Re: [ovs-discuss] GRE over IPV6

2016-04-07 Thread Jesse Gross
On Thu, Apr 7, 2016 at 12:04 PM, Vasiliy Tolstov wrote: > 2016-04-07 17:27 GMT+03:00 Thadeu Lima de Souza Cascardo > : >> >> Should be all supported. But really not sure about GRE on kernel datapath. In >> any case, support in the kernel datapath will depend on kernel version or >> external modul

Re: [ovs-discuss] dpif inline documentation needs to be updated

2016-04-07 Thread Jesse Gross
On Thu, Apr 7, 2016 at 2:22 PM, Zhang Qiang wrote: > Hi all, > > At lib/dpif.h line 117(as of git master d61fbed) the comment says: >> Refer to OVS_KEY_ATTR_* and "struct ovs_key_*" in include/odp-netlink.h >> for details. > > But the file include/odp-netlink.h doesn't exist any more. Quick search

Re: [ovs-discuss] hello when i build on centos6.X there is a bug said redefinition of 'ip_is_fragment' hwo could i fix it

2016-04-07 Thread Jesse Gross
On Thu, Apr 7, 2016 at 4:37 AM, wrote: > When I build openvswitch 2.3.3 and 2.41. > > > > /root/rpmbuild/BUILD/openvswitch-2.3.1/_default/../datapath/linux/compat/include/net/ip.h:9: > error: redefinition of 'ip_is_fragment' > > include/net/ip.h:249: note: previous definition of 'ip_is_fragment'

Re: [ovs-discuss] Datapath implementation query

2016-04-14 Thread Jesse Gross
On Thu, Apr 14, 2016 at 11:09 AM, Prathap T wrote: > Hi OVS-Team: > > We are porting OVS onto one of our hardware and I had a question in the > kernel datapath implementation. > > In the function - masked_flow_lookup > > ovs_flow_mask_key(&masked_key, unmasked, mask); > hash = flow_hash(&mas

Re: [ovs-discuss] Datapath implementation query

2016-04-14 Thread Jesse Gross
On Thu, Apr 14, 2016 at 6:19 PM, Prathap T wrote: > Hi Jesse: > > "Imagine a 1 bit long flow. The flow in the table has the value 0 and > the mask is 1 (significant). There is also another mask with the value > 0 (not significant). If a packet came in with the header value of 1 > and it tried th

Re: [ovs-discuss] Error compiling kernel module for OVS 2.5.0

2016-04-14 Thread Jesse Gross
Future releases of OVS - both 2.5.x and follow on major releases - will include this patch. Once that happens, there will be no need to manually patch the source. On Thu, Apr 14, 2016 at 2:01 PM, Luca Prete wrote: > Joe, > > It worked out perfectly! Do you think would be possible to create a patc

Re: [ovs-discuss] Matching on tun_id in a flow rule

2016-04-18 Thread Jesse Gross
On Sun, Apr 17, 2016 at 9:43 AM, Keith Holleman wrote: > > I have GRE traffic transiting an OVS switch, in other words the tunnel > source and destination is not in this OVS instance. I had wanted to match > on the GRE key ID in this to apply some very specific policy to it. The > transit traffi

Re: [ovs-discuss] Error when popping mpls tag from vlan tagged packet

2016-04-20 Thread Jesse Gross
On Wed, Apr 20, 2016 at 4:32 AM, Alatalo Janne wrote: > Hello, > > I'm testing mpls and vlan tagging with OpenFlow on OpenvSwitch and faced a > problem when trying to pop mpls tag from a vlan tagged packet. The problem > can be seen in the following example in a simple mininet network: > ``` > # m

Re: [ovs-discuss] Incorrect UDP checksum for IP fragmented datagrams that have mod_nw_dst action

2016-04-29 Thread Jesse Gross
On Fri, Apr 29, 2016 at 12:11 PM, Michael Ben-Ami wrote: > > OVS version: > > ovs-ofctl (Open vSwitch) 2.3.2 > Compiled Aug 24 2015 18:39:15 > OpenFlow versions 0x1:0x4 > > Linux version: > > Linux version 3.13.0-52-generic (buildd@comet) (gcc version 4.8.2 (Ubuntu > 4.8.2-19ubuntu1) ) #86-Ubuntu

Re: [ovs-discuss] Pre 2.4 Stateful NAT

2016-04-29 Thread Jesse Gross
This is not going to be possible in 2.3. It's a feature for an upcoming release (presumably the next one). On Fri, Apr 29, 2016 at 10:57 AM, Michael Ben-Ami wrote: > I could use help with the OVS requirements, Linux kernel requirements, any > any flow examples to implement what is described in sl

Re: [ovs-discuss] Incorrect UDP checksum for IP fragmented datagrams that have mod_nw_dst action

2016-04-29 Thread Jesse Gross
6 at 4:02 PM, Jesse Gross wrote: >> >> On Fri, Apr 29, 2016 at 12:11 PM, Michael Ben-Ami >> wrote: >> > >> > OVS version: >> > >> > ovs-ofctl (Open vSwitch) 2.3.2 >> > Compiled Aug 24 2015 18:39:15 >> > OpenFlow versions 0x1:0x4 &g

Re: [ovs-discuss] MTU considerations for OVN

2016-05-04 Thread Jesse Gross
On Tue, May 3, 2016 at 3:50 PM, Matt Kassawara wrote: > Jesse, > > I'm resurrecting this thread after a fairly lengthy discussion of MTU with > Ben at the recent OpenStack summit. Have you given the topic any further > thought toward implementation in a reasonable way? Can you elaborate on the > a

Re: [ovs-discuss] MTU considerations for OVN

2016-05-06 Thread Jesse Gross
On Fri, May 6, 2016 at 8:40 AM, Ryan Moats wrote: > "discuss" wrote on 05/04/2016 06:09:04 PM: > >> From: Jesse Gross >> To: Matt Kassawara >> Cc: discuss >> Date: 05/04/2016 06:09 PM >> Subject: Re: [ovs-discuss] MTU considerations for OVN >&

Re: [ovs-discuss] MTU considerations for OVN

2016-05-06 Thread Jesse Gross
On Fri, May 6, 2016 at 11:53 AM, Ryan Moats wrote: > Jesse Gross wrote on 05/06/2016 11:11:10 AM: > >> From: Jesse Gross >> To: Ryan Moats/Omaha/IBM@IBMUS >> Cc: Matt Kassawara , discuss >> , Thomas Graf >> Date: 05/06/2016 11:11 AM > > >> Subje

Re: [ovs-discuss] compose_output_action__ doesn't use err return value from build_tunnel_send

2016-06-02 Thread Jesse Gross
On Thu, Jun 2, 2016 at 11:59 AM, David Evans wrote: > Hi OVSers.. > > ofproto/ofproto-dpif-xlate.c fn compose_output_action__ doesn't deal with > errors reported by build_tunnel_send. eg (invalid arp cache value) > > It shoots out invalid packet while waiting for an arp reply to fix the > cache. >

Re: [ovs-discuss] No ovs virtual interface on ubuntu 16.04

2016-06-06 Thread Jesse Gross
On Mon, Jun 6, 2016 at 8:33 AM, Christophe VILLA wrote: > Hello, > > i use ovs 2.0.2 on Ubuntu 14.04 with kvm and run well. > > I have install on Ubuntu 16.04 with ovs 2.5.0 and i can not see virtual > interface directly on ubuntu 16.04. > The interfaces are present in ovs configuration but no app

Re: [ovs-discuss] No ovs virtual interface on ubuntu 16.04

2016-06-07 Thread Jesse Gross
On Tue, Jun 7, 2016 at 12:51 AM, Christophe VILLA wrote: > On 06/06/2016 22:25, Jesse Gross wrote: >> On Mon, Jun 6, 2016 at 8:33 AM, Christophe VILLA >> wrote: >>> Hello, >>> >>> i use ovs 2.0.2 on Ubuntu 14.04 with kvm and run well. >>> >

Re: [ovs-discuss] MTU considerations for OVN

2016-06-09 Thread Jesse Gross
derlying > physical network MTU via config option? > > On Fri, May 6, 2016 at 1:08 PM, Jesse Gross wrote: >> >> On Fri, May 6, 2016 at 11:53 AM, Ryan Moats wrote: >> > Jesse Gross wrote on 05/06/2016 11:11:10 AM: >> > >> >> From: Jesse Gross >

Re: [ovs-discuss] MTU considerations for OVN

2016-06-10 Thread Jesse Gross
> On Thu, Jun 9, 2016 at 7:06 PM, Jesse Gross wrote: >> >> In my previous message, this is what I mentioned (reproducing it here >> just because it doesn't appear in the quoted conversation below): >> >> "One possible solution is to introduce an action in

Re: [ovs-discuss] [ovs-dev] Request for comments on Open vSwitch joining the Linux Foundation

2016-06-27 Thread Jesse Gross
On Mon, Jun 27, 2016 at 1:03 PM, Flavio Leitner wrote: > On Sun, Jun 19, 2016 at 12:35:34PM -0700, Ben Pfaff wrote: >> On Sun, Jun 19, 2016 at 09:36:47AM -0700, Ben Pfaff wrote: >> > LF expects OVS to be a rather small budgetary burden, due to the >> > project's simple structure. The TSC will coo

Re: [ovs-discuss] [ovs-dev] Request for comments on Open vSwitch joining the Linux Foundation

2016-06-27 Thread Jesse Gross
On Mon, Jun 27, 2016 at 4:51 PM, Flavio Leitner wrote: > On Mon, Jun 27, 2016 at 01:30:03PM -0700, Jesse Gross wrote: >> On Mon, Jun 27, 2016 at 1:03 PM, Flavio Leitner wrote: >> > On Sun, Jun 19, 2016 at 12:35:34PM -0700, Ben Pfaff wrote: >> >> On Sun, Jun 19,

Re: [ovs-discuss] Bug OpenVSwitch 2.5.0 - Enabling IPFIX in OpenVSwitch breaks VXLAN tunneling

2016-07-01 Thread Jesse Gross
On Fri, Jul 1, 2016 at 5:19 AM, Lluís Gifre wrote: > Dear all, > > I'm experiencing a problem when enabling IPFIX on an OpenVSwitch where VXLAN > tunnels are configured to interconnect 2 VMs (Virtual Box). Wenyu and Daniel, this is an area that you guys have been working in, can you please take a

Re: [ovs-discuss] Bug OpenVSwitch 2.5.0 - Enabling IPFIX in OpenVSwitch breaks VXLAN tunneling

2016-07-01 Thread Jesse Gross
PFIX, one is flow-based > IPFIX and the other is bridge IPFIX. > Do you enable the IPFIX on the bridge by using ovs-vsctl? > > Bests, > Daniel >> On Jul 1, 2016, at 11:56 PM, Jesse Gross wrote: >> >> On Fri, Jul 1, 2016 at 5:19 AM, Lluís Gifre wrote: >>>

Re: [ovs-discuss] Not getting traffic through ipsec_gre

2016-07-05 Thread Jesse Gross
On Tue, Jul 5, 2016 at 4:04 PM, Bolesław Tokarski wrote: > Hello, > > For some reason machine receiving traffic through ipsec_gre is not putting > it through to the LOCAL interface. > > I have a basic test setup: > > hostA - ip network - hostB > > Both hosts have just a single eth0 interface. I ma

Re: [ovs-discuss] vxlan over IPv6

2016-07-06 Thread Jesse Gross
No, the situation is the same as before. I think you'll have to wait until the OVS 2.6 release later this year. On Wed, Jul 6, 2016 at 4:56 AM, zhangqunjian wrote: > > > HI,does support for IPv6 tunneling backport to the OVS out-of-tree kernel > module for now? > On 01/25/201

Re: [ovs-discuss] Request for comments on Open vSwitch joining the Linux Foundation

2016-07-07 Thread Jesse Gross
On Wed, Jul 6, 2016 at 9:12 AM, Gray, Mark D wrote: > Processes (not really dealt with by the charter but worth some discussion): > * I think the following would improve transparency, I don't know if this > should be in the charter, but I think it would be good to address: > a. A more open r

Re: [ovs-discuss] Not getting traffic through ipsec_gre

2016-07-07 Thread Jesse Gross
On Thu, Jul 7, 2016 at 10:55 AM, Bolesław Tokarski wrote: > Hello, > > I installed Ubuntu 16.04 on the hostB to check the behaviour between the two > OSes. > > The setup is the same as with two hosts running OpenSUSE: > > >>> > >>> > hostA: >>> > >>> > ovs-vsctl add-br secure >>> > ip link set sec

Re: [ovs-discuss] Request for comments on Open vSwitch joining the Linux Foundation

2016-07-08 Thread Jesse Gross
On Fri, Jul 8, 2016 at 8:15 AM, Gray, Mark D wrote: >> On Wed, Jul 6, 2016 at 9:12 AM, Gray, Mark D >> wrote: >> > Processes (not really dealt with by the charter but worth some discussion): >> > * I think the following would improve transparency, I don't know if this >> should be in the charter,

Re: [ovs-discuss] skb_warn_bad_offload+0xc8/0xd3() kernel warning on linux v3.14.57+ovs 2.5.0

2016-07-13 Thread Jesse Gross
the host? This is an upstream kernel problem, fixed by: commit a09a4c8dd1ec7f830e1fb9e59eb72bddc965d168 Author: Jesse Gross tunnels: Remove encapsulation offloads on decap. If a packet is either locally encapsulated or processed through GRO it is marked with the offloads that i

Re: [ovs-discuss] OVS and TCP checksum offloading

2016-07-16 Thread Jesse Gross
On Fri, Jul 15, 2016 at 12:44 AM, Eder Leão Fernandes wrote: > Hi, > > Quick question. > How does Open vSwitch handles TCP checksum offloading? Does it recalculates > and rewrites the TCP checksum for every TCP packet? > > I am almost sure it does, since it looks like the only explanation to have

Re: [ovs-discuss] [ovn] linux headers

2016-07-16 Thread Jesse Gross
On Fri, Jul 15, 2016 at 10:31 PM, Murali R wrote: > Some cloud images (like in digital ocean) are having kernels updated to 4.4 > for the standard 14.04.4 images. I had to really look around to get one with > 3.13 headers. The ovs/ovn build is checking the headers and exiting for > headers > 4.3.

Re: [ovs-discuss] [ovn] linux headers

2016-07-18 Thread Jesse Gross
On Mon, Jul 18, 2016 at 10:55 PM, Murali R wrote: > >> The easiest thing to do is likely just to use the OVS module that is >> shipped as part of your distribution kernel - it is pretty recent so >> it should have most features. If you really need something that is >> missing from that (NAT is the

Re: [ovs-discuss] GUE support?

2016-07-27 Thread Jesse Gross
On Wed, Jul 27, 2016 at 5:37 PM, Luca Salvatore wrote: > I've found some random articles which talk about GUE (generic UDP > encapsulation) but can anyone give me a solid yes or no answer if OVS > support GUE > (https://tools.ietf.org/html/draft-ietf-nvo3-gue-04#section-5.10) No.

Re: [ovs-discuss] Getting kernel panic on vxlan tunnel setup

2016-07-30 Thread Jesse Gross
On Wed, Jul 27, 2016 at 1:48 PM, Hasan H. Gürsoy wrote: > > Hi there, > > I'm trying to get a three node setup working with vxlan setup, but every > try with different configuration options fail after setup of the vxlan > ports. > > Node0: > > # ovs-vsctl show > 1c34bd9e-f6cd-4d8c-8096-c087f42a9b

Re: [ovs-discuss] OVS gtp-u implementation

2016-08-19 Thread Jesse Gross
On Fri, Aug 19, 2016 at 1:16 AM, Ashish Kurian wrote: > Dear All, > > As part of my internship, I am trying to evaluate the GTP-U implementation > on OVS. Is there a patch already available and if so, how good is that? There were some people that expressed interest in it a while ago but I don't t

Re: [ovs-discuss] OVS gtp-u implementation

2016-08-22 Thread Jesse Gross
sh Kurian > > On Fri, Aug 19, 2016 at 5:35 PM, Jesse Gross wrote: >> >> On Fri, Aug 19, 2016 at 1:16 AM, Ashish Kurian >> wrote: >> > Dear All, >> > >> > As part of my internship, I am trying to evaluate the GTP-U >> > implementation &

Re: [ovs-discuss] most recent repo does not make (github)

2016-08-29 Thread Jesse Gross
Everything is building fine for me at the moment with Ubuntu 16.04. On Mon, Aug 29, 2016 at 8:30 AM, Ben Pfaff wrote: > Does anyone else see this problem? I still can't reproduce it, even > from a new, completely clean checkout. > > On Mon, Aug 29, 2016 at 09:07:36AM -0500, Christopher Hannon wr

Re: [ovs-discuss] OVS - how to use geneve with variable length options ?

2016-08-30 Thread Jesse Gross
On Tue, Aug 30, 2016 at 11:24 AM, Manish Chopra wrote: > Hi Jesse, > > > > I am trying GENEVE tunneling via OVS bridge port using ovs-vsctl tool on my > two servers which are connected back to back > > and running latest net-next kernel. > > > > eth1- 192.168.44.44 > > eth2- 192.168.44.45 > > br2

Re: [ovs-discuss] OVS - how to use geneve with variable length options ?

2016-08-31 Thread Jesse Gross
On Wed, Aug 31, 2016 at 12:13 AM, Manish Chopra wrote: >> -Original Message- >> From: Jesse Gross [mailto:je...@kernel.org] >> Sent: Wednesday, August 31, 2016 12:55 AM >> To: Manish Chopra >> Cc: pshe...@nicira.com; b...@openvswitch.org >> Subje

Re: [ovs-discuss] OVS - how to use geneve with variable length options ?

2016-09-01 Thread Jesse Gross
On Thu, Sep 1, 2016 at 11:40 AM, Manish Chopra wrote: >> -Original Message- >> From: Jesse Gross [mailto:je...@kernel.org] >> Sent: Wednesday, August 31, 2016 10:26 PM >> To: Manish Chopra >> Cc: pshe...@nicira.com; b...@openvswitch.org >> Subje

Re: [ovs-discuss] Hi openvswitch team

2016-09-02 Thread Jesse Gross
On Thu, Sep 1, 2016 at 7:12 PM, Grace Lee wrote: > Hi my kernel version is 4.4.13-v7+ so the compatible openvswitch version > should be 2.6.x. However, the latest openvswitch version is 2.5.0. when I > ./configure -with linux, it gives me an error displaying " > > configure: error: Linux kernel in

Re: [ovs-discuss] OVS - how to use geneve with variable length options ?

2016-09-02 Thread Jesse Gross
On Fri, Sep 2, 2016 at 3:38 AM, Manish Chopra wrote: > Thanks Jesse, I tried below and it actually used GENEVE header with options > [Total geneve header size = 16 bytes]. > > ovs-vsctl add-br br2 > ifconfig br3 192.168.55.44 > ovs-vsctl add-port br2 gnv0 -- set interface gnv0 type=geneve > opti

Re: [ovs-discuss] Missing configuration files linux kernel

2016-09-06 Thread Jesse Gross
On Tue, Sep 6, 2016 at 3:19 AM, Silvia Fichera wrote: > Hi all, > I want to install ovs 2.5.0 on ubuntu server 14.04. Since the original > kernel was 4.4.0-31-generic I have manually downgraded the linux kernel > > uname -r > 4.3.0-040300-generic > > > But when I do > ./configure --with-linux=/li

Re: [ovs-discuss] openvswitch2.3.0 kernel crash

2016-09-08 Thread Jesse Gross
it the same kernel crash. > > I see it on RHEL7.2 with openvswitch-2.3.2. > > Cheers, > > Dirk > >>Hi jesse, >> >>I will submit this patch to upstream then backport it to OVS >> >> >> >> >> >>At 2015-12-22 01:20:11, "Jess

Re: [ovs-discuss] Traffic loss after TEP deletion in OVS

2016-09-19 Thread Jesse Gross
On Mon, Sep 19, 2016 at 8:53 AM, Balazs Nemeth wrote: > Dear All, > > > > I think we found a bug in OVS master. In the test case 3 OVS is used, VXLAN > tunnels are configured among them in full mesh, so every node has 2 Tunnel > End Point (TEP). BFD is turned on for monitoring the tunnel liveness.

Re: [ovs-discuss] rmmod: ERROR: Module openvswitch is in use -- when ovn config is added to conf.db

2016-09-22 Thread Jesse Gross
I think this isn't actually related to tunnels - ovn-controller deletes the tunnel ports that it creates when it exits gracefully. Plus, it seems like vport-geneve was unloaded successfully. When an OVS vport is created, a reference is taken on the corresponding vport-*.ko module. However, in the

Re: [ovs-discuss] rmmod: ERROR: Module openvswitch is in use -- when ovn config is added to conf.db

2016-09-22 Thread Jesse Gross
On Thu, Sep 22, 2016 at 5:44 PM, Flavio Fernandes wrote: >> On Sep 22, 2016, at 6:53 PM, Jesse Gross wrote: >> When an OVS vport is created, a reference is taken on the >> corresponding vport-*.ko module. However, in the case of internal >> ports created by the datap

Re: [ovs-discuss] Flow Expiration returning zeros for byte/packet counts

2009-11-10 Thread Jesse Gross
David Erickson wrote: However when the flow expires, the byte/packet counter are zero. I sent off a patch for review that fixes a problem with the counters in flow expiration messages, which is hopefully the same problem as the one you are having. Does this match your scenario: * The fl

Re: [ovs-discuss] Flow Expiration returning zeros for byte/packet counts

2009-11-10 Thread Jesse Gross
Hi Jesse, Certainly the first, however I am seeing this bug on both short and long (20+seconds) flows, both with an idle timeout of whatever the default NOX 0.4 timeout is (I'm assuming 5s?). Does that qualify? Yeah, a 5 second idle timeout will trigger this problem. My guess is that th

Re: [ovs-discuss] Flow Expiration returning zeros for byte/packet counts

2009-11-12 Thread Jesse Gross
David Erickson wrote: This patch seemed to work but exposed another bizarre problem. So my setup is the same, 2 Xen servers with OVS, 1 reference OF software switch inbetween the two, a wget from .12 to .13 which is running apache. When the flows expire, dpid 17 which is the OVS on the phys

Re: [ovs-discuss] Flow Expiration returning zeros for byte/packet counts

2009-11-12 Thread Jesse Gross
David Erickson wrote: 1. If you query the flow stats before the expiration message, do you get the right results? You mentioned that this was true before but these flows are less than your 10 second polling interval. The values still look wrong from the stats message, I just did a test w

Re: [ovs-discuss] Flow Expiration returning zeros for byte/packet counts

2009-11-13 Thread Jesse Gross
David Erickson wrote: I've attached the packet dump of the netflow message from the switch causing the problems. Also as an aside, I was only able to get it to send one netflow message because my machine returned an icmp error back to ovs since I am not listening on that port.. is there a way

Re: [ovs-discuss] Flow Expiration returning zeros for byte/packet counts

2009-11-13 Thread Jesse Gross
Jesse Gross wrote: David Erickson wrote: I've attached the packet dump of the netflow message from the switch causing the problems. Also as an aside, I was only able to get it to send one netflow message because my machine returned an icmp error back to ovs since I am not listeni

Re: [ovs-discuss] Flow Expiration returning zeros for byte/packet counts

2009-11-13 Thread Jesse Gross
David Erickson wrote: The crux is the netflow message is matching the flow expiration. There was nothing in the ovs-vswitchd.log file other than messages about connecting to NOX and exiting fail-open mode, which was well before this test was performed. Can you try turning off segmentation

Re: [ovs-discuss] Flow Expiration returning zeros for byte/packet counts

2009-11-13 Thread Jesse Gross
David Erickson wrote: Jesse Gross wrote: David Erickson wrote: The crux is the netflow message is matching the flow expiration. There was nothing in the ovs-vswitchd.log file other than messages about connecting to NOX and exiting fail-open mode, which was well before this test was

Re: [ovs-discuss] can't add peth0 to bridge eth0: Invalid argument

2009-12-07 Thread Jesse Gross
Earlier versions of Xen networking (which apparently the Lenny port is based on) used some "interesting" tricks with renaming. In this case eth0 is renamed to peth0 and a bridge named tmpbridge is created then renamed to eth0. I'm fairly certain that our bridge compatibility layer does not deal w

Re: [ovs-discuss] can't add peth0 to bridge eth0: Invalid argument

2009-12-09 Thread Jesse Gross
discuss- boun...@openvswitch.org] On Behalf Of pspreadboro...@comcast.net Sent: Tuesday, December 08, 2009 6:55 AM To: Jesse Gross Cc: discuss@openvswitch.org Subject: Re: [ovs-discuss] can't add peth0 to bridge eth0: Invalid argument That certainly helped, using the following config enables me

Re: [ovs-discuss] Linux kernel panics when attaching eth cable

2010-01-29 Thread Jesse Gross
The issue is that your network card uses a type of checksum offloading that is not supported by earlier versions of OVS. I recently added support to the 'next' branch in our git repository, which hasn't been released yet but you can try if you are feeling adventurous. Alternately, I attached a ve

Re: [ovs-discuss] apply ACL to control network traffic

2010-02-02 Thread Jesse Gross
ACLs can be created by adding flow entries to the switch. By default the flow table of Open vSwitch contains one entry, which is to perform the normal switch processing on all traffic (allow all). To restrict traffic you can create additional flow entries using the ovs-ofctl program. A simple ex

Re: [ovs-discuss] Linux kernel panics when attaching eth cable

2010-02-03 Thread Jesse Gross
On Wed, Feb 3, 2010 at 10:42 AM, Paolo Cravero wrote: > On 29/01/2010 19.22, Ben Pfaff wrote: > > If it's a matter of checksum offloading, then you may be able make it >> work (albeit with a performance hit) by turning off checksum offloading >> with 'ethtool'. >> > > Sorry it took me so long to

Re: [ovs-discuss] kvm and open vSwitch, basic connectivity not working

2010-02-09 Thread Jesse Gross
On Tue, Feb 9, 2010 at 9:25 AM, Todd Deshane wrote: > The output of ovs-vswitchd ovs-vswitchd.conf is now quieter: > Feb 09 09:07:47|1|cfg|INFO|using "ovs-vswitchd.conf" as > configuration file, ".ovs-vswitchd.conf.~lock~" as lock file > Feb 09 09:07:47|2|ofproto|INFO|using datapath ID 00

Re: [ovs-discuss] kvm and open vSwitch, basic connectivity not working

2010-02-09 Thread Jesse Gross
On Tue, Feb 9, 2010 at 11:12 AM, Todd Deshane wrote: > > ovs-dpctl dump-flows internalbr (seems to reveal the problem -- > actions drop is specified) > in_port0003:vlan65535 mac52:54:00:12:34:56->52:54:00:12:34:56 type0800 > proto1 ip10.0.0.2->10.0.0.3 port8->0, packets:45, bytes:4410, > used:0.8

Re: [ovs-discuss] Problem with a desired flow getting deleted

2010-02-12 Thread Jesse Gross
On Fri, Feb 12, 2010 at 2:51 PM, Todd Deshane wrote: > > > I could probably live without some networking on the host (until I can > figure it out), but I still do need the host to be able to manage and > connect to the VMs. Is there a way for me to create some sort of > bridge or other networking

Re: [ovs-discuss] TCP flags(SYN, ACK etc.) support in open vswitch ACL

2010-02-15 Thread Jesse Gross
On Mon, Feb 15, 2010 at 10:56 AM, Justin Pettit wrote: > On Feb 15, 2010, at 3:27 AM, devang.v...@aol.in wrote: > > > I can use ovs-ofctl to add flow to deny or allow specific network > traffic. > > Does it supports TCP flags (SYN,ACK etc.)? Is there any way that define > direction (inbound/outbo

Re: [ovs-discuss] Problem with a desired flow getting deleted

2010-02-15 Thread Jesse Gross
On Sat, Feb 13, 2010 at 11:03 PM, Todd Deshane wrote: > > So, with this in place, is there any reason why this flow is being deleted: > > Feb 13 22:24:23|746001|dpif|DBG|dp0: delete flow in_port:vlan65535 > mac00:11:22:bb:aa:dd->00:1c:0f:95:1d:42 type0800 proto17 > ip128.153.144.73->128.153.N.

Re: [ovs-discuss] Problem with a desired flow getting deleted

2010-02-15 Thread Jesse Gross
On Mon, Feb 15, 2010 at 4:55 PM, Todd Deshane wrote: > On Mon, Feb 15, 2010 at 3:28 PM, Jesse Gross wrote: > > Again, ovs-dpctl dump-flows is your friend. It will show you the > currently > > active flows as well as the actions. You must run it while there is > traffic &

Re: [ovs-discuss] ACLs in open vswitch

2010-02-16 Thread Jesse Gross
No, ACLs are not currently supported in any release or branch of OVS. When it is released the syntax will be different from what you listed below. Depending on what you are trying to achieve it may be possible to do by adding flow entries. On Tue, Feb 16, 2010 at 7:52 AM, wrote: > Hi, > > Can

Re: [ovs-discuss] Open vSwitch 0.99.2 Available

2010-02-19 Thread Jesse Gross
On Fri, Feb 19, 2010 at 1:36 PM, Martinx wrote: > > Trying to build the kernel modules: > The file /usr/share/doc/openvswitch-datapath-source/README.Debian says: > > To build run: > > m-a a-i openvswitch > > But: > > r...@xenalive:~/ovs# m-a a-i openvswitch > openvswitch, what is openvswitch? >

Re: [ovs-discuss] Open vSwitch 0.99.2 Available

2010-02-23 Thread Jesse Gross
On Tue, Feb 23, 2010 at 4:15 PM, Martinx wrote: > Guys! > > The snapshot compiles okay, the packages and the modules! > But I can't install two packages, the openvswitch-pki-server and the > nicira-switch... Look: > > r...@xenalive:~/ovs# dpkg -l | grep 0.90.6 > Are you sure you are looking at

Re: [ovs-discuss] Open vSwitch 0.99.2 Available

2010-02-23 Thread Jesse Gross
On Tue, Feb 23, 2010 at 4:33 PM, Martinx wrote: > I'm sure... > > xenbuil...@vdwuac28:~/tmp$ tar xf > openvswitch-394ca24967595c231bdbf2cedc0c30c8397b74ae.tar.gz > xenbuil...@vdwuac28:~/tmp$ head openvswitch/debian/changelog > openvswitch (0.90.6) unstable; urgency=low > As you already pointed o

Re: [ovs-discuss] Database configuration question (Was Re: Open vSwitch 0.99.2 Available)

2010-03-04 Thread Jesse Gross
On Thu, Mar 4, 2010 at 11:18 AM, Todd Deshane wrote: > On Fri, Feb 19, 2010 at 11:56 AM, Justin Pettit > wrote: > > Ben recently updated them in the "next" branch, and we're using them > internally. The "next" branch is what all future "stable" releases will be > based on. It uses a configurat

Re: [ovs-discuss] Control inbound/outbound TCP connection

2010-03-19 Thread Jesse Gross
The flow table allows matching on neither connection state nor TCP flags, so this isn't possible. Please see this message: http://openvswitch.org/pipermail/discuss_openvswitch.org/2010-February/000599.html On Fri, Mar 19, 2010 at 4:55 AM, wrote: > Hi, > > How can I configure open vSwitch for Xe

Re: [ovs-discuss] Flow table - Allow FTP

2010-03-22 Thread Jesse Gross
There is no support for ranges or any operator other than equals. You can allow traffic on both ports for FTP but there is no support for tracking related connections. What you have to understand is that the flow table is designed for network engineering, not for applying ACLs. While there is so

Re: [ovs-discuss] OVS 0.90.7 build fails on kernel 2.6.31-14-generic

2010-03-23 Thread Jesse Gross
On Tue, Mar 23, 2010 at 3:47 PM, Prateek Jain wrote: > Hello, > > I am trying to build OVS 0.90.7 on Ubuntu 9.10 Linux kernel > 2.6.31-14-generic, the make fails with > below errors. Can you please tell me how to fix this ? > That release series is no longer being updated with support for newer

Re: [ovs-discuss] GRE tunnel with 0.99.2 snapshot

2010-03-25 Thread Jesse Gross
On Thu, Mar 25, 2010 at 4:10 AM, Lee, Jeongkeun wrote: > Hi, > > Does the current snapshot support GRE tunnel? > Based on the mailing list logs, gre support is under development and will > be a part of the next release. > There is a prototype version of GRE support currently checked into the mas

Re: [ovs-discuss] [Open vSwitch 0.99.2] Kernel panic with eth0 in the bridge

2010-03-29 Thread Jesse Gross
On Sun, Mar 28, 2010 at 2:08 AM, Amin Tootoonchian wrote: > Hi, > > openvswitch_mod kernel module causes a kernel panic when it adds eth0 > to the bridge. It seems to run fine with all the interfaces except > eth0 (which is connected to a switch). I verified that I have no > problems with Linux br

Re: [ovs-discuss] [Open vSwitch 0.99.2] Kernel panic with eth0 in the bridge

2010-03-29 Thread Jesse Gross
Not currently. Patches are welcome though... On Mon, Mar 29, 2010 at 11:18 AM, Amin Tootoonchian wrote: > Thanks Jesse. Do have any plans to add support for OpenVZ kernels? > > Amin > > On Mon, Mar 29, 2010 at 10:24 AM, Jesse Gross wrote: > > On Sun, Mar 28, 2010 at 2:08

Re: [ovs-discuss] about network connection problem of openvswitch

2010-04-11 Thread Jesse Gross
On Sun, Apr 11, 2010 at 1:11 PM, Xin Wang wrote: > Hello, > I have installed openvswitch on VMware (linux system), and I followed the > instruction to replace it for a linux kernel bridge. > m...@ubuntu:~/openvswitch-0.99.2$ cat /etc/ovs-vswitchd.conf > bridge.bri.port=bri > bridge.bri.port=eth0

Re: [ovs-discuss] ipoib with open vswitch

2010-04-20 Thread Jesse Gross
On Tue, Apr 20, 2010 at 11:22 AM, Trygve Sanne Hardersen < try...@hypobytes.com> wrote: > > I'm running XCP on 2 physical machines configured as a pool. Each box > has two normal Ethernet NICs (with 6-byte HW addresses) and a single > Infiniband NIC (with a 20-byte HW address). > > My original plan

Re: [ovs-discuss] filtering macs/ip

2010-04-27 Thread Jesse Gross
On Tue, Apr 27, 2010 at 7:37 AM, George Shuklin wrote: > Good day. > > Is any way to filter with ovs VM's traffic (like mac spoofing or ip > usurpation)? > > I was tried to find any, but found none. There isn't currently a specific MAC/IP anti-spoofing feature. You can, however, add flow entri

Re: [ovs-discuss] filtering macs/ip

2010-04-29 Thread Jesse Gross
On Tue, Apr 27, 2010 at 6:33 PM, Todd Deshane wrote: > On Tue, Apr 27, 2010 at 9:20 PM, Jesse Gross wrote: > > On Tue, Apr 27, 2010 at 7:37 AM, George Shuklin wrote: > >> > >> Good day. > >> > >> Is any way to filter with ovs VM's traffic (lik

Re: [ovs-discuss] Create a GRE interface

2010-04-29 Thread Jesse Gross
On Wed, Apr 28, 2010 at 2:33 PM, Lee, Jeongkeun wrote: > Hi Jesse, > > I'm trying to create a GRE interface with the latest master branch, in > which the new vport GRE is integrated. So, I assume I can skip the first two > steps from the instructions you gave before. > > 1. Unload the Linux ip_g

Re: [ovs-discuss] Question about openvswitch GRE tunnel testing

2010-04-29 Thread Jesse Gross
On Thu, Apr 29, 2010 at 9:30 AM, Tianxiang Ma wrote: > Hello, > > After reading the white paper, I have a question about how to simulate the > GRE tunnel function. > > In the openvswitch, is there a module that can do GRE tunneling process? > How to test this function as in the section 3.2 of the

Re: [ovs-discuss] filtering macs/ip

2010-04-30 Thread Jesse Gross
(moving back on list) 2010/4/30 George Shuklin > 27.04.10, 18:20, "Jesse Gross" : > > On Tue, Apr 27, 2010 at 7:37 AM, George Shuklin wrote: > >> Good day. >> >> Is any way to filter with ovs VM's traffic (like mac spoofing or ip >> usurpat

Re: [ovs-discuss] Create a GRE interface

2010-05-03 Thread Jesse Gross
On Fri, Apr 30, 2010 at 9:19 PM, Lee, Jeongkeun wrote: > > One bug I found is > > calling this command below when another port(s) already exists in br0 > crashes the system. > > > sudo utilities/ovs-vsctl add bridge br0 ports … > I can't reproduce this, or maybe I don't understand what the issue

Re: [ovs-discuss] priority of iptables and flows

2010-05-03 Thread Jesse Gross
On Mon, May 3, 2010 at 12:13 AM, wrote: > > Hi, > > I have a rule in iptables (with source ip address) to allow https traffic > for Xen server as well as on the bridge there is a flow to deny all IP > protocol traffic coming on the Xen bridge. > > Now, when I try to open the Xen Center from the

Re: [ovs-discuss] bridge renaming issue with Xen

2010-05-03 Thread Jesse Gross
On Fri, Apr 30, 2010 at 5:57 PM, Lee, Jeongkeun wrote: > Hi, > > I'm coming back to this problem. > > To handle the renaming issue of Xen networking scripts, I tried 'ovs-vsctl > set' commands as follows: renaming interface, port and then bridge, as the > order seems matter. > > Where bridge name

Re: [ovs-discuss] FTBFS on RHEL 5.5 with 2.6.18-194.el5 kernel

2010-05-06 Thread Jesse Gross
On Thu, May 6, 2010 at 7:42 AM, Alexey I. Froloff wrote: > Can't build master on RHEL 5.5 with 2.6.18-194.el5. It looks like your distribution backports that function, so I just checked in a test to avoid redefining it if that is the case. ___ discuss

Re: [ovs-discuss] Installed open vswitch in XenServer 5.5

2010-05-12 Thread Jesse Gross
On Wed, May 12, 2010 at 12:30 PM, Axle Judd wrote: > Hi all, > > I have installed open-vswitch in XenServer 5.5 but during server reboot i > am losing all my changes. > > 1.)I have 6 network card on a HP server, when i run ovs-vsctl list-br , i > see : > > xenbr1 > xenbr0 > xenbr3 > xenbr2 > xen

Re: [ovs-discuss] filtering macs/ip

2010-05-13 Thread Jesse Gross
On Thu, May 13, 2010 at 12:36 PM, Matthew Law wrote: > The post below is a question regarding xen cloud platform asked on the > xen-users list. As this is also of interest to me, I thought I would ask > questions here and post any feedback to xen-users also. I hope you don't > mind. > > Is there

Re: [ovs-discuss] Installed open vswitch in XenServer 5.5

2010-05-13 Thread Jesse Gross
en you configure Xen it will automatically set up Open vSwitch as appropriate to do the actual work. > > > thanks, > > Axle > > On Wed, May 12, 2010 at 9:30 PM, Jesse Gross wrote: > >> On Wed, May 12, 2010 at 12:30 PM, Axle Judd wrote: >> >> Hi all

Re: [ovs-discuss] Installed open vswitch in XenServer 5.5

2010-05-14 Thread Jesse Gross
On Fri, May 14, 2010 at 5:58 AM, Axle Judd wrote: > > > On Thu, May 13, 2010 at 10:51 PM, Jesse Gross wrote: > >> Moving back on list. Also, please do not top post. >> >> On Thu, May 13, 2010 at 4:08 AM, Axle Judd wrote: >> >>> Jesse, >>&

Re: [ovs-discuss] OpenVswitch Control and Data Path in XenServer

2010-05-14 Thread Jesse Gross
On Thu, May 13, 2010 at 9:39 PM, Ramana Reddy wrote: > Hi Everyone, > > Can you please give some idea of the control and data path in terms of > function calls in OpenVswitch and > how it differs from the bridge in the kernel perspective. > You should read the paper published on Open vSwitch:

Re: [ovs-discuss] Openvswitch on XenServer

2010-05-20 Thread Jesse Gross
On Thu, May 20, 2010 at 12:01 PM, Axle Judd wrote: > Hi, > > I installed openvswitch version 1.0.0 on XenServer 5.6 , then i created a > NIC bonding using Physical interface eth2 and eth3 but when i looked bonding > mode it's showing up as "source load balancing". > > I tried to add mode=802.3ad

Re: [ovs-discuss] How to install openvswitch on Ubuntu v 10.0.4

2010-05-20 Thread Jesse Gross
On Thu, May 20, 2010 at 11:43 AM, Sergio Valdovinos wrote: > Hi, > > I new on linux and I am very interested on install openvswitch. Could > anyone give me a guide to install step by step openvswitch on ubuntu? I want > to use with xen. > There are step-by-step instructions for running in Linux

Re: [ovs-discuss] Re : Re : Re : OvS 1.0.0 Compile error on fedora 13

2010-05-25 Thread Jesse Gross
On Fri, May 21, 2010 at 2:24 AM, DarkBls wrote: > > 4) OvS with GRE > > OvS deployed on each server (blade) and connected to a distant > configuration DB. Each OvS "switch" are cascading to antoher one through Gre > Tunnel. > > PRO: > > Nothing to do on hardware in case of adding / removing virtua

Re: [ovs-discuss] How to set trunk on open vswitch?

2010-05-26 Thread Jesse Gross
On Wed, May 26, 2010 at 6:58 PM, 신용진 wrote: > Hmm, > > > At first, I do not set any values both of "tag", and "trunks" > But servers and VMs cannot communicate each other. > So, I searched about "trunk" on openvswitch, and I set the value on them. > > > Let's suppose that I put an IP on VLAN as 1

Re: [ovs-discuss] How to set trunk on open vswitch?

2010-05-26 Thread Jesse Gross
On Wed, May 26, 2010 at 7:28 PM, 신용진 wrote: > > > If you are using OVS to do the vlans, you should set the tag field on the > internal port and leave the other ports alone to trunk. > > Yes, for eth1 and eth2, I set tag field only. And empty trunks field in > Port table. > Generally you want to s

Re: [ovs-discuss] How to make multiple VLANs on one NIC?

2010-06-01 Thread Jesse Gross
On Mon, May 31, 2010 at 6:30 AM, 신용진 wrote: > In addition, the first argument is "tunnel". And does it mean GRE > tunneling? > Yes, currently GRE is the only supported method of tunneling. > > If yes, GRE only supports one-to-one tunneling, is that right? > Yes, multicast GRE is not currently

Re: [ovs-discuss] can not create device problem

2010-06-01 Thread Jesse Gross
On Sat, May 29, 2010 at 5:21 AM, 蒲彦 wrote: > Dear all, > > I feel very strange to see a message like this when I I try connect > datapath to controller with ovs-openflowd > > May 29 20:57:22|1|openflowd|INFO|Open vSwitch version 1.0.0 > May 29 20:57:22|2|openflowd|INFO|OpenFlow protocol v

  1   2   3   4   5   6   7   8   9   10   >