Please see my responses inline, prefixed by [SL].
On Apr 7, 2016, at 5:30 AM, Petr Horacek <phora...@redhat.com> wrote: > > Hello, > > IIUIC we have to attach OVS bond to an OVS bridge, so it would look like this: > > $ ovs-vsctl -- \ > add-br br0 -- \ > --fake-iface add-bond br0 bond1 eth0 eth1 -- \ > --fake-iface add-bond br0 bond2 eth2 eth3 > # attach VMs to the bridge > > (eth0+eth1=bond1)--br0--VMs > (eth2+eth3=bond2)---/ > > And therefore VMs would be able to reach bond2, which is the problem. > > What makes more sense, to create multiple OVS bridges (one for each physical > iface/bond) or some OF rules (if it is even possible). > > TL;DR: we want to be able to setup two OVS bondings which are not able to see > each other. [SL] Ah---sorry, it wasn't immediately clear (to me) that your original diagram was referring specifically to OVS bonds. With that clarification, the problem becomes much clearer. IMHO, the (very) high-level answer to your question is: - Easier: separate OVS bridges - More powerful: using OF flows with a single OVS bridge Obviously, there are tradeoffs between the two approaches. It's more complex to use OF flows, but you get a great deal of flexibility. > Thanks, > Petr > > 2016-04-04 18:10 GMT+02:00 Scott Lowe <scott.l...@scottlowe.org>: > Please see my response below. > > > > On Apr 4, 2016, at 6:22 AM, Petr Horacek <phora...@redhat.com> wrote: > > > > Hello, > > > > we handle following networking (example) scenario with Linux bridges: > > > > (eth0+eth1=bond1)--bridge--VMs > > (eth2+eth3=bond2) > > > > We want to do the same with OVS. What is the best way to do that? > > > > a) We can create multiple OVS bridges, but that would increase complexity > > of our code. > > b) We can use one OVS bridge and define OpenFlow rules (how?) to hide the > > traffic. > > > Hi Petr, maybe it's because I haven't had enough coffee yet, but why wouldn't > the following accomplish what you need? > > (eth0+eth1=bond1)--OVS bridge--VMs > (eth2+eth3=bond2) > > Can you elaborate a bit on exactly what you're trying to accomplish? That > might help us help you. -- Scott _______________________________________________ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinfo/discuss
