Skip to content

Instantly share code, notes, and snippets.

/gistify958179.txt Secret

Created May 28, 2016 01:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save anonymous/13006b63e4f2eaa8ae90f82213aac74b to your computer and use it in GitHub Desktop.
Save anonymous/13006b63e4f2eaa8ae90f82213aac74b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistify958179.txt
vagrant@devstack-control:~/devstack$ sudo ovn-sbctl lflow-list
Datapath: 0aa0b872-1e30-4f6f-820e-074df26ca1fc Pipeline: ingress
table=0(ls_in_port_sec_l2), priority= 100, match=(eth.src[40]), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 100, match=(vlan.present), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "145889e2-9869-40f3-b719-bfa5dc2a7f6d"), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && eth.src == {fa:16:3e:01:bb:84}), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && eth.src == {fa:16:3e:8c:35:40}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 90, match=(inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && eth.src == fa:16:3e:01:bb:84 && ip4.src == {0.0.0.0, 1.0.0.3}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 90, match=(inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && eth.src == fa:16:3e:8c:35:40 && ip4.src == {0.0.0.0, 1.0.0.2}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 80, match=(inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && eth.src == fa:16:3e:01:bb:84 && ip), action=(drop;)
table=1(ls_in_port_sec_ip), priority= 80, match=(inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && eth.src == fa:16:3e:8c:35:40 && ip), action=(drop;)
table=1(ls_in_port_sec_ip), priority= 0, match=(1), action=(next;)
table=2(ls_in_port_sec_nd), priority= 90, match=(inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && eth.src == fa:16:3e:01:bb:84 && arp.sha == fa:16:3e:01:bb:84 && (arp.spa == 1.0.0.3 )), action=(next;)
table=2(ls_in_port_sec_nd), priority= 90, match=(inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && eth.src == fa:16:3e:8c:35:40 && arp.sha == fa:16:3e:8c:35:40 && (arp.spa == 1.0.0.2 )), action=(next;)
table=2(ls_in_port_sec_nd), priority= 80, match=(inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && (arp || nd)), action=(drop;)
table=2(ls_in_port_sec_nd), priority= 80, match=(inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && (arp || nd)), action=(drop;)
table=2(ls_in_port_sec_nd), priority= 0, match=(1), action=(next;)
table=3( ls_in_pre_acl), priority= 110, match=(ip && inport == "41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"), action=(next;)
table=3( ls_in_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=3( ls_in_pre_acl), priority= 0, match=(1), action=(next;)
table=4( ls_in_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.inv), action=(drop;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip4)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip6)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip4)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip6)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip4 && (ip4.dst == 255.255.255.255 || ip4.dst == 1.0.0.0/24) && udp && udp.src == 68 && udp.dst == 67), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip4 && (ip4.dst == 255.255.255.255 || ip4.dst == 1.0.0.0/24) && udp && udp.src == 68 && udp.dst == 67), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2001, match=(inport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip), action=(drop;)
table=4( ls_in_acl), priority= 2001, match=(inport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip), action=(drop;)
table=4( ls_in_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 0, match=(1), action=(next;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 1.0.0.1 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:15:a8:12; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:15:a8:12; arp.tpa = arp.spa; arp.spa = 1.0.0.1; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 1.0.0.2 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:8c:35:40; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:8c:35:40; arp.tpa = arp.spa; arp.spa = 1.0.0.2; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 1.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:5f:31:77; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:5f:31:77; arp.tpa = arp.spa; arp.spa = 1.0.0.254; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 1.0.0.3 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:01:bb:84; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:01:bb:84; arp.tpa = arp.spa; arp.spa = 1.0.0.3; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 0, match=(1), action=(next;)
table=6( ls_in_l2_lkup), priority= 100, match=(eth.mcast), action=(outport = "_MC_flood"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:01:bb:84), action=(outport = "a4181a4d-9315-40dd-a1c1-f1e645b9abf3"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:15:a8:12), action=(outport = "145889e2-9869-40f3-b719-bfa5dc2a7f6d"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:5f:31:77), action=(outport = "41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:8c:35:40), action=(outport = "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77"; output;)
Datapath: 0aa0b872-1e30-4f6f-820e-074df26ca1fc Pipeline: egress
table=0( ls_out_pre_acl), priority= 110, match=(ip && outport == "41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"), action=(next;)
table=0( ls_out_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=0( ls_out_pre_acl), priority= 0, match=(1), action=(next;)
table=1( ls_out_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.inv), action=(drop;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip4 && ip4.src == 0.0.0.0/0 && icmp4)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip4 && ip4.src == 0.0.0.0/0 && tcp && tcp.dst >= 1 && tcp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip4 && ip4.src == 0.0.0.0/0 && udp && udp.dst >= 1 && udp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip4 && ip4.src == 0.0.0.0/0 && icmp4)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip4 && ip4.src == 0.0.0.0/0 && tcp && tcp.dst >= 1 && tcp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip4 && ip4.src == 0.0.0.0/0 && udp && udp.dst >= 1 && udp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(outport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip4 && ip4.src == 1.0.0.0/24 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(outport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip4 && ip4.src == 1.0.0.0/24 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2001, match=(outport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && ip), action=(drop;)
table=1( ls_out_acl), priority= 2001, match=(outport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && ip), action=(drop;)
table=1( ls_out_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 0, match=(1), action=(next;)
table=2(ls_out_port_sec_ip), priority= 90, match=(outport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && eth.dst == fa:16:3e:01:bb:84 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 1.0.0.3}), action=(next;)
table=2(ls_out_port_sec_ip), priority= 90, match=(outport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && eth.dst == fa:16:3e:8c:35:40 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 1.0.0.2}), action=(next;)
table=2(ls_out_port_sec_ip), priority= 80, match=(outport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && eth.dst == fa:16:3e:01:bb:84 && ip), action=(drop;)
table=2(ls_out_port_sec_ip), priority= 80, match=(outport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && eth.dst == fa:16:3e:8c:35:40 && ip), action=(drop;)
table=2(ls_out_port_sec_ip), priority= 0, match=(1), action=(next;)
table=3(ls_out_port_sec_l2), priority= 100, match=(eth.mcast), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "145889e2-9869-40f3-b719-bfa5dc2a7f6d"), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "a4181a4d-9315-40dd-a1c1-f1e645b9abf3" && eth.dst == {fa:16:3e:01:bb:84}), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "edc3e9f8-1e02-48d0-a89e-d0e2ac50fa77" && eth.dst == {fa:16:3e:8c:35:40}), action=(output;)
Datapath: 11c8238a-c3d6-4659-80cf-26024101bcad Pipeline: ingress
table=0(ls_in_port_sec_l2), priority= 100, match=(eth.src[40]), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 100, match=(vlan.present), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "7c4b8a30-ad9a-425e-81af-ce041f24d67c"), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "91fc44b4-1b41-441c-b75c-8cc79f6b45aa"), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && eth.src == {fa:16:3e:32:0f:3f}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 90, match=(inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && eth.src == fa:16:3e:32:0f:3f && ip4.src == {0.0.0.0, 3.0.0.2}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 80, match=(inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && eth.src == fa:16:3e:32:0f:3f && ip), action=(drop;)
table=1(ls_in_port_sec_ip), priority= 0, match=(1), action=(next;)
table=2(ls_in_port_sec_nd), priority= 90, match=(inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && eth.src == fa:16:3e:32:0f:3f && arp.sha == fa:16:3e:32:0f:3f && (arp.spa == 3.0.0.2 )), action=(next;)
table=2(ls_in_port_sec_nd), priority= 80, match=(inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && (arp || nd)), action=(drop;)
table=2(ls_in_port_sec_nd), priority= 0, match=(1), action=(next;)
table=3( ls_in_pre_acl), priority= 110, match=(ip && inport == "7c4b8a30-ad9a-425e-81af-ce041f24d67c"), action=(next;)
table=3( ls_in_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=3( ls_in_pre_acl), priority= 0, match=(1), action=(next;)
table=4( ls_in_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.inv), action=(drop;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip4)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip6)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip4 && (ip4.dst == 255.255.255.255 || ip4.dst == 3.0.0.0/24) && udp && udp.src == 68 && udp.dst == 67), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2001, match=(inport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip), action=(drop;)
table=4( ls_in_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 0, match=(1), action=(next;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 3.0.0.1 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:b6:3a:e8; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:b6:3a:e8; arp.tpa = arp.spa; arp.spa = 3.0.0.1; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 3.0.0.2 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:32:0f:3f; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:32:0f:3f; arp.tpa = arp.spa; arp.spa = 3.0.0.2; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 3.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:de:0a:13; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:de:0a:13; arp.tpa = arp.spa; arp.spa = 3.0.0.254; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 0, match=(1), action=(next;)
table=6( ls_in_l2_lkup), priority= 100, match=(eth.mcast), action=(outport = "_MC_flood"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:32:0f:3f), action=(outport = "cedd01ff-9625-42e8-827b-231e7a94929c"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:b6:3a:e8), action=(outport = "91fc44b4-1b41-441c-b75c-8cc79f6b45aa"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:de:0a:13), action=(outport = "7c4b8a30-ad9a-425e-81af-ce041f24d67c"; output;)
Datapath: 11c8238a-c3d6-4659-80cf-26024101bcad Pipeline: egress
table=0( ls_out_pre_acl), priority= 110, match=(ip && outport == "7c4b8a30-ad9a-425e-81af-ce041f24d67c"), action=(next;)
table=0( ls_out_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=0( ls_out_pre_acl), priority= 0, match=(1), action=(next;)
table=1( ls_out_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.inv), action=(drop;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip4 && ip4.src == 0.0.0.0/0 && icmp4)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip4 && ip4.src == 0.0.0.0/0 && tcp && tcp.dst >= 1 && tcp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip4 && ip4.src == 0.0.0.0/0 && udp && udp.dst >= 1 && udp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(outport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip4 && ip4.src == 3.0.0.0/24 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2001, match=(outport == "cedd01ff-9625-42e8-827b-231e7a94929c" && ip), action=(drop;)
table=1( ls_out_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 0, match=(1), action=(next;)
table=2(ls_out_port_sec_ip), priority= 90, match=(outport == "cedd01ff-9625-42e8-827b-231e7a94929c" && eth.dst == fa:16:3e:32:0f:3f && ip4.dst == {255.255.255.255, 224.0.0.0/4, 3.0.0.2}), action=(next;)
table=2(ls_out_port_sec_ip), priority= 80, match=(outport == "cedd01ff-9625-42e8-827b-231e7a94929c" && eth.dst == fa:16:3e:32:0f:3f && ip), action=(drop;)
table=2(ls_out_port_sec_ip), priority= 0, match=(1), action=(next;)
table=3(ls_out_port_sec_l2), priority= 100, match=(eth.mcast), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "7c4b8a30-ad9a-425e-81af-ce041f24d67c"), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "91fc44b4-1b41-441c-b75c-8cc79f6b45aa"), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "cedd01ff-9625-42e8-827b-231e7a94929c" && eth.dst == {fa:16:3e:32:0f:3f}), action=(output;)
Datapath: 19f243d2-bb17-4b59-a46c-b73a05be974e Pipeline: ingress
table=0( lr_in_admission), priority= 100, match=(vlan.present || eth.src[40]), action=(drop;)
table=0( lr_in_admission), priority= 50, match=((eth.mcast || eth.dst == fa:16:3e:5f:31:77) && inport == "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"), action=(next;)
table=0( lr_in_admission), priority= 50, match=((eth.mcast || eth.dst == fa:16:3e:ce:83:a3) && inport == "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"), action=(next;)
table=1( lr_in_ip_input), priority= 100, match=(ip4.mcast || ip4.src == 255.255.255.255 || ip4.src == 127.0.0.0/8 || ip4.dst == 127.0.0.0/8 || ip4.src == 0.0.0.0/8 || ip4.dst == 0.0.0.0/8), action=(drop;)
table=1( lr_in_ip_input), priority= 100, match=(ip4.src == {1.0.0.254, 1.0.0.255}), action=(drop;)
table=1( lr_in_ip_input), priority= 100, match=(ip4.src == {2.0.0.254, 2.0.0.255}), action=(drop;)
table=1( lr_in_ip_input), priority= 90, match=((ip4.dst == 1.0.0.254 || ip4.dst == 1.0.0.255) && icmp4.type == 8 && icmp4.code == 0), action=(ip4.dst = ip4.src; ip4.src = 1.0.0.254; ip.ttl = 255; icmp4.type = 0; inport = ""; /* Allow sending out inport. */ next; )
table=1( lr_in_ip_input), priority= 90, match=((ip4.dst == 2.0.0.254 || ip4.dst == 2.0.0.255) && icmp4.type == 8 && icmp4.code == 0), action=(ip4.dst = ip4.src; ip4.src = 2.0.0.254; ip.ttl = 255; icmp4.type = 0; inport = ""; /* Allow sending out inport. */ next; )
table=1( lr_in_ip_input), priority= 90, match=(arp.op == 2), action=(put_arp(inport, arp.spa, arp.sha);)
table=1( lr_in_ip_input), priority= 90, match=(inport == "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6" && arp.tpa == 1.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:5f:31:77; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:5f:31:77; arp.tpa = arp.spa; arp.spa = 1.0.0.254; outport = "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"; inport = ""; /* Allow sending out inport. */ output;)
table=1( lr_in_ip_input), priority= 90, match=(inport == "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a" && arp.tpa == 2.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:ce:83:a3; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:ce:83:a3; arp.tpa = arp.spa; arp.spa = 2.0.0.254; outport = "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"; inport = ""; /* Allow sending out inport. */ output;)
table=1( lr_in_ip_input), priority= 60, match=(ip4.dst == 1.0.0.254), action=(drop;)
table=1( lr_in_ip_input), priority= 60, match=(ip4.dst == 2.0.0.254), action=(drop;)
table=1( lr_in_ip_input), priority= 50, match=(eth.bcast), action=(drop;)
table=1( lr_in_ip_input), priority= 50, match=(ip4.mcast), action=(drop;)
table=1( lr_in_ip_input), priority= 30, match=(ip4 && ip.ttl == {0, 1}), action=(drop;)
table=1( lr_in_ip_input), priority= 0, match=(1), action=(next;)
table=2(lr_in_ip_routing), priority= 24, match=(ip4.dst == 1.0.0.0/255.255.255.0), action=(ip.ttl--; reg0 = ip4.dst; reg1 = 1.0.0.254; eth.src = fa:16:3e:5f:31:77; outport = "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"; next;)
table=2(lr_in_ip_routing), priority= 24, match=(ip4.dst == 2.0.0.0/255.255.255.0), action=(ip.ttl--; reg0 = ip4.dst; reg1 = 2.0.0.254; eth.src = fa:16:3e:ce:83:a3; outport = "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6" && reg0 == 1.0.0.1), action=(eth.dst = fa:16:3e:15:a8:12; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6" && reg0 == 1.0.0.2), action=(eth.dst = fa:16:3e:8c:35:40; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6" && reg0 == 1.0.0.254), action=(eth.dst = fa:16:3e:5f:31:77; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6" && reg0 == 1.0.0.3), action=(eth.dst = fa:16:3e:01:bb:84; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a" && reg0 == 2.0.0.1), action=(eth.dst = fa:16:3e:93:77:87; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a" && reg0 == 2.0.0.2), action=(eth.dst = fa:16:3e:df:d2:99; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a" && reg0 == 2.0.0.254), action=(eth.dst = fa:16:3e:ce:83:a3; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a" && reg0 == 2.0.0.3), action=(eth.dst = fa:16:3e:ed:39:73; next;)
table=3(lr_in_arp_resolve), priority= 0, match=(1), action=(get_arp(outport, reg0); next;)
table=4(lr_in_arp_request), priority= 100, match=(eth.dst == 00:00:00:00:00:00), action=(arp { eth.dst = ff:ff:ff:ff:ff:ff; arp.spa = reg1; arp.op = 1; output; };)
table=4(lr_in_arp_request), priority= 0, match=(1), action=(output;)
Datapath: 19f243d2-bb17-4b59-a46c-b73a05be974e Pipeline: egress
table=0( lr_out_delivery), priority= 100, match=(outport == "lrp-41948f0d-b1c0-4c69-af1f-9e3fdb3b22f6"), action=(output;)
table=0( lr_out_delivery), priority= 100, match=(outport == "lrp-7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"), action=(output;)
Datapath: 58e1b687-7824-4add-922e-c56c8fbc1e34 Pipeline: ingress
table=0(ls_in_port_sec_l2), priority= 100, match=(eth.src[40]), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 100, match=(vlan.present), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "782ddf69-d24f-476f-8349-9d748a306eab"), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && eth.src == {fa:16:3e:03:4c:72}), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "90d33d89-4e2b-461b-94a1-89318d8a4e56"), action=(next;)
table=1(ls_in_port_sec_ip), priority= 90, match=(inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && eth.src == fa:16:3e:03:4c:72 && ip4.src == {0.0.0.0, 1.0.0.2}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 80, match=(inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && eth.src == fa:16:3e:03:4c:72 && ip), action=(drop;)
table=1(ls_in_port_sec_ip), priority= 0, match=(1), action=(next;)
table=2(ls_in_port_sec_nd), priority= 90, match=(inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && eth.src == fa:16:3e:03:4c:72 && arp.sha == fa:16:3e:03:4c:72 && (arp.spa == 1.0.0.2 )), action=(next;)
table=2(ls_in_port_sec_nd), priority= 80, match=(inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && (arp || nd)), action=(drop;)
table=2(ls_in_port_sec_nd), priority= 0, match=(1), action=(next;)
table=3( ls_in_pre_acl), priority= 110, match=(ip && inport == "90d33d89-4e2b-461b-94a1-89318d8a4e56"), action=(next;)
table=3( ls_in_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=3( ls_in_pre_acl), priority= 0, match=(1), action=(next;)
table=4( ls_in_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.inv), action=(drop;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip4)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip6)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip4 && (ip4.dst == 255.255.255.255 || ip4.dst == 1.0.0.0/24) && udp && udp.src == 68 && udp.dst == 67), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2001, match=(inport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip), action=(drop;)
table=4( ls_in_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 0, match=(1), action=(next;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 1.0.0.1 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:ea:11:6f; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:ea:11:6f; arp.tpa = arp.spa; arp.spa = 1.0.0.1; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 1.0.0.2 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:03:4c:72; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:03:4c:72; arp.tpa = arp.spa; arp.spa = 1.0.0.2; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 1.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:3e:c8:08; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:3e:c8:08; arp.tpa = arp.spa; arp.spa = 1.0.0.254; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 0, match=(1), action=(next;)
table=6( ls_in_l2_lkup), priority= 100, match=(eth.mcast), action=(outport = "_MC_flood"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:03:4c:72), action=(outport = "8f05ae8c-0cdd-416c-8bf0-306734eb1833"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:3e:c8:08), action=(outport = "90d33d89-4e2b-461b-94a1-89318d8a4e56"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:ea:11:6f), action=(outport = "782ddf69-d24f-476f-8349-9d748a306eab"; output;)
Datapath: 58e1b687-7824-4add-922e-c56c8fbc1e34 Pipeline: egress
table=0( ls_out_pre_acl), priority= 110, match=(ip && outport == "90d33d89-4e2b-461b-94a1-89318d8a4e56"), action=(next;)
table=0( ls_out_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=0( ls_out_pre_acl), priority= 0, match=(1), action=(next;)
table=1( ls_out_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.inv), action=(drop;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip4 && ip4.src == 0.0.0.0/0 && icmp4)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip4 && ip4.src == 0.0.0.0/0 && tcp && tcp.dst >= 1 && tcp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip4 && ip4.src == 0.0.0.0/0 && udp && udp.dst >= 1 && udp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(outport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip4 && ip4.src == 1.0.0.0/24 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2001, match=(outport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && ip), action=(drop;)
table=1( ls_out_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 0, match=(1), action=(next;)
table=2(ls_out_port_sec_ip), priority= 90, match=(outport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && eth.dst == fa:16:3e:03:4c:72 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 1.0.0.2}), action=(next;)
table=2(ls_out_port_sec_ip), priority= 80, match=(outport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && eth.dst == fa:16:3e:03:4c:72 && ip), action=(drop;)
table=2(ls_out_port_sec_ip), priority= 0, match=(1), action=(next;)
table=3(ls_out_port_sec_l2), priority= 100, match=(eth.mcast), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "782ddf69-d24f-476f-8349-9d748a306eab"), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "8f05ae8c-0cdd-416c-8bf0-306734eb1833" && eth.dst == {fa:16:3e:03:4c:72}), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "90d33d89-4e2b-461b-94a1-89318d8a4e56"), action=(output;)
Datapath: c48e8037-dbe6-45bc-afc7-f5c6f662eadf Pipeline: ingress
table=0(ls_in_port_sec_l2), priority= 100, match=(eth.src[40]), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 100, match=(vlan.present), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && eth.src == {fa:16:3e:b2:12:b2}), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "2fa1ccea-d337-404c-b638-094717a46e81"), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "8c2f0b04-8647-4f79-83eb-a9e03648951c"), action=(next;)
table=1(ls_in_port_sec_ip), priority= 90, match=(inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && eth.src == fa:16:3e:b2:12:b2 && ip4.src == {0.0.0.0, 2.0.0.2}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 80, match=(inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && eth.src == fa:16:3e:b2:12:b2 && ip), action=(drop;)
table=1(ls_in_port_sec_ip), priority= 0, match=(1), action=(next;)
table=2(ls_in_port_sec_nd), priority= 90, match=(inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && eth.src == fa:16:3e:b2:12:b2 && arp.sha == fa:16:3e:b2:12:b2 && (arp.spa == 2.0.0.2 )), action=(next;)
table=2(ls_in_port_sec_nd), priority= 80, match=(inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && (arp || nd)), action=(drop;)
table=2(ls_in_port_sec_nd), priority= 0, match=(1), action=(next;)
table=3( ls_in_pre_acl), priority= 110, match=(ip && inport == "2fa1ccea-d337-404c-b638-094717a46e81"), action=(next;)
table=3( ls_in_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=3( ls_in_pre_acl), priority= 0, match=(1), action=(next;)
table=4( ls_in_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.inv), action=(drop;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip4)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip6)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip4 && (ip4.dst == 255.255.255.255 || ip4.dst == 2.0.0.0/24) && udp && udp.src == 68 && udp.dst == 67), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2001, match=(inport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip), action=(drop;)
table=4( ls_in_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 0, match=(1), action=(next;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 2.0.0.1 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:22:5d:59; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:22:5d:59; arp.tpa = arp.spa; arp.spa = 2.0.0.1; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 2.0.0.2 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:b2:12:b2; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:b2:12:b2; arp.tpa = arp.spa; arp.spa = 2.0.0.2; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 2.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:57:67:69; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:57:67:69; arp.tpa = arp.spa; arp.spa = 2.0.0.254; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 0, match=(1), action=(next;)
table=6( ls_in_l2_lkup), priority= 100, match=(eth.mcast), action=(outport = "_MC_flood"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:22:5d:59), action=(outport = "8c2f0b04-8647-4f79-83eb-a9e03648951c"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:57:67:69), action=(outport = "2fa1ccea-d337-404c-b638-094717a46e81"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:b2:12:b2), action=(outport = "24d679c7-9d0c-4b73-94c8-7052a95c07dc"; output;)
Datapath: c48e8037-dbe6-45bc-afc7-f5c6f662eadf Pipeline: egress
table=0( ls_out_pre_acl), priority= 110, match=(ip && outport == "2fa1ccea-d337-404c-b638-094717a46e81"), action=(next;)
table=0( ls_out_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=0( ls_out_pre_acl), priority= 0, match=(1), action=(next;)
table=1( ls_out_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.inv), action=(drop;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip4 && ip4.src == 0.0.0.0/0 && icmp4)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip4 && ip4.src == 0.0.0.0/0 && tcp && tcp.dst >= 1 && tcp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip4 && ip4.src == 0.0.0.0/0 && udp && udp.dst >= 1 && udp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(outport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip4 && ip4.src == 2.0.0.0/24 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2001, match=(outport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && ip), action=(drop;)
table=1( ls_out_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 0, match=(1), action=(next;)
table=2(ls_out_port_sec_ip), priority= 90, match=(outport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && eth.dst == fa:16:3e:b2:12:b2 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 2.0.0.2}), action=(next;)
table=2(ls_out_port_sec_ip), priority= 80, match=(outport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && eth.dst == fa:16:3e:b2:12:b2 && ip), action=(drop;)
table=2(ls_out_port_sec_ip), priority= 0, match=(1), action=(next;)
table=3(ls_out_port_sec_l2), priority= 100, match=(eth.mcast), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "24d679c7-9d0c-4b73-94c8-7052a95c07dc" && eth.dst == {fa:16:3e:b2:12:b2}), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "2fa1ccea-d337-404c-b638-094717a46e81"), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "8c2f0b04-8647-4f79-83eb-a9e03648951c"), action=(output;)
Datapath: d132f5bf-fcb4-47eb-823d-66b59cac41ea Pipeline: ingress
table=0( lr_in_admission), priority= 100, match=(vlan.present || eth.src[40]), action=(drop;)
table=0( lr_in_admission), priority= 50, match=((eth.mcast || eth.dst == fa:16:3e:3e:c8:08) && inport == "lrp-90d33d89-4e2b-461b-94a1-89318d8a4e56"), action=(next;)
table=0( lr_in_admission), priority= 50, match=((eth.mcast || eth.dst == fa:16:3e:57:67:69) && inport == "lrp-2fa1ccea-d337-404c-b638-094717a46e81"), action=(next;)
table=0( lr_in_admission), priority= 50, match=((eth.mcast || eth.dst == fa:16:3e:de:0a:13) && inport == "lrp-7c4b8a30-ad9a-425e-81af-ce041f24d67c"), action=(next;)
table=1( lr_in_ip_input), priority= 100, match=(ip4.mcast || ip4.src == 255.255.255.255 || ip4.src == 127.0.0.0/8 || ip4.dst == 127.0.0.0/8 || ip4.src == 0.0.0.0/8 || ip4.dst == 0.0.0.0/8), action=(drop;)
table=1( lr_in_ip_input), priority= 100, match=(ip4.src == {1.0.0.254, 1.0.0.255}), action=(drop;)
table=1( lr_in_ip_input), priority= 100, match=(ip4.src == {2.0.0.254, 2.0.0.255}), action=(drop;)
table=1( lr_in_ip_input), priority= 100, match=(ip4.src == {3.0.0.254, 3.0.0.255}), action=(drop;)
table=1( lr_in_ip_input), priority= 90, match=((ip4.dst == 1.0.0.254 || ip4.dst == 1.0.0.255) && icmp4.type == 8 && icmp4.code == 0), action=(ip4.dst = ip4.src; ip4.src = 1.0.0.254; ip.ttl = 255; icmp4.type = 0; inport = ""; /* Allow sending out inport. */ next; )
table=1( lr_in_ip_input), priority= 90, match=((ip4.dst == 2.0.0.254 || ip4.dst == 2.0.0.255) && icmp4.type == 8 && icmp4.code == 0), action=(ip4.dst = ip4.src; ip4.src = 2.0.0.254; ip.ttl = 255; icmp4.type = 0; inport = ""; /* Allow sending out inport. */ next; )
table=1( lr_in_ip_input), priority= 90, match=((ip4.dst == 3.0.0.254 || ip4.dst == 3.0.0.255) && icmp4.type == 8 && icmp4.code == 0), action=(ip4.dst = ip4.src; ip4.src = 3.0.0.254; ip.ttl = 255; icmp4.type = 0; inport = ""; /* Allow sending out inport. */ next; )
table=1( lr_in_ip_input), priority= 90, match=(arp.op == 2), action=(put_arp(inport, arp.spa, arp.sha);)
table=1( lr_in_ip_input), priority= 90, match=(inport == "lrp-2fa1ccea-d337-404c-b638-094717a46e81" && arp.tpa == 2.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:57:67:69; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:57:67:69; arp.tpa = arp.spa; arp.spa = 2.0.0.254; outport = "lrp-2fa1ccea-d337-404c-b638-094717a46e81"; inport = ""; /* Allow sending out inport. */ output;)
table=1( lr_in_ip_input), priority= 90, match=(inport == "lrp-7c4b8a30-ad9a-425e-81af-ce041f24d67c" && arp.tpa == 3.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:de:0a:13; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:de:0a:13; arp.tpa = arp.spa; arp.spa = 3.0.0.254; outport = "lrp-7c4b8a30-ad9a-425e-81af-ce041f24d67c"; inport = ""; /* Allow sending out inport. */ output;)
table=1( lr_in_ip_input), priority= 90, match=(inport == "lrp-90d33d89-4e2b-461b-94a1-89318d8a4e56" && arp.tpa == 1.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:3e:c8:08; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:3e:c8:08; arp.tpa = arp.spa; arp.spa = 1.0.0.254; outport = "lrp-90d33d89-4e2b-461b-94a1-89318d8a4e56"; inport = ""; /* Allow sending out inport. */ output;)
table=1( lr_in_ip_input), priority= 60, match=(ip4.dst == 1.0.0.254), action=(drop;)
table=1( lr_in_ip_input), priority= 60, match=(ip4.dst == 2.0.0.254), action=(drop;)
table=1( lr_in_ip_input), priority= 60, match=(ip4.dst == 3.0.0.254), action=(drop;)
table=1( lr_in_ip_input), priority= 50, match=(eth.bcast), action=(drop;)
table=1( lr_in_ip_input), priority= 50, match=(ip4.mcast), action=(drop;)
table=1( lr_in_ip_input), priority= 30, match=(ip4 && ip.ttl == {0, 1}), action=(drop;)
table=1( lr_in_ip_input), priority= 0, match=(1), action=(next;)
table=2(lr_in_ip_routing), priority= 24, match=(ip4.dst == 1.0.0.0/255.255.255.0), action=(ip.ttl--; reg0 = ip4.dst; reg1 = 1.0.0.254; eth.src = fa:16:3e:3e:c8:08; outport = "lrp-90d33d89-4e2b-461b-94a1-89318d8a4e56"; next;)
table=2(lr_in_ip_routing), priority= 24, match=(ip4.dst == 2.0.0.0/255.255.255.0), action=(ip.ttl--; reg0 = ip4.dst; reg1 = 2.0.0.254; eth.src = fa:16:3e:57:67:69; outport = "lrp-2fa1ccea-d337-404c-b638-094717a46e81"; next;)
table=2(lr_in_ip_routing), priority= 24, match=(ip4.dst == 3.0.0.0/255.255.255.0), action=(ip.ttl--; reg0 = ip4.dst; reg1 = 3.0.0.254; eth.src = fa:16:3e:de:0a:13; outport = "lrp-7c4b8a30-ad9a-425e-81af-ce041f24d67c"; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-2fa1ccea-d337-404c-b638-094717a46e81" && reg0 == 2.0.0.1), action=(eth.dst = fa:16:3e:22:5d:59; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-2fa1ccea-d337-404c-b638-094717a46e81" && reg0 == 2.0.0.2), action=(eth.dst = fa:16:3e:b2:12:b2; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-2fa1ccea-d337-404c-b638-094717a46e81" && reg0 == 2.0.0.254), action=(eth.dst = fa:16:3e:57:67:69; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-7c4b8a30-ad9a-425e-81af-ce041f24d67c" && reg0 == 3.0.0.1), action=(eth.dst = fa:16:3e:b6:3a:e8; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-7c4b8a30-ad9a-425e-81af-ce041f24d67c" && reg0 == 3.0.0.2), action=(eth.dst = fa:16:3e:32:0f:3f; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-7c4b8a30-ad9a-425e-81af-ce041f24d67c" && reg0 == 3.0.0.254), action=(eth.dst = fa:16:3e:de:0a:13; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-90d33d89-4e2b-461b-94a1-89318d8a4e56" && reg0 == 1.0.0.1), action=(eth.dst = fa:16:3e:ea:11:6f; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-90d33d89-4e2b-461b-94a1-89318d8a4e56" && reg0 == 1.0.0.2), action=(eth.dst = fa:16:3e:03:4c:72; next;)
table=3(lr_in_arp_resolve), priority= 100, match=(outport == "lrp-90d33d89-4e2b-461b-94a1-89318d8a4e56" && reg0 == 1.0.0.254), action=(eth.dst = fa:16:3e:3e:c8:08; next;)
table=3(lr_in_arp_resolve), priority= 0, match=(1), action=(get_arp(outport, reg0); next;)
table=4(lr_in_arp_request), priority= 100, match=(eth.dst == 00:00:00:00:00:00), action=(arp { eth.dst = ff:ff:ff:ff:ff:ff; arp.spa = reg1; arp.op = 1; output; };)
table=4(lr_in_arp_request), priority= 0, match=(1), action=(output;)
Datapath: d132f5bf-fcb4-47eb-823d-66b59cac41ea Pipeline: egress
table=0( lr_out_delivery), priority= 100, match=(outport == "lrp-2fa1ccea-d337-404c-b638-094717a46e81"), action=(output;)
table=0( lr_out_delivery), priority= 100, match=(outport == "lrp-7c4b8a30-ad9a-425e-81af-ce041f24d67c"), action=(output;)
table=0( lr_out_delivery), priority= 100, match=(outport == "lrp-90d33d89-4e2b-461b-94a1-89318d8a4e56"), action=(output;)
Datapath: f1e59629-d8b3-47b3-af52-9363984b347c Pipeline: ingress
table=0(ls_in_port_sec_l2), priority= 100, match=(eth.src[40]), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 100, match=(vlan.present), action=(drop;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && eth.src == {fa:16:3e:df:d2:99}), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "9bd0b3af-aee8-4c11-ab4a-a41ac4a49e85"), action=(next;)
table=0(ls_in_port_sec_l2), priority= 50, match=(inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && eth.src == {fa:16:3e:ed:39:73}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 90, match=(inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && eth.src == fa:16:3e:df:d2:99 && ip4.src == {0.0.0.0, 2.0.0.2}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 90, match=(inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && eth.src == fa:16:3e:ed:39:73 && ip4.src == {0.0.0.0, 2.0.0.3}), action=(next;)
table=1(ls_in_port_sec_ip), priority= 80, match=(inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && eth.src == fa:16:3e:df:d2:99 && ip), action=(drop;)
table=1(ls_in_port_sec_ip), priority= 80, match=(inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && eth.src == fa:16:3e:ed:39:73 && ip), action=(drop;)
table=1(ls_in_port_sec_ip), priority= 0, match=(1), action=(next;)
table=2(ls_in_port_sec_nd), priority= 90, match=(inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && eth.src == fa:16:3e:df:d2:99 && arp.sha == fa:16:3e:df:d2:99 && (arp.spa == 2.0.0.2 )), action=(next;)
table=2(ls_in_port_sec_nd), priority= 90, match=(inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && eth.src == fa:16:3e:ed:39:73 && arp.sha == fa:16:3e:ed:39:73 && (arp.spa == 2.0.0.3 )), action=(next;)
table=2(ls_in_port_sec_nd), priority= 80, match=(inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && (arp || nd)), action=(drop;)
table=2(ls_in_port_sec_nd), priority= 80, match=(inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && (arp || nd)), action=(drop;)
table=2(ls_in_port_sec_nd), priority= 0, match=(1), action=(next;)
table=3( ls_in_pre_acl), priority= 110, match=(ip && inport == "7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"), action=(next;)
table=3( ls_in_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=3( ls_in_pre_acl), priority= 0, match=(1), action=(next;)
table=4( ls_in_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=4( ls_in_acl), priority=65535, match=(ct.inv), action=(drop;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip4)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip6)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip4)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(ct.new && (inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip6)), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip4 && (ip4.dst == 255.255.255.255 || ip4.dst == 2.0.0.0/24) && udp && udp.src == 68 && udp.dst == 67), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2002, match=(inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip4 && (ip4.dst == 255.255.255.255 || ip4.dst == 2.0.0.0/24) && udp && udp.src == 68 && udp.dst == 67), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 2001, match=(inport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip), action=(drop;)
table=4( ls_in_acl), priority= 2001, match=(inport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip), action=(drop;)
table=4( ls_in_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=4( ls_in_acl), priority= 0, match=(1), action=(next;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 2.0.0.1 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:93:77:87; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:93:77:87; arp.tpa = arp.spa; arp.spa = 2.0.0.1; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 2.0.0.2 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:df:d2:99; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:df:d2:99; arp.tpa = arp.spa; arp.spa = 2.0.0.2; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 2.0.0.254 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:ce:83:a3; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:ce:83:a3; arp.tpa = arp.spa; arp.spa = 2.0.0.254; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 50, match=(arp.tpa == 2.0.0.3 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:ed:39:73; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:ed:39:73; arp.tpa = arp.spa; arp.spa = 2.0.0.3; outport = inport; inport = ""; /* Allow sending out inport. */ output;)
table=5( ls_in_arp_rsp), priority= 0, match=(1), action=(next;)
table=6( ls_in_l2_lkup), priority= 100, match=(eth.mcast), action=(outport = "_MC_flood"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:93:77:87), action=(outport = "9bd0b3af-aee8-4c11-ab4a-a41ac4a49e85"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:ce:83:a3), action=(outport = "7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:df:d2:99), action=(outport = "084c3170-9f80-4490-8621-1d8ec4779f6b"; output;)
table=6( ls_in_l2_lkup), priority= 50, match=(eth.dst == fa:16:3e:ed:39:73), action=(outport = "a1e828e4-f4e5-4783-8daf-bef5c1703a12"; output;)
Datapath: f1e59629-d8b3-47b3-af52-9363984b347c Pipeline: egress
table=0( ls_out_pre_acl), priority= 110, match=(ip && outport == "7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"), action=(next;)
table=0( ls_out_pre_acl), priority= 100, match=(ip), action=(ct_next;)
table=0( ls_out_pre_acl), priority= 0, match=(1), action=(next;)
table=1( ls_out_acl), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv), action=(next;)
table=1( ls_out_acl), priority=65535, match=(ct.inv), action=(drop;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip4 && ip4.src == 0.0.0.0/0 && icmp4)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip4 && ip4.src == 0.0.0.0/0 && tcp && tcp.dst >= 1 && tcp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip4 && ip4.src == 0.0.0.0/0 && udp && udp.dst >= 1 && udp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip4 && ip4.src == 0.0.0.0/0 && icmp4)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip4 && ip4.src == 0.0.0.0/0 && tcp && tcp.dst >= 1 && tcp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(ct.new && (outport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip4 && ip4.src == 0.0.0.0/0 && udp && udp.dst >= 1 && udp.dst <= 65535)), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(outport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip4 && ip4.src == 2.0.0.0/24 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2002, match=(outport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip4 && ip4.src == 2.0.0.0/24 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 2001, match=(outport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && ip), action=(drop;)
table=1( ls_out_acl), priority= 2001, match=(outport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && ip), action=(drop;)
table=1( ls_out_acl), priority= 1, match=(ip), action=(ct_commit; next;)
table=1( ls_out_acl), priority= 0, match=(1), action=(next;)
table=2(ls_out_port_sec_ip), priority= 90, match=(outport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && eth.dst == fa:16:3e:df:d2:99 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 2.0.0.2}), action=(next;)
table=2(ls_out_port_sec_ip), priority= 90, match=(outport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && eth.dst == fa:16:3e:ed:39:73 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 2.0.0.3}), action=(next;)
table=2(ls_out_port_sec_ip), priority= 80, match=(outport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && eth.dst == fa:16:3e:df:d2:99 && ip), action=(drop;)
table=2(ls_out_port_sec_ip), priority= 80, match=(outport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && eth.dst == fa:16:3e:ed:39:73 && ip), action=(drop;)
table=2(ls_out_port_sec_ip), priority= 0, match=(1), action=(next;)
table=3(ls_out_port_sec_l2), priority= 100, match=(eth.mcast), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "084c3170-9f80-4490-8621-1d8ec4779f6b" && eth.dst == {fa:16:3e:df:d2:99}), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "7d2e9e9d-002c-4dca-b97f-073f3a9dde3a"), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "9bd0b3af-aee8-4c11-ab4a-a41ac4a49e85"), action=(output;)
table=3(ls_out_port_sec_l2), priority= 50, match=(outport == "a1e828e4-f4e5-4783-8daf-bef5c1703a12" && eth.dst == {fa:16:3e:ed:39:73}), action=(output;)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment