Skip to content

[submodule] Update sonic-sairedis for VPP CoPP dataplane enforcement - #29465

Open
nhegde-microsoft wants to merge 1 commit into
sonic-net:masterfrom
nhegde-microsoft:copp-vpp-enablement-submodule-bump
Open

nhegde-microsoft wants to merge 1 commit into
sonic-net:masterfrom
nhegde-microsoft:copp-vpp-enablement-submodule-bump

Conversation

@nhegde-microsoft

@nhegde-microsoft nhegde-microsoft commented Sep 10, 2026 •

Copy link
Copy Markdown
Contributor

Why I did it

Advance src/sonic-sairedis to the merged CoPP dataplane implementation so the CoPP plugin already pinned in platform/vpp has its matching SAI programming layer.

Merged prerequisites:

Current sonic-buildimage master already pins the VPP merge commit through #29888. After rebasing, this PR therefore only needs the sonic-sairedis gitlink update. The final sairedis merge commit is also a descendant of the target in the pending automated bump #29924, so it includes that update.

Next in the landing sequence:

How I did it

  • Synced the fork's master with current upstream master.
  • Rebased the PR branch onto upstream master.
  • Replaced the stale fork-head gitlinks with final upstream merge commits; the VPP delta disappeared because upstream master already contains it.
  • Reduced the resulting PR to one signed-off commit changing only src/sonic-sairedis from a3d3cf6147d650900a37b8a21629eed87b93a704 to a706e04cfb6b3de7e756e9462216b2962bdf7bad.

How to verify it

  • The new sairedis pin is a fast-forward descendant of the current master pin.
  • Feature validation before merge passed all 24 applicable tests/copp/test_copp.py subtests on vlab-vpp-01.
  • This PR's fresh CI should rebuild BuildVS vpp against the final upstream VPP and sairedis merge commits.

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@mssonicbld

Copy link
Copy Markdown
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).

@nhegde-microsoft
nhegde-microsoft marked this pull request as ready for review September 10, 2026 18:33
Copilot AI lite review requested due to automatic review settings September 10, 2026 18:33
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The submodule pins reference open PR head SHAs (from fork branches) and should be updated post-merge to stable upstream commit(s) to avoid non-reproducible/broken submodule fetches.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR bumps two git submodule pins (src/sonic-sairedis and platform/vpp) to pick up SONiC-VPP CoPP dataplane enforcement support (real VPP policers + new VPP CoPP plugins), aligning the buildimage with the companion feature work in those repos.

Changes:

  • Update platform/vpp submodule pointer to 0a879f227e12648442cf2848108d3529517e2f1b.
  • Update src/sonic-sairedis submodule pointer to cf3ea34383e8769842e8de6b3237cfd3ed86653d.

Review note (blocking):

  • Both new gitlinks currently point at open upstream PR head SHAs (sonic-platform-vpp#281 and sonic-sairedis#2070) whose HEAD repos are fork branches; if those PRs are merged via squash/rebase (common), these exact SHAs will not land on sonic-net/*@master, making the submodule pins non-reproducible and potentially breaking fresh clones/CI submodule fetches. This buildimage PR should be updated after the companion PRs merge to pin to the final merged upstream commit(s) (or a tag).
File summaries
File Description
platform/vpp Submodule gitlink updated to pick up new VPP CoPP plugins needed for dataplane enforcement.
src/sonic-sairedis Submodule gitlink updated to pick up VPP SAI POLICER/HOSTIF_TRAP/HOSTIF_TRAP_GROUP support needed for CoPP enforcement.
Review details
  • Files reviewed: 2/2 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@nhegde-microsoft nhegde-microsoft changed the title [submodule] Bump sonic-sairedis and platform/vpp for CoPP dataplane enforcement [DO NOT MERGE][submodule] Bump sonic-sairedis and platform/vpp for CoPP dataplane enforcement Sep 10, 2026
Copilot AI review requested due to automatic review settings September 18, 2026 20:02
@nhegde-microsoft
nhegde-microsoft force-pushed the copp-vpp-enablement-submodule-bump branch from 292a6d6 to f27aad2 Compare September 18, 2026 20:02
@mssonicbld

Copy link
Copy Markdown
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The pinned code leaves BGPV6 unpoliced and mishandles overlapping or moved CoPP policer bindings.

Get a fresh assessment by requesting another Copilot review.

Review details
  • Files reviewed: 2/2 changed files
  • Comments generated: 0 new
  • Review effort level: Lite

Copilot AI review requested due to automatic review settings September 19, 2026 03:15
@mssonicbld

Copy link
Copy Markdown
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

The selected sonic-sairedis pin contains a compile-breaking stale IP2ME deferred-work call, and BGPV6 is not attached to an IPv6 punt arc.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: None

Advance src/sonic-sairedis to the upstream merge commit for sonic-sairedis#2070. The companion sonic-platform-vpp#281 merge commit is already pinned by current sonic-buildimage master after the rebase, completing the matched SAI and VPP-plugin CoPP dataplane pair.

Signed-off-by: Nikhil Hegde <nikhilhegde@microsoft.com>
Copilot AI lite review requested due to automatic review settings October 2, 2026 15:47
@nhegde-microsoft
nhegde-microsoft force-pushed the copp-vpp-enablement-submodule-bump branch from 56b9cbf to 202d73d Compare October 2, 2026 15:47
@mssonicbld

Copy link
Copy Markdown
Collaborator

/azp run Azure.sonic-buildimage

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).

@nhegde-microsoft nhegde-microsoft changed the title [DO NOT MERGE][submodule] Bump sonic-sairedis and platform/vpp for CoPP dataplane enforcement [submodule] Update sonic-sairedis for VPP CoPP dataplane enforcement Oct 2, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Required companion implementation commits must be merged before approval.

Review effort: Lite
Findings: None

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants