When caclmgrd processes any ACL table change, this results in rules flushed and readded which was introduced in #114 . However in this flow the BFD and vxlan rules were added at the end which may result in traffic loss because of the DROP rule for ip2me installed. To overcome this added BFD and vxlan rules at the very start so that there is no drop seen for BFD.
mssonicbld
commented
2 months ago
Fixes sonic-net/sonic-buildimage#19762
When caclmgrd processes any ACL table change, this results in rules flushed and readded which was introduced in #114 . However in this flow the BFD and vxlan rules were added at the end which may result in traffic loss because of the DROP rule for ip2me installed. To overcome this added BFD and vxlan rules at the very start so that there is no drop seen for BFD.
Existing UT should verify the flows.
Additionally manually verified