On Tue, Jun 17, 2014 at 9:55 AM, Ramana Reddy <[email protected]> wrote:
> Thanks Justin. Normally OVS rules mainly concern header part part of the
> packet.
> I would like to extract the payload and possibly parse the payload to
> allow the packet to the destination.
> Simply something like application based filtering in OVS. Would like to
> know the overhead involved to
> resembling of fragmented packets if needed, extracting and parsing of each
> packet.
>
I don't see anything like this happening on the fastpath of OVS. However,
it may be an option to send packets to a DPI module that provides some
fields that can be matched through OpenFlow extensions. I proposed
something like this for connection tracking a few weeks ago:
http://openvswitch.org/pipermail/dev/2014-May/040567.html
(Unfortunately, the site is down right now, but it should be up before
long.)
--Justin
_______________________________________________
discuss mailing list
[email protected]
http://openvswitch.org/mailman/listinfo/discuss
