2 Simple conntrack rules

 

1.
OVS_BR=ovs-sriov

ovs-ofctl del-flows $OVS_BR

#set arp to behave normally, ip will mark trk and then proceed to table 1
ovs-ofctl add-flow $OVS_BR "table=0,arp,action=normal"
ovs-ofctl add-flow $OVS_BR "table=0,ip,ct_state=-trk,action=ct(table=1)"

#set new ip flows to be committed, and to then behave normally
ovs-ofctl add-flow $OVS_BR "table=1,priority=1,ip,ct_state=+trk+new,action=ct(commit),normal"

#set established ip flows to behave normally
ovs-ofctl add-flow $OVS_BR "table=1,priority=1,ip,ct_state=+trk+est,action=normal"
ovs-dpctl dump-conntrack

2.
br=ovs-sriov
ovs-ofctl add-flow $br dl_type=0x0806,actions=NORMAL

proto=udp
ovs-ofctl add-flow $br "table=0, $proto,ct_state=-trk actions=ct(table=1)"
ovs-ofctl add-flow $br "table=1, $proto,ct_state=+trk+new actions=ct(commit),normal"
ovs-ofctl add-flow $br "table=1, $proto,ct_state=+trk+est actions=normal"

proto=tcp
ovs-ofctl add-flow $br "table=0, $proto,ct_state=-trk actions=ct(table=1)"
ovs-ofctl add-flow $br "table=1, $proto,ct_state=+trk+new actions=ct(commit),normal"
ovs-ofctl add-flow $br "table=1, $proto,ct_state=+trk+est actions=normal"

ovs-ofctl dump-flows $br
ovs-dpctl dump-conntrack