Re: [ovs-discuss] Open vSwitch 1.4.1 Available

2012-05-04 Thread Ben Pfaff
On Fri, May 04, 2012 at 07:31:21PM -0700, Greg Dahlman wrote: > > Thanks for getting this out and it is working pretty well for me on > wheezy so far, but there is one little fix that would help, Sorry if > this is the wrong list I would have emailed the devel list but the git > repo is way past t

Re: [ovs-discuss] Open vSwitch 1.4.1 Available

2012-05-04 Thread Greg Dahlman
Thanks for getting this out and it is working pretty well for me on wheezy so far, but there is one little fix that would help, Sorry if this is the wrong list I would have emailed the devel list but the git repo is way past this release. The Debian changelog needs to be 1.4.1-1 for those of u

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Chris Wright
* Jesse Gross (je...@nicira.com) wrote: > On Fri, May 4, 2012 at 1:00 PM, Chris Wright wrote: > > Subject: [PATCH] openvswitch: honour IFF_DONT_BRIDGE > > From: Chris Wright > > > > Especially in the case of wireless, the netdev may not work properly. > > So honor IFF_DONT_BRIDGE. > > > > Signed-

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Ansis Atteka
On Fri, May 4, 2012 at 1:32 PM, Srinivasa R Kanduru wrote: > Hi Ansis, > > I have opened a bug against libvirt .. > The domain XML file indicates that you are using Linux bridge not the OVS bridge. You are missing the tag. Refer to INSTALL.Libvirt for more details. > https://bugzilla.redhat.c

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Srinivasa R Kanduru
Thanks Chris. I will try that out ... On Fri, May 4, 2012 at 1:36 PM, Chris Wright wrote: > * Srinivasa R Kanduru (skand...@gmail.com) wrote: > > Thanks a lot guys ! I was using kvm directly to launch VM as libvirt > > (0.9.11.3) was giving an internal error even with a simple config file > >

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Chris Wright
* Srinivasa R Kanduru (skand...@gmail.com) wrote: > Thanks a lot guys ! I was using kvm directly to launch VM as libvirt > (0.9.11.3) was giving an internal error even with a simple config file > which replaces the default network with openvswitch. Hmm, >= 0.9.11 should be good (I'm using 0.9.11

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Srinivasa R Kanduru
Hi Ansis, I have opened a bug against libvirt .. https://bugzilla.redhat.com/show_bug.cgi?id=817404 attaching the tar file here .. Thanks, Srinivas. On Fri, May 4, 2012 at 1:22 PM, Ansis Atteka wrote: > > > On Fri, May 4, 2012 at 1:19 PM, Srinivasa R Kanduru wrote: > >> Thanks a lot guys !

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Jesse Gross
On Fri, May 4, 2012 at 1:00 PM, Chris Wright wrote: > * Srinivasa R Kanduru (skand...@gmail.com) wrote: >> The physical interface is a wireless NIC. I assume that shouldn't have any >> bearing on the behaviour. > > Yes, it does.  Seems that OVS ought to do something like: > > Subject: [PATCH] open

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Oliver Francke
Well, Am 04.05.2012 um 21:38 schrieb Ben Pfaff: > On Fri, May 04, 2012 at 09:34:27PM +0200, Oliver Francke wrote: >> … showed the following: >> >> root@fcmsnode10:~# ovs-dpctl show >> system@vmbr1: >> lookups: hit:263209087 missed:904392 lost:0 >> flows: 5 >> port 0: vmbr1 (intern

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Ansis Atteka
On Fri, May 4, 2012 at 1:19 PM, Srinivasa R Kanduru wrote: > Thanks a lot guys ! I was using kvm directly to launch VM as libvirt > (0.9.11.3) was giving an internal error even with a simple config file > which replaces the default network with openvswitch. > > What error was that? Can you provi

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Srinivasa R Kanduru
Thanks a lot guys ! I was using kvm directly to launch VM as libvirt (0.9.11.3) was giving an internal error even with a simple config file which replaces the default network with openvswitch. May I ask which version of libvirt that I should use ? Regards, Srinivas. On Fri, May 4, 2012 at 1:00

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Chris Wright
* Srinivasa R Kanduru (skand...@gmail.com) wrote: > The physical interface is a wireless NIC. I assume that shouldn't have any > bearing on the behaviour. Yes, it does. Seems that OVS ought to do something like: Subject: [PATCH] openvswitch: honour IFF_DONT_BRIDGE From: Chris Wright Especially

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Jesse Gross
On Fri, May 4, 2012 at 12:45 PM, Srinivasa R Kanduru wrote: > The physical interface is a wireless NIC. I assume that shouldn't have any > bearing on the behaviour. Wireless devices often do not allow MACs other than the one associated with the access point. __

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Srinivasa R Kanduru
Hi Ben, It is happening without the controller removed too .. $ sudo ovs-vsctl show add5c761-9075-4f6d-8df2-a23c72062451 Bridge ovsbr Port "tap0" Interface "tap0" Port "eth1" Interface "eth1" Port ovsbr Interface ovsbr

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Ben Pfaff
On Fri, May 04, 2012 at 09:34:27PM +0200, Oliver Francke wrote: > … showed the following: > > root@fcmsnode10:~# ovs-dpctl show > system@vmbr1: > lookups: hit:263209087 missed:904392 lost:0 > flows: 5 > port 0: vmbr1 (internal) > port 1: eth1 > port 4: vlan10 (interna

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Oliver Francke
… showed the following: root@fcmsnode10:~# ovs-dpctl show system@vmbr1: lookups: hit:263209087 missed:904392 lost:0 flows: 5 port 0: vmbr1 (internal) port 1: eth1 port 4: vlan10 (internal) port 7: tap410i1d0 port 13: tap433i1d0 port 1

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Ben Pfaff
You have a controller connected. The controller may be overriding the default OVS behavior. On Fri, May 04, 2012 at 12:27:22PM -0700, Srinivasa R Kanduru wrote: > Thanks ! Here is the output: > $ sudo ovs-vsctl show > [sudo] password for cloud: > add5c761-9075-4f6d-8df2-a23c72062451 > Bridge

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Ben Pfaff
On Fri, May 04, 2012 at 09:25:16PM +0200, Oliver Francke wrote: > Am 04.05.2012 um 21:13 schrieb Ben Pfaff: > > > On Fri, May 04, 2012 at 09:11:27PM +0200, Oliver Francke wrote: > >> Am 04.05.2012 um 20:57 schrieb Ben Pfaff: > >> > >>> On Fri, May 04, 2012 at 08:42:25PM +0200, Oliver Francke wrot

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Srinivasa R Kanduru
Thanks ! Here is the output: $ sudo ovs-vsctl show [sudo] password for cloud: add5c761-9075-4f6d-8df2-a23c72062451 Bridge ovsbr Controller "tcp:127.0.0.1:6633" is_connected: true Port "tap0" Interface "tap0" Port "eth1" Interface "eth1

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Oliver Francke
Mhm, Am 04.05.2012 um 21:13 schrieb Ben Pfaff: > On Fri, May 04, 2012 at 09:11:27PM +0200, Oliver Francke wrote: >> Am 04.05.2012 um 20:57 schrieb Ben Pfaff: >> >>> On Fri, May 04, 2012 at 08:42:25PM +0200, Oliver Francke wrote: Does one have any experiences with workload for ca. 150 VMs, w

Re: [ovs-discuss] (no subject)

2012-05-04 Thread Ben Pfaff
On Fri, May 04, 2012 at 12:20:52PM -0700, Srinivasa R Kanduru wrote: > I followed cookbook instructions to connect openvswitch to two VMs and to > the host physical interface. The tap interfaces of VM and the physical > interface on the host are added to the openvswitch bridge and I am able to > p

[ovs-discuss] (no subject)

2012-05-04 Thread Srinivasa R Kanduru
Hi, I followed cookbook instructions to connect openvswitch to two VMs and to the host physical interface. The tap interfaces of VM and the physical interface on the host are added to the openvswitch bridge and I am able to ping between VMs and from VM to the host. But the packets are not going o

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Ben Pfaff
On Fri, May 04, 2012 at 09:11:27PM +0200, Oliver Francke wrote: > Am 04.05.2012 um 20:57 schrieb Ben Pfaff: > > > On Fri, May 04, 2012 at 08:42:25PM +0200, Oliver Francke wrote: > >> Does one have any experiences with workload for ca. 150 VMs, what > >> das ovs-vswitchd say to this, with at least

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Oliver Francke
That… Am 04.05.2012 um 20:57 schrieb Ben Pfaff: > On Fri, May 04, 2012 at 08:42:25PM +0200, Oliver Francke wrote: >> Does one have any experiences with workload for ca. 150 VMs, what >> das ovs-vswitchd say to this, with at least one rule for every VM? > > It should be fine. We regularly use 10

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Ben Pfaff
On Fri, May 04, 2012 at 08:42:25PM +0200, Oliver Francke wrote: > Does one have any experiences with workload for ca. 150 VMs, what > das ovs-vswitchd say to this, with at least one rule for every VM? It should be fine. We regularly use 1 rules or more. ___

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Oliver Francke
Hi Ben, thanks for the quick response, I think I was too much affiliated with the iptables-chains, which improves readability. But, yes, each one table for all interfaces should do it. Does one have any experiences with workload for ca. 150 VMs, what das ovs-vswitchd say to this, with at least

Re: [ovs-discuss] ovs bridge behind a linux bridge

2012-05-04 Thread Jesse Gross
I would try running tcpdump on the various interfaces in the system to see where the tagged packets stop. It would help if you could distill things down somewhat - there's really just too much information here. On Fri, May 4, 2012 at 8:35 AM, David Douard wrote: > Hi, > > I am trying to test Ope

Re: [ovs-discuss] simple open vswitch usage?

2012-05-04 Thread Ben Pfaff
I don't have further suggestions. On Fri, May 04, 2012 at 01:11:02PM -0400, Ryan White wrote: > Vboxnet0 is a virtualbox host-only adapter on the host side. By "route," I > meant, on the guest VM, I typed "sudo ip route add default via 192.168.56.1 > dev eth0". On the guest side it appears as eth0

Re: [ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Ben Pfaff
On Fri, May 04, 2012 at 06:32:11PM +0200, Oliver Francke wrote: > First try was then: > > ovs-ofctl add-flow vmbr0 'in_port=504 ip idle_timeout=0 > dl_src=00:00:AA:BB:CC:DD nw_src=192.168.1.35 priority=4 > action=resubmit(504,1)' > ovs-ofctl add-flow vmbr0 'in_port=504 ip idle_timeout=0 > prio

Re: [ovs-discuss] simple open vswitch usage?

2012-05-04 Thread Ben Pfaff
No. "sudo ifconfig wlan0 0.0.0.0". Ah, I misunderstood what you meant by configuring the gateway. What kind of interface is vboxnet0? Normally, on a bridge (whether Linux bridge or OVS bridge) you should only put an IP address on the bridge interface (e.g. br0) or on special "internal" ports.

[ovs-discuss] Newbie and q. about implementing firewall-rules ala iptables with openflow for qemu-VMs

2012-05-04 Thread Oliver Francke
Hi, first of all: I have things up n running, but it does not scale at the end of the day. Tasks: - prevent user making trouble if he fakes MAC-address inside the VM - prevent user making trouble if he fakes IP-address inside the VM - continue with valid packet and "normal" firewal

Re: [ovs-discuss] simple open vswitch usage?

2012-05-04 Thread Ben Pfaff
That is what I meant. But you also have to remove the IP address from wlan0. I couldn't say whether vboxnet0 is the correct default gateway. Is the Internet reachable through that interface? On Fri, May 04, 2012 at 12:26:26PM -0400, Ryan White wrote: > " Did you move the IP address, if any, fro

Re: [ovs-discuss] simple open vswitch usage?

2012-05-04 Thread Ben Pfaff
On Fri, May 04, 2012 at 10:09:45AM -0400, Ryan White wrote: > I am a bit of a networking newbie, and I just want to get some simple Open > vSwitch usage. For instance, is it possible for a laptop with Open vSwitch > and VirtualBox, to connect its virtual machine to the internet using a VBox > host-

Re: [ovs-discuss] Connecting OpenVswitch and a NOX controller present on the same machine

2012-05-04 Thread Ben Pfaff
Does the controller's listening socket appear in the output of "netstat -l"? On Fri, May 04, 2012 at 12:17:23AM -0500, Anisha Kolasani wrote: > Is there any way I could find out why the controller might be rejecting the > connection? I would appreciate if somebody could give a suggestion. > > Th

Re: [ovs-discuss] Connecting OpenVswitch and a NOX controller present on the same machine

2012-05-04 Thread Ben Pfaff
On Thu, May 03, 2012 at 07:39:41PM -0500, Anisha Kolasani wrote: > How can the OVS be configured in --out-of-band control mode? Are there any > documents I could refer too..? What led you to believe that adding --out-of-band was the correct way to configure this? > I tried using 'ovs-openflowd' t

Re: [ovs-discuss] simple open vswitch usage?

2012-05-04 Thread Sergio Kviato
Seems all ports connected. Please post output of "ovs-ofctl dump-flows br0" Please post output of ovs-vsctl get-controller Actually you can use and setup flows without external controller. For such thing use ovs-ofctl. If you setup external controller it will be responsible for control flows

[ovs-discuss] ovs bridge behind a linux bridge

2012-05-04 Thread David Douard
Hi, I am trying to test OpenStack with Quantum using OVS. In my test environment, the nova-network service run in a kvm VM on a host dedicated to virtualization. Network on this host is built on linux bridges. The kvm host (hx4) is a Debian Squeeze box, running among others a guest (essex) consis

Re: [ovs-discuss] simple open vswitch usage?

2012-05-04 Thread Sergio Kviato
Can you show output of "ovs-vsctl list bridge" Thanks. On May 4, 2012, at 17:09, "Ryan White" wrote: > Hi all, > > I am a bit of a networking newbie, and I just want to get some simple Open > vSwitch usage. For instance, is it possible for a laptop with Open vSwitch > and VirtualBox, to co

[ovs-discuss] simple open vswitch usage?

2012-05-04 Thread Ryan White
Hi all, I am a bit of a networking newbie, and I just want to get some simple Open vSwitch usage. For instance, is it possible for a laptop with Open vSwitch and VirtualBox, to connect its virtual machine to the internet using a VBox host-only adapter bridged to wlan0, which is connected to the

Re: [ovs-discuss] 回复: 回复: 回复: 回复: 回复: How to configure in-band control in OpenvSwitch?

2012-05-04 Thread Reid Price
Make sure you have removed the old IP addresses from ethX as well On Thu, May 3, 2012 at 1:37 AM, 星言 墨虚 wrote: > I have assigned IP address to br0, and let OpenvSwitch to connect > controller. I can find the ARP Request packet and ARP Reply packet between > OpenvSwitch and NOX by wireshark. But