Bug 2175998
| Summary: | [OVN SCALE] ovn-controller: OpenFlow flow explosion with 'hairpin_snat_ip' LBs | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux Fast Datapath | Reporter: | OVN Bot <ovn-bot> |
| Component: | ovn23.03 | Assignee: | Ilya Maximets <i.maximets> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Jianlin Shi <jishi> |
| Severity: | high | Docs Contact: | |
| Priority: | urgent | ||
| Version: | FDP 23.B | CC: | ctrautma, i.maximets, jhopper, jiji, jishi, jtaleric, mmichels, surya |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ovn23.03-23.03.0-4.el9fdp | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2024-03-08 14:01:21 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OVN Bot
2023-03-07 05:08:11 UTC
Tested with following script:
systemctl start openvswitch
systemctl start ovn-northd
ovn-nbctl set-connection ptcp:6641
ovn-sbctl set-connection ptcp:6642
ovs-vsctl set open . external_ids:system-id=hv1 external_ids:ovn-remote=tcp:20.0.210.25:6642 external_ids:ovn-encap-type=geneve external_ids:ovn-encap-ip=20.0.210.25
systemctl restart ovn-controller
ovn-nbctl ls-add ls1
ovn-nbctl lsp-add ls1 ls1p1
ovn-nbctl lsp-set-addresses ls1p1 "00:00:00:01:01:02 192.168.1.1 2001::1"
ovn-nbctl lsp-add ls1 ls1p2
ovn-nbctl lsp-set-addresses ls1p2 "00:00:00:01:02:02 192.168.1.2 2001::2"
ovn-nbctl lr-add lr1
ovn-nbctl lrp-add lr1 lr1-ls1 00:00:00:00:00:01 192.168.1.254/24 2001::a/64
ovn-nbctl lsp-add ls1 ls1-lr1
ovn-nbctl lsp-set-addresses ls1-lr1 "00:00:00:00:00:01 192.168.1.254 2001::a"
ovn-nbctl lsp-set-type ls1-lr1 router
ovn-nbctl lsp-set-options ls1-lr1 router-port=lr1-ls1
ovn-nbctl lrp-add lr1 lr1-ls2 00:00:00:00:00:02 192.168.2.254/24 2002::a/64
ovn-nbctl ls-add ls2
ovn-nbctl lsp-add ls2 ls2-lr1
ovn-nbctl lsp-set-addresses ls2-lr1 "00:00:00:00:00:02 192.168.2.254 2002::a"
ovn-nbctl lsp-set-type ls2-lr1 router
ovn-nbctl lsp-set-options ls2-lr1 router-port=lr1-ls2
ovn-nbctl lsp-add ls2 ls2p1
ovn-nbctl lsp-set-addresses ls2p1 "00:00:00:02:01:02 192.168.2.1 2002::1"
ovn-nbctl lsp-add ls1 ls1p3
ovn-nbctl lsp-set-addresses ls1p3 "00:00:00:01:03:02 192.168.1.3 2001::3"
for i in {1..10}
do
ovn-nbctl lb-add lb$i 172.17.1.$i 192.168.1.1
ovn-nbctl set load_balancer lb$i options:hairpin_snat_ip="8.8.8.7"
ovn-nbctl ls-lb-add ls1 lb$i
ovn-nbctl lb-add ip6lb$i 172:17::1 2001::1
ovn-nbctl set load_balancer ip6lb$i options:hairpin_snat_ip="7171::8"
ovn-nbctl ls-lb-add ls1 ip6lb$i
done
ovs-vsctl add-port br-int ls1p1 -- set interface ls1p1 type=internal external_ids:iface-id=ls1p1
ip netns add ls1p1
ip link set ls1p1 netns ls1p1
ip netns exec ls1p1 ip link set lo up
ip netns exec ls1p1 ip link set ls1p1 address 00:00:00:01:01:02
ip netns exec ls1p1 ip link set ls1p1 up
ip netns exec ls1p1 ip addr add 192.168.1.1/24 dev ls1p1
ip netns exec ls1p1 ip addr add 2001::1/64 dev ls1p1
ip netns exec ls1p1 ip route add default via 192.168.1.254
ip netns exec ls1p1 ip -6 route add default via 2001::a
ovs-vsctl add-port br-int ls1p2 -- set interface ls1p2 type=internal external_ids:iface-id=ls1p2
ip netns add ls1p2
ip link set ls1p2 netns ls1p2
ip netns exec ls1p2 ip link set lo up
ip netns exec ls1p2 ip link set ls1p2 address 00:00:00:01:02:02
ip netns exec ls1p2 ip link set ls1p2 up
ip netns exec ls1p2 ip addr add 192.168.1.2/24 dev ls1p2
ip netns exec ls1p2 ip addr add 2001::2/64 dev ls1p2
ip netns exec ls1p2 ip route add default via 192.168.1.254
ip netns exec ls1p2 ip -6 route add default via 2001::a
ovn-nbctl --wait=hv sync
ovs-ofctl dump-flows br-int | grep 8.8.8.7
ovs-ofctl dump-flows br-int | grep 7171::8
result on ovn22.12-22.12.0-46.el9:
[root@wsfd-advnetlab18 bz2175998]# rpm -qa | grep -E "ovn22.12|openvswitch3.1"
ovn22.12-22.12.0-46.el9fdp.x86_64
openvswitch3.1-3.1.0-17.el9fdp.x86_64
ovn22.12-central-22.12.0-46.el9fdp.x86_64
ovn22.12-host-22.12.0-46.el9fdp.x86_64
[root@wsfd-advnetlab18 bz2175998]# cat 22.12.log
+ grep 8.8.8.7
cookie=0x4fa3bbc0, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110101,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x4fa3bbc0,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xdf8e5d00, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110108,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xdf8e5d00,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x94d7c0a1, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110104,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x94d7c0a1,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x8b39e651, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110105,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x8b39e651,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xc0c19993, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110102,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xc0c19993,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xb8adf883, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110106,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xb8adf883,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x7be527e5, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110107,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x7be527e5,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xcfa8a867, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac11010a,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xcfa8a867,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x40b74458, duration=0.199s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110103,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x40b74458,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x49cd12e, duration=0.196s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110109,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x49cd12e,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x4fa3bbc0, duration=0.199s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=3,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0xdf8e5d00, duration=0.199s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=5,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x94d7c0a1, duration=0.199s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=6,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x8b39e651, duration=0.199s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=7,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0xc0c19993, duration=0.199s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=9,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0xb8adf883, duration=0.199s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=10,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x7be527e5, duration=0.199s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=11,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0xcfa8a867, duration=0.199s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=19,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x40b74458, duration=0.197s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=13,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x49cd12e, duration=0.196s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=18,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
+ ovs-ofctl dump-flows br-int
+ grep 7171::8
cookie=0x8a3f3a40, duration=0.221s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x8a3f3a40,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x8a3f3a40, duration=0.221s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=1,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0xc684e40, duration=0.221s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=2,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0x8538f5f0, duration=0.221s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=4,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0x1bf08e13, duration=0.221s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=8,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0x33fd6376, duration=0.221s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=12,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0xf1c9bc79, duration=0.219s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=14,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0xaa3c9879, duration=0.219s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=15,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0x99eab589, duration=0.219s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=16,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0x56593e1a, duration=0.218s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=17,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
cookie=0xa66ea2c, duration=0.218s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=20,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
result on ovn23.03-23.03-24.el9:
[root@wsfd-advnetlab18 bz2175998]# rpm -qa | grep -E "ovn23.03|openvswitch3.1"
openvswitch3.1-3.1.0-17.el9fdp.x86_64
ovn23.03-23.03.0-24.el9fdp.x86_64
ovn23.03-central-23.03.0-24.el9fdp.x86_64
ovn23.03-host-23.03.0-24.el9fdp.x86_64
[root@wsfd-advnetlab18 bz2175998]# ovs-ofctl dump-flows br-int | grep 8.8.8.7
cookie=0xb6c3fcb0, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110102,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xb6c3fcb0,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xa6857dd1, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110101,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xa6857dd1,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x6e5cbe52, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110107,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x6e5cbe52,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xec56b0c5, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110106,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xec56b0c5,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x6ec6958, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110108,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x6ec6958,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xa716438a, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac11010a,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xa716438a,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x626de27a, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110104,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x626de27a,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x4b0a9d3f, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110105,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x4b0a9d3f,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xd6db131f, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110103,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xd6db131f,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x45c7f98f, duration=343.961s, table=68, n_packets=0, n_bytes=0, idle_age=343, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110109,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x45c7f98f,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0xb6c3fcb0, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110102,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0xa6857dd1, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110101,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x6e5cbe52, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110107,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0xec56b0c5, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110106,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x6ec6958, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110108,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0xa716438a, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac11010a,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x626de27a, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110104,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x4b0a9d3f, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110105,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0xd6db131f, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110103,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
cookie=0x45c7f98f, duration=343.961s, table=70, n_packets=0, n_bytes=0, idle_age=343, priority=190,ip,reg1=0xac110109,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7))
<=== there is no difference for ipv4 flow compared to ovn22.12
Ilya, are the flows expected?
[root@wsfd-advnetlab18 bz2175998]# ovs-ofctl dump-flows br-int | grep 7171::8
cookie=0x29deb950, duration=348.638s, table=68, n_packets=0, n_bytes=0, idle_age=348, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x29deb950,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7])
cookie=0x29deb950, duration=348.638s, table=70, n_packets=0, n_bytes=0, idle_age=348, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8))
@jishi The flows are a bit different. You may see that new flows do not have conj_id. You need to add the same LB to both switches or to the LB-group attached to both switches in order to see the difference in the number of flows. You may need to also bind the port from ls2 as well (create netns, etc.) (In reply to Ilya Maximets from comment #4) > @jishi The flows are a bit different. You may see that new > flows do not have conj_id. > > You need to add the same LB to both switches or to the LB-group attached > to both switches in order to see the difference in the number of flows. > You may need to also bind the port from ls2 as well (create netns, etc.) tested with the new script based on the suggestion: systemctl start openvswitch systemctl start ovn-northd ovn-nbctl set-connection ptcp:6641 ovn-sbctl set-connection ptcp:6642 ovs-vsctl set open . external_ids:system-id=hv1 external_ids:ovn-remote=tcp:127.0.0.1:6642 external_ids:ovn-encap-type=geneve external_ids:ovn-encap-ip=127.0.0.1 systemctl restart ovn-controller ovn-nbctl ls-add ls1 ovn-nbctl lsp-add ls1 ls1p1 ovn-nbctl lsp-set-addresses ls1p1 "00:00:00:01:01:02 192.168.1.1 2001::1" ovn-nbctl lsp-add ls1 ls1p2 ovn-nbctl lsp-set-addresses ls1p2 "00:00:00:01:02:02 192.168.1.2 2001::2" ovn-nbctl lr-add lr1 ovn-nbctl lrp-add lr1 lr1-ls1 00:00:00:00:00:01 192.168.1.254/24 2001::a/64 ovn-nbctl lsp-add ls1 ls1-lr1 ovn-nbctl lsp-set-addresses ls1-lr1 "00:00:00:00:00:01 192.168.1.254 2001::a" ovn-nbctl lsp-set-type ls1-lr1 router ovn-nbctl lsp-set-options ls1-lr1 router-port=lr1-ls1 ovn-nbctl lrp-add lr1 lr1-ls2 00:00:00:00:00:02 192.168.2.254/24 2002::a/64 ovn-nbctl ls-add ls2 ovn-nbctl lsp-add ls2 ls2-lr1 ovn-nbctl lsp-set-addresses ls2-lr1 "00:00:00:00:00:02 192.168.2.254 2002::a" ovn-nbctl lsp-set-type ls2-lr1 router ovn-nbctl lsp-set-options ls2-lr1 router-port=lr1-ls2 ovn-nbctl lsp-add ls2 ls2p1 ovn-nbctl lsp-set-addresses ls2p1 "00:00:00:02:01:02 192.168.2.1 2002::1" ovn-nbctl lsp-add ls1 ls1p3 ovn-nbctl lsp-set-addresses ls1p3 "00:00:00:01:03:02 192.168.1.3 2001::3" for i in {1..10} do ovn-nbctl lb-add lb$i 172.17.1.$i 192.168.1.1 ovn-nbctl set load_balancer lb$i options:hairpin_snat_ip="8.8.8.7" ovn-nbctl ls-lb-add ls1 lb$i ovn-nbctl ls-lb-add ls2 lb$i ovn-nbctl lb-add ip6lb$i 172:17::1 2001::1 ovn-nbctl set load_balancer ip6lb$i options:hairpin_snat_ip="7171::8" ovn-nbctl ls-lb-add ls1 ip6lb$i ovn-nbctl ls-lb-add ls2 ip6lb$i done ovs-vsctl add-port br-int ls1p1 -- set interface ls1p1 type=internal external_ids:iface-id=ls1p1 ip netns add ls1p1 ip link set ls1p1 netns ls1p1 ip netns exec ls1p1 ip link set lo up ip netns exec ls1p1 ip link set ls1p1 address 00:00:00:01:01:02 ip netns exec ls1p1 ip link set ls1p1 up ip netns exec ls1p1 ip addr add 192.168.1.1/24 dev ls1p1 ip netns exec ls1p1 ip addr add 2001::1/64 dev ls1p1 ip netns exec ls1p1 ip route add default via 192.168.1.254 ip netns exec ls1p1 ip -6 route add default via 2001::a ovs-vsctl add-port br-int ls1p2 -- set interface ls1p2 type=internal external_ids:iface-id=ls1p2 ip netns add ls1p2 ip link set ls1p2 netns ls1p2 ip netns exec ls1p2 ip link set lo up ip netns exec ls1p2 ip link set ls1p2 address 00:00:00:01:02:02 ip netns exec ls1p2 ip link set ls1p2 up ip netns exec ls1p2 ip addr add 192.168.1.2/24 dev ls1p2 ip netns exec ls1p2 ip addr add 2001::2/64 dev ls1p2 ip netns exec ls1p2 ip route add default via 192.168.1.254 ip netns exec ls1p2 ip -6 route add default via 2001::a ovs-vsctl add-port br-int ls2p1 -- set interface ls2p1 type=internal external_ids:iface-id=ls2p1 ip netns add ls2p1 ip link set ls2p1 netns ls2p1 ip netns exec ls2p1 ip link set lo up ip netns exec ls2p1 ip link set ls2p1 address 00:00:00:02:01:02 ip netns exec ls2p1 ip link set ls2p1 up ip netns exec ls2p1 ip addr add 192.168.2.1/24 dev ls2p1 ip netns exec ls2p1 ip addr add 2002::1/64 dev ls2p1 ip netns exec ls2p1 ip route add default via 192.168.2.254 ip netns exec ls2p1 ip -6 route add default via 2002::a ovn-nbctl --wait=hv sync ovs-ofctl dump-flows br-int | grep 8.8.8.7 ovs-ofctl dump-flows br-int | grep 7171::8 result on ovn22.12-22.12.0-46: + ovs-ofctl dump-flows br-int + grep 8.8.8.7 cookie=0x8c11b023, duration=0.018s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110101,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x8c11b023,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xe16faddc, duration=0.017s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac11010a,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xe16faddc,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xecdd6e0c, duration=0.017s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110106,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xecdd6e0c,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x8d989cc, duration=0.016s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110104,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x8d989cc,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xdf2c0716, duration=0.015s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110105,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xdf2c0716,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xd1ffb1a, duration=0.015s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110102,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xd1ffb1a,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xeafce265, duration=0.015s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110103,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xeafce265,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x1545cbd8, duration=0.014s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110107,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x1545cbd8,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xb1c7513b, duration=0.014s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110108,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xb1c7513b,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xe7700d0d, duration=0.013s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110109,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xe7700d0d,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xe7700d0d, duration=0.017s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=19,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x8c11b023, duration=0.017s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=5,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xdf2c0716, duration=0.017s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=9,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xeafce265, duration=0.016s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=7,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x8d989cc, duration=0.015s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=17,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x1545cbd8, duration=0.015s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=12,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xecdd6e0c, duration=0.015s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=18,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xe16faddc, duration=0.015s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=16,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xb1c7513b, duration=0.015s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=14,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xd1ffb1a, duration=0.014s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=13,ip actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) + ovs-ofctl dump-flows br-int + grep 7171::8 cookie=0xc75d4d9e, duration=0.030s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xc75d4d9e,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xb45d1c30, duration=0.034s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=1,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x9c4507a0, duration=0.033s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=3,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xc75d4d9e, duration=0.033s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=20,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xa309b506, duration=0.032s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=11,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x26ff74c3, duration=0.031s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=4,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x643c8fe5, duration=0.031s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=8,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x722d14fb, duration=0.030s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=15,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x34f18386, duration=0.030s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=10,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xa64dfa94, duration=0.030s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=6,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xae3c8460, duration=0.029s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=200,conj_id=2,ipv6 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) [root@opicee-4 bz2175998]# rpm -qa | grep -E "openvswitch3.1|ovn22.12" openvswitch3.1-3.1.0-17.el9fdp.x86_64 ovn22.12-22.12.0-46.el9fdp.x86_64 ovn22.12-central-22.12.0-46.el9fdp.x86_64 ovn22.12-host-22.12.0-46.el9fdp.x86_64 result on ovn23.03-23.03.0-24.el9: + ovs-ofctl dump-flows br-int + grep 8.8.8.7 cookie=0xef5bbca, duration=0.019s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110101,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xef5bbca,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x5c6d0936, duration=0.019s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac11010a,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x5c6d0936,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xd83ce3f2, duration=0.019s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110106,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xd83ce3f2,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x876a304c, duration=0.018s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110104,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x876a304c,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x39aec421, duration=0.017s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110105,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x39aec421,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x33a604c1, duration=0.017s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110102,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x33a604c1,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xdd927d6b, duration=0.017s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110103,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xdd927d6b,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xeb60b9a9, duration=0.015s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110107,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xeb60b9a9,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x1d28978a, duration=0.015s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110108,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x1d28978a,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xe8b76d0b, duration=0.014s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ip,reg1=0xac110109,nw_src=192.168.1.1,nw_dst=192.168.1.1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xe8b76d0b,OXM_OF_METADATA[],eth_type=0x800,NXM_OF_IP_SRC[],ip_dst=8.8.8.7,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xd83ce3f2, duration=0.019s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110106,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xef5bbca, duration=0.018s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110101,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xeb60b9a9, duration=0.018s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110107,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x1d28978a, duration=0.018s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110108,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x876a304c, duration=0.018s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110104,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xeb60b9a9, duration=0.018s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110107,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x39aec421, duration=0.017s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110105,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x1d28978a, duration=0.017s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110108,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xe8b76d0b, duration=0.016s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110109,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x33a604c1, duration=0.016s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110102,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x39aec421, duration=0.016s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110105,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x33a604c1, duration=0.016s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110102,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xe8b76d0b, duration=0.016s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110109,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x876a304c, duration=0.016s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110104,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x5c6d0936, duration=0.015s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac11010a,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xef5bbca, duration=0.015s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110101,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0x5c6d0936, duration=0.015s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac11010a,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xdd927d6b, duration=0.014s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110103,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xd83ce3f2, duration=0.014s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110106,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) cookie=0xdd927d6b, duration=0.014s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ip,reg1=0xac110103,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=8.8.8.7)) <=== more flows than ovn22.12 Ilya, after add the same lb for ls1 and ls2, more flows are generated compared to ovn22.12. + ovs-ofctl dump-flows br-int + grep 7171::8 cookie=0x7fc7fcae, duration=0.030s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x7fc7fcae,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x7fc7fcae, duration=0.033s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x7fc7fcae, duration=0.033s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) [root@opicee-4 bz2175998]# rpm -qa | grep -E "openvswitch3.1|ovn23.03" openvswitch3.1-3.1.0-17.el9fdp.x86_64 ovn23.03-23.03.0-24.el9fdp.x86_64 ovn23.03-central-23.03.0-24.el9fdp.x86_64 ovn23.03-host-23.03.0-24.el9fdp.x86_64 You're right, sorry (it's been some time since I made a change). Here is what we really expect to see: Before the change there should be a big number of flows in table 70 with conj_id and there should be flow with the large number of conjunction() actions. The flow with conjunction() actions grows without bounds as we add more load balancers. Eventually this one flow grows too much and doesn't fit into a single OpenFlow message. At this point ovn-controller breaks and we see the logs similar to ones showed here: https://bugzilla.redhat.com/show_bug.cgi?id=2171423#c0 These are in ovs-vswitchd log file. The break happens after several thousands of LBs added. After the change, there should be no conjunctive flows in table 70, hence the issue is avoided. The total number of flows might be larger, but it should go down if ports from ls2 are not binded (I was wrong suggesting to bind it), because ovs-controller should not generate flows for non-local datapaths. The main thing we need to test here is that number of conjunction() actions doesn't grow out of bounds (there should be no conjunctions at all), and that the total number of flows in table 70 is not significantly different if only ls1 ports are binded (We have 1 switch per node in OCP). (In reply to Ilya Maximets from comment #6) > You're right, sorry (it's been some time since I made a change). > Here is what we really expect to see: > > Before the change there should be a big number of flows in table 70 > with conj_id and there should be flow with the large number of > conjunction() actions. The flow with conjunction() actions grows > without bounds as we add more load balancers. Eventually this one > flow grows too much and doesn't fit into a single OpenFlow message. > At this point ovn-controller breaks and we see the logs similar to > ones showed here: > https://bugzilla.redhat.com/show_bug.cgi?id=2171423#c0 > These are in ovs-vswitchd log file. > The break happens after several thousands of LBs added. > > > After the change, there should be no conjunctive flows in table 70, > hence the issue is avoided. The total number of flows might be > larger, but it should go down if ports from ls2 are not binded (I was > wrong suggesting to bind it), because ovs-controller should not > generate flows for non-local datapaths. > > > The main thing we need to test here is that number of conjunction() > actions doesn't grow out of bounds (there should be no conjunctions > at all), and that the total number of flows in table 70 is not > significantly different if only ls1 ports are binded (We have 1 switch > per node in OCP). got it, so the flows for ipv4 are expected. another question, why are the flows for ipv6 are different from the flows for ipv4? (In reply to Jianlin Shi from comment #7) > another question, why are the flows for ipv6 are different from the flows > for ipv4? It's likely because all ipv6 LBs are the same in your script: > ovn-nbctl lb-add ip6lb$i 172:17::1 2001::1 (In reply to Ilya Maximets from comment #8) > (In reply to Jianlin Shi from comment #7) > > another question, why are the flows for ipv6 are different from the flows > > for ipv4? > > It's likely because all ipv6 LBs are the same in your script: > > > ovn-nbctl lb-add ip6lb$i 172:17::1 2001::1 oh, sorry about that. after change the script to "ovn-nbctl lb-add ip6lb$i 172:17::$i 2001::1", the flows for ipv6 are the same as flows for ipv4: + ovs-ofctl dump-flows br-int + grep 7171::8 cookie=0x73dba319, duration=0.044s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x5,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x 1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x73dba319,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xa691181b, duration=0.043s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x3,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x 1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xa691181b,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xd90cfa2, duration=0.043s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x2,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x1 ->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xd90cfa2,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xff8b4388, duration=0.041s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x9,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x 1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xff8b4388,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xb64440ee, duration=0.040s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x10,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0 x1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xb64440ee,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x8b9f31c7, duration=0.040s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x 1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x8b9f31c7,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xbe4f13a7, duration=0.040s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x8,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x 1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xbe4f13a7,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x1bf443a3, duration=0.039s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x6,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x 1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x1bf443a3,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x5f15d695, duration=0.039s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x7,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x 1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0x5f15d695,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0xd3f63e7f, duration=0.039s, table=68, n_packets=0, n_bytes=0, idle_age=0, priority=100,ct_mark=0x2/0x2,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x4,ipv6_src=2001::1,ipv6_dst=2001::1 actions=load:0x 1->NXM_NX_REG10[7],learn(table=69,delete_learned,cookie=0xd3f63e7f,OXM_OF_METADATA[],eth_type=0x86dd,NXM_NX_IPV6_SRC[],ipv6_dst=7171::8,NXM_OF_IP_PROTO[],load:0x1->NXM_NX_REG10[7]) cookie=0x1bf443a3, duration=0.045s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x6,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7 171::8)) cookie=0x73dba319, duration=0.045s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x5,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xff8b4388, duration=0.045s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x9,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xd3f63e7f, duration=0.045s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x4,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x8b9f31c7, duration=0.044s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xb64440ee, duration=0.044s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x10,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x8b9f31c7, duration=0.044s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x1,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xff8b4388, duration=0.043s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x9,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xa691181b, duration=0.043s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x3,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xd90cfa2, duration=0.043s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x2,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x1bf443a3, duration=0.043s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x6,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x5f15d695, duration=0.042s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x7,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xb64440ee, duration=0.041s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x10,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xa691181b, duration=0.041s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x3,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xbe4f13a7, duration=0.041s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x8,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x73dba319, duration=0.041s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x5,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xd90cfa2, duration=0.040s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x2,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xd3f63e7f, duration=0.040s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x4,metadata=0x3 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0xbe4f13a7, duration=0.040s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x8,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) cookie=0x5f15d695, duration=0.040s, table=70, n_packets=0, n_bytes=0, idle_age=0, priority=190,ipv6,reg4=0x1720017,reg5=0,reg6=0,reg7=0x7,metadata=0x1 actions=ct(commit,zone=NXM_NX_REG12[0..15],nat(src=7171::8)) I am closing this issue. It was initially attached to the following dropped errata: https://errata.devel.redhat.com/advisory/112892 . This errata was not published because there was one issue that failed verification. The rest of the issues were verified, though. However, since the issues were never included in a published errata, they have remained in the "VERIFIED" state. These issues have been fixed for a long time, and QE has verification set up for these issues, so I am closing these issues as "CURRENTRELEASE". |