Description
The SAI ACL entry action SAI_ACL_ENTRY_ATTR_ACTION_SET_PACKET_COLOR (set a packet's color to GREEN/YELLOW/RED) is only reachable today through the P4Orch/P4RT path (orchagent/p4orch/). The standard CONFIG_DB AclOrch pipeline has no mapping for it, so a CONFIG_DB ACL rule cannot set packet color even on platforms whose SAI advertises the action.
Steps to reproduce
Define a custom ACL_TABLE_TYPE whose ACTIONS should set packet color, and an ACL_RULE using it. There is no recognized CONFIG_DB action string, so AclOrch never programs SAI_ACL_ENTRY_ATTR_ACTION_SET_PACKET_COLOR.
Expected behavior
A CONFIG_DB ACL rule action (PACKET_COLOR_ACTION = GREEN/YELLOW/RED) maps to SAI_ACL_ENTRY_ATTR_ACTION_SET_PACKET_COLOR, gated by the platform's queried ACL action capability (so platforms that do not support it simply reject the table, no behavior change for anyone else).
Notes
Verified on Broadcom TH5 (SAI advertises SET_PACKET_COLOR on ingress): the rule programs the action in ASIC_DB and the corresponding field-processor action in hardware. Correctly capability-gated on platforms that do not advertise it.
Description
The SAI ACL entry action
SAI_ACL_ENTRY_ATTR_ACTION_SET_PACKET_COLOR(set a packet's color to GREEN/YELLOW/RED) is only reachable today through the P4Orch/P4RT path (orchagent/p4orch/). The standard CONFIG_DBAclOrchpipeline has no mapping for it, so a CONFIG_DB ACL rule cannot set packet color even on platforms whose SAI advertises the action.Steps to reproduce
Define a custom
ACL_TABLE_TYPEwhoseACTIONSshould set packet color, and anACL_RULEusing it. There is no recognized CONFIG_DB action string, soAclOrchnever programsSAI_ACL_ENTRY_ATTR_ACTION_SET_PACKET_COLOR.Expected behavior
A CONFIG_DB ACL rule action (
PACKET_COLOR_ACTION=GREEN/YELLOW/RED) maps toSAI_ACL_ENTRY_ATTR_ACTION_SET_PACKET_COLOR, gated by the platform's queried ACL action capability (so platforms that do not support it simply reject the table, no behavior change for anyone else).Notes
Verified on Broadcom TH5 (SAI advertises
SET_PACKET_COLORon ingress): the rule programs the action in ASIC_DB and the corresponding field-processor action in hardware. Correctly capability-gated on platforms that do not advertise it.