Photo by Bruno Kelzer on Unsplash
Open vSwitch: Create TunTap Devices
Creating Virtual Networks with Internet Access: Using TunTap and Open vSwitch on Ubuntu 20.04
Table of contents
- Creating TunTap Devices
- Create Bridge
- Create Network Interface
- Add the Physical Network Interface to the Bridge
- Create TunTap device
- Attach TunTap to Bridge
- Allocating Static IP Addresses
- Assign Gateway IP to Bridge's Internal Switch
- Assign Static IP to TunTap device
- Up all the Interfaces and TunTaps
- IP Forwarding & NAT Configuration
- Enable IP Forwarding on the Host
- Make NAT Configuration for Internt Access
- Conclusion
- About Me ๐จโ๐ป
Open vSwitch (OVS) is a multi-layer software switch designed to enable massive network automation and programmability while providing support for standard management protocols.
Apart from its extensive feature set, one of the key advantages of OVS is its support for networking tunnelling protocols, a use case that is widely employed in software-defined networking (SDN) deployments.
In this regard, we will introduce you to the Tun/Tap network devices, which are a key feature of the Linux kernel and are used for creating network bridges. Specifically, this article will guide you on how to create TunTap devices using an Open vSwitch (OVS) bridge and allocate static IPs to the virtual ports.
Creating TunTap Devices
TunTap devices are software network interfaces provided by the Linux kernel. They can be created and managed just like physical network interfaces.
Create Bridge
ovs-vsctl add-br br0
Create Network Interface
ovs-vsctl add-port br0 vSwitch0
ovs-vstl set Interface vSwitch0 type=internal
We have two commands above, the first command adds vSwitch0
to the br0
bridge and the second command sets internal
type to the vSwitch0
interface.
Add the Physical Network Interface to the Bridge
ovs-vsctl add-port br0 eno1
Traffic will now flow between the physical network interface and the Open vSwitch bridge. Remember to change eno1
with your Physical Network Interface.
Create TunTap device
ip tuntap add mode tap vport0
Attach TunTap to Bridge
ovs-vsctl add-port br0 vport0
You should now have a tap device called vport0
which is part of the br0
OVS bridge.
Allocating Static IP Addresses
Static IP addressing, as opposed to dynamic addressing, is when a device keeps the same IP address every time it connects to the network.
Assign Gateway IP to Bridge's Internal Switch
To assign a Gateway IP address to internal Switch, perform the following steps:
ip addr add 172.168.1.1/24 dev vSwitch0
/24
is a netmask.
Assign Static IP to TunTap device
To assign a static IP address to your newly created vport0
interface, perform the following steps:
Remove the current IP from the device (if any):
ip addr flush dev vport0
Now, you can assign a new IP address. The following command will assign IP 172.168.1.100 to vport0
:
ip addr add 172.168.1.100 dev vport0
Up all the Interfaces and TunTaps
ip link set dev vSwitch0 up
ip link set dev vport0 up
These two commands will up all your interfaces. You can verify the same by running ifconfig
command.
IP Forwarding & NAT Configuration
Enable IP Forwarding on the Host
IP forwarding is the ability for an operating system to accept incoming network packets on one interface, recognize that it is not meant for the system itself, but that it should be passed on to another network, and then forwards it accordingly.
echo 1 | sudo tee /proc/sys/net/ipv4/ip_forward
Make NAT Configuration for Internt Access
You can use a NAT device to allow resources in private subnets to connect to the internet, other VPCs, or on-premises networks. These instances can communicate with services outside the VPC, but they cannot receive unsolicited connection requests.
iptables -t nat -A POSTROUTING -o eno1 -j MASQUERAGE
iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i vSwitch0 -o eno1 -j ACCEPT
Traffic will now flow between the physical network interface and the Open vSwitch bridge. Remember to change eno1
with your Physical Network Interface.
Conclusion
This guide has walked you through the process of creating TunTap devices using OVS bridge and assigning static IPs to the virtual ports on Ubuntu 20.04.
With this knowledge, you can effectively set up and manage virtual network interfaces in your environment.
Please remember that, as with all things, practice furthers understanding. So, feel free to experiment with different configurations to fully comprehend the flexible nature of Open vSwitch.
Stay tuned for more insightful articles on advanced networking with Open vSwitch!
About Me ๐จโ๐ป
I'm Faiz A. Farooqui. Software Engineer from Bengaluru, India.
Find out more about me @ faizahmed.in