet.  The goal i

Re: [ovs-dev] RFC: conntrack Initial Design

2014-05-22 Thread Justin Pettit
On May 22, 2014 at 2:13:09 PM, Jesse Gross (je...@nicira.com) wrote: > On Thu, May 22, 2014 at 2:06 PM, Justin Pettit wrote: > > On May 22, 2014 at 1:58:28 PM, Jesse Gross (je...@nicira.com) wrote: > >> On Thu, May 22, 2014 at 1:39 PM, Justin Pettit wrote: > > > >> Is it possible to make the zone a

Re: [ovs-dev] RFC: conntrack Initial Design

2014-05-22 Thread Jesse Gross
On Thu, May 22, 2014 at 2:06 PM, Justin Pettit wrote: > On May 22, 2014 at 1:58:28 PM, Jesse Gross (je...@nicira.com) wrote: >> On Thu, May 22, 2014 at 1:39 PM, Justin Pettit wrote: > >> Is it possible to make the zone a register or accessible from a >> register? I realize that there is a differen

Re: [ovs-dev] RFC: conntrack Initial Design

2014-05-22 Thread Justin Pettit
On May 22, 2014 at 1:58:28 PM, Jesse Gross (je...@nicira.com) wrote: > On Thu, May 22, 2014 at 1:39 PM, Justin Pettit wrote: > Is it possible to make the zone a register or accessible from a > register? I realize that there is a difference in size but it seems > like it has the potential to make t

Re: [ovs-dev] RFC: conntrack Initial Design

2014-05-22 Thread Jesse Gross
On Thu, May 22, 2014 at 1:39 PM, Justin Pettit wrote: > Connection Tracking > --- > The new connection tracking action is defined as follows: > > /* Action structure for NXAST_CONNTRACK. > * > * Pass traffic to the connection tracker. If 'flags' is NXACF_RESUBMIT, >