[one-users] need to create Flows? for openvswitch-based ONE (4.2) setup -- (passed on ebtables)
Mark Biggers
mbiggers at ine.com
Wed Nov 20 14:08:16 PST 2013
Hello ONE team,
I have "passed" on the ebtables configuration for networking in 4.2 ONE. We'll need OpenVSwitch anyways to manage the VMs VLANS, so I have moved on.
I *think* I have an almost working OpenVSwitch configuration. Must I manually create "flows" for each VM/MAC-addr to enable IP traffic, across the OVS "vbridge" (vbr0), in this case?
The info on my new (OVS networking) setup, is included, at the end of this message. Thank you. (The platform is still openSUSE 12.3 on a Thinkpad W530...)
On 11/19/2013 05:43 AM, Jaime Melis wrote:
Hi Mark,
I have the feeling the NAT policies are interfering with this. Can you try without applying NAT rules?
On Wed, Nov 13, 2013 at 9:08 PM, Mark Biggers <mbiggers at ine.com<mailto:mbiggers at ine.com>> wrote:
The subject says it all. I am available on IRC -- see my signature, and Google chat.
I can get no "networking across a bridge" working, for the ONE "ebtables" model.
=============== edited out....
--
Jaime Melis
Project Engineer
OpenNebula - Flexible Enterprise Cloud Made Simple
www.OpenNebula.org<http://www.OpenNebula.org> | jmelis at opennebula.org<mailto:jmelis at opennebula.org>
Script started on Wed Nov 20 16:27:05 2013
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # netstat -nr
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 vbr0
67.139.46.149 192.168.1.1 255.255.255.255 UGH 0 0 0 vbr0
127.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 lo
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 vbr0
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff
3: wlan0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 6c:88:14:da:0b:44 brd ff:ff:ff:ff:ff:ff
4: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN
link/ether 0a:0e:fd:bb:5a:8a brd ff:ff:ff:ff:ff:ff
7: vbr0: <BROADCAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether 3c:97:0e:ab:0a:de brd ff:ff:ff:ff:ff:ff
inet 192.168.1.250/24 scope global vbr0
12: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500
link/ether fe:00:0a:00:00:03 brd ff:ff:ff:ff:ff:ff
13: vnet1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500
link/ether fe:00:0a:00:00:04 brd ff:ff:ff:ff:ff:ff
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # BRIDGE_DEV=vbr0
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # sudo ovs-ofctl dump-desc $BRIDGE_DEV
OFPST_DESC reply (xid=0x2):
Manufacturer: Nicira, Inc.
Hardware: Open vSwitch
Software: 1.11.0
Serial Num: None
DP Description: None
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # sudo ovs-vsctl show
001119d6-32d7-4db8-8015-229b271cca6a
Bridge "vbr0"
Controller "ptcp:"
fail_mode: standalone
Port "vnet0"
tag: 0
Interface "vnet0"
Port "vnet1"
tag: 0
Interface "vnet1"
Port "eth0"
Interface "eth0"
Port "vbr0"
Interface "vbr0"
type: internal
ovs_version: "1.11.0"
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # sudo ovs-ofctl show $BRIDGE_DEV
OFPT_FEATURES_REPLY (xid=0x2): dpid:00003c970eab0ade
n_tables:254, n_buffers:256
capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP
actions: OUTPUT SET_VLAN_VID SET_VLAN_PCP STRIP_VLAN SET_DL_SRC SET_DL_DST SET_NW_SRC SET_NW_DST SET_NW_TOS SET_TP_SRC SET_TP_DST ENQUEUE
1(eth0): addr:3c:97:0e:ab:0a:de
config: 0
state: STP_FORWARD
current: 1GB-FD COPPER AUTO_NEG
advertised: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG
supported: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-FD COPPER AUTO_NEG
speed: 1000 Mbps now, 1000 Mbps max
2(vnet0): addr:fe:00:0a:00:00:03
config: 0
state: 0
current: 10MB-FD COPPER
speed: 10 Mbps now, 0 Mbps max
3(vnet1): addr:fe:00:0a:00:00:04
config: 0
state: 0
current: 10MB-FD COPPER
speed: 10 Mbps now, 0 Mbps max
LOCAL(vbr0): addr:3c:97:0e:ab:0a:de
config: 0
state: 0
speed: 0 Mbps now, 0 Mbps max
OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # sudo ovs-ofctl dump-flows $BRIDGE_DEV
NXST_FLOW reply (xid=0x4):
cookie=0x0, duration=8382.092s, table=0, n_packets=4, n_bytes=240, idle_age=8381, priority=40000,in_port=2,dl_src=02:00:0a:00:00:03 actions=NORMAL
cookie=0x0, duration=6882.175s, table=0, n_packets=4, n_bytes=240, idle_age=6881, priority=40000,in_port=3,dl_src=02:00:0a:00:00:04 actions=NORMAL
cookie=0x0, duration=6882.159s, table=0, n_packets=0, n_bytes=0, idle_age=6882, priority=39000,in_port=3 actions=drop
cookie=0x0, duration=8382.072s, table=0, n_packets=0, n_bytes=0, idle_age=8382, priority=39000,in_port=2 actions=drop
cookie=0x0, duration=13024.731s, table=0, n_packets=157158, n_bytes=44610731, idle_age=0, priority=0 actions=NORMAL
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # sudo -u oneadmin onehost show 7
HOST 7 INFORMATION
ID : 7
NAME : sealion.ine.corp
CLUSTER : -
STATE : MONITORED
IM_MAD : kvm
VM_MAD : kvm
VN_MAD : ovswitch
LAST MONITORING TIME : 11/20 16:39:02
HOST SHARES
TOTAL MEM : 31G
USED MEM (REAL) : 1.6G
USED MEM (ALLOCATED) : 1.5G
TOTAL CPU : 800
USED CPU (REAL) : 7
USED CPU (ALLOCATED) : 200
RUNNING VMS : 2
MONITORING INFORMATION
ARCH="x86_64"
CPUSPEED="3000"
FREECPU="792.8"
FREEMEMORY="30893828"
HOSTNAME="sealion.ine.corp"
HYPERVISOR="kvm"
MODELNAME="Intel(R) Core(TM) i7-3940XM CPU @ 3.00GHz"
NETRX="0"
NETTX="0"
TOTALCPU="800"
TOTALMEMORY="32557228"
USEDCPU="7.2000000000000455"
USEDMEMORY="1663400"
VIRTUAL MACHINES
ID USER GROUP NAME STAT UCPU UMEM HOST TIME
42 oneadmin oneadmin vyatta-router 32mrunn 0 768M sealion.in 0d 16h48
43 oneadmin oneadmin vyatta-router-0 32mrunn 0 768M sealion.in 0d 16h48
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # sudo -u oneadmin onevm show 23
VIRTUAL MACHINE 23 INFORMATION
ID : 23
NAME : TTYLinux Now
USER : oneadmin
GROUP : oneadmin
STATE : DONE
LCM_STATE : LCM_INIT
RESCHED : No
START TIME : 11/12 14:03:54
END TIME : 11/12 14:08:22
DEPLOY ID : -
VIRTUAL MACHINE MONITORING
USED MEMORY : 0K
USED CPU : 0
NET_TX : 0K
NET_RX : 0K
PERMISSIONS
OWNER : um-
GROUP : ---
OTHER : ---
VM DISKS
ID TARGET IMAGE TYPE SAVE SAVE_AS
0 vda ttylinux-x64-img file NO -
VM NICS
ID NETWORK VLAN BRIDGE IP MAC
0 cloud yes br0 192.168.122.1 02:00:c0:a8:7a:01
fe80::400:c0ff:fea8:7a01
VIRTUAL MACHINE HISTORY
SEQ HOST ACTION REAS START TIME PROLOG
0 host01 none erro 11/12 14:04:00 0d 00h00m 0h00m01s
USER TEMPLATE
ERROR="Tue Nov 12 14:04:01 2013 : Error deploying virtual machine: Could not create domain from /var/lib/one//datastores/0/23/deployment.0"
VIRTUAL MACHINE TEMPLATE
CONTEXT=[
DISK_ID="1",
HOSTNAME="MAINHOST",
IMAGE_UNAME="oneadmin",
IP_GEN="192.168.122.23",
IP_PRIVATE="192.168.122.1",
TARGET="vdb" ]
CPU="0.3"
FEATURES=[
ACPI="no" ]
GRAPHICS=[
LISTEN="0.0.0.0",
PORT="5923",
TYPE="vnc" ]
MEMORY="128"
OS=[
ARCH="x86_64" ]
TEMPLATE_ID="21"
VMID="23"
root at sealion.ine.corp:one<mailto:root at sealion.ine.corp:one> # sudo -u oneadmin onevm show 24
VIRTUAL MACHINE 24 INFORMATION
ID : 24
NAME : TTYLinux Now
USER : oneadmin
GROUP : oneadmin
STATE : DONE
LCM_STATE : LCM_INIT
RESCHED : No
START TIME : 11/12 14:09:37
END TIME : 11/12 16:51:41
DEPLOY ID : one-24
VIRTUAL MACHINE MONITORING
USED MEMORY : 128M
USED CPU : 99
NET_TX : 0K
NET_RX : 0K
PERMISSIONS
OWNER : um-
GROUP : ---
OTHER : ---
VM DISKS
ID TARGET IMAGE TYPE SAVE SAVE_AS
0 vda ttylinux-x64-img file NO -
VM NICS
ID NETWORK VLAN BRIDGE IP MAC
0 cloud yes br0 192.168.122.1 02:00:c0:a8:7a:01
fe80::400:c0ff:fea8:7a01
VIRTUAL MACHINE HISTORY
SEQ HOST ACTION REAS START TIME PROLOG
0 host01 none erro 11/12 14:10:00 0d 00h00m 0h00m00s
1 host01 delete-recreate user 11/12 14:19:30 0d 02h21m 0h00m01s
2 host01 stop user 11/12 16:41:00 0d 00h06m 0h00m01s
USER TEMPLATE
ERROR="Tue Nov 12 14:10:01 2013 : Error deploying virtual machine: Could not create domain from /var/lib/one//datastores/0/24/deployment.0"
VIRTUAL MACHINE TEMPLATE a
CONTEXT=[
DISK_ID="1",
HOSTNAME="MAINHOST",
IMAGE_UNAME="oneadmin",
IP_GEN="192.168.122.24",
IP_PRIVATE="192.168.122.1",
TARGET="vdb" ]
CPU="0.3"
FEATURES=[
ACPI="no" ]
GRAPHICS=[
LISTEN="0.0.0.0",
PORT="5924",
TYPE="vnc" ]
MEMORY="128"
OS=[
ARCH="x86_64" ]
TEMPLATE_ID="22"
VMID="24"
oneadmin at sealion:~ > onevm list
ID USER GROUP NAME STAT UCPU UMEM HOST TIME
41 oneadmin oneadmin one-vr42 stop 1 768M 6d 00h24
42 oneadmin oneadmin vyatta-router runn 0 768M sealion.in 0d 16h48
43 oneadmin oneadmin vyatta-router-0 runn 0 768M sealion.in 0d 16h48
oneadmin at sealion:~ > onevnet show 9
VIRTUAL NETWORK 9 INFORMATION
ID : 9
NAME : ovsnet_0_0
USER : oneadmin
GROUP : oneadmin
CLUSTER : -
TYPE : RANGED
BRIDGE : vbr0
VLAN : Yes
VLAN ID : 0
USED LEASES : 3
PERMISSIONS
OWNER : um-
GROUP : ---
OTHER : ---
VIRTUAL NETWORK TEMPLATE
DNS="10.0.0.1"
GATEWAY="10.0.0.1"
NETWORK_ADDRESS="10.0.0.0/24"
NETWORK_MASK="255.255.255.0"
RANGE
IP_START : 10.0.0.1
IP_END : 10.0.0.254
USED LEASES
LEASE=[ MAC="02:00:0a:00:00:02", IP="10.0.0.2", IP6_LINK="fe80::400:aff:fe00:2", USED="1", VID="41" ]
LEASE=[ MAC="02:00:0a:00:00:03", IP="10.0.0.3", IP6_LINK="fe80::400:aff:fe00:3", USED="1", VID="42" ]
LEASE=[ MAC="02:00:0a:00:00:04", IP="10.0.0.4", IP6_LINK="fe80::400:aff:fe00:4", USED="1", VID="43" ]
VIRTUAL MACHINES
ID USER GROUP NAME STAT UCPU UMEM HOST TIME
41 oneadmin oneadmin one-vr42 stop 1 768M 6d 00h26
42 oneadmin oneadmin vyatta-router runn 0 768M sealion.in 0d 16h48
43 oneadmin oneadmin vyatta-router-0 runn 0 768M sealion.in 0d 16h48
oneadmin at sealion:~ > exit
exit
Script done on Wed 20 Nov 2013 04:59:17 PM EST
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20131120/01646c27/attachment-0002.htm>
More information about the Users
mailing list