OpenIRIS OpenAP
Download as PPTX, PDF1 like630 views
The document describes how to configure static flows on an OpenFlow switch using OpenIRIS to mirror DNS query and response traffic. It provides the required properties and examples of CURL commands to add static flows that will mirror DNS query requests to the controller and DNS response traffic back to the original source. It also provides examples for deleting specific static flows, all static flows, or all static flows for a specific switch.
![OpenIRIS OpenAPI
[static entry flow]
For DNS Query Mirroring](https://image.slidesharecdn.com/openirisopenapi-140723002504-phpapp02/85/OpenIRIS-OpenAP-1-320.jpg)
![DNS Query Request Mirroring
• Required Properties
– static flow name
– switch’s DPID
– output ports
– switch’s IN port, destination’s IPv4 …
• Pattern
– curl -d '{"name":“${static flow name}", "switch": "${switch’s dpid", "priority":
"1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions":
[${output ports}]} ] , "ip_proto": "0x11", "udp_dst": "53", "ipv4_dst":
"${destination’s IPv4}" }' http://${controller_host}:${port}/wm/staticflowentry/json
• Example
– use IN port
curl -d '{"name":"dnsquery-req", "switch": "00:00:00:23:20:83:40:71", "priority":
"1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions":
[{"output":"4"}, {"output":"1"}]} ] , "ip_proto": "0x11", "udp_dst": "53", “in_port":
“7" }' http://localhost:8080/wm/staticflowentry/json
– use destination’s IPv4
curl -d '{"name":"dnsquery-req", "switch": "00:00:00:23:20:83:40:71", "priority":
"1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions":
[{"output":"4"}, {"output":"1"}]} ] , "ip_proto": "0x11", "udp_dst": "53", "ipv4_dst":
"39.119.118.219" }' http://localhost:8080/wm/staticflowentry/json
2](https://image.slidesharecdn.com/openirisopenapi-140723002504-phpapp02/85/OpenIRIS-OpenAP-2-320.jpg)
![DNS Query Response Mirroring
• Required Properties
– static flow name
– switch’s DPID
– output ports
– switch’s IN port
• Pattern
– curl -d '{"name":“${static flow name}", "switch": "${switch’s dpid", "priority":
"1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions":
[${output ports}]} ] , "ip_proto": "0x11", "udp_src": "53", "ipv4_src": "${source’s
IPv4}" }' http://${controller_host}:${port}/wm/staticflowentry/json
• Example
– curl -d '{"name":"dnsquery-res", "switch": "00:00:00:23:20:83:40:71", "priority":
"1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions":
[{"output":"4"}, {"output":“7"}]} ] , "ip_proto": "0x11", "udp_src": "53", “in_port":
“1" }' http://localhost:8080/wm/staticflowentry/json
3](https://image.slidesharecdn.com/openirisopenapi-140723002504-phpapp02/85/OpenIRIS-OpenAP-3-320.jpg)
OpenIRIS OpenAP
- 1. OpenIRIS OpenAPI [static entry flow] For DNS Query Mirroring
- 2. DNS Query Request Mirroring • Required Properties – static flow name – switch’s DPID – output ports – switch’s IN port, destination’s IPv4 … • Pattern – curl -d '{"name":“${static flow name}", "switch": "${switch’s dpid", "priority": "1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions": [${output ports}]} ] , "ip_proto": "0x11", "udp_dst": "53", "ipv4_dst": "${destination’s IPv4}" }' http://${controller_host}:${port}/wm/staticflowentry/json • Example – use IN port curl -d '{"name":"dnsquery-req", "switch": "00:00:00:23:20:83:40:71", "priority": "1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions": [{"output":"4"}, {"output":"1"}]} ] , "ip_proto": "0x11", "udp_dst": "53", “in_port": “7" }' http://localhost:8080/wm/staticflowentry/json – use destination’s IPv4 curl -d '{"name":"dnsquery-req", "switch": "00:00:00:23:20:83:40:71", "priority": "1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions": [{"output":"4"}, {"output":"1"}]} ] , "ip_proto": "0x11", "udp_dst": "53", "ipv4_dst": "39.119.118.219" }' http://localhost:8080/wm/staticflowentry/json 2
- 3. DNS Query Response Mirroring • Required Properties – static flow name – switch’s DPID – output ports – switch’s IN port • Pattern – curl -d '{"name":“${static flow name}", "switch": "${switch’s dpid", "priority": "1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions": [${output ports}]} ] , "ip_proto": "0x11", "udp_src": "53", "ipv4_src": "${source’s IPv4}" }' http://${controller_host}:${port}/wm/staticflowentry/json • Example – curl -d '{"name":"dnsquery-res", "switch": "00:00:00:23:20:83:40:71", "priority": "1000", "eth_type": "0x0800", "active": "true", "instructions": [ {"apply_actions": [{"output":"4"}, {"output":“7"}]} ] , "ip_proto": "0x11", "udp_src": "53", “in_port": “1" }' http://localhost:8080/wm/staticflowentry/json 3
- 4. Delete flow(s) • delete a specific static flow – curl -X DELETE -d '{"name": "dnsquery-res"}' http://localhost:8080/wm/staticflowentry/json • delete all static flow – curl http://localhost:8080/wm/staticflowentry/clear/all/json • delete all static flow of a specific switch – curl http://localhost:8080/wm/staticflowentry/clear/00:00:00:23:20:21: 49:04/json 4