[ovs-discuss] Ovsdb how to customize the table

[y...@panath.cn]

hi everyone,
   Ovsdb whether to allow user-defined table, used to hold its own 
configuration data to the ovsdb inside?

   Anyone have any experience in this field?
  
Best wishes!


y...@panath.cn
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] LISP Tunneling

[Lori Jakab]

Hi Ashish,

I don't have a testbed now to play with this, but I'll try to answer
your questions from what I know off the top of my head.

On 5/17/17 3:52 PM, Ashish Kurian wrote:
> Dear OVS folks,
>
> I have some doubts regarding LISP tunneling. I have a setup where I am
> getting incoming LISP tunneled packets into my OVS. What I want to do
> is to check the inner IP destination address and based on that I need
> to forward the packets. Let us say that there are only two
> possibilities for inner IP addresses : 10.0.0.1 and 10.0.0.2.
>
> If the inner IP address is 10.0.0.1, then I want the packet to be
> forwarded to an interface (say eth1 and port number 1) without doing
> any change to the tunneled packet. If the inner IP address is
> 10.0.0.2, then I want the packet to be forwarded to the another
> interface (say eth2 and port number 2) with only the inner contents of
> the tunnel packets.
>
> I am thinking of the following flow entries to do the mentioned rules,
> but correct me if I am wrong.
>
> *   
>  table=0,dl_type=0x0800,nw_dst=10.0.0.2,actions=mod_dl_dst=10:0:0:2,output:2*
>
>   * * *Will this flow check for the inner destination IP of
> the tunneled packet and put only the metadata in port eth2?
>

This rule will check for the outer address on the packet so that won't
help. I don't know if there is currently a way to look at the inner
header fields before the packet is decapsulated (probably not). But once
decapsulated, you loose the original outer header, which may or may not
be okay for you. what you could do is matching on offsets in the UDP
payload: the LISP header is fixed size, you can then match on the IP
version in the first byte after the LISP header, and the desired inner
IP address inside the IP header.

Maybe other have better ideas on how your requirements ca be fulfilled.

HTH,
-Lori

>   *table=0,dl_type=0x0800,action=NORMAL*
> *
> *
>
>   * **Will this flow take care of all other flows?
>
>
> PS : Sorry for the previous emails. That was a mistake.
>   
> Best Regards,
> Ashish Kurian
>
> Best Regards,
> Ashish Kurian
>
> On Wed, May 17, 2017 at 2:47 PM, Ashish Kurian  > wrote:
>
> Dear OVS folks,
>
> I have some doubts regarding LISP tunneling. I have a setup where
> I am getting incoming LISP tunneled packets into my OVS. What I
> want to do is to check the inner IP destination address and based
> on that I need to forward the packets. Let us say that there are
> only two possibilities of inner IP addresses : 10.0.0.1 and 10.0.0.2.
>
> If the inner IP address is 10.0.0.1, then I want the packet to be
> forwarded to an interface (say eth1 and port number 1) without
> doing any change to the tunneled packet. If the inner IP address
> is 10.0.0.2, then I want the packet to be forwarded to the another
> interface (say eth2 and port number 2) with only the inner
> contents of the tunnel packets.
>
> I am thinking of the following flow entries to do the mentioned
> rules, but correct me if I am wrong.
> *
> *
> 
> *table=0,dl_type=0x0800,nw_dst=10.0.0.2,actions=mod_dl_dst=10:0:0:2,output:2*
>
>   
> Best Regards,
> Ashish Kurian
>
> Best Regards,
> Ashish Kurian
>
> On Wed, May 17, 2017 at 2:46 PM, Ashish Kurian
> mailto:ashish...@gmail.com>> wrote:
>
> Dear OVS folks,
>
> I have some doubts regarding LISP tunneling. I have a setup
> where I am getting incoming LISP tunneled packets into my OVS.
> What I want to do is to check the inner IP destination address
> and based on that I need to forward the packets. Let us say
> that there are only two possibilities of inner IP addresses :
> 10.0.0.1 and 10.0.0.2.
>
> If the inner IP address is 10.0.0.1, then I want the packet to
> be forwarded to an interface (say eth1 and port number 1)
> without doing any change to the tunneled packet. If the inner
> IP address is 10.0.0.2, then I want the packet to be forwarded
> to the another interface (say eth2 and port number 2) with
> only the inner contents of the tunnel packets.
>
> I am thinking of the following flow entries to do the
> mentioned rules, but correct me if I am wrong.
>
> 
> *table=0,dl_type=0x0800,nw_dst=10.0.0.2,actions=mod_dl_dst=10:0:0:2,output:2*
>
>   
> Best Regards,
> Ashish Kurian
>
>
>
>
>
> ___
> discuss mailing list
> disc...@openvswitch.org
> https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] Ovsdb how to customize the table

[Venugopal Reddy K]

Hi,

I believe, you might want to use your own schema/database. Please refer below 
link. It might give you insight on creating your own schema and generate db 
from it.

https://www.relaxdiego.com/2014/09/ovsdb.html

regards,
Venu

From: ovs-discuss-boun...@openvswitch.org 
[mailto:ovs-discuss-boun...@openvswitch.org] On Behalf Of y...@panath.cn
Sent: 18 May 2017 13:00
To: ovs-discuss
Subject: [ovs-discuss] Ovsdb how to customize the table

hi everyone,
   Ovsdb whether to allow user-defined table, used to hold its own 
configuration data to the ovsdb inside?

   Anyone have any experience in this field?

Best wishes!

y...@panath.cn
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

[ovs-discuss] DUMP-FLOWS: ofctl dump-flows vs dpctl dump-flows

[Avi Cohen (A)]

Hello,
I'm seeing in my dpctl dump-flows   about 10,000  flows,  while in ofctl 
dump-flows I see only ~ 1400 flows 
- Is this make sense ?
- How can I associate an ofcctl flow to a dpctl flow ?  (I can see ufid only in 
dpctl dump)
Best Regards,
avi
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] DUMP-FLOWS: ofctl dump-flows vs dpctl dump-flows

[Avi Cohen (A)]

I understand from manpages that dpctl shows only exact-match flows of packets 
that traverse the datapath lately.
So I expect to see less flows in the datapath than in openflow.  but I have  
more flows in the datapath - why ?

> -Original Message-
> From: Avi Cohen (A)
> Sent: Thursday, 18 May, 2017 4:37 PM
> To: 'ovs-discuss@openvswitch.org'
> Subject: DUMP-FLOWS: ofctl dump-flows vs dpctl dump-flows
> 
> Hello,
> I'm seeing in my dpctl dump-flows   about 10,000  flows,  while in ofctl dump-
> flows I see only ~ 1400 flows
> - Is this make sense ?
> - How can I associate an ofcctl flow to a dpctl flow ?  (I can see ufid only 
> in dpctl
> dump) Best Regards, avi
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] DUMP-FLOWS: ofctl dump-flows vs dpctl dump-flows

[Levente Csikor]

Hi,

a.f.a.i.k.:

dpctl shows what's in the kernel space (fast path) and ofctl shows
what's in the userspace (flow table - slow(er) path).

The flow table can have priorities, therefore it can consist of
overlapping rules as well resulting in lesser number of rules.
On the other hand, the fast path builds a (megaflow-)cache according to
the userspace flow-table(s) AND the incoming packets, in particular,
incoming packets' headers (regardless of the action (forward/drop)).

So, you not just see more rules/lines of output after calling dpctl
command, they don't even be exactly the same.

Please correct me, if I'm wrong.

BR,
levi

On 05/18/2017 03:17 PM, Avi Cohen (A) wrote:
> I understand from manpages that dpctl shows only exact-match flows of packets 
> that traverse the datapath lately.
> So I expect to see less flows in the datapath than in openflow.  but I have  
> more flows in the datapath - why ?
>
>> -Original Message-
>> From: Avi Cohen (A)
>> Sent: Thursday, 18 May, 2017 4:37 PM
>> To: 'ovs-discuss@openvswitch.org'
>> Subject: DUMP-FLOWS: ofctl dump-flows vs dpctl dump-flows
>>
>> Hello,
>> I'm seeing in my dpctl dump-flows   about 10,000  flows,  while in ofctl 
>> dump-
>> flows I see only ~ 1400 flows
>> - Is this make sense ?
>> - How can I associate an ofcctl flow to a dpctl flow ?  (I can see ufid only 
>> in dpctl
>> dump) Best Regards, avi
> ___
> discuss mailing list
> disc...@openvswitch.org
> https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] DUMP-FLOWS: ofctl dump-flows vs dpctl dump-flows

[Ben Pfaff]

On Thu, May 18, 2017 at 01:36:54PM +, Avi Cohen (A) wrote:
> I'm seeing in my dpctl dump-flows   about 10,000  flows,  while in ofctl 
> dump-flows I see only ~ 1400 flows 
> - Is this make sense ?

If you have a lot of traffic, and a complicated OpenFlow flow table,
then you might see two datapath flows (in ovs-dpctl) for every TCP
connection.

> - How can I associate an ofcctl flow to a dpctl flow ?  (I can see ufid only 
> in dpctl dump)

You can use "ovs-appctl ofproto/trace".
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] [controller-dev] build failure when 'mvn archetype:generate' using '-DarchetypeCatalog'

[Robert Varga]

On 21/04/17 10:35, Sam wrote:
> I found in stable/boron pom.xml:
> 
> 
> org.opendaylight.odlparent
> odlparent-lite
> 1.7.3-SNAPSHOT
> 
> 
> 
> 
> Is coretutorials' pom.xml wrong?

Core tutorials is not part of the autorelease, hence stable/carbon
versions have not been bumped after Boron SR3.

At this point the project is pretty much abandoned. While I try to keep
its master branch up to date, it could use a new set of committers.

Regards,
Robert



signature.asc
Description: OpenPGP digital signature
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] DUMP-FLOWS: ofctl dump-flows vs dpctl dump-flows

[Aaron Conole]

Levente Csikor  writes:

> Hi,
>
> a.f.a.i.k.:
>
> dpctl shows what's in the kernel space (fast path) and ofctl shows what's in 
> the
> userspace (flow table - slow(er) path).
>
> The flow table can have priorities, therefore it can consist of overlapping 
> rules as
> well resulting in lesser number of rules.
> On the other hand, the fast path builds a (megaflow-)cache according to the 
> userspace
> flow-table(s) AND the incoming packets, in particular, incoming packets' 
> headers
> (regardless of the action (forward/drop)).
>
> So, you not just see more rules/lines of output after calling dpctl command, 
> they
> don't even be exactly the same.
>
> Please correct me, if I'm wrong.

That looks correct to me.

Additionally, Joe Stringer did an excellent talk about using ovs-dpctl -
https://www.youtube.com/watch?v=8ieoUQI7X88

This may help understand the difference between the two datapoints.

> BR,
> levi
>
> On 05/18/2017 03:17 PM, Avi Cohen (A) wrote:
>
>  I understand from manpages that dpctl shows only exact-match flows of 
> packets that
>  traverse the datapath lately.
> So I expect to see less flows in the datapath than in openflow.  but I have  
> more flows in the datapath - why ?
>
>  -Original Message-
> From: Avi Cohen (A)
> Sent: Thursday, 18 May, 2017 4:37 PM
> To: 'ovs-discuss@openvswitch.org'
> Subject: DUMP-FLOWS: ofctl dump-flows vs dpctl dump-flows
>
> Hello,
> I'm seeing in my dpctl dump-flows   about 10,000  flows,  while in ofctl dump-
> flows I see only ~ 1400 flows
> - Is this make sense ?
> - How can I associate an ofcctl flow to a dpctl flow ?  (I can see ufid only 
> in dpctl
> dump) Best Regards, avi
>
> ___
> discuss mailing list
> disc...@openvswitch.org
> https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
>
> ___
> discuss mailing list
> disc...@openvswitch.org
> https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

[ovs-discuss] IGMP snooping control for static groups

[Ajit Warrier]

Some legacy multicast applications do not support IGMP join/leaves and
hence they do not get registered on the switch's MDB. Is there a command to
add such multicast groups into the MDB as static entries that do not time
out ?

Ajit.
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] IGMP snooping control for static groups

[Ben Pfaff]

On Thu, May 18, 2017 at 08:44:22PM +, Ajit Warrier wrote:
> Some legacy multicast applications do not support IGMP join/leaves and
> hence they do not get registered on the switch's MDB. Is there a command to
> add such multicast groups into the MDB as static entries that do not time
> out ?

I don't think that OVS has that feature.  I imagine that we'd accept a
patch to add it.  If you're planning to work on it, it might be worth
discussing the design before jumping in.
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] Ovsdb how to customize the table

[y...@panath.cn]

Thank you very much for your reply!



y...@panath.cn
 
From: Venugopal Reddy K
Date: 2017-05-18 21:33
To: y...@panath.cn; ovs-discuss
Subject: RE: [ovs-discuss] Ovsdb how to customize the table
Hi,
 
I believe, you might want to use your own schema/database. Please refer below 
link. It might give you insight on creating your own schema and generate db 
from it.
 
https://www.relaxdiego.com/2014/09/ovsdb.html
 
regards,
Venu
 
From: ovs-discuss-boun...@openvswitch.org 
[mailto:ovs-discuss-boun...@openvswitch.org] On Behalf Of y...@panath.cn
Sent: 18 May 2017 13:00
To: ovs-discuss
Subject: [ovs-discuss] Ovsdb how to customize the table
 
hi everyone,
   Ovsdb whether to allow user-defined table, used to hold its own 
configuration data to the ovsdb inside?

   Anyone have any experience in this field?
  
Best wishes!


y...@panath.cn
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss