Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Given the nature of distributed configuration required to setup bridges and flow rules on multiple hosts, there will be windows of time where the configuration is not up to date or as expected to reflect correct VPC network topology. While eventual consistency can be achieved, Following Following principles shall be used to mitigate the impact:

  • For eventual consistency, sync mechanism need to be used to keep the configuration of OVS switches and flow rules are consistent in consistence with topology (how it spans the physical hosts) of VPC and ingress/egress ACL's applied on the tiers 
  • wherever possible fall back to data path where packet is sent to VPC VR, so that optimization achieved with distributed routing and network acls is may not leveraged but functionality is not lost because VPC VR will perform ACL and routing anyway.

...