Support security group for provider typed networks (FLAT and VLAN)
Change-Id: I759b89eb16c0ab27ee068694dd455265bac4bf52
(cherry picked from commit 8ed2c9875172daf2a2be95a210e3e151eb4a6525)
diff --git a/apps/kubevirt-networking/app/src/main/java/org/onosproject/kubevirtnetworking/impl/KubevirtSwitchingPhysicalHandler.java b/apps/kubevirt-networking/app/src/main/java/org/onosproject/kubevirtnetworking/impl/KubevirtSwitchingPhysicalHandler.java
index c8089fb..9d9757d 100644
--- a/apps/kubevirt-networking/app/src/main/java/org/onosproject/kubevirtnetworking/impl/KubevirtSwitchingPhysicalHandler.java
+++ b/apps/kubevirt-networking/app/src/main/java/org/onosproject/kubevirtnetworking/impl/KubevirtSwitchingPhysicalHandler.java
@@ -47,10 +47,10 @@
import static java.util.concurrent.Executors.newSingleThreadExecutor;
import static org.onlab.util.Tools.groupedThreads;
+import static org.onosproject.kubevirtnetworking.api.Constants.ACL_INGRESS_TABLE;
+import static org.onosproject.kubevirtnetworking.api.Constants.ARP_TABLE;
import static org.onosproject.kubevirtnetworking.api.Constants.KUBEVIRT_NETWORKING_APP_ID;
-import static org.onosproject.kubevirtnetworking.api.Constants.PRE_FLAT_TABLE;
import static org.onosproject.kubevirtnetworking.api.Constants.PRIORITY_FORWARDING_RULE;
-import static org.onosproject.kubevirtnetworking.api.Constants.VTAG_TABLE;
import static org.onosproject.kubevirtnetworking.util.KubevirtNetworkingUtil.structurePortName;
import static org.onosproject.kubevirtnode.api.Constants.INTEGRATION_TO_PHYSICAL_PREFIX;
import static org.onosproject.net.AnnotationKeys.PORT_NAME;
@@ -107,14 +107,14 @@
return intPatchPorts.contains(portName);
}
- private void setFlatJumpRuleForPatchPort(DeviceId deviceId,
- PortNumber portNumber,
- boolean install) {
+ private void setIngressRuleForPatchPort(DeviceId deviceId,
+ PortNumber portNumber,
+ boolean install) {
TrafficSelector.Builder selector = DefaultTrafficSelector.builder()
.matchInPort(portNumber);
TrafficTreatment.Builder treatment = DefaultTrafficTreatment.builder()
- .transition(PRE_FLAT_TABLE);
+ .transition(ACL_INGRESS_TABLE);
flowRuleService.setRule(
appId,
@@ -122,7 +122,7 @@
selector.build(),
treatment.build(),
PRIORITY_FORWARDING_RULE,
- VTAG_TABLE,
+ ARP_TABLE,
install);
}
@@ -168,14 +168,14 @@
if (!isRelevantHelper(event)) {
return;
}
- setFlatJumpRuleForPatchPort(event.subject().id(),
+ setIngressRuleForPatchPort(event.subject().id(),
event.port().number(), true);
}
private void processPortRemoval(DeviceEvent event) {
if (!isRelevantHelper(event)) {
return;
}
- setFlatJumpRuleForPatchPort(event.subject().id(),
+ setIngressRuleForPatchPort(event.subject().id(),
event.port().number(), false);
}
}