Hi,

I'm currently exploring ways of moving parts of XenServer/XCP's domain0 into 
helper domains and I think the openvswitch may be able to help. FYI here's the 
kind of thing I'm thinking of:

* Client sends HTTP request to domain0's management IP (call this M)
* xapi binds a random local port on the management IP (call this P)
* xapi boots up a helper domain, tells it to listen on M:P
* xapi uses openflow (or ovs-ofctl) to program the local openvswitch to 
redirect TCP traffic to M:P to the helper domain's switch port, while 
translating the MACs using mod_dl_{src,dst}
* xapi issues an HTTP 302 redirect to M:P

Although sharing the management IP between two domains is a bit hacky :) it's 
nice not to require the admin to configure a means for xapi to allocate IP 
addresses for all its non-domain0 children.

Apart from comments on the general (in)sanity (which I'm also interested in), 
I'm curious about how connecting a controller would affect this scheme. My 
understanding is that the controller "owns" all the rules in the lower 
switches: would a controller always wipe out these "local" rules I've added, or 
does that just depend on the controller? Is there any general way to prevent a 
controller doing that, for some small subset of the rules?

Any comments appreciated.

Cheers,
Dave
 

_______________________________________________
discuss mailing list
discuss@openvswitch.org
http://openvswitch.org/mailman/listinfo/discuss_openvswitch.org

Reply via email to