Any suggestion ?<br><br>On Monday, 24 October 2016, Alioune <<a href="mailto:balioune3@gmail.com">balioune3@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>Hi all,<br><br></div>I'm trying to implement service chain in OpenStack using networking-sfc (stable/mitaka) and OVS 2.5.90<br><br><br></div><div>The following is the architecture I used : <br><br>SRC                                             DST<br>  |                                                    |<br>  ========== br-int ============<br>                         |                             <wbr>      <br>                       SF1<br>SF1: 55.55.55.3<br>SRC: 55.55.55.4<br>DST: 55.55.55.5<br><br>I can create port-pairs, port-pair-group, classifier and chain with these commands:<br><br>neutron flow-classifier-create  --ethertype IPv4  --source-ip-prefix <a href="http://55.55.55.4/32" target="_blank">55.55.55.4/32</a>  --logical-source-port 0009034f-4c39-4cbf-be7d-<wbr>fcf82dad024c  --protocol icmp  FC1<br>neutron port-pair-create --ingress=p1 --egress=p1 PP1<br>neutron port-pair-group-create --port-pair PP1 PG1<br>neutron port-chain-create --port-pair-group PG1 --flow-classifier FC1 PC1<br><br></div><div>I could ping from SRC to DST before setting the chain, but after the chain creating ping doesn't work.<br><br></div><div>ICMP echo request packets arrive to SF1 port but it doesn't send back the packets in order to allow them to get their destination DST (see output below).<br><br></div><div>The Opendaylight/SFC project uses NSH aware service function (SF) that send back packets to the chains after analyzing them, I would like to know :<br><br></div><div>- How networking-sfc configures SF to send back packets to the chain as seem in some of your presentation ?<br></div><div>- What's wrong in my configurations (see commands and ovs-ofctl output below) ? I've followed the main steps described in your wiki page.<br><br></div><div>Best Regards,<br></div><div><br><br>vagrant@vagrant-ubuntu-trusty-<wbr>64:~$ neutron port-list<br>+-----------------------------<wbr>---------+------+-------------<wbr>------+-----------------------<wbr>------------------------------<wbr>------------------------------<wbr>---+<br>| id                            <wbr>       | name | mac_address       | fixed_ips                     <wbr>                              <wbr>                         |<br>+-----------------------------<wbr>---------+------+-------------<wbr>------+-----------------------<wbr>------------------------------<wbr>------------------------------<wbr>---+<br>| 0009034f-4c39-4cbf-be7d-<wbr>fcf82dad024c |      | fa:16:3e:dd:16:f7 | {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-<wbr>d760a16667bc", "ip_address": "55.55.55.4"}    |<br>| 082e896d-5982-458c-96e7-<wbr>0dd372d3d7d9 | p1   | fa:16:3e:90:b4:67 | {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-<wbr>d760a16667bc", "ip_address": "55.55.55.3"}    |<br>| 2ad109e4-42a8-4554-b884-<wbr>a32344e91036 |      | fa:16:3e:74:9a:fa | {"subnet_id": "3cf6eb27-7258-4252-8f3d-<wbr>b6f9d27c948b", "ip_address": "192.168.105.2"} |<br>| 51f055c0-ff4d-47f4-9328-<wbr>9a0d7ca204f3 |      | fa:16:3e:da:f9:93 | {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-<wbr>d760a16667bc", "ip_address": "55.55.55.1"}    |<br>| 656ad901-2bc0-407a-a581-<wbr>da955ecf3b59 |      | fa:16:3e:7f:44:01 | {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-<wbr>d760a16667bc", "ip_address": "55.55.55.2"}    |<br>| b1d14a4f-cde6-4c44-b42e-<wbr>0f0466dba32a |      | fa:16:3e:a6:c6:35 | {"subnet_id": "8bf8a2e1-ecad-4b4b-beb1-<wbr>d760a16667bc", "ip_address": "55.55.55.5"}    |<br>+-----------------------------<wbr>---------+------+-------------<wbr>------+-----------------------<wbr>------------------------------<wbr>------------------------------<wbr>---+<br><br>vagrant@vagrant-ubuntu-trusty-<wbr>64:~$ ifconfig |grep 082e896d<br>qbr082e896d-59 Link encap:Ethernet  HWaddr b6:96:27:fa:ab:af  <br>qvb082e896d-59 Link encap:Ethernet  HWaddr b6:96:27:fa:ab:af  <br>qvo082e896d-59 Link encap:Ethernet  HWaddr 7e:1a:7b:7d:09:df  <br>tap082e896d-59 Link encap:Ethernet  HWaddr fe:16:3e:90:b4:67  <br><br>vagrant@vagrant-ubuntu-trusty-<wbr>64:~$ sudo tcpdump -i tap082e896d-59 icmp<br>tcpdump: WARNING: tap082e896d-59: no IPv4 address assigned<br>tcpdump: verbose output suppressed, use -v or -vv for full protocol decode<br>listening on tap082e896d-59, link-type EN10MB (Ethernet), capture size 65535 bytes<br>10:51:10.229674 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 61, length 64<br>10:51:11.230318 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 62, length 64<br>10:51:12.233451 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 63, length 64<br>10:51:13.234496 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 64, length 64<br>10:51:14.235583 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 65, length 64<br>10:51:15.236585 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 66, length 64<br>10:51:16.237568 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 67, length 64<br>10:51:17.238974 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 68, length 64<br>10:51:18.244244 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 69, length 64<br>10:51:19.245758 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 70, length 64<br>10:51:20.246521 IP 55.55.55.4 > <a href="http://55.55.55.5" target="_blank">55.55.55.5</a>: ICMP echo request, id 15617, seq 71, length 64<br><br><br><br>vagrant@vagrant-ubuntu-trusty-<wbr>64:~/openstack_networking/<wbr>simple-sf$ sudo ovs-ofctl dump-flows br-int -O OpenFlow13 <br><br>2016-10-24T11:28:43Z|00001|<wbr>ofp_actions|INFO|OFPAT_SET_<wbr>MPLS_TTL is deprecated in OpenFlow13 (use Set-Field)<br>OFPST_FLOW reply (OF1.3) (xid=0x2):<br> cookie=0xbbf3cb977f3738c7, duration=2418.957s, table=0, n_packets=2297, n_bytes=225106, priority=30,icmp,in_port=5,nw_<wbr>src=55.55.55.4 actions=group:1<br> cookie=0xbbf3cb977f3738c7, duration=2418.955s, table=0, n_packets=0, n_bytes=0, priority=30,icmp,in_port=4,nw_<wbr>src=55.55.55.4 actions=NORMAL<br> cookie=0xbbf3cb977f3738c7, duration=8868.309s, table=0, n_packets=0, n_bytes=0, priority=20,mpls actions=resubmit(,10)<br> cookie=0xbbf3cb977f3738c7, duration=2882.723s, table=0, n_packets=0, n_bytes=0, priority=10,icmp6,in_port=5,<wbr>icmp_type=136 actions=resubmit(,24)<br> cookie=0xbbf3cb977f3738c7, duration=2866.752s, table=0, n_packets=0, n_bytes=0, priority=10,icmp6,in_port=6,<wbr>icmp_type=136 actions=resubmit(,24)<br> cookie=0xbbf3cb977f3738c7, duration=2650.698s, table=0, n_packets=0, n_bytes=0, priority=10,icmp6,in_port=4,<wbr>icmp_type=136 actions=resubmit(,24)<br> cookie=0xbbf3cb977f3738c7, duration=2882.708s, table=0, n_packets=71, n_bytes=2982, priority=10,arp,in_port=5 actions=resubmit(,24)<br> cookie=0xbbf3cb977f3738c7, duration=2866.738s, table=0, n_packets=70, n_bytes=2940, priority=10,arp,in_port=6 actions=resubmit(,24)<br> cookie=0xbbf3cb977f3738c7, duration=2650.684s, table=0, n_packets=4, n_bytes=168, priority=10,arp,in_port=4 actions=resubmit(,24)<br> cookie=0xbbf3cb977f3738c7, duration=2882.737s, table=0, n_packets=70, n_bytes=8378, priority=9,in_port=5 actions=resubmit(,25)<br> cookie=0xbbf3cb977f3738c7, duration=2866.767s, table=0, n_packets=22, n_bytes=2332, priority=9,in_port=6 actions=resubmit(,25)<br> cookie=0xbbf3cb977f3738c7, duration=2650.715s, table=0, n_packets=15, n_bytes=1724, priority=9,in_port=4 actions=resubmit(,25)<br> cookie=0xbbf3cb977f3738c7, duration=8868.755s, table=0, n_packets=163, n_bytes=18908, priority=0 actions=NORMAL<br> cookie=0xbbf3cb977f3738c7, duration=2419.054s, table=5, n_packets=2297, n_bytes=225106, priority=0,ip,dl_dst=fa:16:3e:<wbr>90:b4:67 actions=push_mpls:0x8847,set_<wbr>field:511->mpls_label,set_<wbr>mpls_ttl(255),push_vlan:<wbr>0x8100,set_field:4097->vlan_<wbr>vid,resubmit(,10)<br> cookie=0xbbf3cb977f3738c7, duration=2418.916s, table=10, n_packets=2297, n_bytes=225106, priority=1,mpls,dl_vlan=1,dl_<wbr>dst=fa:16:3e:90:b4:67,mpls_<wbr>label=511 actions=pop_vlan,pop_mpls:<wbr>0x0800,output:4<br> cookie=0xbbf3cb977f3738c7, duration=8868.303s, table=10, n_packets=0, n_bytes=0, priority=0 actions=drop<br> cookie=0xbbf3cb977f3738c7, duration=8868.749s, table=23, n_packets=0, n_bytes=0, priority=0 actions=drop<br> cookie=0xbbf3cb977f3738c7, duration=2882.730s, table=24, n_packets=0, n_bytes=0, priority=2,icmp6,in_port=5,<wbr>icmp_type=136,nd_target=fe80::<wbr>f816:3eff:fedd:16f7 actions=NORMAL<br> cookie=0xbbf3cb977f3738c7, duration=2866.760s, table=24, n_packets=0, n_bytes=0, priority=2,icmp6,in_port=6,<wbr>icmp_type=136,nd_target=fe80::<wbr>f816:3eff:fea6:c635 actions=NORMAL<br> cookie=0xbbf3cb977f3738c7, duration=2650.708s, table=24, n_packets=0, n_bytes=0, priority=2,icmp6,in_port=4,<wbr>icmp_type=136,nd_target=fe80::<wbr>f816:3eff:fe90:b467 actions=NORMAL<br> cookie=0xbbf3cb977f3738c7, duration=2882.715s, table=24, n_packets=68, n_bytes=2856, priority=2,arp,in_port=5,arp_<wbr>spa=55.55.55.4 actions=resubmit(,25)<br> cookie=0xbbf3cb977f3738c7, duration=2866.743s, table=24, n_packets=67, n_bytes=2814, priority=2,arp,in_port=6,arp_<wbr>spa=55.55.55.5 actions=resubmit(,25)<br> cookie=0xbbf3cb977f3738c7, duration=2650.690s, table=24, n_packets=1, n_bytes=42, priority=2,arp,in_port=4,arp_<wbr>spa=55.55.55.3 actions=resubmit(,25)<br> cookie=0xbbf3cb977f3738c7, duration=8868.743s, table=24, n_packets=0, n_bytes=0, priority=0 actions=drop<br> cookie=0xbbf3cb977f3738c7, duration=2882.753s, table=25, n_packets=138, n_bytes=11130, priority=2,in_port=5,dl_src=<wbr>fa:16:3e:dd:16:f7 actions=NORMAL<br> cookie=0xbbf3cb977f3738c7, duration=2866.783s, table=25, n_packets=87, n_bytes=4882, priority=2,in_port=6,dl_src=<wbr>fa:16:3e:a6:c6:35 actions=NORMAL<br> cookie=0xbbf3cb977f3738c7, duration=2650.730s, table=25, n_packets=14, n_bytes=1502, priority=2,in_port=4,dl_src=<wbr>fa:16:3e:90:b4:67 actions=NORMAL<br></div></div>
</blockquote><br><br>-- <br>Sent from Gmail Mobile<br>