gaopeiliang / questions

0 stars 0 forks source link

ofnet 是怎么处理dns的 #5

Open gaopeiliang opened 4 years ago

gaopeiliang commented 4 years ago

采用流表发送所有的DNS query 到控制器 cookie=0x13, duration=526621.968s, table=0, n_packets=6, n_bytes=528, priority=100,udp,dl_src=02:02:00:00:00:00/ff:ff:00:00:00:00,tp_dst=53 actions=CONTROLLER:65535

控制器在本地维护的nameServer进行查找,直接代答或者再走正常的查询流程 cookie=0x14, duration=526621.968s, table=0, n_packets=6, n_bytes=552, priority=101,udp,dl_vlan=4093,dl_src=02:02:00:00:00:00/ff:ff:00:00:00:00,tp_dst=53 actions=pop_vlan,goto_table:1

gaopeiliang commented 4 years ago

控制器失效会影响所有POD的DNS解析, 解决思路: 1. 去掉控制器拦截DNS请求的流程,缺点就是无法注入域名解析