Thanks Brady for the quick response.
Here is the dump of ACL and service classifiers.
ACLS :
{ "access-lists": { "acl": [ { "acl-type":
"ietf-access-control-list:ipv4-acl", "acl-name": "ACL2", "
access-list-entries": { "ace": [ { "rule-name": "ACE2", "actions": { "
service-function-acl:rendered-service-path": "SFP1-Path-19-Reverse" }, "
matches": { "protocol": 6, "source-port-range": { "lower-port": 80 }, "
destination-port-range": { "lower-port": 0 }, "destination-ipv4-network": "
192.168.2.0/24", "source-ipv4-network": "192.168.2.0/24" } } ] } }, { "
acl-type": "ietf-access-control-list:ipv4-acl", "acl-name": "ACL1", "
access-list-entries": { "ace": [ { "rule-name": "ACE1", "actions": { "
service-function-acl:rendered-service-path": "SFP1-Path-19" }, "matches": {
"protocol": 6, "source-port-range": { "lower-port": 0 }, "
destination-port-range": { "lower-port": 80 }, "destination-ipv4-network": "
192.168.2.0/24", "source-ipv4-network": "192.168.2.0/24" } } ] } } ] } }
service classifiers
{ "service-function-classifiers": { "service-function-classifier": [ { "name":
"Classifier1", "scl-service-function-forwarder": [ { "name": "Classifier1",
"interface": "veth-br" } ], "acl": { "name": "ACL1", "type":
"ietf-access-control-list:ipv4-acl" } }, { "name": "Classifier2", "
scl-service-function-forwarder": [ { "name": "Classifier2", "interface":
"veth-br" } ], "acl": { "name": "ACL2", "type":
"ietf-access-control-list:ipv4-acl" } } ] } }
Regards,
Swati
On Tue, Nov 8, 2016 at 8:35 PM, Brady Allen Johnson <
[email protected]> wrote:
> Swati,
>
> Can you also dump the SFC classifier configuration. These REST commands
> should do it:
>
> curl -H "Content-Type: application/json" -X GET --user admin:admin
> http://localhost:8181/restconf/config/ietf-access-
> control-list:access-lists | python -m json.tool
>
> curl -H "Content-Type: application/json" -X GET --user admin:admin
> http://localhost:8181/restconf/config/service-function-classifier:service-
> function-classifiers | python -m json.tool
>
> Just change localhost to the IP of where ODL is running if its not on the
> same machine.
>
> Thanks,
>
> Brady
>
> On 08/11/16 15:55, Swati Deshpande wrote:
>
> Hi
>
> I am trying to get SFC-103 demo using stable/boron ODL, can't get packet
> path to work. could you please help
>
> I am not using the automated demo.sh, instead manually setup all the
> nodes as per the topology explained in README file.
>
> ovs is installed from (https://github.com/yyang13/ovs_nsh_patches.git)
> on nodes classifier1, classifier2, SFF1 and SFF2.
>
> Configured service nodes, SF, SFF, SFC, SFP and RSP from SFC-GUI
> ACL and service classifier configured using REST conf (apidoc/explorer ,
> unable to configure using GUI, gives 404 error)
>
> ovswitch flow rules get installed correctly in SFF1 and SFF2.
> however openvswitch flow rules are not getting installed in openvswitch
> of classifier1 and classifier2 nodes.
>
> Could you please provide pointers to fig out why flows are not getting
> setup in classifier1 and classifier2 nodes??
>
> Regards,
> Swati
>
> Here is the config exported from SFC UI
>
> {
> "service-functions": {
> "service-function": [
> {
> "name": "dpi-1",
> "sf-data-plane-locator": [
> {
> "name": "dpi1-dpl",
> "ip": "172.16.9.42",
> "port": 6633,
> "service-function-forwarder": "SFF1",
> "transport": "service-locator:vxlan-gpe"
> }
> ],
> "nsh-aware": true,
> "rest-uri": "http://172.16.9.42:5000",
> "ip-mgmt-address": "172.16.9.42",
> "type": "service-function-type:dpi"
> },
> {
> "name": "firewall-1",
> "sf-data-plane-locator": [
> {
> "name": "firewall-1-dpl",
> "ip": "172.16.9.43",
> "port": 6633,
> "service-function-forwarder": "SFF2",
> "transport": "service-locator:vxlan-gpe"
> }
> ],
> "nsh-aware": true,
> "rest-uri": "http://172.16.9.43:5000",
> "ip-mgmt-address": "172.16.9.43",
> "type": "service-function-type:firewall"
> }
> ]
> }
> };
> {
> "service-function-forwarders": {
> "service-function-forwarder": [
> {
> "name": "classifier1",
> "rest-uri": "http://www.example.com/sffs/sff-bootstrap",
> "ip-mgmt-address": "172.16.9.32",
> "sff-data-plane-locator": [
> {
> "name": "sff0-dpl",
> "service-function-forwarder-ovs:ovs-options": {
> "nshc4": "flow",
> "nshc3": "flow",
> "nsi": "flow",
> "nshc2": "flow",
> "nshc1": "flow",
> "key": "flow",
> "remote-ip": "flow",
> "dst-port": "6633",
> "nsp": "flow"
> },
> "data-plane-locator": {
> "transport": "service-locator:vxlan-gpe",
> "ip": "172.16.9.32",
> "port": 6633
> },
> "service-function-forwarder-ovs:ovs-bridge": {
> "bridge-name": "br-sfc"
> }
> }
> ],
> "service-node": "classifier1",
> "service-function-forwarder-ovs:ovs-bridge": {
> "bridge-name": "br-sfc"
> }
> },
> {
> "name": "SFF2",
> "service-function-dictionary": [
> {
> "name": "firewall-1",
> "sff-sf-data-plane-locator": {
> "sf-dpl-name": "firewall-1-dpl",
> "sff-dpl-name": "sff1-dpl"
> },
> "failmode": "service-function-forwarder:open"
> }
> ],
> "service-function-forwarder-ovs:ovs-bridge": {
> "bridge-name": "br-sfc"
> },
> "rest-uri": "http://www.example.com/sffs/sff-bootstrap",
> "ip-mgmt-address": "172.16.9.23",
> "sff-data-plane-locator": [
> {
> "name": "sff2-dpl",
> "service-function-forwarder-ovs:ovs-options": {
> "nshc4": "flow",
> "nshc3": "flow",
> "nsi": "flow",
> "nshc2": "flow",
> "nshc1": "flow",
> "key": "flow",
> "remote-ip": "flow",
> "dst-port": "6633",
> "nsp": "flow"
> },
> "data-plane-locator": {
> "transport": "service-locator:vxlan-gpe",
> "ip": "172.16.9.23",
> "port": 6633
> },
> "service-function-forwarder-ovs:ovs-bridge": {
> "bridge-name": "br-sfc"
> }
> }
> ],
> "service-node": "sff2"
> },
> {
> "name": "SFF1",
> "service-function-dictionary": [
> {
> "name": "dpi-1",
> "sff-sf-data-plane-locator": {
> "sf-dpl-name": "dpi1-dpl",
> "sff-dpl-name": "sff1-dpl"
> },
> "failmode": "service-function-forwarder:open"
> }
> ],
> "service-function-forwarder-ovs:ovs-bridge": {
> "bridge-name": "br-sfc"
> },
> "rest-uri": "http://www.example.com/sffs/sff-bootstrap",
> "ip-mgmt-address": "172.16.9.22",
> "sff-data-plane-locator": [
> {
> "name": "sff1-dpl",
> "service-function-forwarder-ovs:ovs-options": {
> "nshc4": "flow",
> "nshc3": "flow",
> "nsi": "flow",
> "nshc2": "flow",
> "nshc1": "flow",
> "key": "flow",
> "remote-ip": "flow",
> "dst-port": "6633",
> "nsp": "flow"
> },
> "data-plane-locator": {
> "transport": "service-locator:vxlan-gpe",
> "ip": "172.16.9.22",
> "port": 6633
> },
> "service-function-forwarder-ovs:ovs-bridge": {
> "bridge-name": "br-sfc"
> }
> }
> ],
> "service-node": "sff1"
> },
> {
> "name": "classifier2",
> "rest-uri": "http://www.example.com/sffs/sff-bootstrap",
> "ip-mgmt-address": "172.16.9.33",
> "sff-data-plane-locator": [
> {
> "name": "sff3-dpl",
> "service-function-forwarder-ovs:ovs-options": {
> "nshc4": "flow",
> "nshc3": "flow",
> "nsi": "flow",
> "nshc2": "flow",
> "nshc1": "flow",
> "key": "flow",
> "remote-ip": "flow",
> "dst-port": "6633",
> "nsp": "flow"
> },
> "data-plane-locator": {
> "transport": "service-locator:vxlan-gpe",
> "ip": "172.16.9.33",
> "port": 6633
> },
> "service-function-forwarder-ovs:ovs-bridge": {
> "bridge-name": "br-sfc"
> }
> }
> ],
> "service-node": "classifier2",
> "service-function-forwarder-ovs:ovs-bridge": {
> "bridge-name": "br-sfc"
> }
> }
> ]
> }
> };
> {
> "service-nodes": {
> "service-node": [
> {
> "name": "sff2",
> "ip-mgmt-address": "172.16.9.23"
> },
> {
> "name": "sff1",
> "ip-mgmt-address": "172.16.9.22"
> },
> {
> "name": "sf2",
> "ip-mgmt-address": "172.16.9.43"
> },
> {
> "name": "sf1",
> "ip-mgmt-address": "172.16.9.42"
> },
> {
> "name": "classifier2",
> "ip-mgmt-address": "172.16.9.33"
> },
> {
> "name": "classifier1",
> "ip-mgmt-address": "172.16.9.32"
> }
> ]
> }
> };
> {
> "service-function-chains": {
> "service-function-chain": [
> {
> "name": "SFC1",
> "sfc-service-function": [
> {
> "name": "dpi",
> "order": 0,
> "type": "service-function-type:dpi"
> },
> {
> "name": "firewall",
> "order": 1,
> "type": "service-function-type:firewall"
> }
> ]
> }
> ]
> }
> };
>
>
> RSP
>
> { "rendered-service-paths": { "rendered-service-path": [ { "name":
> "SFP1-Path-19", "service-chain-name": "SFC1", "transport-type":
> "service-locator:vxlan-gpe", "symmetric-path-id": 8388627, "starting-index":
> 255, "path-id": 19, "parent-service-function-path": "SFP1", "
> context-metadata": "NSH1", "rendered-service-path-hop": [ { "hop-number":
> 0, "service-function-forwarder": "SFF1", "service-function-forwarder-
> locator": "sff1-dpl", "service-index": 255, "service-function-name":
> "dpi-1" }, { "hop-number": 1, "service-function-forwarder": "SFF2", "
> service-function-forwarder-locator": "sff2-dpl", "service-index": 254, "
> service-function-name": "firewall-1" } ] }, { "name":
> "SFP1-Path-19-Reverse", "service-chain-name": "SFC1", "transport-type":
> "service-locator:vxlan-gpe", "symmetric-path-id": 19, "starting-index":
> 255, "path-id": 8388627, "parent-service-function-path": "SFP1", "
> context-metadata": "NSH1", "rendered-service-path-hop": [ { "hop-number":
> 0, "service-function-forwarder": "SFF2", "service-function-forwarder-
> locator": "sff2-dpl", "service-index": 255, "service-function-name":
> "firewall-1" }, { "hop-number": 1, "service-function-forwarder": "SFF1", "
> service-function-forwarder-locator": "sff1-dpl", "service-index": 254, "
> service-function-name": "dpi-1" } ] } ] } }
>
>
> _______________________________________________
> sfc-dev mailing
> [email protected]https://lists.opendaylight.org/mailman/listinfo/sfc-dev
>
>
>
_______________________________________________
sfc-dev mailing list
[email protected]
https://lists.opendaylight.org/mailman/listinfo/sfc-dev