Skip to content

Instantly share code, notes, and snippets.

@trozet

trozet/no_undnat_enable_router_port_acl

Created April 22, 2024 13:00
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save trozet/465fdccb2e9fc2be01d7ee27dcefa2d6 to your computer and use it in GitHub Desktop.
Save trozet/465fdccb2e9fc2be01d7ee27dcefa2d6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
no_undnat_enable_router_port_acl
[root@ovn-worker2 ~]# ovs-dpctl dump-flows
recirc_id(0x48),in_port(2),ct_state(+new-est-rel-rpl-inv+trk),ct_mark(0/0x1),eth(src=66:49:b8:4b:12:3e,dst=0a:58:0a:f4:01:05),eth_type(0x0800),ipv4(src=10.244.1.2,dst=10.244.1.5,frag=no), packets:0, bytes:0, used:never, actions:ct(commit,zone=19,mark=0/0x1,nat(src)),6
recirc_id(0),in_port(3),skb_mark(0),eth(dst=02:42:ac:12:00:03),eth_type(0x0800),ipv4(proto=6,frag=no),tcp(dst=8192/0xe000), packets:797, bytes:70414, used:0.004s, flags:SP., actions:ct(zone=64000,nat),recirc(0x27)
recirc_id(0),in_port(3),eth(dst=02:42:ac:12:00:03),eth_type(0x0800),ipv4(proto=17,frag=no),udp(dst=6081), packets:1, bytes:132, used:0.753s, actions:4
recirc_id(0x46),tunnel(tun_id=0xff0003,src=172.18.0.2,dst=172.18.0.3,geneve({}{}),flags(-df+csum+key)),in_port(5),ct_state(+new-est-rel-rpl-inv+trk),ct_mark(0/0x1),eth(src=0a:58:0a:f4:01:01,dst=00:00:00:00:00:00/01:00:00:00:00:00),eth_type(0x0800),ipv4(src=10.244.0.0/255.255.255.0,frag=no), packets:0, bytes:0, used:never, actions:ct(commit,zone=5,mark=0/0x1,nat(src)),2
recirc_id(0x43),tunnel(tun_id=0xff0003,src=172.18.0.2,dst=172.18.0.3,geneve({}{}),flags(-df+csum+key)),in_port(5),ct_state(+new-est-rel-rpl-inv+trk),ct_mark(0x2/0xf),eth(dst=66:49:b8:4b:12:3e),eth_type(0x0800),ipv4(dst=172.18.0.3,proto=6,frag=no),tcp(dst=31515), packets:0, bytes:0, used:never, actions:hash(l4(0)),recirc(0x44)
recirc_id(0x48),in_port(2),ct_state(-new+est-rel-rpl-inv+trk),ct_mark(0/0x1),eth(src=66:49:b8:4b:12:3e,dst=0a:58:0a:f4:01:05),eth_type(0x0800),ipv4(src=10.244.1.2,dst=10.244.1.5,frag=no), packets:0, bytes:0, used:never, actions:6
recirc_id(0x43),tunnel(tun_id=0xff0003,src=172.18.0.2,dst=172.18.0.3,geneve({}{}),flags(-df+csum+key)),in_port(5),ct_state(+new-est-rel-rpl-inv+trk),ct_mark(0/0xf),eth(dst=66:49:b8:4b:12:3e),eth_type(0x0800),ipv4(dst=172.18.0.3,proto=6,frag=no),tcp(dst=31515), packets:0, bytes:0, used:never, actions:hash(l4(0)),recirc(0x44)
recirc_id(0x47),in_port(2),ct_state(+new-est-rel-rpl-inv+trk-dnat),ct_mark(0/0xf),eth(src=66:49:b8:4b:12:3e,dst=0a:58:0a:f4:01:05),eth_type(0x0800),ipv4(src=0.0.0.0/128.0.0.0,dst=10.244.1.0/255.255.255.0,proto=6,frag=no), packets:0, bytes:0, used:never, actions:ct(commit,zone=5,mark=0/0x1,nat(src)),ct(zone=19,nat),recirc(0x48)
recirc_id(0x45),tunnel(tun_id=0xff0003,src=172.18.0.2,dst=172.18.0.3,geneve({}{}),flags(-df+csum+key)),in_port(5),ct_state(+new-est-rpl+trk+dnat),ct_mark(0x2/0x2),eth(src=0a:58:0a:f4:01:01,dst=66:49:b8:4b:12:3e),eth_type(0x0800),ipv4(src=0.0.0.0/128.0.0.0,proto=6,frag=no), packets:1, bytes:74, used:0.753s, flags:S, actions:ct(zone=5,nat),recirc(0x46)
recirc_id(0x27),in_port(3),ct_state(+est+trk),ct_mark(0x2),eth(),eth_type(0x0800),ipv4(frag=no), packets:46167, bytes:384909100, used:0.004s, flags:SFPR., actions:4
recirc_id(0x49),in_port(6),ct_state(-new+est-rel+rpl-inv+trk),ct_mark(0/0xf),eth(src=0a:58:0a:f4:01:05,dst=66:49:b8:4b:12:3e),eth_type(0x0800),ipv4(proto=6,frag=no), packets:2, bytes:148, used:0.753s, flags:S., actions:ct(zone=5,nat),recirc(0x4a)
recirc_id(0x4a),in_port(6),ct_state(-new+est-rel+rpl-inv+trk),ct_mark(0/0x1),eth(dst=00:00:00:00:00:00/01:00:00:00:00:00),eth_type(0x0800),ipv4(frag=no), packets:2, bytes:148, used:0.753s, flags:S., actions:2
recirc_id(0x44),dp_hash(0x4/0xf),tunnel(tun_id=0xff0003,src=172.18.0.2,dst=172.18.0.3,geneve({}{}),flags(-df+csum+key)),in_port(5),eth(),eth_type(0x0800),ipv4(frag=no), packets:0, bytes:0, used:never, actions:ct(commit,mark=0x2/0x2,nat(dst=10.244.1.5:80)),recirc(0x45)
recirc_id(0x47),in_port(2),ct_state(-new+est-rel+rpl-inv+trk),ct_mark(0/0xf),eth(src=66:49:b8:4b:12:3e,dst=0a:58:0a:f4:01:01),eth_type(0x0800),ipv4(proto=6,frag=no), packets:2, bytes:148, used:0.753s, flags:S., actions:ct(zone=5),recirc(0x4b)
recirc_id(0),in_port(6),eth(src=0a:58:0a:f4:01:05,dst=66:49:b8:4b:12:3e),eth_type(0x0800),ipv4(src=10.244.1.5,dst=10.128.0.0/255.128.0.0,proto=6,frag=no), packets:2, bytes:148, used:0.753s, flags:S., actions:ct(zone=19,nat),recirc(0x49)
recirc_id(0x47),in_port(2),ct_state(-new+est-rel-rpl-inv+trk-dnat),ct_mark(0/0xf),eth(src=66:49:b8:4b:12:3e,dst=0a:58:0a:f4:01:05),eth_type(0x0800),ipv4(src=0.0.0.0/128.0.0.0,proto=6,frag=no), packets:0, bytes:0, used:never, actions:ct(zone=19,nat),recirc(0x48)
recirc_id(0),in_port(2),eth(src=00:00:00:00:00:00/01:00:00:00:00:00,dst=0a:58:0a:f4:01:01),eth_type(0x0800),ipv4(dst=10.128.0.0/255.128.0.0,proto=6,frag=no), packets:2, bytes:148, used:0.753s, flags:S., actions:ct(zone=5,nat),recirc(0x47)
recirc_id(0),in_port(4),eth(),eth_type(0x0800),ipv4(dst=172.0.0.0/252.0.0.0,proto=17,frag=no),udp(dst=6081), packets:2, bytes:264, used:0.753s, actions:3
recirc_id(0x4b),in_port(2),ct_state(-new+est-rel+rpl-inv+trk-dnat),ct_mark(0/0xf),eth(src=66:49:b8:4b:12:3e,dst=0a:58:0a:f4:01:01),eth_type(0x0800),ipv4(src=10.244.1.4/255.255.255.252,dst=10.244.0.0/255.255.255.0,proto=6,tos=0/0x3,ttl=63,frag=no), packets:2, bytes:148, used:0.753s, flags:S., actions:ct_clear,set(tunnel(tun_id=0xff0003,src=172.18.0.3,dst=172.18.0.2,ttl=64,tp_dst=6081,geneve({class=0x102,type=0x80,len=4,0x40003}),flags(df|csum|key))),set(eth(src=0a:58:64:58:00:04,dst=0a:58:64:58:00:03)),set(ipv4(ttl=62)),5
recirc_id(0x46),tunnel(tun_id=0xff0003,src=172.18.0.2,dst=172.18.0.3,geneve({}{}),flags(-df+csum+key)),in_port(5),ct_state(-new+est-rel-rpl-inv+trk),ct_mark(0/0x1),eth(src=0a:58:0a:f4:01:01,dst=00:00:00:00:00:00/01:00:00:00:00:00),eth_type(0x0800),ipv4(src=10.244.0.0/255.255.255.0,frag=no), packets:0, bytes:0, used:never, actions:2
recirc_id(0),in_port(4),skb_mark(0),eth(),eth_type(0x0800),ipv4(dst=172.0.0.0/252.0.0.0,proto=6,frag=no), packets:1197, bytes:137848, used:0.004s, flags:SP., actions:ct(commit,zone=64000,mark=0x2/0xffffffff),3
recirc_id(0),in_port(2),eth(src=00:00:00:00:00:00/01:00:00:00:00:00,dst=0a:58:0a:f4:01:05),eth_type(0x0800),ipv4(dst=10.128.0.0/255.128.0.0,proto=6,frag=no), packets:1, bytes:74, used:0.753s, flags:S, actions:ct(zone=5,nat),recirc(0x47)
recirc_id(0),tunnel(tun_id=0xff0003,src=172.18.0.2,dst=172.18.0.3,geneve({class=0x102,type=0x80,len=4,0x30004/0x7fffffff}),flags(-df+csum+key)),in_port(5),ct_state(-new-est-rel-rpl-inv-trk-dnat),ct_mark(0/0xf),eth(src=0a:58:64:58:00:03,dst=0a:58:64:58:00:04),eth_type(0x0800),ipv4(src=10.244.0.0/255.255.255.0,dst=172.18.0.3,proto=6,ttl=63,frag=no), packets:1, bytes:74, used:0.753s, flags:S, actions:set(eth(src=0a:58:0a:f4:01:01,dst=66:49:b8:4b:12:3e)),set(ipv4(ttl=62)),ct,recirc(0x43)
recirc_id(0x44),dp_hash(0xd/0xf),tunnel(tun_id=0xff0003,src=172.18.0.2,dst=172.18.0.3,geneve({}{}),flags(-df+csum+key)),in_port(5),eth(),eth_type(0x0800),ipv4(frag=no), packets:0, bytes:0, used:never, actions:ct(commit,mark=0x2/0x2,nat(dst=10.244.1.5:80)),recirc(0x45)
recirc_id(0),in_port(3),skb_mark(0),eth(dst=02:42:ac:12:00:03),eth_type(0x0800),ipv4(proto=6,frag=no),tcp(dst=32768/0x8000), packets:45160, bytes:384675809, used:1.962s, flags:SFPR., actions:ct(zone=64000,nat),recirc(0x27)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment