On the ACL preceding or integrated with the sfc flow - I think ACL has to
be applied first then the classifier channels the packets to the respective
network that has VNFs. The scope of sfc flow programming is generally
orthogonal to how the network is setup and where classifier is placed,
which are typically done during the system setup. Typically the classifier
adds the service chain id, which probably better off past the acl..

                                   internet
                                        /\
                     __________|____
     <ACL>----| classifier |(GW) |-------> vnfs
                     ~~~~~~~~~~~~~
_______________________________________________
discuss mailing list
discuss@openvswitch.org
http://openvswitch.org/mailman/listinfo/discuss

Reply via email to