OVS ARP responder

来源:互联网 发布:电脑软件制作教程 编辑:程序博客网 时间:2024/06/08 10:24

https://assafmuller.com/2014/05/21/ovs-arp-responder-theory-and-practice/



set -xip link del host1 &> /dev/nullip link del host2 &> /dev/nullip link del host3 &> /dev/nullip link del host1_rep &> /dev/nullip link del host2_rep  &> /dev/nullip link del host3_rep  &> /dev/nullip netns del host1_ns &> /dev/nullip netns del host2_ns &> /dev/nullip netns del host3_ns &> /dev/nullip netns add host1_nsip netns add host2_nsip netns add host3_nsovs-vsctl list-br | xargs -r -l ovs-vsctl del-brservice openvswitch restartovs-vsctl list-br | xargs -r -l ovs-vsctl del-brsleep 2ip link add host1 type veth peer name host1_repip link set host1 netns host1_nsip netns exec host1_ns ifconfig host1 192.168.0.2/24 upip netns exec host1_ns ip route add 8.9.10.0/24 via 192.168.0.1 dev host1ifconfig host1_rep 0 upip link add host2 type veth peer name host2_repip link set host2 netns host2_nsip netns exec host2_ns ifconfig host2 8.9.10.11/24 upifconfig host2_rep 0 upip link add host3 type veth peer name host3_repip link set host3 netns host3_nsip netns exec host3_ns ifconfig host3 upifconfig host3_rep 0 upovs-vsctl add-br OVSbr1ovs-vsctl add-port OVSbr1 host1_rep -- set Interface host1_rep ofport_request=2ovs-vsctl add-port OVSbr1 host2_rep -- set Interface host2_rep ofport_request=3MAC1=`ip netns exec host1_ns cat /sys/class/net/host1/address`MAC2=`ip netns exec host2_ns cat /sys/class/net/host2/address`# MAC1=24:8a:07:ad:77:01# MAC2=24:8a:07:ad:77:02ovs-ofctl add-flow OVSbr1 "table=0, in_port=2, dl_type=0x0806, nw_dst=192.168.0.1, actions=load:0x2->NXM_OF_ARP_OP[], move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[], mod_dl_src:24:8a:07:ad:77:99, move:NXM_NX_ARP_SHA[]->NXM_NX_ARP_THA[], move:NXM_OF_ARP_SPA[]->NXM_OF_ARP_TPA[], load:0x248a07ad7799->NXM_NX_ARP_SHA[], load:0xc0a80001->NXM_OF_ARP_SPA[], in_port"ovs-ofctl add-flow OVSbr1 "table=0, in_port=2, dl_dst=24:8a:07:ad:77:99, ip, nw_src=192.168.0.2, nw_dst=8.9.10.11, icmp, actions=mod_dl_src=24:8a:07:ad:77:99, mod_dl_dst=${MAC2}, mod_nw_src=8.9.10.1, output:3"ovs-ofctl add-flow OVSbr1 "table=0, in_port=3, dl_type=0x0806, nw_dst=8.9.10.1, actions=load:0x2->NXM_OF_ARP_OP[], move:NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[], mod_dl_src:24:8a:07:ad:77:99, move:NXM_NX_ARP_SHA[]->NXM_NX_ARP_THA[], move:NXM_OF_ARP_SPA[]->NXM_OF_ARP_TPA[], load:0x248a07ad7799->NXM_NX_ARP_SHA[], load:0x08090a01->NXM_OF_ARP_SPA[], in_port"ovs-ofctl add-flow OVSbr1 "table=0, in_port=3, dl_dst=24:8a:07:ad:77:99, dl_type=0x0800, nw_dst=8.9.10.1, actions=mod_dl_src=01:23:45:67:89:ab, mod_dl_dst=${MAC1}, mod_nw_dst=192.168.0.2, output:2"ovs-vsctl add-port OVSbr1 host3_rep    \    -- --id=@p get port host3_rep   \    -- --id=@m create mirror name=m0 select-all=true output-port=@p \    -- set bridge OVSbr1 mirrors=@mset +x


原创粉丝点击