Re: [one-users] need to create Flows? for openvswitch-based ONE (4.2) setup -- (passed on ebtables)
Hi Mark, there should be more info in the log file at /var/log/one/24.log what does it say there? cheers, Jaime On Wed, Nov 20, 2013 at 11:08 PM, Mark Biggers mbigg...@ine.com wrote: Hello ONE team, I have passed on the ebtables configuration for networking in 4.2 ONE. We'll need OpenVSwitch anyways to manage the VMs VLANS, so I have moved on. I *think* I have an almost working OpenVSwitch configuration. Must I manually create flows for each VM/MAC-addr to enable IP traffic, across the OVS vbridge (vbr0), in this case? The info on my new (OVS networking) setup, is included, at the end of this message. Thank you. (The platform is still openSUSE 12.3 on a Thinkpad W530...) On 11/19/2013 05:43 AM, Jaime Melis wrote: Hi Mark, I have the feeling the NAT policies are interfering with this. Can you try without applying NAT rules? On Wed, Nov 13, 2013 at 9:08 PM, Mark Biggers mbigg...@ine.com wrote: The subject says it all. I am available on IRC -- see my signature, and Google chat. I can get no networking across a bridge working, for the ONE ebtables model. === edited out -- Jaime Melis Project Engineer OpenNebula - Flexible Enterprise Cloud Made Simple www.OpenNebula.org | jme...@opennebula.org Script started on Wed Nov 20 16:27:05 2013 r...@sealion.ine.corp:one # netstat -nr Kernel IP routing table DestinationGatewayGenmaskFlagsMSS Window irtt Iface 0.0.0.0192.168.1.10.0.0.0UG 0 0 0 vbr0 67.139.46.149192.168.1.1255.255.255.255 UGH 0 0 0 vbr0 127.0.0.00.0.0.0255.255.255.0U 0 0 0 lo 127.0.0.00.0.0.0255.0.0.0U 0 0 0 lo 192.168.1.00.0.0.0255.255.255.0U 0 0 0 vbr0 r...@sealion.ine.corp:one # ip addr 1: lo: LOOPBACK,UP,LOWER_UP mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo 2: eth0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff 3: wlan0: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 6c:88:14:da:0b:44 brd ff:ff:ff:ff:ff:ff 4: ovs-system: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN link/ether 0a:0e:fd:bb:5a:8a brd ff:ff:ff:ff:ff:ff 7: vbr0: BROADCAST,PROMISC,UP,LOWER_UP mtu 1500 qdisc noqueue state UNKNOWN link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff inet 192.168.1.250/24 scope global vbr0 12: vnet0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500 link/ether fe:00:0a:00:00:03 brd ff:ff:ff:ff:ff:ff 13: vnet1: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500 link/ether fe:00:0a:00:00:04 brd ff:ff:ff:ff:ff:ff r...@sealion.ine.corp:one # BRIDGE_DEV=vbr0 r...@sealion.ine.corp:one # sudo ovs-ofctl dump-desc $BRIDGE_DEV OFPST_DESC reply (xid=0x2): Manufacturer: Nicira, Inc. Hardware: Open vSwitch Software: 1.11.0 Serial Num: None DP Description: None r...@sealion.ine.corp:one # sudo ovs-vsctl show 001119d6-32d7-4db8-8015-229b271cca6a Bridge vbr0 Controller ptcp: fail_mode: standalone Port vnet0 tag: 0 Interface vnet0 Port vnet1 tag: 0 Interface vnet1 Port eth0 Interface eth0 Port vbr0 Interface vbr0 type: internal ovs_version: 1.11.0 r...@sealion.ine.corp:one # sudo ovs-ofctl show $BRIDGE_DEV OFPT_FEATURES_REPLY (xid=0x2): dpid:3c970eab0ade n_tables:254, n_buffers:256 capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP actions: OUTPUT SET_VLAN_VID SET_VLAN_PCP STRIP_VLAN SET_DL_SRC SET_DL_DST SET_NW_SRC SET_NW_DST SET_NW_TOS SET_TP_SRC SET_TP_DST ENQUEUE 1(eth0): addr:3c:97:0e:ab:0a:de config: 0 state: STP_FORWARD current: 1GB-FD COPPER AUTO_NEG advertised: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG supported: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG speed: 1000 Mbps now, 1000 Mbps max 2(vnet0): addr:fe:00:0a:00:00:03 config: 0 state: 0 current: 10MB-FD COPPER speed: 10 Mbps now, 0 Mbps max 3(vnet1): addr:fe:00:0a:00:00:04 config: 0 state: 0 current: 10MB-FD COPPER speed: 10 Mbps now, 0 Mbps max LOCAL(vbr0): addr:3c:97:0e:ab:0a:de config: 0 state: 0 speed: 0 Mbps now, 0 Mbps max OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0 r...@sealion.ine.corp:one # sudo ovs-ofctl dump-flows $BRIDGE_DEV NXST_FLOW reply (xid=0x4): cookie=0x0, duration=8382.092s, table=0, n_packets=4, n_bytes=240, idle_age=8381, priority=4,in_port=2,dl_src=02:00:0a:00:00:03 actions=NORMAL cookie=0x0,
[one-users] need to create Flows? for openvswitch-based ONE (4.2) setup -- (passed on ebtables)
Hello ONE team, I have passed on the ebtables configuration for networking in 4.2 ONE. We'll need OpenVSwitch anyways to manage the VMs VLANS, so I have moved on. I *think* I have an almost working OpenVSwitch configuration. Must I manually create flows for each VM/MAC-addr to enable IP traffic, across the OVS vbridge (vbr0), in this case? The info on my new (OVS networking) setup, is included, at the end of this message. Thank you. (The platform is still openSUSE 12.3 on a Thinkpad W530...) On 11/19/2013 05:43 AM, Jaime Melis wrote: Hi Mark, I have the feeling the NAT policies are interfering with this. Can you try without applying NAT rules? On Wed, Nov 13, 2013 at 9:08 PM, Mark Biggers mbigg...@ine.commailto:mbigg...@ine.com wrote: The subject says it all. I am available on IRC -- see my signature, and Google chat. I can get no networking across a bridge working, for the ONE ebtables model. === edited out -- Jaime Melis Project Engineer OpenNebula - Flexible Enterprise Cloud Made Simple www.OpenNebula.orghttp://www.OpenNebula.org | jme...@opennebula.orgmailto:jme...@opennebula.org Script started on Wed Nov 20 16:27:05 2013 r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # netstat -nr Kernel IP routing table DestinationGatewayGenmaskFlagsMSS Window irtt Iface 0.0.0.0192.168.1.10.0.0.0UG 0 0 0 vbr0 67.139.46.149192.168.1.1255.255.255.255 UGH 0 0 0 vbr0 127.0.0.00.0.0.0255.255.255.0U 0 0 0 lo 127.0.0.00.0.0.0255.0.0.0U 0 0 0 lo 192.168.1.00.0.0.0255.255.255.0U 0 0 0 vbr0 r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # ip addr 1: lo: LOOPBACK,UP,LOWER_UP mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo 2: eth0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff 3: wlan0: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 6c:88:14:da:0b:44 brd ff:ff:ff:ff:ff:ff 4: ovs-system: BROADCAST,MULTICAST mtu 1500 qdisc noop state DOWN link/ether 0a:0e:fd:bb:5a:8a brd ff:ff:ff:ff:ff:ff 7: vbr0: BROADCAST,PROMISC,UP,LOWER_UP mtu 1500 qdisc noqueue state UNKNOWN link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff inet 192.168.1.250/24 scope global vbr0 12: vnet0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500 link/ether fe:00:0a:00:00:03 brd ff:ff:ff:ff:ff:ff 13: vnet1: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500 link/ether fe:00:0a:00:00:04 brd ff:ff:ff:ff:ff:ff r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # BRIDGE_DEV=vbr0 r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # sudo ovs-ofctl dump-desc $BRIDGE_DEV OFPST_DESC reply (xid=0x2): Manufacturer: Nicira, Inc. Hardware: Open vSwitch Software: 1.11.0 Serial Num: None DP Description: None r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # sudo ovs-vsctl show 001119d6-32d7-4db8-8015-229b271cca6a Bridge vbr0 Controller ptcp: fail_mode: standalone Port vnet0 tag: 0 Interface vnet0 Port vnet1 tag: 0 Interface vnet1 Port eth0 Interface eth0 Port vbr0 Interface vbr0 type: internal ovs_version: 1.11.0 r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # sudo ovs-ofctl show $BRIDGE_DEV OFPT_FEATURES_REPLY (xid=0x2): dpid:3c970eab0ade n_tables:254, n_buffers:256 capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP actions: OUTPUT SET_VLAN_VID SET_VLAN_PCP STRIP_VLAN SET_DL_SRC SET_DL_DST SET_NW_SRC SET_NW_DST SET_NW_TOS SET_TP_SRC SET_TP_DST ENQUEUE 1(eth0): addr:3c:97:0e:ab:0a:de config: 0 state: STP_FORWARD current: 1GB-FD COPPER AUTO_NEG advertised: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG supported: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG speed: 1000 Mbps now, 1000 Mbps max 2(vnet0): addr:fe:00:0a:00:00:03 config: 0 state: 0 current: 10MB-FD COPPER speed: 10 Mbps now, 0 Mbps max 3(vnet1): addr:fe:00:0a:00:00:04 config: 0 state: 0 current: 10MB-FD COPPER speed: 10 Mbps now, 0 Mbps max LOCAL(vbr0): addr:3c:97:0e:ab:0a:de config: 0 state: 0 speed: 0 Mbps now, 0 Mbps max OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0 r...@sealion.ine.corp:onemailto:r...@sealion.ine.corp:one # sudo ovs-ofctl dump-flows $BRIDGE_DEV NXST_FLOW reply (xid=0x4): cookie=0x0, duration=8382.092s, table=0, n_packets=4, n_bytes=240, idle_age=8381, priority=4,in_port=2,dl_src=02:00:0a:00:00:03 actions=NORMAL cookie=0x0,