Skip to content

[acl]Update acl type check logic #1886

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Sep 6, 2021

Conversation

bingwang-ms
Copy link
Contributor

Signed-off-by: bingwang [email protected]

What I did
This PR is to fix sonic-net/sonic-buildimage#8585

Why I did it
Updating ACL_TABLE:EVERFLOW and ACL_TABLE:EVERFLOWV6 separately will cause the EVERFLOW table being recreated rather than being updated.
The root cause for this issue is a minor logic error in https://github.com/Azure/sonic-swss/blob/12f0ee7888be5efac5b4213e92d77a030832c40b/orchagent/aclorch.cpp#L3164-L3170

The MIRROR and MIRRORV6 should be treated as the same type on Broadcom platform.

How I verified it
Verified by replacing orchagent with the updated one, and update ACL_TABLE|EVERFLOWV6 table by redis-cli, and then check syslog.
Before this update, the ACL_TABLE|EVERFLOW table will be removed and ACL_TABLE|EVERFLOWV6 will be created.
After this update, the ACL_TABLE|EVERFLOW table will be updated.

Details if related
No.

@bingwang-ms bingwang-ms requested a review from prsunny as a code owner August 25, 2021 12:43
@bingwang-ms
Copy link
Contributor Author

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@bingwang-ms bingwang-ms merged commit a8d6246 into sonic-net:master Sep 6, 2021
qiluo-msft pushed a commit that referenced this pull request Sep 7, 2021
raphaelt-nvidia pushed a commit to raphaelt-nvidia/sonic-swss that referenced this pull request Oct 5, 2021
EdenGri pushed a commit to EdenGri/sonic-swss that referenced this pull request Feb 28, 2022
Remove secrets from dump files.

What I did
    Add bash functions to remove secrets from dump files.
How I did it
    For tacacs key, radius key, snmp community srring, use sed command with regex to remove user secrets from dump files.
    For certs, update tar command exclude list to remove those certs from dump file.
How to verify it
    Run 'show techsupport' command and check secrets removed from dump files.
Previous command output (if the output of a command-line utility has changed)
New command output (if the output of a command-line utility has changed)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[ACL][broadcom] EVERFLOW table is recreated when EVERFLOWV6 table is being updated
3 participants