Open Stack

Team,

   I've created a security group with a remote security group attached to
it.

openstack security group rule create --ethertype=IPv4 --protocol tcp
> --remote-group server-grp --ingress --dst-port=22 application-grp


when I create VM with server-grp , I can see two cookies in br-int ovs
bridge, one with default cookie and another new cookie with conjunction
flows,  is it expected behavior?

ubuntu at req-generic-65-d012-mn:~$ sudo ovs-ofctl dump-flows br-int |
awk '{print $1}' | sort -n | uniq
cookie=0x12b7adbe73614620,
cookie=0x207d02d6bbcf499e,
NXST_FLOW
ubuntu at req-generic-65-d012-mn:~$ sudo ovs-ofctl dump-flows br-int |
grep "0x207d02d6bbcf499e"
 cookie=0x207d02d6bbcf499e, duration=335.421s, table=82, n_packets=0,
n_bytes=0, idle_age=335,
priority=70,ct_state=+est-rel-rpl,ipv6,reg6=0x1,ipv6_src=fdd8:a3ce:31ae:0:f816:3eff:fe8a:f751
actions=conjunction(8,1/2)
 cookie=0x207d02d6bbcf499e, duration=335.420s, table=82, n_packets=0,
n_bytes=0, idle_age=335,
priority=70,ct_state=+new-est,ipv6,reg6=0x1,ipv6_src=fdd8:a3ce:31ae:0:f816:3eff:fe8a:f751
actions=conjunction(9,1/2)
 cookie=0x207d02d6bbcf499e, duration=335.420s, table=82, n_packets=0,
n_bytes=0, idle_age=335,
priority=70,ct_state=+est-rel-rpl,ip,reg6=0x1,nw_src=10.0.0.38
actions=conjunction(16,1/2)
 cookie=0x207d02d6bbcf499e, duration=335.420s, table=82, n_packets=0,
n_bytes=0, idle_age=335,
priority=70,ct_state=+new-est,ip,reg6=0x1,nw_src=10.0.0.38
actions=conjunction(17,1/2)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20211103/4fc63840/attachment.htm>