neutron-openvswitch-agent下發(fā)流表導(dǎo)致轉(zhuǎn)發(fā)不通問題

yuexiaduzhuo_cu

配置：nova+neutron+openvswitch+dpdk，兩臺虛擬機vm1，vm2，in_port54對應(yīng)vm1，in_port59對應(yīng)vm2，兩臺虛擬機上配置靜態(tài)arp

問題描述：
1、手動搭建dpdk環(huán)境，啟動兩臺虛擬機，把端口以vhostuser模式加入到openvswitch上，兩臺虛擬機可以ping通
2、利用openstack環(huán)境啟動兩臺虛擬機，不能互相ping通。
3、用ovs-ofctl查看ovs的流表發(fā)現(xiàn)安全組給ovs下發(fā)了很多流表
4、在兩臺虛擬機上抓包發(fā)現(xiàn)vm1發(fā)出的icmp報文vm2可以收到，并且vm2可以回應(yīng)，但是在vm1上收不到vm2的回應(yīng)報文

截圖：


流表：
cookie=0x0, duration=2396.146s, table=0, n_packets=1906, n_bytes=186548, idle_age=2, priority=50,dl_src=fa:16:3e:f8:d4:b3 actions=mod_vlan_vid:1,load:0->NXM_NX_REG0[0..11],resubmit(,1)
cookie=0x0, duration=2395.994s, table=0, n_packets=1906, n_bytes=186548, idle_age=2, priority=50,dl_src=fa:16:3e:11:4d:b0 actions=mod_vlan_vid:1,load:0->NXM_NX_REG0[0..11],resubmit(,1)
cookie=0x0, duration=2396.144s, table=1, n_packets=1894, n_bytes=185612, idle_age=2, priority=100,ip,in_port=54,dl_vlan=1,dl_src=fa:16:3e:f8:d4:b3,nw_src=192.168.0.113 actions=resubmit(,11)
cookie=0x0, duration=2395.992s, table=1, n_packets=1894, n_bytes=185612, idle_age=2, priority=100,ip,in_port=59,dl_vlan=1,dl_src=fa:16:3e:11:4d:b0,nw_src=192.168.0.114 actions=resubmit(,11)
cookie=0x0, duration=2395.972s, table=11, n_packets=1841, n_bytes=180418, idle_age=2, priority=30,ip,dl_src=fa:16:3e:f8:d4:b3,nw_src=192.168.0.113 actions=learn(table=21,idle_timeout=30,hard_timeout=1800,priority=90,eth_type=0x800,NXM_OF_ETH_SRC[]=NXM_OF_ETH_DST[],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],NXM_OF_IP_SRC[]=NXM_OF_IP_DST[],NXM_OF_IP_DST[]=NXM_OF_IP_SRC[],NXM_OF_VLAN_TCI[0..11],load:NXM_NX_REG0[0..11]->NXM_OF_VLAN_TCI[0..11],output:NXM_OF_IN_PORT[]),resubmit(,21)
cookie=0x0, duration=2395.975s, table=11, n_packets=53, n_bytes=5194, idle_age=2286, priority=30,ip,dl_src=fa:16:3e:11:4d:b0,nw_src=192.168.0.114 actions=learn(table=21,idle_timeout=30,hard_timeout=1800,priority=90,eth_type=0x800,NXM_OF_ETH_SRC[]=NXM_OF_ETH_DST[],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],NXM_OF_IP_SRC[]=NXM_OF_IP_DST[],NXM_OF_IP_DST[]=NXM_OF_IP_SRC[],NXM_OF_VLAN_TCI[0..11],load:NXM_NX_REG0[0..11]->NXM_OF_VLAN_TCI[0..11],output:NXM_OF_IN_PORT[]),resubmit(,21)
cookie=0x0, duration=2395.977s, table=21, n_packets=1841, n_bytes=180418, idle_age=2, priority=30,icmp,dl_dst=fa:16:3e:11:4d:b0,nw_dst=192.168.0.114 actions=learn(table=11,idle_timeout=30,hard_timeout=1800,priority=90,eth_type=0x800,nw_proto=1,NXM_OF_ETH_SRC[]=NXM_OF_ETH_DST[],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],NXM_OF_IP_SRC[]=NXM_OF_IP_DST[],NXM_OF_IP_DST[]=NXM_OF_IP_SRC[],NXM_OF_VLAN_TCI[0..11],load:NXM_NX_REG0[0..11]->NXM_OF_VLAN_TCI[0..11],output:NXM_OF_IN_PORT[]),strip_vlan,output:59
cookie=0x0, duration=2395.974s, table=21, n_packets=53, n_bytes=5194, idle_age=2286, priority=30,icmp,dl_dst=fa:16:3e:f8:d4:b3,nw_dst=192.168.0.113 actions=learn(table=11,idle_timeout=30,hard_timeout=1800,priority=90,eth_type=0x800,nw_proto=1,NXM_OF_ETH_SRC[]=NXM_OF_ETH_DST[],NXM_OF_ETH_DST[]=NXM_OF_ETH_SRC[],NXM_OF_IP_SRC[]=NXM_OF_IP_DST[],NXM_OF_IP_DST[]=NXM_OF_IP_SRC[],NXM_OF_VLAN_TCI[0..11],load:NXM_NX_REG0[0..11]->NXM_OF_VLAN_TCI[0..11],output:NXM_OF_IN_PORT[]),strip_vlan,output:54

問題：
table0和table1還算正常，packets數(shù)量比較接近，為什么到了table11上114這臺機器，也就是vm2的packets只有53個，那些包是怎么丟掉的呢，我對openflow了解的不多，這里流表在resubmit的過程中丟了哪些包，是不是這個導(dǎo)致的ping不通呢，請各位指教