Open Stack

Hi,

For OVN with have small tool ml2ovn-trace: https://docs.openstack.org/neutron/
latest/ovn/ml2ovn_trace.html in the neutron repo https://docs.openstack.org/
neutron/latest/ovn/ml2ovn_trace.html but that will not be helpful for ML2/OVS 
at all.

On poniedziałek, 11 października 2021 20:05:40 CEST Arnaud wrote:
> That would be awesome!
> 
> We also built a tool which is looking for openflow rules related to a tap
> interface, but since we upgraded and enabled security rules in ovs, the tool
> isn't working anymore.

Yes, for ML2/OVS with ovs firewall driver it is really painful to debug all 
those OF rules.

> 
> So before rewriting everything from scratch, I was wondering if the 
community
> was also dealing with the same issue.

If You will have anything like that, please share with community :)

> 
> So I am glad to here from you!
> Let me know :)
> Cheers
> 
> Le 11 octobre 2021 17:52:52 GMT+02:00, Laurent Dumont 
<laurentfdumont at gmail.com> a écrit :
> >Also interested in this. Reading rules in dump-flows is an absolute pain.
> >In an ideal world, I would have never have to.
> >
> >We some stuff on our side that I'll see if I can share.
> >
> >On Mon, Oct 11, 2021 at 9:41 AM Arnaud Morin <arnaud.morin at gmail.com> 
wrote:
> >> Hello,
> >> 
> >> When using native ovs in neutron, we endup with a lot of openflow rules
> >> on ovs side.
> >> 
> >> Debugging it with regular ovs-ofctl --color dump-flows is kind of
> >> painful.
> >> 
> >> Is there any tool that the community is using to manage that?
> >> 
> >> Thanks in advance!
> >> 
> >> Arnaud.


-- 
Slawek Kaplonski
Principal Software Engineer
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20211011/2180995e/attachment.sig>