Yes, it's dropped, I use ovs-ofctl to debug flow table. I found that VPN cannot run in an instances, just because:
1. IP varys from time to time, while security group needs IP/Mac address binding. 2. flow table of br-int won't allow traffic to goes through, as I met in this topic. Probably VPNaas of Openstack is a good choice. Thanks.
_______________________________________________ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
