Re: [ovs-discuss] Firewall questions

2014-12-17 Thread Ashok Chippa
Thank you Justin and Maurice. I just found the answers I was looking for punting to controller and re-injecting the packet back into the pipeline. Yes, the "controller" action will do. And "resubmit" action for re-injecting the pkt back into the pipeline. Great that command completion will be avail

Re: [ovs-discuss] Firewall questions

2014-12-17 Thread Ashok Chippa
I did find the "*controller*" action in the manpage for ovs-ofctl command: *controller*:*max_len* Sends the packet to the OpenFlow controller as a ``packet in'' message. If *max_len* is a number, then it specifies the maximum nu

Re: [ovs-discuss] Firewall questions

2014-12-17 Thread Justin Pettit
> On Dec 17, 2014, at 5:36 PM, Ashok Chippa wrote: > > Any responses are appreciated. Checked the spec, and I do not see an action > to punt the packet to controller. In section 5.12 of openflow-spec 1.3, I see > the following actions: output, set-queue, drop, group, push-tag/pop-tag, > set-f

Re: [ovs-discuss] Firewall questions

2014-12-17 Thread Maurice Qureshi (maquresh)
. Thanks Maurice From: Ashok Chippa mailto:a.n.chi...@gmail.com>> Date: Wednesday, December 17, 2014 5:36 PM To: "discuss@openvswitch.org<mailto:discuss@openvswitch.org>" mailto:discuss@openvswitch.org>> Subject: Re: [ovs-discuss] Firewall questions Including my previous qu

Re: [ovs-discuss] Firewall questions

2014-12-17 Thread Ashok Chippa
Including my previous questions: > > I am trying to takeover Table0 for Firewall function. Have couple of questions: > > 1) On a table-miss in Table0, I would like to punt the packet to user space, for DPI/FW processing. > There must be a way to punt the packet to user space? However, I do not

[ovs-discuss] Firewall questions

2014-12-16 Thread Ashok Chippa
Hi, I am trying to takeover Table0 for Firewall function. Have couple of questions: 1) On a table-miss in Table0, I would like to punt the packet to user space, for DPI/FW processing. There must be a way to punt the packet to user space? However, I do not see an action like PUNT_TO_CPU (