Using networking-sfc with liberty neutron (not a devstack)

asked 2016-04-28 06:32:36 -0500

artacc gravatar image

I'm using openstack liberty with neutron 7.0.2.
I have installed networking-sfc by using pip install networking-sfc as it is said in (this link).
Networking-sfc version is 1.0.0

However I cannot use any of the sfc commands through neutron client:

> neutron port-pair-list
The resource could not be found.

I'm probably missing some config parameter but cannot find any information.
It there a way to make neutron work with sfc outside of devstack?

The only useful information I was able to find in neutron logs is this:

2016-04-28 11:24:15.044 53207 WARNING keystonemiddleware.auth_token [-] Using the in-process token cache is deprecated as of the 4.2.0 release and may be removed in the 5.0.0 release or the 'O' development cycle. The in-process cache causes inconsistent results and high memory usage. When the feature is removed the auth_token middleware will not cache tokens by default which may result in performance issues. It is recommended to use  memcache for the auth_token token cache by setting the memcached_servers option.
2016-04-28 11:24:15.045 53207 DEBUG keystoneauth.session [-] REQ: curl -g -i -X GET -H "Accept: application/json" -H "User-Agent: neutron/7.0.2 keystonemiddleware.auth_token/2.3.2 keystoneauth1/2.6.0 python-requests/2.9.1 CPython/2.7.6" _http_log_request /usr/lib/python2.7/dist-packages/keystoneauth1/
2016-04-28 11:24:15.065 53207 DEBUG keystoneauth.session [-] RESP: [300] Content-Length: 593 Vary: X-Auth-Token Server: Apache Connection: close Date: Thu, 28 Apr 2016 11:24:15 GMT Content-Type: application/json
RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-03-30T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.4", "links": [{"href": "", "rel": "self"}]}, {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}], "id": "v2.0", "links": [{"href": "", "rel": "self"}, {"href": "", "type": "text/html", "rel": "describedby"}]}]}}
 _http_log_response /usr/lib/python2.7/dist-packages/keystoneauth1/
2016-04-28 11:24:15.068 53207 DEBUG keystoneauth.identity.v2 [-] Making authentication request to get_auth_ref /usr/lib/python2.7/dist-packages/keystoneauth1/identity/
2016-04-28 11:24:15.170 53207 DEBUG keystoneauth.session [-] REQ: curl -g -i -X GET -H "X-Subject-Token: {SHA1}4b086c44c286870c8f9790ca4c00315475991860" -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}6b8583a1e9982d5797a2f29322b13f324800ee72" _http_log_request /usr/lib/python2.7/dist-packages/keystoneauth1/
2016-04-28 11:24:15.285 53207 DEBUG keystoneauth.session [-] RESP: [200] Content-Length: 7752 X-Subject-Token: {SHA1}4b086c44c286870c8f9790ca4c00315475991860 Vary: X-Auth-Token Server: Apache Connection: close Date: Thu, 28 Apr 2016 11:24:15 GMT Content-Type: application/json x-openstack-request-id: req-04463f86-8028-4ad4-a237-2e5d8e73ae55
RESP BODY: {"token": {"methods": ["password"], "roles": [{"id": "0082b0253fab47c9857973ee7a4b78f6", "name": "admin"}], "expires_at": "2016-04-28T12:24:14.999633Z", "project": {"domain": {"id": "default", "name ...
edit retag flag offensive close merge delete

2 answers

Sort by ┬╗ oldest newest most voted

answered 2016-05-18 21:31:34 -0500

updated 2016-06-07 20:28:20 -0500

I have a same problem. I solved this problem.

neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini --subproject networking-sfc upgrade head

But something wrong.

ovs-ofclt dump-flows <bridge> -O openflow13

I can't found networking-sfc flow.


sudo service neutron-openvswitch-agent stop

sudo python /usr/local/bin/neutron-openvswitch-agent

check networking-sfc flow...

Keypoint is networking-sfc ovs agent.

Using networking-sfc ovs agent instead of neutron-plugin-openvswitch-agent.

Thanks to my friend... chi-wook. Jung :)


git clone -b stable/liberty pip install -e /home/{user}/networking-sfc

you can find lib file. /usr/local/lib/python2.7/dist-packages/

python install (in networking-sfc directory)

then you can find neutron-openvswitch-agent file. (/usr/local/bin/)

problem is neutron-sfc driver RPC Call to openvswitch-agent is OK...

But openvswitch-agent is silence...


cp /usr/local/bin/neutron-openvswitch-agent /usr/bin/neutron-openvswitch-agent

that's all

edit flag offensive delete link more


Thanks! I missed this part. I figured out you also need to update service_plugins in neutron.conf by adding, and [sfc] drivers=ovs at the end. But tcpdump on vnf shows nothing

artacc gravatar imageartacc ( 2016-05-19 09:59:41 -0500 )edit

I don't know... using devstack(liberty+sfc)... everything is perfect!!! create flow-classifier/port-pair/port-pair-group/port-chain is fine! and dump-flows is very good.

not devstack environment... create flow-classifier/port-pair/port-pair-group/port-chain is seems OK... But I can't see sfc flows.

uni2u gravatar imageuni2u ( 2016-05-20 01:09:56 -0500 )edit

yes, same issue.
Did you try multi node devstack or single node? On multi node + sfc my virtual machines are not getting ip address. There is also an UnsupportedVersion rpc error which I get around by modifying versions in code.
Both multi node without sfc and single node + sfc work fine.

artacc gravatar imageartacc ( 2016-05-20 04:09:25 -0500 )edit

My devstack environment is multi node... one is devstack all_in_one and the other is devstack compute. (the version is stable/liberty) (

uni2u gravatar imageuni2u ( 2016-05-20 05:43:32 -0500 )edit

The key is neutron-plugin-openvswitch-agent... networking-sfc worked own neutron-openvswitch-agent. So... First stoped neutron-plugin-openvswitch-agent. (sudo service neutron-plugin-openvswitch-agent stop) Second start networking-sfc agent. (sudo python /usr/local/bin/neutron-openvswitch-agent)

uni2u gravatar imageuni2u ( 2016-05-31 23:09:58 -0500 )edit

answered 2017-01-06 00:37:41 -0500

joezts gravatar image

Did you install OpenStack manually?

I installed OpenStack manually, following the installation guide.

Evevrthing seems works fine, but there is no sfc flows when I create port-chain.

I've seen the solution mentioned above, but I couldn't find neutron-openvswitch-agent in /usr/local/bin/.

Have you solved the problem? Thanks.

edit flag offensive delete link more


Yes. I installed OpenStack manually.

But that time... OpenStack networking-sfc version is liberty.

Anyway I installed networking-sfc using python install command. (not using pip install networking-sfc command)

uni2u gravatar imageuni2u ( 2017-01-08 17:30:40 -0500 )edit

I'm using the latest version, Newton. And I git clone the source code, running "python install". When deploying Networking service, I installed neutron-openvswitch-agent. Does it really need a networking-sfc ovs agent?Did you solve the problem in your manual deployment or use devstack?

joezts gravatar imagejoezts ( 2017-01-09 00:24:47 -0500 )edit

Now a day, I don't use devstack. networking-sfc neutron-openvswitch-agent work instead of neutron-openvswitch-agent. liberty version, doesn't worked networking-sfc neutron-openvswitch-agent. so replaced the ovs-agent. (cp /usr/local/bin/neutron-openvswitch-agent /usr/bin/neutron-openvswitch-agent)

uni2u gravatar imageuni2u ( 2017-01-10 17:45:55 -0500 )edit

Did you try check ovs-ofctl dump-flows <bridge> -O openflow13 ?

uni2u gravatar imageuni2u ( 2017-01-10 19:31:11 -0500 )edit

I did try ovs-ofctl dump-flows br-int -O openflow13, showing no sfc flows. Do you mean after install networking-sfc by running "python install", there will be a new neutron-openvswitch-agent in the path /usr/local/bin/ ? In my environment, there is nothing in /usr/local/bin/..

joezts gravatar imagejoezts ( 2017-01-10 23:42:37 -0500 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2016-04-28 06:31:11 -0500

Seen: 1,162 times

Last updated: Jan 06 '17