SFC on External Network

asked 2020-05-31 10:44:05 -0600

Mrxlazuardin gravatar image


My deployment is using OVN with single shared external network. I want to use SFC for forcing incoming packet steering through some security VNFs. Is it possible to do that on external network (floating IP/LBaaS VIP) ports and without specifying the source address. Let's say I want to inspect all incoming traffic to such tenant, on specific service only, no matter if it come from other tenants or external hosts. i want to have the reverse path for replied traffic too.

Best regards,

edit retag flag offensive close merge delete