Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Routing table
    - Check if the eth_dst = virtual gateway mac (fafe:00:00:00:00:0002). If not, go to switching table.
    - Allow packets with source VNI and src subnet and dest subnet connected via routers.
    - Change the VNI using the destination if packets are from different subnet, which is because all of flow rules in the switching table forward packets using VNI of destination VM.
Code Block
table=5,ip,tun_id=0x402,nw_src=10.10.0.0/24,dl_src=00:00:00:00:04:02,nw_dst=10.10.01.0/24, actions=set_field:0x4020x501->tun_id, action=goto_table:56
  • Switching table
    - Sets the destination MAC address according to the destination IP address.
    - It is required for routing, but we do not want to create another table only for the action.
    - We believe that the additional action would not degrade the overall performance.
    - However, if it does, it needs to moved to a separate routing table.

Code Block
table=57,ip,nw_dst=10.10.0.13 actions=set_field:fa:16:3e:b8:92:fe->eth_dst ,output:5
table=57,ip,nw_dst=10.10.0.10 actions=set_field:10.0.0.166->tun_dst,output:1

...

 

Code Block
titleJump Table
table=3,ip,eth_dst=fafe:00:00:00:00:0002,action=goto_table:54
table=3,ip,action=goto_table:7
Code Block
titleRouting Table
table=5,ip,tun_id=0x402,nw_src=10.10.0.0/24,nw_dst=10.10.01.0/24, action=set_field:0x402->tun_id, goto_table:56 (1)
table=5,ip,tun_id=0x501,nw_src=10.10.1.0/24,nw_dst=10.10.1.0/24, action=set_field:0x3f70x501->tun_id, goto_table:56 (2)
table=5,ip,tun_id=0x402,nw_src=10.10.0.0/24,nw_dst=10.10.1.0/24, action=set_field:0x4020x501->tun_id, goto_table:56 (3)
table=5,ip,tun_id=0x501,nw_src=10.10.1.0/24,nw_dst=10.10.0.0/24, action=set_field:0x3f70x402->tun_id, goto_table:56 (4)

Flow rules (1) & (2) are default routing rule for VMs within its subnet and set whenever a virtual network is created.
Flow rules (3) & (4) are the routing rules between subnets. NxN (N=# of subnets) rules are required.

...