<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1484234814404_23676">With OVS driver, how can you even get a VM up and running in Openstack<br></div><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1484234814404_23689" style="display: block;"><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1484234814404_23688"><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1484234814404_23687"><div class="y_msg_container" id="yui_3_16_0_ym19_1_1484234814404_23716"><div id="yiv2019520172"><div id="yui_3_16_0_ym19_1_1484234814404_23715"><div style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;" id="yui_3_16_0_ym19_1_1484234814404_23714"><div class="yiv2019520172qtdSeparateBR" id="yui_3_16_0_ym19_1_1484234814404_23717">without the risk of melting the entire network down ?<br></div><div class="yiv2019520172yahoo_quoted" id="yiv2019520172yui_3_16_0_ym19_1_1484234814404_9885" style="display:block;"><div id="yiv2019520172yui_3_16_0_ym19_1_1484234814404_9884" style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"><div id="yiv2019520172yui_3_16_0_ym19_1_1484234814404_9883" style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"><div class="yiv2019520172y_msg_container" id="yiv2019520172yui_3_16_0_ym19_1_1484234814404_9882"><div id="yiv2019520172"><div id="yiv2019520172yui_3_16_0_ym19_1_1484234814404_9881"><div id="yiv2019520172yui_3_16_0_ym19_1_1484234814404_9880" style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791"><br clear="none"></div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791">Both the interfaces of the BITW VM are sitting on br-int.</div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791">The risk of BUM packets looping between the two interfaces is very </div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791">high.   Even if the BITW VM does not forward broadcast and multicast packets</div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791">across the two interfaces, chances are it would forward "Unknown unicasts"</div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791">resulting in looping of these packets between the two interfaces.</div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791"><br clear="none"></div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791"><br clear="none"></div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791">Consider a BITW BM with OF ports 1 and 2.  When "br-int"  floods<div class="yiv2019520172yqt9162408367" id="yiv2019520172yqtfd31495">an "Unknown unicast packet" to ports 1 and 2, you essentially have a loop situation.<br></div></div><div class="yiv2019520172yqt9162408367" id="yiv2019520172yqtfd33560"><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791"><br clear="none"></div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791"><br clear="none"></div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791">With OVN driver, this is no longer an issue since OVN knows where each and every unicast MAC address needs to be forwarded.  FLooding of "unknown unicasts" is not an issue with OVN.</div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791"><br clear="none"></div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791"><br clear="none"></div><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791">Farhad.</div><div class="yiv2019520172yqt0498822751" id="yiv2019520172yqtfd44263"><div dir="ltr" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16791"><span><br clear="none"></span></div> <div class="yiv2019520172qtdSeparateBR" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16829"><br clear="none"></div><div class="yiv2019520172yahoo_quoted" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16824" style="display:block;"><div id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16823" style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"><div id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16822" style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"><div class="yiv2019520172y_msg_container" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_16821"><br clear="none">----------------------------------------------------------------------<br clear="none"><br clear="none">Message: 1<br clear="none">Date: Tue, 10 Jan 2017 20:43:50 +0530<br clear="none">From: Vikash Kumar <<a rel="nofollow" shape="rect" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_18631" ymailto="mailto:vikash.kumar@oneconvergence.com" target="_blank" href="mailto:vikash.kumar@oneconvergence.com">vikash.kumar@oneconvergence.com</a>><br clear="none">To: Vikram Choudhary <<a rel="nofollow" shape="rect" ymailto="mailto:vikschw@gmail.com" target="_blank" href="mailto:vikschw@gmail.com">vikschw@gmail.com</a>><br clear="none">Cc: Openstack Milis <<a rel="nofollow" shape="rect" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_18727" ymailto="mailto:openstack@lists.openstack.org" target="_blank" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br clear="none">Subject: Re: [Openstack] [networking-sfc] SFC in BITW or L2 mode<br clear="none">Message-ID:<br clear="none">    <CAPHM3WbcG7kp+KYTDFT8SKeoY6s7N1G7dGr8hTVT2CDOG=<a rel="nofollow" shape="rect" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_19285" ymailto="mailto:JzrA@mail.gmail.com" target="_blank" href="mailto:JzrA@mail.gmail.com">JzrA@mail.gmail.com</a>><br clear="none">Content-Type: text/plain; charset="utf-8"<br clear="none"><br clear="none">If thats the case then does it only support L3 mode as of now? My<br clear="none">experiment suggest same. With this limitation, it won't be possible to any<br clear="none">L2/BITW network functions.<br clear="none"><br clear="none">On Tue, Jan 10, 2017 at 12:59 PM, Vikram Choudhary <<a rel="nofollow" shape="rect" ymailto="mailto:vikschw@gmail.com" target="_blank" href="mailto:vikschw@gmail.com">vikschw@gmail.com</a>><br clear="none">wrote:<br clear="none"><br clear="none">> networking-sfc doesn't care about the VNF deployment mode. If you see the<br clear="none">> API's, it's all about chaining neutron ports..<br clear="none">><br clear="none">> On Tue, Jan 10, 2017 at 12:26 PM, Vikash Kumar <<br clear="none">> <a rel="nofollow" shape="rect" id="yiv2019520172yui_3_16_0_ym19_1_1484154423024_18738" ymailto="mailto:vikash.kumar@oneconvergence.com" target="_blank" href="mailto:vikash.kumar@oneconvergence.com">vikash.kumar@oneconvergence.com</a>> wrote:<br clear="none">><br clear="none">>> Which API specifies the mode of VNF (L3/L2/BITW) ? I need to insert a<br clear="none">>> Firewall in L2 mode.<br clear="none">>><br clear="none">>> --<br clear="none">>> Regards,<br clear="none">>> Vikash<br clear="none">>><br clear="none">><br clear="none"><br clear="none"></div>  </div> </div>  </div></div></div></div></div></div><div class="yiv2019520172yqt9162408367" id="yiv2019520172yqtfd64154"><br clear="none"><br clear="none"></div></div><div class="yiv2019520172yqt9162408367" id="yiv2019520172yqtfd40543">  </div></div><div class="yiv2019520172yqt9162408367" id="yiv2019520172yqtfd63068"> </div></div><div class="yiv2019520172yqt9162408367" id="yiv2019520172yqtfd34873">  </div></div></div></div></div><br><br></div>  </div> </div>  </div></div></body></html>