)]}'
{"doc/source/specs/allowed_address_pairs.rst":[{"author":{"_account_id":7805,"name":"Li Ma","email":"skywalker.nick@gmail.com","username":"Nick"},"change_message_id":"49de5f25d2d490baef310596991230ae72a55db2","unresolved":false,"context_lines":[{"line_number":60,"context_line":"but that will cause extra bandwidth cost if there are only few VMs actually\r"},{"line_number":61,"context_line":"using the IP/MAC address in the allowed address pairs field of its port.\r"},{"line_number":62,"context_line":"\r"},{"line_number":63,"context_line":"A smarter way is sending those packets only to the ports of the VMs who\r"},{"line_number":64,"context_line":"actually using this IP/MAC. We can distinguish those VMs by receiving its\r"},{"line_number":65,"context_line":"gratuitous ARP packets of this IP/MAC from their ports, or by periodically\r"},{"line_number":66,"context_line":"sending ARP requests to the IP and receiving the corresponding ARP replies.\r"},{"line_number":67,"context_line":"Once those active VMs have been detected, local controllers should save this\r"},{"line_number":68,"context_line":"information in dragonflow DB and publish it. When L2/L3 APPs receive this\r"},{"line_number":69,"context_line":"notification, they could install flows to forwarding packets to the ports of\r"},{"line_number":70,"context_line":"those active VMs like they do for fixed IP/MAC.\r"},{"line_number":71,"context_line":"\r"},{"line_number":72,"context_line":"In particularly, if there is only one VM who could use the IP/MAC among VMs\r"},{"line_number":73,"context_line":"who have this IP/MAC in allowed address pairs field of their ports, the\r"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3aaa91ec_9cf02aff","line":70,"range":{"start_line":63,"start_character":0,"end_line":70,"end_character":47},"updated":"2016-06-29 14:55:32.000000000","message":"Due to some application level exceptions inside VM, the IP switches periodically among those VMs in the given address pair. Then the delay of flow installation will cause network disconnection. It is not allowed for end-users. Actually I think send packets to all VM ports is much more stable.\n\nIf you wanna implement it, I suggest to make it as an option in the configuration. By default, sending every packet to every port is suggested.","commit_id":"8982a589a918f5e0cdfdf0a5763a0cbf2242ef0a"},{"author":{"_account_id":21007,"name":"yuan wei","email":"wei.yuan@huawei.com","username":"yuanwei"},"change_message_id":"f786ec0d3936030b08da023af1504deb24bb512a","unresolved":false,"context_lines":[{"line_number":60,"context_line":"but that will cause extra bandwidth cost if there are only few VMs actually\r"},{"line_number":61,"context_line":"using the IP/MAC address in the allowed address pairs field of its port.\r"},{"line_number":62,"context_line":"\r"},{"line_number":63,"context_line":"A smarter way is sending those packets only to the ports of the VMs who\r"},{"line_number":64,"context_line":"actually using this IP/MAC. We can distinguish those VMs by receiving its\r"},{"line_number":65,"context_line":"gratuitous ARP packets of this IP/MAC from their ports, or by periodically\r"},{"line_number":66,"context_line":"sending ARP requests to the IP and receiving the corresponding ARP replies.\r"},{"line_number":67,"context_line":"Once those active VMs have been detected, local controllers should save this\r"},{"line_number":68,"context_line":"information in dragonflow DB and publish it. When L2/L3 APPs receive this\r"},{"line_number":69,"context_line":"notification, they could install flows to forwarding packets to the ports of\r"},{"line_number":70,"context_line":"those active VMs like they do for fixed IP/MAC.\r"},{"line_number":71,"context_line":"\r"},{"line_number":72,"context_line":"In particularly, if there is only one VM who could use the IP/MAC among VMs\r"},{"line_number":73,"context_line":"who have this IP/MAC in allowed address pairs field of their ports, the\r"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3aaa91ec_47fa51be","line":70,"range":{"start_line":63,"start_character":0,"end_line":70,"end_character":47},"in_reply_to":"3aaa91ec_9cf02aff","updated":"2016-06-30 02:55:51.000000000","message":"Send packets to all VM ports is more stable indeed, but we may also need to think about the cost. Actually, the delay of flow installation will be very short, and the dropped packets could be resent using retransmission mechanism like TCP retransmission, so it is hardly to cause disconnection. \nMaybe we could implement the detection way firstly and make it as the default way, and add an option to control the method in next step:)","commit_id":"8982a589a918f5e0cdfdf0a5763a0cbf2242ef0a"},{"author":{"_account_id":20297,"name":"duankebo","email":"duankebo@huawei.com","username":"duankebo"},"change_message_id":"87132895984773586575cc559399e5e7f5c273a3","unresolved":false,"context_lines":[{"line_number":47,"context_line":"Security Group\r"},{"line_number":48,"context_line":"----------------------\r"},{"line_number":49,"context_line":"The security group module transforms the remote group field in a rule to\r"},{"line_number":50,"context_line":"flows according IP addresses of VM ports associated with the remote group.\r"},{"line_number":51,"context_line":"To support allowed address pairs, those IP addresses should include both\r"},{"line_number":52,"context_line":"fixed IP address and the IP addresses in allowed address pairs.\r"},{"line_number":53,"context_line":"\r"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_bfee28ea","line":50,"range":{"start_line":50,"start_character":0,"end_line":50,"end_character":5},"updated":"2016-07-04 03:22:45.000000000","message":"what\u0027s the meaning of \"flows\"? openflow entries?","commit_id":"deebffb0ac9f85307c6c76644a5d784b0a0f5011"},{"author":{"_account_id":21007,"name":"yuan wei","email":"wei.yuan@huawei.com","username":"yuanwei"},"change_message_id":"cb5cd4601315ad1cf9833133d4ad2dd411238310","unresolved":false,"context_lines":[{"line_number":47,"context_line":"Security Group\r"},{"line_number":48,"context_line":"----------------------\r"},{"line_number":49,"context_line":"The security group module transforms the remote group field in a rule to\r"},{"line_number":50,"context_line":"flows according IP addresses of VM ports associated with the remote group.\r"},{"line_number":51,"context_line":"To support allowed address pairs, those IP addresses should include both\r"},{"line_number":52,"context_line":"fixed IP address and the IP addresses in allowed address pairs.\r"},{"line_number":53,"context_line":"\r"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_1fbc9c6b","line":50,"range":{"start_line":50,"start_character":0,"end_line":50,"end_character":5},"in_reply_to":"1aa78d24_bfee28ea","updated":"2016-07-04 03:43:23.000000000","message":"Yes, they are openflow entries accurately.","commit_id":"deebffb0ac9f85307c6c76644a5d784b0a0f5011"},{"author":{"_account_id":20297,"name":"duankebo","email":"duankebo@huawei.com","username":"duankebo"},"change_message_id":"87132895984773586575cc559399e5e7f5c273a3","unresolved":false,"context_lines":[{"line_number":58,"context_line":"simply send the packets of which destination address is this address to all\r"},{"line_number":59,"context_line":"VM ports which have this address in their allowed address pairs field,\r"},{"line_number":60,"context_line":"but that will cause extra bandwidth cost if there are only few VMs actually\r"},{"line_number":61,"context_line":"using the IP/MAC address in the allowed address pairs field of its port.\r"},{"line_number":62,"context_line":"\r"},{"line_number":63,"context_line":"A alternative way is sending those packets only to the ports of the VMs who\r"},{"line_number":64,"context_line":"actually using this IP/MAC. We can distinguish those VMs by receiving its\r"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_df76943d","line":61,"range":{"start_line":61,"start_character":0,"end_line":61,"end_character":5},"updated":"2016-07-04 03:22:45.000000000","message":"This can be a option. Though inefficient, it\u0027s simple.","commit_id":"deebffb0ac9f85307c6c76644a5d784b0a0f5011"},{"author":{"_account_id":21007,"name":"yuan wei","email":"wei.yuan@huawei.com","username":"yuanwei"},"change_message_id":"cb5cd4601315ad1cf9833133d4ad2dd411238310","unresolved":false,"context_lines":[{"line_number":58,"context_line":"simply send the packets of which destination address is this address to all\r"},{"line_number":59,"context_line":"VM ports which have this address in their allowed address pairs field,\r"},{"line_number":60,"context_line":"but that will cause extra bandwidth cost if there are only few VMs actually\r"},{"line_number":61,"context_line":"using the IP/MAC address in the allowed address pairs field of its port.\r"},{"line_number":62,"context_line":"\r"},{"line_number":63,"context_line":"A alternative way is sending those packets only to the ports of the VMs who\r"},{"line_number":64,"context_line":"actually using this IP/MAC. We can distinguish those VMs by receiving its\r"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1aa78d24_3fa4f855","line":61,"range":{"start_line":61,"start_character":0,"end_line":61,"end_character":5},"in_reply_to":"1aa78d24_df76943d","updated":"2016-07-04 03:43:23.000000000","message":"Yes, that is described below.","commit_id":"deebffb0ac9f85307c6c76644a5d784b0a0f5011"}]}