Skip to content

Commit

Permalink
Make conntrack the highest priority rule
Browse files Browse the repository at this point in the history
Initially 300 was the highest priority but now we have a rule that is
400, make it 1000 so that it's guaranteed that the flow is always
evaluated.
  • Loading branch information
Juan-Luis de Sousa-Valadas Castaño committed Oct 21, 2020
1 parent de8f5fb commit 75dfcb7
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pkg/network/node/ovscontroller.go
Original file line number Diff line number Diff line change
Expand Up @@ -98,7 +98,7 @@ func (oc *ovsController) SetupOVS(clusterNetworkCIDR []string, serviceNetworkCID

// Table 0: initial dispatch based on in_port
if oc.useConnTrack {
otx.AddFlow("table=0, priority=300, ip, ct_state=-trk, actions=ct(table=0)")
otx.AddFlow("table=0, priority=1000, ip, ct_state=-trk, actions=ct(table=0)")
}
// vxlan0
for _, clusterCIDR := range clusterNetworkCIDR {
Expand Down

0 comments on commit 75dfcb7

Please sign in to comment.