编者按：环路广播风暴，如果有环路，数据帧将会在环路中来回传递，大量增生数据帧，形成广播风暴。在SDN中部分控制器可以抑制环路广播风暴的产生，如Floodlight，而像POX控制器，就不能很好的解决广播风暴的问题。
接下来将对Floodlight和POX控制器进行广播风暴实验的对比。
物理连接上OF1、OF2、OF3形成环路，使用Flowvisor（192.168.20.6:6634）隔离成两个虚网。VM1和VM3在一个虚网中，由POX（192.168.20.6:6635）控制，VM2和VM3在另一个虚网中，由Floodlight（192.168.20.6:6636）控制。
POX安装与配置
安装：
|
1 |
git clone http://github.com/noxrepo/pox |
启动：
|
1 |
./pox.py forwarding.l2_learning openflow.of_01 --port=6635 |
Floodlight安装与安装
安装：
|
1 2 |
apt-get install build-essential default-jdk ant python-dev git clone git://github.com/floodlight/floodlight.git |
ant;
端口配置：
|
1 |
vi ./src/main/resources/floodlightdefault.properties |
启动：
|
1 |
nohup java -jar target/floodlight.jar > /dev/null & |
Flowvisor安装与配置
安装：
|
1 2 3 4 |
sudo apt-get install ant sudo apt-get install openjdk-6-jdk wget https://github.com/OPENNETWORKINGLAB/flowvisor/archive/1.2-MAINT.zip make && make install |
端口配置
|
1 |
vi /etc/flowvisor/config.json（目前使用监听端口6634） |
普通用户下启动：
|
1 |
nohup flowvisor /etc/flowvisor/config.json >/dev/null & |
OvS安装与配置
OvS在之前已经写过，详情可查看《Open vSwitch2.3.0版本安装部署及基本操作》。
创建虚网
创建两个slice，分别指定到POX和Floodlight上：
|
1 2 |
fvctl -p 8181 add-slice s1 tcp:127.0.0.1:6635 1@1 fvctl -p 8181 add-slice s2 tcp:127.0.0.1:6636 2@2 |
修改OvS的dpid：
|
1 2 3 4 5 6 7 |
192.168.20.3：ovs-vsctl set bridge br0 other_config:datapath-id=1000000000000001 192.168.20.4：ovs-vsctl set bridge br0 other_config:datapath-id=1000000000000002 192.168.20.5：ovs-vsctl set bridge br0 other_config:datapath-id=1000000000000003 root@fnic8:~# ovs-vsctl list bridge br0 _uuid : 9a7f1e47-b5f1-410f-9a63-0393acf1a651 controller : [1ab5ceec-3965-47c4-89ab-1f1f408470bb] datapath_id : "1000000000000001" |
查看端口号：
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 |
root@fnic8:~# ovs-ofctl show br0 OFPT_FEATURES_REPLY (xid=0x2): dpid:1000000000000001 n_tables:254, n_buffers:256 capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP actions: OUTPUT SET_VLAN_VID SET_VLAN_PCP STRIP_VLAN SET_DL_SRC SET_DL_DST SET_NW_SRC SET_NW_DST SET_NW_TOS SET_TP_SRC SET_TP_DST ENQUEUE 1(vnet0): addr:fe:54:00:d4:fa:b1 config: 0 state: 0 current: 10MB-FD COPPER speed: 10 Mbps now, 0 Mbps max 2(eth1): addr:74:86:7a:d7:65:65 config: 0 state: 0 current: 100MB-FD COPPER AUTO_NEG advertised: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-HD 1GB-FD COPPER AUTO_NEG AUTO_PAUSE supported: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-HD 1GB-FD COPPER AUTO_NEG speed: 100 Mbps now, 1000 Mbps max 3(eth2): addr:74:86:7a:d7:65:66 config: 0 state: 0 current: 1GB-FD COPPER AUTO_NEG advertised: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-HD 1GB-FD COPPER AUTO_NEG AUTO_PAUSE supported: 10MB-HD 10MB-FD 100MB-HD 100MB-FD 1GB-HD 1GB-FD COPPER AUTO_NEG speed: 1000 Mbps now, 1000 Mbps max LOCAL(br0): addr:74:86:7a:d7:65:65 config: 0 state: 0 speed: 0 Mbps now, 0 Mbps max OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0 |
虚网隔离创建
执行以下脚本，创建flowspace：
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 |
DP1=1000000000000001 DP2=1000000000000002 DP3=1000000000000003 #s1-dpid1 fvctl -p 8181 add-flowspace -f 1 space1 $DP1 1 in_port=1,nw_dst=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP1 1 in_port=1,nw_src=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP1 1 in_port=2,nw_dst=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP1 1 in_port=2,nw_src=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP1 1 in_port=3,nw_dst=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP1 1 in_port=3,nw_src=10.0.0.1 s1=7 #s1-dpid2 fvctl -p 8181 add-flowspace -f 1 space1 $DP2 1 in_port=2,nw_dst=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP2 1 in_port=2,nw_src=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP2 1 in_port=3,nw_dst=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP2 1 in_port=3,nw_src=10.0.0.1 s1=7 #s1-dpid3 fvctl -p 8181 add-flowspace -f 1 space1 $DP3 1 in_port=1,nw_dst=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP3 1 in_port=1,nw_src=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP3 1 in_port=2,nw_dst=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP3 1 in_port=2,nw_src=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP3 1 in_port=3,nw_dst=10.0.0.1 s1=7 fvctl -p 8181 add-flowspace -f 1 space1 $DP3 1 in_port=3,nw_src=10.0.0.1 s1=7 #s2-dpid1 fvctl -p 8181 add-flowspace -f 2 space1 $DP1 1 in_port=2,nw_dst=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP1 1 in_port=2,nw_src=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP1 1 in_port=3,nw_dst=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP1 1 in_port=3,nw_src=10.0.0.2 s2=7 #s2-dpid2 fvctl -p 8181 add-flowspace -f 2 space1 $DP2 1 in_port=1,nw_dst=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP2 1 in_port=1,nw_src=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP2 1 in_port=2,nw_dst=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP2 1 in_port=2,nw_src=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP2 1 in_port=3,nw_dst=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP2 1 in_port=3,nw_src=10.0.0.2 s2=7 #s2-dpid3 fvctl -p 8181 add-flowspace -f 2 space1 $DP3 1 in_port=1,nw_dst=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP3 1 in_port=1,nw_src=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP3 1 in_port=2,nw_dst=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP3 1 in_port=2,nw_src=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP3 1 in_port=3,nw_dst=10.0.0.2 s2=7 fvctl -p 8181 add-flowspace -f 2 space1 $DP3 1 in_port=3,nw_src=10.0.0.2 s2=7 |
设置队列
OvS1设置队列，流量隔离
执行以下脚本设置队列：
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 |
#!/bin/bash #clear config ovs-vsctl del-br br0 ovs-vsctl -- --all destroy qos ovs-vsctl -- --all destroy queue ovs-vsctl add-br br0 -- set bridge br0 other_config:datapath-id=1000000000000001 ovs-vsctl set-controller br0 tcp:192.168.20.6:6634 ovs-vsctl set bridge br0 fail_mode=secure virsh destroy vm3 //vm3为VM名称 sleep 5 virsh start vm3 sleep 5 ovs-vsctl add-port br0 eth1 ovs-vsctl add-port br0 eth2 #qos ovs-vsctl set port eth1 qos=@newqos -- --id=@newqos create qos type=linux-htb\ queues=1=@q1,2=@q2 other_config:max-rate=`ovs-vsctl get interface eth1 link-speed`\ -- --id=@q1 create queue other_config:min-rate=10000000\ -- --id=@q2 create queue other_config:min-rate=10000000 ovs-vsctl set port eth2 qos=@newqos -- --id=@newqos create qos type=linux-htb\ queues=1=@q1,2=@q2 other_config:max-rate=`ovs-vsctl get interface eth2 link-speed`\ -- --id=@q1 create queue other_config:min-rate=10000000\ -- --id=@q2 create queue other_config:min-rate=10000000 |
OvS2设置队列，流量隔离
执行以下脚本设置队列：
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 |
#!/bin/bash #clear config ovs-vsctl del-br br0 ovs-vsctl -- --all destroy qos ovs-vsctl -- --all destroy queue ovs-vsctl add-br br0 -- set bridge br0 other_config:datapath-id=1000000000000002 ovs-vsctl set-controller br0 tcp:192.168.20.6:6634 ovs-vsctl set bridge br0 fail_mode=secure virsh destroy vm4 sleep 5 virsh start vm4 sleep 5 ovs-vsctl add-port br0 eth1 ovs-vsctl add-port br0 eth2 #qos ovs-vsctl set port eth1 qos=@newqos -- --id=@newqos create qos type=linux-htb\ queues=1=@q1,2=@q2 other_config:max-rate=`ovs-vsctl get interface eth1 link-speed`\ -- --id=@q1 create queue other_config:min-rate=10000000\ -- --id=@q2 create queue other_config:min-rate=10000000 ovs-vsctl set port eth2 qos=@newqos -- --id=@newqos create qos type=linux-htb\ queues=1=@q1,2=@q2 other_config:max-rate=`ovs-vsctl get interface eth2 link-speed`\ -- --id=@q1 create queue other_config:min-rate=10000000\ -- --id=@q2 create queue other_config:min-rate=10000000 |
OvS3设置队列，流量隔离
执行以下脚本设置队列：
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 |
#!/bin/bash #clear config ovs-vsctl del-br br0 ovs-vsctl -- --all destroy qos ovs-vsctl -- --all destroy queue ovs-vsctl add-br br0 -- set bridge br0 other_config:datapath-id=1000000000000003 ovs-vsctl set-controller br0 tcp:192.168.20.6:6634 ovs-vsctl set bridge br0 fail_mode=secure virsh destroy vm5 sleep 5 virsh start vm5 sleep 5 ovs-vsctl add-port br0 eth1 ovs-vsctl add-port br0 eth2 #qos ovs-vsctl set port eth1 qos=@newqos -- --id=@newqos create qos type=linux-htb\ queues=1=@q1,2=@q2 other_config:max-rate=`ovs-vsctl get interface eth1 link-speed`\ -- --id=@q1 create queue other_config:min-rate=10000000\ -- --id=@q2 create queue other_config:min-rate=10000000 ovs-vsctl set port eth2 qos=@newqos -- --id=@newqos create qos type=linux-htb\ queues=1=@q1,2=@q2 other_config:max-rate=`ovs-vsctl get interface eth2 link-speed`\ -- --id=@q1 create queue other_config:min-rate=10000000\ -- --id=@q2 create queue other_config:min-rate=10000000 |
实验结果
VM1与VM3形成广播风暴；
VM2与VM3可以ping通，Floodlight的最小生成树协议成功抑制了广播风暴；
VM1与VM2 由于在不同的flowspace中ping不通。
