Hi Brady,
There was a typo error in service-function classifier, After fixing that
flows are getting installed in the classifier node openvswitch.
But now sfc_agent running in service node is not returning the packets.
Guess I need to apply patch https://git.opendaylight.org/gerrit/#/c/41530/7,
to enable sfc_agent to decode these packets.
"service-function-classifier": [ { "name": "Classifier1", ----- This should
have been "classifier1" "scl-service-function-forwarder": [ { "name":
"Classifier1", "interface": "veth-br" } ], "acl": { "name": "ACL1", "type":
"ietf-access-control-list:ipv4-acl" } },
Regards,
Swati
On Tue, Nov 8, 2016 at 9:16 PM, Swati Deshpande <[email protected]>
wrote:
> Thanks Brady for the quick response.
> Here is the dump of ACL and service classifiers.
>
> ACLS :
>
> { "access-lists": { "acl": [ { "acl-type": "ietf-access-control-list:ipv4
> -acl", "acl-name": "ACL2", "access-list-entries": { "ace": [ { "rule-name":
> "ACE2", "actions": { "service-function-acl:rendered-service-path":
> "SFP1-Path-19-Reverse" }, "matches": { "protocol": 6, "source-port-range":
> { "lower-port": 80 }, "destination-port-range": { "lower-port": 0 }, "
> destination-ipv4-network": "192.168.2.0/24", "source-ipv4-network": "
> 192.168.2.0/24" } } ] } }, { "acl-type": "ietf-access-control-list:ipv4
> -acl", "acl-name": "ACL1", "access-list-entries": { "ace": [ { "rule-name":
> "ACE1", "actions": { "service-function-acl:rendered-service-path":
> "SFP1-Path-19" }, "matches": { "protocol": 6, "source-port-range": { "
> lower-port": 0 }, "destination-port-range": { "lower-port": 80 }, "
> destination-ipv4-network": "192.168.2.0/24", "source-ipv4-network": "
> 192.168.2.0/24" } } ] } } ] } }
>
>
> service classifiers
>
> { "service-function-classifiers": { "service-function-classifier": [ { "
> name": "Classifier1", "scl-service-function-forwarder": [ { "name":
> "Classifier1", "interface": "veth-br" } ], "acl": { "name": "ACL1", "type":
> "ietf-access-control-list:ipv4-acl" } }, { "name": "Classifier2", "
> scl-service-function-forwarder": [ { "name": "Classifier2", "interface":
> "veth-br" } ], "acl": { "name": "ACL2", "type":
> "ietf-access-control-list:ipv4-acl" } } ] } }
>
> Regards,
> Swati
> On Tue, Nov 8, 2016 at 8:35 PM, Brady Allen Johnson <
> [email protected]> wrote:
>
>> Swati,
>>
>> Can you also dump the SFC classifier configuration. These REST commands
>> should do it:
>>
>> curl -H "Content-Type: application/json" -X GET --user admin:admin
>> http://localhost:8181/restconf/config/ietf-access-control-li
>> st:access-lists | python -m json.tool
>>
>> curl -H "Content-Type: application/json" -X GET --user admin:admin
>> http://localhost:8181/restconf/config/service-function-class
>> ifier:service-function-classifiers | python -m json.tool
>>
>> Just change localhost to the IP of where ODL is running if its not on the
>> same machine.
>>
>> Thanks,
>>
>> Brady
>>
>> On 08/11/16 15:55, Swati Deshpande wrote:
>>
>> Hi
>>
>> I am trying to get SFC-103 demo using stable/boron ODL, can't get packet
>> path to work. could you please help
>>
>> I am not using the automated demo.sh, instead manually setup all the
>> nodes as per the topology explained in README file.
>>
>> ovs is installed from (https://github.com/yyang13/ovs_nsh_patches.git)
>> on nodes classifier1, classifier2, SFF1 and SFF2.
>>
>> Configured service nodes, SF, SFF, SFC, SFP and RSP from SFC-GUI
>> ACL and service classifier configured using REST conf (apidoc/explorer ,
>> unable to configure using GUI, gives 404 error)
>>
>> ovswitch flow rules get installed correctly in SFF1 and SFF2.
>> however openvswitch flow rules are not getting installed in openvswitch
>> of classifier1 and classifier2 nodes.
>>
>> Could you please provide pointers to fig out why flows are not getting
>> setup in classifier1 and classifier2 nodes??
>>
>> Regards,
>> Swati
>>
>> Here is the config exported from SFC UI
>>
>> {
>> "service-functions": {
>> "service-function": [
>> {
>> "name": "dpi-1",
>> "sf-data-plane-locator": [
>> {
>> "name": "dpi1-dpl",
>> "ip": "172.16.9.42",
>> "port": 6633,
>> "service-function-forwarder": "SFF1",
>> "transport": "service-locator:vxlan-gpe"
>> }
>> ],
>> "nsh-aware": true,
>> "rest-uri": "http://172.16.9.42:5000";,
>> "ip-mgmt-address": "172.16.9.42",
>> "type": "service-function-type:dpi"
>> },
>> {
>> "name": "firewall-1",
>> "sf-data-plane-locator": [
>> {
>> "name": "firewall-1-dpl",
>> "ip": "172.16.9.43",
>> "port": 6633,
>> "service-function-forwarder": "SFF2",
>> "transport": "service-locator:vxlan-gpe"
>> }
>> ],
>> "nsh-aware": true,
>> "rest-uri": "http://172.16.9.43:5000";,
>> "ip-mgmt-address": "172.16.9.43",
>> "type": "service-function-type:firewall"
>> }
>> ]
>> }
>> };
>> {
>> "service-function-forwarders": {
>> "service-function-forwarder": [
>> {
>> "name": "classifier1",
>> "rest-uri": "http://www.example.com/sffs/sff-bootstrap";,
>> "ip-mgmt-address": "172.16.9.32",
>> "sff-data-plane-locator": [
>> {
>> "name": "sff0-dpl",
>> "service-function-forwarder-ovs:ovs-options": {
>> "nshc4": "flow",
>> "nshc3": "flow",
>> "nsi": "flow",
>> "nshc2": "flow",
>> "nshc1": "flow",
>> "key": "flow",
>> "remote-ip": "flow",
>> "dst-port": "6633",
>> "nsp": "flow"
>> },
>> "data-plane-locator": {
>> "transport": "service-locator:vxlan-gpe",
>> "ip": "172.16.9.32",
>> "port": 6633
>> },
>> "service-function-forwarder-ovs:ovs-bridge": {
>> "bridge-name": "br-sfc"
>> }
>> }
>> ],
>> "service-node": "classifier1",
>> "service-function-forwarder-ovs:ovs-bridge": {
>> "bridge-name": "br-sfc"
>> }
>> },
>> {
>> "name": "SFF2",
>> "service-function-dictionary": [
>> {
>> "name": "firewall-1",
>> "sff-sf-data-plane-locator": {
>> "sf-dpl-name": "firewall-1-dpl",
>> "sff-dpl-name": "sff1-dpl"
>> },
>> "failmode": "service-function-forwarder:open"
>> }
>> ],
>> "service-function-forwarder-ovs:ovs-bridge": {
>> "bridge-name": "br-sfc"
>> },
>> "rest-uri": "http://www.example.com/sffs/sff-bootstrap";,
>> "ip-mgmt-address": "172.16.9.23",
>> "sff-data-plane-locator": [
>> {
>> "name": "sff2-dpl",
>> "service-function-forwarder-ovs:ovs-options": {
>> "nshc4": "flow",
>> "nshc3": "flow",
>> "nsi": "flow",
>> "nshc2": "flow",
>> "nshc1": "flow",
>> "key": "flow",
>> "remote-ip": "flow",
>> "dst-port": "6633",
>> "nsp": "flow"
>> },
>> "data-plane-locator": {
>> "transport": "service-locator:vxlan-gpe",
>> "ip": "172.16.9.23",
>> "port": 6633
>> },
>> "service-function-forwarder-ovs:ovs-bridge": {
>> "bridge-name": "br-sfc"
>> }
>> }
>> ],
>> "service-node": "sff2"
>> },
>> {
>> "name": "SFF1",
>> "service-function-dictionary": [
>> {
>> "name": "dpi-1",
>> "sff-sf-data-plane-locator": {
>> "sf-dpl-name": "dpi1-dpl",
>> "sff-dpl-name": "sff1-dpl"
>> },
>> "failmode": "service-function-forwarder:open"
>> }
>> ],
>> "service-function-forwarder-ovs:ovs-bridge": {
>> "bridge-name": "br-sfc"
>> },
>> "rest-uri": "http://www.example.com/sffs/sff-bootstrap";,
>> "ip-mgmt-address": "172.16.9.22",
>> "sff-data-plane-locator": [
>> {
>> "name": "sff1-dpl",
>> "service-function-forwarder-ovs:ovs-options": {
>> "nshc4": "flow",
>> "nshc3": "flow",
>> "nsi": "flow",
>> "nshc2": "flow",
>> "nshc1": "flow",
>> "key": "flow",
>> "remote-ip": "flow",
>> "dst-port": "6633",
>> "nsp": "flow"
>> },
>> "data-plane-locator": {
>> "transport": "service-locator:vxlan-gpe",
>> "ip": "172.16.9.22",
>> "port": 6633
>> },
>> "service-function-forwarder-ovs:ovs-bridge": {
>> "bridge-name": "br-sfc"
>> }
>> }
>> ],
>> "service-node": "sff1"
>> },
>> {
>> "name": "classifier2",
>> "rest-uri": "http://www.example.com/sffs/sff-bootstrap";,
>> "ip-mgmt-address": "172.16.9.33",
>> "sff-data-plane-locator": [
>> {
>> "name": "sff3-dpl",
>> "service-function-forwarder-ovs:ovs-options": {
>> "nshc4": "flow",
>> "nshc3": "flow",
>> "nsi": "flow",
>> "nshc2": "flow",
>> "nshc1": "flow",
>> "key": "flow",
>> "remote-ip": "flow",
>> "dst-port": "6633",
>> "nsp": "flow"
>> },
>> "data-plane-locator": {
>> "transport": "service-locator:vxlan-gpe",
>> "ip": "172.16.9.33",
>> "port": 6633
>> },
>> "service-function-forwarder-ovs:ovs-bridge": {
>> "bridge-name": "br-sfc"
>> }
>> }
>> ],
>> "service-node": "classifier2",
>> "service-function-forwarder-ovs:ovs-bridge": {
>> "bridge-name": "br-sfc"
>> }
>> }
>> ]
>> }
>> };
>> {
>> "service-nodes": {
>> "service-node": [
>> {
>> "name": "sff2",
>> "ip-mgmt-address": "172.16.9.23"
>> },
>> {
>> "name": "sff1",
>> "ip-mgmt-address": "172.16.9.22"
>> },
>> {
>> "name": "sf2",
>> "ip-mgmt-address": "172.16.9.43"
>> },
>> {
>> "name": "sf1",
>> "ip-mgmt-address": "172.16.9.42"
>> },
>> {
>> "name": "classifier2",
>> "ip-mgmt-address": "172.16.9.33"
>> },
>> {
>> "name": "classifier1",
>> "ip-mgmt-address": "172.16.9.32"
>> }
>> ]
>> }
>> };
>> {
>> "service-function-chains": {
>> "service-function-chain": [
>> {
>> "name": "SFC1",
>> "sfc-service-function": [
>> {
>> "name": "dpi",
>> "order": 0,
>> "type": "service-function-type:dpi"
>> },
>> {
>> "name": "firewall",
>> "order": 1,
>> "type": "service-function-type:firewall"
>> }
>> ]
>> }
>> ]
>> }
>> };
>>
>>
>> RSP
>>
>> { "rendered-service-paths": { "rendered-service-path": [ { "name":
>> "SFP1-Path-19", "service-chain-name": "SFC1", "transport-type":
>> "service-locator:vxlan-gpe", "symmetric-path-id": 8388627, "
>> starting-index": 255, "path-id": 19, "parent-service-function-path":
>> "SFP1", "context-metadata": "NSH1", "rendered-service-path-hop": [ { "
>> hop-number": 0, "service-function-forwarder": "SFF1", "
>> service-function-forwarder-locator": "sff1-dpl", "service-index": 255, "
>> service-function-name": "dpi-1" }, { "hop-number": 1, "
>> service-function-forwarder": "SFF2", "service-function-forwarder-locator":
>> "sff2-dpl", "service-index": 254, "service-function-name": "firewall-1" }
>> ] }, { "name": "SFP1-Path-19-Reverse", "service-chain-name": "SFC1", "
>> transport-type": "service-locator:vxlan-gpe", "symmetric-path-id": 19, "
>> starting-index": 255, "path-id": 8388627, "parent-service-function-path":
>> "SFP1", "context-metadata": "NSH1", "rendered-service-path-hop": [ { "
>> hop-number": 0, "service-function-forwarder": "SFF2", "
>> service-function-forwarder-locator": "sff2-dpl", "service-index": 255, "
>> service-function-name": "firewall-1" }, { "hop-number": 1, "
>> service-function-forwarder": "SFF1", "service-function-forwarder-locator":
>> "sff1-dpl", "service-index": 254, "service-function-name": "dpi-1" } ] }
>> ] } }
>>
>>
>> _______________________________________________
>> sfc-dev mailing
>> [email protected]https://lists.opendaylight.org/mailman/listinfo/sfc-dev
>>
>>
>>
>
_______________________________________________
sfc-dev mailing list
[email protected]
https://lists.opendaylight.org/mailman/listinfo/sfc-dev
