On Mon, Jun 13, 2016 at 3:17 AM, yong sheng gong <18618199...@163.com> wrote: > hi, > > I have followed the steps at > https://github.com/openstack/group-based-policy/blob/master/gbpservice/tests/contrib/devstack/exercises/gbp_servicechain.sh > > and I can see the firewall and lb are created right. > > But I thought the vm client-1's traffic will be redirected to firewall, lb > and last to web-vm-1 somehow. >
The rendering of the REDIRECT action is specific to the configured traffic plumber, which in turn would depend on the underlying network technology that provides connectivity, and also the nature of the services being chained. > howerver, I cannot see how it is done, or "redirect" action just helps to > lauch a firewall, and lb and do nothing others. > I suspect you are using the default configuration, in which case a traffic stitching plumber is used, and for the choice of Neutron FWaaS firewall, and Neutron LBaaS LB, no traffic steering is required. Creating the service instances in the appropriate context is enough to get the traffic to flow through the services configured in the chain. > > any idea? > > thanks > yong sheng gong > > > > > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev