Hi, Amir. I just sent a first-cut of the design document to ovs-dev: http://openvswitch.org/pipermail/dev/2014-May/040567.html
I hope it's useful. --Justin On May 14, 2014 at 1:52:44 PM, Amir Sadoughi (amir.sadou...@gmail.com) wrote: > Thanks, Justin. When you have a chance, I'd like to see what you expect the > ovs-ofctl interface to look like for conntrack'd flows. In the future, when > conntrack becomes available in an OVS release, I'm interested in > implementing conntrack enabled firewalls for OpenStack Neutron. > > Amir > > > On Wed, May 14, 2014 at 11:00 AM, Justin Pettit wrote: > > > Thanks to those who attended my "Open vSwitch and the Intelligent Edge" > > presentation at the OpenStack Summit yesterday. From my understanding, the > > video should be available on YouTube within the next couple days. I've > > uploaded the slides and put a link on the Documentation page at > > openvswitch.org, but here's a direct link: > > > > http://openvswitch.org/slides/OpenStack-140513.pdf > > > > In this talk, I describe advanced operations that can be achieved due to > > OVS's location at the edge of the network. With its unique position, it has > > greater context and the ability to enforce policies early. I describe the > > effects on networking and security, and dive into specific examples that > > can be best handled with an intelligent edge. Topics include: > > > > - Guest introspection > > - Inferring state from the edge > > - Implementing efficient security policies > > - Elephant flow detection and handling > > > > I hope you find it interesting. > > > > --Justin > > > > > > > > _______________________________________________ > > discuss mailing list > > discuss@openvswitch.org > > http://openvswitch.org/mailman/listinfo/discuss > > > _______________________________________________ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinfo/discuss
