Re: [ovs-discuss] OVS 2.13.1-1: ovs-pki req+sign option is not generating the certificate NAME-cert.pem file.

[Ben Pfaff]

On Fri, Oct 16, 2020 at 06:28:45PM +0530, NR 85 wrote:
> Hi Team,
> 
> I am facing an issue in ovs-pki in which req+sign option is not generating
> the certificate. Kindly look into this issue and provide your suggestion.
> 
> From the logs below it will be clear that the "test-cert.pem" file is not
> generated and the file with name "test-cert.pem.tmp18614" is generated with
> zero byte.

ovs-pki produces its own log.  It's probably named ovs-pki.log and
probably in /var/log.  What's in it?
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

[ovs-discuss] [ovn] no tunnel from GW to compute

[Tony Liu]

Hi,

I am seeing an interesting issue today.
When ping a FIP from external, request arrives on GW, but no
tunnel from GW to compute.
When ping from VM to external, egress works fine, request
goes through tunnel from compute to GW, then to external.
Reply arrives at GW, no tunnel from GW back to compute.

I checked DP flows on GW and compared working vs. non-working.

non-working, no tunnel

recirc_id(0),in_port(3),ct_state(-new-est-rel-rpl-inv-trk),ct_label(0/0x1),eth(src=e8:1c:ba:9f:b7:c6,dst=fa:16:3e:67:5c:d9),eth_type(0x0800),ipv4(src=128.0.0.0/192.0.0.0,dst=10.59.53.18,proto=1,ttl=63,frag=no),icmp(type=8/0xf8),
 packets:8, bytes:784, used:0.992s, 
actions:ct_clear,ct(zone=20,nat),recirc(0x6e1)

recirc_id(0x6e1),in_port(3),ct_state(+new-est-rel-rpl-inv+trk),ct_label(0/0x1),eth(),eth_type(0x0800),ipv4(dst=10.59.53.18,frag=no),
 packets:29, bytes:2842, used:0.992s, 
actions:ct(commit,zone=21,nat(dst=192.168.1.8)),recirc(0x6e2)

recirc_id(0x6e2),in_port(3),ct_state(+new-est-rel-rpl-inv+trk),ct_label(0/0x1),eth(src=e8:1c:ba:9f:b7:c6,dst=fa:16:3e:67:5c:d9),eth_type(0x0800),ipv4(dst=192.168.1.8,proto=1,ttl=63,frag=no),icmp(type=8/0xf8),
 packets:8, bytes:784, used:0.992s, actions:ct_clear


working, with tunnel

recirc_id(0),in_port(3),ct_state(-new-est-rel-rpl-inv-trk),ct_label(0/0x1),eth(src=e8:1c:ba:9f:b7:c6,dst=fa:16:3e:67:5c:d9),eth_type(0x0800),ipv4(src=128.0.0.0/192.0.0.0,dst=10.59.53.14,proto=1,ttl=63,frag=no),icmp(type=8/0xf8),
 packets:2, bytes:196, used:3.427s, 
actions:ct_clear,ct(zone=20,nat),recirc(0x716)

recirc_id(0x716),in_port(3),ct_state(+new-est-rel-rpl-inv+trk),ct_label(0/0x1),eth(),eth_type(0x0800),ipv4(dst=10.59.53.14,frag=no),
 packets:2, bytes:196, used:3.428s, 
actions:ct(commit,zone=21,nat(dst=192.168.1.5)),recirc(0x717)

recirc_id(0x717),in_port(3),ct_state(+new-est-rel-rpl-inv+trk),ct_label(0/0x1),eth(src=e8:1c:ba:9f:b7:c6,dst=fa:16:3e:67:5c:d9),eth_type(0x0800),ipv4(dst=192.168.1.5,proto=1,tos=0/0x3,ttl=63,frag=no),icmp(type=8/0xf8),
 packets:0, bytes:0, used:never, 
actions:ct_clear,set(tunnel(tun_id=0x139,dst=10.6.30.63,ttl=64,tp_dst=6081,geneve({class=0x102,type=0x80,len=4,0x2000a}),flags(df|csum|key))),set(eth(src=fa:16:3e:aa:2a:5d,dst=fa:16:3e:a6:79:6f)),set(ipv4(ttl=62)),1


The difference is on the third flow (0x6e2 and 0x717).
In non-working case, "set(tunnel..." is missing.
Note, the working VM and non-working VM are on the same compute.
I want to trace the root cause. Any hints or comments where and how
I should look into it?


Thanks!
Tony

___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] [ovs-dev] OvS Processes

[Filipe Lemos]

Hello everyone, thank you so much for the many answers, what a great
community.
@all I'm trying to understand which of those processes (ovsdb-server and
ovs-vswitchd) holds the tables sent from the SDN controller.
@Ben Pfaff  , interesting, I think it's a thread, in this case
particular case I installed them using apt install. I'll look for it.
@Renat A great start point, I'll try to look for the documentation on OvS
daemon.
@Ilya I just used htop to see the processes running and using the filter to
see only processes with the tag containing ovs.

Em sex., 16 de out. de 2020 às 20:42, Ilya Maximets 
escreveu:

> On 10/16/20 11:23 PM, Filipe Lemos wrote:
> > Hello everyone,
> > I tried to learn more about each process created by running OvS while my
> > bridge runs as a SDN switch connected to a controller. I can see that
> there
> > are 4 processes with ovs in the name, as shown in the attached
> screenshot.
>
> Hi, Filipe.
>
> The mailing list is filtering attachments, so your screenshot was lost.
> Could you write down the names and command lines of the processes you want
> to ask about in text form?
>
> > What does each one of them do? There is any documentation explaining
> them?
> >
> > Thank you,
> >
>
>

-- 

*Filipe Augusto da Luz Lemos* M.Sc.

*PhD Graduate Student | Networks and Distributed Systems | Federal
University of Technology Paraná*

*Forensic Sciences* |* Syracuse University*


*Electrical Engineering | Federal University of Technology Paraná*

fadal...@syr.edu *|* http://forensics.syr.edu/

*fle...@alunos.utfpr.edu.br
 | http://utfpr.edu.br  *
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] [ovs-dev] OvS Processes

[Ilya Maximets]

On 10/16/20 11:23 PM, Filipe Lemos wrote:
> Hello everyone,
> I tried to learn more about each process created by running OvS while my
> bridge runs as a SDN switch connected to a controller. I can see that there
> are 4 processes with ovs in the name, as shown in the attached screenshot.

Hi, Filipe.

The mailing list is filtering attachments, so your screenshot was lost.
Could you write down the names and command lines of the processes you want
to ask about in text form?

> What does each one of them do? There is any documentation explaining them?
> 
> Thank you,
> 

___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] OvS Processes

[Ben Pfaff]

ovs-vswitchd normally has only one process.  If you use --monitor, then
it creates a second process to restart the main one if it crashes.  If
you see more than that, either they are actually threads within
ovs-vswitchd (it can have several) or you somehow started multiple
copies of ovs-vswitchd.

On Fri, Oct 16, 2020 at 07:28:58PM -0300, Filipe Lemos wrote:
> Sorry,
> for some reason it wasn't accepting to send the email. I guess it remove
> the screenshot and after trying to send to both groups it choose to sed
> booths.
> Well, the processes are ovsdb-server and ovs-vswitchd (which seems to have
> a tree of processes under it ).
> 
> Em sex., 16 de out. de 2020 às 19:23, Ben Pfaff  escreveu:
> 
> > On Fri, Oct 16, 2020 at 06:23:24PM -0300, Filipe Lemos wrote:
> > > I tried to learn more about each process created by running OvS while my
> > > bridge runs as a SDN switch connected to a controller. I can see that
> > there
> > > are 4 processes with ovs in the name, as shown in the attached
> > screenshot.
> > > What does each one of them do? There is any documentation explaining
> > them?
> >
> > Please don't crosspost to both lists.
> >
> > I don't see an attached screenshot.  What are the names of the
> > processes?
> >
> 
> 
> -- 
> 
> *Filipe Augusto da Luz Lemos* M.Sc.
> 
> *PhD Graduate Student | Networks and Distributed Systems | Federal
> University of Technology Paraná*
> 
> *Forensic Sciences* |* Syracuse University*
> 
> 
> *Electrical Engineering | Federal University of Technology Paraná*
> 
> fadal...@syr.edu *|* http://forensics.syr.edu/
> 
> *fle...@alunos.utfpr.edu.br
>  | http://utfpr.edu.br  *
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] OvS Processes

[Filipe Lemos]

Sorry,
for some reason it wasn't accepting to send the email. I guess it remove
the screenshot and after trying to send to both groups it choose to sed
booths.
Well, the processes are ovsdb-server and ovs-vswitchd (which seems to have
a tree of processes under it ).

Em sex., 16 de out. de 2020 às 19:23, Ben Pfaff  escreveu:

> On Fri, Oct 16, 2020 at 06:23:24PM -0300, Filipe Lemos wrote:
> > I tried to learn more about each process created by running OvS while my
> > bridge runs as a SDN switch connected to a controller. I can see that
> there
> > are 4 processes with ovs in the name, as shown in the attached
> screenshot.
> > What does each one of them do? There is any documentation explaining
> them?
>
> Please don't crosspost to both lists.
>
> I don't see an attached screenshot.  What are the names of the
> processes?
>


-- 

*Filipe Augusto da Luz Lemos* M.Sc.

*PhD Graduate Student | Networks and Distributed Systems | Federal
University of Technology Paraná*

*Forensic Sciences* |* Syracuse University*


*Electrical Engineering | Federal University of Technology Paraná*

fadal...@syr.edu *|* http://forensics.syr.edu/

*fle...@alunos.utfpr.edu.br
 | http://utfpr.edu.br  *
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Re: [ovs-discuss] OvS Processes

[Ben Pfaff]

On Fri, Oct 16, 2020 at 06:23:24PM -0300, Filipe Lemos wrote:
> I tried to learn more about each process created by running OvS while my
> bridge runs as a SDN switch connected to a controller. I can see that there
> are 4 processes with ovs in the name, as shown in the attached screenshot.
> What does each one of them do? There is any documentation explaining them?

Please don't crosspost to both lists.

I don't see an attached screenshot.  What are the names of the
processes?
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

[ovs-discuss] OvS Processes

[Filipe Lemos]

Hello everyone,
I tried to learn more about each process created by running OvS while my
bridge runs as a SDN switch connected to a controller. I can see that there
are 4 processes with ovs in the name, as shown in the attached screenshot.
What does each one of them do? There is any documentation explaining them?

Thank you,

-- 

*Filipe Augusto da Luz Lemos* M.Sc.

*PhD Graduate Student | Networks and Distributed Systems | Federal
University of Technology Paraná*

*Forensic Sciences* |* Syracuse University*


*Electrical Engineering | Federal University of Technology Paraná*

fadal...@syr.edu *|* http://forensics.syr.edu/

*fle...@alunos.utfpr.edu.br
 | http://utfpr.edu.br  *
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

[ovs-discuss] OvS Process

[Filipe Lemos]

Hello everyone,
I tried to learn more about each process created by running OvS while my
bridge runs as a SDN switch connected to a controller. I can see that there
are 4 processes with ovs in the name, as shown in the attached screenshot.
What does each one of them do? There is any documentation explaining them?

[image: image.png]

Thank you,
-- 

*Filipe Augusto da Luz Lemos* M.Sc.

*PhD Graduate Student | Networks and Distributed Systems | Federal
University of Technology Paraná*

*Forensic Sciences* |* Syracuse University*


*Electrical Engineering | Federal University of Technology Paraná*

fadal...@syr.edu *|* http://forensics.syr.edu/

*fle...@alunos.utfpr.edu.br
 | http://utfpr.edu.br  *
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

[ovs-discuss] OVS 2.13.1-1: ovs-pki req+sign option is not generating the certificate NAME-cert.pem file.

[NR 85]

Hi Team,

I am facing an issue in ovs-pki in which req+sign option is not generating
the certificate. Kindly look into this issue and provide your suggestion.

>From the logs below it will be clear that the "test-cert.pem" file is not
generated and the file with name "test-cert.pem.tmp18614" is generated with
zero byte.

root@home:/etc/openvswitch# /usr/bin/ovs-pki --version
ovs-pki (Open vSwitch) 2.13.1

root@home:/etc/openvswitch# ls -alrth
total 52K
drwxr-sr-x 101 root root 4.0K Oct 13 18:22 ..
-rw-r--r-- 1 root root 15K Oct 13 20:41 conf.db
-rw--- 1 root root 0 Oct 13 20:41 .conf.db.lock
-rw--- 1 root root 0 Oct 13 20:41 .ovs.db.lock
-rw--- 1 root root 0 Oct 13 20:41 .vtep.db.lock
-rw-r--r-- 1 root root 15K Oct 13 20:42 ovs.db
-rw-r--r-- 1 root root 8.8K Oct 13 20:43 vtep.db
drwxr-xr-x 2 root root 4.0K Oct 16 04:20 .

root@home:/etc/openvswitch# /usr/bin/ovs-pki req+sign test --force

root@home:/etc/openvswitch# ls -alrth
total 60K
drwxr-sr-x 101 root root 4.0K Oct 13 18:22 ..
-rw-r--r-- 1 root root 15K Oct 13 20:41 conf.db
-rw--- 1 root root 0 Oct 13 20:41 .conf.db.lock
-rw--- 1 root root 0 Oct 13 20:41 .ovs.db.lock
-rw--- 1 root root 0 Oct 13 20:41 .vtep.db.lock
-rw-r--r-- 1 root root 15K Oct 13 20:42 ovs.db
-rw-r--r-- 1 root root 8.8K Oct 13 20:43 vtep.db
-rw--- 1 root root 1.7K Oct 16 04:21 test-privkey.pem
-rw-r--r-- 1 root root 3.8K Oct 16 04:21 test-req.pem
-rw-r--r-- 1 root root 0 Oct 16 04:21 test-cert.pem.tmp18614
drwxr-xr-x 2 root root 4.0K Oct 16 04:21 .
root@home:/etc/openvswitch#


Thank you,

Warm Regards,

Ramesh.G
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss