CT: Offload only ASSURED connections
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux-bluefield (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Medium
|
Bodong Wang |
Bug Description
* Explain the feature
Assured connections are those connections which deemed of "higher quality" and less
like to expire than non-assured connections, as they passed some stricter rule (e.g
in udp reply + connection lasting more than 2 seconds). This feature
offloads only those connections.
* How to test
Create OVS bridge with 2 devices mlx5 rep devices.
Enable HW offload and configure regular connection tracking OpenFlow rules:
e.g:
ovs-ofctl del-flows br-ovs
ovs-ofctl add-flow br-ovs arp,actions=normal
ovs-ofctl add-flow br-ovs "table=0, ip,ct_state=-trk actions=
ovs-ofctl add-flow br-ovs "table=1, ip,ct_state=
ovs-ofctl add-flow br-ovs "table=1, ip,ct_state=
Run a short UDP connection (< 2 seconds), e.g:
on mlx5 VF1 iperf -s -u
on mlx5 VF2 iperf -c <ip> -t 1 -u
Run longer UDP connection (> 2 seconds), e.g:
on mlx5 VF1 iperf -s -u
on mlx5 VF2 iperf -c <ip> -t 10 -u
With the above commit quick lived UDP connections (< 2 seconds) will not be offloaded to the flow table
as can be checked by
cat /proc/net/
while connections lasting more than 2 seconds (and of course double sided) will be offloaded.
* What it could break.
NA
Changed in linux-bluefield (Ubuntu Focal): | |
assignee: | nobody → Bodong Wang (bodong-wang) |
importance: | Undecided → Medium |
status: | New → In Progress |
Changed in linux-bluefield (Ubuntu): | |
status: | New → Invalid |
Changed in linux-bluefield (Ubuntu Focal): | |
status: | In Progress → Fix Committed |
tags: |
added: verification-done-focal removed: verification-needed-focal |
This bug is awaiting verification that the linux-bluefield /5.4.0- 1033.36 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification- needed- focal' to 'verification- done-focal' . If the problem still exists, change the tag 'verification- needed- focal' to 'verification- failed- focal'.
If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.
See https:/ /wiki.ubuntu. com/Testing/ EnableProposed for documentation how to enable and use -proposed. Thank you!