Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2196383/?format=api
{ "id": 2196383, "url": "http://patchwork.ozlabs.org/api/patches/2196383/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ovn/patch/ca594af54b7280db1f3c95dee00950352b5f3a39.1771002059.git.lorenzo.bianconi@redhat.com/", "project": { "id": 68, "url": "http://patchwork.ozlabs.org/api/projects/68/?format=api", "name": "Open Virtual Network development", "link_name": "ovn", "list_id": "ovs-dev.openvswitch.org", "list_email": "ovs-dev@openvswitch.org", "web_url": "http://openvswitch.org/", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<ca594af54b7280db1f3c95dee00950352b5f3a39.1771002059.git.lorenzo.bianconi@redhat.com>", "list_archive_url": null, "date": "2026-02-13T17:03:44", "name": "[ovs-dev,v3] northd: Do not forward unknown ether type to router ports.", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "f4c81bdbcf7ebfca81fe61a4533e4ce3dcef664d", "submitter": { "id": 73083, "url": "http://patchwork.ozlabs.org/api/people/73083/?format=api", "name": "Lorenzo Bianconi", "email": "lorenzo.bianconi@redhat.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/ovn/patch/ca594af54b7280db1f3c95dee00950352b5f3a39.1771002059.git.lorenzo.bianconi@redhat.com/mbox/", "series": [ { "id": 492120, "url": "http://patchwork.ozlabs.org/api/series/492120/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ovn/list/?series=492120", "date": "2026-02-13T17:03:44", "name": "[ovs-dev,v3] northd: Do not forward unknown ether type to router ports.", "version": 3, "mbox": "http://patchwork.ozlabs.org/series/492120/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2196383/comments/", "check": "fail", "checks": "http://patchwork.ozlabs.org/api/patches/2196383/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<ovs-dev-bounces@openvswitch.org>", "X-Original-To": [ "incoming@patchwork.ozlabs.org", "ovs-dev@openvswitch.org" ], "Delivered-To": [ "patchwork-incoming@legolas.ozlabs.org", "ovs-dev@lists.linuxfoundation.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (1024-bit key;\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=cgOLj4ab;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=openvswitch.org\n (client-ip=2605:bc80:3010::136; helo=smtp3.osuosl.org;\n envelope-from=ovs-dev-bounces@openvswitch.org; receiver=patchwork.ozlabs.org)", "smtp3.osuosl.org;\n\tdkim=fail reason=\"signature verification failed\" (1024-bit key,\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=cgOLj4ab", "smtp4.osuosl.org; dmarc=pass (p=quarantine dis=none)\n header.from=redhat.com", "smtp4.osuosl.org; dkim=pass (1024-bit key,\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=cgOLj4ab" ], "Received": [ "from smtp3.osuosl.org (smtp3.osuosl.org [IPv6:2605:bc80:3010::136])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fCJRX3j7Dz1xvQ\n\tfor <incoming@patchwork.ozlabs.org>; Sat, 14 Feb 2026 04:04:06 +1100 (AEDT)", "from localhost (localhost [127.0.0.1])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id 718DF61317;\n\tFri, 13 Feb 2026 17:04:04 +0000 (UTC)", "from smtp3.osuosl.org ([127.0.0.1])\n by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id MfUjQa_TGxBl; Fri, 13 Feb 2026 17:04:02 +0000 (UTC)", "from lists.linuxfoundation.org (lf-lists.osuosl.org [140.211.9.56])\n\tby smtp3.osuosl.org (Postfix) with ESMTPS id 66B556072C;\n\tFri, 13 Feb 2026 17:04:02 +0000 (UTC)", "from lf-lists.osuosl.org (localhost [127.0.0.1])\n\tby lists.linuxfoundation.org (Postfix) with ESMTP id 1C41AC0035;\n\tFri, 13 Feb 2026 17:04:02 +0000 (UTC)", "from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n by lists.linuxfoundation.org (Postfix) with ESMTP id 91E25C0033\n for <ovs-dev@openvswitch.org>; Fri, 13 Feb 2026 17:04:00 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp4.osuosl.org (Postfix) with ESMTP id 6AE2241D79\n for <ovs-dev@openvswitch.org>; Fri, 13 Feb 2026 17:04:00 +0000 (UTC)", "from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id tD1PeXaPlp5X for <ovs-dev@openvswitch.org>;\n Fri, 13 Feb 2026 17:03:58 +0000 (UTC)", "from us-smtp-delivery-124.mimecast.com\n (us-smtp-delivery-124.mimecast.com [170.10.133.124])\n by smtp4.osuosl.org (Postfix) with ESMTPS id 7C0C941CD7\n for <ovs-dev@openvswitch.org>; Fri, 13 Feb 2026 17:03:57 +0000 (UTC)", "from mail-wm1-f69.google.com (mail-wm1-f69.google.com\n [209.85.128.69]) by relay.mimecast.com with ESMTP with STARTTLS\n (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id\n us-mta-354-EzIIZrBEPCClcnA24vAWhQ-1; Fri, 13 Feb 2026 12:03:54 -0500", "by mail-wm1-f69.google.com with SMTP id\n 5b1f17b1804b1-48071615686so10374695e9.1\n for <ovs-dev@openvswitch.org>; Fri, 13 Feb 2026 09:03:53 -0800 (PST)", "from localhost (net-37-119-153-93.cust.vodafonedsl.it.\n [37.119.153.93]) by smtp.gmail.com with ESMTPSA id\n 5b1f17b1804b1-48370a52e5asm32311605e9.2.2026.02.13.09.03.49\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Fri, 13 Feb 2026 09:03:49 -0800 (PST)" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.9.56;\n helo=lists.linuxfoundation.org;\n envelope-from=ovs-dev-bounces@openvswitch.org; receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp3.osuosl.org 66B556072C", "OpenDKIM Filter v2.11.0 smtp4.osuosl.org 7C0C941CD7" ], "Received-SPF": "Pass (mailfrom) identity=mailfrom; client-ip=170.10.133.124;\n helo=us-smtp-delivery-124.mimecast.com;\n envelope-from=lorenzo.bianconi@redhat.com; receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp4.osuosl.org 7C0C941CD7", "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com;\n s=mimecast20190719; t=1771002235;\n h=from:from:reply-to:subject:subject:date:date:message-id:message-id:\n to:to:cc:cc:mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding;\n bh=tn4eYwYq8/JhCDiQKBZ9XnVisjxCZ1qLzl8bVSO87Vs=;\n b=cgOLj4abMKCs7aZB62CYCPstPuZBPp8lvKvueetnjY9Sn4z4S1Tyho2GA5/ccm5/gbmWRO\n qcENgCwKmMTLginO5QpIr26kIY9IHDTlSJA+yJFDzscgGsKSaJx+28cuct2A6qlvod0wfW\n Vw+c0yYAXht2dZgjz+mbmqrpa/dveFM=", "X-MC-Unique": "EzIIZrBEPCClcnA24vAWhQ-1", "X-Mimecast-MFC-AGG-ID": "EzIIZrBEPCClcnA24vAWhQ_1771002233", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20230601; t=1771002232; x=1771607032;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=tn4eYwYq8/JhCDiQKBZ9XnVisjxCZ1qLzl8bVSO87Vs=;\n b=cvkO8+8lhIR+o/QIiHmraYEmE3mjTMKrlgYPT3IwY9SpyhpRVPwRE1vvI53UpQnzDV\n yGLinuy7vNhIFOa2aboOi/nX+2tyKh1ZqVnV+zwbL7pImO0O433qaYt4nfjpRIepOSg/\n L9ZRHsAu3vutlA2LM/IUvHQDbSyHfd8p+tQCt2/u8UvIDigjaXZ2XsxCPg7HqIpzWMjJ\n FwhwdYp0egHZESqsphvPrA0trVBx8Yl3UUO2sKq/nvvrHaXNpe6nNmUmIFGO7+7zW3DA\n 8br7l/e/vwhbPcVe/YRCbMjoth8t1BrZwZyUHdwRPo81cs+TK/V922YrdazvyzW6aU1Q\n IokQ==", "X-Gm-Message-State": "AOJu0YxTL5D2g/8Tms+wSbtr8Eu+ebsGgHTjsx8csUCm3/bajHGONIaP\n 325EEW/xq6kIHFQBLSTUesLJVRiXaMrrg3kO4MXax95ujHhtPzhfSHs2qfY4Y2j3y3ru1kNUghu\n FB5KHsbuV2gtjtv2DVIyDOyEOvA9TpeITl9cqRUMjcBrILFIEKLLpTdl9NsphLLebni96IQxnKN\n jx/dM+zOxj6XztI6aIGwt1HDR5fRbGvIv4PkZDJHru9xoZjJ4oUAbPjA==", "X-Gm-Gg": "AZuq6aLtFvElEzAKRQSpCaKQLpjBDBBju5jrDe6SC/4fmqhE9eiG3yqmyzWJmpd6IvC\n HPJasYuVfFo/nJlXgb1W/zEE8+D6rZ/J8sBVd3PJEJNSYMgIZD8nDuhRT3kU/7/qUPl+VQ+2npE\n lV9CS5VP1F1SgIQuK41wCV/htpq9OdvJ0XAhJIAM8tubJWauNSSHSYd5js6tWUciJbsEI6s1FWg\n nfqbIg6QQqJjrtPmQzlZb50C3i50iKWa1ZiuEzqqS1aAeDmXx5H5kMEz0+z7TSkx/gCa019HQoe\n J34F6VQdSz9fpN/LDD5Ic+sYZaX/nHwa7DJSRGyS/+jIlPRzfmvIFwVHeK8htCkcF1w6/yhMgl+\n BRJ0ZJE0QcTko3GtDTPW4iuhgFOjPWEhe1+EQXz7TYd1t9N+8CQVQmPgoWFVgAjxERoEuIA==", "X-Received": [ "by 2002:a05:600c:1907:b0:477:73e9:dc17 with SMTP id\n 5b1f17b1804b1-48373a79afbmr44276695e9.35.1771002231279;\n Fri, 13 Feb 2026 09:03:51 -0800 (PST)", "by 2002:a05:600c:1907:b0:477:73e9:dc17 with SMTP id\n 5b1f17b1804b1-48373a79afbmr44275195e9.35.1771002230141;\n Fri, 13 Feb 2026 09:03:50 -0800 (PST)" ], "To": "ovs-dev@openvswitch.org", "Cc": "dceara@redhat.com,\n\ti.maximets@ovn.org", "Date": "Fri, 13 Feb 2026 18:03:44 +0100", "Message-ID": "\n <ca594af54b7280db1f3c95dee00950352b5f3a39.1771002059.git.lorenzo.bianconi@redhat.com>", "X-Mailer": "git-send-email 2.53.0", "MIME-Version": "1.0", "X-Mimecast-Spam-Score": "0", "X-Mimecast-MFC-PROC-ID": "E1denC4ScDKKilkGSyo8pLgsW0rvYZcbd2cHPaEdpAM_1771002233", "X-Mimecast-Originator": "redhat.com", "Subject": "[ovs-dev] [PATCH v3 ovn] northd: Do not forward unknown ether type\n to router ports.", "X-BeenThere": "ovs-dev@openvswitch.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "<ovs-dev.openvswitch.org>", "List-Unsubscribe": "<https://mail.openvswitch.org/mailman/options/ovs-dev>,\n <mailto:ovs-dev-request@openvswitch.org?subject=unsubscribe>", "List-Archive": "<http://mail.openvswitch.org/pipermail/ovs-dev/>", "List-Post": "<mailto:ovs-dev@openvswitch.org>", "List-Help": "<mailto:ovs-dev-request@openvswitch.org?subject=help>", "List-Subscribe": "<https://mail.openvswitch.org/mailman/listinfo/ovs-dev>,\n <mailto:ovs-dev-request@openvswitch.org?subject=subscribe>", "From": "Lorenzo Bianconi via dev <ovs-dev@openvswitch.org>", "Reply-To": "Lorenzo Bianconi <lorenzo.bianconi@redhat.com>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "ovs-dev-bounces@openvswitch.org", "Sender": "\"dev\" <ovs-dev-bounces@openvswitch.org>" }, "content": "Do not forward non-{ip,arp} L2 multicast packets to routers ports in\norder to not exceed OVS recirculation limit if the logical switch is\nconnected to multiple OVN routers since these packets will be discarded\nin the router pipeline.\n\nReported-at: https://issues.redhat.com/browse/FDP-1908\nSigned-off-by: Lorenzo Bianconi <lorenzo.bianconi@redhat.com>\n---\nChanges in v3:\n- Convert system-test in unit-test\n- Use 71 priority for new added flow\n---\n northd/northd.c | 26 +++++++++++-----\n northd/ovn-northd.8.xml | 8 ++++-\n tests/ovn-northd.at | 68 ++++++++++++++++++++++++++++++-----------\n tests/ovn.at | 49 +++++++++++++++++++++++++++++\n 4 files changed, 125 insertions(+), 26 deletions(-)", "diff": "diff --git a/northd/northd.c b/northd/northd.c\nindex 4ecdd9c2d..10b328527 100644\n--- a/northd/northd.c\n+++ b/northd/northd.c\n@@ -10767,16 +10767,26 @@ build_lswitch_destination_lookup_bmcast(struct ovn_datapath *od,\n lflow_ref);\n }\n \n- if (!smap_get_bool(&od->nbs->other_config,\n- \"broadcast-arps-to-all-routers\", true)) {\n- ovn_lflow_add(lflows, od, S_SWITCH_IN_L2_LKUP, 72,\n- \"eth.mcast && (arp.op == 1 || nd_ns)\",\n- \"outport = \\\"\"MC_FLOOD_L2\"\\\"; output;\",\n- lflow_ref);\n- }\n+ ds_clear(actions);\n+ bool broadcast_arps_to_all_routers = smap_get_bool(\n+ &od->nbs->other_config,\n+ \"broadcast-arps-to-all-routers\",\n+ true);\n+ ds_put_format(actions, \"outport = \\\"%s\\\"; output;\",\n+ broadcast_arps_to_all_routers ? MC_FLOOD : MC_FLOOD_L2);\n+ ovn_lflow_add(lflows, od, S_SWITCH_IN_L2_LKUP, 72,\n+ \"eth.mcast && (arp.op == 1 || nd_ns)\",\n+ ds_cstr(actions), lflow_ref);\n \n- ovn_lflow_add(lflows, od, S_SWITCH_IN_L2_LKUP, 70, \"eth.mcast\",\n+ ovn_lflow_add(lflows, od, S_SWITCH_IN_L2_LKUP, 71,\n+ \"eth.mcast && (arp.op == 2 || ip)\",\n \"outport = \\\"\"MC_FLOOD\"\\\"; output;\", lflow_ref);\n+\n+ /* non-{arp,ip} L2 multicast traffic should not be sent to router\n+ * ports since these packets will be discarded in the router pipeline.\n+ */\n+ ovn_lflow_add(lflows, od, S_SWITCH_IN_L2_LKUP, 70, \"eth.mcast\",\n+ \"outport = \\\"\"MC_FLOOD_L2\"\\\"; output;\", lflow_ref);\n }\n \n /* Ingress table 30: destination lookup, multicast handling (priority 80). */\ndiff --git a/northd/ovn-northd.8.xml b/northd/ovn-northd.8.xml\nindex a17bc5f22..8ba68a4d0 100644\n--- a/northd/ovn-northd.8.xml\n+++ b/northd/ovn-northd.8.xml\n@@ -2420,9 +2420,15 @@ output;\n <code>other_config:broadcast-arps-to-all-routers=true</code>.\n </li>\n \n+ <li>\n+ A priority-71 flow that outputs all ARP replies or IP packets with an\n+ Ethernet broadcast or multicast <code>eth.dst</code> to the <code>\n+ MC_FLOOD</code> multicast group.\n+ </li>\n+\n <li>\n A priority-70 flow that outputs all packets with an Ethernet broadcast\n- or multicast <code>eth.dst</code> to the <code>MC_FLOOD</code>\n+ or multicast <code>eth.dst</code> to the <code>MC_FLOOD_L2</code>\n multicast group.\n </li>\n \ndiff --git a/tests/ovn-northd.at b/tests/ovn-northd.at\nindex 36b3db6f6..8a37561a5 100644\n--- a/tests/ovn-northd.at\n+++ b/tests/ovn-northd.at\n@@ -5743,7 +5743,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls1_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(outport = \"ls1-ro1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:02), action=(outport = \"vm1\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:01:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 192.168.1.1), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && nd_ns && nd.target == fe80::200:ff:fe00:101), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -5756,7 +5758,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls2_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:01), action=(outport = \"ls2-ro2\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:02), action=(outport = \"vm2\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:02:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 192.168.2.1), action=(clone {outport = \"ls2-ro2\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && nd_ns && nd.target == fe80::200:ff:fe00:201), action=(clone {outport = \"ls2-ro2\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -5777,7 +5781,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls1_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(outport = \"ls1-ro1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:02), action=(outport = \"vm1\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:01:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.100), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.200), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -5792,7 +5798,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls2_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:01), action=(outport = \"ls2-ro2\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:02), action=(outport = \"vm2\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:02:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 192.168.2.1), action=(clone {outport = \"ls2-ro2\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 20.0.0.100), action=(clone {outport = \"ls2-ro2\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -5815,7 +5823,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls1_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(outport = \"ls1-ro1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:02), action=(outport = \"vm1\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:01:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.100), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.200), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -5832,7 +5842,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls2_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:01), action=(outport = \"ls2-ro2\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:02), action=(outport = \"vm2\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:02:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 192.168.2.1), action=(clone {outport = \"ls2-ro2\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 20.0.0.100), action=(clone {outport = \"ls2-ro2\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -5854,7 +5866,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls1_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(outport = \"ls1-ro1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:02), action=(outport = \"vm1\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:01:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.100), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.200), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -5875,7 +5889,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls1_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(outport = \"ls1-ro1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:02), action=(outport = \"vm1\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:01:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.100), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.200), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -5903,7 +5919,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" ls1_lflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01 && is_chassis_resident(\"cr-ro1-ls1\")), action=(outport = \"ls1-ro1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:02), action=(outport = \"vm1\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:01:01} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.100), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 10.0.0.200), action=(clone {outport = \"ls1-ro1\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -9537,7 +9555,9 @@ ovn_strip_lflows ], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=0 , match=(1), action=(outport = get_fdb(eth.dst); next;)\n table=??(ls_in_l2_lkup ), priority=100 , match=(reg8[[23]] == 1), action=(output;)\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_unknown ), priority=0 , match=(1), action=(output;)\n table=??(ls_in_l2_unknown ), priority=50 , match=(outport == \"none\"), action=(drop;)\n table=??(ls_out_apply_port_sec), priority=0 , match=(1), action=(output;)\n@@ -9572,7 +9592,9 @@ ovn_strip_lflows ], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:00:02), action=(outport = \"sw0p2\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(outport = \"sw0p1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:02), action=(outport = \"sw0p2\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_unknown ), priority=0 , match=(1), action=(output;)\n table=??(ls_in_l2_unknown ), priority=50 , match=(outport == \"none\"), action=(drop;)\n table=??(ls_out_apply_port_sec), priority=0 , match=(1), action=(output;)\n@@ -9606,7 +9628,9 @@ ovn_strip_lflows ], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:00:02), action=(outport = \"sw0p2\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(outport = \"sw0p1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:02), action=(outport = \"sw0p2\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_unknown ), priority=0 , match=(1), action=(output;)\n table=??(ls_in_l2_unknown ), priority=50 , match=(outport == \"none\"), action=(drop;)\n table=??(ls_out_apply_port_sec), priority=0 , match=(1), action=(output;)\n@@ -9641,7 +9665,9 @@ ovn_strip_lflows ], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:00:02), action=(outport = \"sw0p2\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(drop;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:02), action=(outport = \"sw0p2\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_unknown ), priority=0 , match=(1), action=(output;)\n table=??(ls_in_l2_unknown ), priority=50 , match=(outport == \"none\"), action=(drop;)\n table=??(ls_in_l2_unknown ), priority=50 , match=(outport == \"sw0p1\"), action=(drop;)\n@@ -9676,7 +9702,9 @@ ovn_strip_lflows ], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:00:02), action=(outport = \"sw0p2\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(drop;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:02), action=(outport = \"sw0p2\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_unknown ), priority=0 , match=(1), action=(output;)\n table=??(ls_in_l2_unknown ), priority=50 , match=(outport == \"none\"), action=(drop;)\n table=??(ls_in_l2_unknown ), priority=50 , match=(outport == \"sw0p1\"), action=(drop;)\n@@ -9715,7 +9743,9 @@ ovn_strip_lflows ], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:00:02), action=(outport = \"sw0p2\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:01:01), action=(outport = \"sw0p1\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:02:02), action=(outport = \"sw0p2\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_unknown ), priority=0 , match=(1), action=(output;)\n table=??(ls_in_l2_unknown ), priority=50 , match=(outport == \"none\"), action=(drop;)\n table=??(ls_out_apply_port_sec), priority=0 , match=(1), action=(output;)\n@@ -14054,7 +14084,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" publicflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=110 , match=(eth.dst == $svc_monitor_mac && (tcp || icmp || icmp6)), action=(handle_svc_check(inport);)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:ff:02 && is_chassis_resident(\"cr-lr0-public\")), action=(outport = \"public-lr0\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 30:54:00:00:00:03 && is_chassis_resident(\"sw0-port1\")), action=(outport = \"public-lr0\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:ff:02, 30:54:00:00:00:03} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 172.168.0.10), action=(clone {outport = \"public-lr0\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 172.168.0.100), action=(clone {outport = \"public-lr0\"; output; }; outport = \"_MC_flood_l2\"; output;)\n@@ -14231,7 +14263,9 @@ AT_CHECK([grep \"ls_in_l2_lkup\" publicflows | ovn_strip_lflows], [0], [dnl\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:ff:02 && !is_chassis_resident(\"cr-public-lr0\")), action=(outport = \"cr-public-lr0\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 00:00:00:00:ff:02 && is_chassis_resident(\"cr-public-lr0\")), action=(outport = \"public-lr0\"; output;)\n table=??(ls_in_l2_lkup ), priority=50 , match=(eth.dst == 30:54:00:00:00:03 && is_chassis_resident(\"sw0-port1\")), action=(outport = \"public-lr0\"; output;)\n- table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=70 , match=(eth.mcast), action=(outport = \"_MC_flood_l2\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=71 , match=(eth.mcast && (arp.op == 2 || ip)), action=(outport = \"_MC_flood\"; output;)\n+ table=??(ls_in_l2_lkup ), priority=72 , match=(eth.mcast && (arp.op == 1 || nd_ns)), action=(outport = \"_MC_flood\"; output;)\n table=??(ls_in_l2_lkup ), priority=75 , match=(eth.src == {00:00:00:00:ff:02, 30:54:00:00:00:03} && eth.dst == ff:ff:ff:ff:ff:ff && (arp.op == 1 || rarp.op == 3 || nd_ns)), action=(outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 172.168.0.10 && !is_chassis_resident(\"cr-public-lr0\")), action=(clone {outport = \"cr-public-lr0\"; output; }; outport = \"_MC_flood_l2\"; output;)\n table=??(ls_in_l2_lkup ), priority=80 , match=(flags[[1]] == 0 && arp.op == 1 && arp.tpa == 172.168.0.10 && is_chassis_resident(\"cr-public-lr0\")), action=(clone {outport = \"public-lr0\"; output; }; outport = \"_MC_flood_l2\"; output;)\ndiff --git a/tests/ovn.at b/tests/ovn.at\nindex c6abd7b8b..2139c9fb1 100644\n--- a/tests/ovn.at\n+++ b/tests/ovn.at\n@@ -45652,3 +45652,52 @@ check_zone_flush ovn-controller-2.log 3\n OVN_CLEANUP([hv1])\n AT_CLEANUP\n ])\n+\n+OVN_FOR_EACH_NORTHD([\n+AT_SETUP([Drop unknown eth type on router ports])\n+AT_SKIP_IF([test $HAVE_SCAPY = no])\n+AT_SKIP_IF([test $HAVE_TCPDUMP = no])\n+ovn_start\n+\n+net_add n1\n+\n+sim_add hv1\n+as hv1\n+check ovs-vsctl add-br br-phys\n+ovn_attach n1 br-phys 192.168.0.1\n+check ovs-vsctl -- add-port br-int hv1-vif1 -- \\\n+ set interface hv1-vif1 external-ids:iface-id=sw0-p1 \\\n+ options:tx_pcap=hv1/vif1-tx.pcap \\\n+ options:rxq_pcap=hv1/vif1-rx.pcap\n+ovs-vsctl -- add-port br-int hv1-vif2 -- \\\n+ set interface hv1-vif2 external-ids:iface-id=sw0-p2 \\\n+ options:tx_pcap=hv1/vif2-tx.pcap \\\n+ options:rxq_pcap=hv1/vif2-rx.pcap\n+\n+check ovn-nbctl ls-add sw0\n+check ovn-nbctl lsp-add sw0 sw0-p1\n+check ovn-nbctl lsp-set-addresses sw0-p1 \"50:54:10:00:00:01 10.0.0.1\"\n+check ovn-nbctl lsp-add sw0 sw0-p2\n+check ovn-nbctl lsp-set-addresses sw0-p2 \"50:54:20:00:00:01 10.0.0.2\"\n+\n+check ovn-nbctl lr-add lr0\n+check ovn-nbctl lrp-add lr0 lr0-sw0 00:00:00:00:ff:01 10.0.0.254/24\n+check ovn-nbctl lsp-add-router-port sw0 sw0-lr0 lr0-sw0\n+\n+# create an ACL to log traffic on the router port.\n+check ovn-nbctl --log --name='eth-unknown' acl-add sw0 to-lport 1000 'outport == \"sw0-lr0\" && eth.type == 0x5ff' allow\n+\n+OVN_POPULATE_ARP\n+wait_for_ports_up\n+check ovn-nbctl --wait=hv sync\n+\n+packet=$(fmt_pkt \"Ether(dst='ff:ff:ff:ff:ff:ff', src='50:54:10:00:00:01', type=0x5ff)\")\n+echo $packet > expected\n+check as hv1 ovs-appctl netdev-dummy/receive hv1-vif1 $packet\n+OVN_CHECK_PACKETS([hv1/vif2-tx.pcap], [expected])\n+\n+AT_CHECK([grep -q 'name=\"eth-unknown\"' hv1/ovn-controller.log],[1])\n+\n+OVN_CLEANUP([hv1])\n+AT_CLEANUP\n+])\n", "prefixes": [ "ovs-dev", "v3" ] }