Last active
June 20, 2020 19:15
-
-
Save jianzzha/f7f2150eed656d0aaca97c6facf0210d to your computer and use it in GitHub Desktop.
ovn-intra-node-w/o-ACL
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Starting 1 threads running profile:tcp-stream-1024b-1i ... 0.00 seconds | |
Txn1 0 / 1.00(s) = 0 1op/s | |
Txn2 5.92GB / 60.26(s) = 843.80Mb/s 103003op/s | |
Txn3 0 / 0.00(s) = 0 0op/s | |
------------------------------------------------------------------------------- | |
Total 5.92GB / 62.36(s) = 815.35Mb/s 99529op/s | |
Netstat statistics for this run | |
------------------------------------------------------------------------------- | |
Nic opkts/s ipkts/s obits/s ibits/s | |
eth0 96869 59103 866.50Mb/s 31.21Mb/s | |
------------------------------------------------------------------------------- | |
Run Statistics | |
Hostname Time Data Throughput Operations Errors | |
------------------------------------------------------------------------------- | |
10.128.2.9 62.36s 5.92GB 815.32Mb/s 6206819 0.00 | |
master 62.36s 5.92GB 815.35Mb/s 6206979 0.00 | |
------------------------------------------------------------------------------- | |
Difference(%) -0.00% 0.00% 0.00% 0.00% 0.00% |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
sh-4.2# export db="--db=ssl:192.168.222.20:9642,ssl:192.168.222.21:9642,ssl:192.168.222.22:9642" | |
sh-4.2# export com="-p /ovn-cert/tls.key -c /ovn-cert/tls.crt -C /ovn-ca/ca-bundle.crt" | |
sh-4.2# ovn-sbctl show | |
it Hangs here |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
export db="--db=ssl:192.168.222.20:9641,ssl:192.168.222.21:9641,ssl:192.168.222.22:9641" | |
export com="-p /ovn-cert/tls.key -c /ovn-cert/tls.crt -C /ovn-ca/ca-bundle.crt" | |
ovn-nbctl $db $com acl-list worker1 | |
to-lport 1001 (ip4.src==10.131.0.2) allow-related | |
ovn-nbctl $db $com acl-list worker0 | |
to-lport 1001 (ip4.src==10.128.2.2) allow-related | |
ovn-nbctl $db $com acl-del worker0 | |
ovn-nbctl $db $com acl-del worker1 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
port 9320a6372a3c7ab 3679 | |
port d514adcf668f299 19 | |
ovs-appctl ofproto/trace br-int in_port=3679,dl_src=32:6a:e8:80:02:05,dl_dst=32:6a:e8:80:02:0a,tcp,tp_dst=20000,nw_dst=10.128.2.9,nw_src=10.128.2.4,nw_ttl=64 | |
Flow: tcp,in_port=3679,vlan_tci=0x0000,dl_src=32:6a:e8:80:02:05,dl_dst=32:6a:e8:80:02:0a,nw_src=10.128.2.4,nw_dst=10.128.2.9,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=0,tp_dst=20000,tcp_flags=0 | |
bridge("br-int") | |
---------------- | |
0. in_port=3679, priority 100, cookie 0x1c796fbf | |
set_field:0x22->reg13 | |
set_field:0x18->reg11 | |
set_field:0x15->reg12 | |
set_field:0xf->metadata | |
set_field:0x14->reg14 | |
resubmit(,8) | |
8. reg14=0x14,metadata=0xf,dl_src=32:6a:e8:80:02:05, priority 50, cookie 0x56411a28 | |
resubmit(,9) | |
9. ip,reg14=0x14,metadata=0xf,dl_src=32:6a:e8:80:02:05,nw_src=10.128.2.4, priority 90, cookie 0x3ed2fab5 | |
resubmit(,10) | |
10. metadata=0xf, priority 0, cookie 0x6b4373e0 | |
resubmit(,11) | |
11. metadata=0xf, priority 0, cookie 0x6b56d789 | |
resubmit(,12) | |
12. metadata=0xf, priority 0, cookie 0x27bfc88a | |
resubmit(,13) | |
13. metadata=0xf, priority 0, cookie 0xc5034cb7 | |
resubmit(,14) | |
14. metadata=0xf, priority 0, cookie 0x365505fe | |
resubmit(,15) | |
15. metadata=0xf, priority 0, cookie 0xf1faf427 | |
resubmit(,16) | |
16. metadata=0xf, priority 0, cookie 0x587c4c3e | |
resubmit(,17) | |
17. metadata=0xf, priority 0, cookie 0xaed3f06c | |
resubmit(,18) | |
18. metadata=0xf, priority 0, cookie 0xcf988b0f | |
resubmit(,19) | |
19. metadata=0xf, priority 0, cookie 0xb2245f91 | |
resubmit(,20) | |
20. metadata=0xf, priority 0, cookie 0x41280fed | |
resubmit(,21) | |
21. metadata=0xf, priority 0, cookie 0xfb38c8cf | |
resubmit(,22) | |
22. metadata=0xf, priority 0, cookie 0x5772e6a3 | |
resubmit(,23) | |
23. metadata=0xf, priority 0, cookie 0x587b808c | |
resubmit(,24) | |
24. metadata=0xf, priority 0, cookie 0xe4457a95 | |
resubmit(,25) | |
25. metadata=0xf, priority 0, cookie 0x49d81965 | |
resubmit(,26) | |
26. metadata=0xf, priority 0, cookie 0xc5a98bb | |
resubmit(,27) | |
27. metadata=0xf,dl_dst=32:6a:e8:80:02:0a, priority 50, cookie 0x6975c2a8 | |
set_field:0xf->reg15 | |
resubmit(,32) | |
32. priority 0 | |
resubmit(,33) | |
33. reg15=0xf,metadata=0xf, priority 100 | |
set_field:0x27->reg13 | |
set_field:0x18->reg11 | |
set_field:0x15->reg12 | |
resubmit(,34) | |
34. priority 0 | |
set_field:0->reg0 | |
set_field:0->reg1 | |
set_field:0->reg2 | |
set_field:0->reg3 | |
set_field:0->reg4 | |
set_field:0->reg5 | |
set_field:0->reg6 | |
set_field:0->reg7 | |
set_field:0->reg8 | |
set_field:0->reg9 | |
resubmit(,40) | |
40. ip,metadata=0xf, priority 100, cookie 0xdf465e7b | |
load:0x1->NXM_NX_XXREG0[96] | |
resubmit(,41) | |
41. metadata=0xf, priority 0, cookie 0xed793497 | |
resubmit(,42) | |
42. ip,reg0=0x1/0x1,metadata=0xf, priority 100, cookie 0xe4df7231 | |
ct(table=43,zone=NXM_NX_REG13[0..15]) | |
drop | |
-> A clone of the packet is forked to recirculate. The forked pipeline will be resumed at table 43. | |
-> Sets the packet to an untracked state, and clears all the conntrack fields. | |
Final flow: tcp,reg0=0x1,reg11=0x18,reg12=0x15,reg13=0x27,reg14=0x14,reg15=0xf,metadata=0xf,in_port=3679,vlan_tci=0x0000,dl_src=32:6a:e8:80:02:05,dl_dst=32:6a:e8:80:02:0a,nw_src=10.128.2.4,nw_dst=10.128.2.9,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=0,tp_dst=20000,tcp_flags=0 | |
Megaflow: recirc_id=0,ct_state=-new-est-rel-rpl-inv-trk,ct_label=0/0x1,eth,tcp,in_port=3679,dl_src=32:6a:e8:80:02:05,dl_dst=32:6a:e8:80:02:0a,nw_src=10.128.2.4,nw_dst=10.128.2.9,nw_frag=no,tcp_flags=0 | |
Datapath actions: ct(zone=39),recirc(0x8a6d8) | |
=============================================================================== | |
recirc(0x8a6d8) - resume conntrack with default ct_state=trk|new (use --ct-next to customize) | |
=============================================================================== | |
Flow: recirc_id=0x8a6d8,ct_state=new|trk,ct_zone=39,eth,tcp,reg0=0x1,reg11=0x18,reg12=0x15,reg13=0x27,reg14=0x14,reg15=0xf,metadata=0xf,in_port=3679,vlan_tci=0x0000,dl_src=32:6a:e8:80:02:05,dl_dst=32:6a:e8:80:02:0a,nw_src=10.128.2.4,nw_dst=10.128.2.9,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=0,tp_dst=20000,tcp_flags=0 | |
bridge("br-int") | |
---------------- | |
thaw | |
Resuming from table 43 | |
43. metadata=0xf, priority 0, cookie 0x6e01eec5 | |
resubmit(,44) | |
44. metadata=0xf, priority 0, cookie 0xf0a75aff | |
resubmit(,45) | |
45. metadata=0xf, priority 0, cookie 0x27c0a0c6 | |
resubmit(,46) | |
46. metadata=0xf, priority 0, cookie 0xfca07dca | |
resubmit(,47) | |
47. metadata=0xf, priority 0, cookie 0x6a643812 | |
resubmit(,48) | |
48. ip,reg15=0xf,metadata=0xf,dl_dst=32:6a:e8:80:02:0a,nw_dst=10.128.2.9, priority 90, cookie 0x534a2979 | |
resubmit(,49) | |
49. reg15=0xf,metadata=0xf,dl_dst=32:6a:e8:80:02:0a, priority 50, cookie 0x852dbc23 | |
resubmit(,64) | |
64. priority 0 | |
resubmit(,65) | |
65. reg15=0xf,metadata=0xf, priority 100, cookie 0x2300fd7d | |
output:19 | |
Final flow: unchanged | |
Megaflow: recirc_id=0x8a6d8,ct_state=+new-est-rel-rpl-inv+trk,ct_label=0/0x1,eth,ip,in_port=3679,dl_src=32:6a:e8:80:02:05,dl_dst=32:6a:e8:80:02:0a,nw_dst=10.128.2.9,nw_frag=no | |
Datapath actions: 12 | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment