Fabric Port Mirroring Service

[Sean Cummings]

Hello, we are attempting to utilize the port mirroring service to mirror traffic on a port from a ToR (top-of-rack) switch to a worker node. How do we go about obtaining the permission to do this (presumably Net.PortMirror)? Also, are there any examples available of when this feature was used to mirror traffic in this manner through FABlib? I think this would be especially helpful to see. Thanks.

• This topic was modified 1 year, 8 months ago by Sean Cummings.

[Ilya Baldin]

Sean,

You are correct that your project needs Net.PortMirror tag in order to access this service (project owner needs to request it through the portal).

In general we need to understand specifically what your usecase is. PortMirror service obviously is quite powerful in that it allows to mirror traffic on any port into another port. Only the port you are mirroring *to* has to be in your slice (expected to be a dedicated 10/25 or 100G port), the port you are mirroring from can be any port on the switch within a given site. Before you start mirroring traffic belonging to others we need to understand the purpose and the scope (and also have you test port mirroring on your own slices first).

The port mirroring service is not yet well-integrated into the fablib, it is available as a lower-level library call like so (presumably myinterface is the interface of a dedicated card):

myinterface.get_slice().get_fim_topology().add_port_mirror_service(name=name, from_interface_name=port_name, to_interface=self.get_fim_interface())

We really do need to understand your usecase though before we proceed to make sure you have the right tools.

[Author]

Posts