https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/NIC-25 nic <p>Not able to block the traffic, which has allowed the traffic between the end points in redirect action.</p> <p>Operating System: All<br/> Platform: All</p> NIC-25

NIC block action is not working in redirect.

Bug Confirmed Unresolved Unassigned Vinothkumar Thu, 3 Mar 2016 12:34:16 +0000 Thu, 19 Oct 2017 21:27:04 +0000 unspecified General 0 2 <p>This is due to both ALLOW and BLOCK related flows having the same priority. This is because today we aren't listening on the resolved policies from the composed graph but rather on the intent additions. We are currently working on listening to the graph edges to push the resolved policies instead.</p> <p>Just elaborating this cause of the bug,</p> <p>Description:</p> <p>Step 1 : Creating a redirect intent, testing an dump flows in mininet. and found that flows are written each switch's, and traffic is allowing between the end points.</p> <p>Ex: intent:add -f 00:00:00:00:00:01 -t 00:00:00:00:00:05 -a REDIRECT -s srvc1</p> <p>Dump-flow:</p> <ul> <li> <ul> <li> <ul> <li>s1 ------------------------------------------------------------------------<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x1, duration=581.583s, table=0, n_packets=232, n_bytes=19720, idle_age=2, priority=9500,dl_type=0x88cc actions=CONTROLLER:65535<br/> cookie=0x1, duration=581.583s, table=0, n_packets=0, n_bytes=0, idle_age=581, priority=10000,arp actions=CONTROLLER:65535,NORMAL</li> <li>s2 ------------------------------------------------------------------------<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x2, duration=581.599s, table=0, n_packets=232, n_bytes=19720, idle_age=2, priority=9500,dl_type=0x88cc actions=CONTROLLER:65535<br/> cookie=0x2, duration=581.599s, table=0, n_packets=0, n_bytes=0, idle_age=581, priority=10000,arp actions=CONTROLLER:65535,NORMAL</li> <li>s3 ------------------------------------------------------------------------<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x3, duration=581.608s, table=0, n_packets=337, n_bytes=28645, idle_age=2, priority=9500,dl_type=0x88cc actions=CONTROLLER:65535</li> <li>s4 ------------------------------------------------------------------------<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x4, duration=581.622s, table=0, n_packets=337, n_bytes=28645, idle_age=2, priority=9500,dl_type=0x88cc actions=CONTROLLER:65535<br/> ===========================================<br/> Step 2: Creating a block intent, testing an dump flows in mininet. and found that flows are written each switch's for drop action. and subsequently existing flows were exist which has written in during the redirect action. Due to this still the traffic is allowing between the end points.</li> </ul> </li> </ul> </li> </ul> <p>Ex: intent:add -f 00:00:00:00:00:01 -t 00:00:00:00:00:05 -a block</p> <p>mininet&gt; dpctl dump-flows</p> <ul> <li> <ul> <li> <ul> <li>s1 ------------------------------------------------------------------------<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x0, duration=16.848s, table=0, n_packets=0, n_bytes=0, idle_age=16, pri<br/> ority=9000,dl_src=00:00:00:00:00:01,dl_dst=00:00:00:00:00:05 actions=drop<br/> cookie=0x0, duration=84.604s, table=0, n_packets=6, n_bytes=588, idle_age=78, p<br/> riority=9000,in_port=1,dl_src=00:00:00:00:00:01,dl_dst=00:00:00:00:00:05 actions<br/> =output:4<br/> cookie=0x0, duration=84.677s, table=0, n_packets=6, n_bytes=588, idle_age=78, p<br/> riority=9000,in_port=3,dl_src=00:00:00:00:00:05,dl_dst=00:00:00:00:00:01 actions<br/> =output:1<br/> cookie=0x1, duration=685.065s, table=0, n_packets=274, n_bytes=23290, idle_age=<br/> 0, priority=9500,dl_type=0x88cc actions=CONTROLLER:65535<br/> cookie=0x1, duration=685.065s, table=0, n_packets=4, n_bytes=168, idle_age=78,<br/> priority=10000,arp actions=CONTROLLER:65535,NORMAL</li> <li>s2 ------------------------------------------------------------------------<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x0, duration=16.866s, table=0, n_packets=0, n_bytes=0, idle_age=16, pri<br/> ority=9000,dl_src=00:00:00:00:00:01,dl_dst=00:00:00:00:00:05 actions=drop<br/> cookie=0x0, duration=84.625s, table=0, n_packets=6, n_bytes=588, idle_age=78, p<br/> riority=9000,in_port=5,dl_src=00:00:00:00:00:01,dl_dst=00:00:00:00:00:05 actions<br/> =output:3<br/> cookie=0x0, duration=84.726s, table=0, n_packets=6, n_bytes=588, idle_age=78, p<br/> riority=9000,in_port=3,dl_src=00:00:00:00:00:05,dl_dst=00:00:00:00:00:01 actions<br/> =output:4<br/> cookie=0x2, duration=685.076s, table=0, n_packets=274, n_bytes=23290, idle_age=<br/> 0, priority=9500,dl_type=0x88cc actions=CONTROLLER:65535<br/> cookie=0x2, duration=685.076s, table=0, n_packets=4, n_bytes=168, idle_age=78,<br/> priority=10000,arp actions=CONTROLLER:65535,NORMAL</li> <li>s3 ------------------------------------------------------------------------<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x0, duration=16.845s, table=0, n_packets=0, n_bytes=0, idle_age=16, pri<br/> ority=9000,dl_src=00:00:00:00:00:01,dl_dst=00:00:00:00:00:05 actions=drop<br/> cookie=0x0, duration=84.582s, table=0, n_packets=6, n_bytes=588, idle_age=78, p<br/> riority=9000,in_port=2,dl_src=00:00:00:00:00:01,dl_dst=00:00:00:00:00:05 actions<br/> =output:3<br/> cookie=0x3, duration=685.08s, table=0, n_packets=400, n_bytes=34000, idle_age=0<br/> , priority=9500,dl_type=0x88cc actions=CONTROLLER:65535</li> <li>s4 ------------------------------------------------------------------------<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x0, duration=16.868s, table=0, n_packets=0, n_bytes=0, idle_age=16, pri<br/> ority=9000,dl_src=00:00:00:00:00:01,dl_dst=00:00:00:00:00:05 actions=drop<br/> cookie=0x0, duration=84.662s, table=0, n_packets=6, n_bytes=588, idle_age=78, p<br/> riority=9000,in_port=3,dl_src=00:00:00:00:00:01,dl_dst=00:00:00:00:00:05 actions<br/> =output:1<br/> cookie=0x4, duration=685.088s, table=0, n_packets=400, n_bytes=34000, idle_age=<br/> 0, priority=9500,dl_type=0x88cc actions=CONTROLLER:65535<br/> mininet&gt;</li> </ul> </li> </ul> </li> </ul> Development External issue ID 5455 External issue URL Rank 0|i02e67: