From patchwork Mon Jan 22 17:21:38 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Naveen Yerramneni X-Patchwork-Id: 1889287 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=nutanix.com header.i=@nutanix.com header.a=rsa-sha256 header.s=proofpoint20171006 header.b=xwjWHRmp; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=nutanix.com header.i=@nutanix.com header.a=rsa-sha256 header.s=selector1 header.b=CEOfhdxq; dkim-atps=neutral Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=openvswitch.org (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org; envelope-from=ovs-dev-bounces@openvswitch.org; receiver=patchwork.ozlabs.org) Received: from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4TJcTg3sjsz1yS7 for ; Tue, 23 Jan 2024 04:21:59 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by smtp4.osuosl.org (Postfix) with ESMTP id 43A8341778; Mon, 22 Jan 2024 17:21:55 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.osuosl.org 43A8341778 Authentication-Results: smtp4.osuosl.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=nutanix.com header.i=@nutanix.com header.a=rsa-sha256 header.s=proofpoint20171006 header.b=xwjWHRmp; dkim=fail reason="signature verification failed" (2048-bit key, unprotected) header.d=nutanix.com header.i=@nutanix.com header.a=rsa-sha256 header.s=selector1 header.b=CEOfhdxq X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp4.osuosl.org ([127.0.0.1]) by localhost (smtp4.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qyH_gRLxmA0H; Mon, 22 Jan 2024 17:21:54 +0000 (UTC) Received: from lists.linuxfoundation.org (lf-lists.osuosl.org [IPv6:2605:bc80:3010:104::8cd3:938]) by smtp4.osuosl.org (Postfix) with ESMTPS id 33544415E0; Mon, 22 Jan 2024 17:21:53 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.osuosl.org 33544415E0 Received: from lf-lists.osuosl.org (localhost [127.0.0.1]) by lists.linuxfoundation.org (Postfix) with ESMTP id ED3D4C0072; Mon, 22 Jan 2024 17:21:52 +0000 (UTC) X-Original-To: dev@openvswitch.org Delivered-To: ovs-dev@lists.linuxfoundation.org Received: from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137]) by lists.linuxfoundation.org (Postfix) with ESMTP id F007DC0037 for ; Mon, 22 Jan 2024 17:21:51 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp4.osuosl.org (Postfix) with ESMTP id C9682415E6 for ; Mon, 22 Jan 2024 17:21:51 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.osuosl.org C9682415E6 X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp4.osuosl.org ([127.0.0.1]) by localhost (smtp4.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H8MBu3YK7oiE for ; Mon, 22 Jan 2024 17:21:51 +0000 (UTC) Received: from mx0a-002c1b01.pphosted.com (mx0a-002c1b01.pphosted.com [148.163.151.68]) by smtp4.osuosl.org (Postfix) with ESMTPS id DC2F0415E0 for ; Mon, 22 Jan 2024 17:21:50 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.osuosl.org DC2F0415E0 Received: from pps.filterd (m0127840.ppops.net [127.0.0.1]) by mx0a-002c1b01.pphosted.com (8.17.1.24/8.17.1.24) with ESMTP id 40MEv6QD014659 for ; Mon, 22 Jan 2024 09:21:50 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; h= from:to:cc:subject:date:message-id:content-transfer-encoding :content-type:mime-version; s=proofpoint20171006; bh=HzjdLahAESA VyFDN1MubDIdiQu4njzTE8dt0/UsujCI=; b=xwjWHRmpQE8MWykeo0+CarN3L2Q jUdxWedafwD3MN4xU4zj5wUxCYhZoiTiBfw8/88IwoJF1BwcAxTd4TaYXI6tWCTU oM0M5sIKa8uA8QQwMpKAuhYkpb4HQ4ybKjHvXoVJoY1yAMf7sr6ipT/7/hShLSSI LLM4CKPHGt/QjCul22v/2jxj1Eu7Tk8b3YWId/xORHzh2M0cqHCfYvK71S3/3sD/ BtQpJyg7IuWMw2qcZyH2i1QgeNgNHkeE8BtzjduOuxNznf8g6U3Efg3Xjv0VALDF E+cq3GSvoCtTMe+iYg4OaSlOl/DGlJ5WeLWC4BD2Wkk9Xy4wYMp0InaEhiQ== Received: from nam10-mw2-obe.outbound.protection.outlook.com (mail-mw2nam10lp2101.outbound.protection.outlook.com [104.47.55.101]) by mx0a-002c1b01.pphosted.com (PPS) with ESMTPS id 3vrbcvkm74-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 22 Jan 2024 09:21:49 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Ri6+l3g/Beb8SkpL8KsVD3CpIY72EqmcOAAuACMdU1OBINGMUHQb7PgM5oJOICokl5biK1EAox9DX6OAa5mIZSuj4tKhxrkA17MRVOSUOFUl7wgm+DtGYzm+9gHTLkxRrlfPx0XNNjbhOOIwgr6kuN7qHveNPtqQ8gF3egdl+8T74NCu3eeeY7wKrq8ikLoc7vEZo64/RncpzwVrJWXwNBzf1wpVFJCtDimOm5H0VPKhjgk0nuNY62FraGW7ESS8s8pkimni2vVv+0G6pdcTJT+V/s+PwBC+fy49lwVLbSA7fdes35vmSqzE5X9eqg/zeGJO2j8d78QNq9sORUH0HA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=HzjdLahAESAVyFDN1MubDIdiQu4njzTE8dt0/UsujCI=; b=CQeMlM/fT8Uv80IYuS6T9D+gsgwmvSWbYLfQGH7Lutfgf5y4waYI+UX1rZrDUAEEFFbuZzOSb96GuVUVEmQ8aJYVRn8/2hCg6CBtqdFJJVBsu7aJEP7UqFQLsZ6VMMBMR8h0qlxBWawEum4OQCTDjvv06+qv9pfQtBfoJH3i9ztUUiWMyuZjsixZKtSmdHxB4X/JPGniiYHul5yqQ9fJ2M0c2mcOWQBhoJh82XgV34vjy0gfns8NpIIGCIUzkP5y/efnutdtl2JJ73vDJihoMti7XbZv1l+gV9jV2oO9ftgkPd2QJfXTKeX+mgu2OaKpZh+Dwbs5iqjENr4Gb9H+WQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nutanix.com; dmarc=pass action=none header.from=nutanix.com; dkim=pass header.d=nutanix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HzjdLahAESAVyFDN1MubDIdiQu4njzTE8dt0/UsujCI=; b=CEOfhdxqnay7vEnCFsZf7zPQYbe8nhcGvRhNl/ATlySDIeuW8N2OfXf3urdQIc9Z8c2ZJPqigO8hAOvxDmurvTm3NM4G1KqbIZoH+uzDeByGABusML3eDuFtItjgSURz1GBNourPpObtbWBRtb0NiqWzrqStDmQDl4xrGNd6QT0yu6WMeqnJZ1NMQSGS7FQyRjHqjvLsrprg+b8yDYfqhW+icri8Oz6Noxw4n/d719cgDNJP6AJUqczkc+RQloj4T3nasuZ/u/dBq4M2slIIllyrmqste/1mRdT5w1XY+YO0r0ATC42V8EtAqM5Ll/jZn+GVYg42eZs2iqqIJIjrLQ== Received: from SJ0PR02MB7808.namprd02.prod.outlook.com (2603:10b6:a03:326::16) by CYYPR02MB9665.namprd02.prod.outlook.com (2603:10b6:930:c5::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7202.32; Mon, 22 Jan 2024 17:21:47 +0000 Received: from SJ0PR02MB7808.namprd02.prod.outlook.com ([fe80::e2ad:8e03:561e:19ea]) by SJ0PR02MB7808.namprd02.prod.outlook.com ([fe80::e2ad:8e03:561e:19ea%4]) with mapi id 15.20.7202.031; Mon, 22 Jan 2024 17:21:47 +0000 From: Naveen Yerramneni To: dev@openvswitch.org Date: Mon, 22 Jan 2024 17:21:38 +0000 Message-Id: <20240122172138.203956-1-naveen.yerramneni@nutanix.com> X-Mailer: git-send-email 2.36.6 X-ClientProxiedBy: PH8PR02CA0014.namprd02.prod.outlook.com (2603:10b6:510:2d0::6) To SJ0PR02MB7808.namprd02.prod.outlook.com (2603:10b6:a03:326::16) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SJ0PR02MB7808:EE_|CYYPR02MB9665:EE_ X-MS-Office365-Filtering-Correlation-Id: 7fd0aaf2-da98-4edb-c60d-08dc1b6e9d05 x-proofpoint-crosstenant: true X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SJ0PR02MB7808.namprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(346002)(136003)(396003)(366004)(39860400002)(376002)(230273577357003)(230173577357003)(230922051799003)(64100799003)(451199024)(186009)(1800799012)(6506007)(26005)(2616005)(1076003)(107886003)(6666004)(6512007)(52116002)(83380400001)(5660300002)(2906002)(44832011)(41300700001)(8676002)(6486002)(66476007)(66556008)(478600001)(6916009)(316002)(66946007)(4326008)(8936002)(36756003)(86362001)(38100700002)(38350700005)(414714003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: nutanix.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7fd0aaf2-da98-4edb-c60d-08dc1b6e9d05 X-MS-Exchange-CrossTenant-AuthSource: SJ0PR02MB7808.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jan 2024 17:21:47.5736 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: bb047546-786f-4de1-bd75-24e5b6f79043 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: y7lN0rBA48jrFP/c3QDvoCNv7GWa/+Jp+ka5Ohwjqxr5LdeE1iuPGubvSU5GPoWrsr3W8dllzN4/b5dzH9r1u0h3GWlgG66+ohTLYPSLypA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: CYYPR02MB9665 X-Proofpoint-ORIG-GUID: zlukggEpv881oifrONwkAmsHO2_ybfmu X-Proofpoint-GUID: zlukggEpv881oifrONwkAmsHO2_ybfmu X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-01-22_07,2024-01-22_01,2023-05-22_02 X-Proofpoint-Spam-Reason: safe Subject: [ovs-dev] [PATCH OVN] Add "disable_arp_nd_rsp" option to LSP X-BeenThere: ovs-dev@openvswitch.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: ovs-dev-bounces@openvswitch.org Sender: "dev" This option can be used to enable/disable arp/nd reply flows. Usecase: ========= It is useful to reduce packet loss when VM is being migrated to different AZ via VXLAN tunnel. Port is configured in both AZs on different logical switches which are sharing same IP subnet. In reality, the port is active on only one logical switch. Skipping ARP/ND responder and letting the ARP/ND get flooded to learn the location of the port. Signed-off-by: Naveen Yerramneni --- northd/northd.c | 10 +++++++++- tests/ovn-northd.at | 31 +++++++++++++++++++++++++++++++ 2 files changed, 40 insertions(+), 1 deletion(-) diff --git a/northd/northd.c b/northd/northd.c index 952f8200d..4e070c0fe 100644 --- a/northd/northd.c +++ b/northd/northd.c @@ -1844,6 +1844,12 @@ localnet_can_learn_mac(const struct nbrec_logical_switch_port *nbsp) return smap_get_bool( ->options, "localnet_learn_fdb", false); } +static bool +lsp_disable_arp_nd_rsp(const struct nbrec_logical_switch_port *nbsp) +{ + return smap_get_bool( ->options, "disable_arp_nd_rsp", false); +} + static bool lsp_is_type_changed(const struct sbrec_port_binding *sb, const struct nbrec_logical_switch_port *nbsp, @@ -9921,7 +9927,9 @@ build_lswitch_arp_nd_responder_known_ips(struct ovn_port *op, return; } - if (lsp_is_external(op->nbsp) || op->has_unknown) { + if (lsp_is_external(op->nbsp) || op->has_unknown || + (!strcmp(op->nbsp->type, "") && + lsp_disable_arp_nd_rsp(op->nbsp))) { return; } diff --git a/tests/ovn-northd.at b/tests/ovn-northd.at index 9a0d418e4..9a36ee810 100644 --- a/tests/ovn-northd.at +++ b/tests/ovn-northd.at @@ -11094,5 +11094,36 @@ AT_CHECK([ovn-sbctl dump-flows S1 | grep pre_acl | sed 's/table=./table=?/'], [0 ]) +AT_CLEANUP +]) + +OVN_FOR_EACH_NORTHD_NO_HV([ +AT_SETUP([check options:disable_arp_nd_rsp for LSP]) +ovn_start NORTHD_TYPE +ovn-nbctl ls-add S1 +ovn-nbctl --wait=sb lsp-add S1 S1-vm1 +ovn-nbctl --wait=sb lsp-set-addresses S1-vm1 "50:54:00:00:00:010 192.168.0.10 fd00::10" + +ovn-sbctl dump-flows S1 > S1flows +AT_CAPTURE_FILE([S1flows]) + +AT_CHECK([grep -e "ls_in_arp_rsp" S1flows | sed 's/table=../table=??/'], [0], [dnl + table=??(ls_in_arp_rsp ), priority=100 , match=(arp.tpa == 192.168.0.10 && arp.op == 1 && inport == "S1-vm1"), action=(next;) + table=??(ls_in_arp_rsp ), priority=100 , match=(nd_ns && ip6.dst == {fd00::10, ff02::1:ff00:10} && nd.target == fd00::10 && inport == "S1-vm1"), action=(next;) + table=??(ls_in_arp_rsp ), priority=50 , match=(arp.tpa == 192.168.0.10 && arp.op == 1), action=(eth.dst = eth.src; eth.src = 50:54:00:00:00:10; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = 50:54:00:00:00:10; arp.tpa = arp.spa; arp.spa = 192.168.0.10; outport = inport; flags.loopback = 1; output;) + table=??(ls_in_arp_rsp ), priority=50 , match=(nd_ns && ip6.dst == {fd00::10, ff02::1:ff00:10} && nd.target == fd00::10), action=(nd_na { eth.src = 50:54:00:00:00:10; ip6.src = fd00::10; nd.target = fd00::10; nd.tll = 50:54:00:00:00:10; outport = inport; flags.loopback = 1; output; };) + table=??(ls_in_arp_rsp ), priority=0 , match=(1), action=(next;) +]) + +#Set the disable_arp_nd_rsp option and verify the flow +ovn-nbctl --wait=sb set logical_switch_port S1-vm1 options:disable_arp_nd_rsp=true + +ovn-sbctl dump-flows S1 > S1flows +AT_CAPTURE_FILE([S1flows]) + +AT_CHECK([grep -e "ls_in_arp_rsp" S1flows | sed 's/table=../table=??/'], [0], [dnl + table=??(ls_in_arp_rsp ), priority=0 , match=(1), action=(next;) +]) + AT_CLEANUP ])