Re: [ovs-discuss] GRE over IPv6 configuration

2019-06-05 Thread Eli Britstein
On 6/5/2019 9:04 PM, Gregory Rose wrote: > > > On 6/5/2019 10:31 AM, Eli Britstein wrote: >> On 6/5/2019 8:11 PM, Gregory Rose wrote: >>> >>> On 6/4/2019 8:13 AM, Eli Britstein wrote: Hello, I would like to configure a GRE tunnel over IPv6, on a Linux system. >>> Which Linux system?

Re: [ovs-discuss] Unable to hotplug interface with DPDK initialized

2019-06-05 Thread Ian Stokes
On 6/4/2019 6:40 PM, Shriroop Joshi (shrirjos) wrote: Hi Ian I am reaching out to ask if you were able reproduce the issue. Is there anything else I can provide which will help? Regards, Shriroop Hi Shiroop, apologies for the delay, I havent been able to spend as much time as I'd like on th

Re: [ovs-discuss] flow_limit question?

2019-06-05 Thread Ben Pfaff
Can it be phrased better? I want the documentation to be clear. On Wed, Jun 05, 2019 at 01:49:26PM -0700, Ray Li wrote: > I'm sorry my mistake. I definitely misread that paragraph all this time. > > Thanks, > Ray > > On Wed, Jun 5, 2019 at 12:44 PM Ben Pfaff wrote: > > > On Wed, Jun 05, 2019

Re: [ovs-discuss] add-tlv-map not working with flow

2019-06-05 Thread Ben Pfaff
Yes, so putting a 1 in the value where the mask has a 0 generally indicates a kind of confusion. On Wed, Jun 05, 2019 at 02:03:56PM -0700, Yan Xiu wrote: > In my understanding, bit mask 0 means we don't care the value of that bit, > right? > > On Tue, Jun 4, 2019 at 10:18 AM Ben Pfaff wrote: >

Re: [ovs-discuss] Small 802.1q-prepended packets not getting through to VM

2019-06-05 Thread Ben Pfaff
On Wed, Jun 05, 2019 at 11:12:11PM +0200, Steinar H. Gunderson wrote: > On Wed, Jun 05, 2019 at 11:33:44AM -0700, Ben Pfaff wrote: > > Is it OVS's responsibility to pad the packets? > > If the packet is generated on an OVS internal port, and the destination is a > local VM through hostnet? Surely

Re: [ovs-discuss] Transferring OVS port data on migration

2019-06-05 Thread Ben Pfaff
On Fri, May 31, 2019 at 09:21:49AM +0200, Michal Privoznik wrote: > Hi, > > I'm a libvirt developer and recently we were asked the following on our > list: > > https://www.redhat.com/archives/libvir-list/2019-May/msg00851.html > > > Long story short, when libvirt is migrating a virtual machin

Re: [ovs-discuss] Small 802.1q-prepended packets not getting through to VM

2019-06-05 Thread Steinar H. Gunderson
On Wed, Jun 05, 2019 at 11:33:44AM -0700, Ben Pfaff wrote: > Is it OVS's responsibility to pad the packets? If the packet is generated on an OVS internal port, and the destination is a local VM through hostnet? Surely it's OVS' responsibility then? > I would think that the driver would take care

Re: [ovs-discuss] add-tlv-map not working with flow

2019-06-05 Thread Yan Xiu
In my understanding, bit mask 0 means we don't care the value of that bit, right? On Tue, Jun 4, 2019 at 10:18 AM Ben Pfaff wrote: > On Fri, May 31, 2019 at 04:20:49PM -0700, Yan Xiu wrote: > > sudo ovs-ofctl add-flow br0 > > > in_port=ens192,tun_metadata0=0x00860103340110505695157

Re: [ovs-discuss] flow_limit question?

2019-06-05 Thread Ray Li
I'm sorry my mistake. I definitely misread that paragraph all this time. Thanks, Ray On Wed, Jun 5, 2019 at 12:44 PM Ben Pfaff wrote: > On Wed, Jun 05, 2019 at 12:16:10PM -0700, Ray Li wrote: > > In the OVS documentation, it states that the flow_limit field is used for > > temporary flows, and

Re: [ovs-discuss] flow_limit question?

2019-06-05 Thread Ben Pfaff
On Wed, Jun 05, 2019 at 12:16:10PM -0700, Ray Li wrote: > In the OVS documentation, it states that the flow_limit field is used for > temporary flows, and permanent flows (defined as flows without and > idle_timeout or hard_timeout) does not count towards the flow_limit. > > However in the unit te

[ovs-discuss] flow_limit question?

2019-06-05 Thread Ray Li
In the OVS documentation, it states that the flow_limit field is used for temporary flows, and permanent flows (defined as flows without and idle_timeout or hard_timeout) does not count towards the flow_limit. However in the unit test cases it's cleared that the permanent flows do count towards th

Re: [ovs-discuss] Small 802.1q-prepended packets not getting through to VM

2019-06-05 Thread Ben Pfaff
On Tue, Jun 04, 2019 at 11:43:02PM +0200, Steinar H. Gunderson wrote: > On Tue, Jun 04, 2019 at 01:27:03PM -0700, Ben Pfaff wrote: > > This is certainly super weird. OVS certainly passes ARP packets fine in > > all normal situations. > > > > This is probably something inside the kernel. You migh

Re: [ovs-discuss] OVS list MAC addresses on all ports?

2019-06-05 Thread Ben Pfaff
On Wed, Jun 05, 2019 at 05:08:13PM +0100, Tom Girdler via discuss wrote: > Would it be possible to develop an IDS using POX and OVS that could detect > ARP spoofing attacks? > I'm guessing POX could get a list of the existing MAC addresses (attached to > all ports) from OVS and see if the incoming

Re: [ovs-discuss] GRE over IPv6 configuration

2019-06-05 Thread Gregory Rose
On 6/5/2019 10:31 AM, Eli Britstein wrote: On 6/5/2019 8:11 PM, Gregory Rose wrote: On 6/4/2019 8:13 AM, Eli Britstein wrote: Hello, I would like to configure a GRE tunnel over IPv6, on a Linux system. Which Linux system?  Distro, kernel version, etc? Fedora 28. Kernel upstream, currentl

Re: [ovs-discuss] GRE over IPv6 configuration

2019-06-05 Thread Eli Britstein
On 6/5/2019 8:11 PM, Gregory Rose wrote: > > > On 6/4/2019 8:13 AM, Eli Britstein wrote: >> Hello, >> >> I would like to configure a GRE tunnel over IPv6, on a Linux system. > > Which Linux system?  Distro, kernel version, etc? Fedora 28. Kernel upstream, currently 5.2-rc2. My commands are the

Re: [ovs-discuss] GRE over IPv6 configuration

2019-06-05 Thread Gregory Rose
On 6/4/2019 8:13 AM, Eli Britstein wrote: Hello, I would like to configure a GRE tunnel over IPv6, on a Linux system. Which Linux system?  Distro, kernel version, etc? Thanks, - Greg However, I encounter the following: My command: ovs-vsctl add-port br1 gre6 -- set interface gre6 type=i

Re: [ovs-discuss] GRE over IPv6 configuration

2019-06-05 Thread Gregory Rose
On 6/4/2019 11:38 AM, Ben Pfaff wrote: On Tue, Jun 04, 2019 at 06:08:00PM +, Eli Britstein wrote: On 6/4/2019 8:24 PM, Ben Pfaff wrote: On Tue, Jun 04, 2019 at 03:13:02PM +, Eli Britstein wrote: Hello, I would like to configure a GRE tunnel over IPv6, on a Linux system. However, I en

[ovs-discuss] OVS list MAC addresses on all ports?

2019-06-05 Thread Tom Girdler via discuss
Hi there, Would it be possible to develop an IDS using POX and OVS that could detect ARP spoofing attacks? I'm guessing POX could get a list of the existing MAC addresses (attached to all ports) from OVS and see if the incoming packet has any of the same addresses (i.e. its spoofed) Any idea

Re: [ovs-discuss] GRE over IPv6 configuration

2019-06-05 Thread Eli Britstein
On 6/4/2019 9:38 PM, Ben Pfaff wrote: > On Tue, Jun 04, 2019 at 06:08:00PM +, Eli Britstein wrote: >> On 6/4/2019 8:24 PM, Ben Pfaff wrote: >>> On Tue, Jun 04, 2019 at 03:13:02PM +, Eli Britstein wrote: Hello, I would like to configure a GRE tunnel over IPv6, on a Linux syst