Skip to content

Add backend acl template#11220

Merged
neethajohn merged 1 commit intosonic-net:masterfrom
neethajohn:backend_acl
Jul 6, 2022
Merged

Add backend acl template#11220
neethajohn merged 1 commit intosonic-net:masterfrom
neethajohn:backend_acl

Conversation

@neethajohn
Copy link
Contributor

Signed-off-by: Neetha John [email protected]

Why I did it

Storage backend has all vlan members tagged. If untagged packets are received on those links, they are accounted as RX_DROPS which can lead to false alarms in monitoring tools. Using this acl to hide these drops.

How I did it

Created a acl template which will be loaded during minigraph load for backend. This template will allow tagged vlan packets and dropped untagged

How to verify it

Unit tests

Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006
  • 202012
  • 202106
  • 202111
  • 202205

Signed-off-by: Neetha John <[email protected]>
@neethajohn neethajohn marked this pull request as ready for review June 30, 2022 01:46
@neethajohn neethajohn requested review from a team and lguohan as code owners June 30, 2022 01:46
@neethajohn neethajohn requested review from prsunny and yxieca June 30, 2022 17:44
@neethajohn neethajohn merged commit 7cd1001 into sonic-net:master Jul 6, 2022
@neethajohn neethajohn deleted the backend_acl branch July 6, 2022 17:24
yxieca pushed a commit that referenced this pull request Jul 7, 2022
Why I did it
Storage backend has all vlan members tagged. If untagged packets are received on those links, they are accounted as RX_DROPS which can lead to false alarms in monitoring tools. Using this acl to hide these drops.

How I did it
Created a acl template which will be loaded during minigraph load for backend. This template will allow tagged vlan packets and dropped untagged

How to verify it
Unit tests

Signed-off-by: Neetha John <[email protected]>
qiluo-msft pushed a commit that referenced this pull request Jul 8, 2022
Why I did it
Storage backend has all vlan members tagged. If untagged packets are received on those links, they are accounted as RX_DROPS which can lead to false alarms in monitoring tools. Using this acl to hide these drops.

How I did it
Created a acl template which will be loaded during minigraph load for backend. This template will allow tagged vlan packets and dropped untagged

How to verify it
Unit tests

Signed-off-by: Neetha John <[email protected]>
skbarista pushed a commit to skbarista/sonic-buildimage that referenced this pull request Aug 17, 2022
Why I did it
Storage backend has all vlan members tagged. If untagged packets are received on those links, they are accounted as RX_DROPS which can lead to false alarms in monitoring tools. Using this acl to hide these drops.

How I did it
Created a acl template which will be loaded during minigraph load for backend. This template will allow tagged vlan packets and dropped untagged

How to verify it
Unit tests

Signed-off-by: Neetha John <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants