[NETVIRT-630] All traffic not matched by Netvirt classifier is dropped Created: 24/Apr/17 Updated: 19/Oct/17 Resolved: 16/May/17 |
|
| Status: | Resolved |
| Project: | netvirt |
| Component/s: | General |
| Affects Version/s: | Carbon |
| Fix Version/s: | None |
| Type: | Bug | ||
| Reporter: | Brady Johnson | Assignee: | Unassigned |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Environment: |
Operating System: All |
||
| External issue ID: | 8284 |
| Priority: | High |
| Description |
|
When packets enter the Netvirt classification tables they will be dropped if they are not matched by the ACLs therein. There is no flow in the INGRESS_SFC_CLASSIFIER_ACL_TABLE table that sends the packets back to the ingress dispatcher when there is no match. |
| Comments |
| Comment by Brady Johnson [ 24/Apr/17 ] |
|
Proposed fix is to add the second flow listed here: cookie=0xf005ba1100000002, duration=265.233s, table=101, n_packets=7, n_bytes=518, priority=500,tcp,in_port=2,nw_src=10.0.0.2,tp_dst=80 actions=push_nsh,load:0x1->NXM_NX_NSH_MDTYPE[],load:0x13->NXM_NX_NSP[0..23],load:0xff->NXM_NX_NSI[],load:0->NXM_NX_NSH_C1[],load:0->NXM_NX_NSH_C2[],load:0xac130002->NXM_NX_REG0[],resubmit(,17) |
| Comment by Brady Johnson [ 24/Apr/17 ] |
|
Patch for Master: Patch for stable/carbon: |