Re: [Ryu-devel] Value of Rule/Flow of REST_FIREWALL

2017-03-01 Thread Juan Francisco Guano
Ok, I try... summarizing I wanna know what Is the correct way to set a rule in a whole network: the IP address of network AND with only netmask 32 for example 10.0.1.0/32 or the IP address of network with another mask for example 10.0.1.0/25? In this case apply the same concept of wildcarding off

[Ryu-devel] 4.12 released

2017-03-01 Thread FUJITA Tomonori
Hi, Here's a new release; some fixes, improvement, new features, etc. Enjoy! = Albert Siersema (1): allow_local_as_in_count : allow local ASN in AS patch, e.g. "rd auto/route-target both auto" FUJITA Tomonori (1): Ryu 4.12 IWASE Yusuke (22): BGPSpeaker: Support to advertise T

Re: [Ryu-devel] Value of Rule/Flow of REST_FIREWALL

2017-03-01 Thread Iwase Yusuke
Hi Juan, Well... rest_firewall is just a sample application for the Ryu-Book, it is supposed to be calculated manually by users, I guess... For just applying IP network mask, you can use "netaddr" though. >>> import netaddr >>> str(netaddr.IPNetwork("192.168.0.1/24").network) '192.168.0.0' Tha

Re: [Ryu-devel] Value of Rule/Flow of REST_FIREWALL

2017-03-01 Thread Juan Francisco Guano
Hi Iwase, thank you so much... Another question Do you know any resource of a wildcard calculator that could works With the rest firewall?, for example for define a range of IP address in a network to accept o deny traffic? Regards Juab El 2 mar. 2017 12:35 AM, "Iwase Yusuke" escribió: > Hi Ju

Re: [Ryu-devel] [PATCH] hub.StreamServer: Ommit validation for IPv4 address

2017-03-01 Thread FUJITA Tomonori
On Mon, 27 Feb 2017 15:18:40 +0900 IWASE Yusuke wrote: > To support the case that user specifies the host address like > 'localhost', this patch removes the validation of the given address > as IPv4 address family and fixes to try listening as IPv4 by default. > Then, the validation will be handl

Re: [Ryu-devel] gui_topology and simple_switch

2017-03-01 Thread Iwase Yusuke
Hi Julian, Thank you for reporting it! I agree that gui_topology.py displays nothing in some cases... But, on my environment, I could view my topology with gui_topology.py + simple_switch_13.py as the attached screenshot. e.g.) $ ryu-manager --observe-links ryu/app/gui_topology/gui_topology.py

Re: [Ryu-devel] Value of Rule/Flow of REST_FIREWALL

2017-03-01 Thread Iwase Yusuke
Hi Juan, Sorry, I misunderstood. I guess, it comes from the constraint of OpenFlow Matching rule. If you specify nw_dst="10.0.0.1/24", this means: "The high-order 24 bits are used for IP address matching and other is wildcarded" and does NOT mean: "Matching to the destination 10.0.0.1 addres

Re: [Ryu-devel] Value of Rule/Flow of REST_FIREWALL

2017-03-01 Thread Juan Francisco Guano
Hi Iwase, thank you so much by your reply... I know that 255.000.000.00 Is same "8" for format. Now if you check my original question , you can appreciate that I así for an specific IP address "10.0.0.2/8 " why Is the same in flow that "10.0.0.3/8" rule in a switch(I check this with dump-flows c

Re: [Ryu-devel] Value of Rule/Flow of REST_FIREWALL

2017-03-01 Thread Iwase Yusuke
Hi Juan, First, "255.0.0.0" in "10.0.0.0/255.0.0.0" means the subnet mask and has the same meaning with "8". "8" is just formatted in the prefix representation. And, when your get without the mask, like "10.0.0.0", the subnet mask "255.255.255.0"(="32" in the prefix representation) is just omit