8fc80b7e13
In RULES_INGRESS_TABLE table 82 there is a rule for allow established and related connections. The current rule sends the packet directly to the dest port without doing a mac learning. This is causing ovs to age out the dest mac of the remote VM and causing the rule to be changed in flood rule. For the normal case it fine as they try to avoid high cpu. ovs hardware offload reduce cpu usage by moving some of the packet processing to nic and flood rule is not offloaded, therefore it prefre to use the NORMAL action to avoid the flood rule. We also keep the same logic as today when using explicitly_egress_direct=True which avoid NORMAL action in the entire pipeline. Closes-Bug: #1897637 Change-Id: I9b611d62be5d0529e8b35e3d8280baa5be54bc2b
OpenStack Neutron
Neutron is an OpenStack project to provide "network connectivity as a service" between interface devices (e.g., vNICs) managed by other OpenStack services (e.g., Nova).
To learn more about neutron:
- Documentation: https://docs.openstack.org/neutron/latest/
- Features: https://specs.openstack.org/openstack/neutron-specs
- Defects: https://launchpad.net/neutron
- Release notes: https://docs.openstack.org/releasenotes/neutron/index.html
- Source: https://opendev.org/openstack/neutron
Get in touch via email. Use [Neutron] in your subject.
To learn how to contribute, please read the CONTRIBUTING.rst file.