[Openstack] [Neutron] Flaw in flow rules

Damon Wang damon.devops at gmail.com
Thu Mar 27 13:36:43 UTC 2014


Hi,

I just know that ovs-dpctl config datapaths and ovs-ofctl are openvswicth's
OpenFlow implement.
"ovs-dpctl show" maybe compatible with "ovs-dpctl dump-flows"?

Regards,
Damon


2014-03-27 21:02 GMT+08:00 Ageeleshwar Kandavelu <
Ageeleshwar.Kandavelu at csscorp.com>:

>  Sure that helps. Any Idea whats the difference between this one and the
> one in dpctl show.
>
> Thank you,
> Ageeleshwar K
>  ------------------------------
> *From:* Damon Wang [damon.devops at gmail.com]
> *Sent:* Thursday, March 27, 2014 4:55 PM
> *To:* Ageeleshwar Kandavelu
> *Cc:* openstack at lists.openstack.org
> *Subject:* Re: [Openstack] [Neutron] Flaw in flow rules
>
>    Hi,
>
>  Use "ovs-ofctl show br-int" instead of "ovs-dpctl show" :-)
>
>  Hope it helps
>
>  Damon
>
>
> 2014-03-27 17:19 GMT+08:00 Ageeleshwar Kandavelu <
> Ageeleshwar.Kandavelu at csscorp.com>:
>
>>  Hi,
>> I am using vlan mode networking. There appears to be a flaw in my flow
>> rules.
>>
>> To the best of my knowledge the in_port in the below output should have
>> been 3(according to ovs-dpctl show). But it is 33. To my surprise however,
>> my setup is working. Can any one explain to me how this can happen.
>>
>> root at mars:~# ovs-ofctl dump-flows br-int
>> NXST_FLOW reply (xid=0x4):
>>  cookie=0x0, duration=522.826s, table=0, n_packets=263, n_bytes=39666,
>> idle_age=429, priority=3*,in_port=33*,dl_vlan=100
>> actions=mod_vlan_vid:2,NORMAL
>>  cookie=0x0, duration=2567.744s, table=0, n_packets=920, n_bytes=197692,
>> idle_age=0, priority=2*,in_port=33 *actions=drop
>>  cookie=0x0, duration=2568.669s, table=0, n_packets=384, n_bytes=37365,
>> idle_age=429, priority=1 actions=NORMAL
>> root at mars:~# ovs-ofctl dump-flows br-eth1
>> NXST_FLOW reply (xid=0x4):
>>  cookie=0x0, duration=525.124s, table=0, n_packets=384, n_bytes=37693,
>> idle_age=431, priority=4,in_port=5,dl_vlan=2 actions=mod_vlan_vid:100,NORMAL
>>  cookie=0x0, duration=2569.882s, table=0, n_packets=6, n_bytes=468,
>> idle_age=2559, priority=2,in_port=5 actions=drop
>>  cookie=0x0, duration=2570.721s, table=0, n_packets=12748,
>> n_bytes=978934, idle_age=1, priority=1 actions=NORMAL
>> root at mars:~# ovs-dpctl show
>> system at ovs-system:
>>     lookups: hit:39891511 missed:7260493 lost:0
>>     flows: 11
>>     port 0: ovs-system (internal)
>>     port 1: br-int (internal)
>>     port 2: br-eth1 (internal)
>>     port 3: int-br-eth1
>>     port 4: phy-br-eth1
>>     port 5: eth1
>>     port 6: tap4385c710-be
>> root at mars:~#
>>
>>
>>  http://www.csscorp.com/common/email-disclaimer.php
>>
>> _______________________________________________
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>   http://www.csscorp.com/common/email-disclaimer.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140327/8c5081ab/attachment.html>


More information about the Openstack mailing list