Changelog v24.09.0

Changes from 24.03.0 to v24.09.0

  • f04e4455 Set release date for 24.09.0.
  • 7be7d8df tests: Fix flaky BFD system test.
  • 88e80a3b tests: Fix flaky ACL Sampling system tests.
  • 2e6cdfdf tests: Fix multiple ovn-ic race conditions.
  • 1a69a5d4 tests: Fix flaky “load-balancer template IPv4”.
  • ecdc7bb7 tests: Fix flaky “Sampling_App incremental processing”.
  • afed92ce tests: Fix flaky “MAC binding aging”.
  • 2f14de89 ovs: Move the submodule to the official v3.4.0 release.
  • 76bd54eb controller: Do not remove snat-ct-zone requested by the CMS.
  • 360f669b news: Fix indentation for an entry.
  • 8efac26f pinctrl: Explicitly set ICMPv6 code for packet too big.
  • dc5b666d tests: Prevent netcat from forking.
  • ea24d593 Documentation: Add inclusive-language documentation.
  • cb8e5433 Revert “northd: Introduce ECMP_Nexthop table in SB db.”.
  • 7b937370 Revert “northd: Add nexhop id in ct_label.label.”.
  • 42148ffe Revert “ofctrl: Introduce ecmp_nexthop_monitor.”.
  • fc8a0154 northd: Make bfd_connections static in build_parsed_routes.
  • f29fc462 northd: Get rid of bfd_connections in bfd_sync_data.
  • 8b08b23d northd: Optimize lookup in bfd_is_port_running.
  • 8f085f0b northd: Introduce bfd_sync_data data structure.
  • 97fc54f1 northd: Fix potential crash when creating chassisredirect port.
  • 34fa3c1d tests: Skip “IPv6 switching - megaflow check” if scapy is not installed.
  • 30a502e9 Reply only for the multicast ND solicitations.
  • 0fbe412a multinode: Fix test “ovn multinode NAT …”.
  • 155637d9 multinode: Increase maximum execution time.
  • 158597a1 northd: Routing protocol port redirection.
  • 11d92550 northd: Clean up SB MAC bindings for deleted ports.
  • 4ded211f controller: Make sure the meter and group tables are initialized.
  • 07d51ea3 github: containers: Fix job condition.
  • 6c74ef66 Prepare for 24.09.0.
  • e717b18b test: Fix flaky I-P test.
  • b9732aef github: Fix running multi-node tests on forks.
  • 2e5a69d1 github: Don’t run scheduled workflows on forks.
  • 1e95bed6 tests: Add system tests for MAC_Binding.
  • 090ca4ec ofctrl: Introduce ecmp_nexthop_monitor.
  • 0158825b northd: Add nexhop id in ct_label.label.
  • aeae2133 northd: Introduce ECMP_Nexthop table in SB db.
  • 436a011a Text representations for drop sampling.
  • 03862b95 ci: ovn-kubernetes: Move to stable release-1.0 branch.
  • 5513fa68 features: Fix wrong logic for feature set discovered.
  • 43c34f2e logical-fields: Add missing multicast matches for MLD and IGMP.
  • 15c9c9f4 northd: Add bfd, static_routes, route_policies and bfd_sync nodes to I-P engine.
  • 23e24e95 northd: Add change handler for FDB updates.
  • 6559b442 ovn-controller: Support ovn-encap-ip-default option.
  • d52e928e tests: Fix typo in read-only sb ssl-ciphers test.
  • 39eb73d9 tests: Remove almost duplicate macros.
  • fe8c8ac6 tests: Cleanup more on_exit commands.
  • d498a91a controller-vtep: Add –help and –version to docs.
  • 539f7676 northd: Allow flow simplification for ACL sampling.
  • bcdd3fad actions: Add support for sample with register.
  • 71752140 features: Add detection for sample with registers.
  • bc94def2 features: Make querying of OpenFlow features more versatile.
  • d15b12da northd: Add ACL Sampling.
  • d4930e6e northd: Override NB_Global drop sampling id with Sampling_App config.
  • 564f05c4 northd: Add Sampling_App table.
  • a0beaab8 northd: Commit from-lport ACL label (and state) when LBs are used.
  • dddd7070 northd: Fix up logical flow documentation for QoS.
  • 603f38da controller: Remove OvS iface type check in I-P processing.
  • 8d13579b Add support for centralize routing for distributed gw ports.
  • ffcc7acb actions: Explicitly finish CT actions.
  • 6234e092 controller: Add lsp option disable_garp_rarp.
  • ccc72067 northd: Fix pmtud related issues.
  • 9c0c9e13 tests: Compare IP and recompute related ports.
  • d51bd7df binding: Cleanup related ports on port type change.
  • 0e3d1aa9 binding: Cleanup related_lports for container ports.
  • 53290c1e binding: Cleanup related_lports for deleted ports.
  • 2ede282c tests: Add macros for checking related ports.
  • 3aa155d2 controller: Add debug/dump-related-ports unixctl.
  • 9c3ae6f2 northd: Add ECMP symmetric replies for egress.
  • d9122dec containers: Cap sphinx at 7 to unblock CI.
  • 4d81f1fd controller, northd: Add support for CT zone limits.
  • 493ef704 controller: Prepare structure around CT zone limiting.
  • 601b3c65 ci: Bump the Cirrus CI Ubuntu image.
  • f2363f49 controller: Add the capability to specify a min/max value for ct_zone.
  • ee45e120 tests: Fix wrong IPv6 notation.
  • 4ed71c20 ovs: Bump submodule to branch-3.4.
  • 87a29064 provider networks: Provide the option to tunnel traffic.
  • 07b6c97b ovn-northd.at: Fix flaky VXLAN mode disabling test.
  • dc5a39dd tests: Fix unreliable “ACL and committing to conntrack” system test.
  • 078b8486 northd: Assume all chassis support the “ovn-ct-lb-related” feature.
  • f1f5c34f northd: Assume all chassis support the “ct-no-masked-label” feature.
  • 83cf9cc9 northd: Assume all chassis support the “port-up-notif” feature.
  • b64c5643 northd: Fix issues for Forwarding_Group.
  • eeadd418 Documentation: Update language about soft freeze requirements.
  • 9a43e297 ci: Use compressed format for podman save.
  • bcc650a2 tests: Fix ssl-ciphers RO sb test with old openssl.
  • 94aad069 AUTHORS: Added MJ Ponsonby to the list.
  • ee2fa620 nbctl: Added local link ipv6 to nbctl show.
  • b0296698 Maintainers: Fix the typo in the email id.
  • e6f4bb9a controller: Further encapsulate the CT zone handling.
  • 411a9858 controller: Move CT zone handling into separate module.
  • 866b81f6 treewide: Prevent potential NULL ptr deref.
  • 908a7e73 ovn-nbctl: Avoid uninitialized value for mirror index.
  • 0a80f9dd northd: Fix potential overflow
  • 6ed42ee0 treewide: Remove dead code.
  • 5398c042 ovn-ctl: Fix incorrect use of == operator.
  • e3bc7183 tests: Skip memory error triggered on ARM in DPDK tests.
  • 841fbdc7 ci: Save some DPDK compilation time.
  • f1b925bc AUTHORS: Add Naveen Yerramneni.
  • 1a16aae4 AUTHORS: Add Vasyl Saienko.
  • 02d143f8 controller: Add random delay during fdb learning.
  • 7e99500e northd: Add support for disabling vxlan mode.
  • 1b4b319b northd: Make vxlan_mode a global variable.
  • e80e9e7d utilties: Allow ovn-detrace to run on ovs-ofctl dump-flows output.
  • c48ed173 Do not reply on unicast arps for IPv4 targets.
  • 2dad0f45 ci: Move DPDK build into container.
  • cc1d63de ci: Move common build steps into script.
  • 03fb88ce tests: ic: Add IP multicast test that simulates the ovn-k8s use case.
  • d904c0e4 Revert “northd: Don’t skip transit switch LSP when creating mcast groups.”
  • 05187a0a Revert “ovn-ic: Avoid igmp/mld traffic flooding.”
  • c5a83ab7 Revert “IC: Tansit switch don’t flood mcast traffic to router ports if matches igmp group.”
  • d3450994 controller: Send RARP/GARP for VIF post link state is up.
  • 2b6f5921 NEWS: Add an item about conditional NAT.
  • f8cc2891 northd: Use the NAT match column.
  • c7b5a206 nb: Add support for match and priority in NAT.
  • 1e4627ce nothd: Unify the priority calculation for NAT flows.
  • a0a5dd8c controller: Store src_mac, src_ip in svc_monitor struct.
  • 4e3115f6 tests: Fix flaky “ovn-controller - restart …”.
  • 4ea3a1ea tests: Fixed flaky “ovn-ic – AZ register”.
  • d88e4962 tests: Fixed multiple flaky tests.
  • 3a582973 tests: Fixed flaky “NB_Global and SB_Global I+P”.
  • 9dc7fcb2 tests: Fixed flaky “Logical router IP for NAT”.
  • 524a399f tests: Fixed “lflow cache operations”.
  • c0ef7688 tests: Cleanup on_exit commands.
  • e5d187b2 controller: Handle postponed ports release.
  • d4c566de controller: Handle postponed ports claims.
  • 8c9cf2af controller: Fix deletion of container parent port.
  • a680c964 controller: Nonvif related lports handling.
  • 42353552 controller: Fix iface-id-ver handling.
  • 7b439596 controller: Fix issue with ct_commit encode.
  • cc4187b4 northd: Skip arp-proxy flows if the lsp is a router port.
  • 6510ee45 northd: Refactor chassisresident port checking.
  • 373c458e northd: Don’t reparse lport’s addresses while adding L2_LKUP flows.
  • 70f35e1a ovn-nbctl: Show bfd option man for lr-policy-add command.
  • d1638b9b tests: Fix flaky PMTUD flows test.
  • c0cf18a8 ovn-controller: Initialize bitmap to zero.
  • 4376b4d4 Inclusive language substitutions: “sanity-check”.
  • 6d32d252 Inclusive language substitutions: “blacklist/whitelist”.
  • 072ca534 Inclusive language substitutions: “master”.
  • 3694b3ab Inclusive language substitutions: “abort”.
  • 3b7da5ac controller: Allow br-int connection via other methods.
  • 853705cb lflow: Add missing sample flow.
  • 7e2b45df northd: Fix the match not being cleared inside the loop.
  • 3faadc76 northd: Fix pmtud for non routed traffic.
  • 7abae814 northd: Fix an issue wrt mac binding aging.
  • 47915c4c ci: Bump the Fedora container to 40.
  • 3bd668c4 ci: Make sure that we are using proper image.
  • bc9df4a2 ci: Add missing packages to run Fedora image in GH CI.
  • e8c30eec tests: Replace wget with curl for failing commands.
  • 29652bad ci: Update the Ubuntu container to 24.04.
  • 27678f4d ovs: Bump the submodule to the tip of branch-3.3.
  • a02ac71f ci: Pin Fedora version for the build-rpm job.
  • e5d093cc controller: Avoid use after free in LB I-P.
  • b0609e60 docs: List supported rolling upgrade paths.
  • ab593df5 docs: Explain nature of ovs dependency.
  • 12412b13 ovn-ctl: Support for –config-file ovsdb-server option.
  • 7f1218a5 northd, ic: Fix handling of ovn-appctl resume.
  • f56ad417 northd: Add lsp option force_fdb_lookup.
  • 2609cd9f controller: Fix an issue wrt cleanup of stale patch port.
  • b994d1d3 docs: Typo. Remove duplicated “to”.
  • e3368cba Documentation: Change link from ovs to ovn in “Submitted-at” example.
  • 4f614b4b controller: Use datapath key for the mac cache thresholds.
  • fb96ae36 controller: Merge the mac-cache and mac-learn.
  • 4a808571 controller: Rename mac_cache to to mac-cache.
  • ddf051cb northd, controller: Handle tunnel_key change consistently.
  • d06e4974 northd: Fix the comment about route priorities.
  • cce476ce controller: Track individual address set constants.
  • 1f7df5d8 northd: Remove unused nbrp arg in ls_port_reinit.
  • 7fbd2b3e northd: Remove unused sb arg in ls_port_create.
  • 77ed4be6 northd: Don’t create pb in ls_port_init too early.
  • 50dee224 tests: Correct tunnel ids exhaustion scenario.
  • db4ea9d9 northd: Don’t detach op->list when it wasn’t used.
  • 86bf0826 northd: Don’t cleanup op in ovn_port_allocate_key.
  • 8f18b3b6 ci: Keep the container version pinned.
  • 0a644bed ci: Fix OPTS not being passed to OSX builds.
  • dfb167b2 Add dh-python to debian/control.
  • dce4abfc northd, tests: DHCP Relay Agent support for overlay IPv4 subnets.
  • 683a3a36 controller: DHCP Relay Agent support for overlay IPv4 subnets.
  • f51e4109 actions: DHCP Relay Agent support for overlay IPv4 subnets.
  • 9e011988 docs: Typo. Remove duplicated “to” in ovn-sb.xml.
  • adc390b6 tests: Fix netcat 7.94 issues.
  • 2dbe6565 northd: Do not incrementally proccess changes for disabled LR.
  • 40136a2f northd: Fix direct access to SNAT network.
  • d9c97878 actions: New action ct_commit_to_zone.
  • ca8fde01 controller: Remove the ovn-set-local-ip option.
  • 9e8f6f3d ovn-nbctl: Document “–portrange” in the manpage.
  • 1135d3dd utilities: Add missing bfd option in ovn-nbctl manpage.
  • c141d8b1 northd, controller: Use paused controller action for packet buffering.
  • 42ef6e37 ovs: Bump the submodule to the tip of branch-3.3.
  • 1c965671 ci: Make sure that multinode test runs on correct branch.
  • 1d0df1c8 AUTHORS: Add Kacper Kamiński.
  • 444f7439 Fix typo in README.
  • 8c36a105 tests: Ignore log setting extended ack support failed.
  • 73bbf6b9 ovn-trace: Make sure we don’t exit when the port is not specified.
  • 0d4e087a treewide: Remove remaining XenServer references.
  • 990d369f northd: Fix BFD for policy routing.
  • 924d0ff0 Start mcast id allocations from OVN_MIN_IP_MULTICAST.
  • add441fa actions: Remove ct_commit_v1.
  • 69ec36eb tests: Add macro for checking flows after recompute.
  • c6fa5a5e treewide: Rename references from OvS master to main.
  • 87d0c9e7 ovn-ctl: Use the current user for default file permissions.
  • 762ae66c controller: Change dns resolution to async.
  • de76bed4 Missed during test simplification.
  • 5dd57375 Merge QoS logical pipelines.
  • a0851878 acl-log: Properly log the “pass” verdict.
  • e2677951 automake: Make system tests dependent of ovn-macro.
  • b8ba1948 ovn-controller.at: Fix flaky test “ofctrl wait before clearing flows”.
  • a1f165a7 northd: fix infinite loop in ovn_allocate_tnlid()
  • 99ee066c pinctrl: Fixed 100% cpu on ovs connection loss.
  • 2fd02e60 pinctrl: Fix missing MAC_Bindings.
  • 8d46e542 tests: Add macros to pause controller updates.
  • bbf2f941 ofctrl: Wait at S_WAIT_BEFORE_CLEAR only once.
  • 8bad19ce Update post OVS-OVN split TODO list.
  • d191257c tests: Add multinode-testsuite to .gitinore.
  • 77a24fc1 utilities/docker: Fix up container build.
  • ecf25243 Documentation: Remove references to TravisCI.
  • c794d345 treewide: Remove some of the post OVS-OVN split leftovers.
  • f1f7ac1e rhel: Update docs.
  • 6b656e5a ovn-sandbox: Rename script from ovs-sandbox to ovn-sandbox.
  • e8509e3f Documentation: Fix reference to the default branch.
  • d042067d northd: Fix population of ipv6_ra_prefixes from IPv6 PD.
  • a0ac4d1f controller: Use multicast for IPv6 Prefix Delegation.
  • 4494e021 ovn-ic: Avoid igmp/mld traffic flooding.
  • f0a5610a tests: Use sync command in ovn-ic tests.
  • fe0eba14 tests: Move ovn interconnection tests to ovn-ic.at.
  • c9163c30 IC: Tansit switch don’t flood mcast traffic to router ports if matches igmp group.
  • 85ca2b75 northd: Don’t skip transit switch LSP when creating mcast groups.
  • e6bce5f8 northd: Fix NAT configuration with –add-route option for gw-router.
  • dc52bf70 controller: Fix ofctrl memory usage underflow.
  • cb5d5bb3 docs: Remove ref. to “ovn-sbctl –no-wait”.
  • 0695b3db Fix broken link for LTS release.
  • db00352b ovn-controller: Fix busy loop when ofctrl is disconnected.
  • 0a358240 tests: Address netcat 7.94 changes.
  • e8ac1810 tests: Add helper for tcpdump.
  • 0e742e87 tests: Ignore transaction errors in MAC Binding.
  • f614335a tests: Remove table numbers from “action parsing”.
  • 1d2add58 tests: Make “action parsing” support expansion.
  • 18074996 tests: Use the ovn-debug binary to determine table numbers.
  • 117573e2 utilities: Add ovn-debug binary tool.
  • 8840c6c0 checkpatch: Add rule to check for hardcoded table numbers.
  • 348a2967 tests: Remove hardcoded numbers from comments.
  • fca9297b utilities: Make database connection optional for ovn-detrace.
  • 6fcf8981 ovn-ctl: Add ssl-ciphers and protocols support.
  • 82d8ea6c Update copyright year to 2024.
  • 3bc6e55a ovn-controller: Stop dropping bind_vport requests immediately after handling.
  • 8ed2e332 OVN-SB: Exposes igmp group protocol version through IGMP table.
  • 309b0fbe tests: Fix flaky “lr multiple gw ports” test.
  • 475c96ac pinctrl: Fix prefix delegation.
  • 4725ad12 controller: Avoid double controller action for ICMP errors.
  • 894ffe8a controller: Release container lport when releasing parent port.
  • 118625df ovn-nb: Add documentation for disable_arp_nd_rsp option
  • 63b35e2f github: Reduce ASLR entropy to be compatible with asan in llvm 14.
  • db0c5568 controller: Set check_tnl_key for BFD on tunnel ifaces.
  • a55eb4a1 northd: Fix NULL pointer deref within build_bfd_table.
  • dbca38fc tests: Skip EDNS test if the scapy version doesn’t support it.
  • ffe26731 northd: Don’t skip the unSNAT stage for traffic towards VIPs.
  • b92ad9e0 Set release date for 24.03.0.
  • f0f31fdc encaps: Support backward compatibility for tunnel chassis id change.
  • ef2cd583 northd: Don’t create fair Sb meters for ACLs with logging disabled.
  • cbf4fc86 ci: Update crun in GitHub actions runner.
  • 308965d8 controller: ofctrl: Use index for meter lookups.
  • 68acb363 physical: Don’t reset encap ID across pipelines.
  • 65f9f010 tests: Check unit tests logs for errors.
  • 77284ef7 tests: Speed up “multicast group buffer split”.
  • 9abca5d5 tests: Fix “router port type update and then …”.
  • ec0c026d tests: Fix “Load balancer incremental processing”.
  • cc26db6e tests: Fix “ovn-controller - Chassis other_config”.
  • b66ac5f4 tests: Fix “ofctrl wait before clearing flows”.
  • 77d18e85 tests: Fix flaky “ovn-controller-vtep - binding 1”.
  • f3a035d9 tests: Fix flaky “options:requested-chassis …”.
  • ca2177b7 tests: Fix typos in tests.
  • 98f04bd3 tests: Have tests fail when adding veth peer fails.
  • 72fac9b5 Add “disable_arp_nd_rsp” option to LSP.
  • 6230d740 Add “pkt_clone_type” option to LSP.
  • 891cf584 ci: Update crun in Cirrus CI cloud image.
  • 4f27496a northd: Initialize hmap size in lflow_mgr.
  • 0e0f38f1 northd: lflow-mgr: Allocate DP reference counters on a second use.
  • 3166f87b northd: Fix lflow ref node’s reference counting.
  • 05cb18a3 northd: Don’t add ARP request responder flows for NAT multiple times.
  • ada1508c northd: Don’t add lr_out_delivery default drop flow for each lrp.
  • cac42071 mailmap: Update Roberto Bartzen Acosta’s email.
  • b7fe2c8b pinctrl: dns: Ignore additional records.
  • 78750699 ovn-ic: Fix global blacklist filter for IPv6 addresses.
  • f5c3ffbd tests: Fix macro OVN_CHECK_PACKETS_CONTAIN.
  • 8a913e32 features.c: Always wait on the rconn.
  • 6315913e ci: Bump CirrusCI Ubuntu image version
  • b5616ab9 AUTHORS: Add Nobuhiro MIKI.
  • dbfc7176 Documentation: Fix broken links in ovn-sandbox.rst.
  • 4804d710 ovn-sb.xml: Remove IPv4-only restriction from Service Monitors.
  • 791affae github: Update versions of action dependencies (Node.js 20).
  • 62d71aab northd: Remove the protocol match from ECMP symmetric reply flows.
  • 43f741c2 northd: Explicitly handle SNAT for ICMP need frag.
  • b252f455 actions: Adjust the ct_commit_nat action.
  • 2ae8f6c6 ic/tests: Add unit test for ic sync command.
  • 52e74531 OVN-IC: Make it possible for CMS to detect when the ISB is up-to-date.
  • 0b62d9d2 ovn-ic: Implement basic INB change handling status.
  • 3860d3f1 OVN-IC: Interconnect DBs add basic Information Flow columns.
  • 0c0bc64a tests: Add macro for OFTABLE_MAC_CACHE_USE table number.
  • bbc4e8e6 tests: Add macro for OFTABLE_CHK_LB_AFFINITY table number.
  • b1dffe06 tests: Add macro for OFTABLE_ECMP_NH table number.
  • c8b9f09e tests: Add macro for OFTABLE_ECMP_NH_MAC table number.
  • b36f23f5 tests: Add macro for OFTABLE_CHK_OUT_PORT_SEC table number.
  • 7e686a44 tests: Add macro for OFTABLE_CHK_IN_PORT_SEC_ND table number.
  • 59ac9e7b tests: Add macro for OFTABLE_CHK_IN_PORT_SEC table number.
  • d3ebee4a tests: Add macro for OFTABLE_LOOKUP_FDB table number.
  • 59429de8 tests: Add macro for OFTABLE_GET_FDB table number.
  • 3961b492 tests: Add macro for OFTABLE_CT_SNAT_HAIRPIN table number.
  • b4fcbb0e tests: Add macro for OFTABLE_CHK_LB_HAIRPIN_REPLY table number.
  • 38a01501 tests: Add macro for OFTABLE_CHK_LB_HAIRPIN table number.
  • 4abe3333 tests: Add macro for OFTABLE_MAC_LOOKUP table number.
  • d9d450b1 tests: Add macro for OFTABLE_MAC_BINDING table number.
  • 1f96c05b tests: Add macro for OFTABLE_LOG_TO_PHY table number.
  • f33891b7 tests: Add macro for OFTABLE_LOCAL_OUTPUT table number.
  • 1cf42638 tests: Add macro for OFTABLE_REMOTE_OUTPUT table number.
  • bb0d99f6 tests: Add macro for OFTABLE_OUTPUT_LARGE_PKT_PROCESS table number.
  • 93926feb tests: Add macro for OFTABLE_OUTPUT_LARGE_PKT_DETECT table number.
  • 6896da33 tests: Add macro for OFTABLE_LOG_INGRESS_PIPELINE table number.
  • 917da75c tests: Add macro for OFTABLE_PHY_TO_LOG table number.
  • 85f24483 tests: Use ovn_strip_lflows for the rest of lflows.
  • 081ff0b2 tests: Use ovn_strip_lflows for cases without sort.
  • 64197e36 tests: Use ovn_strip_lflows for cases with sort before sed.
  • d6d7813a tests: Use ovn_strip_lflows instead of single ? for the replace.
  • 6ee97092 tests: Add macro to strip table numbers from lflows.
  • aed60eea northd: Add I-P for NB_Global and SB_Global.
  • 6f24a484 northd: Add northd change handler for sync_to_sb_lb node.
  • d817b5ca northd: Add a noop handler for northd SB mac binding.
  • 00cda5a4 northd: Add ls_stateful handler for lflow engine node.
  • e5ae7a9f northd: Add lr_stateful handler for lflow engine node.
  • 1a7df26e northd: Handle lb changes in lflow engine.
  • a14a58f3 northd: Move ovn_lb_datapaths from lib to northd module.
  • 9bcf6f12 northd: Use lflow_ref when adding all logical flows.
  • a6236060 northd: Refactor lflow management into a separate module.
  • 81ef7724 northd: Add a new node ’ls_stateful'.
  • 6547f9f1 northd: Generate router’s stateful flows using lr_stateful data.
  • f7c97c4b northd: Add a new engine ’lr_stateful’ to manage lr’s stateful data.
  • de429564 northd: Add a new engine ’lr_nat’ to manage lr NAT data.