ovn-trace - shared gateway service trace

kubectl exec -c sb-ovsdb -n ovn-kubernetes $(< ~/scripts/ovnGetOvnDb.txt) -it -- ovn-trace ovn-worker2 'inport == "services-7355_execpod9m6dk" && eth.src == 0a:58:25:07:51:d2 && ip6.src == fd00:10:244:3::f && tcp.src == 6443 && eth.dst ==0a:58:71:75:e6:87 && ip6.dst == 2001:db8:1::242:ac11:3 && tcp.dst == 31461 && ip.ttl == 64'

# tcp6,reg14=0x6,vlan_tci=0x0000,dl_src=0a:58:25:07:51:d2,dl_dst=0a:58:71:75:e6:87,ipv6_src=fd00:10:244:3::f,ipv6_dst=2001:db8:1::242:ac11:3,ipv6_label=0x00000,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=6443,tp_dst=31461,tcp_flags=0

ingress(dp="ovn-worker2", inport="services-7355_execpod9m6dk")
--------------------------------------------------------------
 0. ls_in_port_sec_l2 (ovn-northd.c:4754): inport == "services-7355_execpod9m6dk" && eth.src == {0a:58:25:07:51:d2}, priority 50, uuid 1f7247e6
    next;
 1. ls_in_port_sec_ip (ovn-northd.c:4438): inport == "services-7355_execpod9m6dk" && eth.src == 0a:58:25:07:51:d2 && ip6.src == {fe80::858:25ff:fe07:51d2, fd00:10:244:3::f}, priority 90, uuid 0a23e4f8
    next;
19. ls_in_l2_lkup (ovn-northd.c:7171): eth.dst == 0a:58:71:75:e6:87, priority 50, uuid 507d5da6
    outport = "stor-ovn-worker2";
    output;

egress(dp="ovn-worker2", inport="services-7355_execpod9m6dk", outport="stor-ovn-worker2")
-----------------------------------------------------------------------------------------
 0. ls_out_pre_lb (ovn-northd.c:4874): ip && outport == "stor-ovn-worker2", priority 110, uuid 4da0a064
    next;
 3. ls_out_lb (ovn-northd.c:4874): ip && outport == "stor-ovn-worker2", priority 65535, uuid 70757f06
    next;
 9. ls_out_port_sec_l2 (ovn-northd.c:4820): outport == "stor-ovn-worker2", priority 50, uuid e22b2fd5
    output;
    /* output to "stor-ovn-worker2", type "patch" */

ingress(dp="ovn_cluster_router", inport="rtos-ovn-worker2")
-----------------------------------------------------------
 0. lr_in_admission (ovn-northd.c:8470): eth.dst == 0a:58:71:75:e6:87 && inport == "rtos-ovn-worker2", priority 50, uuid a3b02d78
    xreg0[0..47] = 0a:58:71:75:e6:87;
    next;
 1. lr_in_lookup_neighbor (ovn-northd.c:8546): 1, priority 0, uuid aecb570c
    reg9[2] = 1;
    next;
 2. lr_in_learn_neighbor (ovn-northd.c:8555): reg9[2] == 1, priority 100, uuid 73cc93bb
    next;
10. lr_in_ip_routing (ovn-northd.c:7957): ip6.src == fd00:10:244:3::/64, priority 128, uuid 22bf2036
    ip.ttl--;
    reg8[0..15] = 0;
    xxreg0 = fd98:0:0:3::1;
    xxreg1 = fd98:0:0:3::2;
    eth.src = 0a:58:69:7c:56:9f;
    outport = "dtoj-ovn-worker2";
    flags.loopback = 1;
    next;
11. lr_in_ip_routing_ecmp (ovn-northd.c:10083): reg8[0..15] == 0, priority 150, uuid e492bd17
    next;
12. lr_in_policy (ovn-northd.c:7431): ip6.src == fd00:10:244::/48 && ip6.dst == 2001:db8:1::242:ac11:3/128, priority 101, uuid d8675253
    next;
13. lr_in_arp_resolve (ovn-northd.c:10565): outport == "dtoj-ovn-worker2" && xxreg0 == {fd98:0:0:3::1, fe80::858:58ff:fe60:a33f}, priority 100, uuid a2ab377b
    eth.dst = 0a:58:58:60:a3:3f;
    next;
17. lr_in_arp_request (ovn-northd.c:10799): 1, priority 0, uuid ac700988
    output;

egress(dp="ovn_cluster_router", inport="rtos-ovn-worker2", outport="dtoj-ovn-worker2")
--------------------------------------------------------------------------------------
 3. lr_out_delivery (ovn-northd.c:10844): outport == "dtoj-ovn-worker2", priority 100, uuid 5daf8596
    output;
    /* output to "dtoj-ovn-worker2", type "patch" */

ingress(dp="join_ovn-worker2", inport="jtod-ovn-worker2")
---------------------------------------------------------
 0. ls_in_port_sec_l2 (ovn-northd.c:4754): inport == "jtod-ovn-worker2", priority 50, uuid 31fd9389
    next;
 4. ls_in_pre_lb (ovn-northd.c:4871): ip && inport == "jtod-ovn-worker2", priority 110, uuid 168a2306
    next;
19. ls_in_l2_lkup (ovn-northd.c:7236): eth.dst == 0a:58:58:60:a3:3f, priority 50, uuid f2ee1152
    outport = "jtor-GR_ovn-worker2";
    output;

egress(dp="join_ovn-worker2", inport="jtod-ovn-worker2", outport="jtor-GR_ovn-worker2")
---------------------------------------------------------------------------------------
 0. ls_out_pre_lb (ovn-northd.c:4874): ip && outport == "jtor-GR_ovn-worker2", priority 110, uuid fb66ea08
    next;
 9. ls_out_port_sec_l2 (ovn-northd.c:4820): outport == "jtor-GR_ovn-worker2", priority 50, uuid 049bc448
    output;
    /* output to "jtor-GR_ovn-worker2", type "l3gateway" */

ingress(dp="GR_ovn-worker2", inport="rtoj-GR_ovn-worker2")
----------------------------------------------------------
 0. lr_in_admission (ovn-northd.c:8470): eth.dst == 0a:58:58:60:a3:3f && inport == "rtoj-GR_ovn-worker2", priority 50, uuid 5031f7d2
    xreg0[0..47] = 0a:58:58:60:a3:3f;
    next;
 1. lr_in_lookup_neighbor (ovn-northd.c:8546): 1, priority 0, uuid 63c2fbd0
    reg9[2] = 1;
    next;
 2. lr_in_learn_neighbor (ovn-northd.c:8555): reg9[2] == 1, priority 100, uuid a7fb2c05
    next;
 6. lr_in_dnat (ovn-northd.c:9816): ip, priority 50, uuid 73ca4d10
    flags.loopback = 1;
    ct_dnat;

ct_dnat /* assuming no un-dnat entry, so no change */
-----------------------------------------------------
10. lr_in_ip_routing (ovn-northd.c:7957): ip6.dst == 2001:db8:1::/64, priority 129, uuid d2f6d67c
    ip.ttl--;
    reg8[0..15] = 0;
    xxreg0 = ip6.dst;
    xxreg1 = 2001:db8:1::242:ac11:4;
    eth.src = 02:42:ac:11:00:04;
    outport = "rtoe-GR_ovn-worker2";
    flags.loopback = 1;
    next;
11. lr_in_ip_routing_ecmp (ovn-northd.c:10083): reg8[0..15] == 0, priority 150, uuid 01e11c36
    next;
13. lr_in_arp_resolve (ovn-northd.c:10582): ip6, priority 0, uuid e3cbdbd6
    get_nd(outport, xxreg0);
    /* MAC binding to 02:42:ac:11:00:03. */
    next;
17. lr_in_arp_request (ovn-northd.c:10799): 1, priority 0, uuid e13a064d
    output;

egress(dp="GR_ovn-worker2", inport="rtoj-GR_ovn-worker2", outport="rtoe-GR_ovn-worker2")
----------------------------------------------------------------------------------------
 1. lr_out_snat (ovn-northd.c:9646): ip && ip6.src == fd00:10:244::/48, priority 17, uuid 59ae36d8
    ct_snat(2001:db8:1::242:ac11:4);

ct_snat(ip6.src=2001:db8:1::242:ac11:4)
---------------------------------------
 3. lr_out_delivery (ovn-northd.c:10844): outport == "rtoe-GR_ovn-worker2", priority 100, uuid c98ef76b
    output;
    /* output to "rtoe-GR_ovn-worker2", type "l3gateway" */

ingress(dp="ext_ovn-worker2", inport="etor-GR_ovn-worker2")
-----------------------------------------------------------
 0. ls_in_port_sec_l2 (ovn-northd.c:4754): inport == "etor-GR_ovn-worker2", priority 50, uuid b73111b7
    next;
 4. ls_in_pre_lb (ovn-northd.c:4871): ip && inport == "etor-GR_ovn-worker2", priority 110, uuid 69682575
    next;
19. ls_in_l2_lkup (ovn-northd.c:7286): 1, priority 0, uuid 4500145d
    outport = "_MC_unknown";
    output;

multicast(dp="ext_ovn-worker2", mcgroup="_MC_unknown")
------------------------------------------------------

    egress(dp="ext_ovn-worker2", inport="etor-GR_ovn-worker2", outport="breth0_ovn-worker2")
    ----------------------------------------------------------------------------------------
         0. ls_out_pre_lb (ovn-northd.c:4874): ip && outport == "breth0_ovn-worker2", priority 110, uuid 6a157815
            next;
         9. ls_out_port_sec_l2 (ovn-northd.c:4820): outport == "breth0_ovn-worker2", priority 50, uuid ca62a2fc
            output;
            /* output to "breth0_ovn-worker2", type "localnet" */



$ ovnnbctl list Logical_Router_Policy
_uuid               : 6979b810-13ae-4974-986a-de041adc571e
action              : allow
external_ids        : {}
match               : "ip6.src == fd00:10:244::/48 && ip6.dst == 2001:db8:1::242:ac11:4/128"
nexthop             : []
options             : {}
priority            : 101

_uuid               : 7bfe39a0-0fb5-46d1-ad9b-bd05982dab62
action              : allow
external_ids        : {}
match               : "ip6.src == fd00:10:244::/48 && ip6.dst == 2001:db8:1::242:ac11:3/128"
nexthop             : []
options             : {}
priority            : 101

_uuid               : f39c7579-1b2d-4a09-948b-e6bbcd21036e
action              : allow
external_ids        : {}
match               : "ip6.src == fd00:10:244::/48 && ip6.dst == fd00:10:244::/48"
nexthop             : []
options             : {}
priority            : 101

_uuid               : 8d501d19-c2b2-47f8-a423-5c20e6a1127d
action              : allow
external_ids        : {}
match               : "ip6.src == fd00:10:244::/48 && ip6.dst == 2001:db8:1::242:ac11:2/128"
nexthop             : []
options             : {}
priority            : 101

_uuid               : 884d8829-a050-43e6-9ce0-b2808344a79d
action              : reroute
external_ids        : {}
match               : "ip6.src == fd00:10:244:2::2 && ip6.dst == 2001:db8:1::242:ac11:3 /* ovn-worker */"
nexthop             : "fd99::1"
options             : {}
priority            : 1005

_uuid               : 04dafad3-d8d8-47c5-a207-5b93c5555613
action              : reroute
external_ids        : {}
match               : "inport == \"rtos-ovn-worker\" && ip6.dst == 2001:db8:1::242:ac11:3 /* ovn-worker */"
nexthop             : "fd00:10:244:2::2"
options             : {}
priority            : 1004

_uuid               : 48de7d4b-5bb0-49e6-bd88-ff653f06388e
action              : reroute
external_ids        : {}
match               : "inport == \"rtos-ovn-worker2\" && ip6.dst == 2001:db8:1::242:ac11:4 /* ovn-worker2 */"
nexthop             : "fd00:10:244:3::2"
options             : {}
priority            : 1004

_uuid               : 2a6c2db4-f658-4a0e-8cb3-4b04ca52cebb
action              : reroute
external_ids        : {}
match               : "inport == \"rtos-ovn-control-plane\" && ip6.dst == 2001:db8:1::242:ac11:2 /* ovn-control-plane */"
nexthop             : "fd00:10:244:1::2"
options             : {}
priority            : 1004

_uuid               : 2c830ef4-dd22-4a83-8381-79b9d3c044aa
action              : reroute
external_ids        : {}
match               : "ip6.src == fd00:10:244:3::2 && ip6.dst == 2001:db8:1::242:ac11:4 /* ovn-worker2 */"
nexthop             : "fd99::1"
options             : {}
priority            : 1005

_uuid               : 4c2e6a45-40a6-4190-90d8-d35c67242ab4
action              : reroute
external_ids        : {}
match               : "ip6.src == fd00:10:244:1::2 && ip6.dst == 2001:db8:1::242:ac11:2 /* ovn-control-plane */"
nexthop             : "fd99::1"
options             : {}
priority            : 1005