基于OpenFlow協議的分流聚合基礎應用筆記
作者：Pica8中國
本文從一對多實驗與Tap Aggregation實驗對OpenFlow進行實例分析。
實驗一: 一對多實驗
將1個10G端口的流量鏡像至5個端口的配置如下。同樣配置方法可應用于更多的端口。
注：Pica8交換機同時支持傳統的2-3層協議和OpenFlow協議，本實驗中交換機均配置為OpenFlow模式;
首先我們創建一個新的Bridge br0，并將端口1-6添加到br0;
# Add Bridge br0 - for PCAP Replication - 1st Port ############################## # te-1/1/1 is input te-1/1/2, te-1/1/3, te-1/1/4, te-1/1/5, te-1/1/6 are output #------------------------------------------------------------------------------------- $VSCTL add-br br0 -- set bridge br0 datapath_type=pica8 other-config=datapath-id=100 $VSCTL add-port br0 te-1/1/1 -- set interface te-1/1/1 type=pica8 $VSCTL add-port br0 te-1/1/2 -- set interface te-1/1/2 type=pica8 $VSCTL add-port br0 te-1/1/3 -- set interface te-1/1/3 type=pica8 $VSCTL add-port br0 te-1/1/4 -- set interface te-1/1/4 type=pica8 $VSCTL add-port br0 te-1/1/5 -- set interface te-1/1/5 type=pica8 $VSCTL add-port br0 te-1/1/6 -- set interface te-1/1/6 type=pica8
然后我們移除默認的流保證各端口按照新的指令工作;最后我們將鏡像流量出端口的ingress流量全部丟棄;
# Remove Default Flow (not treating this as HUB!) ovs-ofctl del-flows br0 # Add replication flow 1 -> 2,3,4,5,6 ovs-ofctl add-flow br0 in_port=1,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:2,3,4,5,6
最后我們將鏡像流量出端口的ingress流量全部丟棄;
# Drop ingress traffic from mirror ports ovs-ofctl add-flow br0 in_port=2,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop ovs-ofctl add-flow br0 in_port=3,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop ovs-ofctl add-flow br0 in_port=4,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop ovs-ofctl add-flow br0 in_port=5,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop ovs-ofctl add-flow br0 in_port=6,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop
實驗二：Tap Aggregation實驗
在實驗一的基礎上我們將四個端口的流量bridge到一起，并且mirror至其他端口;
idge br20 - for TAP Span - 1st Port ####################################################################################### # Bridged : te-1/1/21, te-1/1/22, te-1/1/23, te-1/1/24 # Output : te-1/1/25, te-1/1/26, te-1/1/27, te-1/1/28 #------------------------------------------------------------------------------------- $VSCTL add-br br20 -- set bridge br20 datapath_type=pica8 other-config=datapath-id=120 $VSCTL add-port br20 te-1/1/21 -- set interface te-1/1/21 type=pica8 $VSCTL add-port br20 te-1/1/22 -- set interface te-1/1/22 type=pica8 $VSCTL add-port br20 te-1/1/23 -- set interface te-1/1/23 type=pica8 $VSCTL add-port br20 te-1/1/24 -- set interface te-1/1/24 type=pica8 $VSCTL add-port br20 te-1/1/25 -- set interface te-1/1/25 type=pica8 $VSCTL add-port br20 te-1/1/26 -- set interface te-1/1/26 type=pica8 $VSCTL add-port br20 te-1/1/27 -- set interface te-1/1/27 type=pica8 $VSCTL add-port br20 te-1/1/28 -- set interface te-1/1/28 type=pica8 # Remove Default Flow (not treating this as HUB!) ovs-ofctl del-flows br20 # Add replication flow from each bridged port to each of the other ports in the group ovs-ofctl add-flow br20 in_port=21,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:22,23,24,25,26,27,28 ovs-ofctl add-flow br20 in_port=22,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:21,23,24,25,26,27,28 ovs-ofctl add-flow br20 in_port=23,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:21,22,24,25,26,27,28 ovs-ofctl add-flow br20 in_port=24,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:21,22,23,25,26,27,28 # Drop ingress traffic from mirror ports ovs-ofctl add-flow br20 in_port=25,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop ovs-ofctl add-flow br20 in_port=26,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop ovs-ofctl add-flow br20 in_port=27,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop ovs-ofctl add-flow br20 in_port=28,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop
責任編輯：林琳
來源：
新浪微博
