Re: [Ryu-devel] openstack isolation

2013-09-11 Thread Vasiliy Tolstov
2013/9/11 Yoshihiro Kaneko : > Ryu does not use L3 info to transmit a packet. Ryu makes a flow table > by a port number and MAC address (and tunnel id). > Ryu transmit a packet to only the port of the same tenant, because Ryu > knows the tenant (exactly a network of quantum/neutron) which an > inte

Re: [Ryu-devel] openstack isolation

2013-09-11 Thread Yoshihiro Kaneko
2013/9/10 Vasiliy Tolstov : > 2013/9/3 FUJITA Tomonori : >> Hopefully, the following would be useful for you: >> >> https://github.com/osrg/ryu/wiki/Details-of-Ryu-in-cooperation-with-OpenStack-Grizzly > > > Thanks! Sorry for delay. But i'm not fully understand what flows > created n case of gre tu

Re: [Ryu-devel] openstack isolation

2013-09-10 Thread Vasiliy Tolstov
2013/9/3 FUJITA Tomonori : > Hopefully, the following would be useful for you: > > https://github.com/osrg/ryu/wiki/Details-of-Ryu-in-cooperation-with-OpenStack-Grizzly Thanks! Sorry for delay. But i'm not fully understand what flows created n case of gre tunnels. For example vm1 have eth0 and et

Re: [Ryu-devel] openstack isolation

2013-09-03 Thread FUJITA Tomonori
On Thu, 29 Aug 2013 15:30:32 +0400 Vasiliy Tolstov wrote: > Hello. I'm try to build simple toy controller in golang for openflow > vSwitch and have question - how ryu provide user isolation in case of > identical internal network on two or more tenants? > > For example > tenant1: 192.168.1.0/24

[Ryu-devel] openstack isolation

2013-08-29 Thread Vasiliy Tolstov
Hello. I'm try to build simple toy controller in golang for openflow vSwitch and have question - how ryu provide user isolation in case of identical internal network on two or more tenants? For example tenant1: 192.168.1.0/24 tenant2: 192.168.1.0/24 How ryu controls that tenant2 not able to conne