neutron/neutron/agent/linux/openvswitch_firewall
Rodolfo Alonso Hernandez 843eccb9ee Improve "OVSFirewallDriver.process_trusted_ports"
FirewallDriver.process_trusted_ports" is called with many ports,
"_initialize_egress_no_port_security" retrieves the VIF ports
("Interface" registers in OVS DB), one per iteration, based in the
port_id. Instead of this procedure, if the DB is called only once to
retrieve all the VIF ports, the performance increase is noticeable.
E.g.: bridge with 1000 ports and interfaces.

Retrieving 100 ports:
- Bulk operation: 0.08 secs
- Loop operation: 5.6 secs

Retrieving 1000 ports:
- Bulk operation: 0.08 secs
- Loop operation: 59 secs

Closes-Bug: #1836095
Related-Bug: #1836023

Change-Id: I5b259717c0fdb8991f1df86b1ef4fb8ad0f18e70
(cherry picked from commit ae1d36fa9d)
2020-01-31 10:34:56 +00:00
..
__init__.py Open vSwitch conntrack based firewall driver 2016-02-16 16:47:21 +00:00
constants.py [log] ovs fw logging implementation 2018-01-09 09:26:40 +07:00
exceptions.py ovsfw: Don't create rules if updated port doesn't exist 2018-01-05 16:28:18 +00:00
firewall.py Improve "OVSFirewallDriver.process_trusted_ports" 2020-01-31 10:34:56 +00:00
iptables.py fullstack: Migration from iptables_hybrid to openvswitch 2018-04-26 16:44:24 +00:00
rules.py Fix KeyError in OVS firewall 2019-03-27 11:52:46 +00:00