diff options
| author |   Scott Hutton <schutton@cisco.com> | 2024-09-03 16:16:25 -0700 |
|---|---|---|
| committer |   Matthew Smith <mgsmith@netgate.com> | 2024-09-05 15:06:06 +0000 |
| commit | 4779154a266626544eba2bfeac1e7ac1de7cb440 (patch) | |
| tree | 4e8ec30d87eec5d5e285d2e762cdbce72bb9767d | |
| parent | f508e07c14873c5829838a4e59f9425c27fa833f (diff) | |
flowprobe: run input nodes before inacl nodes
Type: fix
The flowprobe-input-ip4 node must be run ahead of ip4-inacl in some scenarios
to ensure that it sees flows on receiving interfaces.
The same is presumably the case for flowprobe-input-ip6, but this hasn't been
tested/observed.
JIRA: VPP-2122
Change-Id: Idf3b14dd2bd829f9aa3b1a71ccdcdf015ccdb36a
Signed-off-by: Scott Hutton <schutton@cisco.com>
| -rw-r--r-- | src/plugins/flowprobe/flowprobe.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/plugins/flowprobe/flowprobe.c b/src/plugins/flowprobe/flowprobe.c index 58a7cfe22f1..ee0a8eb8a31 100644 --- a/src/plugins/flowprobe/flowprobe.c +++ b/src/plugins/flowprobe/flowprobe.c @@ -48,7 +48,7 @@ uword flowprobe_walker_process (vlib_main_t * vm, vlib_node_runtime_t * rt, VNET_FEATURE_INIT (flowprobe_input_ip4_unicast, static) = { .arc_name = "ip4-unicast", .node_name = "flowprobe-input-ip4", - .runs_before = VNET_FEATURES ("ip4-lookup"), + .runs_before = VNET_FEATURES ("ip4-lookup", "ip4-inacl"), }; VNET_FEATURE_INIT (flowprobe_input_ip4_multicast, static) = { .arc_name = "ip4-multicast", @@ -58,7 +58,7 @@ VNET_FEATURE_INIT (flowprobe_input_ip4_multicast, static) = { VNET_FEATURE_INIT (flowprobe_input_ip6_unicast, static) = { .arc_name = "ip6-unicast", .node_name = "flowprobe-input-ip6", - .runs_before = VNET_FEATURES ("ip6-lookup"), + .runs_before = VNET_FEATURES ("ip6-lookup", "ip6-inacl"), }; VNET_FEATURE_INIT (flowprobe_input_ip6_multicast, static) = { .arc_name = "ip6-multicast", |