-
Notifications
You must be signed in to change notification settings - Fork 11
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Finalizing optimized HC set #690
Conversation
…rom connectivity properties. Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
…ding to more condensed optimized output. Signed-off-by: Tanya <tatyana@il.ibm.com>
…to account TCP/non-TCP protocol restriction. Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
if diff_prop.are_auto_conns(): | ||
print(f"{text_prefix} differ only in auto-connections") | ||
else: | ||
print(f"Error: {text_prefix} are different") | ||
assert False | ||
|
||
@staticmethod | ||
def compare_fw_rules_to_conn_props(fw_rules, props, peer_container, connectivity_restriction=None): |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
does it run on debug or optimized flag?
after removing optimized flag, should be run on "new debug mode" , to be run on tests only
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Checked, it runs both on -opt=debug
and -opt=true
.
else: # connectivity_restriction == 'non-TCP' | ||
relevant_protocols = ProtocolSet.get_non_tcp_protocols() | ||
|
||
peers_to_connections = defaultdict(ConnectionSet) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why ConnectionSet
and not ConnectivityProperties
?
…ther, according to grouping in cubes). Also, added grouping by labels to initial grouping. Signed-off-by: Tanya <tatyana@il.ibm.com>
…ther, according to grouping in cubes). Also, added grouping by labels to initial grouping. Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
…e properties in containing connections. Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Refined ns-set pairs grouping computation -trying starting from src_peers and from dst_peers and choosing a more compact grouping. Added grouping by full IpBlock. Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
…neration of dot output in optimized solution Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Signed-off-by: Tanya <tatyana@il.ibm.com>
Initial implementation of building and minimizing fw-rules directly from connectivity properties.