由 dawei
《LINUX学习：基于 Open vSwitch 的 OpenFlow 亲测实践》要点：
本文介绍了LINUX学习：基于 Open vSwitch 的 OpenFlow 亲测实践，希望对您有用。如果有疑问，可以联系我们。
今天看到朋友保举的一篇IBM的文章
文章内容很好,如果我只是收藏起来,那就实在是太浪费,还是动手练习一次,好好补一下我的网络.还是用UnitedStack的UOS,创立一个虚拟机来完成全部的试验.
文章就一个小笔误,把ns2写成ns3.表面很多转载的文章,都没注明出处,搞的以为是原创.如果错误都一样,就有点不好意思.
和IBM的文档不一样的地方是：我使用的是Ubuntu 14.04,减少很多没需要的麻烦.
创立一个Ubuntu 14.04的最小配置虚拟机,ssh到虚拟机上.
查看Ubuntu版本
# lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 14.04.1 LTS Release: 14.04 Codename: trusty
OVS
Ubuntu 14.04的OVS版本,已经是2.02,所以默认安装就可以.不外不同的发行版,ovs的名字会有点不同.
apt-cache search openvswitch
开端安装
apt-get install openvswitch-switch
查看OVS运行环境
# ps -ea | grep ovs 3007 ? 00:00:00 ovsdb-server 3017 ? 00:00:00 ovs-vswitchd
查看OVS版本
# ovs-appctl --version ovs-appctl (Open vSwitch) 2.0.2 Compiled Aug 15 2014 14:31:01
查看 OVS 支持的 OpenFlow 协定的版本
# ovs-ofctl --version ovs-ofctl (Open vSwitch) 2.0.2 Compiled Aug 15 2014 14:31:02 OpenFlow versions 0x1:0x4
OpenFlow 命令
创立一个OVS交换机
ovs-vsctl add-br ovs-switch
创立一个端口 p0,设置端口 p0 的 OpenFlow 端口编号为 100
ovs-vsctl add-port ovs-switch p0 -- set Interface p0 ofport_request=100
设置网络接口装备类型为”internal”,
ovs-vsctl set Interface p0 type=internal
查看设置成果
# ethtool -i p0 driver: openvswitch version: firmware-version: bus-info: supports-statistics: no supports-test: no supports-eeprom-access: no supports-register-dump: no supports-priv-flags: no
创建一个name space：ns0,把p0端口接入到ns0里,而且配置ip地址 192.168.1.100/24
ip netns add ns0 ip link set p0 netns ns0 ip netns exec ns0 ip addr add 192.168.1.100/24 dev p0 ip netns exec ns0 ifconfig p0 promisc up
查看创建成果
# ovs-vsctl show
6507c214-0c7a-4159-9813-977074f73aa1
Bridge ovs-switch
Port "p0"
Interface "p0"
type: internal
Port ovs-switch
Interface ovs-switch
type: internal
ovs_version: "2.0.2"
重复步调,创建p1和p2端口
ovs-vsctl add-port ovs-switch p1 -- set Interface p1 ofport_request=101 ovs-vsctl set Interface p1 type=internal ip netns add ns1 ip link set p1 netns ns1 ip netns exec ns1 ip addr add 192.168.1.101/24 dev p1 ip netns exec ns1 ifconfig p1 promisc up
查看创建成果
# ovs-vsctl show
6507c214-0c7a-4159-9813-977074f73aa1
Bridge ovs-switch
Port "p1"
Interface "p1"
type: internal
Port "p0"
Interface "p0"
type: internal
Port ovs-switch
Interface ovs-switch
type: internal
ovs_version: "2.0.2"
创立p2
ovs-vsctl add-port ovs-switch p2 -- set Interface p2 ofport_request=102 ovs-vsctl set Interface p2 type=internal ip netns add ns2 ip link set p2 netns ns2 ip netns exec ns2 ip addr add 192.168.1.102/24 dev p2 ip netns exec ns2 ifconfig p2 promisc up
查看
# ovs-vsctl show
6507c214-0c7a-4159-9813-977074f73aa1
Bridge ovs-switch
Port "p1"
Interface "p1"
type: internal
Port "p2"
Interface "p2"
type: internal
Port "p0"
Interface "p0"
type: internal
Port ovs-switch
Interface ovs-switch
type: internal
ovs_version: "2.0.2"
查看创立的交换机信息,获得dpid,端口openflow端口编号
# ovs-ofctl show ovs-switch
OFPT_FEATURES_REPLY (xid=0x2): dpid:0000d23b94ce4146
n_tables:254,n_buffers:256
capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP
actions: OUTPUT SET_VLAN_VID SET_VLAN_PCP STRIP_VLAN
SET_DL_SRC SET_DL_DST SET_NW_SRC SET_NW_
DST SET_NW_TOS SET_TP_SRC SET_TP_DST ENQUEUE
100(p0): addr:00:00:00:00:00:00
config: PORT_DOWN
state: LINK_DOWN
speed: 0 Mbps now,0 Mbps max
101(p1): addr:00:00:00:00:00:00
config: PORT_DOWN
state: LINK_DOWN
speed: 0 Mbps now,0 Mbps max
102(p2): addr:00:00:00:00:00:00
config: PORT_DOWN
state: LINK_DOWN
speed: 0 Mbps now,0 Mbps max
LOCAL(ovs-switch): addr:2a:be:0c:72:40:45
config: PORT_DOWN
state: LINK_DOWN
speed: 0 Mbps now,0 Mbps max
OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0
获取openflow端口编号
# ovs-vsctl get Interface p0 ofport 100 # ovs-vsctl get Interface p1 ofport 101 # ovs-vsctl get Interface p2 ofport 102
查看 datapath 的信息
# ovs-dpctl show
system@ovs-system:
lookups: hit:34 missed:21 lost:0
flows: 0
port 0: ovs-system (internal)
port 1: ovs-switch (internal)
port 2: p0 (internal)
port 3: p1 (internal)
port 4: p2 (internal)
查看mac地址
ip netns exec ns0 ping 192.168.1.100 ip netns exec ns0 ping 192.168.1.101 ip netns exec ns0 ping 192.168.1.102
然后运行
# ovs-appctl fdb/show ovs-switch port VLAN MAC Age 102 0 22:8e:52:36:92:25 17 100 0 d6:0f:7e:ed:11:e4 4 101 0 f2:0d:06:ff:79:d7 4
查看互换机所有table
ovs-ofctl dump-tables ovs-switch
查看互换机中的所有流表项
ovsofctl dumpflows ovs-switch
删除编号为 100 的端口上的所有流表项
ovs-ofctl del-flows ovs-switch "in_port=100"
查看互换机端口信息
ovs-ofctl show ovs-switch
改动数据包
屏蔽所有进入 OVS 的以太网广播数据包
$ ovs-ofctl add-flow ovs-switch "table=0,dl_src=01:00:00:00:00:00/01:00:00:00:00:00,actions=drop"
屏障 STP 协议的广播数据包
$ ovs-ofctl add-flow ovs-switch "table=0,dl_dst=01:80:c2:00:00:00/ff:ff:ff:ff:ff:f0,actions=drop"
改动数据包,添加新的 OpenFlow 条目,改动从端口 p0 收到的数据包的源地址为 9.181.137.1
ovs-ofctl add-flow ovs-switch "priority=1 idle_timeout=0,\
in_port=100,actions=mod_nw_src:9.181.137.1,normal"
从端口 p0(192.168.1.100)发送测试数据到端口 p1(192.168.1.101),便是没啥响应
# ip netns exec ns0 ping 192.168.1.101 PING 192.168.1.101 (192.168.1.101) 56(84) bytes of data.
再打开一个ssh终端,登录进去,运行tcpdump,必要等待几分钟,才能看到响应
~# ip netns exec ns1 tcpdump -i p1 icmp tcpdump: verbose output suppressed,use -v or -vv for full protocol decode listening on p1,link-type EN10MB (Ethernet),capture size 65535 bytes 06:21:23.802308 IP 9.181.137.1 > 192.168.1.101: ICMP echo request,id 4533,seq 19,length 64 06:21:24.802358 IP 9.181.137.1 > 192.168.1.101: ICMP echo request,seq 20,length 64
重定向数据包
添加新的 OpenFlow 条款,重定向所有的 ICMP 数据包到端口 p2
ovs-ofctl add-flow ovs-switch idle_timeout=0,dl_type=0x0800,nw_proto=1,actions=output:102
从端口 p0 (192.168.1.100)发送数据到端口 p1(192.168.1.101)
ip netns exec ns0 ping 192.168.1.101
这个时刻你从p2里,可以看到
# ip netns exec ns2 tcpdump -i p2 icmp tcpdump: verbose output suppressed,use -v or -vv for full protocol decode listening on p2,capture size 65535 bytes 06:25:38.252471 IP 192.168.1.100 > 192.168.1.101: ICMP echo request,id 4668,seq 35,length 64 06:25:39.260438 IP 192.168.1.100 > 192.168.1.101: ICMP echo request,seq 36,length 64 06:25:40.268419 IP 192.168.1.100 > 192.168.1.101: ICMP echo request,seq 37,length 64
改动vlan tag
改动端口 p1 的 VLAN tag 为 101,使端口 p1 成为一个隶属于 VLAN 101 的端口
ovs-vsctl set Port p1 tag=101