{"id":225561,"date":"2020-12-07T03:26:06","date_gmt":"2020-12-06T19:26:06","guid":{"rendered":"http:\/\/4563.org\/?p=225561"},"modified":"2020-12-07T03:26:06","modified_gmt":"2020-12-06T19:26:06","slug":"open-vswitch-%e5%85%a5%e9%97%a8%e5%ae%9e%e8%b7%b5%ef%bc%881%ef%bc%89%e7%ae%80%e4%bb%8b","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=225561","title":{"rendered":"Open vSwitch \u5165\u95e8\u5b9e\u8df5\uff081\uff09\u7b80\u4ecb"},"content":{"rendered":"
\n
\n
\n

Open vSwitch \u5165\u95e8\u5b9e\u8df5\uff081\uff09\u7b80\u4ecb <\/h1>\n

<\/p>\n

\n
\u8cc7\u6df1\u5927\u4f6c : FreeEx <\/span> <\/i> 6<\/span> <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
<\/p>\n

OVS \u7b80\u4ecb<\/h1>\n

<\/p>\n

Open vSwitch \u662f\u4ec0\u4e48\uff1f<\/h3>\n

Open vSwitch(\u4ee5\u4e0b\u7b80\u79f0 OVS)\u662f\u4e00\u4e2a\u7528 C \u8bed\u8a00\u5f00\u53d1\u7684\u591a\u5c42\u865a\u62df\u4ea4\u6362\u673a\uff0c\u4f7f\u7528 Apcahe 2 \u5f00\u6e90\u8bb8\u53ef\u8bc1\uff0c\u73b0\u5982\u4eca\u57fa\u672c\u4e0a\u5df2\u7ecf\u6210\u4e3a\u4e86\u5f00\u6e90 SDN \uff08\u8f6f\u4ef6\u5b9a\u4e49\u7f51\u7edc\uff09\u57fa\u7840\u8bbe\u65bd\u5c42\u7684\u4e8b\u5b9e\u6807\u51c6\u3002<\/p>\n

OVS \u652f\u6301\u54ea\u4e9b\u529f\u80fd\uff1f<\/h3>\n
    \n
  • \u652f\u6301 NetFlow \u3001sFlow(R)\u3001IPFIX \u3001SPAN \u3001RSPAN \u548c GRE \u96a7\u9053\u955c\u50cf\u7b49\u591a\u79cd\u6d41\u91cf\u76d1\u63a7\u534f\u8bae<\/li>\n
  • \u652f\u6301 LACP (IEEE 802.1AX-2008)<\/li>\n
  • \u652f\u6301\u6807\u51c6 802.1Q VLAN \u534f\u8bae\uff0c\u5141\u8bb8\u7aef\u53e3\u914d\u7f6e trunk \u6a21\u5f0f<\/li>\n
  • \u652f\u6301\u7ec4\u64ad<\/li>\n
  • \u652f\u6301 BFD \u548c 802.1ag \u94fe\u8def\u76d1\u63a7<\/li>\n
  • \u652f\u6301 STP \uff08 IEEE 802.1D-1998 \uff09\u548c RSTP \uff08 IEEE 802.1D-2004 \uff09<\/li>\n
  • \u652f\u6301\u7ec6\u7c92\u5ea6\u7684 QoS \uff08\u670d\u52a1\u8d28\u91cf\uff09\u914d\u7f6e<\/li>\n
  • \u652f\u6301 HFSC qdisc<\/li>\n
  • \u652f\u6301\u63a5\u7ba1\u6bcf\u4e00\u4e2a\u865a\u62df\u673a\u7684\u6d41\u91cf<\/li>\n
  • \u652f\u6301\u57fa\u4e8e\u6e90 MAC \u7684\u8d1f\u8f7d\u5747\u8861\u3001\u4e3b\u5907\u6a21\u5f0f\u548c L4 \u54c8\u5e0c\u7684\u7aef\u53e3\u7ed1\u5e26<\/li>\n
  • \u652f\u6301 OpenFlow \u534f\u8bae\uff08\u5305\u542b\u4e86\u5f88\u591a\u5bf9\u865a\u62df\u5316\u7684\u6269\u5c55\uff09<\/li>\n
  • \u652f\u6301 IPv6<\/li>\n
  • \u652f\u6301\u591a\u79cd\u96a7\u9053\u534f\u8bae\uff08 GRE \u3001VXLAN \u3001STT \u3001Geneve \u548c IPsec \uff09<\/li>\n
  • \u652f\u6301 C \u548c Python \u7684\u8fdc\u7a0b\u914d\u7f6e\u534f\u8bae<\/li>\n
  • \u652f\u6301\u5185\u6838\u548c\u7528\u6237\u7a7a\u95f4\u7684\u8f6c\u53d1\u5f15\u64ce\u9009\u9879<\/li>\n
  • \u5177\u6709\u6d41\u7f13\u5b58\u5f15\u64ce\u7684\u591a\u8868\u8f6c\u53d1\u7ba1\u9053<\/li>\n
  • \u8f6c\u53d1\u5c42\u62bd\u8c61\u4ee5\u7b80\u5316\u5411\u65b0\u8f6f\u4ef6\u548c\u786c\u4ef6\u5e73\u53f0\u7684\u79fb\u690d<\/li>\n<\/ul>\n

    OVS \u7684\u672f\u8bed\u89e3\u91ca<\/h1>\n

    <\/p>\n

    Bridge<\/h3>\n

    \u4e2d\u6587\u540d\u79f0\u7f51\u6865<\/strong>\uff0c\u4e00\u4e2a Bridge \u4ee3\u8868\u4e00\u4e2a\u4ee5\u592a\u7f51\u4ea4\u6362\u673a\uff08 Switch \uff09\uff0c\u4e00\u53f0\u4e3b\u673a\u4e2d\u53ef\u4ee5\u521b\u5efa\u4e00\u4e2a\u6216\u591a\u4e2a Bridge\uff0cBridge \u53ef\u4ee5\u6839\u636e\u4e00\u5b9a\u7684\u89c4\u5219\uff0c\u628a\u67d0\u4e00\u4e2a\u7aef\u53e3\u63a5\u6536\u5230\u7684\u6570\u636e\u62a5\u6587\u8f6c\u53d1\u5230\u53e6\u4e00\u4e2a\u6216\u591a\u4e2a\u7aef\u53e3\u4e0a\uff0c\u4e5f\u53ef\u4ee5\u4fee\u6539\u6216\u8005\u4e22\u5f03\u6570\u636e\u62a5\u6587\u3002<\/p>\n

    Port<\/h3>\n

    \u4e2d\u6587\u540d\u79f0\u7aef\u53e3<\/strong>\uff0c\u9700\u8981\u6ce8\u610f\u7684\u662f\u5b83\u548c TCP \u91cc\u9762\u7684\u7aef\u53e3\u4e0d\u662f\u540c\u6837\u7684\u6982\u5ff5\uff0c\u5b83\u66f4\u50cf\u662f\u7269\u7406\u4ea4\u6362\u673a\u4e0a\u9762\u7684\u63d2\u53e3\uff0c\u53ef\u4ee5\u63a5\u6c34\u6676\u5934\u7684\u90a3\u79cd\u3002Port \u96b6\u5c5e\u4e8e Bridge\uff0c\u5fc5\u987b\u5148\u6dfb\u52a0\u4e86 Bridge \u624d\u80fd\u5728 Bridge \u4e0a\u6dfb\u52a0 Port \u3002Port \u6709\u4ee5\u4e0b\u51e0\u79cd\u7c7b\u578b\uff1a<\/p>\n

      \n
    • \n

      Normal<\/strong><\/p>\n

      \u7528\u6237\u53ef\u4ee5\u628a\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u5df2\u6709\u7684\u7f51\u5361\u6dfb\u52a0\u5230 Open vSwicth \u4e0a\uff0cOpen vSwitct \u4f1a\u81ea\u52a8\u751f\u6210\u4e00\u4e2a\u540c\u540d\u7684 Port \u5f00\u5904\u7406\u8fd9\u5f20\u7f51\u5361\u8fdb\u548c\u51fa\u7684\u6570\u636e\u62a5\u6587\u3002<\/p>\n

      \n

      \u4e0d\u8fc7\u9700\u8981\u6ce8\u610f\u7684\u662f\u8fd9\u79cd\u65b9\u5f0f\u6dfb\u52a0\u7684 Port \u4e0d\u652f\u6301\u5206\u914d IP \u5730\u5740\uff0c\u5982\u679c\u4e4b\u524d\u7f51\u5361\u4e0a\u914d\u7f6e\u7684\u6709 IP\uff0c\u6302\u8f7d\u5230 OVS \u4e0a\u9762\u4e4b\u540e\u5c06\u4e0d\u53ef\u8bbf\u95ee\u3002\u6b64\u7c7b\u578b\u7684 Port \u5e38\u7528\u4e8e VLAN \u6a21\u5f0f\u7684\u591a\u53f0\u7269\u7406\u4e3b\u673a\u76f8\u8fde\u7684\u90a3\u4e2a\u53e3\uff0c\u4ea4\u6362\u673a\u4e00\u7aef\u5c5e\u4e8e Trunk \u6a21\u5f0f\u3002<\/p>\n<\/blockquote>\n<\/li>\n

    • \n

      Internal<\/strong><\/p>\n

      \u5f53 Port \u7684\u7c7b\u578b\u662f Internal \u65f6\uff0cOVS \u4f1a\u81ea\u52a8\u521b\u5efa\u4e00\u4e2a\u865a\u62df\u7f51\u5361\uff08 Interface \uff09\uff0c\u6b64\u7aef\u53e3\u6536\u5230\u7684\u6570\u636e\u62a5\u6587\u90fd\u4f1a\u8f6c\u53d1\u7ed9\u8fd9\u5757\u7f51\u5361\uff0c\u4ece\u8fd9\u5757\u7f51\u5361\u53d1\u51fa\u7684\u6570\u636e\u62a5\u6587\u4e5f\u4f1a\u901a\u8fc7 Port \u4ea4\u7ed9 OVS \u5904\u7406\u3002\u5f53 OVS \u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u7f51\u6865\u65f6\uff0c\u4f1a\u81ea\u52a8\u521b\u5efa\u4e00\u4e2a\u4e0e\u7f51\u6865\u540c\u540d\u7684 Internal Port\uff0c\u540c\u65f6\u4e5f\u4f1a\u521b\u5efa\u4e00\u4e2a\u4e0e\u7f51\u6865\u540c\u540d\u7684 Interface\uff0c\u56e0\u6b64\u53ef\u4ee5\u901a\u8fc7 ip \u547d\u4ee4\u5728\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u67e5\u770b\u5230\u8fd9\u5f20\u865a\u62df\u7f51\u5361\uff0c\u4f46\u662f\u72b6\u6001\u662f down \u7684\u3002<\/p>\n<\/li>\n

    • \n

      Patch<\/strong><\/p>\n

      Patch Port \u548c veth pair \u529f\u80fd\u76f8\u540c\uff0c\u603b\u662f\u6210\u53cc\u6210\u5bf9\u7684\u51fa\u73b0\uff0c\u5728\u5176\u4e2d\u4e00\u7aef\u6536\u5230\u7684\u6570\u636e\u62a5\u6587\u4f1a\u88ab\u8f6c\u53d1\u5230\u53e6\u4e00\u4e2a Patch Port \u4e0a\uff0c\u5c31\u50cf\u662f\u4e00\u6839\u7f51\u7ebf\u4e00\u6837\u3002Patch Port \u5e38\u7528\u4e8e\u8fde\u63a5\u4e24\u4e2a Bridge\uff0c\u8fd9\u6837\u4e24\u4e2a\u7f51\u6865\u5c31\u548c\u4e00\u4e2a\u7f51\u6865\u4e00\u6837\u4e86\u3002<\/p>\n<\/li>\n

    • \n

      Tunnel<\/strong><\/p>\n

      OVS \u652f\u6301 GRE \u3001VXLAN \u3001STT \u3001Geneve \u548c IPsec \u96a7\u9053\u534f\u8bae\uff0c\u8fd9\u4e9b\u96a7\u9053\u534f\u8bae\u5c31\u662f overlay \u7f51\u7edc\u7684\u57fa\u7840\u534f\u8bae\uff0c\u901a\u8fc7\u5bf9\u7269\u7406\u7f51\u7edc\u505a\u7684\u4e00\u5c42\u5c01\u88c5\u548c\u6269\u5c55\uff0c\u89e3\u51b3\u4e86\u4e8c\u5c42\u7f51\u7edc\u6570\u91cf\u4e0d\u8db3\u7684\u95ee\u9898\uff0c\u6700\u5927\u9650\u5ea6\u7684\u51cf\u5c11\u5bf9\u5e95\u5c42\u7269\u7406\u7f51\u7edc\u62d3\u6251\u7684\u4f9d\u8d56\u6027\uff0c\u540c\u65f6\u4e5f\u6700\u5927\u9650\u5ea6\u7684\u589e\u52a0\u4e86\u5bf9\u7f51\u7edc\u7684\u63a7\u5236\u3002<\/p>\n<\/li>\n<\/ul>\n

      Interface<\/h3>\n

      \uff08 iface\/\u63a5\u53e3\uff09\u63a5\u53e3\u662f OVS \u4e0e\u64cd\u4f5c\u7cfb\u7edf\u4ea4\u6362\u6570\u636e\u62a5\u6587\u7684\u7ec4\u4ef6\uff0c\u4e00\u4e2a\u63a5\u53e3\u5373\u662f\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u7684\u4e00\u5757\u7f51\u5361\uff0c\u8fd9\u4e2a\u7f51\u5361\u53ef\u80fd\u662f OVS \u751f\u6210\u7684\u865a\u62df\u7f51\u5361\uff0c\u4e5f\u6709\u53ef\u80fd\u662f\u6302\u8f7d\u5728 OVS \u4e0a\u7684\u7269\u7406\u7f51\u5361\uff0c\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u7684\u865a\u62df\u7f51\u5361\uff08 TUN\/TAP \uff09\u4e5f\u53ef\u4ee5\u88ab\u6302\u8f7d\u5728 OVS \u4e0a\u3002<\/p>\n

      Controller<\/h3>\n

      OpenFlow \u63a7\u5236\u5668\uff0cOVS \u53ef\u4ee5\u63a5\u6536\u4e00\u4e2a\u6216\u8005\u591a\u4e2a OpenFlow \u63a7\u5236\u5668\u7684\u7ba1\u7406\uff0c\u529f\u80fd\u4e3b\u8981\u662f\u4e0b\u53d1\u6d41\u8868\uff0c\u63a7\u5236\u8f6c\u53d1\u89c4\u5219\u3002<\/p>\n

      Flow<\/h3>\n

      \u6d41\u8868\u662f OVS \u8fdb\u884c\u6570\u636e\u8f6c\u53d1\u7684\u6838\u5fc3\u529f\u80fd\uff0c\u5b9a\u4e49\u4e86\u7aef\u53e3\u4e4b\u95f4\u8f6c\u53d1\u6570\u636e\u62a5\u6587\u7684\u89c4\u5219\uff0c\u4e00\u6761\u6d41\u8868\u89c4\u5219\u4e3b\u8981\u5206\u4e3a\u5339\u914d\u548c\u52a8\u4f5c\u4e24\u90e8\u5206\uff0c\u5339\u914d\u90e8\u5206\u51b3\u5b9a\u54ea\u4e9b\u6570\u636e\u62a5\u6587\u9700\u8981\u88ab\u5904\u7406\uff0c\u52a8\u4f5c\u51b3\u5b9a\u4e86\u5339\u914d\u5230\u7684\u6570\u636e\u62a5\u6587\u8be5\u5982\u4f55\u5904\u7406\u3002<\/p>\n

      OVS \u5e38\u7528\u64cd\u4f5c<\/h1>\n

      <\/p>\n

      \u5b89\u88c5<\/h3>\n
      yum install openvswitch systemctl enable openvswitch systemctl start openvswitch <\/code><\/pre>\n
      \n
      \u5982\u679c\u5f53\u524d\u8f6f\u4ef6\u6e90\u4e2d\u6ca1\u6709 openvswitch\uff0c\u53ef\u4ee5\u901a\u8fc7\u963f\u91cc\u4e91\u5b98\u65b9\u955c\u50cf\u7ad9\u4e0b\u8f7d\u548c\u64cd\u4f5c\u7cfb\u7edf\u7248\u672c\u5bf9\u5e94\u7684 rpm \u5305\u5230\u672c\u5730\u518d\u5b89\u88c5\u3002 \u793a\u4f8b\u547d\u4ee4\uff1a yum localinstall openvswitch-2.9.0-3.el7.x86_64.rpm<\/code><\/p>\n<\/blockquote>\n
      Bridge \u64cd\u4f5c<\/h3>\n
      \u6dfb\u52a0\u7f51\u6865<\/p>\n
      ovs-vsctl add-br br-int <\/code><\/pre>\n
      \u67e5\u8be2\u7f51\u6865\u5217\u8868<\/p>\n
      ovs-vsctl list-br <\/code><\/pre>\n
      \u5220\u9664\u7f51\u6865<\/p>\n
      ovs-vsctl del-br br-int <\/code><\/pre>\n
      Port \u64cd\u4f5c<\/h3>\n
        \n
      • Normal Port<\/strong><\/li>\n<\/ul>\n
        # \u5c06\u7269\u7406\u7f51\u5361 eth0 \u6dfb\u52a0\u5230\u7f51\u6865 br-int \u4e0a ovs-vsctl add-port br-int eth0 # \u79fb\u9664\u7f51\u6865 br-int \u4e0a\u7684 Port ovs-vsctl del-port br-int eth0 <\/code><\/pre>\n
          \n
        • Internal Port<\/strong><\/li>\n<\/ul>\n
          # \u6dfb\u52a0 Internal Port  ovs-vsctl add-port br-int vnet0 -- set Interface vnet0 type=internal # \u628a\u7f51\u5361 vnet0 \u542f\u52a8\u5e76\u914d\u7f6e IP ip link set vnet0 up ip addr add 192.168.0.1\/24 dev vnet0 # \u8bbe\u7f6e VLAN tag ovs-vsctl set Port vnet0 tag=100 # \u79fb\u9664 vnet0 \u4e0a\u9762\u7684 VLAN tag \u914d\u7f6e ovs-vsctl remove Port vnet0 tag 100 # \u8bbe\u7f6e vnet0 \u5141\u8bb8\u901a\u8fc7\u7684 VLAN tag ovs-vsctl set Port vnet0 trunks=100,200 # \u79fb\u9664 vnet0 \u5141\u8bb8\u901a\u8fc7\u7684\u7684 VLAN tag \u914d\u7f6e ovs-vsctl remove Port vnet0 trunks 100,200 <\/code><\/pre>\n
            \n
          • Patch Port<\/strong><\/li>\n<\/ul>\n
            ovs-vsctl add-br br0 ovs-vsctl add-br br1 ovs-vsctl  -- add-port br0 patch0 -- set interface patch0 type=patch options:peer=patch1  -- add-port br1 patch1 -- set interface patch1 type=patch options:peer=patch0 <\/code><\/pre>\n
              \n
            • Tunnel Port<\/strong><\/li>\n<\/ul>\n
              #\u4e3b\u673a 10.1.7.21 \u4e0a ovs-vsctl add-br br-tun ovs-vsctl add-port br-tun vxlan-vx01 -- set Interface vxlan-vx01 type=vxlan options:remote_ip=10.1.7.22 options:key=flow ovs-vsctl add-port br-tun vxlan-vx02 -- set Interface vxlan-vx02 type=vxlan options:remote_ip=10.1.7.23 options:key=flow  #\u4e3b\u673a 10.1.7.22 \u4e0a ovs-vsctl add-br br-tun ovs-vsctl add-port br-tun vxlan-vx01 -- set Interface vxlan-vx01 type=vxlan options:remote_ip=10.1.7.21 options:key=flow ovs-vsctl add-port br-tun vxlan-vx02 -- set Interface vxlan-vx02 type=vxlan options:remote_ip=10.1.7.23 options:key=flow  #\u4e3b\u673a 10.1.7.23 \u4e0a ovs-vsctl add-br br-tun ovs-vsctl add-port br-tun vxlan-vx01 -- set Interface vxlan-vx01 type=vxlan options:remote_ip=10.1.7.21 options:key=flow ovs-vsctl add-port br-tun vxlan-vx02 -- set Interface vxlan-vx02 type=vxlan options:remote_ip=10.1.7.22 options:key=flow <\/code><\/pre>\n
                \n
              • \u5176\u4ed6\u57fa\u672c\u64cd\u4f5c<\/li>\n<\/ul>\n
                # \u8bbe\u7f6e VLAN mode ovs-vsctl set port <port name> VLAN_mode=trunk|access|native-tagged|native-untagged # \u8bbe\u7f6e VLAN tag ovs-vsctl set port <port name> tag=<1-4095> # \u8bbe\u7f6e VLAN trunk ovs-vsctl set port <port name> trunk=100,200 # \u79fb\u9664 Port \u7684\u5c5e\u6027 ovs-vsctl remove port <port name> <property name> <property value> # \u67e5\u770b Port \u7684\u5c5e\u6027 ovs-vsctl list interface <port name> <\/code><\/pre>\n
                \u63a5\u4e0b\u6765\u6211\u4eec\u5c06\u4f7f\u7528 OVS \u6765\u5b9e\u73b0\u5355\u673a\u548c\u591a\u53f0\u7269\u7406\u670d\u52a1\u5668\u4e0b\u7684\u865a\u62df VLAN \u7f51\u7edc\u3002<\/p>\n
                \n
                \u672c\u6587\u9996\u53d1\u6211\u7684\u5fae\u4fe1\u516c\u4f17\u53f7\uff1a\u6211\u5728\u5bf9\u9762\u7684\u89d2\u843d \u6b22\u8fce\u5173\u6ce8\uff0c\u63a5\u6536\u7b2c\u4e00\u65f6\u95f4\u66f4\u65b0\u901a\u77e5\u3002<\/p>\n<\/blockquote>\n
                \"Open<\/p>\n<\/p><\/div>\n
                 \u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (0<\/span>)        <\/div>\n
                 <\/div>\n<\/p><\/div>\n<\/p><\/div>\n
                  \n
                • \n","protected":false},"excerpt":{"rendered":"
                  Open vSwitch \u5165\u95e8\u5b9e\u8df5…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/225561"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=225561"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/225561\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=225561"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=225561"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=225561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}