Open vSwitch

Distributed Virtual Switch인 OVS (Open vSwitch)를 정리 합니다.

• 홈페이지 : http://openvswitch.org/

• 매뉴얼 : http://openvswitch.org/support/, http://openvswitch.org/support/config-cookbooks/

• 다운로드 : http://openvswitch.org/download/
  • https://github.com/openvswitch/ovs
• 라이선스 : Apache 2 License
• 플랫폼 :

OVS 개요

Linux의 상단에서 가상의 L2 Switch를 생성합니다. 정교한 패킷 제어 기능을 제공하는 OpenFlow 프로토콜을 지원 합니다.

• NetFlow, sFlow, SPAN, RSPAN, CLI, LACP, 802.1ag 지원

• OpenFlow

Open vSwitch 설치

Source로 설치

• RPM 생성을 위한 환경 구성

• 참고 : CentOS RPM 제작

yum install -y rpm-build
yum groupinstall -y "Development Tools"

yum install -y openssl-devel
yum install kernel-devel

mkdir -p $HOME/rpmbuild/SOURCES

• CentOS 7에서 Open vSwitch 설치

$HOME/rpmbuild/SOURCES/
wget http://openvswitch.org/releases/openvswitch-2.3.0.tar.gz
tar xvfz openvswitch-2.3.0.tar.gz
cd openvswitch-2.3.0

vi rhel/openvswitch.spec
 ### Requires: openvswitch-kmod, logrotate, python
 Requires: logrotate, python

rpmbuild -bb -D `uname -r` rhel/openvswitch.spec
### rpmbuild -bb rhel/openvswitch.spec
### rpmbuild -bb rhel/openvswitch-kmod-rhel6.spec

cd $HOME/rpmbuild/RPMS/x86_64
ls -alF

yum localinstall openvswitch-2.3.0-1.x86_64.rpm

RPM으로 설치

wget [http://cbs.centos.org/kojifiles/packages/openvswitch/2.3.1/2.el7/x86_64/openvswitch-2.3.1-2.el7.x86_64.rpm http://cbs.centos.org/kojifiles/packages/openvswitch/2.3.1/2.el7/x86_64/openvswitch-2.3.1-2.el7.x86_64.rpm]                    
rpm -ivh openvswitch-2.3.1-2.el7.x86_64.rpm

vi /etc/sysconfig/openvswitch

service openvswitch restart

OVS 명령어

Bridge와 Port 설정

ovs-vsctl add-br br0                  #--- br0 Bridge 추가
ovs-vsctl del-br br0                  #--- br0 Bridge 삭제
ovs-vsctl list-br
# vi /etc/sysconfig/network-scripts/ifcfg-br0

ovs-vsctl set bridge br0 stp_enable=true     #--- STP 활성화

ovs-vsctl add-port br0 eth0           #--- br0 Bridge에 eth0 NIC 연결
ovs-vsctl del-port br0 eth0
ovs-vsctl list-ports br0
​# ethtool -K eth0 gro off

newview
ovs-vsctl show                        #--- Bridge 상세 조회

OpenFlow 설정

OpenFlow Controller 지정

ovs-vsctl set-controller br0 tcp:133.1.134.167

<parsererror style="display: block; white-space: pre; border: 2px solid #c77; padding: 0 1em 0 1em; margin: 1em; background-color: #fdd; color: black">

This page contains the following errors:

error on line 1 at column 102: attributes construct error

Below is a rendering of the page up to the first error.

</parsererror>

VLAN 설정

ovs-vsctl add-port br0 tap0 tag=100

참고 문헌

• http://openvswitch.org/support/config-cookbooks/vlan-configuration-cookbook/
• http://blog.scottlowe.org/2014/11/21/removing-ovs-configuration-settings/

VxLAN 설정

ovs–vsctl add–port br1 vx1 — set interface vx1 type=vxlan options:remote_ip=192.168.1.10
ovs–vsctl add–port br1 vx1 — set interface vx1 type=vxlan options:remote_ip=192.168.1.11

LACP 설정

참고 문헌

• http://blog.remibergsma.com/2015/03/26/connecting-two-open-vswitches-to-create-a-l2-connection/
• http://blog.remibergsma.com/tag/openvswitch/

OVN

OVN (Open Virtual Network)

• L2 segments
• L3 forwarding
• Security Group

참고 문헌

• OpenFlow
• Linux Bridge
• http://therandomsecurityguy.com/openvswitch-cheat-sheet/
• http://www.joinc.co.kr/modules/moniwiki/wiki.php/man/12/OpenVSwitch
• http://www.joinc.co.kr/modules/moniwiki/wiki.php/man/12/OpenVSwitch/Tutorial
• 컴퓨터 용어 사전