[ovs-discuss] Add wildcard openflow rules
cassidy.zy at gmail.com
Thu Nov 18 08:00:42 UTC 2010
It's great to hear that, thanks very much.
cassidy.zy at gmail.com
发件人："Justin Pettit "
抄送：discuss at openvswitch.org
主题： Re: [ovs-discuss] Add wildcard openflow rules
Currently, we support GRE and CAPWAP L3 encapsulation. Take a look at the ovs-vswitch.conf.db man page to see a description of the options available through the Interface table to create a virtual port that provides that functionality. The archive for this mailing list has some discussion related to configuring it, which may be helpful.
On Nov 17, 2010, at 11:40 PM, Yue ZHANG wrote:
> Thanks, It's very helpful.
> I've another question, could I encapsulate the packet and then output it using ovs?
> I'd like to add additional mac and ip header to the incoming packet. However, I only find modify actions for packet header in the document.
> Yue ZHANG
> cassidy.zy at gmail.com
> 发件人："Justin Pettit "
> 发送日期：2010-11-18 15:13
> 收件人：Yue ZHANG
> 抄送：discuss at openvswitch.org
> 主题： Re: [ovs-discuss] Add wildcard openflow rules
> Try looking at the "resubmit" action in ovs-ofctl. You could use the first lookup to match and modify the source address and the second to match and modify the destination, for example.
> On Nov 17, 2010, at 11:02 PM, Yue ZHANG wrote:
> > Dear staff,
> > In my research, I want to do something like NAT, that modify both IP packets' src and dst address each to each.
> > For example:
> > ovs-ofctl add-flow br1 nw_src=192.168.1.2,nw_dst=192.168.2.2,idle_timeout=0,icmp,action=mod_nw_src:172.16.206.2,mod_nw_dst:172.16.121.2,output:0
> > ovs-ofctl add-flow br1 nw_src=192.168.1.2,nw_dst=192.168.2.3,idle_timeout=0,icmp,action=mod_nw_src:172.16.206.2,mod_nw_dst:172.16.121.3,output:0
> > These two rules could modify src from 192.168.1.x to 172.16.206.x, and dst from 192.168.2.y to 172.16.121.y, respectively.
> > The question is:
> > If I have 254 possible values for both x and y, then I need 254x254 openflow rules for each IP pair.
> > Could I modify all the nw_src first, then modify nw_dst and output the packet, means only need 254+254 rules.
> > Is there any simple way to do this? Thanks very much.
> > Regards.
> > Yue ZHANG
> > cassidy.zy at gmail.com
> > 2010-11-18
> > _______________________________________________
> > discuss mailing list
> > discuss at openvswitch.org
> > http://openvswitch.org/mailman/listinfo/discuss_openvswitch.org
> discuss mailing list
> discuss at openvswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the discuss