summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Add connection tracking label support.Joe Stringer2015-10-1328-18/+393
| | | | | | | | | | | | | | | | | | | | | | This patch adds a new 128-bit metadata field to the connection tracking interface. When a label is specified as part of the ct action and the connection is committed, the value is saved with the current connection. Subsequent ct lookups with the table specified will expose this metadata as the "ct_label" field in the flow. For example, to allow new TCP connections from port 1->2 and only allow established connections from port 2->1, and to associate a label with those connections: table=0,priority=1,action=drop table=0,arp,action=normal table=0,in_port=1,tcp,action=ct(commit,exec(set_field:1->ct_label)),2 table=0,in_port=2,ct_state=-trk,tcp,action=ct(table=1) table=1,in_port=2,ct_state=+trk,ct_label=1,tcp,action=1 Signed-off-by: Joe Stringer <joestringer@nicira.com> Acked-by: Jarno Rajahalme <jrajahalme@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* Add connection tracking mark support.Joe Stringer2015-10-1330-43/+550
| | | | | | | | | | | | | | | | | | | | | | This patch adds a new 32-bit metadata field to the connection tracking interface. When a mark is specified as part of the ct action and the connection is committed, the value is saved with the current connection. Subsequent ct lookups with the table specified will expose this metadata as the "ct_mark" field in the flow. For example, to allow new TCP connections from port 1->2 and only allow established connections from port 2->1, and to associate a mark with those connections: table=0,priority=1,action=drop table=0,arp,action=normal table=0,in_port=1,tcp,action=ct(commit,exec(set_field:1->ct_mark)),2 table=0,in_port=2,ct_state=-trk,tcp,action=ct(table=1) table=1,in_port=2,ct_state=+trk,ct_mark=1,tcp,action=1 Signed-off-by: Joe Stringer <joestringer@nicira.com> Acked-by: Jarno Rajahalme <jrajahalme@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* Add support for connection tracking.Joe Stringer2015-10-1342-28/+1897
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds a new action and fields to OVS that allow connection tracking to be performed. This support works in conjunction with the Linux kernel support merged into the Linux-4.3 development cycle. Packets have two possible states with respect to connection tracking: Untracked packets have not previously passed through the connection tracker, while tracked packets have previously been through the connection tracker. For OpenFlow pipeline processing, untracked packets can become tracked, and they will remain tracked until the end of the pipeline. Tracked packets cannot become untracked. Connections can be unknown, uncommitted, or committed. Packets which are untracked have unknown connection state. To know the connection state, the packet must become tracked. Uncommitted connections have no connection state stored about them, so it is only possible for the connection tracker to identify whether they are a new connection or whether they are invalid. Committed connections have connection state stored beyond the lifetime of the packet, which allows later packets in the same connection to be identified as part of the same established connection, or related to an existing connection - for instance ICMP error responses. The new 'ct' action transitions the packet from "untracked" to "tracked" by sending this flow through the connection tracker. The following parameters are supported initally: - "commit": When commit is executed, the connection moves from uncommitted state to committed state. This signals that information about the connection should be stored beyond the lifetime of the packet within the pipeline. This allows future packets in the same connection to be recognized as part of the same "established" (est) connection, as well as identifying packets in the reply (rpl) direction, or packets related to an existing connection (rel). - "zone=[u16|NXM]": Perform connection tracking in the zone specified. Each zone is an independent connection tracking context. When the "commit" parameter is used, the connection will only be committed in the specified zone, and not in other zones. This is 0 by default. - "table=NUMBER": Fork pipeline processing in two. The original instance of the packet will continue processing the current actions list as an untracked packet. An additional instance of the packet will be sent to the connection tracker, which will be re-injected into the OpenFlow pipeline to resume processing in the specified table, with the ct_state and other ct match fields set. If the table is not specified, then the packet is submitted to the connection tracker, but the pipeline does not fork and the ct match fields are not populated. It is strongly recommended to specify a table later than the current table to prevent loops. When the "table" option is used, the packet that continues processing in the specified table will have the ct_state populated. The ct_state may have any of the following flags set: - Tracked (trk): Connection tracking has occurred. - Reply (rpl): The flow is in the reply direction. - Invalid (inv): The connection tracker couldn't identify the connection. - New (new): This is the beginning of a new connection. - Established (est): This is part of an already existing connection. - Related (rel): This connection is related to an existing connection. For more information, consult the ovs-ofctl(8) man pages. Below is a simple example flow table to allow outbound TCP traffic from port 1 and drop traffic from port 2 that was not initiated by port 1: table=0,priority=1,action=drop table=0,arp,action=normal table=0,in_port=1,tcp,ct_state=-trk,action=ct(commit,zone=9),2 table=0,in_port=2,tcp,ct_state=-trk,action=ct(zone=9,table=1) table=1,in_port=2,ct_state=+trk+est,tcp,action=1 table=1,in_port=2,ct_state=+trk+new,tcp,action=drop Based on original design by Justin Pettit, contributions from Thomas Graf and Daniele Di Proietto. Signed-off-by: Joe Stringer <joestringer@nicira.com> Acked-by: Jarno Rajahalme <jrajahalme@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ofp-actions: Pass ofp_version to decode functions.Joe Stringer2015-10-132-33/+109
| | | | | | | | | A future patch will make use of this version parameter to pass nested attributes. Prepare for that by adding the parameter as an unused variable for the existing functions. Signed-off-by: Joe Stringer <joestringer@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* meta-flow: Rename IPv6 type to be128.Joe Stringer2015-10-132-4/+4
| | | | | Signed-off-by: Joe Stringer <joestringer@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* types: Add big-endian 128-bit types and helpers.Joe Stringer2015-10-134-0/+59
| | | | | | | | | These types will be used by the following patches to ensure a consistent wire format for 128-bit connection tracking labels. Common functions for comparison, endian translation, etc. are provided. Signed-off-by: Joe Stringer <joestringer@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ofp-actions: Extend reg_load parsing to >64bits.Joe Stringer2015-10-131-8/+20
| | | | | | | | | | | Previously, reg_load would only understand 64-bit values passed to it. This patch extends the parsing to handle larger fields, if they are specified in hexadecimal. Internally they are stored as a single action, but they are converted into multiple 64-bit modifications when re-serialised. Signed-off-by: Joe Stringer <joestringer@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ofp-actions: Refactor set_field tokenization.Joe Stringer2015-10-131-12/+42
| | | | | | | | | | Combine the codepaths for splitting "set_field" and "reg_load" string arguments into the value, key, and delimiter component. The only user-visible change is that reg_load will now provide a more meaningful error message when parsing input such as "reg_load:1". Signed-off-by: Joe Stringer <joestringer@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* tnl-ports: add IPv6 supportThadeu Lima de Souza Cascardo2015-10-131-15/+57
| | | | | | | | Retrieve interfaces IPv6 addresses, and store IPv4 addresses as IPv4-mapped IPv6 addresses. Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com> Acked-by: Pravin B Shelar <pshelar@nicira.com>
* tnl-arp-cache: add IPv6 Neighbor Discovery supportThadeu Lima de Souza Cascardo2015-10-134-21/+86
| | | | | | | | Uses IPv4-mapped IPv6 addresses to store IPv4 addresses, and add support for Neighbor Discovery snooping. Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com> Acked-by: Pravin B Shelar <pshelar@nicira.com>
* route: support IPv6 and use IPv4-mapped addressesThadeu Lima de Souza Cascardo2015-10-136-86/+194
| | | | | | | | This adds support for IPv6 in ovs-router and route-table. IPv4 is stored in ovs-router using IPv4-mapped addresses. Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com> Acked-by: Pravin B Shelar <pshelar@nicira.com>
* appveyor.yml: Remove from docs.Ben Pfaff2015-10-131-1/+1
| | | | | | It's not documentation. Signed-off-by: Ben Pfaff <blp@nicira.com>
* ovn-tutorial: Add more links.Russell Bryant2015-10-131-6/+17
| | | | | | | | | | Add links to several man pages. Also fix a minor typo. Note that openvswitch.org needs to be updated as it's missing the ovn-northd man page. Signed-off-by: Russell Bryant <rbryant@redhat.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* FAQ: Describe why OVS can't prepopulate the kernel flow table.Ben Pfaff2015-10-131-0/+26
| | | | | Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Jesse Gross <jesse@nicira.com>
* bridge: Coding style fix.Ben Pfaff2015-10-121-1/+2
| | | | | Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Andy Zhou <azhou@nicira.com>
* rstp: Properly disable an RSTP port before deleting it.Jarno Rajahalme2015-10-121-1/+4
| | | | | | | | | | RSTP may end up referencing stale memory if a port is removed without disabling it first. This patch, together with the previous patch by Daniele Venturino, was tested to resolve a crach by Daniel Swahn. Signed-off-by: Jarno Rajahalme <jrajahalme@nicira.com> Tested-by: Daniel Swahn <daniel.swahn@clavister.com>
* ofproto-dpif: Add check in rstp_run.Daniele Venturino2015-10-122-3/+10
| | | | | | | Check if old_root_aux and new_root_aux are null before invoking bundle_move() on them. Signed-off-by: Daniele Venturino <daniele.venturino@m3s.it> Acked-by: Jarno Rajahalme <jrajahalme@nicira.com>
* AUTHORS: Add John Reumann.Jarno Rajahalme2015-10-091-0/+1
| | | | Signed-off-by: Jarno Rajahalme <jrajahalme@nicira.com>
* meta-flow: Remove circular dependency on enum ofputil_protocol.Jarno Rajahalme2015-10-092-6/+8
| | | | | | | | | | | enum ofputil_protocol is defined in lib/ofp-util.h, which also includes lib/meta-flow.h. We have already replaced the sets of usable protocols in struct mf_field with uint32_t for this reason. Do the same for the return value of mf_set(). Suggested-by: John Reumann <nofutznetworks@gmail.com> Signed-off-by: Jarno Rajahalme <jrajahalme@nicira.com> Acked-by: Jarno Rajahalme <jrajahalme@nicira.com>
* datapath: Fix compilation on kernel 2.6.32Pravin B Shelar2015-10-092-0/+8
| | | | | | | | | | | | | | | | | | | | | | Fixes following compilation error: CC [M] /home/travis/build/openvswitch/ovs/datapath/linux/actions.o In file included from /home/travis/build/openvswitch/ovs/datapath/linux/actions.c:21:0: /home/travis/build/openvswitch/ovs/datapath/linux/compat/include/linux/skbuff.h: In function ‘rpl_skb_postpull_rcsum’: /home/travis/build/openvswitch/ovs/datapath/linux/compat/include/linux/skbuff.h:384:4: error: implicit declaration of function ‘skb_checksum_start_offset’ [-Werror=implicit-function-declaration] cc1: some warnings being treated as errors Reported-by: Joe Stringer <joestringer@nicira.com> Signed-off-by: Pravin B Shelar <pshelar@nicira.com> Acked-by: Joe Stringer <joestringer@nicira.com>
* RHEL: create /etc/openvswitch directoryAnsis Atteka2015-10-081-0/+1
| | | | | | | | | | | | | | This directory needs to be created by the package manager because ovs-ctl is being invoked from SElinux openvswitch domain that does not have enough privileges to create directories under /etc on its own. Without this patch Open vSwitch is not able to start under SElinux enforcing mode (which is default on CentOS by the way). Signed-off-by: Ansis Atteka <aatteka@nicira.com> Ackedy-by: Kyle Mestery <mestery@mestery.com> Acked-by: Flavio Leitner <fbl@sysclose.org>
* poll-loop: Fix a bug while finding a poll node.Gurucharan Shetty2015-10-081-2/+6
| | | | | | | | | | | | | | | When a poll_node is created, it gets either a 'fd' or a 'wevent' (can't get both). When the poll_node is searched for previous creations on that 'fd' or 'wevent', the search criteria was wrong for Windows. In Windows, when a 'fd' is received in poll_create_node, we create a corresponding 'wevent'. So while searching for that 'fd', we should not look for 'wevent' in the hmap_node. Reported-by: Alin Gabriel Serdean <aserdean@cloudbasesolutions.com> Signed-off-by: Gurucharan Shetty <gshetty@nicira.com> Acked-by: Alin Gabriel Serdean <aserdean@cloudbasesolutions.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ovn-controller: Add test for setting up and tearing down patch ports.Ben Pfaff2015-10-073-0/+73
| | | | | | | | | The initial plan for OVN logical routers will make more extensive use of patch ports, so it seems like a good idea to add some tests to avoid regressions before messing with them. Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* ovn-sbctl: Use environment var OVN_SB_DB to find the database by default.Ben Pfaff2015-10-075-13/+35
| | | | | | | | | | This makes it possible to use ovn-sbctl without always typing the --db option (outside of trivial single-machine OVN deployments). Also modifies the testsuite to use this. Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* tests: Refactor macros so OVN databases can be initialized individually.Ben Pfaff2015-10-071-8/+17
| | | | | | | | I want to write a test for ovn-controller without ovn-northd getting involved. Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* ovn: Implement action to exchange two fields.Ben Pfaff2015-10-077-32/+112
| | | | | Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* ovn: Implement action to copy one field into another.Ben Pfaff2015-10-074-81/+167
| | | | | Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* physical: Preserve output port across multicast group output.Ben Pfaff2015-10-071-0/+4
| | | | | | | | | | | | | | | | Otherwise actions like this would not output to the same set of ports for each output action (the second output would only forward to the last port from the first output action): outport = "_MC_FLOOD"; output; output; Obviously it's a corner case but it still seems worth implementing correctly. Found by inspection. Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* ovn-sb.xml: Reorganize Port_Binding documentation.Ben Pfaff2015-10-061-129/+137
| | | | | | | This takes advantage of column grouping and the ability to document a key within a column. Signed-off-by: Ben Pfaff <blp@nicira.com>
* ovn-controller: Document database keys used by ovn-controller.Ben Pfaff2015-10-061-0/+40
| | | | | Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* ovn-controller: Improve formatting of manpage.Ben Pfaff2015-10-061-57/+48
| | | | | | | | | | | | First, the structure here was funny, with one <p> nested inside another, plus a <ul> nested inside a <p>. I'm surprised that the formatter didn't complain but at any rate it's better to avoid this structure. Second, this <ul> seemed better off as a <dl>, so I changed it to use that structure. Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* ovn-nbctl: Split parent and tag in "show" output.Russell Bryant2015-10-051-3/+5
| | | | | | | | | As of 779e72cc57a106251cc9e6696e8c9aabb56d30b5, localnet ports may have the tag column set. This case does not make use of the parent column, so output these fields independently of each other. Signed-off-by: Russell Bryant <rbryant@redhat.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* netlink: helper functions for ipv6 address in netlink attrsJiri Benc2015-10-052-0/+26
| | | | | | | | [cascardo: add NL_A_IPV6, used in next patch] Signed-off-by: Jiri Benc <jbenc@redhat.com> Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* lib: Add ipv6 helper functions.Jiri Benc2015-10-051-0/+8
| | | | | | | | | | | ipv6_addr_is_set is going to be used by next patches. [cascardo: compare with in6addr_any in ipv6_addr_is_set] [cascardo: keep only ipv6_addr_is_* functions] Signed-off-by: Jiri Benc <jbenc@redhat.com> Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* packets: Provide functions to work with IPv4-mapped IPv6 addresses.Thadeu Lima de Souza Cascardo2015-10-052-9/+21
| | | | | | | | | Move in6_addr_set_mapped_ipv4 out of mcast-snooping code to packets.h and provide an in6_addr_get_mapped_ipv4 function that gets the corresponding IPv4 address or the ANY address if it's not IPv4 mapped. Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* automake: Consolidate schema checksum check.Gurucharan Shetty2015-10-025-36/+19
| | | | | Signed-off-by: Gurucharan Shetty <gshetty@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ovn-ctl: Ability to upgrade databases.Gurucharan Shetty2015-10-023-60/+60
| | | | | Signed-off-by: Gurucharan Shetty <gshetty@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ovn-ctl, ovs-ctl: Move common code to ovs-lib.Gurucharan Shetty2015-10-023-16/+12
| | | | | Signed-off-by: Gurucharan Shetty <gshetty@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ovn: Add schema versions and checksum to schema files.Gurucharan Shetty2015-10-024-0/+33
| | | | | Signed-off-by: Gurucharan Shetty <gshetty@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ovn-nbctl: Avoid minor code duplication.Ben Pfaff2015-10-021-1/+1
| | | | | Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* ovn-nbctl: Minor fix for manpage.Ben Pfaff2015-10-021-1/+0
| | | | | | | There's no -d option, you have to use --db. Signed-off-by: Ben Pfaff <blp@nicira.com> Acked-by: Justin Pettit <jpettit@nicira.com>
* ovn: Add an ovs-sandbox based OVN tutorial.Russell Bryant2015-10-0222-2/+1209
| | | | | | | | | | | | | While working on OVN and OVN integration, I've collected a set of scripts for quickly setting up simple test environments using ovs-sandbox with OVN enabled. It seemed like they could be useful to others for learning about OVN or doing quick testing. This patch introduces an ovs-sandbox based tutorial for exploring OVN features in a simulated environment. Signed-off-by: Russell Bryant <rbryant@redhat.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* ovn: Add VLAN support for localnet ports.Russell Bryant2015-10-023-44/+107
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch makes it possible use a localnet port for connecting to a specific VLAN on a locally accessible network. The only logical modeling change is that it is now valid to set the "tag" field on logical ports with a type of "localnet". Previously, the "tag" field was only use for child ports. We still use a single automatically created patch port between br-int and the bridge configured to provide connectivity to a given network (the ovn-controller bridge-mappings configuration). We use flows when necessary to either match on VLAN ID or to add the VLAN ID before sending the packet out. Matching for a localnet port with a VLAN ID is done at priority 150 in table 0, and is similar to how we match traffic from container child ports. These cases are conceptually similar in that they're separate logical ports on the same physical port. Most of the code changes are due to a change in data structures. We have to keep track of all of the localnet ports and then add flows for them at the end. Previously this code tracked them as: hash of localnet bindings, hased on network name localnet bindings: openflow port number list of port bindings Now we have: hash of localnet bindings, hased on network name localnet bindings: openflow port number hash of localnet vlans localnet vlans: VLAN ID (0 for untagged traffic) list of port bindings A detailed example of using localnet ports with a VLAN ID is provided in a later patch as a part of a larger OVN tutorial. Signed-off-by: Russell Bryant <rbryant@redhat.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* rhel: Add optional BuildRequires to libcap-ngFlavio Leitner2015-10-021-1/+16
| | | | | | | | | | | | | | | | | Commit e91b927d8 (lib/daemon: support --user option for all OVS daemon) added optional usage of the libcap-ng library. It's packaged in Fedora, so go ahead and added it by default to the Fedora spec file. Our default systemd unit files don't make use of the --user option that requires this library, but conceivably someone may want to customize them and use this option. For those that don't want to use --user option, the Fedora package offers an option (--without libcapng) to build the RPMs without it. Signed-off-by: Flavio Leitner <fbl@redhat.com> Acked-by: Russell Bryant <rbryant@redhat.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* datapath-windows: Compute checksums for VXLAN inner packets.Alin Serdean2015-10-023-40/+145
| | | | | | | | | | | | | | | | | | | | | | | | Windows does not support VXLAN hardware offloading. Currently we do not compute IP/TCP/UDP checksums for the inner packet. This patch computes the checksums mentioned above in regards with the enabled settings. i.e. if IP checksum offloading is enabled for the inner packet we compute it. The same applies for TCP and UDP packets. This patch also revizes the computation of ones' complement over different memory blocks, in the case the lengths are odd. Also per documentation: https://msdn.microsoft.com/en-us/library/windows/hardware/ff568840%28v=vs.85%29.aspx set the TCP flags FIN and PSH only for the last segment in the case LSO is enabled. Signed-off-by: Alin Gabriel Serdean <aserdean@cloudbasesolutions.com> Acked-by: Sairam Venugopal <vsairam@vmware.com> Acked-by: Sorin Vinturis <svinturis@cloudbasesolutions.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* datapath-windows: Add file to solution.Alin Serdean2015-10-021-0/+1
| | | | | | | | | This patch adds the file DpInternal.h to the ovsetx.sln. Signed-off-by: Alin Gabriel Serdean <aserdean@cloudbasesolutions.com> Acked-by: Nithin Raju <nithin@vmware.com> Acked-by: Sairam Venugopal <vsairam@vmware.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* datapath-windows: Fix IP fragmentationAlin Serdean2015-10-023-12/+6
| | | | | | | | | | | | | Currently in the case of IP fragmentation we send to the userspace that the flag for the last fragment is 3 when it actually should be a value between 0..2. This patch fixes the problem and also uses the values used in the common header of the datapath. Signed-off-by: Alin Gabriel Serdean <aserdean@cloudbasesolutions.com> Acked-by: Nithin Raju <nithin@vmware.com> Signed-off-by: Ben Pfaff <blp@nicira.com>
* ovn-ctl: Remove non-existant function call.Gurucharan Shetty2015-10-021-3/+0
| | | | | Signed-off-by: Gurucharan Shetty <gshetty@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* ovn: Change the valid tag values.Gurucharan Shetty2015-10-023-3/+3
| | | | | | | | A tag value of 0 is not used by containers running inside VMs. Signed-off-by: Gurucharan Shetty <gshetty@nicira.com> Acked-by: Ben Pfaff <blp@nicira.com>
* datapath-windows: Update documentationAlin Serdean2015-10-021-24/+47
| | | | | | | | | | | | | Commit ID:7845b70384d75bd7d753648cb547be5c6c75ddca changed the hardcoded names of 'internal' and 'external.1'. This patch updates the documentation to accomodate the patches. Signed-off-by: Alin Gabriel Serdean <aserdean@cloudbasesolutions.com> Acked-by: Sorin Vinturis <svinturis@cloudbasesolutions.com> Acked-by: Nithin Raju <nithin@vmware.com> Acked-by: Sairam Venugopal <vsairam@vmware.com> Signed-off-by: Ben Pfaff <blp@nicira.com>