Re: [ovs-discuss] password in plain text?!

2019-02-01 Thread Grant Taylor via discuss
On 02/01/2019 03:44 AM, Riccardo Ravaioli wrote: Why is the mailing list memberships reminder sending me my password in plain text? That's not too nice... :) That is how Mailman operates. (At least the 2.x versions that I've subscribed to.) Can that be fixed? You can modify your

Re: [ovs-discuss] ARP issues with KVM and OVS..?

2019-01-06 Thread Grant Taylor via discuss
On 1/4/19 3:19 PM, Alexander Witte wrote: Hi! Hi Alex, Environment: KVM Fedora I have a weird issue where a VM can ping one way through the open vswitch but the other way doesn't seem to want to go through. The setup is like this: VM1 --> OVS --> VM2. VM1 has two interfaces:

Re: [ovs-discuss] Single nic server and ovn

2018-12-19 Thread Grant Taylor via discuss
On 12/18/2018 11:56 PM, Vasiliy Tolstov wrote: Hi, i have some servers that have only one nic for network. As i understand for ovn i need to add this interface to ovs bridge. But for host access i need some ip address on server and also if ovs or ovn is down or something else with this services

Re: [ovs-discuss] Physical interface vs interface under OVS bridge Performance/throughput impact

2018-11-15 Thread Grant Taylor via discuss
On 11/15/2018 07:48 AM, Ben Pfaff wrote: No. (Why would running OVS in the simplest way increase the performance cost?) Is it possible that there's slightly more overhead in the algorithm(s) of the simple L2 learning functionality of the "NORMAL" action? Compared to simple rules that

Re: [ovs-discuss] What is the best way to map a VTEP flow to an internal port?

2018-09-21 Thread Grant Taylor via discuss
On 09/21/2018 02:48 PM, Ben Pfaff wrote: No. A port can be an internal port or a vxlan port. It can't be both. Thank you for the confirmation. Maybe you should use flows instead of OVSDB configuration. Flows can also direct packets from one port to another. I guess that this would be

Re: [ovs-discuss] What is the best way to map a VTEP flow to an internal port?

2018-09-18 Thread Grant Taylor via discuss
Hi Ben, Thank you for the reply. On 09/17/2018 10:29 PM, Ben Pfaff wrote: Something like this? I have not tested it. ovs-vsctl add-port br0 port0 -- set interface port0 type=internal -- set port port0 tag=100 ovs-vsctl add-port br0 port1 -- set interface port1 type=internal -- set port

[ovs-discuss] What is the best way to map a VTEP flow to an internal port?

2018-09-15 Thread Grant Taylor via discuss
What is the best way to map a specific flow ID coming in a VTEP to a specific internal port? # ovs-vsctl add-br br0 # ovs-vsctl add-port br0 port0 -- set interface port0 type=internal -- set port port0 tag=100 # ovs-vsctl add-port br0 port1 -- set interface port1 type=internal -- set port

Re: [ovs-discuss] Complex, for me at least, setup with multiple hosts

2018-09-09 Thread Grant Taylor via discuss
On 09/09/2018 02:12 PM, Vassilis Aretakis wrote: I have a LAN which is accessible by 3 servers. I would like to allow specific internet hosts to use this lan. Okay. Because I want ot have multiple links and All hosts to receive multicast etc. I thought of using multiple openvswitches on the

Re: [ovs-discuss] tap ports...

2018-03-07 Thread Grant Taylor via discuss
On 03/07/2018 12:56 PM, Ben Pfaff wrote: Q: I created a tap device tap0, configured an IP address on it, and added it to a bridge, like this:: $ tunctl -t tap0 $ ip addr add 192.168.0.123/24 dev tap0 $ ip link set tap0 up $ ovs-vsctl add-br br0 $ ovs-vsctl add-port br0 tap0

[ovs-discuss] tap ports...

2018-03-05 Thread Grant Taylor via discuss
Can OVS create tap ports like OpenVPN or KVM (Qemu) or User Mode Linux use? I.e. an Ethernet interface inside OVS and a socket that applications can glom onto and use. I think I can create the tap interfaces manually (via tunctl or ip tuntap…) and then add them to a bridge. However I feel

Re: [ovs-discuss] OpenVswitch

2018-03-01 Thread Grant Taylor via discuss
On 02/28/2018 09:00 PM, Chris Boley wrote: I've been tinkering with OVS on Ubuntu 16.04 with the libvirt hypervisor. Tinkering ~> learning is always a good thing. I've gotten the XML based networks defined in the hypervisor and I've gotten the host to understand it's interfacing with OVS.

Re: [ovs-discuss] OpenVswitch

2018-02-25 Thread Grant Taylor via discuss
On 02/25/2018 07:54 AM, Chris Boley wrote: Sorry Grant, I think I replied directly to you the first time around. I forgot the Reply All. Things happen. Correct, *INLINE_IPS* filtering and dropping traffic. To the IPS VM it would look like two ethernet interfaces that were members of a

Re: [ovs-discuss] OpenVswitch

2018-02-24 Thread Grant Taylor via discuss
On 02/24/2018 01:52 PM, Chris Boley wrote: I wanted to set up OVS to support a couple of interfaces belonging to an IPS VM. Okay. Is this going to be inline as in traffic flowing in one interface and out another interface to the rest of the network? Thus a true Intrusion /Prevention/