Re: [ovs-discuss] Traffic Isolation with OVS

2017-08-30 Thread Joo Yong-Seok
/ \ > br-ex br-in > / \ > eth0eth1 > > Thank you, > > Gibran > > > > -- > *From:* Joo Yong-Seok <joo.yongs...@gmail.com> > *To:* N F <knight_...@ya

Re: [ovs-discuss] Traffic Isolation with OVS

2017-08-29 Thread Joo Yong-Seok
How about this? ovs-vsctl set port eth0 tag=100 vlan_mode=native-untagged ovs-vsctl set port eth1 tag=200 vlan_mode=native-untagged eth0 and eth1 is on br0. Best regards, On Tue, Aug 29, 2017 at 4:27 PM, N F via discuss < ovs-discuss@openvswitch.org> wrote: > Greetings all, > > I have a

Re: [ovs-discuss] Multiple Virtual Wireless Ports

2017-07-27 Thread Joo Yong-Seok
e wifi interfaces do you mean that you have > multiple radios? Because we only have two and are only using one. > > > -- > *From:* Joo Yong-Seok <joo.yongs...@gmail.com> > *Sent:* Thursday, July 27, 2017 1:33 PM > *To:* Michael Williams > *Cc:*

Re: [ovs-discuss] Multiple Virtual Wireless Ports

2017-07-27 Thread Joo Yong-Seok
When you say, "wifi interface", do you mean wlan interface (which is VAP) at AP? or low-level wifi interface? I don't know rate-limit since I've never tried but it works well for regular OVS rules. - Drop everything - Allow ARP - Allow DHCP - Allow DNS I applied the rule in one of ovs bridge and

Re: [ovs-discuss] Multiple Virtual Wireless Ports

2017-07-27 Thread Joo Yong-Seok
I have tried to add wireless ports to OVS bridge and created GRE tunnel or some sort of drop/allow rules on top of it. Everything works for me. I used Qualcomm's reference platform - which is arm based. Also, bridge is already "vritual port" if it has multiple wireless interfaces. Best regards,

Re: [ovs-discuss] OvS on ARM

2017-04-13 Thread Joo Yong-Seok
Yes, I tried and built it successfully. Also basic L2 functions are working ok. Used Linux kernel 3.14 + openvswitch 2.3.9 and openwrt chaos calmer. As an experiment, I also tried openvswitch 2.6.1 and basic things are working ok. No performance test data though. Best regards, On Apr 13, 2017

[ovs-discuss] How to read multicast snooping table

2017-03-06 Thread Joo Yong-Seok
Hi, Quick question in regard of multicast snoop. I am considering to use multicast snooping feature in OVS. Eventually, I want to get snoop table entries from OVS and not sure how we can get it. I tried ovs-vsctl command to enable the snooping and other options and dumped config table by using

Re: [ovs-discuss] selective packet mirror

2017-02-03 Thread Joo Yong-Seok
2017 at 1:40 PM, Ben Pfaff <b...@ovn.org> wrote: > On Thu, Feb 02, 2017 at 01:12:02PM -0800, Joo Yong-Seok wrote: > > Hi, > > > > I am wondering is it possible to do "selective" packet mirroring. From > > previous question, I learnt how to enable port mirror on OVS

[ovs-discuss] selective packet mirror

2017-02-02 Thread Joo Yong-Seok
Hi, I am wondering is it possible to do "selective" packet mirroring. From previous question, I learnt how to enable port mirror on OVS port but I think that I should do "selective" packet mirroring since performance issue. So, basically, I want to enable some sort of "filter" and want to mirror

Re: [ovs-discuss] packet copy action?

2017-01-13 Thread Joo Yong-Seok
You mean, one action is normal and the other action is output:? Thank you! Best regards, On Fri, Jan 13, 2017 at 11:04 AM, Ben Pfaff <b...@ovn.org> wrote: > On Fri, Jan 13, 2017 at 10:44:10AM -0800, Joo Yong-Seok wrote: > > Very quick question. Is there any action like

[ovs-discuss] packet copy action?

2017-01-13 Thread Joo Yong-Seok
Hello, Very quick question. Is there any action like "copying packet" or "packet monitoring" n openvswitch flow rule? I want to send an original packet to the network but maintain packet copy for the monitoring purpose - (kind of "clone" or "copy" concept in skb.) Best regards, - yongseok

Re: [ovs-discuss] Looking for good examples of conntrack / NAT in openvswitch

2017-01-04 Thread Joo Yong-Seok
> > On 4 January 2017 at 08:37, Joo Yong-Seok <joo.yongs...@gmail.com> wrote: > >> Happy New Year! >> >> I am urgently looking for the conntrack / NAT flow examples - anything >> would be good and I googled it but other than manual page - I didn't see >

Re: [ovs-discuss] D-NAT rule

2016-12-14 Thread Joo Yong-Seok
wrote: > On Wed, Dec 14, 2016 at 05:12:12PM -0800, Joo Yong-Seok wrote: > > Is it possible to configure D-NAT rule in this version of ovs-ofctl? > > > > # ovs-ofctl --version > > ovs-ofctl (Open vSwitch) 2.3.90 > > Compiled Dec 12 2016 23:20:48 > > OpenFlow ve

[ovs-discuss] Openvswitch flow(or rule) to implement CAPTIVE-PORTAL (or HTTP redirect)

2016-12-06 Thread Joo Yong-Seok
Hello, Is there any good example for openvswitch flow/rules for captive-portal? Which means, - We should perform DNAT (with captive-portal web server IP) for outbound HTTP traffic - When responses are back, we should do proper NAT again. The issue, is, http packets' DIP from client, it's not