Open vSwitch

Distributed Virtual Switch인 OVS (Open vSwitch)를 정리 합니다.

• 홈페이지 : http://openvswitch.org/

• 매뉴얼 : http://openvswitch.org/support/, http://openvswitch.org/support/config-cookbooks/

• 다운로드 : http://openvswitch.org/download/
  • https://github.com/openvswitch/ovs
• 라이선스 : Apache 2 License
• 플랫폼 :

OVS 개요

Linux의 상단에서 가상의 L2 Switch를 생성합니다. 정교한 패킷 제어 기능을 제공하는 OpenFlow 프로토콜을 지원 합니다.

• NetFlow, sFlow, SPAN, RSPAN, CLI, LACP, 802.1ag 지원

• OpenFlow

Open vSwitch 설치

Source로 설치

• RPM 생성을 위한 환경 구성

• 참고 : CentOS RPM 제작

yum install -y rpm-build
yum groupinstall -y "Development Tools"

yum install -y openssl-devel
yum install kernel-devel

mkdir -p $HOME/rpmbuild/SOURCES

• CentOS 7에서 Open vSwitch 설치

$HOME/rpmbuild/SOURCES/
wget http://openvswitch.org/releases/openvswitch-2.3.0.tar.gz
tar xvfz openvswitch-2.3.0.tar.gz
cd openvswitch-2.3.0

vi rhel/openvswitch.spec
 ### Requires: openvswitch-kmod, logrotate, python
 Requires: logrotate, python

rpmbuild -bb -D `uname -r` rhel/openvswitch.spec
### rpmbuild -bb rhel/openvswitch.spec
### rpmbuild -bb rhel/openvswitch-kmod-rhel6.spec

cd $HOME/rpmbuild/RPMS/x86_64
ls -alF

yum localinstall openvswitch-2.3.0-1.x86_64.rpm

RPM으로 설치

wget http://cbs.centos.org/kojifiles/packages/openvswitch/2.3.1/2.el7/x86_64/openvswitch-2.3.1-2.el7.x86_64.rpm                    
rpm -ivh openvswitch-2.3.1-2.el7.x86_64.rpm

OVS 명령어

Bridge와 Port 설정

ovs-vsctl add-br br0                  #--- br0 Bridge 추가
ovs-vsctl del-br br0                  #--- br0 Bridge 삭제
ovs-vsctl list-br
# vi /etc/sysconfig/network-scripts/ifcfg-br0

ovs-vsctl set bridge br0 stp_enable=true     #--- STP 활성화

ovs-vsctl add-port br0 eth0           #--- br0 Bridge에 eth0 NIC 연결
ovs-vsctl del-port br0 eth0
ovs-vsctl list-ports br0
​# ethtool -K eth0 gro off

newview
ovs-vsctl show                        #--- Bridge 상세 조회

GRE 터널 설정

ovs-vsctl add-port br0 tep0 -- set interface tep0 type=internal
ip addr add 192.168.1.1/24 dev tep0
ip addr add 192.168.1.2/24 dev tep0
ovs-vsctl add port br0 gre0 -- set interface gre0 type=gre options:remote_ip=10.224.106.128 #--- 127 장비에서 설정
ovs-vsctl add port br0 gre0 -- set interface gre0 type=gre options:remote_ip=10.224.106.127 #--- 128 장비에서 설정
ip route add 10.244.0.0/16 dev tep0
iptables -t nat -A POSTROUTING -s 10.244.0.0/16 -o ens192 -j MASQUERADE

#--- Host A : 10.223.105.101
#--- Host B : 10.223.105.102

#-- Host A에서 설정
ovs-vsctl add-br0
ovs-vsctl add-port br0 tap0    #--- VM1용 Linux Bridge
# ovs-vsctl add-port br0 tap0 -- set interface tap0 type=internal
# ip addr add 192.168.1.1/24 dev tap0
ovs-vsctl add-port br0 tap1    #--- VM2용 Linux Bridge
ovs-vsctl add-port br0 gre0 -- set interface gre0 type=gre options:remote_ip=다른_서버의_IP

#--- Host B에서 설정
ovs-vsctl add-br0
ovs-vsctl add-port br0 tap2    #--- VM3용 Linux Bridge
ovs-vsctl add-port br0 tap3    #--- VM4용 Linux Bridge
ovs-vsctl add-port br0 gre0 -- set interface gre0 type=gre options:remote_ip=다른_서버의_IP

참고 문헌

• http://openvswitch.org/support/config-cookbooks/port-tunneling/

OVN

OVN (Open Virtual Network)

• L2 segments
• L3 forwarding
• Security Group

참고 문헌

• OpenFlow
• Linux Bridge
• http://www.joinc.co.kr/modules/moniwiki/wiki.php/man/12/OpenVSwitch
• http://www.joinc.co.kr/modules/moniwiki/wiki.php/man/12/OpenVSwitch/Tutorial
• 컴퓨터 용어 사전