vpp acl : Scaling 100 SGs with 20 rules each, all SGs do not get installed in VPP

[Deepika]

vpp# sh version
vpp v17.07.01-8~g30ef35e~b79 built by jenkins on centos7-basebuild-8c-32g-8679 at Tue Oct 10 20:12:31 UTC 2017

When scaling Security groups using Rally for 100 security groups, 20 rules each and concurrency 5
The following logs are seen on VPP :

                    acl-index 74 count 0 tag {net-vpp.secgroup:f990e7de-1539-49bc-8cf1-3ffcb333811d.from-vpp}
                    acl-index 75 count 2 tag {net-vpp.secgroup:f990e7de-1539-49bc-8cf1-3ffcb333811d.to-vpp}
                         0: ipv6 permit+reflect src 0.0.0.0/0 dst 0.0.0.0/0 proto 0 sport 0-65535 dport 0-65535
                         1: ipv4 permit+reflect src 0.0.0.0/0 dst 0.0.0.0/0 proto 0 sport 0-65535 dport 0-65535

[andrew yourtchenko (ayourtch)]

I've replayed the API traces that Deepika has provided on VPP, VPP creates the ACLs as the control plane requests... I do not see the API calls with additional rules beyond the initial empty one. So, the VPP appears to behave as expected.

[Naveen Joy (najoy)]

Unable to reproduce.
Ran a script that creates 10SGs with 20 Rules each.
The etcd key/value pairs and VPP ACLs were correctly created.
The script has been sent to Deepika via email on 2/15.
Waiting for her response.

[Naveen Joy (najoy)]

correction to the above - The script creates 100SGs with 20 Rules each..

[Deepika (deepika-j)]

This bug could not be reproduced on 18.04