yahoo-eng-team team mailing list archive

[IWAMOTO Toshihiro <iwamoto@xxxxxxxxxxxxx>]

Public bug reported:

The firewall code generate O(n^2) flows when a security group rule uses a remote_group_id.
See OVSFirewallDriver.create_rules_generator.

This can be problematic when a large number of addresses are in a
security group.

** Affects: neutron
     Importance: Undecided
         Status: New


** Tags: ovs sg-fw

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1628819

Title:
  OVS firewall can generate too many flows

Status in neutron:
  New

Bug description:
  The firewall code generate O(n^2) flows when a security group rule uses a remote_group_id.
  See OVSFirewallDriver.create_rules_generator.

  This can be problematic when a large number of addresses are in a
  security group.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1628819/+subscriptions