-
Notifications
You must be signed in to change notification settings - Fork 244
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Reply only for the multicast ND solicitations.
IPv6 ND Solicitation (NS) responder logical flows match on ip6.dst field. These flows when translated to datapath flows also match on ip6.dst, which means a separate datapath flow per destination IP address. This may cause significant performance issues in some setups (particularly ovs-dpdk telco deployments). This patch addresses this issue by matching on eth.mcast6 so that datapath flows for normal IPv6 traffic doesn't have to match on ip6.dst. IPv6 NS packets are generally multicast. A new logical match "nd_ns_mcast" is added for this purpose. After this patch, We no longer respond to IPv6 NS unicast packets. Let the target reply to it, so that the sender has the ability to monitor the targe liveness via the unicast ND solicitations. This behavior now matches the IPv4 ARP responder flows. Note that after the commit [1] which was recently added we now only respond to IPv4 ARP broadcast packets. A recent patch [2] from Ilya partially addressed the same datapath flow explosion issue by matching on eth.mcast6 for MLD packets. With this patch, we now address the datapath flow explosion issue for IPv6 traffic provided 2 conditions are met: a. All the logical ports of a logical switch are not configured with port security. b. The logical switch port of type router if configured with "arp_proxy" option doesn't include any IPv6 address(es). [1] - c48ed17 ("Do not reply on unicast arps for IPv4 targets.") [2] - 43c34f2 ("logical-fields: Add missing multicast matches for MLD and IGMP.") Note: Documentation for 'eth.mcastv6' and 'ip6.mcast' predicates were missing from ovn-sb.xml and this patch adds it. Reported-at: https://issues.redhat.com/browse/FDP-728 Reported-by: Mike Pattrick <mkp@redhat.com> Acked-by: Dumitru Ceara <dceara@redhat.com> Acked-by: Ilya Maximets <i.maximets@ovn.org> Signed-off-by: Numan Siddique <numans@ovn.org> (cherry picked from commit 2e7f318)
- Loading branch information
1 parent
1b65173
commit bc56bc6
Showing
4 changed files
with
188 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters