[ovs-discuss] apply ACL to control network traffic

[Jesse Gross]

ACLs can be created by adding flow entries to the switch.  By default the
flow table of Open vSwitch contains one entry, which is to perform the
normal switch processing on all traffic (allow all).  To restrict traffic
you can create additional flow entries using the ovs-ofctl program.  A
simple example would be:

utilities/ovs-ofctl add-flow br0 idle_timeout=0,icmp,action=

This will drop all ICMP traffic flowing across switch br0.  The ovs-ofctl
man page describes the syntax of this command (and more).

Jesse

On Tue, Feb 2, 2010 at 6:14 AM, <devang.vyas at aol.in> wrote:

> Hi,
>
> I am new user to open vswitch. I am using open vswitch on XenServer. I want
> to know how to create ACL to control network traffic and how can I have ACL
> specific to particular VM? In short I want to know about ACL configuration
> in open vswitch. Can anyone suggest me source of details regarding this?
>
> Thanks,
> Devang
>
>
> _______________________________________________
> discuss mailing list
> discuss at openvswitch.org
> http://openvswitch.org/mailman/listinfo/discuss_openvswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/ovs-discuss/attachments/20100202/91d2268b/attachment-0002.html>