Re: [openstack-dev] [neutron] Query about re-directing incoming traffic.

[Neil Jerram]

On 28/12/15 16:16, Vikram Choudhary wrote:
> Hi All,
>
> We want to redirect all / some specific incoming traffic to a
> particular neutron port, where a network function is deployed.
> [Network function could be DPI, IDS, Firewall, Classifier, etc]. In
> this regard, we have few queries:

Isn't that what SFC is?  (Service Function Chaining.)

Regards,
Neil

>
> 1. How we can achieve this?
>
> 2. Do we have well-defined NBI's for such use-case?
>
> Any thought / suggestion will be appreciated.
>
> Thanks
> Vikram


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [neutron] Query about re-directing incoming traffic.

[Kevin Benton]

>What are NBIs?

"North bound interfaces" - the term the SDN world has invented that just
means a high-level API for controlling network traffic.

The counter-part is the "south bound interface", which is the protocol(s)
the SDN controller uses to communicate with the network equipment (e.g.
OpenFlow, OVSDB, etc).

On Mon, Dec 28, 2015 at 9:50 AM, Jay Pipes  wrote:

> On 12/28/2015 11:13 AM, Vikram Choudhary wrote:
>
>> Hi All,
>>
>> We want to redirect all / some specific incoming traffic to a particular
>> neutron port, where a network function is deployed. [Network function
>> could be DPI, IDS, Firewall, Classifier, etc]. In this regard, we have
>> few queries:
>>
>> 1. How we can achieve this?
>>
>> 2. Do we have well-defined NBI's for such use-case?
>>
>
> What are NBIs?
>
> -jay
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 
Kevin Benton
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [neutron] Query about re-directing incoming traffic.

[Vikram Choudhary]

On Tue, Dec 29, 2015 at 3:08 PM, Neil Jerram 
wrote:

> On 28/12/15 16:16, Vikram Choudhary wrote:
> > Hi All,
> >
> > We want to redirect all / some specific incoming traffic to a
> > particular neutron port, where a network function is deployed.
> > [Network function could be DPI, IDS, Firewall, Classifier, etc]. In
> > this regard, we have few queries:
>
> Isn't that what SFC is?  (Service Function Chaining.)
>
Vikram: Kind-off. SFC chains neutron ports but our requirement is to route
all the incoming traffic to a particular VM port before it can take it's
normal forwarding logic. In other words neutron router got to steer the
traffic to a VM and then to it's normal forwarding behaviour.

An important use-case could be deploying a separate classifier at the
ingress which filters traffic and then route to respective service chains
depending upon some logic [May be SF-ID can be stamped in packet as part of
NSH header or by some other means.]


> Regards,
> Neil
>
> >
> > 1. How we can achtieve this?
> >
> > 2. Do we have well-defined NBI's for such use-case?
> >
> > Any thought / suggestion will be appreciated.
> >
> > Thanks
> > Vikram
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [neutron] Query about re-directing incoming traffic.

[Chandra Mohan Babu Nadiminti]

Have a look at extra-route extension.


http://developer.openstack.org/api-ref-networking-v2-ext.html#extraroute-ext


On Mon, Dec 28, 2015 at 9:10 AM, Vikram Choudhary  wrote:

>
>
> On Mon, Dec 28, 2015 at 10:20 PM, Jay Pipes  wrote:
>
>> On 12/28/2015 11:13 AM, Vikram Choudhary wrote:
>>
>>> Hi All,
>>>
>>> We want to redirect all / some specific incoming traffic to a particular
>>> neutron port, where a network function is deployed. [Network function
>>> could be DPI, IDS, Firewall, Classifier, etc]. In this regard, we have
>>> few queries:
>>>
>>> 1. How we can achieve this?
>>>
>>> 2. Do we have well-defined NBI's for such use-case?
>>>
>>
>> What are NBIs?
>>
> Vikram: Does neutron already support any API's for achieving this?
>
>
>> -jay
>>
>> __
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>


-- 
Regards
Chandra Mohan Babu Nadiminti
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [neutron] Query about re-directing incoming traffic.

[Vikram Choudhary]

On Tue, Dec 29, 2015 at 2:34 AM, Chandra Mohan Babu Nadiminti <
nadiminti.chan...@gmail.com> wrote:

> Have a look at extra-route extension.
>
>
> http://developer.openstack.org/api-ref-networking-v2-ext.html#extraroute-ext
>
Vikram: IIUC, extra-route can only re-direct the traffic to a specific
destination by installing an additional route in the routing table. What we
want is the traffic should also follow it's normal forwarding path after it
gets processed by the NF (network function).


> On Mon, Dec 28, 2015 at 9:10 AM, Vikram Choudhary 
> wrote:
>
>>
>>
>> On Mon, Dec 28, 2015 at 10:20 PM, Jay Pipes  wrote:
>>
>>> On 12/28/2015 11:13 AM, Vikram Choudhary wrote:
>>>
 Hi All,

 We want to redirect all / some specific incoming traffic to a particular
 neutron port, where a network function is deployed. [Network function
 could be DPI, IDS, Firewall, Classifier, etc]. In this regard, we have
 few queries:

 1. How we can achieve this?

 2. Do we have well-defined NBI's for such use-case?

>>>
>>> What are NBIs?
>>>
>> Vikram: Does neutron already support any API's for achieving this?
>>
>>
>>> -jay
>>>
>>>
>>> __
>>> OpenStack Development Mailing List (not for usage questions)
>>> Unsubscribe:
>>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>
>>
>>
>> __
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>>
>
>
> --
> Regards
> Chandra Mohan Babu Nadiminti
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [neutron] Query about re-directing incoming traffic.

[Vikram Choudhary]

On Mon, Dec 28, 2015 at 10:20 PM, Jay Pipes  wrote:

> On 12/28/2015 11:13 AM, Vikram Choudhary wrote:
>
>> Hi All,
>>
>> We want to redirect all / some specific incoming traffic to a particular
>> neutron port, where a network function is deployed. [Network function
>> could be DPI, IDS, Firewall, Classifier, etc]. In this regard, we have
>> few queries:
>>
>> 1. How we can achieve this?
>>
>> 2. Do we have well-defined NBI's for such use-case?
>>
>
> What are NBIs?
>
Vikram: Does neutron already support any API's for achieving this?


> -jay
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [neutron] Query about re-directing incoming traffic.

[Jay Pipes]

On 12/28/2015 11:13 AM, Vikram Choudhary wrote:

Hi All,

We want to redirect all / some specific incoming traffic to a particular
neutron port, where a network function is deployed. [Network function
could be DPI, IDS, Firewall, Classifier, etc]. In this regard, we have
few queries:

1. How we can achieve this?

2. Do we have well-defined NBI's for such use-case?


What are NBIs?

-jay

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev