ovs-fw: Apply openflow rules immediately during update
Because update operation updates openflow rules three times:
1) New rules with new cookie
2) Delete old rules with old cookie
3) Change new cookie back to old cookie
and the step 2) uses --strict parameter, it's needed to apply rules
before deleting the old rules because --strict parameter cannot be
combined with non-strict. This patch applies openflow rules after
step 1), then --strict rules in step 2 are applied right away and then
rest of delete part from 2) and all new rules from 3) are applied
together.
This patch adds optional interval parameter to Pinger class which sends
more ICMP packets per second in the firewall blink tests to increase a
chance of sending a packet while firewall is in inconsistent state.
Reviewed: https:/ /review. openstack. org/562220 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=8b2c40366b3 b65876e5465efae 05b171be1bc473
Committed: https:/
Submitter: Zuul
Branch: master
commit 8b2c40366b3b658 76e5465efae05b1 71be1bc473
Author: Jakub Libosvar <email address hidden>
Date: Wed Apr 18 10:25:01 2018 +0000
ovs-fw: Apply openflow rules immediately during update
Because update operation updates openflow rules three times:
1) New rules with new cookie
2) Delete old rules with old cookie
3) Change new cookie back to old cookie
and the step 2) uses --strict parameter, it's needed to apply rules
before deleting the old rules because --strict parameter cannot be
combined with non-strict. This patch applies openflow rules after
step 1), then --strict rules in step 2 are applied right away and then
rest of delete part from 2) and all new rules from 3) are applied
together.
This patch adds optional interval parameter to Pinger class which sends
more ICMP packets per second in the firewall blink tests to increase a
chance of sending a packet while firewall is in inconsistent state.
Change-Id: I25d9c87225feda 1b5ddd442dd0152 9424186e05b
Closes-bug: #1708731