Any suggestion ? On Monday, 24 October 2016, Alioune <baliou...@gmail.com> wrote:
> Hi all, > > I'm trying to implement service chain in OpenStack using networking-sfc > (stable/mitaka) and OVS 2.5.90 > > > The following is the architecture I used : > > SRC DST > | | > ========== br-int ============ > | > SF1 > SF1: 55.55.55.3 > SRC: 55.55.55.4 > DST: 55.55.55.5 > > I can create port-pairs, port-pair-group, classifier and chain with these > commands: > > neutron flow-classifier-create --ethertype IPv4 --source-ip-prefix > 55.55.55.4/32 --logical-source-port 0009034f-4c39-4cbf-be7d-fcf82dad024c > --protocol icmp FC1 > neutron port-pair-create --ingress=p1 --egress=p1 PP1 > neutron port-pair-group-create --port-pair PP1 PG1 > neutron port-chain-create --port-pair-group PG1 --flow-classifier FC1 PC1 > > I could ping from SRC to DST before setting the chain, but after the chain > creating ping doesn't work. > > ICMP echo request packets arrive to SF1 port but it doesn't send back the > packets in order to allow them to get their destination DST (see output > below). > > The Opendaylight/SFC project uses NSH aware service function (SF) that > send back packets to the chains after analyzing them, I would like to know : > > - How networking-sfc configures SF to send back packets to the chain as > seem in some of your presentation ? > - What's wrong in my configurations (see commands and ovs-ofctl output > below) ? I've followed the main steps described in your wiki page. > > Best Regards, > > > vagrant@vagrant-ubuntu-trusty-64:~$ neutron port-list > +--------------------------------------+------+------------- > ------+----------------------------------------------------- > ---------------------------------+ > | id | name | mac_address | > fixed_ips > | > +--------------------------------------+------+------------- > ------+----------------------------------------------------- > ---------------------------------+ > | 0009034f-4c39-4cbf-be7d-fcf82dad024c | | fa:16:3e:dd:16:f7 | > {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-d760a16667bc", "ip_address": > "55.55.55.4"} | > | 082e896d-5982-458c-96e7-0dd372d3d7d9 | p1 | fa:16:3e:90:b4:67 | > {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-d760a16667bc", "ip_address": > "55.55.55.3"} | > | 2ad109e4-42a8-4554-b884-a32344e91036 | | fa:16:3e:74:9a:fa | > {"subnet_id": "3cf6eb27-7258-4252-8f3d-b6f9d27c948b", "ip_address": > "192.168.105.2"} | > | 51f055c0-ff4d-47f4-9328-9a0d7ca204f3 | | fa:16:3e:da:f9:93 | > {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-d760a16667bc", "ip_address": > "55.55.55.1"} | > | 656ad901-2bc0-407a-a581-da955ecf3b59 | | fa:16:3e:7f:44:01 | > {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-d760a16667bc", "ip_address": > "55.55.55.2"} | > | b1d14a4f-cde6-4c44-b42e-0f0466dba32a | | fa:16:3e:a6:c6:35 | > {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-d760a16667bc", "ip_address": > "55.55.55.5"} | > +--------------------------------------+------+------------- > ------+----------------------------------------------------- > ---------------------------------+ > > vagrant@vagrant-ubuntu-trusty-64:~$ ifconfig |grep 082e896d > qbr082e896d-59 Link encap:Ethernet HWaddr b6:96:27:fa:ab:af > qvb082e896d-59 Link encap:Ethernet HWaddr b6:96:27:fa:ab:af > qvo082e896d-59 Link encap:Ethernet HWaddr 7e:1a:7b:7d:09:df > tap082e896d-59 Link encap:Ethernet HWaddr fe:16:3e:90:b4:67 > > vagrant@vagrant-ubuntu-trusty-64:~$ sudo tcpdump -i tap082e896d-59 icmp > tcpdump: WARNING: tap082e896d-59: no IPv4 address assigned > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on tap082e896d-59, link-type EN10MB (Ethernet), capture size > 65535 bytes > 10:51:10.229674 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 61, length 64 > 10:51:11.230318 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 62, length 64 > 10:51:12.233451 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 63, length 64 > 10:51:13.234496 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 64, length 64 > 10:51:14.235583 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 65, length 64 > 10:51:15.236585 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 66, length 64 > 10:51:16.237568 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 67, length 64 > 10:51:17.238974 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 68, length 64 > 10:51:18.244244 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 69, length 64 > 10:51:19.245758 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 70, length 64 > 10:51:20.246521 IP 55.55.55.4 > 55.55.55.5: ICMP echo request, id 15617, > seq 71, length 64 > > > > vagrant@vagrant-ubuntu-trusty-64:~/openstack_networking/simple-sf$ sudo > ovs-ofctl dump-flows br-int -O OpenFlow13 > > 2016-10-24T11:28:43Z|00001|ofp_actions|INFO|OFPAT_SET_MPLS_TTL is > deprecated in OpenFlow13 (use Set-Field) > OFPST_FLOW reply (OF1.3) (xid=0x2): > cookie=0xbbf3cb977f3738c7, duration=2418.957s, table=0, n_packets=2297, > n_bytes=225106, priority=30,icmp,in_port=5,nw_src=55.55.55.4 > actions=group:1 > cookie=0xbbf3cb977f3738c7, duration=2418.955s, table=0, n_packets=0, > n_bytes=0, priority=30,icmp,in_port=4,nw_src=55.55.55.4 actions=NORMAL > cookie=0xbbf3cb977f3738c7, duration=8868.309s, table=0, n_packets=0, > n_bytes=0, priority=20,mpls actions=resubmit(,10) > cookie=0xbbf3cb977f3738c7, duration=2882.723s, table=0, n_packets=0, > n_bytes=0, priority=10,icmp6,in_port=5,icmp_type=136 actions=resubmit(,24) > cookie=0xbbf3cb977f3738c7, duration=2866.752s, table=0, n_packets=0, > n_bytes=0, priority=10,icmp6,in_port=6,icmp_type=136 actions=resubmit(,24) > cookie=0xbbf3cb977f3738c7, duration=2650.698s, table=0, n_packets=0, > n_bytes=0, priority=10,icmp6,in_port=4,icmp_type=136 actions=resubmit(,24) > cookie=0xbbf3cb977f3738c7, duration=2882.708s, table=0, n_packets=71, > n_bytes=2982, priority=10,arp,in_port=5 actions=resubmit(,24) > cookie=0xbbf3cb977f3738c7, duration=2866.738s, table=0, n_packets=70, > n_bytes=2940, priority=10,arp,in_port=6 actions=resubmit(,24) > cookie=0xbbf3cb977f3738c7, duration=2650.684s, table=0, n_packets=4, > n_bytes=168, priority=10,arp,in_port=4 actions=resubmit(,24) > cookie=0xbbf3cb977f3738c7, duration=2882.737s, table=0, n_packets=70, > n_bytes=8378, priority=9,in_port=5 actions=resubmit(,25) > cookie=0xbbf3cb977f3738c7, duration=2866.767s, table=0, n_packets=22, > n_bytes=2332, priority=9,in_port=6 actions=resubmit(,25) > cookie=0xbbf3cb977f3738c7, duration=2650.715s, table=0, n_packets=15, > n_bytes=1724, priority=9,in_port=4 actions=resubmit(,25) > cookie=0xbbf3cb977f3738c7, duration=8868.755s, table=0, n_packets=163, > n_bytes=18908, priority=0 actions=NORMAL > cookie=0xbbf3cb977f3738c7, duration=2419.054s, table=5, n_packets=2297, > n_bytes=225106, priority=0,ip,dl_dst=fa:16:3e:90:b4:67 > actions=push_mpls:0x8847,set_field:511->mpls_label,set_ > mpls_ttl(255),push_vlan:0x8100,set_field:4097->vlan_vid,resubmit(,10) > cookie=0xbbf3cb977f3738c7, duration=2418.916s, table=10, n_packets=2297, > n_bytes=225106, > priority=1,mpls,dl_vlan=1,dl_dst=fa:16:3e:90:b4:67,mpls_label=511 > actions=pop_vlan,pop_mpls:0x0800,output:4 > cookie=0xbbf3cb977f3738c7, duration=8868.303s, table=10, n_packets=0, > n_bytes=0, priority=0 actions=drop > cookie=0xbbf3cb977f3738c7, duration=8868.749s, table=23, n_packets=0, > n_bytes=0, priority=0 actions=drop > cookie=0xbbf3cb977f3738c7, duration=2882.730s, table=24, n_packets=0, > n_bytes=0, > priority=2,icmp6,in_port=5,icmp_type=136,nd_target=fe80::f816:3eff:fedd:16f7 > actions=NORMAL > cookie=0xbbf3cb977f3738c7, duration=2866.760s, table=24, n_packets=0, > n_bytes=0, > priority=2,icmp6,in_port=6,icmp_type=136,nd_target=fe80::f816:3eff:fea6:c635 > actions=NORMAL > cookie=0xbbf3cb977f3738c7, duration=2650.708s, table=24, n_packets=0, > n_bytes=0, > priority=2,icmp6,in_port=4,icmp_type=136,nd_target=fe80::f816:3eff:fe90:b467 > actions=NORMAL > cookie=0xbbf3cb977f3738c7, duration=2882.715s, table=24, n_packets=68, > n_bytes=2856, priority=2,arp,in_port=5,arp_spa=55.55.55.4 > actions=resubmit(,25) > cookie=0xbbf3cb977f3738c7, duration=2866.743s, table=24, n_packets=67, > n_bytes=2814, priority=2,arp,in_port=6,arp_spa=55.55.55.5 > actions=resubmit(,25) > cookie=0xbbf3cb977f3738c7, duration=2650.690s, table=24, n_packets=1, > n_bytes=42, priority=2,arp,in_port=4,arp_spa=55.55.55.3 > actions=resubmit(,25) > cookie=0xbbf3cb977f3738c7, duration=8868.743s, table=24, n_packets=0, > n_bytes=0, priority=0 actions=drop > cookie=0xbbf3cb977f3738c7, duration=2882.753s, table=25, n_packets=138, > n_bytes=11130, priority=2,in_port=5,dl_src=fa:16:3e:dd:16:f7 > actions=NORMAL > cookie=0xbbf3cb977f3738c7, duration=2866.783s, table=25, n_packets=87, > n_bytes=4882, priority=2,in_port=6,dl_src=fa:16:3e:a6:c6:35 actions=NORMAL > cookie=0xbbf3cb977f3738c7, duration=2650.730s, table=25, n_packets=14, > n_bytes=1502, priority=2,in_port=4,dl_src=fa:16:3e:90:b4:67 actions=NORMAL > -- Sent from Gmail Mobile
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev