[ovs-discuss] How to match on the physical and logical ingress ports
Dr. Helen Chen
ingwherchen at mitre.org
Wed Jul 7 15:38:39 UTC 2021
In the OVS documentation quoted below, it states that "physical ingress ports (which need not be part of any switch)...".
Is it correct to assume that the physical ingress port (of the gre tunnel) can optionally be part of the switch that also has the gre tunnel? If so, is there documented example configuration? (So far, I've only seen OVS configuration where switch consists of only gre tunnel but not the physical ingress port of the tunnel.)
From: Ben Pfaff <blp at ovn.org>
Sent: Friday, July 2, 2021 1:46 PM
To: Dr. Shukri George Abdallah <sabdallah at mitre.org>
Cc: ovs-discuss at openvswitch.org
Subject: Re: [EXT] Re: [ovs-discuss] How to match on the physical and logical ingress ports
The documentation says this:
A packet’s ingress port and physical ingress port are identical except
for packets processed by a switch feature such as bonding or tunneling
that makes a packet appear to arrive on a ``virtual’’ port associated
with the bond or the tunnel. For such packets, the ingress port is the
virtual port and the physical ingress port is, naturally, the physical
port. Open vSwitch implements both bonding and tunneling, but its bonding
implementation does not use virtual ports and its tunnels are typically
not on the same OpenFlow switch as their physical ingress ports (which
need not be part of any switch), so the ingress port and physical ingress
port are always the same in Open vSwitch.
For bonding, OVS in_port always matches on the physical input port.
For tunneling, OVS doesn't pass along the physical input port but only the virtual one. You might be able to set the packet mark in the physical bridge and then match on it in the virtual one, though.
On Thu, Jul 01, 2021 at 06:04:29PM +0000, Dr. Shukri George Abdallah wrote:
> Please see https://opennetworking.org/wp-content/uploads/2014/10/openflow-switch-v1.3.5.pdf Section 22.214.171.124 .This link uses the term "logical"
> Please see https://www.man7.org/linux/man-pages/man7/ovs-fields.7.html. This link uses the term "virtual".
> The context is GRE tunneling
> -----Original Message-----
> From: Ben Pfaff <blp at ovn.org>
> Sent: Thursday, July 1, 2021 1:37 PM
> To: Dr. Shukri George Abdallah <sabdallah at mitre.org>
> Cc: ovs-discuss at openvswitch.org
> Subject: [EXT] Re: [ovs-discuss] How to match on the physical and
> logical ingress ports
> On Thu, Jul 01, 2021 at 02:51:13PM +0000, Dr. Shukri George Abdallah wrote:
> > When the physical ingress port is different than the logical ingress
> > port, using the ovs-ofctl utility, how can one match on the physical
> > and logical ingress ports?
> How are you defining "physical" and "logical" ingress ports here? Out of context, it's not clear.
More information about the discuss