yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #23682
[Bug 1312023] Re: ovs_lib: apply order for deferred flows problematic for ovs-firewall-driver
** Changed in: neutron
Status: New => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1312023
Title:
ovs_lib: apply order for deferred flows problematic for ovs-firewall-
driver
Status in OpenStack Neutron (virtual network service):
Fix Released
Bug description:
ovs_lib.py provides defer_apply_on/off methods to bulk apply flow
changes on a bridge. Currently the order in which flows get applied is
add, mod, del. This causes problems for ovs-firewall-driver.
update_port_filter() deletes all existing flows on a port and then
adds new flows. But because of fixed order of deferred flows the
addition of new flows is done first and then cleanup deleting all
flows. This results in a scenario where update_port_filter ends up
wiping out all flows.
This is a big issue for ovs-firewall-driver. There should be a means
to tweak the order in which flows will be applied when turning
deferred_apply_on.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1312023/+subscriptions
References