I am following the tutorial at
http://blog.spinhirne.com/2016/09/an-introduction-to-ovn-routing.html
I have implemented tenant1, dmz, inside, vm1, and vm2.
Vm1 can ping vm2.
===========
But shouldn't vm1 and vm2 be able to successfully ping the tenant1 gateway
(tenant1-dmz) of 172.16.255.129?
===========
@h01:/home/vagrant# ip netns exec vm1 ping 172.16.255.131
PING 172.16.255.131 (172.16.255.131) 56(84) bytes of data.
64 bytes from 172.16.255.131: icmp_seq=1 ttl=64 time=0.514 ms
64 bytes from 172.16.255.131: icmp_seq=2 ttl=64 time=0.067 ms
^C
--- 172.16.255.131 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1030ms
h01:/home/vagrant# ip netns exec vm1 ping 172.16.255.129
PING 172.16.255.129 (172.16.255.129) 56(84) bytes of data.
^C
--- 172.16.255.129 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms
============================================
It seems that arp sees the gateway:
h01:/home/vagrant# ip netns exec vm2 ip neigh
172.16.255.130 dev vm2 lladdr 00:00:00:00:02:30 STALE
172.16.255.129 dev vm2 lladdr 00:00:00:00:02:01 REACHABLE
But no icmp replies.
What follows is a bunch of configuration and debug info, if someone can help
determine
============================================
@c01:/home/vagrant# uname -a
Linux c01 4.8.6-rpb #1 SMP Mon Oct 31 14:47:48 ADT 2016 x86_64 GNU/Linux
============================================
The configuration for controller:
c01:/home/vagrant# cat b.sh
ovn-nbctl lr-add tenant1
ovn-nbctl lrp-add tenant1 tenant1-dmz 00:00:00:00:02:01 172.16.255.129/26
ovn-nbctl lrp-add tenant1 tenant1-inside 00:00:00:00:03:01 172.16.255.193/26
ovn-nbctl ls-add dmz
ovn-nbctl lsp-add dmz dmz-tenant1
ovn-nbctl lsp-set-type dmz-tenant1 router
ovn-nbctl lsp-set-addresses dmz-tenant1 00:00:00:00:02:02
ovn-nbctl lsp-set-options dmz-tenant1 router-port=tenant1-dmz
ovn-nbctl ls-add inside
ovn-nbctl lsp-add inside inside-tenant1
ovn-nbctl lsp-set-type inside-tenant1 router
ovn-nbctl lsp-set-addresses inside-tenant1 00:00:00:00:03:02
ovn-nbctl lsp-set-options inside-tenant1 router-port=tenant1-inside
ovn-nbctl lsp-add dmz dmz-vm1
ovn-nbctl lsp-set-addresses dmz-vm1 "00:00:00:00:02:30 172.16.255.130"
ovn-nbctl lsp-set-port-security dmz-vm1 "00:00:00:00:02:30 172.16.255.130"
ovn-nbctl lsp-add dmz dmz-vm2
ovn-nbctl lsp-set-addresses dmz-vm2 "00:00:00:00:02:31 172.16.255.131"
ovn-nbctl lsp-set-port-security dmz-vm2 "00:00:00:00:02:31 172.16.255.131"
ovn-nbctl lsp-add inside inside-vm3
ovn-nbctl lsp-set-addresses inside-vm3 "00:00:00:00:03:94
172.16.255.194"
ovn-nbctl lsp-set-port-security inside-vm3 "00:00:00:00:03:94
172.16.255.194"
ovn-nbctl lsp-add inside inside-vm4
ovn-nbctl lsp-set-addresses inside-vm4 "00:00:00:00:03:95
172.16.255.195"
ovn-nbctl lsp-set-port-security inside-vm4 "00:00:00:00:03:95
172.16.255.195"
dmzDhcp="$(ovn-nbctl create DHCP_Options cidr=172.16.255.128/26 \
options="\"server_id\"=\"172.16.255.129\"
\"server_mac\"=\"00:00:00:00:02:01\" \
\"lease_time\"=\"3600\" \"router\"=\"172.16.255.129\"")"
echo $dmzDhcp
insideDhcp="$(ovn-nbctl create DHCP_Options cidr=172.16.255.192/26 \
options="\"server_id\"=\"172.16.255.193\"
\"server_mac\"=\"00:00:00:00:03:01\" \
\"lease_time\"=\"3600\" \"router\"=\"172.16.255.193\"")"
echo $insideDhcp
ovn-nbctl lsp-set-dhcpv4-options dmz-vm1 $dmzDhcp
ovn-nbctl lsp-set-dhcpv4-options dmz-vm2 $dmzDhcp
#ovn-nbctl lsp-get-dhcpv4-options z3-srvr-vm11
ovn-nbctl lsp-set-dhcpv4-options inside-vm3 $insideDhcp
ovn-nbctl lsp-set-dhcpv4-options inside-vm3 $insideDhcp
============================================
configuration for host 1
h01:/home/vagrant# cat b.sh
ovs-vsctl add-br br-int -- set Bridge br-int fail-mode=secure
ovs-vsctl set open . external-ids:ovn-remote=tcp:10.127.101.2:6642
ovs-vsctl set open . external-ids:ovn-encap-type=geneve
ovs-vsctl set open . external-ids:ovn-encap-ip=10.127.101.3
ovs-vsctl add-port br-int vm1 -- set interface vm1 type=internal
ip link set vm1 address 00:00:00:00:02:30
ip link set up dev vm1
ovs-vsctl set Interface vm1 external_ids:iface-id=dmz-vm1
ip netns add vm1
ip link set vm1 netns vm1
ip netns exec vm1 dhclient vm1
ip netns exec vm1 ip addr show vm1
ip netns exec vm1 ip route show
ovs-vsctl add-port br-int vm2 -- set interface vm2 type=internal
ip link set vm2 address 00:00:00:00:02:31
ip link set up dev vm2
ovs-vsctl set Interface vm2 external_ids:iface-id=dmz-vm2
ip netns add vm2
ip link set vm2 netns vm2
ip netns exec vm2 dhclient vm2
ip netns exec vm2 ip addr show vm2
ip netns exec vm2 ip route show
============================================
Ovn controller:
c01:/home/vagrant# ovn-nbctl show
switch 0dc864bf-a6e1-4575-9a91-573d307911d8 (dmz)
port dmz-vm1
addresses: ["00:00:00:00:02:30 172.16.255.130"]
port dmz-tenant1
addresses: ["00:00:00:00:02:02"]
port dmz-vm2
addresses: ["00:00:00:00:02:31 172.16.255.131"]
switch 50930423-f267-4a5e-aaf0-d9ea3d145a8d (inside)
port inside-vm4
addresses: ["00:00:00:00:03:95 172.16.255.195"]
port inside-vm3
addresses: ["00:00:00:00:03:94 172.16.255.194"]
port inside-tenant1
addresses: ["00:00:00:00:03:02"]
router 20d83cc4-6c74-41e5-b649-b883423729ab (tenant1)
port tenant1-dmz
mac: "00:00:00:00:02:01"
networks: ["172.16.255.129/26"]
port tenant1-inside
mac: "00:00:00:00:03:01"
networks: ["172.16.255.193/26"]
root@c01:/home/vagrant# ovn-sbctl show
Chassis "61ba541e-0f16-46f8-9cb9-66a5cb45b2d4"
hostname: "h01"
Encap geneve
ip: "10.127.101.3"
options: {csum="true"}
Port_Binding "dmz-vm1"
Port_Binding "dmz-vm2"
root@c01:/home/vagrant# ovn-sbctl -V
ovn-sbctl (Open vSwitch) 2.6.1
DB Schema 1.8.0
============================================
Host ovs:
root@h01:/home/vagrant# ovs-vsctl show
7a64d354-7ee9-4e20-bf45-71034f21bc53
Bridge br-int
fail_mode: secure
Port "patch-tenant1-inside-to-inside-tenant1"
Interface "patch-tenant1-inside-to-inside-tenant1"
type: patch
options: {peer="patch-inside-tenant1-to-tenant1-inside"}
Port "vm1"
Interface "vm1"
type: internal
Port "patch-dmz-tenant1-to-tenant1-dmz"
Interface "patch-dmz-tenant1-to-tenant1-dmz"
type: patch
options: {peer="patch-tenant1-dmz-to-dmz-tenant1"}
Port "patch-inside-tenant1-to-tenant1-inside"
Interface "patch-inside-tenant1-to-tenant1-inside"
type: patch
options: {peer="patch-tenant1-inside-to-inside-tenant1"}
Port "patch-tenant1-dmz-to-dmz-tenant1"
Interface "patch-tenant1-dmz-to-dmz-tenant1"
type: patch
options: {peer="patch-dmz-tenant1-to-tenant1-dmz"}
Port "vm2"
Interface "vm2"
type: internal
Port br-int
Interface br-int
type: internal
ovs_version: "2.6.1"
root@h01:/home/vagrant# ovs-vsctl -V
ovs-vsctl (Open vSwitch) 2.6.1
DB Schema 7.14.0
============================================
h01:/home/vagrant# cat /var/log/openvswitch/ovn-controller.log
2016-11-04T13:12:54.004Z|00001|vlog|INFO|opened log file
/var/log/openvswitch/ovn-controller.log
2016-11-04T13:12:54.005Z|00002|reconnect|INFO|unix:/var/run/openvswitch/db.s
ock: connecting...
2016-11-04T13:12:54.005Z|00003|reconnect|INFO|unix:/var/run/openvswitch/db.s
ock: connected
2016-11-04T13:12:54.007Z|00004|main|INFO|OVN OVSDB remote not specified.
Waiting...
2016-11-04T13:38:32.041Z|00005|main|INFO|OVN OVSDB remote not specified.
Waiting...
2016-11-04T13:38:32.054Z|00006|main|INFO|OVN OVSDB remote not specified.
Waiting...
2016-11-04T13:38:32.059Z|00007|reconnect|INFO|tcp:10.127.101.2:6642:
connecting...
2016-11-04T13:38:32.064Z|00008|reconnect|INFO|tcp:10.127.101.2:6642:
connected
2016-11-04T13:38:32.072Z|00009|chassis|INFO|Need to specify an encap type
and ip
2016-11-04T13:38:32.081Z|00010|ofctrl|INFO|unix:/var/run/openvswitch/br-int.
mgmt: connecting to switch
2016-11-04T13:38:32.081Z|00011|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connecting...
2016-11-04T13:38:32.081Z|00012|pinctrl|INFO|unix:/var/run/openvswitch/br-int
.mgmt: connecting to switch
2016-11-04T13:38:32.081Z|00013|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connecting...
2016-11-04T13:38:32.090Z|00014|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connected
2016-11-04T13:38:32.090Z|00015|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connected
2016-11-04T13:38:32.112Z|00016|rconn|WARN|unix:/var/run/openvswitch/br-int.m
gmt: connection dropped (Connection reset by peer)
2016-11-04T13:38:32.112Z|00017|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connection closed by peer
2016-11-04T13:38:32.129Z|00018|binding|INFO|Claiming lport dmz-vm1 for this
chassis.
2016-11-04T13:38:32.129Z|00019|binding|INFO|Claiming 00:00:00:00:02:30
172.16.255.130
2016-11-04T13:38:32.132Z|00020|util|EMER|lib/ofp-msgs.c:1078: assertion
version >= info->min_version && version <= info->max_version failed in
raw_instance_get()
2016-11-04T13:38:32.133Z|00002|daemon_unix(monitor)|ERR|1 crashes: pid 1629
died, killed (Aborted), restarting
2016-11-04T13:38:32.133Z|00003|reconnect|INFO|unix:/var/run/openvswitch/db.s
ock: connecting...
2016-11-04T13:38:32.133Z|00004|reconnect|INFO|unix:/var/run/openvswitch/db.s
ock: connected
2016-11-04T13:38:32.136Z|00005|reconnect|INFO|tcp:10.127.101.2:6642:
connecting...
2016-11-04T13:38:32.137Z|00006|reconnect|INFO|tcp:10.127.101.2:6642:
connected
2016-11-04T13:38:32.146Z|00007|binding|INFO|Claiming lport dmz-vm1 for this
chassis.
2016-11-04T13:38:32.146Z|00008|binding|INFO|Claiming 00:00:00:00:02:30
172.16.255.130
2016-11-04T13:38:32.146Z|00009|ofctrl|INFO|unix:/var/run/openvswitch/br-int.
mgmt: connecting to switch
2016-11-04T13:38:32.146Z|00010|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connecting...
2016-11-04T13:38:32.147Z|00011|pinctrl|INFO|unix:/var/run/openvswitch/br-int
.mgmt: connecting to switch
2016-11-04T13:38:32.147Z|00012|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connecting...
2016-11-04T13:38:32.152Z|00013|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connected
2016-11-04T13:38:32.153Z|00014|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connected
2016-11-04T13:38:32.190Z|00015|pinctrl|INFO|DHCPOFFER 00:00:00:00:02:30
172.16.255.130
2016-11-04T13:38:32.190Z|00016|pinctrl|INFO|DHCPACK 00:00:00:00:02:30
172.16.255.130
2016-11-04T14:38:33.018Z|00017|pinctrl|INFO|DHCPOFFER 00:00:00:00:02:30
172.16.255.130
2016-11-04T14:38:33.023Z|00018|pinctrl|INFO|DHCPACK 00:00:00:00:02:30
172.16.255.130
2016-11-04T15:33:42.799Z|00019|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connection closed by peer
2016-11-04T15:33:42.799Z|00020|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connection closed by peer
2016-11-04T15:33:42.824Z|00021|binding|INFO|Claiming lport dmz-vm2 for this
chassis.
2016-11-04T15:33:42.824Z|00022|binding|INFO|Claiming 00:00:00:00:02:31
172.16.255.131
2016-11-04T15:33:42.837Z|00023|util|EMER|lib/ofp-msgs.c:1078: assertion
version >= info->min_version && version <= info->max_version failed in
raw_instance_get()
2016-11-04T15:33:42.838Z|00003|daemon_unix(monitor)|ERR|2 crashes: pid 1721
died, killed (Aborted), restarting
2016-11-04T15:33:42.839Z|00004|reconnect|INFO|unix:/var/run/openvswitch/db.s
ock: connecting...
2016-11-04T15:33:42.839Z|00005|reconnect|INFO|unix:/var/run/openvswitch/db.s
ock: connected
2016-11-04T15:33:42.841Z|00006|reconnect|INFO|tcp:10.127.101.2:6642:
connecting...
2016-11-04T15:33:42.842Z|00007|reconnect|INFO|tcp:10.127.101.2:6642:
connected
2016-11-04T15:33:42.854Z|00008|binding|INFO|Claiming lport dmz-vm2 for this
chassis.
2016-11-04T15:33:42.854Z|00009|binding|INFO|Claiming 00:00:00:00:02:31
172.16.255.131
2016-11-04T15:33:42.854Z|00010|ofctrl|INFO|unix:/var/run/openvswitch/br-int.
mgmt: connecting to switch
2016-11-04T15:33:42.854Z|00011|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connecting...
2016-11-04T15:33:42.854Z|00012|pinctrl|INFO|unix:/var/run/openvswitch/br-int
.mgmt: connecting to switch
2016-11-04T15:33:42.854Z|00013|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connecting...
2016-11-04T15:33:42.862Z|00014|rconn|WARN|unix:/var/run/openvswitch/br-int.m
gmt: connection dropped (Connection reset by peer)
2016-11-04T15:33:42.871Z|00015|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connected
2016-11-04T15:33:43.331Z|00016|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connecting...
2016-11-04T15:33:43.331Z|00017|rconn|INFO|unix:/var/run/openvswitch/br-int.m
gmt: connected
2016-11-04T15:33:48.200Z|00018|pinctrl|INFO|DHCPOFFER 00:00:00:00:02:31
172.16.255.131
2016-11-04T15:33:48.201Z|00019|pinctrl|INFO|DHCPACK 00:00:00:00:02:31
172.16.255.131
2016-11-04T15:38:34.372Z|00020|pinctrl|INFO|DHCPOFFER 00:00:00:00:02:30
172.16.255.130
2016-11-04T15:38:34.380Z|00021|pinctrl|INFO|DHCPACK 00:00:00:00:02:30
172.16.255.130
============================================
@h01:/home/vagrant# cat /var/log/openvswitch/ovs-vswitchd.log
2016-11-04T13:12:53.124Z|00001|vlog|INFO|opened log file
/var/log/openvswitch/ovs-vswitchd.log
2016-11-04T13:12:53.137Z|00002|ovs_numa|INFO|Discovered 1 CPU cores on NUMA
node 0
2016-11-04T13:12:53.137Z|00003|ovs_numa|INFO|Discovered 1 NUMA nodes and 1
CPU cores
2016-11-04T13:12:53.137Z|00004|reconnect|INFO|unix:/var/run/openvswitch/db.s
ock: connecting...
2016-11-04T13:12:53.137Z|00005|reconnect|INFO|unix:/var/run/openvswitch/db.s
ock: connected
2016-11-04T13:12:53.139Z|00006|bridge|INFO|ovs-vswitchd (Open vSwitch) 2.6.1
2016-11-04T13:38:32.040Z|00007|memory|INFO|9440 kB peak resident set size
after 1538.9 seconds
2016-11-04T13:38:32.040Z|00008|ofproto_dpif|INFO|system@ovs-system: Datapath
supports recirculation
2016-11-04T13:38:32.040Z|00009|ofproto_dpif|INFO|system@ovs-system: MPLS
label stack length probed as 1
2016-11-04T13:38:32.040Z|00010|ofproto_dpif|INFO|system@ovs-system: Datapath
supports truncate action
2016-11-04T13:38:32.040Z|00011|ofproto_dpif|INFO|system@ovs-system: Datapath
supports unique flow ids
2016-11-04T13:38:32.040Z|00012|ofproto_dpif|INFO|system@ovs-system: Datapath
supports ct_state
2016-11-04T13:38:32.040Z|00013|ofproto_dpif|INFO|system@ovs-system: Datapath
supports ct_zone
2016-11-04T13:38:32.040Z|00014|ofproto_dpif|INFO|system@ovs-system: Datapath
supports ct_mark
2016-11-04T13:38:32.040Z|00015|ofproto_dpif|INFO|system@ovs-system: Datapath
supports ct_label
2016-11-04T13:38:32.040Z|00016|ofproto_dpif|INFO|system@ovs-system: Datapath
supports ct_state_nat
2016-11-04T13:38:32.048Z|00001|ofproto_dpif_upcall(handler1)|INFO|received
packet on unassociated datapath port 0
2016-11-04T13:38:32.053Z|00017|bridge|INFO|bridge br-int: added interface
br-int on port 65534
2016-11-04T13:38:32.053Z|00018|bridge|INFO|bridge br-int: using datapath ID
0000ae06c6c64247
2016-11-04T13:38:32.054Z|00019|connmgr|INFO|br-int: added service controller
"punix:/var/run/openvswitch/br-int.mgmt"
2016-11-04T13:38:32.088Z|00020|bridge|INFO|bridge br-int: added interface
patch-tenant1-inside-to-inside-tenant1 on port 1
2016-11-04T13:38:32.088Z|00021|bridge|INFO|bridge br-int: added interface
patch-dmz-tenant1-to-tenant1-dmz on port 2
2016-11-04T13:38:32.088Z|00022|bridge|INFO|bridge br-int: added interface
patch-tenant1-dmz-to-dmz-tenant1 on port 3
2016-11-04T13:38:32.088Z|00023|bridge|INFO|bridge br-int: added interface
patch-inside-tenant1-to-tenant1-inside on port 4
2016-11-04T13:38:32.101Z|00024|bridge|INFO|bridge br-int: added interface
vm1 on port 5
2016-11-04T13:38:32.110Z|00025|bridge|INFO|bridge br-int: using datapath ID
0000000000000230
2016-11-04T13:38:32.110Z|00026|rconn|INFO|br-int<->unix: disconnecting
2016-11-04T13:38:32.110Z|00027|rconn|INFO|br-int<->unix: disconnecting
2016-11-04T13:38:32.110Z|00028|connmgr|INFO|br-int<->unix: 101 flow_mods in
the last 0 s (100 adds, 1 deletes)
2016-11-04T13:38:32.139Z|00029|netdev_linux|WARN|vm1: removing policing
failed: No such device
2016-11-04T13:38:32.141Z|00030|netdev_linux|INFO|ioctl(SIOCGIFHWADDR) on vm1
device failed: No such device
2016-11-04T13:38:32.142Z|00031|bridge|INFO|bridge br-int: using datapath ID
0000ae06c6c64247
2016-11-04T13:38:32.142Z|00032|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on vm1
device failed: No such device
2016-11-04T13:38:32.142Z|00033|netdev_linux|WARN|vm1: removing policing
failed: No such device
2016-11-04T13:38:42.060Z|00034|memory|INFO|peak resident set size grew 263%
in last 10.0 seconds, from 9440 kB to 34252 kB
2016-11-04T13:38:42.060Z|00035|memory|INFO|handlers:1 ofconns:2 ports:6
revalidators:1 rules:241 udpif keys:2
2016-11-04T13:38:42.152Z|00036|connmgr|INFO|br-int<->unix: 238 flow_mods 10
s ago (237 adds, 1 deletes)
2016-11-04T15:33:42.783Z|00037|bridge|INFO|bridge br-int: added interface
vm2 on port 6
2016-11-04T15:33:42.793Z|00038|bridge|INFO|bridge br-int: using datapath ID
0000000000000231
2016-11-04T15:33:42.793Z|00039|rconn|INFO|br-int<->unix: disconnecting
2016-11-04T15:33:42.793Z|00040|rconn|INFO|br-int<->unix: disconnecting
2016-11-04T15:33:42.847Z|00041|netdev_linux|WARN|vm2: removing policing
failed: No such device
2016-11-04T15:33:42.859Z|00042|netdev_linux|INFO|ioctl(SIOCGIFHWADDR) on vm2
device failed: No such device
2016-11-04T15:33:42.860Z|00043|bridge|INFO|bridge br-int: using datapath ID
0000ae06c6c64247
2016-11-04T15:33:42.860Z|00044|rconn|INFO|br-int<->unix: disconnecting
2016-11-04T15:33:42.870Z|00045|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on vm2
device failed: No such device
2016-11-04T15:33:42.870Z|00046|netdev_linux|WARN|vm2: removing policing
failed: No such device
2016-11-04T15:33:53.334Z|00047|connmgr|INFO|br-int<->unix: 245 flow_mods 10
s ago (244 adds, 1 deletes)
============================================
@h01:/home/vagrant# ovs-ofctl show br-int
OFPT_FEATURES_REPLY (xid=0x2): dpid:0000ae06c6c64247
n_tables:254, n_buffers:256
capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP
actions: output enqueue set_vlan_vid set_vlan_pcp strip_vlan mod_dl_src
mod_dl_dst mod_nw_src mod_nw_dst mod_nw_tos mod_tp_src mod_tp_dst
1(patch-tenant1-i): addr:0e:e4:98:6b:c2:ef
config: 0
state: 0
speed: 0 Mbps now, 0 Mbps max
2(patch-dmz-tenan): addr:9a:cb:27:d9:d3:8d
config: 0
state: 0
speed: 0 Mbps now, 0 Mbps max
3(patch-tenant1-d): addr:8a:56:8a:f3:c7:0e
config: 0
state: 0
speed: 0 Mbps now, 0 Mbps max
4(patch-inside-te): addr:e2:67:64:b4:2c:0e
config: 0
state: 0
speed: 0 Mbps now, 0 Mbps max
5(vm1): addr:00:00:00:00:80:e7
config: PORT_DOWN
state: LINK_DOWN
speed: 0 Mbps now, 0 Mbps max
6(vm2): addr:00:00:00:00:d0:bd
config: PORT_DOWN
state: LINK_DOWN
speed: 0 Mbps now, 0 Mbps max
LOCAL(br-int): addr:ae:06:c6:c6:42:47
config: PORT_DOWN
state: LINK_DOWN
speed: 0 Mbps now, 0 Mbps max
OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0
============================================
# test rule for ping from vm1 to vm2:
h01:/home/vagrant# ovs-appctl ofproto/trace br-int
in_port=5,dl_src=00:00:00:00:02:30,dl_dst=00:00:00:00:02:31 -generate
..... a bunch of stuff redacted yields final flow rule:
Rule: table=65 cookie=0 priority=100,reg15=0x3,metadata=0x2
OpenFlow actions=output:6
Final flow:
reg13=0x2,reg14=0x2,reg15=0x3,metadata=0x2,in_port=5,vlan_tci=0x0000,dl_src=
00:00:00:00:02:30,dl_dst=00:00:00:00:02:31,dl_type=0x0000
Megaflow:
recirc_id=0,in_port=5,vlan_tci=0x0000/0x1000,dl_src=00:00:00:00:02:30,dl_dst
=00:00:00:00:02:31,dl_type=0x0000
Datapath actions: 3
============================================
# test rule for ping from vm1 to tenant1-dmz:
ovs-appctl ofproto/trace br-int
in_port=5,dl_src=00:00:00:00:02:30,dl_dst=00:00:00:00:02:01 -generate
.... cycles through tables 16 - 27, then 254:
Resubmitted flow: unchanged
Resubmitted regs: reg0=0x0 reg1=0x0 reg2=0x0 reg3=0x0 reg4=0x0 reg5=0x0
reg6=0x0 reg7=0x0 reg8=0x0 reg9=0x0 reg10=0x0 reg11=0x0 reg12=0x0 reg13=0x1
reg14=0x2 reg15=0x0
Resubmitted odp: drop
Resubmitted megaflow:
recirc_id=0,reg0=0,reg13=0,reg14=0,reg15=0,metadata=0,in_port=5,vlan_tci=0x0
000/0x1000,dl_src=00:00:00:00:02:30,dl_dst=00:00:00:00:02:01,dl_type=0x0000
Rule: table=254 cookie=0 priority=0,reg0=0x2
OpenFlow actions=drop
Final flow:
reg13=0x1,reg14=0x2,metadata=0x2,in_port=5,vlan_tci=0x0000,dl_src=00:00:00:0
0:02:30,dl_dst=00:00:00:00:02:01,dl_type=0x0000
Megaflow:
recirc_id=0,in_port=5,vlan_tci=0x0000/0x1000,dl_src=00:00:00:00:02:30,dl_dst
=00:00:00:00:02:01,dl_type=0x0000
Datapath actions: drop
============================================
c01:/home/vagrant# ovn-sbctl lflow-list
Datapath: "tenant1" (2dbe2fe0-1e0f-465d-a09a-3d797456f0da) Pipeline:
ingress
table=0 (lr_in_admission ), priority=100 , match=(vlan.present ||
eth.src[40]), action=(drop;)
table=0 (lr_in_admission ), priority=50 , match=((eth.mcast ||
eth.dst == 00:00:00:00:02:01) && inport == "tenant1-dmz"), action=(next;)
table=0 (lr_in_admission ), priority=50 , match=((eth.mcast ||
eth.dst == 00:00:00:00:03:01) && inport == "tenant1-inside"), action=(next;)
table=1 (lr_in_ip_input ), priority=100 , match=(ip4.mcast || ip4.src
== 255.255.255.255 || ip4.src == 127.0.0.0/8 || ip4.dst == 127.0.0.0/8 ||
ip4.src == 0.0.0.0/8 || ip4.dst == 0.0.0.0/8), action=(drop;)
table=1 (lr_in_ip_input ), priority=100 , match=(ip4.src ==
{172.16.255.129, 172.16.255.191}), action=(drop;)
table=1 (lr_in_ip_input ), priority=100 , match=(ip4.src ==
{172.16.255.193, 172.16.255.255}), action=(drop;)
table=1 (lr_in_ip_input ), priority=100 , match=(ip6.src ==
fe80::200:ff:fe00:201), action=(drop;)
table=1 (lr_in_ip_input ), priority=100 , match=(ip6.src ==
fe80::200:ff:fe00:301), action=(drop;)
table=1 (lr_in_ip_input ), priority=90 , match=(arp.op == 2),
action=(put_arp(inport, arp.spa, arp.sha);)
table=1 (lr_in_ip_input ), priority=90 , match=(inport ==
"tenant1-dmz" && arp.tpa == 172.16.255.129 && arp.op == 1), action=(eth.dst
= eth.src; eth.src = 00:00:00:00:02:01; arp.op = 2; /* ARP reply */ arp.tha
= arp.sha; arp.sha = 00:00:00:00:02:01; arp.tpa = arp.spa; arp.spa =
172.16.255.129; outport = "tenant1-dmz"; flags.loopback = 1; output;)
table=1 (lr_in_ip_input ), priority=90 , match=(inport ==
"tenant1-dmz" && nd_ns && ip6.dst == {fe80::200:ff:fe00:201,
ff02::1:ff00:201} && nd.target == fe80::200:ff:fe00:201),
action=(put_nd(inport, ip6.src, nd.sll); nd_na { eth.src =
00:00:00:00:02:01; ip6.src = fe80::200:ff:fe00:201; nd.target =
fe80::200:ff:fe00:201; nd.tll = 00:00:00:00:02:01; outport = inport;
flags.loopback = 1; output; };)
table=1 (lr_in_ip_input ), priority=90 , match=(inport ==
"tenant1-inside" && arp.tpa == 172.16.255.193 && arp.op == 1),
action=(eth.dst = eth.src; eth.src = 00:00:00:00:03:01; arp.op = 2; /* ARP
reply */ arp.tha = arp.sha; arp.sha = 00:00:00:00:03:01; arp.tpa = arp.spa;
arp.spa = 172.16.255.193; outport = "tenant1-inside"; flags.loopback = 1;
output;)
table=1 (lr_in_ip_input ), priority=90 , match=(inport ==
"tenant1-inside" && nd_ns && ip6.dst == {fe80::200:ff:fe00:301,
ff02::1:ff00:301} && nd.target == fe80::200:ff:fe00:301),
action=(put_nd(inport, ip6.src, nd.sll); nd_na { eth.src =
00:00:00:00:03:01; ip6.src = fe80::200:ff:fe00:301; nd.target =
fe80::200:ff:fe00:301; nd.tll = 00:00:00:00:03:01; outport = inport;
flags.loopback = 1; output; };)
table=1 (lr_in_ip_input ), priority=90 , match=(ip4.dst ==
172.16.255.129 && icmp4.type == 8 && icmp4.code == 0), action=(ip4.dst <->
ip4.src; ip.ttl = 255; icmp4.type = 0; flags.loopback = 1; next; )
table=1 (lr_in_ip_input ), priority=90 , match=(ip4.dst ==
172.16.255.193 && icmp4.type == 8 && icmp4.code == 0), action=(ip4.dst <->
ip4.src; ip.ttl = 255; icmp4.type = 0; flags.loopback = 1; next; )
table=1 (lr_in_ip_input ), priority=90 , match=(ip6.dst ==
fe80::200:ff:fe00:201 && icmp6.type == 128 && icmp6.code == 0),
action=(ip6.dst <-> ip6.src; ip.ttl = 255; icmp6.type = 129; flags.loopback
= 1; next; )
table=1 (lr_in_ip_input ), priority=90 , match=(ip6.dst ==
fe80::200:ff:fe00:301 && icmp6.type == 128 && icmp6.code == 0),
action=(ip6.dst <-> ip6.src; ip.ttl = 255; icmp6.type = 129; flags.loopback
= 1; next; )
table=1 (lr_in_ip_input ), priority=90 , match=(nd_na),
action=(put_nd(inport, nd.target, nd.tll);)
table=1 (lr_in_ip_input ), priority=80 , match=(nd_ns),
action=(put_nd(inport, ip6.src, nd.sll);)
table=1 (lr_in_ip_input ), priority=60 , match=(ip4.dst ==
{172.16.255.129}), action=(drop;)
table=1 (lr_in_ip_input ), priority=60 , match=(ip4.dst ==
{172.16.255.193}), action=(drop;)
table=1 (lr_in_ip_input ), priority=60 , match=(ip6.dst ==
fe80::200:ff:fe00:201), action=(drop;)
table=1 (lr_in_ip_input ), priority=60 , match=(ip6.dst ==
fe80::200:ff:fe00:301), action=(drop;)
table=1 (lr_in_ip_input ), priority=50 , match=(eth.bcast),
action=(drop;)
table=1 (lr_in_ip_input ), priority=30 , match=(ip4 && ip.ttl == {0,
1}), action=(drop;)
table=1 (lr_in_ip_input ), priority=0 , match=(1), action=(next;)
table=2 (lr_in_defrag ), priority=0 , match=(1), action=(next;)
table=3 (lr_in_unsnat ), priority=0 , match=(1), action=(next;)
table=4 (lr_in_dnat ), priority=0 , match=(1), action=(next;)
table=5 (lr_in_ip_routing ), priority=64 , match=(inport ==
"tenant1-dmz" && ip6.dst == fe80::/64), action=(ip.ttl--; xxreg0 = ip6.dst;
xxreg1 = fe80::200:ff:fe00:201; eth.src = 00:00:00:00:02:01; outport =
"tenant1-dmz"; flags.loopback = 1; next;)
table=5 (lr_in_ip_routing ), priority=64 , match=(inport ==
"tenant1-inside" && ip6.dst == fe80::/64), action=(ip.ttl--; xxreg0 =
ip6.dst; xxreg1 = fe80::200:ff:fe00:301; eth.src = 00:00:00:00:03:01;
outport = "tenant1-inside"; flags.loopback = 1; next;)
table=5 (lr_in_ip_routing ), priority=26 , match=(ip4.dst ==
172.16.255.128/26), action=(ip.ttl--; reg0 = ip4.dst; reg1 = 172.16.255.129;
eth.src = 00:00:00:00:02:01; outport = "tenant1-dmz"; flags.loopback = 1;
next;)
table=5 (lr_in_ip_routing ), priority=26 , match=(ip4.dst ==
172.16.255.192/26), action=(ip.ttl--; reg0 = ip4.dst; reg1 = 172.16.255.193;
eth.src = 00:00:00:00:03:01; outport = "tenant1-inside"; flags.loopback = 1;
next;)
table=6 (lr_in_arp_resolve ), priority=100 , match=(outport ==
"tenant1-dmz" && reg0 == 172.16.255.130), action=(eth.dst =
00:00:00:00:02:30; next;)
table=6 (lr_in_arp_resolve ), priority=100 , match=(outport ==
"tenant1-dmz" && reg0 == 172.16.255.131), action=(eth.dst =
00:00:00:00:02:31; next;)
table=6 (lr_in_arp_resolve ), priority=100 , match=(outport ==
"tenant1-inside" && reg0 == 172.16.255.194), action=(eth.dst =
00:00:00:00:03:94; next;)
table=6 (lr_in_arp_resolve ), priority=100 , match=(outport ==
"tenant1-inside" && reg0 == 172.16.255.195), action=(eth.dst =
00:00:00:00:03:95; next;)
table=6 (lr_in_arp_resolve ), priority=0 , match=(ip4),
action=(get_arp(outport, reg0); next;)
table=6 (lr_in_arp_resolve ), priority=0 , match=(ip6),
action=(get_nd(outport, xxreg0); next;)
table=7 (lr_in_arp_request ), priority=100 , match=(eth.dst ==
00:00:00:00:00:00), action=(arp { eth.dst = ff:ff:ff:ff:ff:ff; arp.spa =
reg1; arp.tpa = reg0; arp.op = 1; output; };)
table=7 (lr_in_arp_request ), priority=0 , match=(1), action=(output;)
Datapath: "tenant1" (2dbe2fe0-1e0f-465d-a09a-3d797456f0da) Pipeline: egress
table=0 (lr_out_snat ), priority=0 , match=(1), action=(next;)
table=1 (lr_out_delivery ), priority=100 , match=(outport ==
"tenant1-dmz"), action=(output;)
table=1 (lr_out_delivery ), priority=100 , match=(outport ==
"tenant1-inside"), action=(output;)
Datapath: "inside" (7ad9f0a1-bb65-4cb0-973a-b14f5ca3ec2d) Pipeline: ingress
table=0 (ls_in_port_sec_l2 ), priority=100 , match=(eth.src[40]),
action=(drop;)
table=0 (ls_in_port_sec_l2 ), priority=100 , match=(vlan.present),
action=(drop;)
table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport ==
"inside-tenant1"), action=(next;)
table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport ==
"inside-vm3" && eth.src == {00:00:00:00:03:94}), action=(next;)
table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport ==
"inside-vm4" && eth.src == {00:00:00:00:03:95}), action=(next;)
table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport ==
"inside-vm3" && eth.src == 00:00:00:00:03:94 && ip4.src == 0.0.0.0 &&
ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67),
action=(next;)
table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport ==
"inside-vm3" && eth.src == 00:00:00:00:03:94 && ip4.src ==
{172.16.255.194}), action=(next;)
table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport ==
"inside-vm4" && eth.src == 00:00:00:00:03:95 && ip4.src == 0.0.0.0 &&
ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67),
action=(next;)
table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport ==
"inside-vm4" && eth.src == 00:00:00:00:03:95 && ip4.src ==
{172.16.255.195}), action=(next;)
table=1 (ls_in_port_sec_ip ), priority=80 , match=(inport ==
"inside-vm3" && eth.src == 00:00:00:00:03:94 && ip), action=(drop;)
table=1 (ls_in_port_sec_ip ), priority=80 , match=(inport ==
"inside-vm4" && eth.src == 00:00:00:00:03:95 && ip), action=(drop;)
table=1 (ls_in_port_sec_ip ), priority=0 , match=(1), action=(next;)
table=2 (ls_in_port_sec_nd ), priority=90 , match=(inport ==
"inside-vm3" && eth.src == 00:00:00:00:03:94 && arp.sha == 00:00:00:00:03:94
&& arp.spa == {172.16.255.194}), action=(next;)
table=2 (ls_in_port_sec_nd ), priority=90 , match=(inport ==
"inside-vm4" && eth.src == 00:00:00:00:03:95 && arp.sha == 00:00:00:00:03:95
&& arp.spa == {172.16.255.195}), action=(next;)
table=2 (ls_in_port_sec_nd ), priority=80 , match=(inport ==
"inside-vm3" && (arp || nd)), action=(drop;)
table=2 (ls_in_port_sec_nd ), priority=80 , match=(inport ==
"inside-vm4" && (arp || nd)), action=(drop;)
table=2 (ls_in_port_sec_nd ), priority=0 , match=(1), action=(next;)
table=3 (ls_in_pre_acl ), priority=0 , match=(1), action=(next;)
table=4 (ls_in_pre_lb ), priority=0 , match=(1), action=(next;)
table=5 (ls_in_pre_stateful ), priority=100 , match=(reg0[0] == 1),
action=(ct_next;)
table=5 (ls_in_pre_stateful ), priority=0 , match=(1), action=(next;)
table=6 (ls_in_acl ), priority=0 , match=(1), action=(next;)
table=7 (ls_in_lb ), priority=0 , match=(1), action=(next;)
table=8 (ls_in_stateful ), priority=100 , match=(reg0[1] == 1),
action=(ct_commit(ct_label=0/1); next;)
table=8 (ls_in_stateful ), priority=100 , match=(reg0[2] == 1),
action=(ct_lb;)
table=8 (ls_in_stateful ), priority=0 , match=(1), action=(next;)
table=9 (ls_in_arp_rsp ), priority=0 , match=(1), action=(next;)
table=10(ls_in_dhcp_options ), priority=100 , match=(inport ==
"inside-vm3" && eth.src == 00:00:00:00:03:94 && ip4.src == 0.0.0.0 &&
ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67),
action=(reg0[3] = put_dhcp_opts(offerip = 172.16.255.194, netmask =
255.255.255.192, router = 172.16.255.193, server_id = 172.16.255.193,
lease_time = 3600); next;)
table=10(ls_in_dhcp_options ), priority=0 , match=(1), action=(next;)
table=11(ls_in_dhcp_response), priority=100 , match=(inport ==
"inside-vm3" && eth.src == 00:00:00:00:03:94 && ip4.src == 0.0.0.0 &&
ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67 && reg0[3]),
action=(eth.dst = eth.src; eth.src = 00:00:00:00:03:01; ip4.dst =
172.16.255.194; ip4.src = 172.16.255.193; udp.src = 67; udp.dst = 68;
outport = inport; flags.loopback = 1; output;)
table=11(ls_in_dhcp_response), priority=0 , match=(1), action=(next;)
table=12(ls_in_l2_lkup ), priority=100 , match=(eth.mcast),
action=(outport = "_MC_flood"; output;)
table=12(ls_in_l2_lkup ), priority=50 , match=(eth.dst ==
00:00:00:00:03:02), action=(outport = "inside-tenant1"; output;)
table=12(ls_in_l2_lkup ), priority=50 , match=(eth.dst ==
00:00:00:00:03:94), action=(outport = "inside-vm3"; output;)
table=12(ls_in_l2_lkup ), priority=50 , match=(eth.dst ==
00:00:00:00:03:95), action=(outport = "inside-vm4"; output;)
Datapath: "inside" (7ad9f0a1-bb65-4cb0-973a-b14f5ca3ec2d) Pipeline: egress
table=0 (ls_out_pre_lb ), priority=0 , match=(1), action=(next;)
table=1 (ls_out_pre_acl ), priority=0 , match=(1), action=(next;)
table=2 (ls_out_pre_stateful), priority=100 , match=(reg0[0] == 1),
action=(ct_next;)
table=2 (ls_out_pre_stateful), priority=0 , match=(1), action=(next;)
table=3 (ls_out_lb ), priority=0 , match=(1), action=(next;)
table=4 (ls_out_acl ), priority=34000, match=(outport ==
"inside-vm3" && eth.src == 00:00:00:00:03:01 && ip4.src == 172.16.255.193 &&
udp && udp.src == 67 && udp.dst == 68), action=(next;)
table=4 (ls_out_acl ), priority=0 , match=(1), action=(next;)
table=5 (ls_out_stateful ), priority=100 , match=(reg0[1] == 1),
action=(ct_commit(ct_label=0/1); next;)
table=5 (ls_out_stateful ), priority=100 , match=(reg0[2] == 1),
action=(ct_lb;)
table=5 (ls_out_stateful ), priority=0 , match=(1), action=(next;)
table=6 (ls_out_port_sec_ip ), priority=90 , match=(outport ==
"inside-vm3" && eth.dst == 00:00:00:00:03:94 && ip4.dst == {255.255.255.255,
224.0.0.0/4, 172.16.255.194}), action=(next;)
table=6 (ls_out_port_sec_ip ), priority=90 , match=(outport ==
"inside-vm4" && eth.dst == 00:00:00:00:03:95 && ip4.dst == {255.255.255.255,
224.0.0.0/4, 172.16.255.195}), action=(next;)
table=6 (ls_out_port_sec_ip ), priority=80 , match=(outport ==
"inside-vm3" && eth.dst == 00:00:00:00:03:94 && ip), action=(drop;)
table=6 (ls_out_port_sec_ip ), priority=80 , match=(outport ==
"inside-vm4" && eth.dst == 00:00:00:00:03:95 && ip), action=(drop;)
table=6 (ls_out_port_sec_ip ), priority=0 , match=(1), action=(next;)
table=7 (ls_out_port_sec_l2 ), priority=100 , match=(eth.mcast),
action=(output;)
table=7 (ls_out_port_sec_l2 ), priority=50 , match=(outport ==
"inside-tenant1"), action=(output;)
table=7 (ls_out_port_sec_l2 ), priority=50 , match=(outport ==
"inside-vm3" && eth.dst == {00:00:00:00:03:94}), action=(output;)
table=7 (ls_out_port_sec_l2 ), priority=50 , match=(outport ==
"inside-vm4" && eth.dst == {00:00:00:00:03:95}), action=(output;)
Datapath: "dmz" (b3922f68-f349-4929-9c3d-f4253906950c) Pipeline: ingress
table=0 (ls_in_port_sec_l2 ), priority=100 , match=(eth.src[40]),
action=(drop;)
table=0 (ls_in_port_sec_l2 ), priority=100 , match=(vlan.present),
action=(drop;)
table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport ==
"dmz-tenant1"), action=(next;)
table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "dmz-vm1"
&& eth.src == {00:00:00:00:02:30}), action=(next;)
table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "dmz-vm2"
&& eth.src == {00:00:00:00:02:31}), action=(next;)
table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport == "dmz-vm1"
&& eth.src == 00:00:00:00:02:30 && ip4.src == 0.0.0.0 && ip4.dst ==
255.255.255.255 && udp.src == 68 && udp.dst == 67), action=(next;)
table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport == "dmz-vm1"
&& eth.src == 00:00:00:00:02:30 && ip4.src == {172.16.255.130}),
action=(next;)
table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport == "dmz-vm2"
&& eth.src == 00:00:00:00:02:31 && ip4.src == 0.0.0.0 && ip4.dst ==
255.255.255.255 && udp.src == 68 && udp.dst == 67), action=(next;)
table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport == "dmz-vm2"
&& eth.src == 00:00:00:00:02:31 && ip4.src == {172.16.255.131}),
action=(next;)
table=1 (ls_in_port_sec_ip ), priority=80 , match=(inport == "dmz-vm1"
&& eth.src == 00:00:00:00:02:30 && ip), action=(drop;)
table=1 (ls_in_port_sec_ip ), priority=80 , match=(inport == "dmz-vm2"
&& eth.src == 00:00:00:00:02:31 && ip), action=(drop;)
table=1 (ls_in_port_sec_ip ), priority=0 , match=(1), action=(next;)
table=2 (ls_in_port_sec_nd ), priority=90 , match=(inport == "dmz-vm1"
&& eth.src == 00:00:00:00:02:30 && arp.sha == 00:00:00:00:02:30 && arp.spa
== {172.16.255.130}), action=(next;)
table=2 (ls_in_port_sec_nd ), priority=90 , match=(inport == "dmz-vm2"
&& eth.src == 00:00:00:00:02:31 && arp.sha == 00:00:00:00:02:31 && arp.spa
== {172.16.255.131}), action=(next;)
table=2 (ls_in_port_sec_nd ), priority=80 , match=(inport == "dmz-vm1"
&& (arp || nd)), action=(drop;)
table=2 (ls_in_port_sec_nd ), priority=80 , match=(inport == "dmz-vm2"
&& (arp || nd)), action=(drop;)
table=2 (ls_in_port_sec_nd ), priority=0 , match=(1), action=(next;)
table=3 (ls_in_pre_acl ), priority=0 , match=(1), action=(next;)
table=4 (ls_in_pre_lb ), priority=0 , match=(1), action=(next;)
table=5 (ls_in_pre_stateful ), priority=100 , match=(reg0[0] == 1),
action=(ct_next;)
table=5 (ls_in_pre_stateful ), priority=0 , match=(1), action=(next;)
table=6 (ls_in_acl ), priority=0 , match=(1), action=(next;)
table=7 (ls_in_lb ), priority=0 , match=(1), action=(next;)
table=8 (ls_in_stateful ), priority=100 , match=(reg0[1] == 1),
action=(ct_commit(ct_label=0/1); next;)
table=8 (ls_in_stateful ), priority=100 , match=(reg0[2] == 1),
action=(ct_lb;)
table=8 (ls_in_stateful ), priority=0 , match=(1), action=(next;)
table=9 (ls_in_arp_rsp ), priority=100 , match=(arp.tpa ==
172.16.255.130 && arp.op == 1 && inport == "dmz-vm1"), action=(next;)
table=9 (ls_in_arp_rsp ), priority=100 , match=(arp.tpa ==
172.16.255.131 && arp.op == 1 && inport == "dmz-vm2"), action=(next;)
table=9 (ls_in_arp_rsp ), priority=50 , match=(arp.tpa ==
172.16.255.130 && arp.op == 1), action=(eth.dst = eth.src; eth.src =
00:00:00:00:02:30; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha =
00:00:00:00:02:30; arp.tpa = arp.spa; arp.spa = 172.16.255.130; outport =
inport; flags.loopback = 1; output;)
table=9 (ls_in_arp_rsp ), priority=50 , match=(arp.tpa ==
172.16.255.131 && arp.op == 1), action=(eth.dst = eth.src; eth.src =
00:00:00:00:02:31; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha =
00:00:00:00:02:31; arp.tpa = arp.spa; arp.spa = 172.16.255.131; outport =
inport; flags.loopback = 1; output;)
table=9 (ls_in_arp_rsp ), priority=0 , match=(1), action=(next;)
table=10(ls_in_dhcp_options ), priority=100 , match=(inport == "dmz-vm1"
&& eth.src == 00:00:00:00:02:30 && ip4.src == 0.0.0.0 && ip4.dst ==
255.255.255.255 && udp.src == 68 && udp.dst == 67), action=(reg0[3] =
put_dhcp_opts(offerip = 172.16.255.130, netmask = 255.255.255.192, router =
172.16.255.129, server_id = 172.16.255.129, lease_time = 3600); next;)
table=10(ls_in_dhcp_options ), priority=100 , match=(inport == "dmz-vm2"
&& eth.src == 00:00:00:00:02:31 && ip4.src == 0.0.0.0 && ip4.dst ==
255.255.255.255 && udp.src == 68 && udp.dst == 67), action=(reg0[3] =
put_dhcp_opts(offerip = 172.16.255.131, netmask = 255.255.255.192, router =
172.16.255.129, server_id = 172.16.255.129, lease_time = 3600); next;)
table=10(ls_in_dhcp_options ), priority=0 , match=(1), action=(next;)
table=11(ls_in_dhcp_response), priority=100 , match=(inport == "dmz-vm1"
&& eth.src == 00:00:00:00:02:30 && ip4.src == 0.0.0.0 && ip4.dst ==
255.255.255.255 && udp.src == 68 && udp.dst == 67 && reg0[3]),
action=(eth.dst = eth.src; eth.src = 00:00:00:00:02:01; ip4.dst =
172.16.255.130; ip4.src = 172.16.255.129; udp.src = 67; udp.dst = 68;
outport = inport; flags.loopback = 1; output;)
table=11(ls_in_dhcp_response), priority=100 , match=(inport == "dmz-vm2"
&& eth.src == 00:00:00:00:02:31 && ip4.src == 0.0.0.0 && ip4.dst ==
255.255.255.255 && udp.src == 68 && udp.dst == 67 && reg0[3]),
action=(eth.dst = eth.src; eth.src = 00:00:00:00:02:01; ip4.dst =
172.16.255.131; ip4.src = 172.16.255.129; udp.src = 67; udp.dst = 68;
outport = inport; flags.loopback = 1; output;)
table=11(ls_in_dhcp_response), priority=0 , match=(1), action=(next;)
table=12(ls_in_l2_lkup ), priority=100 , match=(eth.mcast),
action=(outport = "_MC_flood"; output;)
table=12(ls_in_l2_lkup ), priority=50 , match=(eth.dst ==
00:00:00:00:02:02), action=(outport = "dmz-tenant1"; output;)
table=12(ls_in_l2_lkup ), priority=50 , match=(eth.dst ==
00:00:00:00:02:30), action=(outport = "dmz-vm1"; output;)
table=12(ls_in_l2_lkup ), priority=50 , match=(eth.dst ==
00:00:00:00:02:31), action=(outport = "dmz-vm2"; output;)
Datapath: "dmz" (b3922f68-f349-4929-9c3d-f4253906950c) Pipeline: egress
table=0 (ls_out_pre_lb ), priority=0 , match=(1), action=(next;)
table=1 (ls_out_pre_acl ), priority=0 , match=(1), action=(next;)
table=2 (ls_out_pre_stateful), priority=100 , match=(reg0[0] == 1),
action=(ct_next;)
table=2 (ls_out_pre_stateful), priority=0 , match=(1), action=(next;)
table=3 (ls_out_lb ), priority=0 , match=(1), action=(next;)
table=4 (ls_out_acl ), priority=34000, match=(outport == "dmz-vm1"
&& eth.src == 00:00:00:00:02:01 && ip4.src == 172.16.255.129 && udp &&
udp.src == 67 && udp.dst == 68), action=(next;)
table=4 (ls_out_acl ), priority=34000, match=(outport == "dmz-vm2"
&& eth.src == 00:00:00:00:02:01 && ip4.src == 172.16.255.129 && udp &&
udp.src == 67 && udp.dst == 68), action=(next;)
table=4 (ls_out_acl ), priority=0 , match=(1), action=(next;)
table=5 (ls_out_stateful ), priority=100 , match=(reg0[1] == 1),
action=(ct_commit(ct_label=0/1); next;)
table=5 (ls_out_stateful ), priority=100 , match=(reg0[2] == 1),
action=(ct_lb;)
table=5 (ls_out_stateful ), priority=0 , match=(1), action=(next;)
table=6 (ls_out_port_sec_ip ), priority=90 , match=(outport == "dmz-vm1"
&& eth.dst == 00:00:00:00:02:30 && ip4.dst == {255.255.255.255, 224.0.0.0/4,
172.16.255.130}), action=(next;)
table=6 (ls_out_port_sec_ip ), priority=90 , match=(outport == "dmz-vm2"
&& eth.dst == 00:00:00:00:02:31 && ip4.dst == {255.255.255.255, 224.0.0.0/4,
172.16.255.131}), action=(next;)
table=6 (ls_out_port_sec_ip ), priority=80 , match=(outport == "dmz-vm1"
&& eth.dst == 00:00:00:00:02:30 && ip), action=(drop;)
table=6 (ls_out_port_sec_ip ), priority=80 , match=(outport == "dmz-vm2"
&& eth.dst == 00:00:00:00:02:31 && ip), action=(drop;)
table=6 (ls_out_port_sec_ip ), priority=0 , match=(1), action=(next;)
table=7 (ls_out_port_sec_l2 ), priority=100 , match=(eth.mcast),
action=(output;)
table=7 (ls_out_port_sec_l2 ), priority=50 , match=(outport ==
"dmz-tenant1"), action=(output;)
table=7 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "dmz-vm1"
&& eth.dst == {00:00:00:00:02:30}), action=(output;)
table=7 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "dmz-vm2"
&& eth.dst == {00:00:00:00:02:31}), action=(output;)
============================================
@h01:/home/vagrant# ovs-ofctl -O OpenFlow13 dump-flows br-int
OFPST_FLOW reply (OF1.3) (xid=0x2):
cookie=0x0, duration=1321.718s, table=0, n_packets=0, n_bytes=0,
priority=100,in_port=4
actions=set_field:0x3->metadata,set_field:0x1->reg14,resubmit(,16)
cookie=0x0, duration=1321.717s, table=0, n_packets=24, n_bytes=7908,
priority=100,in_port=3
actions=set_field:0x1->metadata,set_field:0x1->reg14,resubmit(,16)
cookie=0x0, duration=1321.716s, table=0, n_packets=1, n_bytes=42,
priority=100,in_port=2
actions=set_field:0x2->metadata,set_field:0x1->reg14,resubmit(,16)
cookie=0x0, duration=1321.715s, table=0, n_packets=32, n_bytes=9012,
priority=100,in_port=5
actions=set_field:0x1->reg13,set_field:0x2->metadata,set_field:0x2->reg14,re
submit(,16)
cookie=0x0, duration=1321.714s, table=0, n_packets=0, n_bytes=0,
priority=100,in_port=1
actions=set_field:0x1->metadata,set_field:0x2->reg14,resubmit(,16)
cookie=0x0, duration=1321.714s, table=0, n_packets=15, n_bytes=1726,
priority=100,in_port=6
actions=set_field:0x2->reg13,set_field:0x2->metadata,set_field:0x3->reg14,re
submit(,16)
cookie=0x0, duration=1321.717s, table=16, n_packets=0, n_bytes=0,
priority=100,metadata=0x2,vlan_tci=0x1000/0x1000 actions=drop
cookie=0x0, duration=1321.716s, table=16, n_packets=0, n_bytes=0,
priority=100,metadata=0x1,vlan_tci=0x1000/0x1000 actions=drop
cookie=0x0, duration=1321.715s, table=16, n_packets=0, n_bytes=0,
priority=100,metadata=0x3,vlan_tci=0x1000/0x1000 actions=drop
cookie=0x0, duration=1321.717s, table=16, n_packets=0, n_bytes=0,
priority=100,metadata=0x2,dl_src=01:00:00:00:00:00/01:00:00:00:00:00
actions=drop
cookie=0x0, duration=1321.716s, table=16, n_packets=0, n_bytes=0,
priority=100,metadata=0x3,dl_src=01:00:00:00:00:00/01:00:00:00:00:00
actions=drop
cookie=0x0, duration=1321.715s, table=16, n_packets=0, n_bytes=0,
priority=100,metadata=0x1,dl_src=01:00:00:00:00:00/01:00:00:00:00:00
actions=drop
cookie=0x0, duration=1321.717s, table=16, n_packets=1, n_bytes=42,
priority=50,reg14=0x1,metadata=0x2 actions=resubmit(,17)
cookie=0x0, duration=1321.716s, table=16, n_packets=0, n_bytes=0,
priority=50,reg14=0x1,metadata=0x3 actions=resubmit(,17)
cookie=0x0, duration=1321.717s, table=16, n_packets=24, n_bytes=7908,
priority=50,reg14=0x1,metadata=0x1,dl_dst=01:00:00:00:00:00/01:00:00:00:00:0
0 actions=resubmit(,17)
cookie=0x0, duration=1321.716s, table=16, n_packets=0, n_bytes=0,
priority=50,reg14=0x2,metadata=0x1,dl_dst=01:00:00:00:00:00/01:00:00:00:00:0
0 actions=resubmit(,17)
cookie=0x0, duration=1321.717s, table=16, n_packets=32, n_bytes=9012,
priority=50,reg14=0x2,metadata=0x2,dl_src=00:00:00:00:02:30
actions=resubmit(,17)
cookie=0x0, duration=1321.716s, table=16, n_packets=0, n_bytes=0,
priority=50,reg14=0x3,metadata=0x3,dl_src=00:00:00:00:03:95
actions=resubmit(,17)
cookie=0x0, duration=1321.716s, table=16, n_packets=15, n_bytes=1726,
priority=50,reg14=0x3,metadata=0x2,dl_src=00:00:00:00:02:31
actions=resubmit(,17)
cookie=0x0, duration=1321.716s, table=16, n_packets=0, n_bytes=0,
priority=50,reg14=0x2,metadata=0x3,dl_src=00:00:00:00:03:94
actions=resubmit(,17)
cookie=0x0, duration=1321.716s, table=16, n_packets=0, n_bytes=0,
priority=50,reg14=0x1,metadata=0x1,dl_dst=00:00:00:00:02:01
actions=resubmit(,17)
cookie=0x0, duration=1321.716s, table=16, n_packets=0, n_bytes=0,
priority=50,reg14=0x2,metadata=0x1,dl_dst=00:00:00:00:03:01
actions=resubmit(,17)
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_src=172.16.255.255 actions=drop
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_src=172.16.255.129 actions=drop
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_src=172.16.255.191 actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_src=172.16.255.193 actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_src=255.255.255.255 actions=drop
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_dst=224.0.0.0/4 actions=drop
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_dst=0.0.0.0/8 actions=drop
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_dst=127.0.0.0/8 actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=100,ipv6,metadata=0x1,ipv6_src=fe80::200:ff:fe00:301 actions=drop
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=100,ipv6,metadata=0x1,ipv6_src=fe80::200:ff:fe00:201 actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_src=0.0.0.0/8 actions=drop
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,nw_src=127.0.0.0/8 actions=drop
cookie=0x0, duration=1321.720s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp6,reg14=0x1,metadata=0x1,ipv6_dst=ff02::1:ff00:201,nw_ttl=25
5,icmp_type=135,icmp_code=0,nd_target=fe80::200:ff:fe00:201
actions=push:NXM_NX_XXREG0[],push:NXM_OF_ETH_SRC[],push:NXM_NX_ND_SLL[],push
:NXM_NX_IPV6_SRC[],pop:NXM_NX_XXREG0[],pop:NXM_OF_ETH_SRC[],controller(userd
ata=00.00.00.04.00.00.00.00),pop:NXM_OF_ETH_SRC[],pop:NXM_NX_XXREG0[],contro
ller(userdata=00.00.00.03.00.00.00.00.00.19.00.10.80.00.08.06.00.00.00.00.02
.01.00.00.00.19.00.18.80.00.34.10.fe.80.00.00.00.00.00.00.02.00.00.ff.fe.00.
02.01.00.19.00.18.80.00.3e.10.fe.80.00.00.00.00.00.00.02.00.00.ff.fe.00.02.0
1.00.19.00.10.80.00.42.06.00.00.00.00.02.01.00.00.ff.ff.00.18.00.00.23.20.00
.06.00.20.00.00.00.00.00.01.1c.04.00.01.1e.04.ff.ff.00.18.00.00.23.20.00.07.
00.00.00.01.14.04.00.00.00.00.00.00.00.01.ff.ff.00.10.00.00.23.20.00.0e.ff.f
8.20.00.00.00)
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp6,reg14=0x2,metadata=0x1,ipv6_dst=fe80::200:ff:fe00:301,nw_t
tl=255,icmp_type=135,icmp_code=0,nd_target=fe80::200:ff:fe00:301
actions=push:NXM_NX_XXREG0[],push:NXM_OF_ETH_SRC[],push:NXM_NX_ND_SLL[],push
:NXM_NX_IPV6_SRC[],pop:NXM_NX_XXREG0[],pop:NXM_OF_ETH_SRC[],controller(userd
ata=00.00.00.04.00.00.00.00),pop:NXM_OF_ETH_SRC[],pop:NXM_NX_XXREG0[],contro
ller(userdata=00.00.00.03.00.00.00.00.00.19.00.10.80.00.08.06.00.00.00.00.03
.01.00.00.00.19.00.18.80.00.34.10.fe.80.00.00.00.00.00.00.02.00.00.ff.fe.00.
03.01.00.19.00.18.80.00.3e.10.fe.80.00.00.00.00.00.00.02.00.00.ff.fe.00.03.0
1.00.19.00.10.80.00.42.06.00.00.00.00.03.01.00.00.ff.ff.00.18.00.00.23.20.00
.06.00.20.00.00.00.00.00.01.1c.04.00.01.1e.04.ff.ff.00.18.00.00.23.20.00.07.
00.00.00.01.14.04.00.00.00.00.00.00.00.01.ff.ff.00.10.00.00.23.20.00.0e.ff.f
8.20.00.00.00)
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp6,reg14=0x2,metadata=0x1,ipv6_dst=ff02::1:ff00:301,nw_ttl=25
5,icmp_type=135,icmp_code=0,nd_target=fe80::200:ff:fe00:301
actions=push:NXM_NX_XXREG0[],push:NXM_OF_ETH_SRC[],push:NXM_NX_ND_SLL[],push
:NXM_NX_IPV6_SRC[],pop:NXM_NX_XXREG0[],pop:NXM_OF_ETH_SRC[],controller(userd
ata=00.00.00.04.00.00.00.00),pop:NXM_OF_ETH_SRC[],pop:NXM_NX_XXREG0[],contro
ller(userdata=00.00.00.03.00.00.00.00.00.19.00.10.80.00.08.06.00.00.00.00.03
.01.00.00.00.19.00.18.80.00.34.10.fe.80.00.00.00.00.00.00.02.00.00.ff.fe.00.
03.01.00.19.00.18.80.00.3e.10.fe.80.00.00.00.00.00.00.02.00.00.ff.fe.00.03.0
1.00.19.00.10.80.00.42.06.00.00.00.00.03.01.00.00.ff.ff.00.18.00.00.23.20.00
.06.00.20.00.00.00.00.00.01.1c.04.00.01.1e.04.ff.ff.00.18.00.00.23.20.00.07.
00.00.00.01.14.04.00.00.00.00.00.00.00.01.ff.ff.00.10.00.00.23.20.00.0e.ff.f
8.20.00.00.00)
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp6,reg14=0x1,metadata=0x1,ipv6_dst=fe80::200:ff:fe00:201,nw_t
tl=255,icmp_type=135,icmp_code=0,nd_target=fe80::200:ff:fe00:201
actions=push:NXM_NX_XXREG0[],push:NXM_OF_ETH_SRC[],push:NXM_NX_ND_SLL[],push
:NXM_NX_IPV6_SRC[],pop:NXM_NX_XXREG0[],pop:NXM_OF_ETH_SRC[],controller(userd
ata=00.00.00.04.00.00.00.00),pop:NXM_OF_ETH_SRC[],pop:NXM_NX_XXREG0[],contro
ller(userdata=00.00.00.03.00.00.00.00.00.19.00.10.80.00.08.06.00.00.00.00.02
.01.00.00.00.19.00.18.80.00.34.10.fe.80.00.00.00.00.00.00.02.00.00.ff.fe.00.
02.01.00.19.00.18.80.00.3e.10.fe.80.00.00.00.00.00.00.02.00.00.ff.fe.00.02.0
1.00.19.00.10.80.00.42.06.00.00.00.00.02.01.00.00.ff.ff.00.18.00.00.23.20.00
.06.00.20.00.00.00.00.00.01.1c.04.00.01.1e.04.ff.ff.00.18.00.00.23.20.00.07.
00.00.00.01.14.04.00.00.00.00.00.00.00.01.ff.ff.00.10.00.00.23.20.00.0e.ff.f
8.20.00.00.00)
cookie=0x0, duration=1321.717s, table=17, n_packets=5, n_bytes=490,
priority=90,ip,reg14=0x3,metadata=0x2,dl_src=00:00:00:00:02:31,nw_src=172.16
.255.131 actions=resubmit(,18)
cookie=0x0, duration=1321.716s, table=17, n_packets=26, n_bytes=8160,
priority=90,ip,reg14=0x2,metadata=0x2,dl_src=00:00:00:00:02:30,nw_src=172.16
.255.130 actions=resubmit(,18)
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=90,ip,reg14=0x3,metadata=0x3,dl_src=00:00:00:00:03:95,nw_src=172.16
.255.195 actions=resubmit(,18)
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=90,ip,reg14=0x2,metadata=0x3,dl_src=00:00:00:00:03:94,nw_src=172.16
.255.194 actions=resubmit(,18)
cookie=0x0, duration=1321.717s, table=17, n_packets=2, n_bytes=684,
priority=90,udp,reg14=0x2,metadata=0x2,dl_src=00:00:00:00:02:30,nw_src=0.0.0
.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67 actions=resubmit(,18)
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=90,udp,reg14=0x3,metadata=0x3,dl_src=00:00:00:00:03:95,nw_src=0.0.0
.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67 actions=resubmit(,18)
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=90,udp,reg14=0x2,metadata=0x3,dl_src=00:00:00:00:03:94,nw_src=0.0.0
.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67 actions=resubmit(,18)
cookie=0x0, duration=1321.715s, table=17, n_packets=2, n_bytes=684,
priority=90,udp,reg14=0x3,metadata=0x2,dl_src=00:00:00:00:02:31,nw_src=0.0.0
.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67 actions=resubmit(,18)
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp6,metadata=0x1,ipv6_dst=fe80::200:ff:fe00:201,icmp_type=128,
icmp_code=0
actions=push:NXM_NX_IPV6_SRC[],push:NXM_NX_IPV6_DST[],pop:NXM_NX_IPV6_SRC[],
pop:NXM_NX_IPV6_DST[],set_field:255->nw_ttl,set_field:129->icmpv6_type,load:
0x1->NXM_NX_REG10[0],resubmit(,18)
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp6,metadata=0x1,ipv6_dst=fe80::200:ff:fe00:301,icmp_type=128,
icmp_code=0
actions=push:NXM_NX_IPV6_SRC[],push:NXM_NX_IPV6_DST[],pop:NXM_NX_IPV6_SRC[],
pop:NXM_NX_IPV6_DST[],set_field:255->nw_ttl,set_field:129->icmpv6_type,load:
0x1->NXM_NX_REG10[0],resubmit(,18)
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp,metadata=0x1,nw_dst=172.16.255.129,icmp_type=8,icmp_code=0
actions=push:NXM_OF_IP_SRC[],push:NXM_OF_IP_DST[],pop:NXM_OF_IP_SRC[],pop:NX
M_OF_IP_DST[],set_field:255->nw_ttl,set_field:0->icmp_type,load:0x1->NXM_NX_
REG10[0],resubmit(,18)
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp,metadata=0x1,nw_dst=172.16.255.193,icmp_type=8,icmp_code=0
actions=push:NXM_OF_IP_SRC[],push:NXM_OF_IP_DST[],pop:NXM_OF_IP_SRC[],pop:NX
M_OF_IP_DST[],set_field:255->nw_ttl,set_field:0->icmp_type,load:0x1->NXM_NX_
REG10[0],resubmit(,18)
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=90,arp,reg14=0x2,metadata=0x1,arp_tpa=172.16.255.193,arp_op=1
actions=move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[],set_field:00:00:00:00:03:01-
>eth_src,set_field:2->arp_op,move:NXM_NX_ARP_SHA[]->NXM_NX_ARP_THA[],set_fie
ld:00:00:00:00:03:01->arp_sha,move:NXM_OF_ARP_SPA[]->NXM_OF_ARP_TPA[],set_fi
eld:172.16.255.193->arp_spa,set_field:0x2->reg15,load:0x1->NXM_NX_REG10[0],r
esubmit(,32)
cookie=0x0, duration=1321.714s, table=17, n_packets=1, n_bytes=42,
priority=90,arp,reg14=0x1,metadata=0x1,arp_tpa=172.16.255.129,arp_op=1
actions=move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[],set_field:00:00:00:00:02:01-
>eth_src,set_field:2->arp_op,move:NXM_NX_ARP_SHA[]->NXM_NX_ARP_THA[],set_fie
ld:00:00:00:00:02:01->arp_sha,move:NXM_OF_ARP_SPA[]->NXM_OF_ARP_TPA[],set_fi
eld:172.16.255.129->arp_spa,set_field:0x1->reg15,load:0x1->NXM_NX_REG10[0],r
esubmit(,32)
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=90,arp,metadata=0x1,arp_op=2
actions=push:NXM_NX_REG0[],push:NXM_OF_ETH_SRC[],push:NXM_NX_ARP_SHA[],push:
NXM_OF_ARP_SPA[],pop:NXM_NX_REG0[],pop:NXM_OF_ETH_SRC[],controller(userdata=
00.00.00.01.00.00.00.00),pop:NXM_OF_ETH_SRC[],pop:NXM_NX_REG0[]
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=90,icmp6,metadata=0x1,nw_ttl=255,icmp_type=136,icmp_code=0
actions=push:NXM_NX_XXREG0[],push:NXM_OF_ETH_SRC[],push:NXM_NX_ND_TLL[],push
:NXM_NX_ND_TARGET[],pop:NXM_NX_XXREG0[],pop:NXM_OF_ETH_SRC[],controller(user
data=00.00.00.04.00.00.00.00),pop:NXM_OF_ETH_SRC[],pop:NXM_NX_XXREG0[]
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=80,icmp6,metadata=0x1,nw_ttl=255,icmp_type=135,icmp_code=0
actions=push:NXM_NX_XXREG0[],push:NXM_OF_ETH_SRC[],push:NXM_NX_ND_SLL[],push
:NXM_NX_IPV6_SRC[],pop:NXM_NX_XXREG0[],pop:NXM_OF_ETH_SRC[],controller(userd
ata=00.00.00.04.00.00.00.00),pop:NXM_OF_ETH_SRC[],pop:NXM_NX_XXREG0[]
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=80,ipv6,reg14=0x2,metadata=0x3,dl_src=00:00:00:00:03:94
actions=drop
cookie=0x0, duration=1321.717s, table=17, n_packets=0, n_bytes=0,
priority=80,ip,reg14=0x2,metadata=0x3,dl_src=00:00:00:00:03:94 actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=80,ip,reg14=0x2,metadata=0x2,dl_src=00:00:00:00:02:30 actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=80,ip,reg14=0x3,metadata=0x2,dl_src=00:00:00:00:02:31 actions=drop
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=80,ipv6,reg14=0x2,metadata=0x2,dl_src=00:00:00:00:02:30
actions=drop
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=80,ip,reg14=0x3,metadata=0x3,dl_src=00:00:00:00:03:95 actions=drop
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=80,ipv6,reg14=0x3,metadata=0x3,dl_src=00:00:00:00:03:95
actions=drop
cookie=0x0, duration=1321.714s, table=17, n_packets=6, n_bytes=468,
priority=80,ipv6,reg14=0x3,metadata=0x2,dl_src=00:00:00:00:02:31
actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=60,ipv6,metadata=0x1,ipv6_dst=fe80::200:ff:fe00:201 actions=drop
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=60,ipv6,metadata=0x1,ipv6_dst=fe80::200:ff:fe00:301 actions=drop
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=60,ip,metadata=0x1,nw_dst=172.16.255.129 actions=drop
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=60,ip,metadata=0x1,nw_dst=172.16.255.193 actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=23, n_bytes=7866,
priority=50,metadata=0x1,dl_dst=ff:ff:ff:ff:ff:ff actions=drop
cookie=0x0, duration=1321.715s, table=17, n_packets=0, n_bytes=0,
priority=30,ip,metadata=0x1,nw_ttl=1 actions=drop
cookie=0x0, duration=1321.714s, table=17, n_packets=0, n_bytes=0,
priority=30,ip,metadata=0x1,nw_ttl=0 actions=drop
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=0,metadata=0x1 actions=resubmit(,18)
cookie=0x0, duration=1321.716s, table=17, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,18)
cookie=0x0, duration=1321.715s, table=17, n_packets=7, n_bytes=294,
priority=0,metadata=0x2 actions=resubmit(,18)
cookie=0x0, duration=1321.720s, table=18, n_packets=2, n_bytes=84,
priority=90,arp,reg14=0x3,metadata=0x2,dl_src=00:00:00:00:02:31,arp_spa=172.
16.255.131,arp_sha=00:00:00:00:02:31 actions=resubmit(,19)
cookie=0x0, duration=1321.717s, table=18, n_packets=0, n_bytes=0,
priority=90,arp,reg14=0x3,metadata=0x3,dl_src=00:00:00:00:03:95,arp_spa=172.
16.255.195,arp_sha=00:00:00:00:03:95 actions=resubmit(,19)
cookie=0x0, duration=1321.716s, table=18, n_packets=4, n_bytes=168,
priority=90,arp,reg14=0x2,metadata=0x2,dl_src=00:00:00:00:02:30,arp_spa=172.
16.255.130,arp_sha=00:00:00:00:02:30 actions=resubmit(,19)
cookie=0x0, duration=1321.715s, table=18, n_packets=0, n_bytes=0,
priority=90,arp,reg14=0x2,metadata=0x3,dl_src=00:00:00:00:03:94,arp_spa=172.
16.255.194,arp_sha=00:00:00:00:03:94 actions=resubmit(,19)
cookie=0x0, duration=1321.717s, table=18, n_packets=0, n_bytes=0,
priority=80,arp,reg14=0x2,metadata=0x3 actions=drop
cookie=0x0, duration=1321.717s, table=18, n_packets=0, n_bytes=0,
priority=80,arp,reg14=0x3,metadata=0x2 actions=drop
cookie=0x0, duration=1321.715s, table=18, n_packets=0, n_bytes=0,
priority=80,arp,reg14=0x3,metadata=0x3 actions=drop
cookie=0x0, duration=1321.714s, table=18, n_packets=0, n_bytes=0,
priority=80,arp,reg14=0x2,metadata=0x2 actions=drop
cookie=0x0, duration=1321.717s, table=18, n_packets=0, n_bytes=0,
priority=80,icmp6,reg14=0x2,metadata=0x3,nw_ttl=255,icmp_type=136,icmp_code=
0 actions=drop
cookie=0x0, duration=1321.717s, table=18, n_packets=0, n_bytes=0,
priority=80,icmp6,reg14=0x2,metadata=0x2,nw_ttl=255,icmp_type=135,icmp_code=
0 actions=drop
cookie=0x0, duration=1321.716s, table=18, n_packets=0, n_bytes=0,
priority=80,icmp6,reg14=0x2,metadata=0x3,nw_ttl=255,icmp_type=135,icmp_code=
0 actions=drop
cookie=0x0, duration=1321.716s, table=18, n_packets=0, n_bytes=0,
priority=80,icmp6,reg14=0x2,metadata=0x2,nw_ttl=255,icmp_type=136,icmp_code=
0 actions=drop
cookie=0x0, duration=1321.716s, table=18, n_packets=0, n_bytes=0,
priority=80,icmp6,reg14=0x3,metadata=0x2,nw_ttl=255,icmp_type=135,icmp_code=
0 actions=drop
cookie=0x0, duration=1321.715s, table=18, n_packets=0, n_bytes=0,
priority=80,icmp6,reg14=0x3,metadata=0x3,nw_ttl=255,icmp_type=136,icmp_code=
0 actions=drop
cookie=0x0, duration=1321.714s, table=18, n_packets=0, n_bytes=0,
priority=80,icmp6,reg14=0x3,metadata=0x2,nw_ttl=255,icmp_type=136,icmp_code=
0 actions=drop
cookie=0x0, duration=1321.714s, table=18, n_packets=0, n_bytes=0,
priority=80,icmp6,reg14=0x3,metadata=0x3,nw_ttl=255,icmp_type=135,icmp_code=
0 actions=drop
cookie=0x0, duration=1321.715s, table=18, n_packets=36, n_bytes=10060,
priority=0,metadata=0x2 actions=resubmit(,19)
cookie=0x0, duration=1321.715s, table=18, n_packets=0, n_bytes=0,
priority=0,metadata=0x1 actions=resubmit(,19)
cookie=0x0, duration=1321.714s, table=18, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,19)
cookie=0x0, duration=1321.716s, table=19, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,20)
cookie=0x0, duration=1321.716s, table=19, n_packets=42, n_bytes=10312,
priority=0,metadata=0x2 actions=resubmit(,20)
cookie=0x0, duration=1321.715s, table=19, n_packets=0, n_bytes=0,
priority=0,metadata=0x1 actions=resubmit(,20)
cookie=0x0, duration=1321.717s, table=20, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,21)
cookie=0x0, duration=1321.717s, table=20, n_packets=0, n_bytes=0,
priority=0,metadata=0x1 actions=resubmit(,21)
cookie=0x0, duration=1321.716s, table=20, n_packets=42, n_bytes=10312,
priority=0,metadata=0x2 actions=resubmit(,21)
cookie=0x0, duration=1321.717s, table=21, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x1/0x1,metadata=0x3
actions=ct(table=22,zone=NXM_NX_REG13[0..15])
cookie=0x0, duration=1321.716s, table=21, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x1/0x1,metadata=0x3
actions=ct(table=22,zone=NXM_NX_REG13[0..15])
cookie=0x0, duration=1321.715s, table=21, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x1/0x1,metadata=0x2
actions=ct(table=22,zone=NXM_NX_REG13[0..15])
cookie=0x0, duration=1321.714s, table=21, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x1/0x1,metadata=0x2
actions=ct(table=22,zone=NXM_NX_REG13[0..15])
cookie=0x0, duration=1321.717s, table=21, n_packets=0, n_bytes=0,
priority=64,ipv6,reg14=0x1,metadata=0x1,ipv6_dst=fe80::/64
actions=dec_ttl(),move:NXM_NX_IPV6_DST[]->NXM_NX_XXREG0[],set_field:0xfe8000
0000000000020000fffe000201->xxreg1,set_field:00:00:00:00:02:01->eth_src,set_
field:0x1->reg15,load:0x1->NXM_NX_REG10[0],resubmit(,22)
cookie=0x0, duration=1321.716s, table=21, n_packets=0, n_bytes=0,
priority=64,ipv6,reg14=0x2,metadata=0x1,ipv6_dst=fe80::/64
actions=dec_ttl(),move:NXM_NX_IPV6_DST[]->NXM_NX_XXREG0[],set_field:0xfe8000
0000000000020000fffe000301->xxreg1,set_field:00:00:00:00:03:01->eth_src,set_
field:0x2->reg15,load:0x1->NXM_NX_REG10[0],resubmit(,22)
cookie=0x0, duration=1321.715s, table=21, n_packets=0, n_bytes=0,
priority=26,ip,metadata=0x1,nw_dst=172.16.255.192/26
actions=dec_ttl(),move:NXM_OF_IP_DST[]->NXM_NX_XXREG0[96..127],load:0xac10ff
c1->NXM_NX_XXREG0[64..95],set_field:00:00:00:00:03:01->eth_src,set_field:0x2
->reg15,load:0x1->NXM_NX_REG10[0],resubmit(,22)
cookie=0x0, duration=1321.714s, table=21, n_packets=0, n_bytes=0,
priority=26,ip,metadata=0x1,nw_dst=172.16.255.128/26
actions=dec_ttl(),move:NXM_OF_IP_DST[]->NXM_NX_XXREG0[96..127],load:0xac10ff
81->NXM_NX_XXREG0[64..95],set_field:00:00:00:00:02:01->eth_src,set_field:0x1
->reg15,load:0x1->NXM_NX_REG10[0],resubmit(,22)
cookie=0x0, duration=1321.715s, table=21, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,22)
cookie=0x0, duration=1321.714s, table=21, n_packets=42, n_bytes=10312,
priority=0,metadata=0x2 actions=resubmit(,22)
cookie=0x0, duration=1321.717s, table=22, n_packets=0, n_bytes=0,
priority=100,reg0=0xac10ffc3,reg15=0x2,metadata=0x1
actions=set_field:00:00:00:00:03:95->eth_dst,resubmit(,23)
cookie=0x0, duration=1321.715s, table=22, n_packets=0, n_bytes=0,
priority=100,reg0=0xac10ff82,reg15=0x1,metadata=0x1
actions=set_field:00:00:00:00:02:30->eth_dst,resubmit(,23)
cookie=0x0, duration=1321.715s, table=22, n_packets=0, n_bytes=0,
priority=100,reg0=0xac10ff83,reg15=0x1,metadata=0x1
actions=set_field:00:00:00:00:02:31->eth_dst,resubmit(,23)
cookie=0x0, duration=1321.714s, table=22, n_packets=0, n_bytes=0,
priority=100,reg0=0xac10ffc2,reg15=0x2,metadata=0x1
actions=set_field:00:00:00:00:03:94->eth_dst,resubmit(,23)
cookie=0x0, duration=1321.716s, table=22, n_packets=0, n_bytes=0,
priority=0,ipv6,metadata=0x1
actions=set_field:00:00:00:00:00:00->eth_dst,resubmit(,66),resubmit(,23)
cookie=0x0, duration=1321.715s, table=22, n_packets=0, n_bytes=0,
priority=0,ip,metadata=0x1
actions=push:NXM_NX_REG0[],push:NXM_NX_XXREG0[96..127],pop:NXM_NX_REG0[],set
_field:00:00:00:00:00:00->eth_dst,resubmit(,66),pop:NXM_NX_REG0[],resubmit(,
23)
cookie=0x0, duration=1321.716s, table=22, n_packets=42, n_bytes=10312,
priority=0,metadata=0x2 actions=resubmit(,23)
cookie=0x0, duration=1321.714s, table=22, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,23)
cookie=0x0, duration=1321.718s, table=23, n_packets=0, n_bytes=0,
priority=100,ip,metadata=0x1,dl_dst=00:00:00:00:00:00
actions=controller(userdata=00.00.00.00.00.00.00.00.00.19.00.10.80.00.06.06.
ff.ff.ff.ff.ff.ff.00.00.ff.ff.00.18.00.00.23.20.00.06.00.20.00.40.00.00.00.0
1.de.10.00.00.20.04.ff.ff.00.18.00.00.23.20.00.06.00.20.00.60.00.00.00.01.de
.10.00.00.22.04.00.19.00.10.80.00.2a.02.00.01.00.00.00.00.00.00.ff.ff.00.10.
00.00.23.20.00.0e.ff.f8.20.00.00.00)
cookie=0x0, duration=1321.716s, table=23, n_packets=0, n_bytes=0,
priority=0,metadata=0x1 actions=resubmit(,32)
cookie=0x0, duration=1321.716s, table=23, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,24)
cookie=0x0, duration=1321.716s, table=23, n_packets=42, n_bytes=10312,
priority=0,metadata=0x2 actions=resubmit(,24)
cookie=0x0, duration=1321.720s, table=24, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x2/0x2,metadata=0x2
actions=ct(commit,zone=NXM_NX_REG13[0..15],exec(load:0->NXM_NX_CT_LABEL[0]))
,resubmit(,25)
cookie=0x0, duration=1321.717s, table=24, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x2/0x2,metadata=0x3
actions=ct(commit,zone=NXM_NX_REG13[0..15],exec(load:0->NXM_NX_CT_LABEL[0]))
,resubmit(,25)
cookie=0x0, duration=1321.717s, table=24, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x2/0x2,metadata=0x3
actions=ct(commit,zone=NXM_NX_REG13[0..15],exec(load:0->NXM_NX_CT_LABEL[0]))
,resubmit(,25)
cookie=0x0, duration=1321.716s, table=24, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x2/0x2,metadata=0x2
actions=ct(commit,zone=NXM_NX_REG13[0..15],exec(load:0->NXM_NX_CT_LABEL[0]))
,resubmit(,25)
cookie=0x0, duration=1321.717s, table=24, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x4/0x4,metadata=0x2
actions=ct(table=25,zone=NXM_NX_REG13[0..15],nat)
cookie=0x0, duration=1321.717s, table=24, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x4/0x4,metadata=0x2
actions=ct(table=25,zone=NXM_NX_REG13[0..15],nat)
cookie=0x0, duration=1321.716s, table=24, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x4/0x4,metadata=0x3
actions=ct(table=25,zone=NXM_NX_REG13[0..15],nat)
cookie=0x0, duration=1321.716s, table=24, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x4/0x4,metadata=0x3
actions=ct(table=25,zone=NXM_NX_REG13[0..15],nat)
cookie=0x0, duration=1321.715s, table=24, n_packets=42, n_bytes=10312,
priority=0,metadata=0x2 actions=resubmit(,25)
cookie=0x0, duration=1321.714s, table=24, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,25)
cookie=0x0, duration=1321.717s, table=25, n_packets=0, n_bytes=0,
priority=100,arp,reg14=0x2,metadata=0x2,arp_tpa=172.16.255.130,arp_op=1
actions=resubmit(,26)
cookie=0x0, duration=1321.715s, table=25, n_packets=0, n_bytes=0,
priority=100,arp,reg14=0x3,metadata=0x2,arp_tpa=172.16.255.131,arp_op=1
actions=resubmit(,26)
cookie=0x0, duration=1321.715s, table=25, n_packets=1, n_bytes=42,
priority=50,arp,metadata=0x2,arp_tpa=172.16.255.130,arp_op=1
actions=move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[],set_field:00:00:00:00:02:30-
>eth_src,set_field:2->arp_op,move:NXM_NX_ARP_SHA[]->NXM_NX_ARP_THA[],set_fie
ld:00:00:00:00:02:30->arp_sha,move:NXM_OF_ARP_SPA[]->NXM_OF_ARP_TPA[],set_fi
eld:172.16.255.130->arp_spa,move:NXM_NX_REG14[]->NXM_NX_REG15[],load:0x1->NX
M_NX_REG10[0],resubmit(,32)
cookie=0x0, duration=1321.714s, table=25, n_packets=1, n_bytes=42,
priority=50,arp,metadata=0x2,arp_tpa=172.16.255.131,arp_op=1
actions=move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[],set_field:00:00:00:00:02:31-
>eth_src,set_field:2->arp_op,move:NXM_NX_ARP_SHA[]->NXM_NX_ARP_THA[],set_fie
ld:00:00:00:00:02:31->arp_sha,move:NXM_OF_ARP_SPA[]->NXM_OF_ARP_TPA[],set_fi
eld:172.16.255.131->arp_spa,move:NXM_NX_REG14[]->NXM_NX_REG15[],load:0x1->NX
M_NX_REG10[0],resubmit(,32)
cookie=0x0, duration=1321.716s, table=25, n_packets=40, n_bytes=10228,
priority=0,metadata=0x2 actions=resubmit(,26)
cookie=0x0, duration=1321.715s, table=25, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,26)
cookie=0x0, duration=1321.716s, table=26, n_packets=0, n_bytes=0,
priority=100,udp,reg14=0x2,metadata=0x3,dl_src=00:00:00:00:03:94,nw_src=0.0.
0.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67
actions=controller(userdata=00.00.00.02.00.00.00.00.00.01.de.10.00.00.00.63.
ac.10.ff.c2.01.04.ff.ff.ff.c0.03.04.ac.10.ff.c1.36.04.ac.10.ff.c1.33.04.00.0
0.0e.10,pause),resubmit(,27)
cookie=0x0, duration=1321.715s, table=26, n_packets=2, n_bytes=684,
priority=100,udp,reg14=0x2,metadata=0x2,dl_src=00:00:00:00:02:30,nw_src=0.0.
0.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67
actions=controller(userdata=00.00.00.02.00.00.00.00.00.01.de.10.00.00.00.63.
ac.10.ff.82.01.04.ff.ff.ff.c0.03.04.ac.10.ff.81.36.04.ac.10.ff.81.33.04.00.0
0.0e.10,pause),resubmit(,27)
cookie=0x0, duration=1321.714s, table=26, n_packets=2, n_bytes=684,
priority=100,udp,reg14=0x3,metadata=0x2,dl_src=00:00:00:00:02:31,nw_src=0.0.
0.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67
actions=controller(userdata=00.00.00.02.00.00.00.00.00.01.de.10.00.00.00.63.
ac.10.ff.83.01.04.ff.ff.ff.c0.03.04.ac.10.ff.81.36.04.ac.10.ff.81.33.04.00.0
0.0e.10,pause),resubmit(,27)
cookie=0x0, duration=1321.715s, table=26, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,27)
cookie=0x0, duration=1321.714s, table=26, n_packets=36, n_bytes=8860,
priority=0,metadata=0x2 actions=resubmit(,27)
cookie=0x0, duration=1321.717s, table=27, n_packets=0, n_bytes=0,
priority=100,udp,reg0=0x8/0x8,reg14=0x3,metadata=0x2,dl_src=00:00:00:00:02:3
1,nw_src=0.0.0.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67
actions=move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[],set_field:00:00:00:00:02:01-
>eth_src,set_field:172.16.255.131->ip_dst,set_field:172.16.255.129->ip_src,s
et_field:67->udp_src,set_field:68->udp_dst,move:NXM_NX_REG14[]->NXM_NX_REG15
[],load:0x1->NXM_NX_REG10[0],resubmit(,32)
cookie=0x0, duration=1321.716s, table=27, n_packets=0, n_bytes=0,
priority=100,udp,reg0=0x8/0x8,reg14=0x2,metadata=0x3,dl_src=00:00:00:00:03:9
4,nw_src=0.0.0.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67
actions=move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[],set_field:00:00:00:00:03:01-
>eth_src,set_field:172.16.255.194->ip_dst,set_field:172.16.255.193->ip_src,s
et_field:67->udp_src,set_field:68->udp_dst,move:NXM_NX_REG14[]->NXM_NX_REG15
[],load:0x1->NXM_NX_REG10[0],resubmit(,32)
cookie=0x0, duration=1321.714s, table=27, n_packets=0, n_bytes=0,
priority=100,udp,reg0=0x8/0x8,reg14=0x2,metadata=0x2,dl_src=00:00:00:00:02:3
0,nw_src=0.0.0.0,nw_dst=255.255.255.255,tp_src=68,tp_dst=67
actions=move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[],set_field:00:00:00:00:02:01-
>eth_src,set_field:172.16.255.130->ip_dst,set_field:172.16.255.129->ip_src,s
et_field:67->udp_src,set_field:68->udp_dst,move:NXM_NX_REG14[]->NXM_NX_REG15
[],load:0x1->NXM_NX_REG10[0],resubmit(,32)
cookie=0x0, duration=1321.715s, table=27, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,28)
cookie=0x0, duration=1321.715s, table=27, n_packets=36, n_bytes=8860,
priority=0,metadata=0x2 actions=resubmit(,28)
cookie=0x0, duration=1321.717s, table=28, n_packets=0, n_bytes=0,
priority=100,metadata=0x3,dl_dst=01:00:00:00:00:00/01:00:00:00:00:00
actions=set_field:0xffff->reg15,resubmit(,32)
cookie=0x0, duration=1321.716s, table=28, n_packets=24, n_bytes=7908,
priority=100,metadata=0x2,dl_dst=01:00:00:00:00:00/01:00:00:00:00:00
actions=set_field:0xffff->reg15,resubmit(,32)
cookie=0x0, duration=1321.719s, table=28, n_packets=3, n_bytes=238,
priority=50,metadata=0x2,dl_dst=00:00:00:00:02:31
actions=set_field:0x3->reg15,resubmit(,32)
cookie=0x0, duration=1321.717s, table=28, n_packets=0, n_bytes=0,
priority=50,metadata=0x3,dl_dst=00:00:00:00:03:94
actions=set_field:0x2->reg15,resubmit(,32)
cookie=0x0, duration=1321.716s, table=28, n_packets=2, n_bytes=196,
priority=50,metadata=0x2,dl_dst=00:00:00:00:02:30
actions=set_field:0x2->reg15,resubmit(,32)
cookie=0x0, duration=1321.715s, table=28, n_packets=0, n_bytes=0,
priority=50,metadata=0x2,dl_dst=00:00:00:00:02:02
actions=set_field:0x1->reg15,resubmit(,32)
cookie=0x0, duration=1321.715s, table=28, n_packets=0, n_bytes=0,
priority=50,metadata=0x3,dl_dst=00:00:00:00:03:02
actions=set_field:0x1->reg15,resubmit(,32)
cookie=0x0, duration=1321.714s, table=28, n_packets=0, n_bytes=0,
priority=50,metadata=0x3,dl_dst=00:00:00:00:03:95
actions=set_field:0x3->reg15,resubmit(,32)
cookie=0x0, duration=1321.716s, table=32, n_packets=0, n_bytes=0,
priority=100,reg15=0xffff,metadata=0x3
actions=set_field:0x1->reg15,resubmit(,34),set_field:0xffff->reg15
cookie=0x0, duration=1321.715s, table=32, n_packets=24, n_bytes=7908,
priority=100,reg15=0xffff,metadata=0x2
actions=set_field:0x1->reg15,resubmit(,34),set_field:0xffff->reg15,resubmit(
,33)
cookie=0x0, duration=1321.716s, table=32, n_packets=8, n_bytes=560,
priority=0 actions=resubmit(,33)
cookie=0x0, duration=1321.717s, table=33, n_packets=4, n_bytes=280,
priority=100,reg15=0x3,metadata=0x2
actions=set_field:0x2->reg13,resubmit(,34)
cookie=0x0, duration=1321.717s, table=33, n_packets=0, n_bytes=0,
priority=100,reg15=0x1,metadata=0x2 actions=resubmit(,34)
cookie=0x0, duration=1321.716s, table=33, n_packets=24, n_bytes=7908,
priority=100,reg15=0xffff,metadata=0x2
actions=set_field:0x1->reg13,set_field:0x2->reg15,resubmit(,34),set_field:0x
2->reg13,set_field:0x3->reg15,resubmit(,34),set_field:0xffff->reg15
cookie=0x0, duration=1321.716s, table=33, n_packets=1, n_bytes=42,
priority=100,reg15=0x1,metadata=0x1 actions=resubmit(,34)
cookie=0x0, duration=1321.715s, table=33, n_packets=0, n_bytes=0,
priority=100,reg15=0x2,metadata=0x1 actions=resubmit(,34)
cookie=0x0, duration=1321.714s, table=33, n_packets=0, n_bytes=0,
priority=100,reg15=0x1,metadata=0x3 actions=resubmit(,34)
cookie=0x0, duration=1321.714s, table=33, n_packets=3, n_bytes=238,
priority=100,reg15=0x2,metadata=0x2
actions=set_field:0x1->reg13,resubmit(,34)
cookie=0x0, duration=1321.717s, table=34, n_packets=0, n_bytes=0,
priority=100,reg10=0/0x1,reg14=0x1,reg15=0x1,metadata=0x2 actions=drop
cookie=0x0, duration=1321.717s, table=34, n_packets=23, n_bytes=7866,
priority=100,reg10=0/0x1,reg14=0x2,reg15=0x2,metadata=0x2 actions=drop
cookie=0x0, duration=1321.716s, table=34, n_packets=1, n_bytes=42,
priority=100,reg10=0/0x1,reg14=0x3,reg15=0x3,metadata=0x2 actions=drop
cookie=0x0, duration=1321.716s, table=34, n_packets=0, n_bytes=0,
priority=100,reg10=0/0x1,reg14=0x1,reg15=0x1,metadata=0x1 actions=drop
cookie=0x0, duration=1321.715s, table=34, n_packets=0, n_bytes=0,
priority=100,reg10=0/0x1,reg14=0x1,reg15=0x1,metadata=0x3 actions=drop
cookie=0x0, duration=1321.715s, table=34, n_packets=0, n_bytes=0,
priority=100,reg10=0/0x1,reg14=0x2,reg15=0x2,metadata=0x1 actions=drop
cookie=0x0, duration=1321.715s, table=34, n_packets=56, n_bytes=16376,
priority=0
actions=set_field:0->reg0,set_field:0->reg1,set_field:0->reg2,set_field:0->r
eg3,set_field:0->reg4,set_field:0->reg5,set_field:0->reg6,set_field:0->reg7,
set_field:0->reg8,set_field:0->reg9,resubmit(,48)
cookie=0x0, duration=1321.716s, table=48, n_packets=1, n_bytes=42,
priority=0,metadata=0x1 actions=resubmit(,49)
cookie=0x0, duration=1321.716s, table=48, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,49)
cookie=0x0, duration=1321.715s, table=48, n_packets=55, n_bytes=16334,
priority=0,metadata=0x2 actions=resubmit(,49)
cookie=0x0, duration=1321.717s, table=49, n_packets=1, n_bytes=42,
priority=100,reg15=0x1,metadata=0x1 actions=resubmit(,64)
cookie=0x0, duration=1321.715s, table=49, n_packets=0, n_bytes=0,
priority=100,reg15=0x2,metadata=0x1 actions=resubmit(,64)
cookie=0x0, duration=1321.717s, table=49, n_packets=55, n_bytes=16334,
priority=0,metadata=0x2 actions=resubmit(,50)
cookie=0x0, duration=1321.714s, table=49, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,50)
cookie=0x0, duration=1321.716s, table=50, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x1/0x1,metadata=0x3
actions=ct(table=51,zone=NXM_NX_REG13[0..15])
cookie=0x0, duration=1321.715s, table=50, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x1/0x1,metadata=0x2
actions=ct(table=51,zone=NXM_NX_REG13[0..15])
cookie=0x0, duration=1321.715s, table=50, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x1/0x1,metadata=0x2
actions=ct(table=51,zone=NXM_NX_REG13[0..15])
cookie=0x0, duration=1321.715s, table=50, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x1/0x1,metadata=0x3
actions=ct(table=51,zone=NXM_NX_REG13[0..15])
cookie=0x0, duration=1321.716s, table=50, n_packets=55, n_bytes=16334,
priority=0,metadata=0x2 actions=resubmit(,51)
cookie=0x0, duration=1321.716s, table=50, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,51)
cookie=0x0, duration=1321.717s, table=51, n_packets=55, n_bytes=16334,
priority=0,metadata=0x2 actions=resubmit(,52)
cookie=0x0, duration=1321.716s, table=51, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,52)
cookie=0x0, duration=1321.716s, table=52, n_packets=0, n_bytes=0,
priority=34000,udp,reg15=0x2,metadata=0x2,dl_src=00:00:00:00:02:01,nw_src=17
2.16.255.129,tp_src=67,tp_dst=68 actions=resubmit(,53)
cookie=0x0, duration=1321.715s, table=52, n_packets=0, n_bytes=0,
priority=34000,udp,reg15=0x3,metadata=0x2,dl_src=00:00:00:00:02:01,nw_src=17
2.16.255.129,tp_src=67,tp_dst=68 actions=resubmit(,53)
cookie=0x0, duration=1321.715s, table=52, n_packets=0, n_bytes=0,
priority=34000,udp,reg15=0x2,metadata=0x3,dl_src=00:00:00:00:03:01,nw_src=17
2.16.255.193,tp_src=67,tp_dst=68 actions=resubmit(,53)
cookie=0x0, duration=1321.719s, table=52, n_packets=55, n_bytes=16334,
priority=0,metadata=0x2 actions=resubmit(,53)
cookie=0x0, duration=1321.717s, table=52, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,53)
cookie=0x0, duration=1321.717s, table=53, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x4/0x4,metadata=0x2
actions=ct(table=54,zone=NXM_NX_REG13[0..15],nat)
cookie=0x0, duration=1321.717s, table=53, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x4/0x4,metadata=0x3
actions=ct(table=54,zone=NXM_NX_REG13[0..15],nat)
cookie=0x0, duration=1321.717s, table=53, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x4/0x4,metadata=0x2
actions=ct(table=54,zone=NXM_NX_REG13[0..15],nat)
cookie=0x0, duration=1321.716s, table=53, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x4/0x4,metadata=0x3
actions=ct(table=54,zone=NXM_NX_REG13[0..15],nat)
cookie=0x0, duration=1321.717s, table=53, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x2/0x2,metadata=0x3
actions=ct(commit,zone=NXM_NX_REG13[0..15],exec(load:0->NXM_NX_CT_LABEL[0]))
,resubmit(,54)
cookie=0x0, duration=1321.717s, table=53, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x2/0x2,metadata=0x3
actions=ct(commit,zone=NXM_NX_REG13[0..15],exec(load:0->NXM_NX_CT_LABEL[0]))
,resubmit(,54)
cookie=0x0, duration=1321.715s, table=53, n_packets=0, n_bytes=0,
priority=100,ipv6,reg0=0x2/0x2,metadata=0x2
actions=ct(commit,zone=NXM_NX_REG13[0..15],exec(load:0->NXM_NX_CT_LABEL[0]))
,resubmit(,54)
cookie=0x0, duration=1321.714s, table=53, n_packets=0, n_bytes=0,
priority=100,ip,reg0=0x2/0x2,metadata=0x2
actions=ct(commit,zone=NXM_NX_REG13[0..15],exec(load:0->NXM_NX_CT_LABEL[0]))
,resubmit(,54)
cookie=0x0, duration=1321.716s, table=53, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,54)
cookie=0x0, duration=1321.715s, table=53, n_packets=55, n_bytes=16334,
priority=0,metadata=0x2 actions=resubmit(,54)
cookie=0x0, duration=1321.719s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x3,metadata=0x3,dl_dst=00:00:00:00:03:95,nw_dst=224.0.
0.0/4 actions=resubmit(,55)
cookie=0x0, duration=1321.716s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x2,metadata=0x2,dl_dst=00:00:00:00:02:30,nw_dst=224.0.
0.0/4 actions=resubmit(,55)
cookie=0x0, duration=1321.715s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x2,metadata=0x3,dl_dst=00:00:00:00:03:94,nw_dst=224.0.
0.0/4 actions=resubmit(,55)
cookie=0x0, duration=1321.714s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x3,metadata=0x2,dl_dst=00:00:00:00:02:31,nw_dst=224.0.
0.0/4 actions=resubmit(,55)
cookie=0x0, duration=1321.717s, table=54, n_packets=2, n_bytes=196,
priority=90,ip,reg15=0x3,metadata=0x2,dl_dst=00:00:00:00:02:31,nw_dst=172.16
.255.131 actions=resubmit(,55)
cookie=0x0, duration=1321.717s, table=54, n_packets=2, n_bytes=196,
priority=90,ip,reg15=0x2,metadata=0x2,dl_dst=00:00:00:00:02:30,nw_dst=172.16
.255.130 actions=resubmit(,55)
cookie=0x0, duration=1321.717s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x2,metadata=0x2,dl_dst=00:00:00:00:02:30,nw_dst=255.25
5.255.255 actions=resubmit(,55)
cookie=0x0, duration=1321.717s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x2,metadata=0x3,dl_dst=00:00:00:00:03:94,nw_dst=255.25
5.255.255 actions=resubmit(,55)
cookie=0x0, duration=1321.717s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x2,metadata=0x3,dl_dst=00:00:00:00:03:94,nw_dst=172.16
.255.194 actions=resubmit(,55)
cookie=0x0, duration=1321.716s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x3,metadata=0x3,dl_dst=00:00:00:00:03:95,nw_dst=255.25
5.255.255 actions=resubmit(,55)
cookie=0x0, duration=1321.715s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x3,metadata=0x3,dl_dst=00:00:00:00:03:95,nw_dst=172.16
.255.195 actions=resubmit(,55)
cookie=0x0, duration=1321.715s, table=54, n_packets=0, n_bytes=0,
priority=90,ip,reg15=0x3,metadata=0x2,dl_dst=00:00:00:00:02:31,nw_dst=255.25
5.255.255 actions=resubmit(,55)
cookie=0x0, duration=1321.716s, table=54, n_packets=0, n_bytes=0,
priority=80,ip,reg15=0x3,metadata=0x2,dl_dst=00:00:00:00:02:31 actions=drop
cookie=0x0, duration=1321.716s, table=54, n_packets=0, n_bytes=0,
priority=80,ipv6,reg15=0x2,metadata=0x2,dl_dst=00:00:00:00:02:30
actions=drop
cookie=0x0, duration=1321.716s, table=54, n_packets=0, n_bytes=0,
priority=80,ip,reg15=0x2,metadata=0x2,dl_dst=00:00:00:00:02:30 actions=drop
cookie=0x0, duration=1321.715s, table=54, n_packets=0, n_bytes=0,
priority=80,ip,reg15=0x2,metadata=0x3,dl_dst=00:00:00:00:03:94 actions=drop
cookie=0x0, duration=1321.715s, table=54, n_packets=0, n_bytes=0,
priority=80,ipv6,reg15=0x2,metadata=0x3,dl_dst=00:00:00:00:03:94
actions=drop
cookie=0x0, duration=1321.715s, table=54, n_packets=0, n_bytes=0,
priority=80,ipv6,reg15=0x3,metadata=0x3,dl_dst=00:00:00:00:03:95
actions=drop
cookie=0x0, duration=1321.714s, table=54, n_packets=0, n_bytes=0,
priority=80,ip,reg15=0x3,metadata=0x3,dl_dst=00:00:00:00:03:95 actions=drop
cookie=0x0, duration=1321.714s, table=54, n_packets=0, n_bytes=0,
priority=80,ipv6,reg15=0x3,metadata=0x2,dl_dst=00:00:00:00:02:31
actions=drop
cookie=0x0, duration=1321.714s, table=54, n_packets=51, n_bytes=15942,
priority=0,metadata=0x2 actions=resubmit(,55)
cookie=0x0, duration=1321.714s, table=54, n_packets=0, n_bytes=0,
priority=0,metadata=0x3 actions=resubmit(,55)
cookie=0x0, duration=1321.716s, table=55, n_packets=48, n_bytes=15816,
priority=100,metadata=0x2,dl_dst=01:00:00:00:00:00/01:00:00:00:00:00
actions=resubmit(,64)
cookie=0x0, duration=1321.714s, table=55, n_packets=0, n_bytes=0,
priority=100,metadata=0x3,dl_dst=01:00:00:00:00:00/01:00:00:00:00:00
actions=resubmit(,64)
cookie=0x0, duration=1321.717s, table=55, n_packets=0, n_bytes=0,
priority=50,reg15=0x1,metadata=0x2 actions=resubmit(,64)
cookie=0x0, duration=1321.715s, table=55, n_packets=0, n_bytes=0,
priority=50,reg15=0x1,metadata=0x3 actions=resubmit(,64)
cookie=0x0, duration=1321.715s, table=55, n_packets=0, n_bytes=0,
priority=50,reg15=0x3,metadata=0x3,dl_dst=00:00:00:00:03:95
actions=resubmit(,64)
cookie=0x0, duration=1321.715s, table=55, n_packets=3, n_bytes=238,
priority=50,reg15=0x2,metadata=0x2,dl_dst=00:00:00:00:02:30
actions=resubmit(,64)
cookie=0x0, duration=1321.714s, table=55, n_packets=0, n_bytes=0,
priority=50,reg15=0x2,metadata=0x3,dl_dst=00:00:00:00:03:94
actions=resubmit(,64)
cookie=0x0, duration=1321.714s, table=55, n_packets=4, n_bytes=280,
priority=50,reg15=0x3,metadata=0x2,dl_dst=00:00:00:00:02:31
actions=resubmit(,64)
cookie=0x0, duration=1321.719s, table=64, n_packets=1, n_bytes=42,
priority=100,reg10=0x1/0x1,reg15=0x2,metadata=0x2
actions=push:NXM_OF_IN_PORT[],set_field:0->in_port,resubmit(,65),pop:NXM_OF_
IN_PORT[]
cookie=0x0, duration=1321.717s, table=64, n_packets=0, n_bytes=0,
priority=100,reg10=0x1/0x1,reg15=0x2,metadata=0x1
actions=push:NXM_OF_IN_PORT[],set_field:0->in_port,resubmit(,65),pop:NXM_OF_
IN_PORT[]
cookie=0x0, duration=1321.716s, table=64, n_packets=1, n_bytes=42,
priority=100,reg10=0x1/0x1,reg15=0x3,metadata=0x2
actions=push:NXM_OF_IN_PORT[],set_field:0->in_port,resubmit(,65),pop:NXM_OF_
IN_PORT[]
cookie=0x0, duration=1321.715s, table=64, n_packets=0, n_bytes=0,
priority=100,reg10=0x1/0x1,reg15=0x1,metadata=0x2
actions=push:NXM_OF_IN_PORT[],set_field:0->in_port,resubmit(,65),pop:NXM_OF_
IN_PORT[]
cookie=0x0, duration=1321.715s, table=64, n_packets=1, n_bytes=42,
priority=100,reg10=0x1/0x1,reg15=0x1,metadata=0x1
actions=push:NXM_OF_IN_PORT[],set_field:0->in_port,resubmit(,65),pop:NXM_OF_
IN_PORT[]
cookie=0x0, duration=1321.715s, table=64, n_packets=0, n_bytes=0,
priority=100,reg10=0x1/0x1,reg15=0x1,metadata=0x3
actions=push:NXM_OF_IN_PORT[],set_field:0->in_port,resubmit(,65),pop:NXM_OF_
IN_PORT[]
cookie=0x0, duration=1321.716s, table=64, n_packets=53, n_bytes=16250,
priority=0 actions=resubmit(,65)
cookie=0x0, duration=1321.717s, table=65, n_packets=1, n_bytes=42,
priority=100,reg15=0x1,metadata=0x1 actions=output:3
cookie=0x0, duration=1321.716s, table=65, n_packets=0, n_bytes=0,
priority=100,reg15=0x2,metadata=0x1 actions=output:1
cookie=0x0, duration=1321.716s, table=65, n_packets=27, n_bytes=8146,
priority=100,reg15=0x3,metadata=0x2 actions=output:6
cookie=0x0, duration=1321.715s, table=65, n_packets=0, n_bytes=0,
priority=100,reg15=0x1,metadata=0x3 actions=output:4
cookie=0x0, duration=1321.715s, table=65, n_packets=4, n_bytes=280,
priority=100,reg15=0x2,metadata=0x2 actions=output:5
cookie=0x0, duration=1321.715s, table=65, n_packets=24, n_bytes=7908,
priority=100,reg15=0x1,metadata=0x2 actions=output:2
root@h01:/home/vagrant#
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
_______________________________________________
discuss mailing list
discuss@openvswitch.org
http://openvswitch.org/mailman/listinfo/discuss
