Tim, thank for your information. Yes, ovs 2.5.90 has supported Eth+NSH, but classifier and sfc need to do necessary changes to support it.
-----Original Message----- From: Tim Rozet [mailto:[email protected]] Sent: Wednesday, August 31, 2016 10:27 AM To: Yang, Yi Y <[email protected]> Cc: Manuel Buil <[email protected]>; Sam Hague <[email protected]>; Brady Allen Johnson <[email protected]>; OPNFV Tech <[email protected]>; [email protected]; [email protected]; Andre Fredette <[email protected]>; Victor Mehmeri <[email protected]>; Ricardo Noriega De Soto <[email protected]> Subject: Re: [SFC] multiple compute nodes with Tacker Hi Yi. Yes still using the vxlan workaround. The reason it never worked before were due to known bugs in Tacker and ODL. Fixing those plus accomodating new changes in Tacker/ODL to support OVS 2.5.90 took a while to get it all working. Hopefully now we can move to doing Eth+NSH to SFs. That is possible with OVS 2.5.90 right? Then we can get rid of the workaround? Tim Rozet Red Hat SDN Team ----- Original Message ----- From: "Yi Y Yang" <[email protected]> To: "Tim Rozet" <[email protected]> Cc: "Manuel Buil" <[email protected]>, "Sam Hague" <[email protected]>, "Brady Allen Johnson" <[email protected]>, "OPNFV Tech" <[email protected]>, [email protected], [email protected], "Andre Fredette" <[email protected]>, "Victor Mehmeri" <[email protected]>, "Ricardo Noriega De Soto" <[email protected]> Sent: Tuesday, August 30, 2016 9:26:17 PM Subject: RE: [SFC] multiple compute nodes with Tacker Tim, great job, I guess this demo is still using vxlan workaround, right? My question is why you couldn't successfully create multiple compute nodes with Tacker before but you can now. -----Original Message----- From: Tim Rozet [mailto:[email protected]] Sent: Saturday, August 27, 2016 2:38 AM To: Yang, Yi Y <[email protected]> Cc: Manuel Buil <[email protected]>; Sam Hague <[email protected]>; Brady Allen Johnson <[email protected]>; OPNFV Tech <[email protected]>; [email protected]; [email protected]; Andre Fredette <[email protected]>; Victor Mehmeri <[email protected]>; Ricardo Noriega De Soto <[email protected]> Subject: Re: [SFC] multiple compute nodes with Tacker Hi All, Happy to announce that with the lastest fixes into ODL Boron, multiple compute nodes/VNFs in a chain works with Tacker and OVS 2.5.90! The outputs and flows can be seen here: https://gist.github.com/trozet/f24e2b81ed0be504c3904f3a7a2ab27d The one caveat here is there is no way to tell ODL SFC which VNF to use in the chain. When SFC goes to create the chain, it will pick VNFs based on type. Therefore in Tacker when you create your VNFs, you need to create them with different types (by modifying the service_type in the VNFD, and invoking that VNFD on VNF create). The accepted values right now in ODL SFC are: -firewall -dpi -napt44 -qos -ids -http-header-enrichment -tcp-proxy -Cisco-vASA -Cisco-vNBAR Next I'm going to start looking into some of the other bugs. Particularly issues with creating more than 1 chain/classifier. Many thanks to all the people that helped get this working: Manuel, Brady, Victor, Sam, Ricky, Yi Tim Rozet Red Hat SDN Team ----- Original Message ----- From: "Yi Y Yang" <[email protected]> To: "Tim Rozet" <[email protected]>, "Manuel Buil" <[email protected]>, "Sam Hague" <[email protected]> Cc: "Brady Allen Johnson" <[email protected]>, "OPNFV Tech" <[email protected]> Sent: Sunday, August 21, 2016 9:44:31 PM Subject: RE: [SFC] multiple compute nodes with Tacker Current SFC can't yet support Eth+NSH, so VxLAN workaround is necessary, Brady and other guys from Ericsson have a plan to support Eth+NSH in SFC. -----Original Message----- From: Tim Rozet [mailto:[email protected]] Sent: Tuesday, August 16, 2016 5:39 AM To: Manuel Buil <[email protected]>; Yang, Yi Y <[email protected]>; Sam Hague <[email protected]> Cc: Brady Allen Johnson <[email protected]>; OPNFV Tech <[email protected]> Subject: [SFC] multiple compute nodes with Tacker Expanding to larger audience... I tested out Apex today with the ODL build Brady provided. I found there were a few updates needed in Tacker and pushed a patch to the colorado branch: https://github.com/trozet/tacker/commit/d876584242781726d2e4403e69b9d15c08765625 I then created the following nova instances/tacker VNFs: https://goo.gl/photos/F59h6V31fcQSzVFt6 The chain I created was this: testVNF4->testVNF5 The curl to the http server failed (typical classifier matching on source port 2000, dest port 80), and I don't see any packets hitting the vxlan tool on either VNF. However, I do see packets hitting the classifier. Flow gist: https://gist.github.com/trozet/3161092c62fdc6582508e7779e445bf1 I did not use the VXLAN workaround (aka the kernel host route). I thought this was not required anymore with OVS 2.5.90. Yi can you comment here? I haven't had a chance to dig into the flows yet, but if anyone sees the root cause of the problem, let me know. Thanks, Tim Rozet Red Hat SDN Team ----- Original Message ----- From: "Manuel Buil" <[email protected]> To: "Tim Rozet" <[email protected]> Cc: "Brady Allen Johnson" <[email protected]> Sent: Monday, August 15, 2016 12:27:23 PM Subject: RE: Creating symmetric chains with tacker Ok! I did not have time to try that as we are encountering some bugs in Netvirt and I am preparing the demo for Seattle. Please update us if you make it work with several compute nodes :). Regards, Manuel -----Original Message----- From: Tim Rozet [mailto:[email protected]] Sent: Monday, August 15, 2016 3:00 PM To: Manuel Buil Cc: Brady Allen Johnson Subject: Re: Creating symmetric chains with tacker Hi Manuel, Yeah I don't think I ever accounted for that. We would need to look at the driver call when ODL creates the reverse chain, and instantiate 2 chains in tacker to do that. I just got my setup to work with the ODL Brady provided and have a clean deployment. I was going to start looking at using 2 compute nodes today and coming up with a fix for that one. Will respond to this email when I have more info/fixes. Tim Rozet Red Hat SDN Team ----- Original Message ----- From: "Manuel Buil" <[email protected]> To: "Tim Rozet" <[email protected]>, "Brady Allen Johnson" <[email protected]> Sent: Monday, August 15, 2016 8:22:55 AM Subject: RE: Creating symmetric chains with tacker Hey Tim, I tried today and it works :). However, it is impossible to create a classification rule on the second chain which is created (the symmetric chain), right? Thanks, Manuel -----Original Message----- From: Tim Rozet [mailto:[email protected]] Sent: Tuesday, August 09, 2016 5:25 PM To: Brady Allen Johnson Cc: Manuel Buil Subject: Re: Creating symmetric chains with tacker Hi Guys, Simply invoke --symmetrical True when creating a chain: https://github.com/trozet/python-tackerclient/blob/SFC_refactor/tackerclient/tacker/v1_0/sfc/sfc.py#L41 Tim Rozet Red Hat SDN Team ----- Original Message ----- From: "Brady Allen Johnson" <[email protected]> To: "Manuel Buil" <[email protected]>, "Tim Rozet" <[email protected]> Sent: Tuesday, August 9, 2016 7:58:42 AM Subject: Re: Creating symmetric chains with tacker Tim, Just a bit of context: to create symmetric service chains, there is a boolean field in the SFC, SFP, and RSP called "is_symmetric" (or something very similar) that would need to be set to true. Im pretty sure now you either dont set it, or explicitly set it to false. When the field is true, then ODL SFC will create a second, symmetric service chain. Thanks, Brady On 09/08/16 11:21, Manuel Buil wrote: > > Hi Tim, > > Is it possible to create symmetric chains in ODL with a tacker > command? I cannot find the command to do so L. > > Thanks, > > Manuel > _______________________________________________ opnfv-tech-discuss mailing list [email protected] https://lists.opnfv.org/mailman/listinfo/opnfv-tech-discuss
