Openvswtich.pptx

OpenvswitchPopsuperVirtual InfrastructureSoftware Defined NetworkCPU PoolStorage PoolOpenFlow Switch ComponentsOpenFlow Channel负责同Controller的交互Flow Table包含许多entry，每个entry是对packet进行处理的规则Group Table：处理更复杂的转发规则包含一系列Group Entry每个Entry包含一系列操作集合(action buckets)每个操作集合包含一系列action，以及参数Match packets:ingress portHeadersmetadataFlow entries match packets in priority order对packet处理:转发修改交给Group Table交给下个TableOpenFlow Packet ProcessingOpenFlow Packet ProcessingActions:Output: 转发Set-Queue: QoSDropGroupPush/Pop tagsOpenFlow Packet ProcessingActions:Output: 转发Set-Queue: QoSDropGroupPush/Pop tagsOpenvswitch简介Openvswitch是一个virutal swtich， 支持Open Flow协议，当然也有一些硬件Switch也支持Open Flow协议，他们都可以被统一的Controller管理，从而实现物理机和虚拟机的网络联通。Openvswitch简介Match Field涵盖TCP/IP协议各层：Layer 1 – Tunnel ID, In Port, QoS priority, skb markLayer 2 – MAC address, VLAN ID, Ethernet typeLayer 3 – IPv4/IPv6 fields, ARPLayer 4 – TCP/UDP, ICMP, NDAction也主要包含下面的操作：Output to port (port range, flood, mirror)Discard, Resubmit to table xPacket Mangling (Push/Pop VLAN header, TOS, ...)Send to controller, LearnOpenvswitch简介可以设置Tunnel可以支持下列的框架来监控流量。sFlowNetFlowPort MirroringSPANRSPANERSPAN支持QoSUses existing Traffic Control LayerPolicer (Ingress rate limiter)HTB, HFSC (Egress traffic classes)Controller (Open Flow) can select Traffic ClassOpenvswitch架构Openvswitch架构实验一：查看Openvswitch的架构root@popsuper1982:~# ps aux | grep openvswitchroot 985 0.0 0.0 21172 2120 ? S Aug06 1:20 ovsdb-server /etc/openvswitch/conf.db -vconsole:emer -vsyslog:err -vfile:info --remote=punix:/var/run/openvswitch/db.sock --private-key=db:Open_vSwitch,SSL,private_key --certificate=db:Open_vSwitch,SSL,certificate --bootstrap-ca-cert=db:Open_vSwitch,SSL,ca_cert --no-chdir --log-file=/var/log/openvswitch/ovsdb-server.log --pidfile=/var/run/openvswitch/ovsdb-server.pid --detach --monitorroot 1008 0.1 0.8 242948 31712 ? SLl Aug06 32:17 ovs-vswitchd unix:/var/run/openvswitch/db.sock -vconsole:emer -vsyslog:err -vfile:info --mlockall --no-