openvswitch实现arp代答和icmp代答

参考

https://www.jianshu.com/p/df2eac8473db

 

ovs-ofctl add-flow br-int table=0,in_port=1,arp,arp_tpa=10.0.0.1,arp_op=1,actions=move:"NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[]",mod_dl_src:"02:ac:10:ff:01:01",load:"0x02->NXM_OF_ARP_OP[]",move:"NXM_NX_ARP_SHA[]->NXM_NX_ARP_THA[]",load:"0x02ac10ff0101->NXM_NX_ARP_SHA[]",move:"NXM_OF_ARP_SPA[]->NXM_OF_ARP_TPA[]",load:"0x0a000001->NXM_OF_ARP_SPA[]",in_port

解析

• move:"NXM_OF_ETH_SRC[]->NXM_OF_ETH_DST[]" 将请求的源mac作为reply的目标mac
• mod_dl_src:"02:ac:10:ff:01:01" 修改reply的源mac为虚拟网关的mac
• load:"0x02->NXM_OF_ARP_OP[]" 修改arp包类型为reply包
• move:"NXM_NX_ARP_SHA[]->NXM_NX_ARP_THA[]" 将request包中的源mac赋值给reply的目标mac
• load:"0x02ac10ff0101->NXM_NX_ARP_SHA[]" 设置reply的源mac
• move:"NX