I my case, I have a pool (cluster) of servers and I want to Implement Layer
7 load-balancer (content-aware load- balancer). For this, I need to get
first 4 packet and then allocate a server in my cluster according to HTTP
header.

On Sat, Sep 12, 2015 at 7:04 PM, Gal Sagie <gal.sa...@gmail.com> wrote:

> If you want a "transparent" proxy, you don't need TCP termination you can
> just forward the packet.
> For your question, you can have a match all send to controller flow (lets
> say with priority 100), then when you decide you don't need
> the traffic to go to the controller you can install a flow with higher
> priority for that session. (with forward actions)
> (in the mean time your controller can just forward the packets to the
> destination after it inspected them or did what ever it is
> you want to do)
>
> Another thing you can leverage is that OVS in master branch now has an
> integration with conntrack.
> You might be able to use it (
> http://openvswitch.org/support/ovscon2014/17/1030-conntrack_nat.pdf)
>
> What are you trying to do that require TCP termination?
>
>
>
>
>
> On Sat, Sep 12, 2015 at 4:21 PM, Seyyed Hesamoddin Ghasemi <
> s.hesam.ghas...@gmail.com> wrote:
>
>> Why not? As I know OVS have access to all header fields in layer 2 to
>> layer 4!
>> How can I Implement a simple proxy using OVS? I mean, how can get packet
>> from a source node and send it to a destination node in a transparent
>> manner?
>>
>> I need to get first 4 packet of a tcp session in the controller (as a
>> proxy) and then forward the rest of packets using OVS without intervention
>> of the controller and with keep current tcp session. How can I do that?
>>
>>
>> On Sat, Sep 5, 2015 at 10:19 PM, Justin Pettit <jpet...@nicira.com>
>> wrote:
>>
>>>
>>> > On Sep 5, 2015, at 8:53 AM, Seyyed Hesamoddin Ghasemi <
>>> s.hesam.ghas...@gmail.com> wrote:
>>> >
>>> > Hi every body,
>>> > I need to develop a proxy, and for this I should add/sub a constant
>>> value to sequence number and ack number in ovs, Could somebody please help
>>> me?
>>>
>>> OVS doesn't provide any visibility into the sequence numbers of TCP
>>> packets.
>>>
>>> --Justin
>>>
>>>
>>>
>>
>>
>> --
>> Seyyed Hesamoddin Ghasemi
>>
>> _______________________________________________
>> discuss mailing list
>> discuss@openvswitch.org
>> http://openvswitch.org/mailman/listinfo/discuss
>>
>>
>
>
> --
> Best Regards ,
>
> The G.
>



-- 
Seyyed Hesamoddin Ghasemi
_______________________________________________
discuss mailing list
discuss@openvswitch.org
http://openvswitch.org/mailman/listinfo/discuss

Reply via email to