Re: [ovs-discuss] Alternative to Iptables for packet filtering in OVS interfaces

2016-10-18 Thread Justin Pettit
> On Oct 17, 2016, at 5:36 PM, Richard Mayers > wrote: > > Hi, > > I found how to do it. With ovs-ofctl you can also mark the packets so > for example to mark all the icmp i do: > > ovs-ofctl add-flow -O Openflow13 ovs_0_0 > "priority=1000,dl_type=0x0800,nw_proto=1, > actions=set_field:10->p

Re: [ovs-discuss] Alternative to Iptables for packet filtering in OVS interfaces

2016-10-17 Thread Richard Mayers
Hi, I found how to do it. With ovs-ofctl you can also mark the packets so for example to mark all the icmp i do: ovs-ofctl add-flow -O Openflow13 ovs_0_0 "priority=1000,dl_type=0x0800,nw_proto=1, actions=set_field:10->pkt_mark,normal" Is it okay if I use normal? I just want to mark packets and

Re: [ovs-discuss] Alternative to Iptables for packet filtering in OVS interfaces

2016-10-17 Thread Geza Gemes
On 10/17/2016 11:54 AM, Richard Mayers wrote: Hi all, I just realised that all the iptables rules I have been applying to my open Vswitch interfaces never match. I am using iptables to mark some packets, and then I use TC (traffic control) filters to put packets into different priority queues d