Southbound DB 里面有如下几张表:
- Chassis:chassis这个概念, Chassis 是 OVN 新增的概念,OVS 里面没有这个概念。 chassis表的每一行表示一个 HV 或者 VTEP 网关,由 ovn-controller/ovn-controller-vtep 填写,包含 chassis 的名字和 chassis 支持的封装的配置(指向表 Encap),如果 chassis 是 VTEP 网关,VTEP 网关上和 OVN 关联的逻辑交换机也保存在这张表里。
- Encap:保存着 tunnel 的类型和 tunnel endpoint IP 地址。
- Logical_Flow:每一行表示一个逻辑的流表,这张表是 ovn-northd 根据 Nourthbound DB 里面二三层拓扑信息和 ACL 信息转换而来的,ovn-controller 把这个表里面的流表转换成 OVS 流表,配到 HV 上的 OVS table。流表主要包含匹配的规则,匹配的方向,优先级,table ID 和执行的动作。
- Multicast_Group:每一行代表一个组播组,组播报文和广播报文的转发由这张表决定,它保存了组播组所属的 datapath,组播组包含的端口,还有代表 logical egress port 的 tunnel_key。
- Datapath_Binding:每一行代表一个 datapath 和物理网络的绑定关系,每个 logical switch 和 logical router 对应一行。它主要保存了 OVN 给 datapath 分配的代表 logical datapath identifier 的 tunnel_key。
- Port_Binding:这张表主要用来确定 logical port 处在哪个 chassis 上面。每一行包含的内容主要有 logical port 的 MAC 和 IP 地址,端口类型,端口属于哪个 datapath binding,代表 logical input/output port identifier 的 tunnel_key, 以及端口处在哪个 chassis。端口所处的 chassis 由 ovn-controller/ovn-controller 设置,其余的值由 ovn-northd 设置。
表 Chassis 和表 Encap 包含的是物理网络的数据,表 Logical_Flow 和表 Multicast_Group包含的是逻辑网络的数据,表 Datapath_Binding 和表 Port_Binding 包含的是逻辑网络和物理网络绑定关系的数据。
[root@controller ~]# ovn-sbctl list SB_Global _uuid : bbfd63e9-4a47-4682-a54e-3a041747abf5 connections : [823ad4ee-4d55-4747-97c5-bcef72f521d4] external_ids : {} nb_cfg : 0 ssl : [] -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list Chassis _uuid : 2d99349e-03cc-4ecc-a84d-7c6a11b36c9b encaps : [9b35811c-b191-4c11-88a8-32b769f6f820, aeac832e-c477-4417-8172-567f8ba324ab] external_ids : {datapath-type=system, iface-types="geneve,gre,internal,lisp,patch,stt,system,tap,vxlan", ovn-bridge-mappings="public:br-ex"} hostname : controller name : "5a3a040f-0131-4693-8c9d-74397db9a534" nb_cfg : 0 vtep_logical_switches: [] _uuid : 4c55966e-c73f-4c33-a32d-b2ffc4d05395 encaps : [9701a8c6-6d5e-41ce-a783-2e75f5f85f19, 9f3ee6b5-a664-48bd-a9c9-fef405] external_ids : {datapath-type=system, iface-types="geneve,gre,internal,lisp,patch,stt,system,tap,vxlan", ovn-bridge-mappings="public:br-ex"} hostname : compute name : "90d6bd9c-dcce-48d3-91d2-75dbe832f4a4" nb_cfg : 0 vtep_logical_switches: [] -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list Encap _uuid : 9b35811c-b191-4c11-88a8-32b769f6f820 ip : "192.168.200.68" options : {csum="true"} type : vxlan _uuid : 9f3ee6b5-a664-48bd-a9c9-fef405 ip : "192.168.200.69" options : {csum="true"} type : geneve _uuid : aeac832e-c477-4417-8172-567f8ba324ab ip : "192.168.200.68" options : {csum="true"} type : geneve _uuid : 9701a8c6-6d5e-41ce-a783-2e75f5f85f19 ip : "192.168.200.69" options : {csum="true"} type : vxlan ------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list Multicast_Group _uuid : c-999c-4f5d-a8d4-afbb datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 name : _MC_unknown ports : [8d73479e-1ad8-4762-9f32-f01f3] tunnel_key : 65534 _uuid : 7694a9fe-878d-4a6b-8d0d-3288ea3b5ef7 datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 name : _MC_flood ports : [0d54dd37-9636-4a48-98a1-c6e6f53dc781, 1ec53d13-8dfc-4af3-a619-979d9d4afc48, d3879b99-1fae-4d38-bb41-934cd86bea08] tunnel_key : 65535 _uuid : 9b52883b-86af-4b81-a3eb-c1196cf01961 datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 name : _MC_flood ports : [5616ec8b-b2c3-43cb-9846-cdbfd3, 8d73479e-1ad8-4762-9f32-f01f3, bd-db4d-4e73-a5e1-e9958f626b7c, cc-64ee-4847-bfa7-9bec7f2950cb] tunnel_key : 65535 --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list Datapath_Binding _uuid : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 external_ids : {logical-switch="e7347be1-3ebc-4a42-928e-4a6fb0474ec6", name="neutron-ae-c2f0-41f2-a6ad-617d062b86be"} tunnel_key : 1 _uuid : b949c4b7-fbaa-4444-8be6-182a276a9331 external_ids : {logical-switch="97f6a204-0e7f-4cc2-ae96-9249f29a232b", name="neutron-0-b908-4122-9f86-bcbc78"} tunnel_key : 2 -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list Port_Binding _uuid : cc-64ee-4847-bfa7-9bec7f2950cb chassis : 2d99349e-03cc-4ecc-a84d-7c6a11b36c9b datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 logical_port : "9c2c1945-0d3d-48a5-b2d9-d003fe" mac : ["fa:16:3e:a4:14:5d 192.168.200.135"] options : {} parent_port : [] tag : [] tunnel_key : 2 type : "" _uuid : bd-db4d-4e73-a5e1-e9958f626b7c chassis : [] datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 logical_port : "0c80bccb-84ee-4aae-a87d-5aacf1d49df5" mac : ["fa:16:3e:e6:68:b0 192.168.200.140"] options : {} parent_port : [] tag : [] tunnel_key : 3 type : "" _uuid : d3879b99-1fae-4d38-bb41-934cd86bea08 chassis : 4c55966e-c73f-4c33-a32d-b2ffc4d05395 datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 logical_port : "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" mac : ["fa:16:3e:14:ba:56 11.0.0.3"] options : {} parent_port : [] tag : [] tunnel_key : 2 type : "" _uuid : 8d73479e-1ad8-4762-9f32-f01f3 chassis : [] datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 logical_port : "provnet-0-b908-4122-9f86-bcbc78" mac : [unknown] options : {network_name=public} parent_port : [] tag : [] tunnel_key : 1 type : localnet _uuid : 1ec53d13-8dfc-4af3-a619-979d9d4afc48 chassis : 4c55966e-c73f-4c33-a32d-b2ffc4d05395 datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 logical_port : "e97d6b05-987d-4e62-a590-7accc480cf97" mac : ["fa:16:3e:7a:c5:16 11.0.0.5"] options : {} parent_port : [] tag : [] tunnel_key : 1 type : "" _uuid : 5616ec8b-b2c3-43cb-9846-cdbfd3 chassis : [] datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 logical_port : "7b4a2a12-618b-4e56-958e-6cf90ae78623" mac : ["fa:16:3e:d9:85:46 192.168.200.136"] options : {} parent_port : [] tag : [] tunnel_key : 4 type : "" _uuid : 0d54dd37-9636-4a48-98a1-c6e6f53dc781 chassis : 2d99349e-03cc-4ecc-a84d-7c6a11b36c9b datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 logical_port : "23b099a8-5949-40ce-a1bc-c2675a4eaf4c" mac : ["fa:16:3e:cb:75:9d 11.0.0.1"] options : {} parent_port : [] tag : [] tunnel_key : 3 type : "" ------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list MAC_Binding ------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list Address_Set _uuid : 8e9067ac-297b-454f-bab0-e75efa1f3275 addresses : [] name : "as_ip6_cb9182b1_96bf_4ae9_bcd9_a2a9347ea0da" _uuid : 4d4840ac-637f-4ea5-87e8-ae01c8a77f16 addresses : ["11.0.0.3", "11.0.0.5"] name : "as_ip4_8cb690a4_472a_4cd7_8394_edf0e8926df6" _uuid : b00dd608-fb53-49f5-9f67-2b3dd4 addresses : [] name : "as_ip6_8cb690a4_472a_4cd7_8394_edf0e8926df6" _uuid : 3d614b25-46fa-4d6c-9865-0d73e8a0e3d1 addresses : [] name : "as_ip4_cb9182b1_96bf_4ae9_bcd9_a2a9347ea0da" ------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list Connection _uuid : 823ad4ee-4d55-4747-97c5-bcef72f521d4 external_ids : {} inactivity_probe : [] is_connected : true max_backoff : [] other_config : {} read_only : false status : {bound_port="6642", n_connections="13", sec_since_connect="0", sec_since_disconnect="0"} target : "ptcp:6642:192.168.200.68" ------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list SSL ------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list DHCP_Options _uuid : f961e980-0bce-4f61-843b-d51eb28dfc11 code : 1 name : netmask type : "ipv4" _uuid : 95076dd0-13e5-4cad-b180-18bcb9266db9 code : 32 name : router_solicitation type : "ipv4" _uuid : 97dfc801-5209-451b-a880-83635dbbd2d4 code : 249 name : ms_classless_static_route type : static_routes _uuid : 26effa41-ebb8-4e8b-ba4e-b899ea8968d9 code : 3 name : router type : "ipv4" _uuid : 3af19b81-e28f-412c-a90e-80c6559af670 code : 21 name : policy_filter type : "ipv4" _uuid : 20b83581-7442-4724-b243-041aa3a236a5 code : 0 name : offerip type : "ipv4" _uuid : b1a11d92-7e46-449a-885b-1b092ecaa721 code : 41 name : nis_server type : "ipv4" _uuid : e56c8133-b041-4cf2-b7ba-92b3a3c7260e code : 42 name : ntp_server type : "ipv4" _uuid : -971d-456f-94ba-79cbd3270cf2 code : 31 name : router_discovery type : bool _uuid : 74fa2ae6-44f8-4f06-b067-7543d4254bb4 code : 26 name : mtu type : "uint16" _uuid : ff66dbf6-e781-4e47-b617-6c6e3c85a26b code : 54 name : server_id type : "ipv4" _uuid : e7ce4bb9-5a14-41be-99ec-e3da85 code : 37 name : tcp_ttl type : "uint8" _uuid : 081e40ba-c51a-4172-8830-42c9ab92c886 code : 51 name : lease_time type : "uint32" _uuid : c201fc2b-ea7a-456b-bca3-984df code : 59 name : "T2" type : "uint32" _uuid : 587f0e8b-5b8a-4c70-a1d1-af20d1 code : 7 name : log_server type : "ipv4" _uuid : a245a97c-6178-449b-9e5d-f1d code : 66 name : tftp_server type : "ipv4" _uuid : f89cd3fc-171b-42b6-9e99-bd861c98ca03 code : 36 name : ethernet_encap type : bool _uuid : 7e44239d-a487-4f0f-a83d-b010a4b4c980 code : 9 name : lpr_server type : "ipv4" _uuid : 1061f4dd-6ad6-475f-b191-f6720 code : 6 name : dns_server type : "ipv4" _uuid : fb93892e-3d8c-4b40-a4e0-6476fd0a434b code : 16 name : swap_server type : "ipv4" _uuid : ef442dee-6d9d-49cf-96c9-c71e9be7acfc code : 19 name : ip_forward_enable type : bool _uuid : 53b8044e-003a-4c5a-86e0-2cbf0ec2dc34 code : 23 name : default_ttl type : "uint8" _uuid : 5f53bd6e-7465-4684-8c8c-a12aabf76925 code : 121 name : classless_static_route type : static_routes _uuid : 9d27ffef-ce6f-4832-93a9-12fb0e code : 58 name : "T1" type : "uint32" ------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl list DHCPv6_Options _uuid : f-5d83-4c7c-9994-a0b474 code : 5 name : ia_addr type : "ipv6" _uuid : 2a9cde30-e91e-4ca9-b793-6030e3354d99 code : 2 name : server_id type : mac _uuid : -b450-4c11-8a21-f1f078895d41 code : 23 name : dns_server type : "ipv6" _uuid : 14f501f3-37f6-4b06-bdd0-bbee39807dc6 code : 24 name : domain_search type : str ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- [root@controller ~]# ovn-sbctl lflow-list (逻辑流表项154个) 逻辑流表是集中式的,是根据逻辑拓扑转换而来的流表,这个转换细节我们没去看,但是逻辑还是很清晰的,就是根据我们针对逻辑拓扑的配置,来确定哪些报文发送到哪里。而比较困难的就是这些逻辑流表怎么能转换到各个宿主机,每个宿主机都是不一样的流表。 来自 Datapath: "neutron-ae-c2f0-41f2-a6ad-617d062b86be" (8e39dea3-a81a-4c3b-afd4-1f990cab2029) Pipeline: ingress table=0 (ls_in_port_sec_l2 ), priority=100 , match=(eth.src[40]), action=(drop;) table=0 (ls_in_port_sec_l2 ), priority=100 , match=(vlan.present), action=(drop;) table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "23b099a8-5949-40ce-a1bc-c2675a4eaf4c"), action=(next;) table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == {fa:16:3e:14:ba:56}), action=(next;) table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == {fa:16:3e:7a:c5:16}), action=(next;) table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == fa:16:3e:14:ba:56 && ip4.src == 0.0.0.0 && ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67), action=(next;) table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == fa:16:3e:14:ba:56 && ip4.src == {11.0.0.3}), action=(next;) table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == fa:16:3e:7a:c5:16 && ip4.src == 0.0.0.0 && ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67), action=(next;) table=1 (ls_in_port_sec_ip ), priority=90 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == fa:16:3e:7a:c5:16 && ip4.src == {11.0.0.5}), action=(next;) table=1 (ls_in_port_sec_ip ), priority=80 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == fa:16:3e:14:ba:56 && ip), action=(drop;) table=1 (ls_in_port_sec_ip ), priority=80 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == fa:16:3e:7a:c5:16 && ip), action=(drop;) table=1 (ls_in_port_sec_ip ), priority=0 , match=(1), action=(next;) table=2 (ls_in_port_sec_nd ), priority=90 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == fa:16:3e:14:ba:56 && arp.sha == fa:16:3e:14:ba:56 && arp.spa == {11.0.0.3}), action=(next;) table=2 (ls_in_port_sec_nd ), priority=90 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == fa:16:3e:7a:c5:16 && arp.sha == fa:16:3e:7a:c5:16 && arp.spa == {11.0.0.5}), action=(next;) table=2 (ls_in_port_sec_nd ), priority=80 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && (arp || nd)), action=(drop;) table=2 (ls_in_port_sec_nd ), priority=80 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && (arp || nd)), action=(drop;) table=2 (ls_in_port_sec_nd ), priority=0 , match=(1), action=(next;) table=3 (ls_in_pre_acl ), priority=110 , match=(nd), action=(next;) table=3 (ls_in_pre_acl ), priority=100 , match=(ip), action=(reg0[0] = 1; next;) table=3 (ls_in_pre_acl ), priority=0 , match=(1), action=(next;) table=4 (ls_in_pre_lb ), priority=0 , match=(1), action=(next;) table=5 (ls_in_pre_stateful ), priority=100 , match=(reg0[0] == 1), action=(ct_next;) table=5 (ls_in_pre_stateful ), priority=0 , match=(1), action=(next;) table=6 (ls_in_acl ), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv && ct_label.blocked == 0), action=(next;) table=6 (ls_in_acl ), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv && ct.rpl && ct_label.blocked == 0), action=(next;) table=6 (ls_in_acl ), priority=65535, match=(ct.inv || (ct.est && ct.rpl && ct_label.blocked == 1)), action=(drop;) table=6 (ls_in_acl ), priority=65535, match=(nd), action=(next;) table=6 (ls_in_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip4)), action=(next;) table=6 (ls_in_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip6)), action=(next;) table=6 (ls_in_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip4)), action=(next;) table=6 (ls_in_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip6)), action=(next;) table=6 (ls_in_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip4)), action=(reg0[1] = 1; next;) table=6 (ls_in_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip6)), action=(reg0[1] = 1; next;) table=6 (ls_in_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip4)), action=(reg0[1] = 1; next;) table=6 (ls_in_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip6)), action=(reg0[1] = 1; next;) table=6 (ls_in_acl ), priority=2001 , match=((!ct.est || (ct.est && ct_label.blocked == 1)) && (inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip)), action=(drop;) table=6 (ls_in_acl ), priority=2001 , match=((!ct.est || (ct.est && ct_label.blocked == 1)) && (inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip)), action=(drop;) table=6 (ls_in_acl ), priority=2001 , match=(ct.est && ct_label.blocked == 0 && (inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip)), action=(ct_commit(ct_label=1/1);) table=6 (ls_in_acl ), priority=2001 , match=(ct.est && ct_label.blocked == 0 && (inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip)), action=(ct_commit(ct_label=1/1);) table=6 (ls_in_acl ), priority=1 , match=(ip && (!ct.est || (ct.est && ct_label.blocked == 1))), action=(reg0[1] = 1; next;) table=6 (ls_in_acl ), priority=0 , match=(1), action=(next;) table=7 (ls_in_qos_mark ), priority=0 , match=(1), action=(next;) table=8 (ls_in_lb ), priority=0 , match=(1), action=(next;) table=9 (ls_in_stateful ), priority=100 , match=(reg0[1] == 1), action=(ct_commit(ct_label=0/1); next;) table=9 (ls_in_stateful ), priority=100 , match=(reg0[2] == 1), action=(ct_lb;) table=9 (ls_in_stateful ), priority=0 , match=(1), action=(next;) table=10(ls_in_arp_rsp ), priority=100 , match=(arp.tpa == 11.0.0.1 && arp.op == 1 && inport == "23b099a8-5949-40ce-a1bc-c2675a4eaf4c"), action=(next;) table=10(ls_in_arp_rsp ), priority=100 , match=(arp.tpa == 11.0.0.3 && arp.op == 1 && inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c"), action=(next;) table=10(ls_in_arp_rsp ), priority=100 , match=(arp.tpa == 11.0.0.5 && arp.op == 1 && inport == "e97d6b05-987d-4e62-a590-7accc480cf97"), action=(next;) table=10(ls_in_arp_rsp ), priority=50 , match=(arp.tpa == 11.0.0.1 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:cb:75:9d; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:cb:75:9d; arp.tpa = arp.spa; arp.spa = 11.0.0.1; outport = inport; flags.loopback = 1; output;) table=10(ls_in_arp_rsp ), priority=50 , match=(arp.tpa == 11.0.0.3 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:14:ba:56; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:14:ba:56; arp.tpa = arp.spa; arp.spa = 11.0.0.3; outport = inport; flags.loopback = 1; output;) table=10(ls_in_arp_rsp ), priority=50 , match=(arp.tpa == 11.0.0.5 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:7a:c5:16; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:7a:c5:16; arp.tpa = arp.spa; arp.spa = 11.0.0.5; outport = inport; flags.loopback = 1; output;) table=10(ls_in_arp_rsp ), priority=0 , match=(1), action=(next;) table=11(ls_in_dhcp_options ), priority=100 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == fa:16:3e:14:ba:56 && ip4.src == 0.0.0.0 && ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67), action=(reg0[3] = put_dhcp_opts(offerip = 11.0.0.3, lease_time = 43200, mtu = 1442, netmask = 255.255.255.0, router = 11.0.0.1, server_id = 11.0.0.1); next;) table=11(ls_in_dhcp_options ), priority=100 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == fa:16:3e:14:ba:56 && ip4.src == 11.0.0.3 && ip4.dst == {11.0.0.1, 255.255.255.255} && udp.src == 68 && udp.dst == 67), action=(reg0[3] = put_dhcp_opts(offerip = 11.0.0.3, lease_time = 43200, mtu = 1442, netmask = 255.255.255.0, router = 11.0.0.1, server_id = 11.0.0.1); next;) table=11(ls_in_dhcp_options ), priority=100 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == fa:16:3e:7a:c5:16 && ip4.src == 0.0.0.0 && ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67), action=(reg0[3] = put_dhcp_opts(offerip = 11.0.0.5, lease_time = 43200, mtu = 1442, netmask = 255.255.255.0, router = 11.0.0.1, server_id = 11.0.0.1); next;) table=11(ls_in_dhcp_options ), priority=100 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == fa:16:3e:7a:c5:16 && ip4.src == 11.0.0.5 && ip4.dst == {11.0.0.1, 255.255.255.255} && udp.src == 68 && udp.dst == 67), action=(reg0[3] = put_dhcp_opts(offerip = 11.0.0.5, lease_time = 43200, mtu = 1442, netmask = 255.255.255.0, router = 11.0.0.1, server_id = 11.0.0.1); next;) table=11(ls_in_dhcp_options ), priority=0 , match=(1), action=(next;) table=12(ls_in_dhcp_response), priority=100 , match=(inport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == fa:16:3e:14:ba:56 && ip4 && udp.src == 68 && udp.dst == 67 && reg0[3]), action=(eth.dst = eth.src; eth.src = fa:16:3e:27:98:c9; ip4.dst = 11.0.0.3; ip4.src = 11.0.0.1; udp.src = 67; udp.dst = 68; outport = inport; flags.loopback = 1; output;) table=12(ls_in_dhcp_response), priority=100 , match=(inport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == fa:16:3e:7a:c5:16 && ip4 && udp.src == 68 && udp.dst == 67 && reg0[3]), action=(eth.dst = eth.src; eth.src = fa:16:3e:27:98:c9; ip4.dst = 11.0.0.5; ip4.src = 11.0.0.1; udp.src = 67; udp.dst = 68; outport = inport; flags.loopback = 1; output;) table=12(ls_in_dhcp_response), priority=0 , match=(1), action=(next;) table=13(ls_in_l2_lkup ), priority=100 , match=(eth.mcast), action=(outport = "_MC_flood"; output;) table=13(ls_in_l2_lkup ), priority=50 , match=(eth.dst == fa:16:3e:14:ba:56), action=(outport = "607fa0b2-244c-46d6-b515-5ebe73ebbc4c"; output;) table=13(ls_in_l2_lkup ), priority=50 , match=(eth.dst == fa:16:3e:7a:c5:16), action=(outport = "e97d6b05-987d-4e62-a590-7accc480cf97"; output;) table=13(ls_in_l2_lkup ), priority=50 , match=(eth.dst == fa:16:3e:cb:75:9d), action=(outport = "23b099a8-5949-40ce-a1bc-c2675a4eaf4c"; output;) Datapath: "neutron-ae-c2f0-41f2-a6ad-617d062b86be" (8e39dea3-a81a-4c3b-afd4-1f990cab2029) Pipeline: egress table=0 (ls_out_pre_lb ), priority=0 , match=(1), action=(next;) table=1 (ls_out_pre_acl ), priority=110 , match=(nd), action=(next;) table=1 (ls_out_pre_acl ), priority=100 , match=(ip), action=(reg0[0] = 1; next;) table=1 (ls_out_pre_acl ), priority=0 , match=(1), action=(next;) table=2 (ls_out_pre_stateful), priority=100 , match=(reg0[0] == 1), action=(ct_next;) table=2 (ls_out_pre_stateful), priority=0 , match=(1), action=(next;) table=3 (ls_out_lb ), priority=0 , match=(1), action=(next;) table=4 (ls_out_acl ), priority=65535, match=(!ct.est && ct.rel && !ct.new && !ct.inv && ct_label.blocked == 0), action=(next;) table=4 (ls_out_acl ), priority=65535, match=(ct.est && !ct.rel && !ct.new && !ct.inv && ct.rpl && ct_label.blocked == 0), action=(next;) table=4 (ls_out_acl ), priority=65535, match=(ct.inv || (ct.est && ct.rpl && ct_label.blocked == 1)), action=(drop;) table=4 (ls_out_acl ), priority=65535, match=(nd), action=(next;) table=4 (ls_out_acl ), priority=34000, match=(outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.src == fa:16:3e:27:98:c9 && ip4.src == 11.0.0.1 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;) table=4 (ls_out_acl ), priority=34000, match=(outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.src == fa:16:3e:27:98:c9 && ip4.src == 11.0.0.1 && udp && udp.src == 67 && udp.dst == 68), action=(ct_commit; next;) table=4 (ls_out_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip4 && ip4.src == $as_ip4_8cb690a4_472a_4cd7_8394_edf0e8926df6)), action=(next;) table=4 (ls_out_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip4 && ip4.src == 0.0.0.0/0)), action=(next;) table=4 (ls_out_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip6 && ip6.src == $as_ip6_8cb690a4_472a_4cd7_8394_edf0e8926df6)), action=(next;) table=4 (ls_out_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip4 && ip4.src == $as_ip4_8cb690a4_472a_4cd7_8394_edf0e8926df6)), action=(next;) table=4 (ls_out_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip4 && ip4.src == 0.0.0.0/0)), action=(next;) table=4 (ls_out_acl ), priority=2002 , match=(!ct.new && ct.est && !ct.rpl && ct_label.blocked == 0 && (outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip6 && ip6.src == $as_ip6_8cb690a4_472a_4cd7_8394_edf0e8926df6)), action=(next;) table=4 (ls_out_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip4 && ip4.src == $as_ip4_8cb690a4_472a_4cd7_8394_edf0e8926df6)), action=(reg0[1] = 1; next;) table=4 (ls_out_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip4 && ip4.src == 0.0.0.0/0)), action=(reg0[1] = 1; next;) table=4 (ls_out_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip6 && ip6.src == $as_ip6_8cb690a4_472a_4cd7_8394_edf0e8926df6)), action=(reg0[1] = 1; next;) table=4 (ls_out_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip4 && ip4.src == $as_ip4_8cb690a4_472a_4cd7_8394_edf0e8926df6)), action=(reg0[1] = 1; next;) table=4 (ls_out_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip4 && ip4.src == 0.0.0.0/0)), action=(reg0[1] = 1; next;) table=4 (ls_out_acl ), priority=2002 , match=(((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip6 && ip6.src == $as_ip6_8cb690a4_472a_4cd7_8394_edf0e8926df6)), action=(reg0[1] = 1; next;) table=4 (ls_out_acl ), priority=2001 , match=((!ct.est || (ct.est && ct_label.blocked == 1)) && (outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip)), action=(drop;) table=4 (ls_out_acl ), priority=2001 , match=((!ct.est || (ct.est && ct_label.blocked == 1)) && (outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip)), action=(drop;) table=4 (ls_out_acl ), priority=2001 , match=(ct.est && ct_label.blocked == 0 && (outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && ip)), action=(ct_commit(ct_label=1/1);) table=4 (ls_out_acl ), priority=2001 , match=(ct.est && ct_label.blocked == 0 && (outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && ip)), action=(ct_commit(ct_label=1/1);) table=4 (ls_out_acl ), priority=1 , match=(ip && (!ct.est || (ct.est && ct_label.blocked == 1))), action=(reg0[1] = 1; next;) table=4 (ls_out_acl ), priority=0 , match=(1), action=(next;) table=5 (ls_out_qos_mark ), priority=0 , match=(1), action=(next;) table=6 (ls_out_stateful ), priority=100 , match=(reg0[1] == 1), action=(ct_commit(ct_label=0/1); next;) table=6 (ls_out_stateful ), priority=100 , match=(reg0[2] == 1), action=(ct_lb;) table=6 (ls_out_stateful ), priority=0 , match=(1), action=(next;) table=7 (ls_out_port_sec_ip ), priority=90 , match=(outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.dst == fa:16:3e:14:ba:56 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 11.0.0.3}), action=(next;) table=7 (ls_out_port_sec_ip ), priority=90 , match=(outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.dst == fa:16:3e:7a:c5:16 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 11.0.0.5}), action=(next;) table=7 (ls_out_port_sec_ip ), priority=80 , match=(outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.dst == fa:16:3e:14:ba:56 && ip), action=(drop;) table=7 (ls_out_port_sec_ip ), priority=80 , match=(outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.dst == fa:16:3e:7a:c5:16 && ip), action=(drop;) table=7 (ls_out_port_sec_ip ), priority=0 , match=(1), action=(next;) table=8 (ls_out_port_sec_l2 ), priority=100 , match=(eth.mcast), action=(output;) table=8 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "23b099a8-5949-40ce-a1bc-c2675a4eaf4c"), action=(output;) table=8 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "607fa0b2-244c-46d6-b515-5ebe73ebbc4c" && eth.dst == {fa:16:3e:14:ba:56}), action=(output;) table=8 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "e97d6b05-987d-4e62-a590-7accc480cf97" && eth.dst == {fa:16:3e:7a:c5:16}), action=(output;) Datapath: "neutron-0-b908-4122-9f86-bcbc78" (b949c4b7-fbaa-4444-8be6-182a276a9331) Pipeline: ingress table=0 (ls_in_port_sec_l2 ), priority=100 , match=(eth.src[40]), action=(drop;) table=0 (ls_in_port_sec_l2 ), priority=100 , match=(vlan.present), action=(drop;) table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "0c80bccb-84ee-4aae-a87d-5aacf1d49df5"), action=(next;) table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "7b4a2a12-618b-4e56-958e-6cf90ae78623"), action=(next;) table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "9c2c1945-0d3d-48a5-b2d9-d003fe"), action=(next;) table=0 (ls_in_port_sec_l2 ), priority=50 , match=(inport == "provnet-0-b908-4122-9f86-bcbc78"), action=(next;) table=1 (ls_in_port_sec_ip ), priority=0 , match=(1), action=(next;) table=2 (ls_in_port_sec_nd ), priority=0 , match=(1), action=(next;) table=3 (ls_in_pre_acl ), priority=0 , match=(1), action=(next;) table=4 (ls_in_pre_lb ), priority=0 , match=(1), action=(next;) table=5 (ls_in_pre_stateful ), priority=100 , match=(reg0[0] == 1), action=(ct_next;) table=5 (ls_in_pre_stateful ), priority=0 , match=(1), action=(next;) table=6 (ls_in_acl ), priority=0 , match=(1), action=(next;) table=7 (ls_in_qos_mark ), priority=0 , match=(1), action=(next;) table=8 (ls_in_lb ), priority=0 , match=(1), action=(next;) table=9 (ls_in_stateful ), priority=100 , match=(reg0[1] == 1), action=(ct_commit(ct_label=0/1); next;) table=9 (ls_in_stateful ), priority=100 , match=(reg0[2] == 1), action=(ct_lb;) table=9 (ls_in_stateful ), priority=0 , match=(1), action=(next;) table=10(ls_in_arp_rsp ), priority=100 , match=(arp.tpa == 192.168.200.135 && arp.op == 1 && inport == "9c2c1945-0d3d-48a5-b2d9-d003fe"), action=(next;) table=10(ls_in_arp_rsp ), priority=100 , match=(inport == "provnet-0-b908-4122-9f86-bcbc78"), action=(next;) table=10(ls_in_arp_rsp ), priority=50 , match=(arp.tpa == 192.168.200.135 && arp.op == 1), action=(eth.dst = eth.src; eth.src = fa:16:3e:a4:14:5d; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:a4:14:5d; arp.tpa = arp.spa; arp.spa = 192.168.200.135; outport = inport; flags.loopback = 1; output;) table=10(ls_in_arp_rsp ), priority=0 , match=(1), action=(next;) table=11(ls_in_dhcp_options ), priority=0 , match=(1), action=(next;) table=12(ls_in_dhcp_response), priority=0 , match=(1), action=(next;) table=13(ls_in_l2_lkup ), priority=100 , match=(eth.mcast), action=(outport = "_MC_flood"; output;) table=13(ls_in_l2_lkup ), priority=50 , match=(eth.dst == fa:16:3e:a4:14:5d), action=(outport = "9c2c1945-0d3d-48a5-b2d9-d003fe"; output;) table=13(ls_in_l2_lkup ), priority=50 , match=(eth.dst == fa:16:3e:d9:85:46), action=(outport = "7b4a2a12-618b-4e56-958e-6cf90ae78623"; output;) table=13(ls_in_l2_lkup ), priority=50 , match=(eth.dst == fa:16:3e:e6:68:b0), action=(outport = "0c80bccb-84ee-4aae-a87d-5aacf1d49df5"; output;) table=13(ls_in_l2_lkup ), priority=0 , match=(1), action=(outport = "_MC_unknown"; output;) Datapath: "neutron-0-b908-4122-9f86-bcbc78" (b949c4b7-fbaa-4444-8be6-182a276a9331) Pipeline: egress table=0 (ls_out_pre_lb ), priority=0 , match=(1), action=(next;) table=1 (ls_out_pre_acl ), priority=0 , match=(1), action=(next;) table=2 (ls_out_pre_stateful), priority=100 , match=(reg0[0] == 1), action=(ct_next;) table=2 (ls_out_pre_stateful), priority=0 , match=(1), action=(next;) table=3 (ls_out_lb ), priority=0 , match=(1), action=(next;) table=4 (ls_out_acl ), priority=0 , match=(1), action=(next;) table=5 (ls_out_qos_mark ), priority=0 , match=(1), action=(next;) table=6 (ls_out_stateful ), priority=100 , match=(reg0[1] == 1), action=(ct_commit(ct_label=0/1); next;) table=6 (ls_out_stateful ), priority=100 , match=(reg0[2] == 1), action=(ct_lb;) table=6 (ls_out_stateful ), priority=0 , match=(1), action=(next;) table=7 (ls_out_port_sec_ip ), priority=0 , match=(1), action=(next;) table=8 (ls_out_port_sec_l2 ), priority=100 , match=(eth.mcast), action=(output;) table=8 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "0c80bccb-84ee-4aae-a87d-5aacf1d49df5"), action=(output;) table=8 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "7b4a2a12-618b-4e56-958e-6cf90ae78623"), action=(output;) table=8 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "9c2c1945-0d3d-48a5-b2d9-d003fe"), action=(output;) table=8 (ls_out_port_sec_l2 ), priority=50 , match=(outport == "provnet-0-b908-4122-9f86-bcbc78"), action=(output;) --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 这个命令由于输出结果太多,所以只显示部分作为示例 root@controller ~]# ovn-sbctl list Logical_Flow (逻辑流154个) _uuid : 2593fd01-c89a-49d9-839b-c55c2202b707 actions : "reg0[3] = put_dhcp_opts(offerip = 11.0.0.3, lease_time = 43200, mtu = 1442, netmask = 255.255.255.0, router = 11.0.0.1, server_id = 11.0.0.1); next;" external_ids : {source="ovn-northd.c:3117", stage-name=ls_in_dhcp_options} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "inport == \"607fa0b2-244c-46d6-b515-5ebe73ebbc4c\" && eth.src == fa:16:3e:14:ba:56 && ip4.src == 0.0.0.0 && ip4.dst == 255.255.255.255 && udp.src == 68 && udp.dst == 67" pipeline : ingress priority : 100 table_id : 11 _uuid : 1d-2350-43b0-b001-7414d309b774 actions : "output;" external_ids : {source="ovn-northd.c:3339", stage-name="ls_out_port_sec_l2"} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : eth.mcast pipeline : egress priority : 100 table_id : 8 _uuid : d66de783-5920-40c9-9334-e46165bd9f26 actions : "next;" external_ids : {source="ovn-northd.c:2076", stage-name=ls_out_port_sec_ip} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "outport == \"607fa0b2-244c-46d6-b515-5ebe73ebbc4c\" && eth.dst == fa:16:3e:14:ba:56 && ip4.dst == {255.255.255.255, 224.0.0.0/4, 11.0.0.3}" pipeline : egress priority : 90 table_id : 7 _uuid : 7ebdd904-0414-4dfb-a016-cf7d8557e8e2 actions : "ct_commit(ct_label=0/1); next;" external_ids : {source="ovn-northd.c:2807", stage-name=ls_in_stateful} logical_datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 match : "reg0[1] == 1" pipeline : ingress priority : 100 table_id : 9 _uuid : -cc61-416b-be69-97530cd29126 actions : "ct_next;" external_ids : {source="ovn-northd.c:2480", stage-name=ls_out_pre_stateful} logical_datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 match : "reg0[0] == 1" pipeline : egress priority : 100 table_id : 2 _uuid : 25a30b06-05d1-48f3-8b83-9c5b277e3674 actions : "reg0[1] = 1; next;" external_ids : {source="ovn-northd.c:2621", stage-name=ls_out_acl} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "((ct.new && !ct.est) || (!ct.new && ct.est && !ct.rpl && ct_label.blocked == 1)) && (outport == \"e97d6b05-987d-4e62-a590-7accc480cf97\" && ip4 && ip4.src == $as_ip4_8cb690a4_472a_4cd7_8394_edf0e8926df6)" pipeline : egress priority : 2002 table_id : 4 _uuid : 9df0c787-b832-403c-84a2-173f601d75dd actions : "next;" external_ids : {source="ovn-northd.c:2800", stage-name=ls_out_stateful} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "1" pipeline : egress priority : 0 table_id : 6 _uuid : 09c48887-d225-4946-9449-7b454d160c00 actions : "next;" external_ids : {source="ovn-northd.c:3193", stage-name=ls_in_dhcp_options} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "1" pipeline : ingress priority : 0 table_id : 11 _uuid : 36d92308-060e-4a10-b83a-f14f334a7f7b actions : "next;" external_ids : {source="ovn-northd.c:2942", stage-name="ls_in_port_sec_l2"} logical_datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 match : "inport == \"0c80bccb-84ee-4aae-a87d-5aacf1d49df5\"" pipeline : ingress priority : 50 table_id : 0 _uuid : 9bc17009-b557-4834-bebb-29166c98a7b8 actions : "next;" external_ids : {source="ovn-northd.c:2491", stage-name=ls_in_acl} logical_datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 match : "1" pipeline : ingress priority : 0 table_id : 6 _uuid : 0b2db50a-c8eb-4476-8957-fe1152c08618 actions : "next;" external_ids : {source="ovn-northd.c:2492", stage-name=ls_out_acl} logical_datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 match : "1" pipeline : egress priority : 0 table_id : 4 _uuid : 41ee2d0a-2693-4066-a740-7afd98b19084 actions : "outport = \"_MC_flood\"; output;" external_ids : {source="ovn-northd.c:3214", stage-name="ls_in_l2_lkup"} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : eth.mcast pipeline : ingress priority : 100 table_id : 13 _uuid : 04110b8a-8f8a-4f5a-a1e6-a64b665a9e90 actions : "drop;" external_ids : {source="ovn-northd.c:1985", stage-name=ls_in_port_sec_nd} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "inport == \"e97d6b05-987d-4e62-a590-7accc480cf97\" && (arp || nd)" pipeline : ingress priority : 80 table_id : 2 _uuid : 2269bd0b-abfa-4ae5-ba7a-e1b5 actions : "eth.dst = eth.src; eth.src = fa:16:3e:27:98:c9; ip4.dst = 11.0.0.5; ip4.src = 11.0.0.1; udp.src = 67; udp.dst = 68; outport = inport; flags.loopback = 1; output;" external_ids : {source="ovn-northd.c:3146", stage-name=ls_in_dhcp_response} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "inport == \"e97d6b05-987d-4e62-a590-7accc480cf97\" && eth.src == fa:16:3e:7a:c5:16 && ip4 && udp.src == 68 && udp.dst == 67 && reg0[3]" pipeline : ingress priority : 100 table_id : 12 _uuid : bccdf08b-7050-4503-838b-17270aaf385c actions : "ct_commit(ct_label=1/1);" external_ids : {source="ovn-northd.c:2679", stage-name=ls_in_acl} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "ct.est && ct_label.blocked == 0 && (inport == \"607fa0b2-244c-46d6-b515-5ebe73ebbc4c\" && ip)" pipeline : ingress priority : 2001 table_id : 6 _uuid : dad2908d-f491-4107-a71b-33a actions : "eth.dst = eth.src; eth.src = fa:16:3e:a4:14:5d; arp.op = 2; /* ARP reply */ arp.tha = arp.sha; arp.sha = fa:16:3e:a4:14:5d; arp.tpa = arp.spa; arp.spa = 192.168.200.135; outport = inport; flags.loopback = 1; output;" external_ids : {source="ovn-northd.c:3014", stage-name=ls_in_arp_rsp} logical_datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 match : "arp.tpa == 192.168.200.135 && arp.op == 1" pipeline : ingress priority : 50 table_id : 10 _uuid : 1594d30e-a146-4a51-a5b3-027bf4 actions : "ct_commit(ct_label=0/1); next;" external_ids : {source="ovn-northd.c:2809", stage-name=ls_out_stateful} logical_datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 match : "reg0[1] == 1" pipeline : egress priority : 100 table_id : 6 _uuid : bfa3aa8e-7acb-42a6-b444-ac6db1cb91a2 actions : "next;" external_ids : {source="ovn-northd.c:2799", stage-name=ls_in_stateful} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : "1" pipeline : ingress priority : 0 table_id : 9 _uuid : d2303d19-fc7f-4d49-b383-3d2fa35e787c actions : "next;" external_ids : {source="ovn-northd.c:2349", stage-name=ls_out_pre_acl} logical_datapath : 8e39dea3-a81a-4c3b-afd4-1f990cab2029 match : nd pipeline : egress priority : 110 table_id : 1 _uuid : ae10d399-9d64-4960-a515-ea62d6e099a6 actions : "ct_lb;" external_ids : {source="ovn-northd.c:2819", stage-name=ls_in_stateful} logical_datapath : b949c4b7-fbaa-4444-8be6-182a276a9331 match : "reg0[2] == 1" pipeline : ingress priority : 100 table_id : 9
发布者:全栈程序员-站长,转载请注明出处:https://javaforall.net/221511.html原文链接:https://javaforall.net
