[Consultation] SFC proxy

Jhen-Hao Yu tcr1br24 at gmail.com
Sat Mar 13 04:10:14 UTC 2021


Dear Sir,

(We made some edits from our previous mail.)

We are testing a simple SFC in OpenStack (Stein) + OpenDaylight (Neon) +
Open vSwitch (v2.11.1). It's an all-in-one deployment (OPNFV-9.0.0).

We have read the document:

https://readthedocs.org/projects/odl-sfc/downloads/pdf/latest/

and

https://github.com/opnfv/sfc/blob/master/docs/release/scenarios/os-odl-sfc-noha/scenario.description.rst

The driver we use is odl_v2:

[image: image.png]

[image: image.png]

Our SFC topology:

[image: enter image description here] <https://i.stack.imgur.com/7QMWh.png>

All on the same compute node.

Build SFC through API:

   1.

   openstack sfc flow classifier create --source-ip-prefix
10.20.0.0/24 --logical-source-port
   p0 FC1
   2.

   openstack sfc port pair create --description "Firewall SF instance 1"
   --ingress p1 --egress p1 --service-function-parameters correlation=None PP1
   3.

   openstack sfc port pair group create --port-pair PP1 PPG1
   4.

   openstack sfc port chain create --port-pair-group PPG1 --flow-classifier
   FC1 --chain-parameters correlation=nsh PC1

we expect that the encapsulation/decapsulation will be performed by the
back-end driver, so that the data packet passes through the nsh-unaware VNF
like a regular data packet.
However, we can see that the NSH packet reaches the VNF interface
(screenshot attached).
[image: 123.jpg]
Flow table:

[image: 螢幕擷取畫面 2021-02-06 153311.png]

It seems NSH header not decapsulate before entering NSH-unaware VNF.

Could you give us some advice?

We really appreciate it.
Regards,
Zack


[image: Mailtrack]
<https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality5&>
Sender
notified by
Mailtrack
<https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality5&>
03/13/21,
12:07:12 PM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210313/4d16d38c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 3606 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210313/4d16d38c/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 29563 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210313/4d16d38c/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 螢幕擷取畫面 2021-02-06 153311.png
Type: image/png
Size: 181834 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210313/4d16d38c/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 123.jpg
Type: image/jpeg
Size: 566882 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210313/4d16d38c/attachment-0001.jpg>


More information about the openstack-discuss mailing list