https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/GBP-69 groupbasedpolicy <p>When creating a Nova "port" with basic IPv4 ingress/egress:</p> <p><a href="https://gist.github.com/3230000010f5f89d0404" class="external-link" target="_blank" rel="nofollow noopener">https://gist.github.com/3230000010f5f89d0404</a></p> <p>I see flows filtered on subnet ie leveraging EIC.</p> <p><a href="https://gist.github.com/eaea3770ba4eb83cfb79" class="external-link" target="_blank" rel="nofollow noopener">https://gist.github.com/eaea3770ba4eb83cfb79</a></p> <p>This is incorrect.</p> <p>EIC should be used in Neutron mapping for security-group rules with prefixes, not subnets that are provisioned. </p> <p>There maybe subnets: 10.0.0.0/24, 10.0.1.0/24 and 10.0.3.0/24 </p> <p>Unless a user EXPLICITLY states a prefix rule in a security group, these should not be used.</p> <p>ie.</p> <p>a user may specific a rule 10.0.0.0/8 and THAT should go into the EIC.</p> <p>Operating System: All<br/> Platform: All</p> GBP-69

BUG: Duplicate flows in policy enforcer.

Bug Resolved Done Martin Sunal Keith Burns Sun, 31 May 2015 18:03:09 +0000 Mon, 15 Jun 2015 02:05:49 +0000 Mon, 15 Jun 2015 02:05:49 +0000 unspecified General Mon, 1 Jun 2015 00:00:00 +0000 0 1 <p>More data:</p> <p>Table4: POLICY_ENFORCER:<br/> <a href="https://gist.github.com/a6d003373c9b6ccb0123" class="external-link" target="_blank" rel="nofollow noopener">https://gist.github.com/a6d003373c9b6ccb0123</a></p> <p>Testing script on single node devstack:<br/> <a href="https://gist.github.com/ff68f98b5f031e15b197" class="external-link" target="_blank" rel="nofollow noopener">https://gist.github.com/ff68f98b5f031e15b197</a></p> <p>No prefix in security group rules.</p> <p>I see the issue now, these are DHCP flows?</p> <p>Note that we don't have IP addresses in DHCP queries, hence it doesn't make sense to do this. </p> <p>DHCP is handled initially via broadcast, so will probably bypass this until the resolution phase.</p> <p>It maybe worth having someone look at all the duplicate flows.</p> <p>renaming bug and lowering priority.</p> <p>You can use the below scripts to reproduce this.</p> <p><a href="https://git.opendaylight.org/gerrit/#/c/21676/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/21676/</a></p> <p>Resolved with FlowIds</p> Development External issue ID 3460 External issue URL Issue Type ODL SR Target Milestone Priority Rank 0|i035a7: