You are correct that OpenFlow rules are stateless.  As you suspect, you can 
implement basic firewalling rules, but you wouldn't be able to implement the 
full feature-set of iptables.

--Justin


On Aug 15, 2012, at 7:37 PM, 刘家军 <[email protected]> wrote:

> thank you for your reply.
> 
> I was considering if it is possible to use openflow rules to implement some 
> kind of firewall like that can be achieved by iptables in OVS.  However, 
> openflow seems to be stateless while iptables is stateful. What is your 
> opinion, can you give me some advice? thank you!
> 
> 2012/8/15 Justin Pettit <[email protected]>
> Currently only OpenFlow 1.0 (with a number of extensions that provide much of 
> the functionality of the later versions). There's work being done now to 
> support 1.1 and 1.2.
> 
> --Justin
> 
> 
> On Aug 14, 2012, at 7:18 PM, 家军 <[email protected]> wrote:
> 
> > Hi all,
> >
> > I want to known which edition of openflow protocol was supported by OVS as 
> > of the release of openvswitch 1.7.0. However, I cann't find those 
> > information from  the source code or from the web site. So, can anyone tell 
> > me.
> >
> > Thanks,
> > justin
> > _______________________________________________
> > discuss mailing list
> > [email protected]
> > http://openvswitch.org/mailman/listinfo/discuss
> 
> 
> 
> -- 
> 刘家军
> 
> 

_______________________________________________
discuss mailing list
[email protected]
http://openvswitch.org/mailman/listinfo/discuss

Reply via email to