Changelog v21.06.0

Changes from 21.03.0 to v21.06.0

  • 0b8f239b Set release date for 21.06.0.
  • fb16564b github: Use nmap-ncat instead of netcat-openbsd.
  • 9d331e4f system-ovn.at: Use ADD_BR macro instead of bare ovs-vsctl.
  • 4b0a0263 ovs: Include ovs-vswitchd segfault fixes.
  • c95d3dd7 controller-vtep: Update tunnel_key and replication_mode if needed
  • ba0aa304 controller-vtep: fix mmr and physical locators create/update
  • f7543186 northd: Reduce number of logical flow allocations.
  • a505ab80 ovn-northd-ddlog: Fix memleak when destroying context.
  • e5381b6f tests: Fix consistency of 4 HV, 3LS, 2 LR test runs.
  • b82425b9 tests: Add debugging 4 HV, 3LS, 2 LR test.
  • e87b2c0d ovn.at: Fix test “No ovn-controller assert when generating conjunction flows – ovn-northd-ddlog”.
  • acf865c0 ovn.at: Fix test “nb_cfg timestamp – ovn-northd-ddlog”.
  • b013c944 ovn-northd.at: Fix test “northd ssl file change – ovn-northd-ddlog”.
  • 153b1e43 if-status: Fix logging of interface creation.
  • c40fef06 ovn-controller: Fix port-group incremental processing.
  • 6620685e Document priority behavior for allow-stateless ACLs
  • 475ac21a ovn-sbctl: Fix lflow-list (etc.) in daemon mode and upon races.
  • 92bf0af2 Prepare for post-21.06.0
  • 52e49a57 Prepare for 21.06.0
  • 308e7437 tests: Fix PKIDIR checks in AT_SKIP.
  • 1ea0480f tests: Don’t define tests that will always be skipped.
  • 602093be ovn-northd, ovn-northd-ddlog: New –dry-run option.
  • 2fe778b5 ovn-northd-ddlog: Document –ddlog-record option.
  • d0517045 ovs: Include monitor condition expected seqno fix.
  • 3b6362d6 northd: Avoid memory reallocation while building lb rules.
  • a5b92aef northd-ddlog: Fix compilation error.
  • 7c927c0c ovn-northd: Fix IPv6 ECMP symmetric reply flows
  • f15cec72 ovn-nb.xml: Fix typo
  • 956c0698 ovn-dbctl.c: Support ssl cert rotation for daemon mode.
  • 8de4f800 ovn-northd/ovn-ic: Support ssl cert rotation.
  • cc67d4f1 ovn-controller: Support ssl cert rotation when command line options are used.
  • c0c91cd5 configure: Also find and verify version of ovsdb2ddlog.
  • 36ff3d24 configure: Improve how to find ddlog binaries and libraries.
  • 90f6d907 configure: Check for correct ddlog version.
  • 494e59e3 Static Routes: Add ability to specify “discard” nexthop
  • dd333dce ovn-northd-ddlog: Remove Router.static_routes.
  • 46427eec ovn-northd-ddlog: Intern nb::Logical_Switch_Port.
  • cd84d5ee ovn-northd-ddlog: Intern nb::Logical_Router_Port.
  • e56c27cb ovn-northd-ddlog: Intern selected input relations.
  • 7b93dfc5 ovn-northd-ddlog: Eliminate redundant dereferences.
  • 4a48effe ovn-northd-ddlog: Eliminate remaining Ref’s.
  • 9c62a72d ovn-northd-ddlog: Remove unused function.
  • e516877c ovn-northd-ddlog: Intern the RouterPort table.
  • 9aaa08d7 ovn-northd-ddlog: Intern the SwitchPort table.
  • 053a8385 ovn-northd-ddlog: Remove ls field from Switch.
  • 12fe31f1 ovn-northd-ddlog: Intern the Switch table.
  • a5549aae ovn-northd-ddlog: Workaround for slow group_by.
  • fa508610 ovn-northd-ddlog: Intern the Router table.
  • 3f21890b ovn-northd-ddlog: Remove lr field from Router.
  • 5c3b987b ovn-northd-ddlog: Preserve NB_Global more carefully.
  • cd064285 ovn-northd-ddlog: Upgrade to ddlog 0.38.
  • 849ef6ae tests: Miscellaneous debuggability improvements.
  • db6d3078 ovn-nbctl: Don’t replicate entire database unnecessarily.
  • 0b70e8a8 ovn-sbctl: Add daemon support.
  • 0f5d09bc ovn-dbctl: Fix memory leak in client mode.
  • 9242a3a1 ovn-nbctl: Refactor into infrastructure and northbound details.
  • c21aa8bb ovn-nbctl: Daemon mode is no longer experimental.
  • be496a5f ovn-nbctl: Recommend ovn-appctl instead of ovs-appctl.
  • 2b62aecb ovn-nbctl: Improve manpage.
  • f2b4432c ovn-nbctl: Fix memory leak in client mode.
  • e8a446b7 ovn-northd-ddlog: Fix two memory leaks.
  • 96959e56 physical: do not forward traffic from localport to a localnet one
  • 82a4e44e controller: Add support for PTR DNS requests.
  • 419439da Fix Segmentation Fault when LR requests duplicate requested-tnl-key
  • 925ed83a controller: fix physical flow update for localport
  • 8753d2f3 controller: bfd: improve debugging logs
  • c8c03c7f expr: crush the result of a sorted OR expression.
  • fa5ea1ee ovn-northd-ddlog: Document why projections are now output relations.
  • 5c337192 if-status: Add OVS interface status management module.
  • f63b609a ovn-nbctl: do not report an error for duplicated ecmp routes with –may-exist
  • 6f4680a2 ovn-northd.c: Don’t use DPG for MC_UNKNOWN related lflows.
  • 44218d74 ovn-northd-ddlog: Fix weight overflows.
  • 9cc334bc ovn-controller: Ensure br-int is using secure fail-mode
  • 0675bb01 Fix compilation error introduced in the previous commit.
  • ea6ee901 northd: Combine router arp flows.
  • ca3e9cd2 github: Fix up malformed /etc/hosts.
  • 127bf166 northd: Support flow offloading for logical switches with no ACLs.
  • 3187b9fe ovn-northd: introduce new allow-stateless ACL verb
  • 4ad7d64a ovn-sbctl: Prevent core dump from ovn-sbctl lflow-list [datpath] 0xflow
  • e06612d3 tests: Fix inconsistent “ACL Conjunction” test.
  • dc5a85da configure: Report OVS version in the usual Autoconf style.
  • 0cfeba6b ovn-controller: Fix port group conjunction flow explosion problem.
  • 3bb91366 northd: Provide the option to not use ct.inv in lflows.
  • 0038579d northd: Optimize ct nat for load balancer traffic.
  • 6849fa0b github: Fix permissions for system test artifacts.
  • 6a144692 expr.c: Split expr_const_sets_add.
  • e2393241 ovn-controller.c: Reorder addrset and portgroup related functions.
  • de3ca51a ovn.at: Improve “No ovn-controller assert when generating conjunction flows”
  • db41da34 inc-proc-eng: Call clear_tracked_data before recompute.
  • 150be47f ovn-ipsec.at: Fix occasional failure of test “unsupported multiple ovn-encap-ip values”.
  • c1d0bbf7 Revert “lflow.c: Use warn level log for a lflow that has neither dp nor dpg.”
  • 0ba2e1a2 lflow.c: Use warn level log for a lflow that has neither dp nor dpg.
  • b410a600 ovn.at: Improve test case “Port Group”.
  • fa28ba69 ovn-controller.c: Remove extra local_lports_changed setting.
  • 9c9b6b1d binding: Don’t reset expected seqno for interfaces already being installed.
  • 70ebb984 checkpatch: Re-enforce line length checks.
  • 0c11e1bd ovn-northd-ddlog: Add missing RBAC_Role for IGMP_Group.
  • f5a27f67 tests: Improve test “IGMP snoop/querier/relay”.
  • f9a4c683 ovn-controller-vtep: Set chassis_name for newly created Encap.
  • ce7aee81 tests: Run tests with Datapath Groups enabled/disabled.
  • d8b282b2 ovn-nbctl: dump next-hop for router policies
  • f4b44655 ovn-ctl: stop databases with stop_ovn_daemon()
  • d7db8702 ovn-lib: harmonize stop_ovn_daemon() with ovs-lib
  • 879ebc8c tests: Fix frequent failure of “4 HV, 1 LS, 1 LR, packet test with HA distributed router gateway port:”.
  • d41a337f controller: Monitor all logical flows that refer to datapath groups.
  • 9c60d4cd northd: Fix “Destination unknown” table number in man pages.
  • 7687d878 ofctrl: Send all flow modifications in a bundle.
  • 50f4ea01 Support 802.11ad EthType for localnet ports
  • e45e94b0 ci: Enable OVN system tests in GitHub Actions runs.
  • 9648000d system-ovn.at: Make tests more portable.
  • 1ad0a974 controller: Fix virtual lport I-P handling.
  • 962740bd Support vlan-passthru for tag=0 logical switch ports
  • 08472758 Re-bump the submodule to what it was previously.
  • a2b3b363 configure: Save OVSDIR as an absolute path.
  • c337d0bb northd: introduce per-lb lb_skip_snat option
  • 8848c622 ovn-northd: Add configuration option for parallel lflow build
  • 74daa060 ovn-northd: Introduce parallel lflow build
  • 3d30952c ovn-libs: Add support for parallel processing
  • c948d6bb tests: Test with SSL and RBAC for controller by default
  • 2bbb9fc7 tests: Make certificate generation extendable
  • 5defbd9f AUTHORS: Add Aidan Shribman.
  • 0b5af1d8 documentation: add sudo to install
  • faf009de ovs: Bump submodule version to include latest ovsdb-idl fixes.
  • e1e78b4b binding: Fix the crashes seen when port binding type changes.
  • 82b4c619 northd: Restore flows that recirculate packets in the router DNAT zone.
  • 446cf541 ovsdb2ddlog2c: Fix behavior for internal error.
  • 3a52f053 patch: Use indexes when iterating on localnet/l2gateway port bindings.
  • 63885442 lflow: Avoid parsing lflow->pipeline for non-local flows.
  • 7c1ae20c ovn-northd-ddlog: Rephrase RouterStaticRoute rule.
  • 331b1506 ovn-northd-ddlog: Avoid N*M crossproduct joining switches with routers.
  • f8134b2f ovn-northd-ddlog: Define in_addr, in6_addr, eth_addr in ddlog code.
  • d110394c ovn-northd-ddlog: Add general-purpose bitwise library.
  • ae735962 ovn-northd-ddlog: Make map_get_*() more object-like.
  • 7bafb790 ovn-northd-ddlog: Use object form of is_some(), drop is_none().
  • 5488df0f ovn-northd-ddlog: Improve type safety for datapath stages.
  • d0d0a2d5 ovn-northd-ddlog: Make NB and SB DNS records have different UUIDs.
  • 7888c083 ovn-northd-ddlog: Apply multiple database updates in single ddlog txn.
  • b725f590 tests: Add missing sync in “lb_force_snat_ip for Gateway Routers”.
  • 4beddf33 ovn-nbctl: Fix comment.
  • f4c33f60 xml2nroff: Fix typo in generated nroff.
  • cb9bb2a0 AUTHORS: Add Alexey Roytman.
  • 4f939562 ovn-nbctl: Document protocol sctp for lb-add.
  • 7f8bb3f2 Fix connection string in case of changes in the ovndb-servers.ocf RA
  • 578238b3 pinctrl: Don’t send gARPs for localports
  • e02cd3d2 northd: introduce lrouter_check_nat_entry routine
  • 0d16a8b6 northd: introduce build_lrouter_ingress_flow routine
  • 5e8fadf6 northd: introduce build_lrouter_out_snat_flow routine
  • d8edf46f northd: introduce build_lrouter_out_undnat_flow routine
  • c066d797 ovn-northd-ddlog: Fix minor memory leak.
  • 64a04fc2 ovn-northd-ddlog: Move ‘delta’ global variable into northd_ctx.
  • fef06065 ovn-northd-ddlog: Remove deltas from output tables when we use them.
  • 00dce6aa ovn-northd-ddlog: Fix memory leaks.
  • 82bdb190 ovn-northd-ddlog: Fix error checking in ddlog_commit().
  • 020dab90 tests: Use ovn_start in tests/ovn-controller.at
  • b92823f0 tests: Amend release stale port binding test for RBAC
  • ff2b6ff6 ovn-controller: Add ’local_ip’ option to tunnel ports for IPsec case
  • 0ddb8b2c controller: introduce stats counters for ovn-controller incremental processing
  • 338a6ddb ci: Fix handling of python packages.
  • d851fef6 Correct release date for 21.03.0
  • 340ed17b northd-ddlog: Update RBAC rules
  • 51f2629c northd: Add Controller_Event RBAC rules
  • b865e502 northd: Amend Chassis RBAC rules
  • a6008b68 northd: Add missing RBAC rules for FDB table
  • 525d7894 northd: Amend RBAC rules for Port_Binding table
  • 0d0f8c40 ovs: Bump submodule version to latest ovsdb-cs changes.
  • 8b04f1ef docs: Clarify that OVS submodule should not be used to build OVS itself.
  • 54513ad0 ovn-sbctl: Sort “dump-flows” output by actions if all else fails.
  • 73c2d780 ovn-northd-ddlog: Add profiling support.
  • 1563843d ovs-sandbox: Make it possible to disable recording ddlog input.
  • 9e58fe94 tests: Improve synchronization and debuggability.
  • 2d12e5dd tests: Add missing sync in “controller I-P handling when lrp added last”.
  • 164f2b9a tests: Fix bad syntax in “test” for waiting.
  • 22542608 northd: introduce build_lrouter_in_dnat_flow routine
  • fa91da7c northd: introduce build_lrouter_in_unsnat_flow routine
  • 949e4319 northd: introduce build_lrouter_lb_flows routine
  • 3ba84a11 northd: reduce indentation in build_lrouter_nat_defrag_and_lb
  • 80a9a8e8 binding: Fix potential NULL dereference of lbinding.
  • a8362ff8 northd: Fix the missing force_snat_for_lb flows when router_ip is configured.
  • 19f0876d northd-ddlog: Fix lb_force_snat_ip router option.
  • b7b0fbda NEWS: Move ovn-northd-ddlog item to proper section.
  • 0e77b3bc ovn-northd-ddlog: New implementation of ovn-northd based on ddlog.
  • 6cb66669 ovn-sb: Allow Multicast_Group to have empty set of ports.
  • e9b35fbc ovn-northd: Simplify logic in build_bfd_table().
  • 422ca572 tests: Use wait_row_count, fetch_column, wait_for_ports_up, …
  • b287a554 tests: Wait for updates in “check BFD config propagation to BFD” test.
  • 0ac7ab00 tests: Prepare for multiple northd types.
  • e77cf756 rExport VLOG_WARN and VLOG_ERR from libovn for use in ddlog
  • 110e6704 northd: Avoid matching on ct.dnat flags for load balancers.
  • e1f896fb lflow: Avoid matching on conntrack original tuple if possible.
  • ce0ef8d5 Properly handle hairpin traffic for VIPs with shared backends.
  • c6c61b4e ofctrl: Fix the assert seen when flood removing flows with conj actions.