flowprobe: run input nodes before inacl nodes 26/41526/3
authorScott Hutton <[email protected]>
Tue, 3 Sep 2024 23:16:25 +0000 (16:16 -0700)
committerMatthew Smith <[email protected]>
Thu, 5 Sep 2024 15:06:06 +0000 (15:06 +0000)
Type: fix

The flowprobe-input-ip4 node must be run ahead of ip4-inacl in some scenarios
to ensure that it sees flows on receiving interfaces.

The same is presumably the case for flowprobe-input-ip6, but this hasn't been
tested/observed.

JIRA: VPP-2122

Change-Id: Idf3b14dd2bd829f9aa3b1a71ccdcdf015ccdb36a
Signed-off-by: Scott Hutton <[email protected]>
src/plugins/flowprobe/flowprobe.c

index 58a7cfe..ee0a8eb 100644 (file)
@@ -48,7 +48,7 @@ uword flowprobe_walker_process (vlib_main_t * vm, vlib_node_runtime_t * rt,
 VNET_FEATURE_INIT (flowprobe_input_ip4_unicast, static) = {
   .arc_name = "ip4-unicast",
   .node_name = "flowprobe-input-ip4",
-  .runs_before = VNET_FEATURES ("ip4-lookup"),
+  .runs_before = VNET_FEATURES ("ip4-lookup", "ip4-inacl"),
 };
 VNET_FEATURE_INIT (flowprobe_input_ip4_multicast, static) = {
   .arc_name = "ip4-multicast",
@@ -58,7 +58,7 @@ VNET_FEATURE_INIT (flowprobe_input_ip4_multicast, static) = {
 VNET_FEATURE_INIT (flowprobe_input_ip6_unicast, static) = {
   .arc_name = "ip6-unicast",
   .node_name = "flowprobe-input-ip6",
-  .runs_before = VNET_FEATURES ("ip6-lookup"),
+  .runs_before = VNET_FEATURES ("ip6-lookup", "ip6-inacl"),
 };
 VNET_FEATURE_INIT (flowprobe_input_ip6_multicast, static) = {
   .arc_name = "ip6-multicast",