Visualizing traffic flow when using Open vSwitch
When using the Open vSwitch driver, for an Ethernet frame to travel from the virtual machine instance to the physical network, it will pass through many different interfaces, including the following:
Network Type | Interface Type | Interface Name |
all | tap | tapN |
all | bridge | qbrXXXX (only used with the iptables firewall driver) |
all | veth |
|
all | vSwitch | br-int |
flat, vlan | vSwitch | br-ex (user-configurable) |
vxlan, gre | vSwitch | br-tun |
flat, vlan | patch |
|
vxlan, gre | patch | patch-tun, patch-int |
flat, vlan | physical | ethX (where X is the interface) |
The Open vSwitch bridge br-int
is known as the integration bridge. The integration bridge is the central virtual switch that most virtual devices are connected to, including instances, DHCP servers, routers, and more. When Neutron security groups are enabled and the iptables firewall driver is used, instances are not directly connected to the integration bridge. Instead...