noironetworks / opflex / 303
68%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 253
Run time 17s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
303

push

travis-ci

Tom Flynn 
Add support for cloud ingress policy

- This extends the earlier support for egress policy via remoteEp
  subnets. That alone works fine with a defaultEPG where the
  node network can always talk to pod network
- Support for ingress policy gets the EPG for ingress also from
  the ext policy subnet
- Since we use the veth_host to get ingress packets earlier we
  were using SPEG from veth_host that happens to be the in the
  node network
- We still need to use veth_host for source table entries
- However rather than getting SPEG from the veth_host for ext-pol
  we get SEPG based on source subnet and program source table
  flows using veth_host as ingress port.
- These flows are managed using uuid of the remote EP that
  is responsible for adding the ext-pol subnets
- veth_host node network takes precedence, so anything coming
  from node network subnet will still use veth_host EPG
- To enable this in a generic way we make the ip addresses in
  EP files be able to take ip/mask and a higher priority rule
  in source table would allow SEPG from veth_host to take
  precedence for subnets defined in that EP file.

egress route flows
 cookie=0x0, duration=11.322s, table=7, n_packets=0, n_bytes=0, priority=34,ip,reg6=0x1,dl_dst=00:22:bd:f8:19:ff,nw_dst=100.100.100.0/24 actions=load:0x761eb5->NXM_NX_REG2[],write_metadata:0x8/0xff,goto_table:12
ingress source flows (EPG from subnet)
 cookie=0x0, duration=45.029s, table=2, n_packets=0, n_bytes=0, priority=34,ip,in_port="pi-veth_host_ac",dl_src=32:e5:bd:09:7a:9a,nw_src=100.100.100.0/24 actions=load:0x761eb5->NXM_NX_REG0[],load:0x1->NXM_NX_REG4[],load:0x1->NXM_NX_REG5[],load:0x1->NXM_NX_REG6[],goto_table:4

veth flows split into ARP and IP (subnet matching) and higher prio
 cookie=0x0, duration=1370.416s, table=2, n_packets=0, n_bytes=0, priority=140,arp,in_port="pi-veth_host_ac",dl_src=f6:80:14:1e:f5:37 actions=load:0x760ac2->NXM_NX_REG0[],load:0x2->NXM_NX_REG4[],load:0x2->NXM_NX_REG5[],load:0x2->NXM_NX_REG6[],got... (continued)

19574 of 26229 relevant lines covered (74.63%)

3052.32 hits per line

Jobs
ID Job ID Ran Files Coverage
1 303.1 0
74.63
 Travis Job 303.1
Source Files on build 303
Detailed source file information is not available for this build.