一、实验目的
1.能够编写程序调用OpenDaylight REST API实现特定网络功能；
2.能够编写程序调用Ryu REST API实现特定网络功能。

二、实验环境
1.下载虚拟机软件Oracle VisualBox或VMware；
2.在虚拟机中安装Ubuntu 20.04 Desktop amd64，并完整安装Mininet、OpenDaylight（Carbon版本）、Postman和Ryu；

三、实验要求
（一）基本要求
OpenDaylight
（1） 利用Mininet平台搭建下图所示网络拓扑，并连接OpenDaylight；

 

 

编写Python程序，调用OpenDaylight的北向接口下发指令删除s1上的流表数据

1. #!/usr/bin/python
2. import requests
3. from requests.auth import HTTPBasicAuth
5. def http_delete(url):
6. url= url
7. headers = {'Content-Type':'application/json'}
8. resp = requests.delete(url, headers=headers, auth=HTTPBasicAuth('admin', 'admin'))
9. return resp
11. if __name__ == "__main__":
12. url = 'http://127.0.0.1:8181/restconf/config/opendaylight-inventory:nodes/node/openflow:1/'
13. resp = http_delete(url)
14. print(resp.content)

编写Python程序，调用OpenDaylight的北向接口下发硬超时流表，实现拓扑内主机h1和h3网络中断20s。

1. #!/usr/bin/python
2. import requests
3. from requests.auth import HTTPBasicAuth
4. def http_put(url,jstr):
5. url= url
6. headers = {'Content-Type':'application/json'}
7. resp = requests.put(url,jstr,headers=headers,auth=HTTPBasicAuth('admin', 'admin'))
8. return resp
10. if __name__ == "__main__":
11. url='http://127.0.0.1:8181/restconf/config/opendaylight-inventory:nodes/node/openflow:1/flow-node-inventory:table/0/flow/1'
12. with open('no1.json') as f:
13. jstr = f.read()
14. resp = http_put(url,jstr)
15. print (resp.content)

flowtable.json

1. {
2. "flow": [
3. {
4. "id": "1",
5. "match": {
6. "in-port": "1",
7. "ethernet-match": {
8. "ethernet-type": {
9. "type": "0x0800"
10. }
11. },
12. "ipv4-destination": "10.0.0.3/32"
13. },
14. "instructions": {
15. "instruction": [
16. {
17. "order": "0",
18. "apply-actions": {
19. "action": [
20. {
21. "order": "0",
22. "drop-action": {}
23. }
24. ]
25. }
26. }
27. ]
28. },
29. "flow-name": "flow1",
30. "priority": "65535",
31. "hard-timeout": "20",
32. "cookie": "2",
33. "table_id": "0"
34. }
35. ]
36. }

     

     

编写Python程序，调用OpenDaylight的北向接口获取s1上活动的流表数。

1. #！/usr/bin/python
2. import requests
3. from requests.auth import HTTPBasicAuth
4. def http_get(url):
5. url= url
6. headers = {'Content-Type':'application/json'}
7. resp = requests.get(url,headers=headers,auth=HTTPBasicAuth('admin','admin'))
8. return resp
10. if __name__ == "__main__":
11. url='http://127.0.0.1:8181/restconf/operational/opendaylight-inventory:nodes/node/openflow:1/flow-node-inventory:table/0/opendaylight-flow-table-statistics:flow-table-statistics'
12. resp = http_get(url)
13. print(resp.content)

 

 

Ryu
命令行运行ryu
ryu-manager ryu.app.simple_switch_13 ryu.app.ofctl_rest
（1） 编写Python程序，调用Ryu的北向接口，实现上述OpenDaylight实验拓扑上相同的硬超时流表下发。

1. #!/usr/bin/python
2. import requests
4. if __name__ == "__main__":
5. url = 'http://127.0.0.1:8080/stats/flowentry/add'
6. with open("./no2.json") as f:
7. jstr = f.read()
8. headers = {'Content-Type': 'application/json'}
9. res = requests.post(url, jstr, headers=headers)
10. print (res.content)

flowtable.json

1. {
2. "dpid": 1,
3. "cookie": 1,
4. "cookie_mask": 1,
5. "table_id": 0,
6. "hard_timeout": 20,
7. "priority": 65535,
8. "flags": 1,
9. "match":{
10. "in_port":1
11. },
12. "actions":[
14. ]
15. }

 

 

（2） 利用Mininet平台搭建下图所示网络拓扑，要求支持OpenFlow 1.3协议，主机名、交换机名以及端口对应正确。拓扑生成后需连接Ryu，且Ryu应能够提供REST API服务。

 

 

1. #!/usr/bin/env python
2. from mininet.topo import Topo
4. class MyTopo(Topo):
5. def __init__(self):
6. # initilaize topology
7. Topo.__init__(self)
9. self.addSwitch("s1")
10. self.addSwitch("s2")
12. self.addHost("h1")
13. self.addHost("h2")
14. self.addHost("h3")
15. self.addHost("h4")
17. self.addLink("s1", "h1")
18. self.addLink("s1", "h2")
19. self.addLink("s2", "h3")
20. self.addLink("s2", "h4")
21. self.addLink("s1", "s2")
23. topos = {'mytopo': (lambda: MyTopo())}

命令行运行
sudo sudo mn —custom ryu2.py —topo mytopo —mac —controller=remote,ip=127.0.0.1,port=6633 —switch ovsk,protocols=OpenFlow13

（3） 整理一个Shell脚本，参考Ryu REST API的文档，利用curl命令，实现和实验2相同的VLAN。

VLAN_ID	Hosts
0	h1 h3
1	h2 h4

curl -X DELETE http://localhost:8080/stats/flowentry/clear/1
curl -X DELETE http://localhost:8080/stats/flowentry/clear/2

shell.sh

1. # 将主机1，2发送来的包打上vlan标记
2. curl -X POST -d '{
3. "dpid": 1,
4. "priority": 1,
5. "match":{
6. "in_port": 1
7. },
8. "actions":[
9. {
10. "type": "PUSH_VLAN", # Push a new VLAN tag if a input frame is non-VLAN-tagged
11. "ethertype": 33024 # Ethertype 0x8100(=33024): IEEE 802.1Q VLAN-tagged frame
12. },
13. {
14. "type": "SET_FIELD",
15. "field": "vlan_vid", # Set VLAN ID
16. "value": 4096 # Describe sum of vlan_id(e.g. 6) | OFPVID_PRESENT(0x1000=4096)
17. },
18. {
19. "type": "OUTPUT",
20. "port": 3
21. }
22. ]
23. }' http://localhost:8080/stats/flowentry/add
24. curl -X POST -d '{
25. "dpid": 1,
26. "priority": 1,
27. "match":{
28. "in_port": 2
29. },
30. "actions":[
31. {
32. "type": "PUSH_VLAN", # Push a new VLAN tag if a input frame is non-VLAN-tagged
33. "ethertype": 33024 # Ethertype 0x8100(=33024): IEEE 802.1Q VLAN-tagged frame
34. },
35. {
36. "type": "SET_FIELD",
37. "field": "vlan_vid", # Set VLAN ID
38. "value": 4097 # Describe sum of vlan_id(e.g. 6) | OFPVID_PRESENT(0x1000=4096)
39. },
40. {
41. "type": "OUTPUT",
42. "port": 3
43. }
44. ]
45. }' http://localhost:8080/stats/flowentry/add
46. # 将主机3，4发送来的包取出vlan标记
47. curl -X POST -d '{
48. "dpid": 1,
49. "priority": 1,
50. "match":{
51. "vlan_vid": 0
52. },
53. "actions":[
54. {
55. "type": "POP_VLAN", # Push a new VLAN tag if a input frame is non-VLAN-tagged
56. "ethertype": 33024 # Ethertype 0x8100(=33024): IEEE 802.1Q VLAN-tagged frame
57. },
58. {
59. "type": "OUTPUT",
60. "port": 1
61. }
62. ]
63. }' http://localhost:8080/stats/flowentry/add
64. curl -X POST -d '{
65. "dpid": 1,
66. "priority": 1,
67. "match":{
68. "vlan_vid": 1
69. },
70. "actions":[
71. {
72. "type": "POP_VLAN", # Push a new VLAN tag if a input frame is non-VLAN-tagged
73. "ethertype": 33024 # Ethertype 0x8100(=33024): IEEE 802.1Q VLAN-tagged frame
74. },
75. {
76. "type": "OUTPUT",
77. "port": 2
78. }
79. ]
80. }' http://localhost:8080/stats/flowentry/add
81. # 将主机3，4发送来的包打上vlan标记
82. curl -X POST -d '{
83. "dpid": 2,
84. "priority": 1,
85. "match":{
86. "in_port": 1
87. },
88. "actions":[
89. {
90. "type": "PUSH_VLAN", # Push a new VLAN tag if a input frame is non-VLAN-tagged
91. "ethertype": 33024 # Ethertype 0x8100(=33024): IEEE 802.1Q VLAN-tagged frame
92. },
93. {
94. "type": "SET_FIELD",
95. "field": "vlan_vid", # Set VLAN ID
96. "value": 4096 # Describe sum of vlan_id(e.g. 6) | OFPVID_PRESENT(0x1000=4096)
97. },
98. {
99. "type": "OUTPUT",
100. "port": 3
101. }
102. ]
103. }' http://localhost:8080/stats/flowentry/add
104. curl -X POST -d '{
105. "dpid": 2,
106. "priority": 1,
107. "match":{
108. "in_port": 2
109. },
110. "actions":[
111. {
112. "type": "PUSH_VLAN", # Push a new VLAN tag if a input frame is non-VLAN-tagged
113. "ethertype": 33024 # Ethertype 0x8100(=33024): IEEE 802.1Q VLAN-tagged frame
114. },
115. {
116. "type": "SET_FIELD",
117. "field": "vlan_vid", # Set VLAN ID
118. "value": 4097 # Describe sum of vlan_id(e.g. 6) | OFPVID_PRESENT(0x1000=4096)
119. },
120. {
121. "type": "OUTPUT",
122. "port": 3
123. }
124. ]
125. }' http://localhost:8080/stats/flowentry/add
126. curl -X POST -d '{
127. "dpid": 2,
128. "priority": 1,
129. "match":{
130. "vlan_vid": 0
131. },
132. "actions":[
133. {
134. "type": "POP_VLAN", # Push a new VLAN tag if a input frame is non-VLAN-tagged
135. "ethertype": 33024 # Ethertype 0x8100(=33024): IEEE 802.1Q VLAN-tagged frame
136. },
137. {
138. "type": "OUTPUT",
139. "port": 1
140. }
141. ]
142. }' http://localhost:8080/stats/flowentry/add
143. curl -X POST -d '{
144. "dpid": 2,
145. "priority": 1,
146. "match":{
147. "vlan_vid": 1
148. },
149. "actions":[
150. {
151. "type": "POP_VLAN", # Push a new VLAN tag if a input frame is non-VLAN-tagged
152. "ethertype": 33024 # Ethertype 0x8100(=33024): IEEE 802.1Q VLAN-tagged frame
153. },
154. {
155. "type": "OUTPUT",
156. "port": 2
157. }
158. ]
159. }' http://localhost:8080/stats/flowentry/add      

三）实验总结

• 实验难度：本次实验难度较大。
• 遇到的困难及解决办法：

1. 运行ryu却无法ping通 老是unreachable  然后，我其他同学告诉我只要一直put命令一直输就可以，最后解决了
2. 不知道怎么打开ryu，
3. 这次实验收获还是比较大的，学会了ODL和RYU的控制，能够比较熟练的搭建拓扑并且调用所需要的软件工具