[ovs-discuss] Anyone interested in features of linux-stack-hook

2014-07-23 Thread Wuhongning
Background Today openstack use linux bridge to do security control, but more and more people are interested in native OVS flowtable based firewall, and there is already some BP. However, exist solution has several drawbacks: 1) must rewrite all existing iptable rule with ovs flowtable, all ipt

Re: [ovs-discuss] Hello version 0

2014-07-23 Thread Anup Khadka
This suggestion will depend on the answer to my first question, and if a behavior as such is even desirable/recommended, however, the extract-ofp-msgs script could probably be changed to return (0x00, 0xff) if range == '' on decode_version_range. Thank you, Anup On Wed, Jul 23, 2014 at 7:59 PM,

[ovs-discuss] Hello version 0

2014-07-23 Thread Anup Khadka
If OVS receives a Hello packet with version set to 0, it logs an error "received message while expecting hello" and change's vconn's state without sending any message back to the controller. Is this a desired behavior? The standard isn't really clear on how to process a Hello packet with version =

Re: [ovs-discuss] Sflow Sampling in openvswitch

2014-07-23 Thread Neil McKee
The whole v-switch is modeled as one sFlow data source. To drive that packets are sampled on ingress at all ports except virtual patch ports between bridges. You can still extract per-port stats because the ingress and egress ports are included in the output. Does this answer your question? Nei

Re: [ovs-discuss] Openvswitch bridge is not created properly sometimes

2014-07-23 Thread Ben Pfaff
On Wed, Jul 23, 2014 at 04:10:49PM +0530, mageshgv wrote: > We are facing an issue with Openvswitch 2.0.0 package built from source > code for Ubuntu 13.04. > > We have patched the openvswitch init script to invoke another script, that > creates two OVS bridges during openvswitch start. > > The p

[ovs-discuss] Packet not passing through patch-port and inconsistent ovs-dpctl, ovs-ofctl statistics.

2014-07-23 Thread Wei Shen
Hi all, I am in the middle of adding another openstack-compute node. However the OVS network doesn't work. When I try to send a packet from a VM to Internet, I can see the packet reaching br-int and get a VLAN tag there. However, if I put wireshark on br-tun, it doesn't show any trace of the packe

Re: [ovs-discuss] detecting supported port types and enabling dpdk datapaths in OpenStack

2014-07-23 Thread Ben Pfaff
On Wed, Jul 23, 2014 at 03:46:24PM +, Mooney, Sean K wrote: > 1.The command line of the ovs-vSwitchd process could be stored in > the ovsdb. (least preferable option, but smallest change) > 2.The datapath type of the DPDK build could be changed to > NETDEV-DPDK (bette

[ovs-discuss] Add a flow with action "go to table" from OpenDayLight controller to Open vSwitch ?

2014-07-23 Thread Anhn Nguyen
Dear all, Can anyone tell me how to add a flow with action "go to table" from OpenDayLight controller to Open vSwitch, instead of doing this command from mininet: *sudo ovs-ofctl -O OpenFlow13 add-flow s1 table=0,in_port=2,actions=goto_table:1* I followed this instruction https://wiki.o

[ovs-discuss] Openvswitch bridge is not created properly sometimes

2014-07-23 Thread mageshgv
Hi, We are facing an issue with Openvswitch 2.0.0 package built from source code for Ubuntu 13.04. We have patched the openvswitch init script to invoke another script, that creates two OVS bridges during openvswitch start. The problem is that out of some 1000 runs, the following issue is hit in

[ovs-discuss] 答复: How can I make ovs send multicast VxLAN tunnel packets---that's to set the tun-dst a multicast group address?

2014-07-23 Thread 研七 福州
Thank you for your kind reply! I test the multicast this morning, and found that with set field I can send VxLAN encapsulated tunnel packet with multicast tun-dst address. But in order to receive the multicast packet, the machine running openvswitch should join a multicast group, or the multica

[ovs-discuss] detecting supported port types and enabling dpdk datapaths in OpenStack

2014-07-23 Thread Mooney, Sean K
Hi, For the current Openstack development cycle (JUNO) we are trying to enable Openstack to allow virtual machines to utilise the DPDK based userspace vhost interface. As part of enabling DPDK accelerated datapaths in the neutron and opendaylight, a detection mechanism is required to determine

Re: [ovs-discuss] 'get_next_hop' is called without a scope

2014-07-23 Thread Ben Pfaff
On Wed, Jul 23, 2014 at 11:58:53AM +, Gur Stavi wrote: > The get_next_hop in netdev_class is activated without any scope (netdev or > ofproto). > If a session has multiple active bridges, each with its own set of netdevs, > it should maintain a separate next hop table for each bridge. > On a

[ovs-discuss] 'get_next_hop' is called without a scope

2014-07-23 Thread Gur Stavi
The get_next_hop in netdev_class is activated without any scope (netdev or ofproto). If a session has multiple active bridges, each with its own set of netdevs, it should maintain a separate next hop table for each bridge. On a call to get_next_hop, how should the callee know on which bridge the