Hi Justin,
Do you plan to expose the ct->mark (CONNMARK) as an OpenFlow matcher, as it was
done for the sk_buff->mark (pkt_mark)?
With an application aware conntrack-engine (thanks to ALGs or to a DPI engine)
storing the "Application ID" in the connmark, we could then use compact
matchers based on CONNMARK. Let's say RTP correspond to connmark=0x55, and you
want to steer all RTP traffic in a specific QoS queue:
ovs-ofctl add-flow br0 connmark=0x55,action= set_queue:123
Best Regards,
Franck
> -----Original Message-----
> From: discuss [mailto:[email protected]] On Behalf Of
> Justin Pettit
> Sent: mercredi 14 mai 2014 17:00
> To: [email protected]; [email protected]
> Subject: [ovs-discuss] OpenStack: "Open vSwitch and the Intelligent Edge"
> Slides
>
> Thanks to those who attended my "Open vSwitch and the Intelligent Edge"
> presentation at the OpenStack Summit yesterday. From my understanding,
> the video should be available on YouTube within the next couple days. I've
> uploaded the slides and put a link on the Documentation page at
> openvswitch.org, but here's a direct link:
>
> http://openvswitch.org/slides/OpenStack-140513.pdf
>
> In this talk, I describe advanced operations that can be achieved due to OVS's
> location at the edge of the network. With its unique position, it has greater
> context and the ability to enforce policies early. I describe the effects on
> networking and security, and dive into specific examples that can be best
> handled with an intelligent edge. Topics include:
>
> - Guest introspection
> - Inferring state from the edge
> - Implementing efficient security policies
> - Elephant flow detection and handling
>
> I hope you find it interesting.
>
> --Justin
>
>
>
> _______________________________________________
> discuss mailing list
> [email protected]
> http://openvswitch.org/mailman/listinfo/discuss
This message and any attachments (the "message") are confidential, intended
solely for the addressees. If you are not the intended recipient, please notify
the sender immediately by e-mail and delete this message from your system. In
this case, you are not authorized to use, copy this message and/or disclose the
content to any other person. E-mails are susceptible to alteration. Neither
Qosmos nor any of its subsidiaries or affiliates shall be liable for the
message if altered, changed or falsified.
Ce message et toutes ses pièces jointes (ci-après le "message")sont
confidentiels et établis à l'intention exclusive de ses destinataires. Si vous
avez reçu ce message par erreur, merci d’en informer immédiatement son émetteur
par courrier électronique et d’effacer ce message de votre système. Dans cette
hypothèse, vous n’êtes pas autorisé à utiliser, copier ce message et/ou en
divulguer le contenu à un tiers. Tout message électronique est susceptible
d'altération. Qosmos et ses filiales déclinent toute responsabilité au titre de
ce message s'il a été altéré, déformé ou falsifié.
_______________________________________________
discuss mailing list
[email protected]
http://openvswitch.org/mailman/listinfo/discuss
