[ovirt-users] Re: encrypted GENEVE traffic
On Thursday, 12 December 2019 13:09:39 CET Dominik Holler wrote:
On Thu, Dec 12, 2019 at 12:20 PM Pavel Nakonechnyi
<pavel(a)gremwell.com>
wrote:
> On Thursday, 12 December 2019 10:23:28 CET Dominik Holler wrote:
> > On Thu, Dec 12, 2019 at 10:06 AM Pavel Nakonechnyi <pavel(a)gremwell.com>
>
> What creates all these chassis, mappings, encapsulations?
This is all done by OVN.
On every host runs the ovn-controller, which configures the tunnels
according to
the information he gets from ovn south db.
Please find a good entry in
http://www.openvswitch.org/support/dist-docs/ovn-architecture.7.html
but all documentation about OVN should work.
Thank you! Was incorrectly reading about Open vSwitch, not OpenVN. :)
> however, I was not able to find any clues where in particular it
is
> implemented...
>
> Once this is understood, it will be possible to consider altering the
> corresponding code to include ipsec-related options.
This would be amazing!
I have added some notes on my attempts to the aforementioned bug (https://
bugzilla.redhat.com/show_bug.cgi?id=1782056). So, it appears to be almost
working.
--
WBR, Pavel
+32478910884