ovs-dpctl(8) Open vSwitch Manual ovs-dpctl(8) (NAME) ovs-dpctl - Open vSwitch (SYNOPSIS) ovs-dpctl [] [] [...] (DESCRIPTION) ovs-dpctl (datapath) Open vSwitch . . ovs-vswitchd . ovs-vswitchd (netdev) ovs-appctl(8) dpctl/* ovs-vswitchd(8) . << >> (local port) . . add-if . ovs-vswitchd(8) ovs-dpctl ovs-vsctl(8) . ovs-dpctl . [type@]name name . type name system . . ovs-vswitchd ovs-vswitchd . add-dp dp [netdev[,option]...] dp dp . dp . netdev ovs-dpctl add-if . del-dp dp dp . dp . add-if dp netdev[,option]... netdev dp dp netdev ( eth0) . . netdev . : type=type . system . port_no=port . . key=value - . ovs-vswitchd.conf.db(5) . set-if dp port[,option]... port dp . key=value - . key= ( ) - key . type port_no . del-if dp netdev... netdev dp . dump-dps . [-s | --statistics] show [dp...] ( ). -s --statistics . . "lookups" . "hit" . "missed" . "lost" (drop) . "hit" "miss" . "flows" . "masks" . . "hit" . "total" . "hit/pkt" "hit" . . ovs-dpctl . (DATAPATH FLOW TABLE DEBUGGING COMMANDS) Open vSwitch . ( ) OpenFlow . Open vSwitch . ovs-vswitchd ovs-vswitchd . OpenFlow ovs-ofctl(8) . dp . . [-m | --more] [--names | --no-names] dump-flows [dp] [filter=filter] [type=type] [pmd=pmd] dp . -m --more (wildcard) -m --more . filter=filter filter . filter add-flow ovs-ofctl(8) ( OpenFlow : ). filter . filter='tcp,tp_src=100' . pmd=pmd pmd . pmd=-1 (thread) . (userspace datapath) . type=type . ovs-appctl dpctl/dump-flows . type : ovs - ovs tc - tc dpdk - dpdk offloaded - non-offloaded - partially-offloaded - all - . ovs-dpctl type ovs . add-flow [dp] flow actions [--clear] [--may-create] [-s | --statistics] mod-flow [dp] flow actions dp flow actions . add-flow flow dp . mod-flow --may-create . --may-create mod-flow . -s --statistics mod-flow . ( ) ( TCP) TCP . --clear mod-flow . -s --statistics . : flow actions add-flow ovs-ofctl(8) . (Usage Examples) ARP myDP: ovs-dpctl add-flow myDP \ "in_port(1),eth(),eth_type(0x0806),arp()" 2 ovs-dpctl add-flow myDP \ "in_port(2),eth(),eth_type(0x0806),arp()" 1 IPv4 : ovs-dpctl add-flow myDP \ "in_port(1),eth(),eth_type(0x800),\ ipv4(src=172.31.110.4,dst=172.31.110.5)" 2 ovs-dpctl add-flow myDP \ "in_port(2),eth(),eth_type(0x800),\ ipv4(src=172.31.110.5,dst=172.31.110.4)" 1 add-flows [dp] file mod-flows [dp] file del-flows [dp] file file ( stdin file - ) . ( file) add modify delete . . . [-s | --statistics] del-flow [dp] flow dp flow . -s --statistics del-flow . [-m | --more] [--names | --no-names] get-flow [dp] ufid:ufid ufid dp . ufid . del-flows [dp] dp . (DATAPATH FLOW CACHE COMMANDS) () . cache-get-size [dp] . cache-set-size dp cache size cache dp size . cache-get-size . (CONNECTION TRACKING TABLE COMMANDS) (connection tracking) . dp . . ( ): system ( Open vSwitch) ( iptables nftables ). . ipf-set-enabled [dp] v4|v6 ipf-set-disabled [dp] v4|v6 IP . v4 v6 . IPv4 IPv6 . . ipf-set-min-frag [dp] v4|v6 minfrag ( L3 ) minfrag . v4 v6 . DoS . IPv4 . IPv6 . . . ipf-set-max-nfrags [dp] maxfrags maxfrags . . . . . [-m | --more] ipf-get-status [dp] . -m --more IP . . [-m | --more] [-s | --statistics] dump-conntrack [dp] [zone=zone] dp . zone=zone zone . --more . --statistics . dump-conntrack-exp [dp] [zone=zone] dp . zone=zone zone . . flush-conntrack [dp] [zone=zone] [ct-origin-tuple [ct-reply-tuple]] dp zone ct-origin-tuple . ct-tuple . zone=zone zone . ct-[orig|reply]-tuple ct-[orig|reply]-tuple zone . . NAT . . ct-reply-tuple ct-origin-tuple . : ICMP ICMP ct-[orig|reply]-tuple IP . ct-[orig|reply]-tuple IPv4 ICMP: "ct_nw_src=10.1.1.1,ct_nw_dst=10.1.1.2,ct_nw_proto=1,icmp_type=8,icmp_code=0,icmp_id=10" ct-[orig|reply]-tuple IPv6 TCP: "ct_ipv6_src=fc00::1,ct_ipv6_dst=fc00::2,ct_nw_proto=6,ct_tp_src=1,ct_tp_dst=2" [-m | --more] ct-stats-show [dp] [zone=zone] dp . zone=zone zone . --more . ct-bkts [dp] [gt=threshold] conntrack dp . gt=threshold threshold . ct-set-maxconns [dp] maxconns dp maxconns . . ( ). . ct-get-maxconns [dp] dp . . ct-get-nconns [dp] dp . . ct-enable-tcp-seq-chk [dp] ct-disable-tcp-seq-chk [dp] TCP . TCP . 'be_liberal' Netfilter . . . . ct-get-tcp-seq-chk [dp] TCP dp . . ct-set-sweep-interval [dp] ms (sweep interval) . . ct-get-sweep-interval [dp] . . ct-set-limits [dp] [default=default_limit] [zone=zone,limit=limit]... . zone limit . . default=default_limit . . 0 . ct-del-limits [dp] zone=zone[,zone]... zone . . ct-get-limits [dp] [zone=zone[,zone]...] . zone () . . . (OPTIONS) -t --timeout=secs ovs-dpctl secs . ovs-dpctl SIGALRM . -v[spec] --verbose=[spec] (logging) . spec dbg . spec : o vlog/list ovs-appctl(8) . o syslog console file . ( --detach ovs-dpctl ). o off emer err warn info dbg . . off . ovs-appctl(8) . spec . file --log-file ( ). OVS any . -v --verbose (verbosity) --verbose=dbg . -vPATTERN:destination:pattern --verbose=PATTERN:destination:pattern destination pattern . pattern ovs-appctl(8) . -vFACILITY:facility --verbose=FACILITY:facility (facility) RFC5424 . facility kern user mail daemon auth syslog lpr news uucp clock ftp ntp audit alert clock2 local0 local1 local2 local3 local4 local5 local6 local7 . daemon syslog local0 --syslog-target . --log-file[=file] . file . file /var/log/openvswitch/ovs-dpctl.log . --syslog-target=host:port syslog syslog port UDP host . host IP . --syslog-method=method syslog method syslog . : o libc syslog() libc. libc syslog /dev/log . o unix:file . . rsyslogd 8.9 . rsyslogd UDP IP . o udp:ip:port UDP. rsyslogd . syslog UDP syslog UDP iptables syslog UDP . o null syslog . OVS_SYSLOG_METHOD libc . -h --help . -V --version . (SEE ALSO) ovs-appctl(8), ovs-vswitchd(8) Open vSwitch 4.0.0 ovs-dpctl(8)