-
Story
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
5
-
False
-
-
False
-
rhel-9
-
None
-
rhel-net-ovn
-
-
-
ssg_networking
-
FDP 24.F
-
1
-
+
Right now, ovn-controller implies unix: connection scheme. It may be helpful to connect to vswitchd via a proper AF_INET socket, to e.g. avoid file system sharing in cloud-native environments. (The assumption is that these sockets would then be secured by SSL certificates.)
The relevant code section demonstrating the assumption:
ofctrl_run(const struct ovsrec_bridge *br_int, const struct ovsrec_open_vswitch_table *ovs_table, struct shash *pending_ct_zones) { char *target = xasprintf("unix:%s/%s.mgmt", ovs_rundir(), br_int->name); bool reconnected = false; if (strcmp(target, rconn_get_target(swconn))) { VLOG_INFO("%s: connecting to switch", target); rconn_connect(swconn, target, target); }
AFAIU as part of this feature support, connection probing should be enabled for the AF_INET sockets.
- blocks
-
OSPRH-3023 Switch ovn-controller openflow communication to vswitchd to AF_INET
-
- Backlog
-
- mentioned on