https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/OPNFLWPLUG-737 OpenFlowPlugin <p>This is to track the following behaviour (observed as recently as tcp:192.168.56.101:6640):</p> <p>setup:</p> <ul class="alternate" type="square"> <li>Feature odl-ovsdb-openstack is installed.</li> <li>ovsdb.l3.fwd.enabled=yes</li> </ul> <p>Flow durations are now “reset” when the switch is reconnected by resetting the manager on the switch:</p> <p>E.g.<br/> root@mininet-vm:/root/openvswitch-2.5.0# ovs-vsctl show<br/> 708f2ebf-3168-4e0c-8138-cdccb7f1c4e8<br/> Manager "tcp:192.168.56.101:6640"<br/> is_connected: true<br/> Bridge br-ex<br/> Controller "tcp:192.168.56.101:6653"<br/> is_connected: true<br/> fail_mode: secure<br/> Port br-ex<br/> Interface br-ex<br/> type: internal<br/> Bridge br-int<br/> Controller "tcp:192.168.56.101:6653"<br/> is_connected: true<br/> fail_mode: secure<br/> Port br-int<br/> Interface br-int<br/> type: internal<br/> ovs_version: "2.5.0"<br/> root@mininet-vm:/root/openvswitch-2.5.0# ovs-vsctl del-manager<br/> root@mininet-vm:/root/openvswitch-2.5.0# ovs-ofctl dump-flows -O Openflow13 br-ex<br/> OFPST_FLOW reply (OF1.3) (xid=0x2):<br/> cookie=0x0, duration=1743.438s, table=0, n_packets=0, n_bytes=0, dl_type=0x88cc actions=CONTROLLER:65535<br/> cookie=0x0, duration=1743.438s, table=0, n_packets=0, n_bytes=0, priority=0 actions=NORMAL<br/> root@mininet-vm:/root/openvswitch-2.5.0# ovs-vsctl set-manager "tcp:192.168.56.101:6640"<br/> root@mininet-vm:/root/openvswitch-2.5.0# ovs-ofctl dump-flows -O Openflow13 br-ex<br/> OFPST_FLOW reply (OF1.3) (xid=0x2):<br/> cookie=0x0, duration=14.952s, table=0, n_packets=0, n_bytes=0, dl_type=0x88cc actions=CONTROLLER:65535<br/> cookie=0x0, duration=14.939s, table=0, n_packets=0, n_bytes=0, priority=0 actions=NORMAL</p> <p>Operating System: All<br/> Platform: All</p> OPNFLWPLUG-737

Flow duration is reset upon resetting manager on switch

Bug Resolved Won't Do Unassigned Bertrand Low Fri, 22 Jul 2016 22:46:10 +0000 Mon, 27 Sep 2021 09:01:52 +0000 Tue, 12 Dec 2017 00:51:45 +0000 General 0 1 <p>This behaviour is due to <a href="https://git.opendaylight.org/gerrit/#/c/40744/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/40744/</a> and has been discussed on the threads: </p> <ul class="alternate" type="square"> <li><a href="https://lists.opendaylight.org/pipermail/openflowplugin-dev/2016-July/005509.html" class="external-link" target="_blank" rel="nofollow noopener">https://lists.opendaylight.org/pipermail/openflowplugin-dev/2016-July/005509.html</a></li> <li><a href="http://meetings.opendaylight.org/opendaylight-openflowplugin/2016/openflow_plugin_meeting_july_14/opendaylight-openflowplugin-openflow_plugin_meeting_july_14.2016-07-14-15.10.html" class="external-link" target="_blank" rel="nofollow noopener">http://meetings.opendaylight.org/opendaylight-openflowplugin/2016/openflow_plugin_meeting_july_14/opendaylight-openflowplugin-openflow_plugin_meeting_july_14.2016-07-14-15.10.html</a></li> </ul> <p>Community to determine if this is an issue or not.</p> <p>Amendment to Description:</p> <p>This behaviour has been observed as recently as distribution-karaf-0.5.0-20160722.183255</p> <p>Possible fix is to revert <a href="https://git.opendaylight.org/gerrit/#/c/40744/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/40744/</a> and apply <a href="https://git.opendaylight.org/gerrit/#/c/38895/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/38895/</a></p> <p>Hi Bertrand,</p> <p>Reverting this will enable the inconsistent behavior of the plugin when it comes to modifying the flow. There are two scenario when it comes to updating the flows </p> <p>(1) User installs the flow, flow installs successfully on the switch, user modify the flow and it gets updated on the switch. So basically it shows that modifying the flow in data store will modify your flow.</p> <p>(2) User installs the flow, but flow installation on the switch fails because of the wrong action (e.g using the port that is not available on the switch), then user modifying the flow with correct action/match, but flow installation fails, because when you send FLOW_MODE( MODIFY), to the switch, switch will reject this request if flow don't exist on the switch. So in this scenario, modifying the flow is not working. </p> <p>So modifying the flow in data store is working based on the scenario.</p> <p>That change done through <a href="https://git.opendaylight.org/gerrit/#/c/40744/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/40744/</a> make this consistent. With this change, modifying flow in data store will work in both the scenario, but this has a side effect that the duration will be reset.</p> <p>Hi Anil,</p> <p>thanks for explaining the two scenarios. I have recently pulled in the master branch and rebased and applied patch 38895 and reverted patch 40744 and tested the two scenarios.</p> <hr /> <p>(1) I've installed the following flows via REST calls to the config data store, which were then successfully pushed to the switch:</p> <p>root@mininet-vm:~# ovs-ofctl dump-flows s1<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x1, duration=2.938s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=2, priority=2,ip,nw_dst=10.0.0.2 actions=drop<br/> cookie=0x0, duration=2.934s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=2, priority=2,ip,nw_dst=10.0.0.1 actions=drop<br/> cookie=0x4, duration=2.930s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=2, priority=2,ip,nw_dst=10.0.0.5 actions=drop<br/> cookie=0x3, duration=2.921s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=2, priority=2,ip,nw_dst=10.0.0.4 actions=drop<br/> cookie=0x2, duration=2.914s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=2, priority=2,ip,nw_dst=10.0.0.3 actions=drop</p> <p>I then subsequently modified the flows, in quick succession, via REST and was able to both modify the flow in the data store and also on the switch without resetting the flow duration:</p> <p>root@mininet-vm:~# ovs-ofctl dump-flows s1<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x0, duration=31.391s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=31, hard_age=4, priority=2,ip,nw_dst=10.0.0.1 actions=dec_ttl<br/> cookie=0x2, duration=31.371s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=31, hard_age=4, priority=2,ip,nw_dst=10.0.0.3 actions=dec_ttl<br/> cookie=0x1, duration=31.395s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=31, hard_age=4, priority=2,ip,nw_dst=10.0.0.2 actions=dec_ttl<br/> cookie=0x3, duration=31.378s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=31, hard_age=4, priority=2,ip,nw_dst=10.0.0.4 actions=dec_ttl<br/> cookie=0x4, duration=31.387s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=31, hard_age=4, priority=2,ip,nw_dst=10.0.0.5 actions=dec_ttl</p> <p>root@mininet-vm:~# ovs-ofctl dump-flows s1<br/> NXST_FLOW reply (xid=0x4):<br/> cookie=0x0, duration=43.543s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=43, hard_age=3, priority=2,ip,nw_dst=10.0.0.1 actions=FLOOD<br/> cookie=0x2, duration=43.523s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=43, hard_age=3, priority=2,ip,nw_dst=10.0.0.3 actions=FLOOD<br/> cookie=0x1, duration=43.547s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=43, hard_age=3, priority=2,ip,nw_dst=10.0.0.2 actions=FLOOD<br/> cookie=0x3, duration=43.530s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=43, hard_age=3, priority=2,ip,nw_dst=10.0.0.4 actions=FLOOD<br/> cookie=0x4, duration=43.539s, table=0, n_packets=0, n_bytes=0, idle_timeout=65000, hard_timeout=65000, idle_age=43, hard_age=3, priority=2,ip,nw_dst=10.0.0.5 actions=FLOOD</p> <p>Here is the log in the switch showing the flow commands that it received:</p> <p>Aug 11 15:31:31 mininet-vm ovs-vswitchd: ovs|00314|connmgr|INFO|s1&lt;-&gt;tcp:192.168.56.101:6653: 5 flow_mods 10 s ago (5 adds)<br/> Aug 11 15:32:31 mininet-vm ovs-vswitchd: ovs|00315|connmgr|INFO|s1&lt;-&gt;tcp:192.168.56.101:6653: 10 flow_mods in the 13 s starting 43 s ago (10 modifications)</p> <hr /> <p>(2) I've installed the following flow in the config data store via REST:</p> <p>&lt;?xml version="1.0" encoding="UTF-8" standalone="no"?&gt;<br/> &lt;flow xmlns="urn:opendaylight:flow:inventory"&gt;<br/> &lt;id&gt;1&lt;/id&gt;<br/> &lt;priority&gt;40&lt;/priority&gt;<br/> &lt;table_id&gt;0&lt;/table_id&gt;<br/> &lt;flow-name&gt;Foo40&lt;/flow-name&gt;<br/> &lt;instructions&gt;<br/> &lt;instruction&gt;<br/> &lt;order&gt;0&lt;/order&gt;<br/> &lt;apply-actions&gt;<br/> &lt;action&gt;<br/> &lt;order&gt;0&lt;/order&gt;<br/> &lt;dec-nw-ttl&gt;&lt;/dec-nw-ttl&gt;<br/> &lt;/action&gt;<br/> &lt;/apply-actions&gt;<br/> &lt;/instruction&gt;<br/> &lt;/instructions&gt;<br/> &lt;match&gt;<br/> &lt;ethernet-match&gt;<br/> &lt;ethernet-type&gt;<br/> &lt;type&gt;2048&lt;/type&gt;<br/> &lt;/ethernet-type&gt;<br/> &lt;/ethernet-match&gt;<br/> &lt;ipv4-source-address-no-mask&gt;40.40.40.0&lt;/ipv4-source-address-no-mask&gt;<br/> &lt;ipv4-destination-address-no-mask&gt;40.40.40.0&lt;/ipv4-destination-address-no-mask&gt; &lt;!-- this fails to be pushed on the switch --&gt;<br/> &lt;ipv4-destination-arbitrary-bitmask&gt;255.0.255.0&lt;/ipv4-destination-arbitrary-bitmask&gt;<br/> &lt;ipv4-source-arbitrary-bitmask&gt;255.255.255.255&lt;/ipv4-source-arbitrary-bitmask&gt;<br/> &lt;/match&gt;<br/> &lt;/flow&gt;</p> <p>but this flow fails to be pushed onto the switch (running OVS 2.5.0) due to this error:</p> <p>Aug 11 16:43:33 mininet-vm ovs-vswitchd: ovs|00831|nx_match|WARN|Rejecting NXM/OXM entry 0:32768:12:1:8 with 1-bits in value for bits wildcarded by the mask.<br/> Aug 11 16:43:33 mininet-vm ovs-vswitchd: ovs|00832|connmgr|INFO|s1&lt;-&gt;tcp:192.168.56.101:6653: sending OFPBMC_BAD_WILDCARDS error reply to OFPT_FLOW_MOD message</p> <p>I then modified the flow in the config data store via REST by changing the &lt;ipv4-destination-address-no-mask&gt; to:<br/> &lt;ipv4-destination-address-no-mask&gt;40.0.40.0&lt;/ipv4-destination-address-no-mask&gt; &lt;!-- this is successfully pushed to the switch --&gt;<br/> and the flow is successfully pushed onto the switch as an ADD.</p> <hr /> <p>Please let me know if the above behaviour is desirable and I will submit a new patch with the changes for review by the community.</p> <p>Hi Bertrand,</p> <p>This flow that you are modifying and installing again is basically changing the match construct in the flow (ip-address). Whenever you change the match, it's a new flow as per plugin, because as per openflowplugin spec, you can't modify the match construct of the flow, you can only modify the actions/instructions of the flow. As i mentioned in my previous comment, if you install a flow that has wrong <b>actions/instructions</b> and try to modify the flow again with correct actions/instruction, it will not work.</p> <p>Hi Anil,</p> <p>Sorry, I may be misunderstanding or missing a code path for the updating of flows. Would greatly appreciate some clarification. Do you mean that the logic of patch 38895 is incorrect, or that it was applied to the OFRpcTaskFactory, which no longer appears to be involved in the code path for the adding/updating of flows.</p> <p>I have ported a similar fix to patch 38895 to the updateFlow() method in the SalFlowServiceImpl class. With this logic in place in SalFlowServiceImpl.updateFlow(), the flow example provided in <a href="https://jira.opendaylight.org/browse/OPNFLWPLUG-713" title="Modifying config flow does not work if first flow creation failed" class="issue-link" data-issue-key="OPNFLWPLUG-713"><del>OPNFLWPLUG-713</del></a> (with the configuration &lt;output-node-connector&gt;openflow:1:65535&lt;/output-node-connector&gt;) can be successfully pushed to the switch after modifying it with a correct &lt;output-node-connector&gt; configuration, and existing flows on the switch can be modified without resetting the flow duration. Please let me know if you think this appears to be on the right track.</p> <p>Hi Bertrand,</p> <p>I think we both are on same page. In your patch, you are making a read transaction to the data store to check if the flow exist in the data store or not. It has two issues<br/> (1) Making read call for each flow has a performance penalty. I thought of using the same approach, but because of the additional read call per flow add/update, i avoided that approach to avoid any performance penalty.<br/> (2) This solution relies on statistics collection, but if you disable the statistics collection, your solution will behave the same way as we have today after my patch. Because in your approach it will check in the operational data store and it won't fine the hashcode for the flow and it will assume that flow is not installed on the switch and it will add the flow, which is basically what my patch is doing.</p> <p>So overall, after discussing this with other committer, we thought that we should go with the approach we have currently in the plugin.</p> <p>Hi Anil,</p> <p>thanks for clarifying. Feel free to change this bug's Importance or close it as you see fit.</p> Development External issue ID 6260 External issue URL Rank 0|i032zz: