[openstack-dev] [networking-sfc] SFC flows issue

Mohan Kumar nmohankumar1011 at gmail.com
Tue Sep 6 07:43:08 UTC 2016


Hi Ravi ,

Could you share tcpdump on P3 as well ( sudo tcpdump  -n -e -i
 "P3 tab-interface" )

IMO , the possible reasons would be

[1]  port-security on SF port  may block the packet , since it destined to
different ip address.

[2]  The SF program may alter the IP Header (Destination field )

Flow rules are looks okay , and it shows packets are dropped in between p2
and p3 .


Thanks.,
Mohankumar.N



On Sat, Sep 3, 2016 at 10:07 AM, Ravi Sekhar Reddy Konda <
ravisekhar.konda at oracle.com> wrote:

> Hi Networking SFC team
>
>  I am trying out networking-SFC on the AllInOne Devstack(master branch) VM
> brought up on the VirtualBox.
>  I am trying out the following scenario
>
>   |--------------|                                  |--------------|
>                                 |--------------|
>   | SRC-VM  |                                  |   SF-VM
> |                                       |  DST-VM |
>   |--------------|
> |--------------|                                       |--------------|
>         p1 |                                            p2 |
> |p3                                           p4 |
>              |                                                 |
> |                                                    |
>              |                                                 |
> |                                                    |
> Net1--------------------------------------------------------
> -------------------------------------
>
>
> P1 ->  192.168.0.6          "fa:16:3e:d8:8f:28"
> P2 ->  192.168.0.10       "fa:16:3e:12:7e:50"
> P3 ->  192.168.0.5         "fa:16:3e:1e:f8:c2"
> P4 ->  192.168.0.14       "fa:16:3e:4d:e8:c3"
>
> On SF-VM, I have written a simple application to capture the packets on
> eth0 and forward to eth1
>
> The issue I am facing is packets are getting sent from Port-1 (SRC-VM) to
> Port-2 (SF-VM), but I am not seeing packets getting sent from Port-3
> (SF-VM) to Port-4 (DST-VM)
>
> Here is the Classifier I created
>
> neutron flow-classifier-create --ethertype IPv4 --source-ip-prefix
> 192.168.0.6/32 --logical-source-port 6c700c35-6505-4304-89cd-b48513884cf5
> --destination-ip-prefix 192.168.0.14/32 --logical-destination-port
> d0b218c9-57f4-4d38-b363-2086b8dbc8b9 --protocol icmp fc1
>
> ==> Can you please let me know are the flows as expected in this scenario
> OFPST_FLOW reply (OF1.3) (xid=0x2):
>  cookie=0x9118e6e52dd3dfa0, duration=34624.734s, table=0, n_packets=399,
> n_bytes=39102, priority=30,icmp,in_port=9,nw_src=192.168.0.6,nw_dst=192.168.0.14
> actions=group:1
>  cookie=0x9118e6e52dd3dfa0, duration=34624.696s, table=0, n_packets=0,
> n_bytes=0, priority=30,icmp,in_port=13,nw_src=192.168.0.6,nw_dst=192.168.0.14
> actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=45300.986s, table=0, n_packets=0,
> n_bytes=0, priority=20,mpls actions=resubmit(,10)
>  cookie=0x9118e6e52dd3dfa0, duration=42858.783s, table=0, n_packets=0,
> n_bytes=0, priority=10,icmp6,in_port=9,icmp_type=136 actions=resubmit(,24)
>  cookie=0x9118e6e52dd3dfa0, duration=42250.745s, table=0, n_packets=0,
> n_bytes=0, priority=10,icmp6,in_port=10,icmp_type=136
> actions=resubmit(,24)
>  cookie=0x9118e6e52dd3dfa0, duration=37845.792s, table=0, n_packets=0,
> n_bytes=0, priority=10,icmp6,in_port=12,icmp_type=136
> actions=resubmit(,24)
>  cookie=0x9118e6e52dd3dfa0, duration=37617.801s, table=0, n_packets=0,
> n_bytes=0, priority=10,icmp6,in_port=13,icmp_type=136
> actions=resubmit(,24)
>  cookie=0x9118e6e52dd3dfa0, duration=42858.758s, table=0, n_packets=73,
> n_bytes=3066, priority=10,arp,in_port=9 actions=resubmit(,24)
>  cookie=0x9118e6e52dd3dfa0, duration=42250.725s, table=0, n_packets=151,
> n_bytes=6342, priority=10,arp,in_port=10 actions=resubmit(,24)
>  cookie=0x9118e6e52dd3dfa0, duration=37845.769s, table=0,
> n_packets=666039, n_bytes=27973638, priority=10,arp,in_port=12
> actions=resubmit(,24)
>  cookie=0x9118e6e52dd3dfa0, duration=37617.782s, table=0,
> n_packets=666069, n_bytes=27974898, priority=10,arp,in_port=13
> actions=resubmit(,24)
>  cookie=0x9118e6e52dd3dfa0, duration=45302.016s, table=0, n_packets=0,
> n_bytes=0, priority=2,in_port=1 actions=drop
>  cookie=0x9118e6e52dd3dfa0, duration=42858.804s, table=0, n_packets=10993,
> n_bytes=2219925, priority=9,in_port=9 actions=resubmit(,25)
>  cookie=0x9118e6e52dd3dfa0, duration=42250.774s, table=0, n_packets=22275,
> n_bytes=4028172, priority=9,in_port=10 actions=resubmit(,25)
>  cookie=0x9118e6e52dd3dfa0, duration=37845.822s, table=0, n_packets=9967,
> n_bytes=1989597, priority=9,in_port=12 actions=resubmit(,25)
>  cookie=0x9118e6e52dd3dfa0, duration=37617.828s, table=0, n_packets=11154,
> n_bytes=2154155, priority=9,in_port=13 actions=resubmit(,25)
>  cookie=0x9118e6e52dd3dfa0, duration=45268.699s, table=0, n_packets=14048,
> n_bytes=1104503, priority=3,in_port=1,vlan_tci=0x0000/0x1fff
> actions=push_vlan:0x8100,set_field:4098->vlan_vid,NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=45302.314s, table=0, n_packets=24842,
> n_bytes=2954751, priority=0 actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=34624.792s, table=5, n_packets=399,
> n_bytes=39102, priority=0,ip,dl_dst=fa:16:3e:12:7e:50
> actions=push_mpls:0x8847,set_field:65791->mpls_label,set_
> mpls_ttl(255),push_vlan:0x8100,set_field:4099->vlan_vid,resubmit(,10)
>  cookie=0x9118e6e52dd3dfa0, duration=34624.649s, table=10, n_packets=399,
> n_bytes=39102, priority=1,mpls,dl_vlan=3,dl_dst=fa:16:3e:12:7e:50,mpls_label=65791
> actions=pop_vlan,pop_mpls:0x0800,output:10
>  cookie=0x9118e6e52dd3dfa0, duration=45300.979s, table=10, n_packets=0,
> n_bytes=0, priority=0 actions=drop
>  cookie=0x9118e6e52dd3dfa0, duration=45302.309s, table=23, n_packets=0,
> n_bytes=0, priority=0 actions=drop
>  cookie=0x9118e6e52dd3dfa0, duration=42858.796s, table=24, n_packets=0,
> n_bytes=0, priority=2,icmp6,in_port=9,icmp_type=136,nd_target=fe80::f816:3eff:fed8:8f28
> actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=42250.752s, table=24, n_packets=0,
> n_bytes=0, priority=2,icmp6,in_port=10,icmp_type=136,nd_target=fe80::f816:3eff:fe12:7e50
> actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=37845.802s, table=24, n_packets=0,
> n_bytes=0, priority=2,icmp6,in_port=12,icmp_type=136,nd_target=fe80::f816:3eff:fe4d:e8c3
> actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=37617.815s, table=24, n_packets=0,
> n_bytes=0, priority=2,icmp6,in_port=13,icmp_type=136,nd_target=fe80::f816:3eff:fe1e:f8c2
> actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=42858.773s, table=24, n_packets=73,
> n_bytes=3066, priority=2,arp,in_port=9,arp_spa=192.168.0.6
> actions=resubmit(,25)
>  cookie=0x9118e6e52dd3dfa0, duration=42250.735s, table=24, n_packets=139,
> n_bytes=5838, priority=2,arp,in_port=10,arp_spa=192.168.0.10
> actions=resubmit(,25)
>  cookie=0x9118e6e52dd3dfa0, duration=37845.783s, table=24,
> n_packets=666039, n_bytes=27973638, priority=2,arp,in_port=12,arp_spa=192.168.0.14
> actions=resubmit(,25)
>  cookie=0x9118e6e52dd3dfa0, duration=37617.791s, table=24,
> n_packets=666022, n_bytes=27972924, priority=2,arp,in_port=13,arp_spa=192.168.0.5
> actions=resubmit(,25)
>  cookie=0x9118e6e52dd3dfa0, duration=45302.304s, table=24, n_packets=59,
> n_bytes=2478, priority=0 actions=drop
>  cookie=0x9118e6e52dd3dfa0, duration=42858.823s, table=25, n_packets=99,
> n_bytes=5900, priority=2,in_port=9,dl_src=fa:16:3e:d8:8f:28 actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=42250.791s, table=25,
> n_packets=11603, n_bytes=1849532, priority=2,in_port=10,dl_src=fa:16:3e:12:7e:50
> actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=37845.841s, table=25,
> n_packets=666304, n_bytes=27999888, priority=2,in_port=12,dl_src=fa:16:3e:4d:e8:c3
> actions=NORMAL
>  cookie=0x9118e6e52dd3dfa0, duration=37617.845s, table=25,
> n_packets=667436, n_bytes=28153632, priority=2,in_port=13,dl_src=fa:16:3e:1e:f8:c2
> actions=NORMAL
>
> When I manually send ICMP packets from eth1 interface(P3) on SF-VM,
> packets are going as expected
>
> Thanks in Advance
> Ravi
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160906/927d10e2/attachment.html>


More information about the OpenStack-dev mailing list