LIU Yulong fc7fa9cf30 Add a default goto table=94 for openvswitch fw ... If enable explicitly_egress_direct=True and set port as no security group and port_security=False, the ingress flood will reappear. The pipleline is: Ingress table_0 -> table_60 -> NORMAL -> VM Egress table_0 -> ... -> table_94 -> output Because ingress final action is normal, the br-int will learn the source MAC, but egress final action is output. So VM's mac will never be learnt by the br-int. Then ingress flood comes again. This patch adds a default direct flow to table 94 during the openflow security group init and explicitly_egress_direct=True, then the pipleline will be: Ingress table_0 -> table_60 -> table_94 -> output VM Egress table_0 -> ... -> table_94 -> output And this patch adds the flows coming from patch port which will match local vlan then go to table 94 do the same direct actions. Above flood issue will be addressed by these flows. Closes-Bug: #2051351 Change-Id: Ia61784174ee610b338f26660b2954330abc131a1 (cherry picked from commit d6f56c5f96) (cherry picked from commit f94f8b6384)		2024-06-13 10:58:42 +02:00
..
source	Add a default goto table=94 for openvswitch fw	2024-06-13 10:58:42 +02:00
Makefile	Merge from launchpad quantum/diablo branch:	2011-09-23 20:17:44 -07:00
requirements.txt	Fix requirements for doc build	2022-07-05 10:26:08 +02:00