[ovs-discuss] Openvswitch flow(or rule) to implement CAPTIVE-PORTAL (or HTTP redirect)

Guru Shetty guru at ovn.org
Wed Dec 7 15:26:38 UTC 2016


On 6 December 2016 at 20:01, Joo Yong-Seok <joo.yongseok at gmail.com> wrote:

> Hello,
>
> Is there any good example for openvswitch flow/rules for captive-portal?
> Which means,
>
> - We should perform DNAT (with captive-portal web server IP) for outbound
> HTTP traffic
> - When responses are back, we should do proper NAT again.
>
> The issue, is, http packets' DIP from client, it's not fixed. It can be
> google, yahoo, facebook and anything. But, all of http packet should be
> redirected to specific web-server and response should be received on client
> side properly.
>

OVS flows can only look up to L4. So if you know the L4 ports (ex: 80) that
you want redirected to your captive-portal, it should be possible.


>
> Thanks in advance.
>
> Best regards,
>
> - yongseok
>
> _______________________________________________
> discuss mailing list
> discuss at openvswitch.org
> https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-discuss/attachments/20161207/fa4dd2c3/attachment.html>


More information about the discuss mailing list