Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

SFC on External Network


My deployment is using OVN with single shared external network. I want to use SFC for forcing incoming packet steering through some security VNFs. Is it possible to do that on external network (floating IP/LBaaS VIP) ports and without specifying the source address. Let's say I want to inspect all incoming traffic to such tenant, on specific service only, no matter if it come from other tenants or external hosts. i want to have the reverse path for replied traffic too.

Best regards,