Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug fix: endpoint dnat flows should resubmit packets to cnp egress table #1119

Merged

Conversation

weiqiangt
Copy link
Contributor

Endpoint dnat flows should resubmit packets to the first cnp egress
table instead of the EgressRuleTable, otherwise cnp will not take effect
on service traffic.

Signed-off-by: Weiqiang Tang weiqiangt@vmware.com

Endpoint dnat flows should resubmit packets to the first cnp egress
table instead of the EgressRuleTable, otherwise cnp will not take effect
on service traffic.

Signed-off-by: Weiqiang Tang <weiqiangt@vmware.com>
@antrea-bot
Copy link
Collaborator

Thanks for your PR.
Unit tests and code linters are run automatically every time the PR is updated.
E2e, conformance and network policy tests can only be triggered by a member of the vmware-tanzu organization. Regular contributors to the project should join the org.

The following commands are available:

  • /test-e2e: to trigger e2e tests.
  • /skip-e2e: to skip e2e tests.
  • /test-conformance: to trigger conformance tests.
  • /skip-conformance: to skip conformance tests.
  • /test-whole-conformance: to trigger all conformance tests on linux.
  • /skip-whole-conformance: to skip all conformance tests on linux.
  • /test-networkpolicy: to trigger networkpolicy tests.
  • /skip-networkpolicy: to skip networkpolicy tests.
  • /test-windows-conformance: to trigger windows conformance tests.
  • /skip-windows-conformance: to skip windows conformance tests.
  • /test-windows-networkpolicy: to trigger windows networkpolicy tests.
  • /skip-windows-networkpolicy: to skip windows networkpolicy tests.
  • /test-hw-offload: to trigger ovs hardware offload test.
  • /skip-hw-offload: to skip ovs hardware offload test.
  • /test-all: to trigger all tests (except whole conformance).
  • /skip-all: to skip all tests (except whole conformance).

@weiqiangt weiqiangt requested review from yktsubo and Dyanngg August 20, 2020 06:48
@weiqiangt
Copy link
Contributor Author

/test-all

Copy link
Contributor

@Dyanngg Dyanngg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks for the fix.

Copy link
Contributor

@yktsubo yktsubo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@yktsubo
Copy link
Contributor

yktsubo commented Aug 20, 2020

Maybe we should add a test case for the scenario where both antrea proxy and CNP are enabled

@weiqiangt weiqiangt merged commit 36e674f into antrea-io:master Aug 21, 2020
@weiqiangt weiqiangt deleted the bugfix-ap-endpointdnat-resubmit branch August 21, 2020 11:48
antoninbas pushed a commit to antoninbas/antrea that referenced this pull request Aug 21, 2020
…ble (antrea-io#1119)

Endpoint dnat flows should resubmit packets to the first cnp egress
table instead of the EgressRuleTable, otherwise cnp will not take effect
on service traffic.

Signed-off-by: Weiqiang Tang <weiqiangt@vmware.com>
antoninbas pushed a commit that referenced this pull request Aug 21, 2020
…ble (#1119)

Endpoint dnat flows should resubmit packets to the first cnp egress
table instead of the EgressRuleTable, otherwise cnp will not take effect
on service traffic.

Signed-off-by: Weiqiang Tang <weiqiangt@vmware.com>
tnqn pushed a commit to tnqn/antrea that referenced this pull request Aug 27, 2020
…ble (antrea-io#1119)

Endpoint dnat flows should resubmit packets to the first cnp egress
table instead of the EgressRuleTable, otherwise cnp will not take effect
on service traffic.

Signed-off-by: Weiqiang Tang <weiqiangt@vmware.com>
GraysonWu pushed a commit to GraysonWu/antrea that referenced this pull request Sep 22, 2020
…ble (antrea-io#1119)

Endpoint dnat flows should resubmit packets to the first cnp egress
table instead of the EgressRuleTable, otherwise cnp will not take effect
on service traffic.

Signed-off-by: Weiqiang Tang <weiqiangt@vmware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants