a38b5df5cd
The previous hash type was 'ip' and this caused a major issue with the allowed address pairs extension since it results in CIDRs being passed to ipset. When the hash type is 'ip', a CIDR is completely enumerated into all of its addresses so 10.100.0.0/16 results in ~65k entries. This meant a single allowed_address_pairs entry could easily exhaust an entire set. This patch changes the hash type to 'net', which is designed to handle a CIDRs as a single entry. This patch also changes the names of the ipsets because creating an ipset with different parameters will cause an error and our ipset manager code isn't robust enough to handle that at this time. There is another ongoing patch to fix that but it won't be ready in time.[1] The related bug was closed by increasing the set limit, which did alleviate the problem. However, this change would also address the issue because the gate tests run an allowed address pairs extension test with the CIDR mentioned above. 1. I59e2e1c090cb95ee1bd14dbb53b6ff2c5e2713fd Related-Bug: #1439817 Closes-Bug: #1444397 Change-Id: I8177699b157cd3eac46e2f481f47b5d966c49b07 |
||
|---|---|---|
| .. | ||
| common | ||
| dhcp | ||
| l3 | ||
| linux | ||
| metadata | ||
| ovsdb | ||
| windows | ||
| __init__.py | ||
| dhcp_agent.py | ||
| firewall.py | ||
| l2population_rpc.py | ||
| l3_agent.py | ||
| metadata_agent.py | ||
| rpc.py | ||
| securitygroups_rpc.py | ||