[openstack-dev] [neutron][taas] Taas can not capture the packet, if the two VM on the same host. Is it a Bug?
SUZUKI, Kazuhiro
kaz at jp.fujitsu.com
Tue Jul 5 12:26:19 UTC 2016
Hi Jimmy,
I guess that it has not been resoved yet.
You should try to ask it on IRC meeting, I think.
http://eavesdrop.openstack.org/#Tap_as_a_Service_Meeting
Regards,
Kaz
From: 张广明 <gmzhang76 at gmail.com>
Subject: Re: [openstack-dev] [neutron][taas] Taas can not capture the
packet, if the two VM on the same host. Is it a Bug?
Date: Tue, 5 Jul 2016 19:31:14 +0800
> Hi Kaz
> Thanks for your answer. But int the log, i can not find how to
> resolve
> this issue. In fact ,this issue is not related with br-ex.
> In OVS, the normal action add or remove vlan id when output the pac
> ket. So
> we should add another rule that use in_port that
> belongs to the same vlan with mirror port as rule condition in br-
> int.
>
>
>
> Jimmy
>
> 2016-07-05 17:01 GMT+08:00 SUZUKI, Kazuhiro <kaz at jp.fujitsu.com>:
>
>> Hi,
>>
>> I also have seen the same situation.
>> The same issue is discussed at the IRC meeting of TaaS.
>> Please take a look at the log.
>>
>>
>> http://eavesdrop.openstack.org/meetings/taas/2016/taas.2016-04-13-
>> 06.30.log.html
>>
>> Regards,
>> Kaz
>>
>>
>> From: 张广明 <gmzhang76 at gmail.com>
>> Subject: [openstack-dev] [neutron][taas] Taas can not capture the
>> packet,
>> if the two VM on the same host. Is it a Bug?
>> Date: Fri, 1 Jul 2016 16:03:53 +0800
>>
>> > Hi ,
>> > I found a limitation when use taas. My test case is descrip
>> ped as
>> > follow:
>> > VM1 and VM2 is running on the same host and they are belong
>> the
>> vlan.
>> > The monitor VM is on the same host or the other host . I want t
>> o monitor
>> > the only INPUT flow to the VM1.
>> > So I configure the tap-flow like this "neutron tap-flow-crea
>> te
>> --port
>> > 2a5a4382-a600-4fb1-8955-00d0fc9f648f --tap-service
>> > c510e5db-4ba8-48e3-bfc8-1f0b61f8f41b --direction IN ".
>> > When ping from VM2 to VM1. I can not get the flow in the mo
>> nitor VM.
>> > The reason is the the flow from VM2 to VM1 in br-int has not
>> vlan
>> > information. The vlan tag was added in flow when output the pack
>> et in
>> OVS.
>> > So the code in file ovs_taas.py did not work in this case .
>> >
>> > if direction == 'IN' or direction == 'BOTH':
>> > port_mac = tap_flow['port_mac']
>> > self.int_br.add_flow(table=0,
>> > priority=20,
>> > dl_vlan=port_vlan_id,
>> > dl_dst=port_mac,
>> >
>> actions="normal,mod_vlan_vid:%s,output:%s" %
>> > (str(taas_id), str(patch_int_ta
>> p_id)))
>> >
>> >
>> >
>> >
>> > Is this is a Bug or a Design ??
>> >
>> >
>> >
>> > Thanks.
>>
More information about the OpenStack-dev
mailing list