[openstack-dev] [OpenStack][Neutron][Monasca] Traffic counters at Layer 3

Rubab Syed rubab.syed21 at gmail.com
Mon Apr 25 18:20:02 UTC 2016

Hi folks,

I'm writing a plugin for Monasca to monitor traffic at layer 3. My Neutron
backend is OVS and I'm using iptables of network namespaces for getting
traffic counters. Would the following rules in router namespace cover all
the traffic at layer 3 per router per tenant?

- Chain MONASCA-INPUT in filter table
   - src: anywhere     dest: gateway port IP   // north-south traffic for
SNATed and FIPs

- Chain MONASCA-FORWARD in filter table
  - src: anywhere       dest: anywhere          // east-west traffic
inter-network and intra-network

- Chain MONASCA-OUTPUT in filter table
  - src: gateway port     dest: anywhere      // north-south traffic from
VMs to public network

Would these be sufficient or am I missing something?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160425/85a03674/attachment.html>

More information about the OpenStack-dev mailing list