[ovs-discuss] network isolation with mpls

2013-12-05 Thread Vasiliy Tolstov
Hi all. I'm read some docs (mainly from openstack) that says how create network isolation. Does it possible to isolate one network from another by adding mpls label (for example user id) and on recieve side accept packets only with specific label? -- Vasiliy Tolstov, e-mail: v.tols...@selfip.ru j

Re: [ovs-discuss] Increasing Kernel space flow table's timeout

2013-12-05 Thread Asadullah Hussain
Thanks I will give it a go. I was hoping to collect all traffic which has a corresponding rule in the ofctl table but your comment on "not all packets appearing in the datapath" has cast doubts over that. CISCO Netflow samples the traffic, which is not good enough for me but I'll try the OVS netfl

Re: [ovs-discuss] dhcp issue with in-band OVS

2013-12-05 Thread Ben Pfaff
On Wed, Dec 04, 2013 at 04:01:16PM -0800, Yiannis Yiakoumis wrote: > I run ovs at an AP and observe some weird dhcp behavior. > > The AP has two ports (WAN -> eth0, LAN -> eth1). Only the wan port is under > ovs; the LAN is not, and there is also no cable attached to it. OVS is > configured for in

Re: [ovs-discuss] about flow_mod

2013-12-05 Thread Ben Pfaff
Please don't drop the list. Your flow_mod specifies an out_group other than OFPG_ANY with a command other than OFPFC_DELETE or OFPFC_DELETE_STRICT. OVS responded with an error. However, I see that the OpenFlow spec says to just ignore out_group in this case. I'll send out a patch in a minute.

Re: [ovs-discuss] Adding nw_proto with nicira extensions from pox

2013-12-05 Thread Ben Pfaff
Please don't drop the list. I don't use POX, so you can list stuff that doesn't work with POX all day and I won't be able to help. But if you provide a hex dump of the OpenFlow message, then I can tell you what it's doing. On Thu, Dec 05, 2013 at 07:56:51PM -0800, Jayanth Silesh wrote: > when I

Re: [ovs-discuss] Adding nw_proto with nicira extensions from pox

2013-12-05 Thread Ben Pfaff
On Thu, Dec 05, 2013 at 07:05:29PM -0800, Jayanth Silesh wrote: > I am trying to add nw_proto with nicira extensions from pox. > I have been really struggling with this. > I want to add, nw_proto field on a table which is not the default one. > > Eg: table_id=2 , dl_type =0x0800 , nw_proto=6 > >

[ovs-discuss] Adding nw_proto with nicira extensions from pox

2013-12-05 Thread Jayanth Silesh
Hey All, I am trying to add nw_proto with nicira extensions from pox. I have been really struggling with this. I want to add, nw_proto field on a table which is not the default one. Eg: table_id=2 , dl_type =0x0800 , nw_proto=6 The only way is to go about nicira extensions since thats the only w

[ovs-discuss] nw_proto not getting added in the flow

2013-12-05 Thread Jayanth Silesh
Hi All, I have written a small pox as follows but in the OVS 2.0 it does not add the nw_proto in the flow table. The pox code is as follows:        # Turn on Nicira packet_ins     msg = nx.nx_packet_in_format()     event.connection.send(msg)     # Turn on ability to specify table in flow_mods  

Re: [ovs-discuss] [ovs-dev] Sending OF Packet Out

2013-12-05 Thread Ben Pfaff
On Thu, Dec 05, 2013 at 02:53:20PM -0700, Anu Mercian wrote: > I am trying to send a OF Packet-out message from the controller with > data, different from the packet Data of the OF Packet In message, > assuming that my buffer-id is not set, so the entire packet data is > sent to the controller. i.e

Re: [ovs-discuss] Increasing Kernel space flow table's timeout

2013-12-05 Thread Ben Pfaff
Have you considered using NetFlow? There's no description of what goes into the kernel flow table because that is an implementation detail subject to change. It's not an API of any kind, certainly not a stable one. On Thu, Dec 05, 2013 at 10:17:43AM +0500, Asadullah Hussain wrote: > Thanks, can

Re: [ovs-discuss] Fwd: Packet drops with high rate of Packet_In

2013-12-05 Thread Ben Pfaff
I'm glad to hear that you worked around the problem. By the way, I thought that you made a good point earlier that nothing was logged when packet-ins were dropped, so I sent out a patch to fix that. I credited and CCed you on it. On Thu, Dec 05, 2013 at 05:42:44PM +0100, Anton Matsiuk wrote: > T

[ovs-discuss] Fwd: Packet drops with high rate of Packet_In

2013-12-05 Thread Anton Matsiuk
Thank you for response! The problem was with MTU on Lo iface, after increasing it the TCP window increased up to the limit specified by socket on controller's side and packet drops stopped. On 4 December 2013 19:16, Ben Pfaff wrote: > On Wed, Nov 27, 2013 at 04:59:02PM +0100, Anton Matsiuk wro

[ovs-discuss] GRE tunnel

2013-12-05 Thread kevin parker
Hi All, I have a working GRE connected between one kvm host ovs 1.11 and xenserver ovs 1.4.6 I have created an *isolated* bridge and connected virtual interface to isolated bridge with private ip ,and then added *gre0* port by mentioning remote public IP. Everything is fine, dont have a

[ovs-discuss] OVS on Kernel 2.6.39-400.210.2.el6uek.x86_64

2013-12-05 Thread Andrei Andone
Hello guys, I have a question. I know that the kernel 2.6.39-400.210.2.el6uek.x86_64 (Oracle Linux kernel) has Open vSwitch built-in (or at least a modified version of Open vSwitch), but I would like to install Open vSwitch from source on in it. The problem I ran into is as follows: I config

Re: [ovs-discuss] Add overlap flows, which one would match?

2013-12-05 Thread Ben Pfaff
On Thu, Dec 05, 2013 at 06:09:13PM +0800, ZhengLingyun wrote: > What will happen when I add overlap flows with the same priority in OpenFlow > 1.0.0? It's undefined. ___ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinf

Re: [ovs-discuss] about flow_mod

2013-12-05 Thread Ben Pfaff
On Thu, Dec 05, 2013 at 07:31:44PM +0800, chen zhang wrote: > hello,dear all! > look about the flow_table using ovs-ofctl dump-flows s1 -O OpenFlow13: > > cookie=0x0, duration=423.001s, table=0, n_packets=9, n_bytes=546, > > priority=1,in_port=2,dl_dst=00:00:00:00:00:10 actions=output:3 >

Re: [ovs-discuss] ovs-vsctl set-controller fails with test-controller using SSL.

2013-12-05 Thread Ben Pfaff
On Thu, Dec 05, 2013 at 07:51:19PM +0530, Kelvin keros wrote: > Also, man page of ovs-vsctl in "set-controller bridge target..." says to > pass --private-key, --certificate, and --ca-cert while executing > set-controller I see that the instructions in ovs-vsctl manpage are confusing. You don't s

[ovs-discuss] ovs-vsctl set-controller fails with test-controller using SSL.

2013-12-05 Thread Kelvin keros
Hi OVS Team, I was trying to use test-controller with a OVS switch with SSL but found below errors when set-controller is executed. # ovs-vsctl set-controller br6 ssl:192.168.188.155:6633 On: ovs-vswitchd.log 2013-12-05T10:13:34.519Z|00081|rconn|INFO|br6<->

[ovs-discuss] Measuring Data Path Performance

2013-12-05 Thread Volkan YAZICI
Hi, In an OVS 2.0.0 setup, where the data path is loaded with artificially generated traffic by the clients, we observe the effect of different routing algorithms on packet latency. The problem is, despite there exists manually introduced hotspots (that is, switches under excessive traffic load) i

[ovs-discuss] about flow_mod

2013-12-05 Thread chen zhang
hello,dear all! look about the flow_table using ovs-ofctl dump-flows s1 -O OpenFlow13: cookie=0x0, duration=423.001s, table=0, n_packets=9, n_bytes=546, priority=1,in_port=2,dl_dst=00:00:00:00:00:10 actions=output:3 i want to delete the flow above using flow_mod,and i definite a method l

[ovs-discuss] about flow_mod

2013-12-05 Thread chen zhang
hello,dear all! cookie=0x0, duration=423.001s, table=0, n_packets=9, n_bytes=546, priority=1,in_port=2,dl_dst=00:00:00:00:00:10 actions=output:3 i want to delete the flow above using flow_mod,and i definite a method like this: def remove_flow(self, datapath, match): ofproto = data

[ovs-discuss] Strange QoS/Latency problem with OpenvSwitch

2013-12-05 Thread Chu Duc Minh
I'm running an OpenStack-cluster, and use OpenvSwitch's VLAN to network isolation (each teanant) When I ping between VLAN (from instance A of tenant X to instance B of tenant Y), i got a very strange problem: # ping* -i 1 *10.2.1.26 PING 10.2.1.26 (10.2.1.26) 56(84) bytes of data. 64 bytes from 1

[ovs-discuss] Add overlap flows, which one would match?

2013-12-05 Thread ZhengLingyun
Hi, all What will happen when I add overlap flows with the same priority in OpenFlow 1.0.0? OpenFlow Switch Specification Version 1.0.0 "4.6 Flow Table Modification Messages" says: For valid (non-overlapping) ADD requests, or those with no overlap checking, the switch must insert the flow en