Commit list:

76bd54eb3 controller: Do not remove snat-ct-zone requested by the CMS.
360f669b1 news: Fix indentation for an entry.
877060451 news: Fix indentation for an entry.
8efac26f6 pinctrl: Explicitly set ICMPv6 code for packet too big.
4c96d2659 pinctrl: Explicitly set ICMPv6 code for packet too big.
dc5b666d7 tests: Prevent netcat from forking.
25f403eac tests: Prevent netcat from forking.
ea24d593e Documentation: Add inclusive-language documentation.
063146ee4 Documentation: Add inclusive-language documentation.
cb8e54332 Revert "northd: Introduce ECMP_Nexthop table in SB db.".
7b937370b Revert "northd: Add nexhop id in ct_label.label.".
42148ffe8 Revert "ofctrl: Introduce ecmp_nexthop_monitor.".
11d20b895 Revert "northd: Introduce ECMP_Nexthop table in SB db.".
3cc8db2d0 Revert "northd: Add nexhop id in ct_label.label.".
784f755f2 Revert "ofctrl: Introduce ecmp_nexthop_monitor.".
fc8a01543 northd: Make bfd_connections static in build_parsed_routes.
f29fc462e northd: Get rid of bfd_connections in bfd_sync_data.
8b08b23dc northd: Optimize lookup in bfd_is_port_running.
8f085f0bd northd: Introduce bfd_sync_data data structure.
32fb58665 northd: Make bfd_connections static in build_parsed_routes.
01119a52b northd: Get rid of bfd_connections in bfd_sync_data.
bad91e367 northd: Optimize lookup in bfd_is_port_running.
f41a32259 northd: Introduce bfd_sync_data data structure.
ec6033729 AUTHORS: Update email for Rosemarie O'Riorden.
97fc54f10 northd: Fix potential crash when creating chassisredirect port.
9fbda4ac6 northd: Fix potential crash when creating chassisredirect port.
34fa3c1d4 tests: Skip "IPv6 switching - megaflow check" if scapy is not installed.
7fd6c2118 tests: Skip "IPv6 switching - megaflow check" if scapy is not installed.
30a502e9f Reply only for the multicast ND solicitations.
2e7f318c9 Reply only for the multicast ND solicitations.
a65471c4c ci: Add nftables to containers.
5b0b1dd6e tests: Skip some tests if nft not installed.
0fbe412a1 multinode: Fix test "ovn multinode NAT ...".
155637d98 multinode: Increase maximum execution time.
e8554f34c multinode: Fix test "ovn multinode NAT ...".
ac120957b multinode: Increase maximum execution time.
158597a1f northd: Routing protocol port redirection.
370527673 northd: Routing protocol port redirection.
11d92550b northd: Clean up SB MAC bindings for deleted ports.
417f1415b northd: Clean up SB MAC bindings for deleted ports.
4ded211f8 controller: Make sure the meter and group tables are initialized.
8c79a7e9e controller: Make sure the meter and group tables are initialized.
07d51ea3c github: containers: Fix job condition.
3ea7e389a github: containers: Fix job condition.
f0a368143 Prepare for post-24.09.0.
6c74ef66a Prepare for 24.09.0.
e717b18be test: Fix flaky I-P test.
b9732aef4 github: Fix running multi-node tests on forks.
2e5a69d12 github: Don't run scheduled workflows on forks.
1e95bed6e tests: Add system tests for MAC_Binding.
090ca4eca ofctrl: Introduce ecmp_nexthop_monitor.
0158825b2 northd: Add nexhop id in ct_label.label.
aeae21335 northd: Introduce ECMP_Nexthop table in SB db.
436a011a5 Text representations for drop sampling.
03862b95b ci: ovn-kubernetes: Move to stable release-1.0 branch.
5513fa685 features: Fix wrong logic for feature set discovered.
43c34f2e6 logical-fields: Add missing multicast matches for MLD and IGMP.
15c9c9f42 northd: Add bfd, static_routes, route_policies and bfd_sync nodes to I-P engine.
23e24e95d northd: Add change handler for FDB updates.
6559b442e ovn-controller: Support ovn-encap-ip-default option.
d52e928ef tests: Fix typo in read-only sb ssl-ciphers test.
39eb73d92 tests: Remove almost duplicate macros.
fe8c8ac6f tests: Cleanup more on_exit commands.
d498a91af controller-vtep: Add --help and --version to docs.
539f7676b northd: Allow flow simplification for ACL sampling.
bcdd3fade actions: Add support for sample with register.
71752140e features: Add detection for sample with registers.
bc94def2d features: Make querying of OpenFlow features more versatile.
d15b12da6 northd: Add ACL Sampling.
d4930e6e0 northd: Override NB_Global drop sampling id with Sampling_App config.
564f05c44 northd: Add Sampling_App table.
a0beaab8c northd: Commit from-lport ACL label (and state) when LBs are used.
dddd7070a northd: Fix up logical flow documentation for QoS.
603f38da0 controller: Remove OvS iface type check in I-P processing.
8d13579bf Add support for centralize routing for distributed gw ports.
ffcc7acb6 actions: Explicitly finish CT actions.
6234e092d controller: Add lsp option disable_garp_rarp.
ccc72067f northd: Fix pmtud related issues.
9c0c9e132 tests: Compare IP and recompute related ports.
d51bd7df3 binding: Cleanup related ports on port type change.
0e3d1aa91 binding: Cleanup related_lports for container ports.
53290c1e2 binding: Cleanup related_lports for deleted ports.
2ede282c1 tests: Add macros for checking related ports.
3aa155d23 controller: Add debug/dump-related-ports unixctl.
9c3ae6f27 northd: Add ECMP symmetric replies for egress.
d9122dec3 containers: Cap sphinx at 7 to unblock CI.
4d81f1fdd controller, northd: Add support for CT zone limits.
493ef704a controller: Prepare structure around CT zone limiting.
601b3c650 ci: Bump the Cirrus CI Ubuntu image.
f2363f49f controller: Add the capability to specify a min/max value for ct_zone.
ee45e1208 tests: Fix wrong IPv6 notation.
4ed71c20f ovs: Bump submodule to branch-3.4.
87a290640 provider networks: Provide the option to tunnel traffic.
07b6c97ba ovn-northd.at: Fix flaky VXLAN mode disabling test.
dc5a39dd7 tests: Fix unreliable "ACL and committing to conntrack" system test.
078b84864 northd: Assume all chassis support the "ovn-ct-lb-related" feature.
f1f5c34f1 northd: Assume all chassis support the "ct-no-masked-label" feature.
83cf9cc9b northd: Assume all chassis support the "port-up-notif" feature.
b64c5643a northd: Fix issues for Forwarding_Group.
eeadd418e Documentation: Update language about soft freeze requirements.
9a43e2979 ci: Use compressed format for podman save.
bcc650a29 tests: Fix ssl-ciphers RO sb test with old openssl.
94aad069d AUTHORS: Added MJ Ponsonby to the list.
ee2fa6205 nbctl: Added local link ipv6 to nbctl show.
b02966983 Maintainers: Fix the typo in the email id.
e6f4bb9a2 controller: Further encapsulate the CT zone handling.
411a9858b controller: Move CT zone handling into separate module.
866b81f67 treewide: Prevent potential NULL ptr deref.
908a7e732 ovn-nbctl: Avoid uninitialized value for mirror index.
0a80f9dd9 northd: Fix potential overflow
6ed42ee0f treewide: Remove dead code.
5398c0425 ovn-ctl: Fix incorrect use of `==` operator.
e3bc71839 tests: Skip memory error triggered on ARM in DPDK tests.
841fbdc74 ci: Save some DPDK compilation time.
f1b925bcf AUTHORS: Add Naveen Yerramneni.
1a16aae43 AUTHORS: Add Vasyl Saienko.
02d143f84 controller: Add random delay during fdb learning.
7e99500e6 northd: Add support for disabling vxlan mode.
1b4b319b9 northd: Make `vxlan_mode` a global variable.
e80e9e7df utilties: Allow ovn-detrace to run on ovs-ofctl dump-flows output.
c48ed1736 Do not reply on unicast arps for IPv4 targets.
2dad0f45c ci: Move DPDK build into container.
cc1d63de2 ci: Move common build steps into script.
03fb88ce9 tests: ic: Add IP multicast test that simulates the ovn-k8s use case.
d904c0e4d Revert "northd: Don't skip transit switch LSP when creating mcast groups."
05187a0a6 Revert "ovn-ic: Avoid igmp/mld traffic flooding."
c5a83ab73 Revert "IC: Tansit switch don't flood mcast traffic to router ports if matches igmp group."
d34509941 controller: Send RARP/GARP for VIF post link state is up.
2b6f59217 NEWS: Add an item about conditional NAT.
f8cc28913 northd: Use the NAT match column.
c7b5a2066 nb: Add support for match and priority in NAT.
1e4627ce5 nothd: Unify the priority calculation for NAT flows.
a0a5dd8ce controller: Store src_mac, src_ip in svc_monitor struct.
4e3115f6b tests: Fix flaky "ovn-controller - restart ...".
4ea3a1ea1 tests: Fixed flaky "ovn-ic – AZ register".
d88e49625 tests: Fixed multiple flaky tests.
3a5829738 tests: Fixed flaky "NB_Global and SB_Global I+P".
9dc7fcb20 tests: Fixed flaky "Logical router IP for NAT".
524a399fc tests: Fixed "lflow cache operations".
c0ef76883 tests: Cleanup on_exit commands.
e5d187b26 controller: Handle postponed ports release.
d4c566def controller: Handle postponed ports claims.
8c9cf2afb controller: Fix deletion of container parent port.
a680c9646 controller: Nonvif related lports handling.
42353552f controller: Fix iface-id-ver handling.
7b4395969 controller: Fix issue with ct_commit encode.
cc4187b4b northd: Skip arp-proxy flows if the lsp is a router port.
6510ee45f northd: Refactor chassisresident port checking.
373c458e2 northd: Don't reparse lport's addresses while adding L2_LKUP flows.
70f35e1a7 ovn-nbctl: Show bfd option man for lr-policy-add command.
d1638b9b1 tests: Fix flaky PMTUD flows test.
c0cf18a89 ovn-controller: Initialize bitmap to zero.
4376b4d41 Inclusive language substitutions: "sanity-check".
6d32d2524 Inclusive language substitutions: "blacklist/whitelist".
072ca534b Inclusive language substitutions: "master".
3694b3abb Inclusive language substitutions: "abort".
3b7da5ac2 controller: Allow br-int connection via other methods.
853705cb9 lflow: Add missing sample flow.
7e2b45df7 northd: Fix the match not being cleared inside the loop.
3faadc76a northd: Fix pmtud for non routed traffic.
7abae8142 northd: Fix an issue wrt mac binding aging.
47915c4c5 ci: Bump the Fedora container to 40.
3bd668c4d ci: Make sure that we are using proper image.
bc9df4a20 ci: Add missing packages to run Fedora image in GH CI.
e8c30eecc tests: Replace wget with curl for failing commands.
29652badd ci: Update the Ubuntu container to 24.04.
27678f4df ovs: Bump the submodule to the tip of branch-3.3.
a02ac71fa ci: Pin Fedora version for the build-rpm job.
e5d093cc2 controller: Avoid use after free in LB I-P.
b0609e603 docs: List supported rolling upgrade paths.
ab593df55 docs: Explain nature of ovs dependency.
12412b13c ovn-ctl: Support for --config-file ovsdb-server option.
7f1218a52 northd, ic: Fix handling of ovn-appctl resume.
f56ad4170 northd: Add lsp option force_fdb_lookup.
2609cd9f0 controller: Fix an issue wrt cleanup of stale patch port.
b994d1d3b docs: Typo. Remove duplicated "to".
e3368cba9 Documentation: Change link from ovs to ovn in "Submitted-at" example.
4f614b4b9 controller: Use datapath key for the mac cache thresholds.
fb96ae367 controller: Merge the mac-cache and mac-learn.
4a8085715 controller: Rename mac_cache to to mac-cache.
ddf051cbc northd, controller: Handle tunnel_key change consistently.
d06e49747 northd: Fix the comment about route priorities.
cce476ce3 controller: Track individual address set constants.
1f7df5d86 northd: Remove unused nbrp arg in ls_port_reinit.
7fbd2b3e0 northd: Remove unused `sb` arg in ls_port_create.
77ed4be62 northd: Don't create pb in ls_port_init too early.
50dee2246 tests: Correct tunnel ids exhaustion scenario.
db4ea9d90 northd: Don't detach op->list when it wasn't used.
86bf0826a northd: Don't cleanup op in ovn_port_allocate_key.
8f18b3b6c ci: Keep the container version pinned.
0a644beda ci: Fix OPTS not being passed to OSX builds.
dfb167b24 Add dh-python to debian/control.
dce4abfc6 northd, tests: DHCP Relay Agent support for overlay IPv4 subnets.
683a3a36d controller: DHCP Relay Agent support for overlay IPv4 subnets.
f51e41096 actions: DHCP Relay Agent support for overlay IPv4 subnets.
9e0119887 docs: Typo. Remove duplicated "to" in ovn-sb.xml.
adc390b61 tests: Fix netcat 7.94 issues.
2dbe65654 northd: Do not incrementally proccess changes for disabled LR.
40136a2f2 northd: Fix direct access to SNAT network.
d9c97878e actions: New action ct_commit_to_zone.
ca8fde01c controller: Remove the ovn-set-local-ip option.
9e8f6f3d2 ovn-nbctl: Document "--portrange" in the manpage.
1135d3dd2 utilities: Add missing bfd option in ovn-nbctl manpage.
c141d8b19 northd, controller: Use paused controller action for packet buffering.
42ef6e376 ovs: Bump the submodule to the tip of branch-3.3.
1c9656714 ci: Make sure that multinode test runs on correct branch.
1d0df1c8c AUTHORS: Add Kacper Kamiński.
444f74391 Fix typo in README.
8c36a1059 tests: Ignore log setting extended ack support failed.
73bbf6b90 ovn-trace: Make sure we don't exit when the port is not specified.
0d4e087a6 treewide: Remove remaining XenServer references.
990d369f2 northd: Fix BFD for policy routing.
924d0ff0b Start mcast id allocations from OVN_MIN_IP_MULTICAST.
add441fa5 actions: Remove ct_commit_v1.
69ec36eba tests: Add macro for checking flows after recompute.
c6fa5a5ee treewide: Rename references from OvS master to main.
87d0c9e71 ovn-ctl: Use the current user for default file permissions.
762ae66cd controller: Change dns resolution to async.
de76bed42 Missed during test simplification.
5dd573757 Merge QoS logical pipelines.
a08518783 acl-log: Properly log the "pass" verdict.
e2677951e automake: Make system tests dependent of ovn-macro.
b8ba1948a ovn-controller.at: Fix flaky test "ofctrl wait before clearing flows".
a1f165a7b northd: fix infinite loop in ovn_allocate_tnlid()
99ee066c3 pinctrl: Fixed 100% cpu on ovs connection loss.
2fd02e60b pinctrl: Fix missing MAC_Bindings.
8d46e5427 tests: Add macros to pause controller updates.
bbf2f9419 ofctrl: Wait at S_WAIT_BEFORE_CLEAR only once.
8bad19ce8 Update post OVS-OVN split TODO list.
d191257c5 tests: Add multinode-testsuite to .gitinore.
77a24fc1f utilities/docker: Fix up container build.
ecf25243d Documentation: Remove references to TravisCI.
c794d3450 treewide: Remove some of the post OVS-OVN split leftovers.
f1f7ac1e3 rhel: Update docs.
6b656e5ab ovn-sandbox: Rename script from ovs-sandbox to ovn-sandbox.
e8509e3f1 Documentation: Fix reference to the default branch.
d042067de northd: Fix population of ipv6_ra_prefixes from IPv6 PD.
a0ac4d1f9 controller: Use multicast for IPv6 Prefix Delegation.
4494e0215 ovn-ic: Avoid igmp/mld traffic flooding.
f0a5610a3 tests: Use sync command in ovn-ic tests.
fe0eba148 tests: Move ovn interconnection tests to ovn-ic.at.
c9163c304 IC: Tansit switch don't flood mcast traffic to router ports if matches igmp group.
85ca2b753 northd: Don't skip transit switch LSP when creating mcast groups.
e6bce5f85 northd: Fix NAT configuration with --add-route option for gw-router.
dc52bf70c controller: Fix ofctrl memory usage underflow.
cb5d5bb3d docs: Remove ref. to "ovn-sbctl --no-wait".
0695b3dbf Fix broken link for LTS release.
db00352b7 ovn-controller: Fix busy loop when ofctrl is disconnected.
0a3582409 tests: Address netcat 7.94 changes.
e8ac18104 tests: Add helper for tcpdump.
0e742e871 tests: Ignore transaction errors in MAC Binding.
f614335ab tests: Remove table numbers from "action parsing".
1d2add582 tests: Make "action parsing" support expansion.
180749965 tests: Use the ovn-debug binary to determine table numbers.
117573e2d utilities: Add ovn-debug binary tool.
8840c6c05 checkpatch: Add rule to check for hardcoded table numbers.
348a2967d tests: Remove hardcoded numbers from comments.
fca9297b2 utilities: Make database connection optional for ovn-detrace.
6fcf89816 ovn-ctl: Add ssl-ciphers and protocols support.
82d8ea6c9 Update copyright year to 2024.
3bc6e55a8 ovn-controller: Stop dropping bind_vport requests immediately after handling.
8ed2e332c OVN-SB: Exposes igmp group protocol version through IGMP table.
309b0fbe1 tests: Fix flaky "lr multiple gw ports" test.
475c96ac3 pinctrl: Fix prefix delegation.
4725ad125 controller: Avoid double controller action for ICMP errors.
894ffe8a8 controller: Release container lport when releasing parent port.
118625df0 ovn-nb: Add documentation for disable_arp_nd_rsp option
63b35e2f6 github: Reduce ASLR entropy to be compatible with asan in llvm 14.
db0c55689 controller: Set check_tnl_key for BFD on tunnel ifaces.
a55eb4a15 northd: Fix NULL pointer deref within build_bfd_table.
dbca38fce tests: Skip EDNS test if the scapy version doesn't support it.
ffe267317 northd: Don't skip the unSNAT stage for traffic towards VIPs.