)]}'
{"neutron/agent/linux/openvswitch_firewall/firewall.py":[{"author":{"_account_id":8313,"name":"Lajos Katona","display_name":"lajoskatona","email":"katonalala@gmail.com","username":"elajkat","status":"Ericsson Software Technology"},"change_message_id":"48b5da391931fdd84bec7202f1c8a471e04b90a1","unresolved":false,"context_lines":[{"line_number":1089,"context_line":"            \"physical_network\": self._get_port_physical_network("},{"line_number":1090,"context_line":"                ovs_port.port_name)"},{"line_number":1091,"context_line":"        }"},{"line_number":1092,"context_line":"        self.install_accepted_egress_direct_flow("},{"line_number":1093,"context_line":"            ovs_port.vif_mac, vlan_tag, ovs_port.ofport,"},{"line_number":1094,"context_line":"            tunnel_direct_info\u003dtunnel_direct_info)"},{"line_number":1095,"context_line":""},{"line_number":1096,"context_line":"    def _remove_egress_no_port_security(self, port_id):"},{"line_number":1097,"context_line":"        try:"}],"source_content_type":"text/x-python","patch_set":1,"id":"3f86231c_ed707e96","line":1094,"range":{"start_line":1092,"start_character":8,"end_line":1094,"end_character":50},"updated":"2026-09-03 13:19:11.000000000","message":"as noted in the bug this path is not affected as no fw driver, so no AAP","commit_id":"0282285f2b87953c27727e6270fc3d5ed63a30c2"}],"neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py":[{"author":{"_account_id":8313,"name":"Lajos Katona","display_name":"lajoskatona","email":"katonalala@gmail.com","username":"elajkat","status":"Ericsson Software Technology"},"change_message_id":"48b5da391931fdd84bec7202f1c8a471e04b90a1","unresolved":true,"context_lines":[{"line_number":2404,"context_line":"            table\u003dovs_const.TRANSIENT_TABLE,"},{"line_number":2405,"context_line":"            priority\u003d9,"},{"line_number":2406,"context_line":"            in_port\u003dport.ofport,"},{"line_number":2407,"context_line":"            dl_src\u003dport_detail[\u0027mac_address\u0027],"},{"line_number":2408,"context_line":"            actions\u003d\u0027set_field:{:d}-\u003ereg6,\u0027"},{"line_number":2409,"context_line":"                    \u0027resubmit(,{:d})\u0027.format("},{"line_number":2410,"context_line":"                        lvm.vlan,"}],"source_content_type":"text/x-python","patch_set":1,"id":"86cf982b_9ce4e7d2","line":2407,"range":{"start_line":2407,"start_character":19,"end_line":2407,"end_character":30},"updated":"2026-09-03 13:19:11.000000000","message":"I am not sure if related, so more a question, isn\u0027t this code path affected by the bug you fix in neutron/agent/linux/openvswitch_firewall/firewall.py ?\nAs the method name is the same but the signature is different I am confused.","commit_id":"0282285f2b87953c27727e6270fc3d5ed63a30c2"},{"author":{"_account_id":39432,"name":"Daniel Secik","email":"dsecik@gmail.com"},"change_message_id":"34fb601a7e6d2116741a8f4d1b7f206aea0aa598","unresolved":true,"context_lines":[{"line_number":2404,"context_line":"            table\u003dovs_const.TRANSIENT_TABLE,"},{"line_number":2405,"context_line":"            priority\u003d9,"},{"line_number":2406,"context_line":"            in_port\u003dport.ofport,"},{"line_number":2407,"context_line":"            dl_src\u003dport_detail[\u0027mac_address\u0027],"},{"line_number":2408,"context_line":"            actions\u003d\u0027set_field:{:d}-\u003ereg6,\u0027"},{"line_number":2409,"context_line":"                    \u0027resubmit(,{:d})\u0027.format("},{"line_number":2410,"context_line":"                        lvm.vlan,"}],"source_content_type":"text/x-python","patch_set":1,"id":"b09b7256_d2763511","line":2407,"range":{"start_line":2407,"start_character":19,"end_line":2407,"end_character":30},"in_reply_to":"86cf982b_9ce4e7d2","updated":"2026-09-04 07:24:41.000000000","message":"Good catch, it is related. This is a sibling implementation of the same\negress-direct logic for the non-openflow-firewall case (gated by\ndirect_for_non_openflow_firewall: noop/iptables_hybrid +\nexplicitly_egress_direct). Independent code path, same name, different\nsignature. Only one of the two is ever active on a node.\n\nBy code reading it has the same omission. LOCAL_MAC_DIRECT gets dl_dst\nentries for fixed port MACs only, so unicast toward a co-hosted\nallowed-address-pair MAC falls through to the priority-10 output-to-patch\nflow in TRANSIENT_EGRESS_TABLE and is hairpin-dropped on the physical\nbridge, instead of reaching the NORMAL below it.\n\nI scoped this change to the openvswitch-firewall path because that\u0027s what\nwe run and could verify end-to-end. Happy to extend this\nchange analogously (install + the delete caller in the removal path), but\nnote we don\u0027t have an environment to test the noop/iptables_hybrid path\nproperly.","commit_id":"0282285f2b87953c27727e6270fc3d5ed63a30c2"},{"author":{"_account_id":8313,"name":"Lajos Katona","display_name":"lajoskatona","email":"katonalala@gmail.com","username":"elajkat","status":"Ericsson Software Technology"},"change_message_id":"9edc0cf019d5cbc49dd21eb1f120d51dc77b4bd4","unresolved":false,"context_lines":[{"line_number":2404,"context_line":"            table\u003dovs_const.TRANSIENT_TABLE,"},{"line_number":2405,"context_line":"            priority\u003d9,"},{"line_number":2406,"context_line":"            in_port\u003dport.ofport,"},{"line_number":2407,"context_line":"            dl_src\u003dport_detail[\u0027mac_address\u0027],"},{"line_number":2408,"context_line":"            actions\u003d\u0027set_field:{:d}-\u003ereg6,\u0027"},{"line_number":2409,"context_line":"                    \u0027resubmit(,{:d})\u0027.format("},{"line_number":2410,"context_line":"                        lvm.vlan,"}],"source_content_type":"text/x-python","patch_set":1,"id":"9dce8230_77fe8690","line":2407,"range":{"start_line":2407,"start_character":19,"end_line":2407,"end_character":30},"in_reply_to":"b09b7256_d2763511","updated":"2026-09-14 07:53:36.000000000","message":"Hi, thanks for checking, and sorry for late answer, I was mostly OoO the last week. I am fine if we push forward this change as it is really fixing the ovs driver, and as a follow-up even myself can push the fix for the hybrid path if you have no time for it","commit_id":"0282285f2b87953c27727e6270fc3d5ed63a30c2"}]}