Re: [one-users] need to create Flows? for openvswitch-based ONE (4.2) setup -- (passed on ebtables)

2013-12-03 Thread Jaime Melis
Hi Mark,

there should be more info in the log file at /var/log/one/24.log

what does it say there?

cheers,
Jaime


On Wed, Nov 20, 2013 at 11:08 PM, Mark Biggers mbigg...@ine.com wrote:

  Hello ONE team,

 I have passed on the ebtables configuration for networking in 4.2 ONE.
 We'll need OpenVSwitch anyways to manage the VMs VLANS, so I have moved on.

 I *think* I have an almost working OpenVSwitch configuration.   Must I
 manually create flows for each VM/MAC-addr to enable IP traffic, across
 the OVS vbridge (vbr0), in this case?

 The info on my new (OVS networking) setup, is included, at the end of this
 message.  Thank you.  (The platform is still openSUSE 12.3 on a Thinkpad
 W530...)


 On 11/19/2013 05:43 AM, Jaime Melis wrote:

 Hi Mark,

  I have the feeling the NAT policies are interfering with this. Can you
 try without applying NAT rules?


 On Wed, Nov 13, 2013 at 9:08 PM, Mark Biggers mbigg...@ine.com wrote:

 The subject says it all.  I am available on IRC -- see my signature, and
 Google chat.

 I can get no networking across a bridge working, for the ONE ebtables
 model.


 === edited out


  --
  Jaime Melis
 Project Engineer
 OpenNebula - Flexible Enterprise Cloud Made Simple
 www.OpenNebula.org | jme...@opennebula.org


 Script started on Wed Nov 20 16:27:05 2013

 r...@sealion.ine.corp:one # netstat -nr
 Kernel IP routing table
 DestinationGatewayGenmaskFlagsMSS Window  irtt
 Iface
 0.0.0.0192.168.1.10.0.0.0UG  0 0   0 vbr0
 67.139.46.149192.168.1.1255.255.255.255 UGH  0 0   0
 vbr0
 127.0.0.00.0.0.0255.255.255.0U  0 0   0 lo
 127.0.0.00.0.0.0255.0.0.0U  0 0   0 lo
 192.168.1.00.0.0.0255.255.255.0U  0 0   0 vbr0

 r...@sealion.ine.corp:one # ip addr
 1: lo: LOOPBACK,UP,LOWER_UP mtu 65536 qdisc noqueue state UNKNOWN
 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
 2: eth0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state
 UP qlen 1000
 link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff
 3: wlan0: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN qlen 1000
 link/ether 6c:88:14:da:0b:44 brd ff:ff:ff:ff:ff:ff
 4: ovs-system: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN
 link/ether 0a:0e:fd:bb:5a:8a brd ff:ff:ff:ff:ff:ff
 7: vbr0: BROADCAST,PROMISC,UP,LOWER_UP mtu 1500 qdisc noqueue state
 UNKNOWN
 link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff
 inet 192.168.1.250/24 scope global vbr0
 12: vnet0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast
 state UNKNOWN qlen 500
 link/ether fe:00:0a:00:00:03 brd ff:ff:ff:ff:ff:ff
 13: vnet1: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast
 state UNKNOWN qlen 500
 link/ether fe:00:0a:00:00:04 brd ff:ff:ff:ff:ff:ff

 r...@sealion.ine.corp:one # BRIDGE_DEV=vbr0
 r...@sealion.ine.corp:one # sudo ovs-ofctl dump-desc $BRIDGE_DEV
 OFPST_DESC reply (xid=0x2):
 Manufacturer: Nicira, Inc.
 Hardware: Open vSwitch
 Software: 1.11.0
 Serial Num: None
 DP Description: None

 r...@sealion.ine.corp:one # sudo ovs-vsctl show
 001119d6-32d7-4db8-8015-229b271cca6a
 Bridge vbr0
 Controller ptcp:
 fail_mode: standalone
 Port vnet0
 tag: 0
 Interface vnet0
 Port vnet1
 tag: 0
 Interface vnet1
 Port eth0
 Interface eth0
 Port vbr0
 Interface vbr0
 type: internal
 ovs_version: 1.11.0

 r...@sealion.ine.corp:one # sudo ovs-ofctl show $BRIDGE_DEV
 OFPT_FEATURES_REPLY (xid=0x2): dpid:3c970eab0ade
 n_tables:254, n_buffers:256
 capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP
 actions: OUTPUT SET_VLAN_VID SET_VLAN_PCP STRIP_VLAN SET_DL_SRC SET_DL_DST
 SET_NW_SRC SET_NW_DST SET_NW_TOS SET_TP_SRC SET_TP_DST ENQUEUE
  1(eth0): addr:3c:97:0e:ab:0a:de
  config: 0
  state: STP_FORWARD
  current: 1GB-FD COPPER AUTO_NEG
  advertised: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG
  supported: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER
 AUTO_NEG
  speed: 1000 Mbps now, 1000 Mbps max
  2(vnet0): addr:fe:00:0a:00:00:03
  config: 0
  state: 0
  current: 10MB-FD COPPER
  speed: 10 Mbps now, 0 Mbps max
  3(vnet1): addr:fe:00:0a:00:00:04
  config: 0
  state: 0
  current: 10MB-FD COPPER
  speed: 10 Mbps now, 0 Mbps max
  LOCAL(vbr0): addr:3c:97:0e:ab:0a:de
  config: 0
  state: 0
  speed: 0 Mbps now, 0 Mbps max
 OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0

 r...@sealion.ine.corp:one # sudo ovs-ofctl dump-flows $BRIDGE_DEV
 NXST_FLOW reply (xid=0x4):
  cookie=0x0, duration=8382.092s, table=0, n_packets=4, n_bytes=240,
 idle_age=8381, priority=4,in_port=2,dl_src=02:00:0a:00:00:03
 actions=NORMAL
  cookie=0x0, 

[one-users] need to create Flows? for openvswitch-based ONE (4.2) setup -- (passed on ebtables)

2013-11-20 Thread Mark Biggers
Hello ONE team,

I have passed on the ebtables configuration for networking in 4.2 ONE.   
We'll need OpenVSwitch anyways to manage the VMs VLANS, so I have moved on.

I *think* I have an almost working OpenVSwitch configuration.   Must I manually 
create flows for each VM/MAC-addr to enable IP traffic, across the OVS 
vbridge (vbr0), in this case?

The info on my new (OVS networking) setup, is included, at the end of this 
message.  Thank you.  (The platform is still openSUSE 12.3 on a Thinkpad 
W530...)


On 11/19/2013 05:43 AM, Jaime Melis wrote:
Hi Mark,

I have the feeling the NAT policies are interfering with this. Can you try 
without applying NAT rules?


On Wed, Nov 13, 2013 at 9:08 PM, Mark Biggers 
mbigg...@ine.commailto:mbigg...@ine.com wrote:
The subject says it all.  I am available on IRC -- see my signature, and Google 
chat.

I can get no networking across a bridge working, for the ONE ebtables model.

=== edited out

--
Jaime Melis
Project Engineer
OpenNebula - Flexible Enterprise Cloud Made Simple
www.OpenNebula.orghttp://www.OpenNebula.org | 
jme...@opennebula.orgmailto:jme...@opennebula.org

Script started on Wed Nov 20 16:27:05 2013

r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # netstat -nr
Kernel IP routing table
DestinationGatewayGenmaskFlagsMSS Window  irtt Iface
0.0.0.0192.168.1.10.0.0.0UG  0 0   0 vbr0
67.139.46.149192.168.1.1255.255.255.255 UGH  0 0   0 vbr0
127.0.0.00.0.0.0255.255.255.0U  0 0   0 lo
127.0.0.00.0.0.0255.0.0.0U  0 0   0 lo
192.168.1.00.0.0.0255.255.255.0U  0 0   0 vbr0

r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # ip addr
1: lo: LOOPBACK,UP,LOWER_UP mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state UP 
qlen 1000
link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff
3: wlan0: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 6c:88:14:da:0b:44 brd ff:ff:ff:ff:ff:ff
4: ovs-system: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN
link/ether 0a:0e:fd:bb:5a:8a brd ff:ff:ff:ff:ff:ff
7: vbr0: BROADCAST,PROMISC,UP,LOWER_UP mtu 1500 qdisc noqueue state UNKNOWN
link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff
inet 192.168.1.250/24 scope global vbr0
12: vnet0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state 
UNKNOWN qlen 500
link/ether fe:00:0a:00:00:03 brd ff:ff:ff:ff:ff:ff
13: vnet1: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state 
UNKNOWN qlen 500
link/ether fe:00:0a:00:00:04 brd ff:ff:ff:ff:ff:ff

r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # BRIDGE_DEV=vbr0
r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # sudo ovs-ofctl 
dump-desc $BRIDGE_DEV
OFPST_DESC reply (xid=0x2):
Manufacturer: Nicira, Inc.
Hardware: Open vSwitch
Software: 1.11.0
Serial Num: None
DP Description: None

r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # sudo ovs-vsctl 
show
001119d6-32d7-4db8-8015-229b271cca6a
Bridge vbr0
Controller ptcp:
fail_mode: standalone
Port vnet0
tag: 0
Interface vnet0
Port vnet1
tag: 0
Interface vnet1
Port eth0
Interface eth0
Port vbr0
Interface vbr0
type: internal
ovs_version: 1.11.0

r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # sudo ovs-ofctl 
show $BRIDGE_DEV
OFPT_FEATURES_REPLY (xid=0x2): dpid:3c970eab0ade
n_tables:254, n_buffers:256
capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP
actions: OUTPUT SET_VLAN_VID SET_VLAN_PCP STRIP_VLAN SET_DL_SRC SET_DL_DST 
SET_NW_SRC SET_NW_DST SET_NW_TOS SET_TP_SRC SET_TP_DST ENQUEUE
 1(eth0): addr:3c:97:0e:ab:0a:de
 config: 0
 state: STP_FORWARD
 current: 1GB-FD COPPER AUTO_NEG
 advertised: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG
 supported: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG
 speed: 1000 Mbps now, 1000 Mbps max
 2(vnet0): addr:fe:00:0a:00:00:03
 config: 0
 state: 0
 current: 10MB-FD COPPER
 speed: 10 Mbps now, 0 Mbps max
 3(vnet1): addr:fe:00:0a:00:00:04
 config: 0
 state: 0
 current: 10MB-FD COPPER
 speed: 10 Mbps now, 0 Mbps max
 LOCAL(vbr0): addr:3c:97:0e:ab:0a:de
 config: 0
 state: 0
 speed: 0 Mbps now, 0 Mbps max
OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0

r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # sudo ovs-ofctl 
dump-flows $BRIDGE_DEV
NXST_FLOW reply (xid=0x4):
 cookie=0x0, duration=8382.092s, table=0, n_packets=4, n_bytes=240, 
idle_age=8381, priority=4,in_port=2,dl_src=02:00:0a:00:00:03 actions=NORMAL
 cookie=0x0,