ovs的dot1q-tunnel的vlan-mode

# man ovs-vswitchd.conf.db

              dot1q-tunnel
                     A  dot1q-tunnel  port  is somewhat like an access port. Like an access port, it carries packets on the single VLAN specified in the tag column and this VLAN,
                     called the service VLAN, does not appear in an 802.1Q header for packets that ingress or egress on the port. The main difference lies in  the  behavior  when
                     packets  that  include a 802.1Q header ingress on the port. Whereas an access port drops such packets, a dot1q-tunnel port treats these as double-tagged with
                     the outer service VLAN tag and the inner customer VLAN taken from the 802.1Q header. Correspondingly, to egress on the port, a packet  outer  VLAN  (or  only
                     VLAN) must be tag, which is removed before egress, which exposes the inner (customer) VLAN if one is present.

                     If cvlans is set, only allows packets in the specifie