Please see inline comments. From: Srikanth Lingala [mailto:srikanth.ling...@nxp.com] Sent: Friday, April 28, 2017 1:58 PM To: Ni, Hongjun <hongjun...@intel.com>; Yang, Yi Y <yi.y.y...@intel.com>; vpp-dev@lists.fd.io; nsh_sfc-...@lists.fd.io Subject: RE: Regarding vxlan_tool.py in SFC vNF
Hi Hongjun, Thanks for your time to recreate those commands. I have some doubts :). What about the nsp and nsi id's? They can be anything or need to get them from the openflow NSH flows in the compute node? [Hongjun] Yes, can get NSP and NSI from packet's NSH header, when receiving a NSH packet. What about the address '90e2.ba48.7a80'? Is this hardware address of TenGigabitEthernet5/0/0? [Hongjun] Yes. It is MAC address of interface. Regards, Srikanth. From: Ni, Hongjun [mailto:hongjun...@intel.com] Sent: Friday, April 28, 2017 11:19 AM To: Srikanth Lingala <srikanth.ling...@nxp.com<mailto:srikanth.ling...@nxp.com>>; Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>; nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF Hi Srikanth, Please use VPP and NSH_SFC project for running SFF, not running vxlan_tool.py. Below is the commands used to configure your setup for running SFF, just for reference. vppctl set int state TenGigabitEthernet5/0/0 up vppctl set int ip table TenGigabitEthernet5/0/0 7 vppctl set int ip address TenGigabitEthernet5/0/0 10.10.10.3/24 vppctl ip route add 192.168.2.25/32 via 10.10.10.3 TenGigabitEthernet5/0/0 vppctl set ip arp fib-id 7 TenGigabitEthernet5/0/0 192.168.2.25 90e2.ba48.7a80 vppctl create vxlan-gpe tunnel local 10.10.10.3 remote 192.168.2.25 vni 9 next-nsh encap-vrf-id 7 decap-vrf-id 7 vppctl set int l2 bridge vxlan_gpe_tunnel0 1 1 vppctl create nsh map nsp 185 nsi 255 mapped-nsp 185 mapped-nsi 254 nsh_action swap encap-vxlan-gpe-intf 3 vppctl create nsh entry nsp 185 nsi 255 md-type 1 c1 1 c2 2 c3 3 c4 4 next-ethernet vppctl create nsh entry nsp 185 nsi 254 md-type 1 c1 11 c2 12 c3 13 c4 14 next-ethernet Yes, local 10.10.10.3 remote 192.168.2.25 is the local and peer tunnel endpoint IP. Fib table is a VRF(Virtual Routing Forwarding) table. Default Fib table is 0. From: Srikanth Lingala [mailto:srikanth.ling...@nxp.com] Sent: Friday, April 28, 2017 1:56 AM To: Ni, Hongjun <hongjun...@intel.com<mailto:hongjun...@intel.com>>; Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>>; vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>; nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF + vpp-dev Hi Hongjun, Thanks for the info. My requirement is that, I am spawning a SFC vNF which is VPP based. So, that vNF should be IP-less NSH aware. My typical setup is as shown in the attached image. I have single Compute Node, with 2 vNFs in a Chain. One vNF is NSH aware (running vxlan_tool.py), and another vNF is VPP based VM, which is IP-less, as its interface is hooked to DPDK. As I am new to FD.io/ VPP, can you please relate the commands you sent to my setup? I may not need the entire commands...Isn't it? Anyways, In the commands you sent, I have some doubts. What are the IP's 192.168.50.71 and 192.168.50.76, those are tunnel endpoint IP's right? What is fib-id 7? Can you please filter out the particular commands to configure my setup? Regards, Srikanth. From: Ni, Hongjun [mailto:hongjun...@intel.com] Sent: Tuesday, April 25, 2017 9:44 AM To: Srikanth Lingala <srikanth.ling...@nxp.com<mailto:srikanth.ling...@nxp.com>>; Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF Hi Srikanth, If you install nsh_plugin, you may use NSH_SFC 17.01 release, which did not support NSH-aware SNAT. For NSH_SFC 17.01 release, you can configure as blow to act as a SFF, which can forward NSH packets. Below configuration script is for reference: -----NSH SFF---------------------------------------------------------------------------------------- vppctl set int state TenGigabitEthernet5/0/0 up vppctl set int ip table TenGigabitEthernet5/0/0 7 vppctl set int ip address TenGigabitEthernet5/0/0 192.168.50.76/24 vppctl ip route add 192.168.50.71/32 via 192.168.50.76 TenGigabitEthernet5/0/0 vppctl ip route add 192.168.50.72/32 via 192.168.50.76 TenGigabitEthernet5/0/0 vppctl set ip arp fib-id 7 TenGigabitEthernet5/0/0 192.168.50.71 90e2.ba48.7a80 vppctl set ip arp fib-id 7 TenGigabitEthernet5/0/0 192.168.50.72 0800.2761.0705 vppctl create vxlan-gpe tunnel local 192.168.50.76 remote 192.168.50.71 vni 9 next-nsh encap-vrf-id 7 decap-vrf-id 7 vppctl set int l2 bridge vxlan_gpe_tunnel0 1 1 vppctl create vxlan-gpe tunnel local 192.168.50.76 remote 192.168.50.72 vni 9 next-nsh encap-vrf-id 7 decap-vrf-id 7 vppctl set int l2 bridge vxlan_gpe_tunnel1 1 1 vppctl create nsh map nsp 185 nsi 255 mapped-nsp 185 mapped-nsi 254 nsh_action swap encap-vxlan-gpe-intf 3 vppctl create nsh map nsp 185 nsi 254 mapped-nsp 185 mapped-nsi 255 nsh_action swap encap-vxlan-gpe-intf 2 vppctl create nsh entry nsp 185 nsi 255 md-type 1 c1 1 c2 2 c3 3 c4 4 next-ethernet vppctl create nsh entry nsp 185 nsi 254 md-type 1 c1 11 c2 12 c3 13 c4 14 next-ethernet Regards, Hongjun From: Srikanth Lingala [mailto:srikanth.ling...@nxp.com] Sent: Tuesday, April 25, 2017 2:18 AM To: Ni, Hongjun <hongjun...@intel.com<mailto:hongjun...@intel.com>>; Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF Hi Hongjun, I am able to install 'nsh_plugin' in VPP vNF. Following are the list of plugins enabled in VPP vNF. root@ls1046ardb:~# vppctl _______ _ _ _____ ___ __/ __/ _ \ (_)__ | | / / _ \/ _ \ _/ _// // / / / _ \ | |/ / ___/ ___/ /_/ /____(_)_/\___/ |___/_/ /_/ vpp# show plugins Plugin path is: /usr/lib/vpp_plugins Plugins loaded: 1./usr/lib/vpp_plugins/nsh_plugin.so 2./usr/lib/vpp_plugins/snat_plugin.so 3./usr/lib/vpp_plugins/ila_plugin.so 4./usr/lib/vpp_plugins/ioam_plugin.so 5./usr/lib/vpp_plugins/libsixrd_plugin.so 6./usr/lib/vpp_plugins/lb_plugin.so To make the VPP vNF as 'NSH aware', do I need to configure anything in 'vppctl'? To simply forward NSH packets, do I need any configuration? Thanks for your help. Regards, Srikanth. From: Ni, Hongjun [mailto:hongjun...@intel.com] Sent: Monday, April 24, 2017 7:59 AM To: Srikanth Lingala <srikanth.ling...@nxp.com<mailto:srikanth.ling...@nxp.com>>; Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF Hi Srikanth, We have implemented a NSH-aware SNAT VNF in NSH_SFC project. Please see the link for details: https://wiki.fd.io/view/File:NSH_SNAT_Output.png You can merge your FW and NSH_SFC project to create your own NSH-aware FW VNF. Regards, Hongjun From: nsh_sfc-dev-boun...@lists.fd.io<mailto:nsh_sfc-dev-boun...@lists.fd.io> [mailto:nsh_sfc-dev-boun...@lists.fd.io] On Behalf Of Srikanth Lingala Sent: Friday, April 21, 2017 3:17 PM To: Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: Re: [nsh_sfc-dev] Regarding vxlan_tool.py in SFC vNF So, in the VPP SF, we need to install nsh_sfc VPP plugin. In that case, we need to run vxlan_tool.py in the VPP SF. Please correct me, If I am wrong. Regards, Srikanth. From: Yang, Yi Y [mailto:yi.y.y...@intel.com] Sent: Friday, April 21, 2017 12:42 PM To: Srikanth Lingala <srikanth.ling...@nxp.com<mailto:srikanth.ling...@nxp.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF No, nsh_sfc is a VPP plugin. https://wiki.fd.io/view/NSH_SFC/Installing_NSH_SFC_binaries_from_packages can tell you how to install the package. After you install, you can manually use vppctl to create vxlan-gpe interface, nsh map and nsh entry in VPP vnf. ODL SFC just treats it as a normal SF. From: Srikanth Lingala [mailto:srikanth.ling...@nxp.com] Sent: Friday, April 21, 2017 3:04 PM To: Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF nsh_sfc is plugin to ODL? So, we need not run vxlan_tool.py in VPP SF? Can you please send me some links to enable nsh_sfc plugin? Thanks for the help. Regards, Srikanth. From: Yang, Yi Y [mailto:yi.y.y...@intel.com] Sent: Friday, April 21, 2017 12:29 PM To: Srikanth Lingala <srikanth.ling...@nxp.com<mailto:srikanth.ling...@nxp.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF VPP itself can handle this. You can use nsh_sfc plugin to handle NSH service index decrease. From: Srikanth Lingala [mailto:srikanth.ling...@nxp.com] Sent: Friday, April 21, 2017 2:53 PM To: Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF Yang, My usecase is that, I am creating a Service Chain with FW and VPP as SFC vNFs. First packets will reach to FW vNF and after its validations, it should reach VPP vNF. VPP vNF has two interfaces which can be hooked to DPDK. In the VPP vNF, I just want to run simple L2 forward between those two ports and send packets out. Regards, Srikanth. From: Yang, Yi Y [mailto:yi.y.y...@intel.com] Sent: Friday, April 21, 2017 12:15 PM To: Srikanth Lingala <srikanth.ling...@nxp.com<mailto:srikanth.ling...@nxp.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF You can stop vpp in your VM, then you can get your Ethernet interface. From: Srikanth Lingala [mailto:srikanth.ling...@nxp.com] Sent: Friday, April 21, 2017 2:39 PM To: Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>> Cc: nsh_sfc-...@lists.fd.io<mailto:nsh_sfc-...@lists.fd.io> Subject: RE: Regarding vxlan_tool.py in SFC vNF Hi Yang, Thanks for the information. So, vxlan_tool.py will emulate VM so that it can be NSH aware. Am I correct? Actually, I am able to run the SFC usecase with normal VM's which are NSH aware (vxlan_too.py running on the VM). Now, I am trying to run the same usecase with VPP VM as one of the SFC vNF. But, we can't run vxlan_tool.py in VPP based image as it doesn't network interfaces, as they will be hooked to DPDK. In that case, what kind of approach we need to follow? I know some work is going on ODL SFC and VPP and I am new to VPP/Fd.io. Are there any NSH aware VPP based images available? Regards, Srikanth. From: Yang, Yi Y [mailto:yi.y.y...@intel.com] Sent: Friday, April 21, 2017 5:27 AM To: Srikanth Lingala <srikanth.ling...@nxp.com<mailto:srikanth.ling...@nxp.com>> Subject: RE: Regarding vxlan_tool.py in SFC vNF vxlan_tool.py is a dummy NSH-aware SF, it can run in a VM or container then that VM or container can acts as NSH-aware SF. IT also can do more things, please run python ./vxlan_tool.py -help to understand. From: Srikanth Lingala [mailto:srikanth.ling...@nxp.com] Sent: Thursday, April 20, 2017 9:12 PM To: Yang, Yi Y <yi.y.y...@intel.com<mailto:yi.y.y...@intel.com>> Subject: Regarding vxlan_tool.py in SFC vNF Hi Yang, I am working on ODL SFC. I am able to execute the basic SFC usecase. But, I just want to understand, what vxlan_tool.py does in SFC vNF. Is it forward packets to next vNF based on NSH header? Can you please let me know, what are the specific tasks, which are handled by vxlan_tool.py? Regards, Srikanth.
_______________________________________________ vpp-dev mailing list vpp-dev@lists.fd.io https://lists.fd.io/mailman/listinfo/vpp-dev
