Re: [ovs-discuss] Apply some packet manipulation actions on outgoing port traffic

2017-10-09 Thread Ben Pfaff
OVS doesn't handle this case well. I don't think it will do what you want. On Mon, Oct 09, 2017 at 11:59:13PM +0200, Juraj Markotic wrote: > yes, we are already using that one to send packet across 2 OVS connected > via GRE tunnels and when switched out, will remove GRE header. > Imagine situatio

Re: [ovs-discuss] Apply some packet manipulation actions on outgoing port traffic

2017-10-09 Thread Juraj Markotic
yes, we are already using that one to send packet across 2 OVS connected via GRE tunnels and when switched out, will remove GRE header. Imagine situation where SPAN traffic from some other switch is being sent as replica traffic to OVS inport (one can be configured as GRE port for that matter). Pac

Re: [ovs-discuss] Apply some packet manipulation actions on outgoing port traffic

2017-10-09 Thread Ben Pfaff
GRE and tunnels are implemented in terms of ports, so if you send a packet received on a GRE port to a non-tunnel port, it strips the header. On Mon, Oct 09, 2017 at 10:45:10PM +0200, Juraj Markotic wrote: > I will check on about GTP ongoing activities (I saw some actitvities on > providing capabi

Re: [ovs-discuss] Apply some packet manipulation actions on outgoing port traffic

2017-10-09 Thread Juraj Markotic
I will check on about GTP ongoing activities (I saw some actitvities on providing capabilities to match on GTP-C/GTP-U packets). maybe dumb question, but any pointer on how to remove GRE header (or VXLAN for that matter) when switching packet from IN port to OUT port and switch out only internal pa

Re: [ovs-discuss] Apply some packet manipulation actions on outgoing port traffic

2017-10-09 Thread Ben Pfaff
OVS doesn't support GTP yet, but I know that there's some ongoing work on it. GRE and VXLAN should be fine. If you need GTP support, maybe the best thing to do would be to help out the folks who are working on it. On Mon, Oct 09, 2017 at 09:35:42PM +0200, Juraj Markotic wrote: > Hello, > thanks

Re: [ovs-discuss] Apply some packet manipulation actions on outgoing port traffic

2017-10-09 Thread Juraj Markotic
Hello, thanks for feedback. I know OVS can truncate payload and that in can modify mac/IPs in header (i.e. like doing NAT). I also know OVS can deencapsulate GRE (of VXLAN) when packet is arriving on tunnel OVS interface (done automatically). But I was not aware that OVS can remove tunnel headers w

Re: [ovs-discuss] Apply some packet manipulation actions on outgoing port traffic

2017-10-09 Thread Ben Pfaff
On Sun, Oct 08, 2017 at 11:19:17PM +0200, Juraj Markotic wrote: > we would need some functionality on manipulating packets when packet is > exiting outgoing OVS port. > I.e. some actions could be: change/anonymize mac/IPs for src/dst, or remove > some tunnel header (vxlan, gtp, gre), truncate the p

[ovs-discuss] Apply some packet manipulation actions on outgoing port traffic

2017-10-08 Thread Juraj Markotic
Hello, we would need some functionality on manipulating packets when packet is exiting outgoing OVS port. I.e. some actions could be: change/anonymize mac/IPs for src/dst, or remove some tunnel header (vxlan, gtp, gre), truncate the payload etc. So, one option can be to write some code than can be