neutron

[rfe][ovn] Support address group for ovn driver

Bug #1982287 reported by Liu Xie
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
In Progress
Wishlist
Liu Xie

Bug Description

As the title describes, we can use 'Address_Set' of ovn to support the feature that address group.

OVN is already supporting the feature 'Address_Set' that create a set of address contains IPv4, or IPv6 addresses with optional bitwise or CIDR masks. For details, we can see [0].

For example:
# Create an address set
ovn-nbctl create Address_Set name=as1 addresses=\"10.0.0.2\",\"10.0.0.3\"

# Add acl1 uses as1
ovn-nbctl --wait=hv acl-add pg1 to-lport 1001 'outport == "pg1" && ip4 && ip4.src == $as1' allow

So we can implement the feature that translate the neutron address group to a Address_Set entry and put this entry to a match filed of ovn acl.

[0]https://github.com/ovn-org/ovn/blob/81503d661ed9449ebe85f4b6b3130b75c7dd60bd/ovn-nb.xml#L1641

See original description
Liu Xie (liushy)
Changed in neutron:
assignee: nobody → Liu Xie (liushy)
Liu Xie (liushy)
summary: - [ovn] Support address group for ovn driver
+ [rfe][ovn] Support address group for ovn driver
Revision history for this message
Oleg Bondarev (obondarev) wrote :

The description seems a bit unfinished, please update

tags: added: rfe
Changed in neutron:
importance: Undecided → Wishlist
Liu Xie (liushy)
description: updated
Oleg Bondarev (obondarev)
Changed in neutron:
status: New → Triaged
Revision history for this message
Lajos Katona (lajos-katona) wrote :

During the last drivers meeting we discussed this RFE, and approved it with the condition that no API and db change is necessary, and only ml2/ovn must be adopted to use the Address_Set feature of core OVN.
If there is need to change the API or db layers of Neutron we have to ask for a spec which discuss the question in detail.
For the meeting logs see: https://meetings.opendev.org/meetings/neutron_drivers/2022/neutron_drivers.2022-07-22-14.00.log.html#l-18

tags: added: rfe-approved
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/851509

Changed in neutron:
status: Triaged → In Progress
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.