Please sign in to comment.
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
ovn: Support address sets generated from port groups
Address sets are automatically generated from corresponding port groups, and can be used directly in ACL match conditions. There are two address sets generated for each port group: <port group name>_ip4 <port group name>_ip6 For example, if port_group1 is created, we can directly use below match condition in ACL: "outport == @port_group1 && ip4.src == $port_group1_ip4" This will simplify OVN client implementation, and avoid some tricky problems such as race conditions when maintaining address set memberships as discussed in the link below. Reported-by: Lucas Alvares Gomes <email@example.com> Reported-at: https://mail.openvswitch.org/pipermail/ovs-discuss/2018-February/046174.html Reviewed-by: Mark Michelson <firstname.lastname@example.org> Reviewed-by: Daniel Alvarez <email@example.com> Signed-off-by: Han Zhou <firstname.lastname@example.org> Signed-off-by: Ben Pfaff <email@example.com>
- Loading branch information
Showing with 352 additions and 17 deletions.
Oops, something went wrong.