*** lihi has quit IRC | 01:27 | |
*** lihi has joined #openstack-dragonflow | 01:29 | |
*** diablo_rojo has joined #openstack-dragonflow | 01:46 | |
*** diablo_rojo has quit IRC | 01:48 | |
*** gongysh has joined #openstack-dragonflow | 03:20 | |
openstackgerrit | Merged openstack/dragonflow: Add missing requirements https://review.openstack.org/419814 | 05:46 |
---|---|---|
oanson | rajivk, ping | 06:25 |
rajivk | oanson, hi | 06:25 |
oanson | You mentioned you wanted to discuss VLAN aware VMs | 06:27 |
rajivk | yes, i am going thorough dragonflow code to know how vlans networking is implemented. So that i can map it to the requirement. | 06:29 |
rajivk | In neutron they are creating a trunk port and subports for each network trunk port belongs to. | 06:30 |
oanson | Yes | 06:30 |
rajivk | And tags are assigned for each port to distinguish among subports and later on they are stripped when packet lands in neutron network. | 06:31 |
oanson | Yes. And the vlan tag is used to identify in which network it lands | 06:31 |
rajivk | Now through dragonflow, how vlans are implemented? May be we can tag each port for different vlans | 06:32 |
rajivk | we don't have create subport like neutron. This is the way i am thinking. | 06:32 |
oanson | Yes. | 06:32 |
rajivk | But a complete understanding is missing. How to do it? what are the advantage and disadvanges etc. | 06:33 |
oanson | OVS/OpenFlow have fields to handle vlans | 06:33 |
rajivk | What are possible approaches? | 06:33 |
oanson | One sec, let me load the documentation so I get the field names right :) | 06:33 |
rajivk | I am looking into them your help will be valuable. | 06:33 |
oanson | MY thought is that in table 0, when the packet is received, we have classification flows. | 06:34 |
oanson | My* | 06:34 |
oanson | It sets the network and source port identifiers on the packet's metadata | 06:34 |
oanson | OVS/OpenFlow allows you to detect if vlan is used, and what's the tag. I think to detect a vlan tag, you use dl_vlan=<vlan tag> | 06:35 |
oanson | So you can add a flow like: vlan_tag=<vlang tag>,actions=pop_vlan,set_field:<network ID>->metadata,set_field:<subport ID>->reg6 | 06:36 |
rajivk | ok, i can tag multiple vlans and if match is found then forward normally. | 06:36 |
oanson | So you can add a flow like: vlan_tag=<vlang tag>,actions=pop_vlan,set_field:<network ID>->metadata,set_field:<subport ID>->reg6,goto_table(1) | 06:36 |
oanson | Yes | 06:36 |
rajivk | Currently only one tag is assigned and assigning multiple tags to the interface is enough. is my understanding correct? | 06:36 |
oanson | On the egress, you do the reverse. You detect (using REG7, which holds the destination port ID) what's the destination port, and tag it if needed | 06:37 |
oanson | rajivk, yes, I think so | 06:37 |
rajivk | How till it impact security groups, routers etc? these has to be identified. | 06:37 |
oanson | You will know exactly what sub-port you come from (detected in table 0) | 06:38 |
oanson | So port security will know what are the allowed macs/IP pairs | 06:38 |
oanson | Security groups app will know what are the applied security groups, and can implement them like every other port | 06:38 |
oanson | l2/l3 lookup is done using MACs and IPs, so that shouldn't be affected | 06:39 |
rajivk | You have done all my tasks. :) | 06:39 |
oanson | I think by mapping the packet to a new port, and treating subports as ports, the only change should be in the classifier and dispatcher | 06:39 |
oanson | rajivk, :). My predecessors designed the Dragonflow pipeline right. That's why it seems so easy :) | 06:40 |
rajivk | I think, i will require to add new db models for trunk ports as well and mappings? | 06:41 |
oanson | Yes. I'm guessing for trunk ports and subports. Or modify loigical ports to know which is a port with a vlan tag, and which is not | 06:41 |
oanson | But I have to verify I understand the Neutron objects to be sure | 06:42 |
rajivk | You mean we have to create subports in neutron as well? | 06:43 |
rajivk | neutron => dragonflow | 06:43 |
rajivk | neutron port-create --name S1 N1 --subport:parent_id <T-id> | 06:53 |
rajivk | --subport:vid 10 --subport:vid_type VLAN | 06:53 |
rajivk | for this command, may be we can add vlans to port only, don't create any port and add VLAN to port specified in parent_id(trunk port). | 06:55 |
openstackgerrit | Hong Hui Xiao proposed openstack/dragonflow: Small refactor of dnat app https://review.openstack.org/421698 | 06:58 |
*** gongysh has quit IRC | 07:00 | |
openstackgerrit | Hong Hui Xiao proposed openstack/dragonflow: Small refactor of dnat app https://review.openstack.org/421698 | 07:11 |
*** yuval has joined #openstack-dragonflow | 07:29 | |
oanson | rajivk, sorry I disappeared. Yes, that looks about right | 07:30 |
openstackgerrit | Merged openstack/dragonflow: Documentation fixes for DHCP app https://review.openstack.org/421466 | 07:39 |
openstackgerrit | Merged openstack/dragonflow: Remove test for obsolete l3_openflow_app https://review.openstack.org/421471 | 07:39 |
openstackgerrit | Merged openstack/dragonflow: Updated from global requirements https://review.openstack.org/420928 | 07:55 |
*** gongysh has joined #openstack-dragonflow | 08:14 | |
*** yamamoto has quit IRC | 08:17 | |
*** gongysh has quit IRC | 08:46 | |
*** yamamoto has joined #openstack-dragonflow | 09:07 | |
openstackgerrit | Yuli proposed openstack/dragonflow: Rename RyuNeighAdvertisementFilter class https://review.openstack.org/421315 | 09:11 |
*** yuval has quit IRC | 09:31 | |
*** yamamoto has quit IRC | 09:34 | |
*** yamamoto has joined #openstack-dragonflow | 09:36 | |
*** yamamoto has quit IRC | 09:39 | |
openstackgerrit | WangJian proposed openstack/dragonflow: Refactor port-status-update NB API https://review.openstack.org/396915 | 09:45 |
*** gongysh has joined #openstack-dragonflow | 09:46 | |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [7/8] Introduce initial version of the new DbStore https://review.openstack.org/417824 | 09:59 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [8/8] Refactor Chassis model https://review.openstack.org/407011 | 09:59 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [6/8] Proposition of model definition and construction https://review.openstack.org/414984 | 10:00 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [7/8] Introduce initial version of the new DbStore https://review.openstack.org/417824 | 10:00 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [8/8] Refactor Chassis model https://review.openstack.org/407011 | 10:00 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [1/8] Add namespace helper class https://review.openstack.org/417819 | 10:00 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [3/8] Add model-proxy helpers https://review.openstack.org/417821 | 10:00 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [2/8] Add basic framework for new DF models https://review.openstack.org/417820 | 10:00 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [5/8] Add CRUD methods for new models to NbAPI https://review.openstack.org/417823 | 10:00 |
openstackgerrit | Dima Kuznetsov proposed openstack/dragonflow: [4/8] Add custom field types for dragonflow models https://review.openstack.org/417822 | 10:00 |
*** gongysh has quit IRC | 10:11 | |
*** yamamoto has joined #openstack-dragonflow | 10:55 | |
*** yamamoto has quit IRC | 11:10 | |
openstackgerrit | WangJian proposed openstack/dragonflow: Refactor port-status-update NB API https://review.openstack.org/396915 | 11:58 |
*** gsagie has joined #openstack-dragonflow | 12:40 | |
*** gsagie has quit IRC | 13:31 | |
openstackgerrit | Hong Hui Xiao proposed openstack/dragonflow: Traceroute support https://review.openstack.org/421910 | 13:46 |
openstackgerrit | Yuli proposed openstack/dragonflow: [WIP] Rally private Gate Project https://review.openstack.org/421967 | 14:32 |
openstackgerrit | Yuli proposed openstack/dragonflow: [WIP] Rally Private Gate Project https://review.openstack.org/421967 | 14:33 |
*** gongysh has joined #openstack-dragonflow | 14:54 | |
*** rajivk has quit IRC | 14:55 | |
*** rajivk has joined #openstack-dragonflow | 15:09 | |
*** openstack has joined #openstack-dragonflow | 15:21 | |
*** lewo has joined #openstack-dragonflow | 15:22 | |
*** xiaohhui has joined #openstack-dragonflow | 15:25 | |
*** igordcard has quit IRC | 16:05 | |
*** igordcard has joined #openstack-dragonflow | 16:07 | |
*** gongysh has quit IRC | 16:23 | |
*** lihi has quit IRC | 23:24 | |
*** lihi has joined #openstack-dragonflow | 23:24 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!