# Uncomment these for snapshot releases:
# commit0 is the git sha of the last commit
# date is the date YYYYMMDD of the snapshot
#%%global commit0 f11b99776c46831184ac30065c6cdf911061bb5a
#%%global date 20190223
%global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
# If libcap-ng isn't available and there is no need for running OVS
# as regular user, specify the '--without libcapng'
%bcond_without libcapng
# option to build ovn-docker package
%bcond_with ovn_docker
# Enable PIE, bz#955181
%global _hardened_build 1
# We would see rpmlinit error - E: hardcoded-library-path in '% {_prefix}/lib'.
# But there is no solution to fix this. Using {_lib} macro will solve the
# rpmlink error, but will install the files in /usr/lib64/.
# OVN pacemaker ocf script file is copied in /usr/lib/ocf/resource.d/ovn/
# and we are not sure if pacemaker looks into this path to find the
# OVN resource agent script.
%global ovnlibdir %{_prefix}/lib
# Use python3 on fedora/rhel8 and python2 on rhel7/centos.
# The same spec file will be used to build OVN
# pacakges for CentOS - RDO and it doesn't have
# python3 yet.
%if 0%{?rhel} > 7 || 0%{?fedora}
# Use Python3
%global with_python3 1
%define _py python3
%else
%define _py python
%endif
# openvswitch in RDO has epoch set. So set epoch if built for rhel/centos.
# Otherwise, the ovn packages build by this spec file, doesn't obsolete
# openvswitch-ovn* packages.
%if 0%{?rhel}
%global epoch_ovs 1
%endif
Name: ovn
Summary: Open Virtual Network support
URL: http://www.openvswitch.org/
Version: 23.09.0
Release: 91%{?commit0:.%{date}git%{shortcommit0}}%{?dist}
Obsoletes: openvswitch-ovn-common < %{?epoch_ovs:%{epoch_ovs}:}2.11.0-8
Provides: openvswitch-ovn-common = %{?epoch:%{epoch}:}%{version}-%{release}
# Nearly all of openvswitch is ASL 2.0. The bugtool is LGPLv2+, and the
# lib/sflow*.[ch] files are SISSL.
License: ASL 2.0 and LGPLv2+ and SISSL
%define ovncommit 56d5cf6ccf4a7b034b3d0c009fbca7c509f2f42a
# Always pull an upstream release, since this is what we rebase to.
Source: https://github.com/ovn-org/ovn/archive/%{ovncommit}.tar.gz#/ovn-%{version}.tar.gz
%define ovscommit 0dd10cd803a2e5b8fb34b268e72748202eb4002a
%define ovsshortcommit 0dd10cd
Source10: https://github.com/openvswitch/ovs/archive/%{ovscommit}.tar.gz#/openvswitch-%{ovsshortcommit}.tar.gz
%define ovsdir ovs-%{ovscommit}
# ovn-patches
Patch: ovn.patch
# OpenvSwitch backports (400-) if required.
# Address crpto policy for fedora
%if 0%{?fedora}
Patch400: 0001-fedora-Use-PROFILE-SYSTEM-in-SSL_CTX_set_cipher_list.patch
%endif
BuildRequires: make
BuildRequires: gcc autoconf automake libtool
BuildRequires: systemd openssl openssl-devel
%if 0%{?with_python3}
BuildRequires: python3-devel python3-six python3-setuptools
%else
BuildRequires: python2-devel python2-six python2-setuptools
%endif
BuildRequires: /usr/bin/sphinx-build
BuildRequires: desktop-file-utils
BuildRequires: groff-base groff graphviz
BuildRequires: unbound-devel
# make check dependencies
BuildRequires: procps-ng
%if 0%{?with_python3}
BuildRequires: python3-pyOpenSSL
%else
BuildRequires: pyOpenSSL
%endif
%if %{with libcapng}
BuildRequires: libcap-ng-devel
%endif
Requires: openssl hostname iproute module-init-tools openvswitch libibverbs
%{?systemd_requires}
# to skip running checks, pass --without check
%bcond_without check
%description
OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add
native support for virtual network abstractions, such as virtual L2 and L3
overlays and security groups.
%package central
Summary: Open Virtual Network support
License: ASL 2.0
Requires: ovn = %{?epoch:%{epoch}:}%{version}-%{release}
Requires: firewalld-filesystem
Obsoletes: openvswitch-ovn-central < %{?epoch_ovs:%{epoch_ovs}:}2.11.0-8
Provides: openvswitch-ovn-central = %{?epoch:%{epoch}:}%{version}-%{release}
%description central
OVN DB servers and ovn-northd running on a central node.
%package host
Summary: Open Virtual Network support
License: ASL 2.0
Requires: ovn = %{?epoch:%{epoch}:}%{version}-%{release}
Requires: firewalld-filesystem
Obsoletes: openvswitch-ovn-host < %{?epoch_ovs:%{epoch_ovs}:}2.11.0-8
Provides: openvswitch-ovn-host = %{?epoch:%{epoch}:}%{version}-%{release}
%description host
OVN controller running on each host.
%package vtep
Summary: Open Virtual Network support
License: ASL 2.0
Requires: ovn = %{?epoch:%{epoch}:}%{version}-%{release}
Obsoletes: openvswitch-ovn-vtep < %{?epoch_ovs:%{epoch_ovs}:}2.11.0-8
Provides: openvswitch-ovn-vtep = %{?epoch:%{epoch}:}%{version}-%{release}
%description vtep
OVN vtep controller
%if %{with ovn_docker}
%package docker
Summary: Open Virtual Network support
License: ASL 2.0
Requires: ovn = %{?epoch:%{epoch}:}%{version}-%{release} %{_py}-openvswitch
Obsoletes: openvswitch-ovn-docker < %{?epoch_ovs:%{epoch_ovs}:}2.11.0-8
Provides: openvswitch-ovn-docker = %{?epoch:%{epoch}:}%{version}-%{release}
%description docker
Docker network plugins for OVN.
%endif
%prep
%autosetup -n ovn-%{ovncommit} -a 10 -p 1
%build
%if 0%{?commit0:1}
# fix the snapshot unreleased version to be the released one.
sed -i.old -e "s/^AC_INIT(openvswitch,.*,/AC_INIT(openvswitch, %{version},/" configure.ac
%endif
./boot.sh
# OVN source code is now separate.
# Build openvswitch first.
# Build openvswitch first
pushd %{ovsdir}
./boot.sh
%configure \
%if %{with libcapng}
--enable-libcapng \
%else
--disable-libcapng \
%endif
--enable-ssl \
--with-pkidir=%{_sharedstatedir}/openvswitch/pki \
%if 0%{?with_python3}
PYTHON3=%{__python3} \
PYTHON=%{__python3}
%else
PYTHON=%{__python2}
%endif
make %{?_smp_mflags}
popd
# Build OVN.
%configure \
--with-ovs-source=$PWD/%{ovsdir} \
%if %{with libcapng}
--enable-libcapng \
%else
--disable-libcapng \
%endif
--enable-ssl \
--with-pkidir=%{_sharedstatedir}/openvswitch/pki \
%if 0%{?with_python3}
PYTHON3=%{__python3} \
PYTHON=%{__python3}
%else
PYTHON=%{__python2}
%endif
make %{?_smp_mflags}
%install
%make_install
install -p -D -m 0644 \
rhel/usr_share_ovn_scripts_systemd_sysconfig.template \
$RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/ovn
for service in ovn-controller ovn-controller-vtep ovn-northd; do
install -p -D -m 0644 \
rhel/usr_lib_systemd_system_${service}.service \
$RPM_BUILD_ROOT%{_unitdir}/${service}.service
done
install -d -m 0755 $RPM_BUILD_ROOT/%{_sharedstatedir}/ovn
install -d $RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/
install -p -m 0644 rhel/usr_lib_firewalld_services_ovn-central-firewall-service.xml \
$RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/ovn-central-firewall-service.xml
install -p -m 0644 rhel/usr_lib_firewalld_services_ovn-host-firewall-service.xml \
$RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/ovn-host-firewall-service.xml
install -d -m 0755 $RPM_BUILD_ROOT%{ovnlibdir}/ocf/resource.d/ovn
ln -s %{_datadir}/ovn/scripts/ovndb-servers.ocf \
$RPM_BUILD_ROOT%{ovnlibdir}/ocf/resource.d/ovn/ovndb-servers
install -p -D -m 0644 rhel/etc_logrotate.d_ovn \
$RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/ovn
# remove OVS unpackages files
rm -f $RPM_BUILD_ROOT%{_bindir}/ovs*
rm -f $RPM_BUILD_ROOT%{_bindir}/vtep-ctl
rm -f $RPM_BUILD_ROOT%{_sbindir}/ovs*
rm -f $RPM_BUILD_ROOT%{_mandir}/man1/ovs*
rm -f $RPM_BUILD_ROOT%{_mandir}/man5/ovs*
rm -f $RPM_BUILD_ROOT%{_mandir}/man5/vtep*
rm -f $RPM_BUILD_ROOT%{_mandir}/man7/ovs*
rm -f $RPM_BUILD_ROOT%{_mandir}/man8/ovs*
rm -f $RPM_BUILD_ROOT%{_mandir}/man8/vtep*
rm -rf $RPM_BUILD_ROOT%{_datadir}/ovn/python
rm -f $RPM_BUILD_ROOT%{_datadir}/ovn/scripts/ovs*
rm -rf $RPM_BUILD_ROOT%{_datadir}/ovn/bugtool-plugins
rm -f $RPM_BUILD_ROOT%{_libdir}/*.a
rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
rm -f $RPM_BUILD_ROOT%{_libdir}/pkgconfig/*.pc
rm -f $RPM_BUILD_ROOT%{_includedir}/ovn/*
rm -f $RPM_BUILD_ROOT%{_sysconfdir}/bash_completion.d/ovs-appctl-bashcomp.bash
rm -f $RPM_BUILD_ROOT%{_sysconfdir}/bash_completion.d/ovs-vsctl-bashcomp.bash
rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/openvswitch
rm -f $RPM_BUILD_ROOT%{_datadir}/ovn/scripts/ovn-bugtool*
%if %{without ovn_docker}
rm -f $RPM_BUILD_ROOT/%{_bindir}/ovn-docker-overlay-driver \
$RPM_BUILD_ROOT/%{_bindir}/ovn-docker-underlay-driver
%endif
%check
%if %{with check}
touch resolv.conf
export OVS_RESOLV_CONF=$(pwd)/resolv.conf
if make check TESTSUITEFLAGS='%{_smp_mflags} -k ovn' ||
make check TESTSUITEFLAGS='--recheck -k ovn'; then :;
else
cat tests/testsuite.log
fi
%endif
%pre central
if [ $1 -eq 1 ] ; then
# Package install.
/bin/systemctl status ovn-northd.service >/dev/null
ovn_status=$?
if [[ "$ovn_status" = "0" ]]; then
# ovn-northd service is running which means old openvswitch-ovn-central
# is possibly installed and it will be cleaned up. So start ovn-northd
# service when posttrans central is called.
touch %{_localstatedir}/lib/rpm-state/ovn-northd
fi
fi
%pre host
if [ $1 -eq 1 ] ; then
# Package install.
/bin/systemctl status ovn-controller.service >/dev/null
ovn_status=$?
if [[ "$ovn_status" = "0" ]]; then
# ovn-controller service is running which means old
# openvswitch-ovn-host is possibly installed and it will be cleaned up. So
# start ovn-controller service when posttrans host is called.
touch %{_localstatedir}/lib/rpm-state/ovn-controller
fi
fi
%pre vtep
if [ $1 -eq 1 ] ; then
# Package install.
/bin/systemctl status ovn-controller-vtep.service >/dev/null
ovn_status=$?
if [[ "$ovn_status" = "0" ]]; then
# ovn-controller-vtep service is running which means old
# openvswitch-ovn-vtep is possibly installed and it will be cleaned up. So
# start ovn-controller-vtep service when posttrans host is called.
touch %{_localstatedir}/lib/rpm-state/ovn-controller-vtep
fi
fi
%preun central
%systemd_preun ovn-northd.service
%preun host
%systemd_preun ovn-controller.service
%preun vtep
%systemd_preun ovn-controller-vtep.service
%post
ln -sf ovn_detrace.py %{_bindir}/ovn-detrace
%if %{with libcapng}
if [ $1 -eq 1 ]; then
sed -i 's:^#OVN_USER_ID=:OVN_USER_ID=:' %{_sysconfdir}/sysconfig/ovn
sed -i 's:\(.*su\).*:\1 openvswitch openvswitch:' %{_sysconfdir}/logrotate.d/ovn
fi
%endif
%post central
%systemd_post ovn-northd.service
%post host
%systemd_post ovn-controller.service
%post vtep
%systemd_post ovn-controller-vtep.service
%posttrans central
if [ $1 -eq 1 ]; then
# Package install, not upgrade
if [ -e %{_localstatedir}/lib/rpm-state/ovn-northd ]; then
unlink %{_localstatedir}/lib/rpm-state/ovn-northd
/bin/systemctl start ovn-northd.service >/dev/null 2>&1 || :
fi
fi
%posttrans host
if [ $1 -eq 1 ]; then
# Package install, not upgrade
if [ -e %{_localstatedir}/lib/rpm-state/ovn-controller ]; then
unlink %{_localstatedir}/lib/rpm-state/ovn-controller
/bin/systemctl start ovn-controller.service >/dev/null 2>&1 || :
fi
fi
%posttrans vtep
if [ $1 -eq 1 ]; then
# Package install, not upgrade
if [ -e %{_localstatedir}/lib/rpm-state/ovn-controller-vtep ]; then
unlink %{_localstatedir}/lib/rpm-state/ovn-controller-vtep
/bin/systemctl start ovn-controller-vtep.service >/dev/null 2>&1 || :
fi
fi
%files
%{_bindir}/ovn-nbctl
%{_bindir}/ovn-sbctl
%{_bindir}/ovn-trace
%{_bindir}/ovn_detrace.py
%{_bindir}/ovn-detrace
%{_bindir}/ovn-appctl
%{_bindir}/ovn-ic-nbctl
%{_bindir}/ovn-ic-sbctl
%dir %{_datadir}/ovn/
%dir %{_datadir}/ovn/scripts/
%{_datadir}/ovn/scripts/ovn-ctl
%{_datadir}/ovn/scripts/ovn-lib
%{_datadir}/ovn/scripts/ovndb-servers.ocf
%{_mandir}/man8/ovn-ctl.8*
%{_mandir}/man8/ovn-appctl.8*
%{_mandir}/man8/ovn-nbctl.8*
%{_mandir}/man8/ovn-trace.8*
%{_mandir}/man1/ovn-detrace.1*
%{_mandir}/man7/ovn-architecture.7*
%{_mandir}/man8/ovn-sbctl.8*
%{_mandir}/man5/ovn-nb.5*
%{_mandir}/man5/ovn-sb.5*
%{_mandir}/man8/ovn-ic-nbctl.8*
%{_mandir}/man8/ovn-ic-sbctl.8*
%{_mandir}/man5/ovn-ic-nb.5*
%{_mandir}/man5/ovn-ic-sb.5*
%dir %{ovnlibdir}/ocf/resource.d/ovn/
%{ovnlibdir}/ocf/resource.d/ovn/ovndb-servers
%config(noreplace) %{_sysconfdir}/logrotate.d/ovn
%config(noreplace) %{_sysconfdir}/sysconfig/ovn
%license LICENSE
%if %{with ovn_docker}
%files docker
%{_bindir}/ovn-docker-overlay-driver
%{_bindir}/ovn-docker-underlay-driver
%endif
%files central
%{_bindir}/ovn-northd
%{_bindir}/ovn-ic
%{_mandir}/man8/ovn-northd.8*
%{_mandir}/man8/ovn-ic.8*
%{_datadir}/ovn/ovn-nb.ovsschema
%{_datadir}/ovn/ovn-sb.ovsschema
%{_datadir}/ovn/ovn-ic-nb.ovsschema
%{_datadir}/ovn/ovn-ic-sb.ovsschema
%{_unitdir}/ovn-northd.service
%{ovnlibdir}/firewalld/services/ovn-central-firewall-service.xml
%files host
%{_bindir}/ovn-controller
%{_mandir}/man8/ovn-controller.8*
%{_unitdir}/ovn-controller.service
%{ovnlibdir}/firewalld/services/ovn-host-firewall-service.xml
%files vtep
%{_bindir}/ovn-controller-vtep
%{_mandir}/man8/ovn-controller-vtep.8*
%{_unitdir}/ovn-controller-vtep.service
%changelog
* Mon Dec 18 2023 Numan Siddique <numans@ovn.org> - 23.09.0-91
- Sync to upstream OVN branch-23.09. Below are the commits
since last update (23.09.0-81)
- Revert "ovn: add geneve PMTUD support"
[Upstream: ed4e4a94ba44f5d5be5148ee82f336cab3adc7ec]
- northd: forward arp request to lrp snat on.
[Upstream: 20ea3b63fb3a2fce2c9e273bfbdcb4d8399b8091]
- northd: fix missing port up when deleting and adding back an lsp
[Upstream: 8cabb443ae88dded5cd1800bdcea5c5760954d25]
- ovn-macros: Make sure stopped daemons continue before the test ends.
[Upstream: e54ec661ef67cd93d1a72de907b37fab522bc2f9]
- system-test: Fix tcpdump usage in LB template tests.
[Upstream: 5141c9d4c7c861f6a65a711e59a4e64ae7d2fcdb]
- tests: Move SCTP test from kernel only to general OVN system tests.
[Upstream: 49d33629595a9c7fc44d7ac86926c83e475b322d]
- tests: Remove 'protoinfo' from the conntrack entries for SCTP tests.
[Upstream: d87ffbe44d5b5c3f143c1e38e868f9db636b4565]
- northd: Skip transient IDL records.
[Upstream: 44a40011f0b7f465c1eb60c9016bd56e09d7e538]
- system-tests: Consolidate wait condition in CoPP test
[Upstream: ba7a45bde1de25868e0b16d8e58e6d523e2034ab]
- pinctrl: Fix up comments about sending RST packets for healthcheck.
[Upstream: 4ef375edc8bee094f24b9e649dc01ce3edd2034b]
* Tue Dec 05 2023 Numan Siddique <numans@ovn.org> - 23.09.0-81
- Sync to upstream OVN branch-23.09. Below are the commits
since last update (23.09.0-37)
- ovn: add geneve PMTUD support (#2241711)
[Upstream: e42ca82fb92cd69bbfd4da72b3c22bc57fc1ecd0]
- fmt_pkt: make sure scapy-server is started once
[Upstream: b788911812171ee5d9c51806b1e287be910164c9]
- fmt_pkt: improve scapy-server logging
[Upstream: 820e11754bff7b7029abf8bd8f166c169bdd8d04]
- fmt_pkt: use -S check to wait for scapy sock file
[Upstream: 2d710c3b1d9444a49f80db6058462e7d33253644]
- fmt_pkt: don't subshell when calling ovs-appctl
[Upstream: fc311bb6d6108d49b356d9c785f6d47e7dc8faff]
- controller: fix group_table and meter_table allocation
[Upstream: acc63727d14ff7e9f447ed90115f74235f968499]
- Prepare for 23.09.2.
[Upstream: 8a000cc863773030828a4cda2167840f08c4a65c]
- Set release date for 23.09.1.
[Upstream: 0afd4e59e95b5f8c7b56760e91269786b0e0e52a]
- northd: Add missing stopwatch initialization.
[Upstream: 7fd87c5d0b1492c14d90faec4af4069496ae3609]
- controller: avoid extra flows if localnet_learn_fdb is disabled
[Upstream: b2f839849c36c058f940c417dc29e26165a1d30e]
- controller: FDB entries for localnet should not overwrite entries for vifs (#2242830)
[Upstream: 33b0117598b23b8c0877e482ee350283a147bb5f]
- controller: Disable inactivity probe for statctrl
[Upstream: bbd07439b9a8cd6db901bffcac7ac17f58e33a07]
- pinctrl: reset success and failures n_count regardless of svc state
[Upstream: 617b84d7dd2ce3501b49e988e1ba06e86889c9bd]
- pinctrl: send RST instead of RST_ACK bit for lb hc
[Upstream: beb26027cf26271c7cd780869b540737c7916e99]
- controller: Don't artificially limit group and meter IDs to 16bit.
[Upstream: e9e716ad531e34766d2f02783ac08955096bf636]
- tests: fixed race_condition with max_prefix
[Upstream: d257d800e41388bd2a387e0b6d5a0e41c2e8d8f1]
- tests: have CHECK_NO_CHANGE_AFTER_RECOMPUTE potentially wait for ports up
[Upstream: dab54b81c7ee767943163f2aaaa27b2c4b367964]
- tests: fixed "ovn-nbctl - daemon retry connection"
[Upstream: d2e0acb2a6aa510282da5e04036ec5258454c351]
- tests: fixed system test "LR with SNAT fragmentation needed for external server".
[Upstream: 0bb6ba908421825428ec904d5316ae13090adbbf]
- tests: fixed "interconnection - static multicast" and "- IGMP/MLD multicast"
[Upstream: 810d83e77ce3398bc94469404d85a01eb63e40bd]
- ovn-ctl man: Add election timer config to manpage
[Upstream: 25d4b6855f6ce3795314e9439716f775994c7f4d]
- Fix flows not removed in ha migration
[Upstream: 5375cdd96eaf8e527e5afea402f279990398710c]
- binding: handle pb->chassis and pb->up from if-status module
[Upstream: 619abe5c5e18f417fe20b252ca41b70e644466e0]
- binding: slight refactor if no local binding in consider_iface_release
[Upstream: d039b4332b9ea739bdf6b2efc9f5f3e422fe9a42]
- controller: have I+P assigning ct_zones for l3gateway ports
[Upstream: f5d01be7f1337bdc7885dd45592aa3b376467790]
- tests: fixed another set of flaky ovn-ic tests
[Upstream: 650bffdbe0562dc364faaef51f51f99e82cccc56]
- tests: wait for all flows to be installed before sending packets
[Upstream: b3d03b94178bee2479d6f66ffa34255a7feb79eb]
- tests: fixed "ipsec -- basic configuration"
[Upstream: ac3ece28ca04cb74b21c80e2bd73767e29cca9a3]
- tests: fixed "LSP incremental processing"
[Upstream: fcbc0ae1c66e31c38ad9d5e099237e7446958035]
- tests: do not start backup-northd by default
[Upstream: 54fae8cbb5db827da95a2a52ff28f29e6c7740fe]
- tests: fixed multiple tests not properly waiting for packets to be received
[Upstream: a1422144228bb9924dbc75782734a09c6ecfa534]
- ci: Pin Python, Fedora and Ubuntu runner versions.
[Upstream: 627955eb79c2cd374853319c1d271c2fd1aeac37]
- ovs: Bump submodule to include E721 fixes.
[Upstream: 1fa7628db4155d3a39d55fe61d8d19fa7d3030af]
- tests: Remove broken "feature inactivity probe" test.
[Upstream: 5044376da0a1c14d1ccc4b41dfdbae14e74746b2]
- readthedocs: Add the configuration file.
[Upstream: 84c93511ce9a612b9a815cc1403b4841cc2e4c58]
- Documentation: Use theme from Read The Docs.
[Upstream: 39236dc3151baa3ace58c3ecd62ba0384b4c7a05]
- ovs: Bump submodule to v3.2.1.
[Upstream: 74172ed481f7c239d9258845eb493f17d731df99]
- py-requirements: Remove hacking dependency and use recent flake8.
[Upstream: c6a631f066eea105c57c265dc68257d1b5ee18e4]
- ovn-ic: wakeup on ovsdb transaction failures
[Upstream: be4364e62ac739744c1ef5bdd74a85fe39d6e37d]
- ovn-ic: fix potential segmentation violation when ts is deleted
- controller, northd: Wait for cleanup before replying to exit
[Upstream: aae5b2ec8ec9f4f9f7c9738d23818c2c4967627c]
- tests: Add missing check for scapy.
[Upstream: ea9310a5f1e37b373abffd85f7a8dd4fefc30c4e]
- ci: Apply the ASAN workaround only for Clang <16
[Upstream: 15bf24b889b178d4cdbb6166d3bc5434ec59f9fc]
- ci: Use proper uname argument to get the HW type
[Upstream: 2efc23f3edf0293ec81a167e1c4bf99fe5601ca2]
* Tue Oct 17 2023 Numan Siddique <numans@ovn.org> - 23.09.0-37
- Sync to upstream OVN branch-23.09. Below are the commits
since last update (23.09.0-0)
- tests: Wait for new ovn-controllers to connect to Southbound.
[Upstream: 349266aac20f229b10ef0313c9f4e6b5f1af4ede]
- northd: Reset ls_datapath_group if not all chassis support it.
[Upstream: df7656fbf6a4ec1175b8f464a1aa6ed6e74fde29]
- northd: introduce ls_datapath_group column in lb sb db table
[Upstream: 276b9d47183ebd31c382742025e562fda8d14d11]
- northd: sync lb applied to logical routers in sb db lb table (#2193323)
[Upstream: c33398e32b2753dd6c0cecf35ba48ad8faa69bfc]
- northd: Avoid snat on reply packets for dgw
[Upstream: e8c79cecef9d6e15673be1a604baaaca083f0016]
- northd: Incrementally process SB.Load_balancer updates.
[Upstream: a9788ef39e003b04ec426761833d85bbec1f3b84]
- tests: Add missing --wait=sb to the LB I-P test.
[Upstream: cadfefdf1c6457d25b6d1f93e217493739418365]
- system-tests: Make sure that IPv6 address is available right away
[Upstream: dc9eb3a1cc95accc37165902006db6eeab25fba6]
- Don't mention packet cloning when failing to find tunnel
[Upstream: 44ee1a6cb40395617f5dbab5829c9f436c16a783]
- northd: Allow need frag to be SNATed
[Upstream: 94c8f952bb848806e04a857a84718d2744cfcb9f]
- docs: require ovn-set-local-ip for co-located ovn-controllers
[Upstream: 16bdac7965ae805040a107fc3cdade5bf4db63a2]
- memory-trim: Fix timestamp overflow warning right after reboot.
[Upstream: 32ab7d94f9258ad6e938c715380a567b4a363a62]
- Fix missing flows in ls_in_dhcp_options table
[Upstream: bb8fe6add97ab5fed5e4618b32c16e174faf44c8]
- controller: throttle port claim attempts from if-status
[Upstream: bd32a6646d21c766497494c7a1a4add05a40cd22]
- ci: Free up additional space for ovn-k jobs.
[Upstream: d30fe25c45620017ceea4f06e6e3ebd316ba734f]
- ci: Handle google-cloud-sdk -> google-cloud-cli package name change.
[Upstream: 42e81bdcebc8cd744deb8034d2fb89ec3b85bf4a]
- ci: Free up disk space in a more robust way.
[Upstream: cf99264e252c20edf93ab5735e18aa3225c98398]
- ci: Update apt cache before installing gcc-multilib.
- tests: fixed "send gratuitous ARP for NAT rules on HA distributed router"
[Upstream: 94b671cf89b27f54d1d03149de900994c79df415]
- tests: move trim_zeros() to ovn-macros
[Upstream: 56b0435d8431518f4299c622a6ec9fc8770b8b0c]
- tests: skip test "MAC binding aging" if scapy not available.
[Upstream: 148431080738bdec5e625a9ce8d470e365ee14f2]
- tests: fixed "L2 Drop and Allow ACL w/ Stateful ACL"
[Upstream: 6f8719c60b8a578d564d3a6147f963fddeeacaa1]
- tests: fixed multiple tests missing ovn-nbctl "wait"
[Upstream: f8cdfedacf212d9f103c2adba0c6805c01c68ff4]
- tests: fixed "options:requested-chassis for logical port"
[Upstream: cd74dda22b255890a120988e8737c22a25c49957]
- tests: fixed "Logical router policy packet marking"
[Upstream: e5a794dc30b087e0c78764326c86a3258f97bcc0]
- tests: fixed multiple ovn-ic tests
[Upstream: 0575b97dc676d8c225bc8f63befec1bf1390ebe1]
- pinctrl: Reply with correct destination for ICMPv6 RA packets
[Upstream: b93f36a248f7df3eb71b5141c5deadec7c18ee24]
- ovn-controller: Add monitor condition for FDB.
[Upstream: c4008ae520af2561cfd68749227a8a468277e2e5]
- Rename scapy-server into scapy-server.py
[Upstream: d16ec6f9a063a0cb2d7bac56e23dd60d0c856b76]
- Add ovnkube-identity binary to the ovn-kubernetes Dockerfile
[Upstream: 35d9e42bc3e60629701743ca7e9d6890511cf0f5]
- tests: offload scapy transformations to a separate unixctl daemon
[Upstream: 4a82a49363a591d429d86d60f9120166ea04cb91]
- northd: Remove hosting-chassis only if it's specified
[Upstream: 0b45a1a1cc6f081184d599ba139847ff03d90912]
- QoS: Properly set qos when ovs db is read only (#2234349)
[Upstream: 9c56ac4b74f6b964f102b94404b350417b1cd772]
* Fri Sep 15 2023 Numan Siddique <numans@ovn.org> - 23.09.0-0
- Update to upstream OVN 23.09.0
* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 23.06.0-1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Fri Jun 02 2023 Numan Siddique <numans@ovn.org> - 23.06.0-0
- Update to upstream OVN 23.06.0
* Tue Mar 28 2023 Numan Siddique <numans@ovn.org> - 23.03.0-16
- Sync to upstream OVN branch-23.03. Below are the commits
since last update (23.03.0-4)
- northd: prevents sending packet to conntrack for router ports (#2062431)
[Upstream: 2bab96e899b5da5ae0c3b24bd04ece93d1339824]
- lb: Allow IPv6 template LBs to use explicit backends.
[Upstream: d01fdfdb2c97222cf326c8ab5579f670ded6e3cb]
- controller: lflow: do not use tcp as default IP protocol for ct_snat_to_vip action (#2157846)
[Upstream: 6a16c741e5a10a817ca8251898f48bf9eeb971f5]
- northd: Drop packets for LBs with no backends (#2177173)
[Upstream: 77384b7fe3f7d3260fd2f94a3bd75b8ca79f56ae]
- northd: Use generic ct.est flows for LR LBs (#2172048 2170885)
[Upstream: 81eaa98bbb608bda320abfa0122ba073de6597d7]
- northd: drop ct.inv packets in post snat and lb_aff_learn stages (#2160685)
[Upstream: 0af110c400cc29bb037172cdfd674794716771df]
- controller: Add config option per LB to enable/disable CT flush (#2178962)
[Upstream: 89fc85fa7f2b00f404ec5aef4ce8f2236474fbab]
- northd: Ignore remote chassis when computing the supported feature set.
[Upstream: 80b7e48a877abd337eb54b9bb9c7b4280aa9ff74]
- controller: Use ofctrl_add_flow for CT SNAT hairpin flows.
[Upstream: 888215e2164b476462f12d206a3d734958ef79e2]
- rhel: pass options to stop daemon command in systemd units
[Upstream: ed7095613abf3d36cbcf347e1238b84e6843eaf1]
* Tue Mar 07 2023 Numan Siddique <numans@ovn.org> - 23.03.0-4
- Update to upstream OVN 23.03.0
* Thu Feb 16 2023 Numan Siddique <numans@ovn.org> - 22.12.0-25
- Sync to upstream OVN branch-22.12. Below are the commits
since last update (22.12.0-1)
- lb: northd: Properly format IPv6 SB load balancer VIPs.
[Upstream: 7053ae61267ebcb282d5ef18b5bd8f2f6c6c37e0]
- system-test: Use OVS_WAIT_UNTIL for tcpdump start instead fo sleep
[Upstream: d5273f929513458a569cdfb297bffd9922d44c01]
- docs: fix the max number of ports per network for vxlan
[Upstream: 4dfa4ba431ab634b6068f27e886a4d403d589c87]
- ovn-nbctl: Fix documentation typo (#2168009)
[Upstream: 0c44d7dbf4a013f08c79d5818e89a8f55ecd09e0]
- northd: do not create flows for reserved multicast IPv6 groups (#2154930)
[Upstream: 61e030ed59c2d2a1029866dce6769428e0abbc0c]
- northd.c: Validate port type to avoid unexpected behavior.
[Upstream: b67009fdb6312e95367183c65b439fd3b7a288bf]
- Add the metalLB install flag for CI actions
[Upstream: 65990b8398e8e7ff29c6d7e9903fd0cf7ef64965]
- ovn-trace: Use the original ovnact for execute_load
[Upstream: 4c78bef966927f4083b601a6a4f5fc76a839fd1a]
- northd: Add logical flows to allow rpl/rel traffic in acl_after_lb stage. (#1947807)
[Upstream: d6914efd53ac28a6e3da6e65f9e026674f05dc4c]
- ovn-controller: Fix initial requested SNAT zone assignment. (#2160403)
[Upstream: 17f1e9e0148e298b6ec525d5d6b149082a864dca]
- northd: Drop packets destined to router owned NAT IP for DGP.
[Upstream: 481f25b784896eec07fedc77631992a009bcdada]
- northd: Add flag for CT related (#2126083)
[Upstream: 2619f6a27aca2a5925e25297f75e6a925cf1eb6a]
- tests: Fixed load balancing system-tests
[Upstream: 1791a107debbaa474669a794b4d2a6dff4cb1dcb]
- tests: Fixed flaky ACL fair Meters
[Upstream: f9fb0bb4de4e7cb0a02fcb0794e226e6af8e8f5c]
- northd: move hairpin stages before acl_after_lb (#2103086)
[Upstream: 3723a6d6e39dcffc502e094ccc10a8d638fa5efa]
- controller: Fix missing first ping from pod to external (#2129283)
[Upstream: 7109f02b78f5087b5bae2885f153378e627d90f7]
- controller: use packet proto for hairpin traffic learned action if not specified (#2157846)
[Upstream: 588291528fc0568e7da402c05b596c6c855d2c5f]
- .ci: ovn-kubernetes: Add a "prepare" stage to allow for custom actions.
[Upstream: 29fb21e6ec0a1203e3f5b2bfff4c3ccea8df4d37]
- build-aux/sodepends.py: Fix flake8 error.
[Upstream: 1fd28ef34bef9b19ca350f15bd03e10265a911dc]
- build-aux/sodepends.py: Fix broken build when manpage changes.
[Upstream: 79edad8a1e547f4120ea3d20f08aafe1e40a6f65]
- ovn-ic: Only monitor useful tables and columns.
[Upstream: fdad33f2348f34b5fb886a5a3143d91f44021811]
* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 22.12.0-1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Dec 21 2022 Numan Siddique <numans@ovn.org> - 22.12.0-0
- Update to upstream OVN 22.12.0
* Tue Dec 06 2022 Numan Siddique <numans@ovn.org> - 22.09.0-25
- Backport the bug fixes related to load balancer affinity.
Below are the commits since the last update (22.09.0-22)
- ovn-northd.at: Fix failing lb-affinity test.
[Upstream: 60b856cfd55b8d636c5f8c1011781f587efe7cf5]
- northd: Include VIP port in LB affinity learn flow matches. (#2150533)
[Upstream: cc037c7538d635e7d014e98935a83bc15140674f]
- northd: Improve the LB affinity code
[Upstream: 11da2339668a024a05512ba2178046135b784825]
* Thu Dec 01 2022 Numan Siddique <numans@ovn.org> - 22.09.0-22
- Sync to upstream OVN branch-22.09 and also backport
Load balancer affinity patches. These patches are not backported
to branch-22.09, but ovn-kubernetes need them.
Below are the commits since last update (22.09.0-4).
- northd: rely on new actions for lb affinity
[Upstream: 5b6223dcb6060205c6e9d4e8c092e96134bb032a]
- actions: introduce chk_lb_aff action
[Upstream: f74c418e3cd2079e7cae4d3ec293ffc387f5a660]
- actions: introduce commit_lb_aff action
[Upstream: 2d190e5c69c9440c720ab8412cc04e4096d4114a]
- controller: Fixed ovs/ovn(features) connection lost when running more than 120 seconds (#2144084)
[Upstream: db61b2e4f166092e5bc93f4cba7696a72037a069]
- ovs: Bump submodule to include latest fixes.
[Upstream: d62dde642879ffb7ff1eb8f4077b6224f977c6d7]
- ovn-controller: Fixed missing flows after interface deletion (#2129866)
[Upstream: 90c165fa5a6ecdd9bac606cf259ae88228b96208]
- ovn-controller: Fix releasing wrong vif
[Upstream: 4da7a269c9eb055b2cfa27d67593a77167b8c9a6]
- tests: Fix flaky test "multi-vtep SB Chassis encap updates"
[Upstream: ef15d5c22fa2255db69be2d6da822cefb099327c]
- controller: Fix QoS for ports with undetected or too low link speed. (#2136716)
[Upstream: ae96d5d753ccbee9b239178f56460e05169ac9f7]
- ovn-controller: Fix some issues with CT zone assignment. (#2126406)
[Upstream: 0fc041667031da20cd03c0b76de8de3dbe502d50]
- ci: Update jobs to use numbers instead of test flags
[Upstream: bc609bf148be3a38a0b8f38f049f30eb7e9b55f8]
- ovs: Bump submodule to tip of branch-3.0 and add related test (#2126450)
[Upstream: c18415d5ae7273c633190df4ac9e872a0a0f9709]
- controller: fix ipv6 prefix delegation in gw router mode (#2129244 2129247)
[Upstream: f2042a2e6aeb1a7fe266316337545331f5186dd0]
- spec: require python3-openvswitch for ovn-detrace
[Upstream: 29e4d43966fbf34d9707e31880c455f22a643bb3]
- northd: Use separate SNAT for already-DNATted traffic.
[Upstream: 51044dbfdba234a3f50d8c9c952335e41b72a39b]
- controller: Restore MAC and vlan for DVR scenario (#2123837)
[Upstream: 86e99bf95a2191ebdcd5d03335ff8add2a636f55]
- northd: Fix multicast table full (#2094710)
[Upstream: 40dd85eb8d2d2d88f9000b6be6fb263b4bd1a27f]
- controller: Fix first ping from lsp to external through snat failing (#2130045)
[Upstream: 76a01e53a9fcc3184211cca10787d462cb86a352]
* Thu Sep 22 2022 Numan Siddique <numans@ovn.org> - 22.09.0-4
- Sync to upstream OVN release 22.09.
* Wed Aug 10 2022 Numan Siddique <numans@ovn.org> - 22.06.0-33
- tests: Enable vif-plug tests and fix the vif-provider.
[Upstream: c4803488bc58e3845b3155ec859359466f44b17e]
* Wed Aug 10 2022 Numan Siddique <numans@ovn.org> - 22.06.0-32
- ovn-ctl: Ensure that log/run directory have correct permission (#2113855)
[Upstream: 49b456e4b75debb29bcf8d4915d535904924edff]
* Wed Aug 10 2022 Numan Siddique <numans@ovn.org> - 22.06.0-31
- ofctrl.c: mff_ovn_geneve should be available at state WAIT_BEFORE_CLEAR.
[Upstream: aa8c535a1faf4bd3c0494edce1e9dda8a0251263]
* Wed Aug 10 2022 Numan Siddique <numans@ovn.org> - 22.06.0-30
- controller: Fix IPv6 prefix delegation (#2108726)
[Upstream: bd7ce24bd79b2411fdc5d8ef0abb292ebedbe8df]
* Wed Aug 10 2022 Numan Siddique <numans@ovn.org> - 22.06.0-29
- system-tests: Reduce flakiness of IPv6 prefix delegation (#2108726)
[Upstream: b340d5d3af352ea4ece64b93e2bd59396586c217]
* Wed Aug 10 2022 Numan Siddique <numans@ovn.org> - 22.06.0-28
- northd: handle virtual lport type update (#2099288)
[Upstream: 49b73c3504f78a26afa84b79c5d52bd9b224348f]
* Wed Aug 10 2022 Numan Siddique <numans@ovn.org> - 22.06.0-28
- Fix the ovn_docker package build failures (bz 2063313)
* Fri Jul 29 2022 Numan Siddique <numans@ovn.org> - 22.06.0-27
- extend-table: Fix table ID double allocation after OVS restart. (#2112111)
[Upstream: db15cf29a1f9857b55389f424c5d747406550cb7]
* Fri Jul 29 2022 Numan Siddique <numans@ovn.org> - 22.06.0-26
- IPsec: Add option to force NAT-T encapsulation (#2041681)
[Upstream: d6dd8e49551141159f040406202f8550c18a1846]
* Fri Jul 22 2022 Numan Siddique <numans@ovn.org> - 22.06.0-25
- Fix compilation issue in fedora 37/rawhide.
- Synced the minor version with the fast datapath.
[Upstream: 500982b84280fdc451877c76f5fdb9a0ac19e805]
* Wed Jul 20 2022 Numan Siddique <numans@ovn.org> - 22.06.0-2
- Sync to upstream OVN branch-22.06
* Tue Mar 15 2022 Numan Siddique <numans@ovn.org> - 22.03.0-1
- Sync to upstream OVN 22.03.0
- Sync OVS source to upstream branch 2.17 5255713d1fb62f00cb6ac8cf027c43d169454ac1
* Tue Mar 08 2022 Numan Siddique <numans@ovn.org> - 21.12.0.5
- Backported "northd: Support the option to apply from-lport ACLs after load balancer."
* Thu Mar 03 2022 Numan Siddique <numans@ovn.org> - 21.12.0.4
- Backported "northd: introduce exclude-lb-vips-from-garp option for lsp"
* Sun Jan 23 2022 Numan Siddique <numans@ovn.org> - 21.12.0.3
- Synced with OVN upstream commit 8ee27f481e5edffa6421b5ed2617a4797f89c6bf
- Synced to get the multicast fixes required for ovn-k8s (for local az support).
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 21.12.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Jan 18 2022 Numan Siddique <numans@ovn.org> - 21.12.0.1
- Update to upstream 21.12.0
* Wed Dec 01 2021 Numan Siddique <numans@ovn.org> - 21.09.0-4
- Synced with OVN upstream commit 904c5532919915a5005b95ceaee5f6af1d18e9eb
- Synced with OVS submodule commit 91e1ff5dde396fbcc8623ac0726066e970e6de15 using in OVN.
- ovn-k8s requires some of the fixes.
* Wed Oct 13 2021 Numan Siddique <numans@ovn.org> - 21.09.0-3
- Backported the patches:
- 855fb576af2("northd: Fix typo, from destroy_router_enternal_ips to destroy_router_external_ips.")
- beed00c9206("northd: Always generate valid load balancer address set names.")
* Wed Oct 06 2021 Numan Siddique <numans@ovn.org> - 21.09.0-2
- Synced with OVN upstream commit 98c6c04fb7cd731e26b96b53d59fe949b9ec06bc
* Wed Oct 06 2021 Numan Siddique <numans@ovn.org> - 21.09.0-1
- Synced with the upstream release v21.09.0
* Tue Sep 28 2021 Numan Siddique <numans@ovn.org> - 21.06.0-17
- Synced with OVN upstream commit 0cbd3cafd36c90c918ab5dcb4ec11be9d44bc5f5 from newly created branch-21.09.
- Needed this fix - 6549e584266("northd: Fix multicast relay when DGP are configured.")
- Updated to OVS sources to include upstream commit - 429b114c5aadee24ccfb16ad7d824f45cdcea75a
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 21.06.0-16
- Rebuilt with OpenSSL 3.0.0
* Tue Aug 24 2021 Numan Siddique <numans@ovn.org> - 21.06.0-15
- Backported the following patches:
- ic: learn routes to LR only from corresponding transit switch
- Support additional 'iface-id-ver' options in OVS inteface for claiming an lport.
- controller: Don't allocate zone ids for non-VIF port bindings.
- northd: Add VIP port to established flows in DNAT table for Load Balancers
* Thu Aug 19 2021 Numan Siddique <numans@ovn.org> - 21.06.0-14
- Synced with OVN upstream commit cee67610a9220752ce2de236d615d864ad41ab1b
- Updated OVS sources to v2.16.0 tar file.
* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 21.06.0-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jul 16 2021 Numan Siddique <numans@ovn.org> - 21.06.0-12
- Backported the following fixes:
- Don't suppress localport traffic directed to external port (#1974062)
- northd: Fix multicast table full comparison. (#1979870)
- northd-ddlog: Fix IP family match for DNAT flows.
- Disable ARP/NA responders for vlan-passthru switches
- tests: Fix "vlan traffic for external network with distributed..."
- ovn-controller: Fix port group I-P when they contain non-vif ports.
- system-tests: Fix the test file.
- northd: Swap src and dst eth addresses in router egress loop.
- ovn.at: Fix test "virtual ports -- ovn-northd-ddlog".
* Fri Jun 25 2021 Numan Siddique <numans@ovn.org> - 21.06.0-1
- Synced with the upstream release v21.06.0
* Wed May 12 2021 Numan Siddique <numans@ovn.org> - 21.03.0-32
- Synced with the RHEL FDP ovn-2021
- Backports since 21.03.0-2 are:
- e8e667dd92f3("controller: Monitor all logical flows that refer to datapath groups.")
- 879ebc8c6419("tests: Fix frequent failure of "4 HV, 1 LS, 1 LR, packet test with HA distributed router gateway port:")
- d7db8702e778("ovn-lib: harmonize stop_ovn_daemon() with ovs-lib")
- f4b44655ec8f("ovn-ctl: stop databases with stop_ovn_daemon()")
- d8b282b2852e("ovn-nbctl: dump next-hop for router policies")
- f5a27f67d825("tests: Improve test "IGMP snoop/querier/relay")
- 9c9b6b1d98e3("binding: Don't reset expected seqno for interfaces already being installed.")
- 0038579d1928("northd: Optimize ct nat for load balancer traffic.")
- 3bb91366a6b0("northd: Provide the option to not use ct.inv in lflows.")
- 127bf166ccf4("northd: Support flow offloading for logical switches with no ACLs.")
- 9cc334bc1a03("ovn-controller: Ensure br-int is using secure fail-mode")
* Thu Apr 15 2021 Numan Siddique <numans@ovn.org> - 21.03.0-2
- Backport the required patches.
* Thu Apr 15 2021 Numan Siddique <numans@ovn.org> - 21.03.0-1
- Rebase to OVN v21.03.0.
- Use ovs sources from submodule commit used in ovn - ac85cdb38c1("ovsdb-idl: Mark arc sources as updated when destination is deleted.").
* Sat Mar 06 2021 Numan Siddique <numans@ovn.org> - 20.12.0-25
- Backport "northd: Fix the missing force_snat_for_lb flows when router_ip is configured." (#1931319)
- Backport "binding: Fix potential NULL dereference of lbinding."
* Mon Mar 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-24
- Backport "tests: Eliminate most "sleep" calls."
- Backport "tests: Add more checking to "3 HVs, 1 LS, 3 lports/HV" test."
- Backport "tests: Improve debuggability of tests."
- Backport "Implement SCTP-specific reject() action." (#1841009)
- Backport "Add sctp_abort logical flow action." (#1841009)
- Backport "controller: Split mac learning code to a separate file." (#1672625)
- Backport "MAC learning: Add a new FDB table in southbound db." (#1672625)
- Backport "MAC learning: Add new actions - put_fdb, get_fdb and lookup_fdb." (#1672625)
- Backport "controller: MAC learning: Add OF rules for the FDB entries." (#1672625)
- Backport "northd: MAC learning: Add logical flows for fdb." (#1672625)
- Backport "Fix the failing test case - ovn -- ACL skip hints for stateless config." (#1672625)
- Backport "northd: Cleanup stale FDB entries." (#1672625)
- Backport "mac-learn: Fix build due to missing newline at EOF." (#1672625)
- Backport "Properly handle hairpin traffic for VIPs with shared backends." (#1931599)
- Backport "lflow: Avoid matching on conntrack original tuple if possible."
- Backport "northd: Avoid matching on ct.dnat flags for load balancers."
* Mon Mar 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-23
- Backport "ofctrl: Fix the assert seen when flood removing flows with conj actions." (#1929978)
* Mon Feb 22 2021 Numan Siddique <numans@ovn.org> - 20.12.0-22
- Backport "binding: Fix potential crash when binding_seqno_run is skipped." (#1930030)
- Backport "ofctrl: Do not link a desired flow twice."
* Mon Feb 22 2021 Numan Siddique <numans@ovn.org> - 20.12.0-21
- Backport "northd: Provide the Gateway router option 'lb_force_snat_ip' to take router port ips." (#1931319)
* Mon Feb 22 2021 Numan Siddique <numans@ovn.org> - 20.12.0-20
- Backport "ofctrl: Fix the assert seen when flood removing flows." (#1928012)
* Mon Feb 22 2021 Numan Siddique <numans@ovn.org> - 20.12.0-19
- Backport "controller: Fix toggling ct zone ids." (#1903210)
* Mon Feb 22 2021 Numan Siddique <numans@ovn.org> - 20.12.0-18
- Backport "ovn-nbctl: do not allow duplicated ECMP routes" (#1916842)
* Thu Feb 11 2021 Numan Siddique <numans@ovn.org> - 20.12.0-17
- Backport "northd: Skip matching on ct flags for stateless" (#1927230)
* Thu Feb 11 2021 Numan Siddique <numans@ovn.org> - 20.12.0-16
- Backport "Support configuring Load Balancer hairpin source IP." (#1908540)
- Backport "lflow: Use learn() action to generate LB hairpin reply flows." (#1917875)
* Thu Feb 11 2021 Numan Siddique <numans@ovn.org> - 20.12.0-15
- Backport "binding: Correctly set Port_Binding.up for container/virtual ports." (#1926165)
- Backport "binding: Set Port_Binding.up only if supported." (#1926165)
- Backport "northd: Allow backwards compatibility for Logical_Switch_Port.up." (#1926165)
- Backport "tests: Fix Port_Binding up test." (#1926165)
* Thu Feb 11 2021 Numan Siddique <numans@ovn.org> - 20.12.0-14
- Backport "ovn-nbctl: add --bfd option to lr-route-add" (#1918997)
* Mon Feb 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-13
- Backport "ofctrl: Rename 'nb_cfg' to 'req_cfg'." (#1839102)
- Backport "controller: Implement a generic barrier based on ofctrl cur_cfg sync." (#1839102)
- Backport "binding: Set Logical_Switch_Port.up when all OVS flows are installed." (#1839102)
* Mon Feb 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-12
- Backport "northd: add --event option to enable controller_event for empty_lb" (#1918422)
* Mon Feb 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-11
- Backport "ovn-nbctl: add bfd report to lr-route-list command" (#1915958)
- Backport "ovn-nbctl: add ecmp/ecmp-symmetric-reply to lr-route-list command"
* Mon Feb 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-10
- Backport "controller: fix pkt_marking with IP buffering" (#1857106)
* Mon Feb 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-9
- Backport "ovn-ctl: Add support for ovsdb-server --disable-file-column-diff." (#1917979)
* Mon Feb 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-8
- Backport "ovn-controller: Fix wrong conj_id match flows when caching is enabled." (#1919812)
* Mon Feb 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-7
- Backport "northd: Fix duplicate logical port detection." (#1918582)
* Mon Feb 01 2021 Numan Siddique <numans@ovn.org> - 20.12.0-6
- Backport "northd: Fix ACL fair log meters for Port_Group ACLs." (#1918004)
- Backport "binding: Fix container port removal from local bindings." (#1917533)
- Backport "binding: Always delete child port bindings first." (#1917533)
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 20.12.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Thu Jan 14 2021 Numan Siddique <numans@ovn.org> - 20.12.0-5
- Backport "bfd: introduce IPv6 support" (#1915739)
* Wed Jan 13 2021 Numan Siddique <numans@ovn.org> - 20.12.0-4
- Backport "introduce BFD support in ovn-controller" (#1847570)
- Backport "ovn-northd: Move lswitch ARP/ND Responder to functions"
- Backport "ovn-northd: Move DHCP Options and Response to a function"
- Backport "ovn-northd: Move lswitch DNS lookup and response to a function"
- Backport "ovn-northd: Move DNS and DHCP defaults to a function"
- Backport "ovn-northd: Move ARP response for external ports to a function."
- Backport "ovn-northd: Move broadcast and multicast lookup in lswitch to a function"
- Backport "ovn-northd: Move destination handling into functions."
- Backport "ovn-northd: split build_lswitch_output_port_sec into iterators"
- Backport "ovn-northd: Move lrouter arp and nd datapath processing to a function"
- Backport "ovn-northd: Move ipv4 input to a function"
- Backport "ovn-northd: move NAT, Defrag and lb to a function"
* Mon Jan 11 2021 Numan Siddique <numans@ovn.org> - 20.12.0-3
- Backport "binding: Do not clear container lbinding->pb when parent is deleted." (#1914304)
* Mon Jan 11 2021 Numan Siddique <numans@ovn.org> - 20.12.0-2
- Backport "ovn-trace: fix trigger_event warning" (#1909650)
* Mon Jan 11 2021 Numan Siddique <numans@ovn.org> - 20.12.0-1
- Rebase to OVN v20.12.0.
- Re-backport patches for #1883957 and #1881826 as there are not in v20.12.0.
- Use ovs sources from master commit - 252e1e576443("dpdk: Update to use DPDK v20.11.").
* Tue Dec 15 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-4
- Backport "northd: Add ECMP support to router policies." (#1881826)
- Backport "Add missing documentation for router policy and ecmp sym reply stage." (#1881826)
- Backport "northd: add reject action for lb with no backends" (#1883957)
- Backport "northd: Fix iteration over vip backends." (#1904489)
- Backport "pinctrl: Honor always_learn_from_arp_request for self created MAC_Bindings." (#1903199)
* Tue Dec 01 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-3
- Backport "Allow explicit setting of the SNAT zone on a gateway router" (#1892311)
- Backport "Clear port binding flows when datapath CT zone changes."
- Backport "pinctrl: Fix segfault seen when creating mac_binding for local GARPs." (#1901880)
- Backport "Fix OVN update issue when ovn-controller is updated first from 20.06 to 20.09. (#1900484)
- Backport "controller: Allow pinctrl thread to handle packet-ins when version mismatch with northd." (#1899936)
- Backport memory leak fix patches.
- Backport "Provide the option to pin ovn-controller and ovn-northd to a specific version." (#1899936)
- Backport Load balancer hairpin improvement patches. (#1833373)
- Backport "northd: Fix lb_action when there are no active backends for lb health_check" (#1888445)
- Backport "Allow VLAN traffic when LS:vlan-passthru=true" (#1846018)
- Backport "northd: Don't poll ovsdb before the connection is fully established" (#1896671)
- Backport "pinctrl: Directly update MAC_Bindings created by self originated GARPs." (#1894478)
- Backport "ovn-northd: Limit self originated ARP/ND broadcast domain." (#1894478)
- Backport "dhcp: add iPXE support to OVN" (#1765506)
* Tue Nov 03 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-2
- Backport "ovn-detrace: Only decode br-int OVS interfaces." (#1890803)
- Backport "ovn-detrace: Improve DB connection error messages." (#1890803)
- Backport "northd: Use 'enum ovn_stage' for the table value in the 'next' OVN action." (#1876990)
- Backport "ovn-trace: Don't assert for next(stage=ingress,..) (#1876990)
- Backport "actions: Add a new OVN action - reject {}." (#1876990)
- Backport "ovn-northd: Optimize logical flow generation for reject ACLs." (#1876990)
- Backport "ovn-trace: Handle IPv6 packets for tcp_reset action." (#1876990)
- Backport "controller: IPv6 Prefix-Delegation: introduce RENEW/REBIND msg support" (#1826686)
- Backport "ofctrl.c: Fix duplicated flow handling in I-P while" (#1871931)
- Backport "ofctrl.c: Avoid repeatedly linking an installed flow and" (#1871931)
- Backport "ofctrl.c: Only merge actions for conjunctive flows." (#1871931)
- Backport "ofctrl.c: Do not change flow ordering when merging" (#1871931)
- Backport "ofctrl.c: Simplify active desired flow selection." (#1871931)
- Backport "ofctrl.c: Always log the most recent flow changes." (#1871931)
- Backport "ofctrl.c: Add a predictable resolution for conflicting" (#1871931)
- Backport "northd: properly reconfigure ipam when subnet is changed" (#1865866)
- Backport "ovn-northd: Add localnet ports to Multicast_Groups created by IGMP_Group." (#1886314)
* Wed Sep 30 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-1
- Sync to upstream OVN v20.09.0.
* Tue Sep 22 2020 Numan Siddique <numans@ovn.org> - 20.06.2-4
- Backport many bug fix patches.
* Tue Sep 01 2020 Numan Siddique <numans@ovn.org> - 20.06.2-3
- Backport "ovn-controller: Fix incremental processing of Port_Binding deletes." (#1871961)
* Tue Sep 01 2020 Numan Siddique <numans@ovn.org> - 20.06.2-2
- Backport "Fix ovn-controller crash when a lport of type 'virtual' is deleted." (#1872681)
* Mon Aug 24 2020 Numan Siddique <numans@ovn.org> - 20.06.2-1
- Sync the OVN sources with the upstream v20.06.2 release and reorder
the other patches.
* Wed Jul 29 2020 Numan Siddique <numans@ovn.org> - 20.06.1-6
- Backport "ovn-controller: Release lport if the ofport of the VIF is -1.". (#1861298)
- Backport "ovn-controller: Fix the missing flows when logical router port is added after its peer." (#1860053)
- Backport "ovn-controller: Clear flows not associated with db rows in physical flow change handler." (#1861042)
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 20.06.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 21 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.1-4
- Backport "ovn-controller: Fix the missing ct zone entries for container ports." (#1858191)
* Thu Jul 16 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.1-3
- Backport "ovn-controller: Fix the missing flows with monitor-all set to True" (#1857537)
* Thu Jul 16 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.1-2
- Backport "Introduce icmp6_error action" (#1846300)
- Backport "Introduce icmp6.frag_mtu action" (#1846300)
- Backport "northd: introduce icmp6_error logical flows in router pipeline" (#1846300)
* Thu Jul 16 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.1-1
- Backport "Support packet metadata marking for logical router policies." (#1828933)
- Backport "ovn-nbctl: Enhance lr-policy-add to set the options."(#1828933)
- Backport "pinctrl: Support DHCPRELEASE and DHCPINFORM in native OVN dhcp responder." (#1801258)
* Fri Jul 10 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.1-0
- Sync the ovn tar ball to the ovn v20.06.1 release.
- Sync the ovs (openvswitch-2.13.90) tar ball to the commit fa31efd211143f1adb06a62faad803a5aca1e400
* Mon Jun 22 2020 Numan Siddique <nusiddiq@redhat.com> - 20.03.0-4
- Backport "northd: By pass IPv6 Router Adv and Router Solicitation packets from ACL stages."
* Tue Apr 28 2020 Numan Siddique <nusiddiq@redhat.com> - 20.03.0-3
- Sync the ovn tar ball to the ovn master with the commit - b4b68177eb2fcbc9d25e38eb58d8704ba7dd4177
- Fix required to address the conntrack entry leaks.
* Mon Mar 30 2020 Numan Siddique <nusiddiq@redhat.com> - 20.03.0-2
- Removed the Revert "ovsdb-idl: Avoid sending redundant conditional monitoring updates"
as openvswitch compilation is failing in the build.
* Mon Mar 30 2020 Numan Siddique <nusiddiq@redhat.com> - 20.03.0-1
- Sync the ovn tar ball to the ovn master with the commit - c4700eed17da8615107553aec82852a37d401821
- SCTP load balancer feature is requried for ovn-kubernetes
- Revert "ovsdb-idl: Avoid sending redundant conditional monitoring updates"
* Tue Mar 03 2020 Numan Siddique <nusiddiq@redhat.com> - 20.03.0-0
- Release upstream OVN v20.03.0
* Fri Feb 21 2020 Numan Siddique <nusiddiq@redhat.com> - 2.12.1-1
- Version bump required for correcting the changelog
* Fri Feb 21 2020 Numan Siddique <nusiddiq@redhat.com> - 2.12.1-0
- Sync the ovn tar ball to the ovn master with the commit - eb9a406cefeb6ac0b0176039c586f982642a41f8
- Sync the ovs tar ball to the ovs master with the commit - ac23d20fc90da3b1c9b2117d1e22102e99fba006
* Tue Feb 11 2020 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-12
- Sync the ovn tar ball to the ovn master with the commit - b02d366e6268462d637b7a5047ff65b2536408af.
- Fix the tcp_reset issue. Fix required for ovn kuberenetes.
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.12.0-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Nov 25 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-9
- Use the ovs commit 91157afbd83aefb0c9f558d2841fece388b3b0cb as ovn
build for centos 7 was still failing.
* Mon Nov 25 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-8
- Reverse the previous commit.
- Fix the compilation error seen in Centos7 by using
ovs commit - 36e5d97f9b09262ccc584ccb45fb06482b0cfc46.
The commit 1ca0323e7c29d("Require Python 3 and remove support for Python 2.") removed
Python 2 support because of which compilation is failing in Centos 7.
* Mon Nov 25 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-7
- Build with python 3 support as ovs requires python 3.
* Mon Nov 25 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-6
- Fix the changelog date errors.
* Wed Nov 06 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-5
- Fix the logrotate issue - (#1769200).
* Tue Oct 29 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-4
- Sync the ovn tar ball to the latest master with the commit - 0a51bb04f8d6194b2c706558d434b09a89196e26.
* Wed Oct 09 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-3
- Sync the ovn tar ball to the latest master with the commit - 1a3e6dfb5e2fd5bbb625f637792f91a02767ff3b.
* Tue Oct 08 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-2
- Use the official openvswitch 2.12.0 tar file.
* Thu Sep 26 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-1
- Apply fedora only patch only on fedora builds.
* Sat Sep 14 2019 Numan Siddique <nusiddiq@redhat.com> - 2.12.0-0
- 2.12.0 from new OVN repo
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.11.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon Jun 3 2019 Numan Siddique <nusiddiq@redhat.com> - 2.11.1-1
- Fix the version information in configure.ac
* Wed May 29 2019 Numan Siddique <nusiddiq@redhat.com> - 2.11.1-0
- Use the latest openvswitch sources with the commit - 4992e00012e7
* Tue Apr 9 2019 Numan Siddique <nusiddiq@redhat.com> - 2.11.0-9
- Fix epoch issue for RDO.
* Tue Apr 9 2019 Numan Siddique <nusiddiq@redhat.com> - 2.11.0-8
- Fix Obsoletes version
* Mon Apr 8 2019 Numan Siddique <nusiddiq@redhat.com> - 2.11.0-7
- Fix build error on centos builds.
* Mon Apr 8 2019 Numan Siddique <nusiddiq@redhat.com> - 2.11.0-6
- Fix spec file - %if error for centos builds.
* Mon Apr 8 2019 Numan Siddique <nusiddiq@redhat.com> - 2.11.0-5
- Support building OVN packages for Centos7/RDO.
* Fri Apr 5 2019 Numan Siddique <nusiddiq@redhat.com> - 2.11.0-4
- Provide new OVN packages splitting from openvswitch for fedora