[ovs-discuss] Openvswitch flow(or rule) to implement CAPTIVE-PORTAL (or HTTP redirect)

2016-12-06 Thread Joo Yong-Seok
Hello, Is there any good example for openvswitch flow/rules for captive-portal? Which means, - We should perform DNAT (with captive-portal web server IP) for outbound HTTP traffic - When responses are back, we should do proper NAT again. The issue, is, http packets' DIP from client, it's not fix

[ovs-discuss] On OVNDB-HA using pacemaker two issues discussed

2016-12-06 Thread 姜尚0387
I am learning OVNDB-HA using pacemaker, I feel this is a good design. At the same time I have two questions and would like to discuss: 1, we have two resources, one is the master node of the OVNDB, one is VIP. Pacemaker resource constraints are dependencies, not symbiotic, so we mu

Re: [ovs-discuss] Bridge does not specify output ; ignoring? (OVS-DPDK Ubuntu)

2016-12-06 Thread Stokes, Ian
> The mirror-related errors in the log. ovs-tcpdump creates a mirror. Are there any other errors in the logs? (with a view to figuring out why traffic isn't reaching the VMs). Feel free to attach them if you're unsure. Can you provide some more detail with regards to your setup? OVS release/co

Re: [ovs-discuss] Bridge does not specify output ; ignoring? (OVS-DPDK Ubuntu)

2016-12-06 Thread Ben Pfaff
The mirror-related errors in the log. ovs-tcpdump creates a mirror. On Tue, Dec 06, 2016 at 03:05:32PM -0500, Lax Clarke wrote: > Pardon? What's caused by ovs-tcpdump?? > > On Tue, Dec 6, 2016 at 2:17 PM, Ben Pfaff wrote: > > > Oh, it's probably caused by ovs-tcpdump, now that I think abo

Re: [ovs-discuss] Bridge does not specify output ; ignoring? (OVS-DPDK Ubuntu)

2016-12-06 Thread Lax Clarke
Pardon? What's caused by ovs-tcpdump?? On Tue, Dec 6, 2016 at 2:17 PM, Ben Pfaff wrote: > Oh, it's probably caused by ovs-tcpdump, now that I think about it. > > On Tue, Dec 06, 2016 at 01:20:19PM -0500, Lax Clarke wrote: > > I do not think we did. > > > > Only config we did: > > > > # Subs

Re: [ovs-discuss] What's the purpose of alg=ftp in the ct action?

2016-12-06 Thread Ben Pfaff
On Tue, Dec 06, 2016 at 10:22:18AM -0800, Joe Stringer wrote: > Until recently, Linux has turned on automatic helper assignment by > default. What this means is that even if you do not specify ALGs, the > traffic will be put through that ALG. In such cases, it is possible to > construct OpenFlow ta

Re: [ovs-discuss] Bridge does not specify output ; ignoring? (OVS-DPDK Ubuntu)

2016-12-06 Thread Ben Pfaff
Oh, it's probably caused by ovs-tcpdump, now that I think about it. On Tue, Dec 06, 2016 at 01:20:19PM -0500, Lax Clarke wrote: > I do not think we did. > > Only config we did: > > # Subscribers DPDK-based Bridge > ovs-vsctl add-br flat-br-0 -- set bridge flat-br-0 datapath_type=netdev > ovs-vsc

Re: [ovs-discuss] What's the purpose of alg=ftp in the ct action?

2016-12-06 Thread Joe Stringer
On 6 December 2016 at 10:41, Samuel Jean wrote: > Awesome, exactly the kind of context background I needed. Thanks Joe! > > On a side note, is that ok to assume the argument to the alg flag is one of > the exact helper name as found with all the nf_conntrack_* modules? Or is > FTP the only suppo

Re: [ovs-discuss] What's the purpose of alg=ftp in the ct action?

2016-12-06 Thread Samuel Jean via discuss
Awesome, exactly the kind of context background I needed. Thanks Joe! On a side note, is that ok to assume the argument to the alg flag is one of the exact helper name as found with all the nf_conntrack_* modules? Or is FTP the only supported alg at the moment? Let's say I set alg=irc, is that

Re: [ovs-discuss] What's the purpose of alg=ftp in the ct action?

2016-12-06 Thread Joe Stringer
On 6 December 2016 at 08:03, Samuel Jean via discuss wrote: > Howdy folks, > > Yesterday, I was playing with the conntrack stuff available since 2.5 and I > my assumption was that OVS relies on nf_conntrack for tracking tuples and > states. So for FTP to work, I assumed all I need is to make sure

Re: [ovs-discuss] Bridge does not specify output ; ignoring? (OVS-DPDK Ubuntu)

2016-12-06 Thread Lax Clarke
I do not think we did. Only config we did: # Subscribers DPDK-based Bridge ovs-vsctl add-br flat-br-0 -- set bridge flat-br-0 datapath_type=netdev ovs-vsctl add-port flat-br-0 dpdk0 -- set Interface dpdk0 type=dpdk ovs-vsctl add-port flat-br-0 stack-1-pts-1-subscribers-1 -- set Interface stack-1-

Re: [ovs-discuss] Bridge does not specify output ; ignoring? (OVS-DPDK Ubuntu)

2016-12-06 Thread Ben Pfaff
On Tue, Dec 06, 2016 at 12:20:35PM -0500, Lax Clarke wrote: > I'm having trouble with 2 OVS bridges I've configured (sitting on top of > OVS-DPDK): > > 2e18698f-9583-4c59-972c-72c2c32cfc7d > Bridge "flat-br-1" > Port "stack-1-pts-1-internet-1" > Interface "stack-1-pts-1-int

[ovs-discuss] What's the purpose of alg=ftp in the ct action?

2016-12-06 Thread Samuel Jean via discuss
Howdy folks, Yesterday, I was playing with the conntrack stuff available since 2.5 and I my assumption was that OVS relies on nf_conntrack for tracking tuples and states. So for FTP to work, I assumed all I need is to make sure the nf_conntrack_ftp module is loaded to perform its duty. It proved

[ovs-discuss] Bridge does not specify output ; ignoring? (OVS-DPDK Ubuntu)

2016-12-06 Thread Lax Clarke
Hi, I'm having trouble with 2 OVS bridges I've configured (sitting on top of OVS-DPDK): 2e18698f-9583-4c59-972c-72c2c32cfc7d Bridge "flat-br-1" Port "stack-1-pts-1-internet-1" Interface "stack-1-pts-1-internet-1" type: dpdkvhostuser Port "flat-br-1"

[ovs-discuss] What's the purpose of alg=ftp in the ct action?

2016-12-06 Thread Samuel Jean via discuss
Howdy folks, Yesterday, I was playing with the conntrack stuff available since 2.5 and I my assumption was that OVS relies on nf_conntrack for tracking tuples and states. So for FTP to work, I assumed all I need is to make sure the nf_conntrack_ftp module is loaded to perform its duty. It proved