sfc demo

root@3d166b1f2b44:~/demo/basic# nova list --all-tenants

+--------------------------------------+-------------------------------------------------------+----------------------------------+--------+------------+-------------+------------------------------------+
| ID                                   | Name                                                  | Tenant ID                        | Status | Task State | Power State | Networks                           |
+--------------------------------------+-------------------------------------------------------+----------------------------------+--------+------------+-------------+------------------------------------+
| 7a8d42ee-a74d-4a65-9a5f-c54abfd77667 | client                                                | 2fa8887b80ab44d59620d0221b2b37db | ACTIVE | -          | Running     | example-net=11.0.0.4, 172.16.0.142 |
| 6621b6d7-12fd-4623-aebe-84754049c856 | server                                                | 2fa8887b80ab44d59620d0221b2b37db | ACTIVE | -          | Running     | example-net=11.0.0.8, 172.16.0.139 |
| e2372290-5f89-4a66-b0bd-ae5cedd4475c | ta-19a6-8e2f-4e81-8935-25d45ecb3968-vdu1-gfdipod6isyt | 2fa8887b80ab44d59620d0221b2b37db | ACTIVE | -          | Running     | example-net=11.0.0.7, 172.16.0.132 |
| b0237441-5992-406a-91d2-9150110ca4a5 | ta-a6cd-5e1b-4126-b8f7-1a00149afe54-vdu1-okphunz4up3r | 2fa8887b80ab44d59620d0221b2b37db | ACTIVE | -          | Running     | example-net=11.0.0.6, 172.16.0.138 |
+--------------------------------------+-------------------------------------------------------+----------------------------------+--------+------------+-------------+------------------------------------+






FIRST CASE)
root@3d166b1f2b44:~/demo/basic# tacker sfc-classifier-list
+--------------------------------------+----------+-------------+-------------------------------------------------------+--------+
| id                                   | name     | description | acl_match_criteria                                    | status |
+--------------------------------------+----------+-------------+-------------------------------------------------------+--------+
| 4a43ecca-58b3-461c-bf47-8d3dd85dc0bd | red_http |             | {u'source_port': 0, u'protocol': 6, u'dest_port': 80} | ACTIVE |
| b12d11a1-3e66-4851-bd64-e1b26ce309e2 | red_ssh  |             | {u'source_port': 0, u'protocol': 6, u'dest_port': 22} | ACTIVE |
+--------------------------------------+----------+-------------+-------------------------------------------------------+--------+


The client tries to access to port 22 and 80:

root@host-11-0-0-4:~# ssh root@11.0.0.8
^C

==> SSH DOESNT WORK

root@host-11-0-0-4:~# wget 11.0.0.8
--2017-04-05 02:28:29--  http://11.0.0.8/
Connecting to 11.0.0.8:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 456 [text/html]
Saving to: 'index.html.3'

index.html.3             100%[===============================>]     456  --.-KB/s    in 0s

2017-04-05 02:28:29 (93.3 MB/s) - 'index.html.3' saved [456/456]

===> HTTP WORKS






SECOND CASE)
I run change_classifier.sh and this is what we have now:

root@3d166b1f2b44:~/demo/basic# tacker sfc-classifier-list
+--------------------------------------+-----------+-------------+-------------------------------------------------------+--------+
| id                                   | name      | description | acl_match_criteria                                    | status |
+--------------------------------------+-----------+-------------+-------------------------------------------------------+--------+
| 5f69c6d9-7938-4d87-916f-ba87e3da3b17 | blue_http |             | {u'source_port': 0, u'protocol': 6, u'dest_port': 80} | ACTIVE |
| 8e288e44-a847-4fe1-9277-0629a1385ea9 | blue_ssh  |             | {u'source_port': 0, u'protocol': 6, u'dest_port': 22} | ACTIVE |
+--------------------------------------+-----------+-------------+-------------------------------------------------------+--------+

And in the client side:

root@host-11-0-0-4:~# ssh root@11.0.0.8
^C
==> SSH DOESNT WORK

root@host-11-0-0-4:~# wget 11.0.0.8
--2017-04-05 02:30:16--  http://11.0.0.8/
Connecting to 11.0.0.8:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 456 [text/html]
Saving to: 'index.html.4'

index.html.4                  100%[===============================================>]     456  --.-KB/s    in 0s

2017-04-05 02:30:16 (90.3 MB/s) - 'index.html.4' saved [456/456]

===> HTTP WORKS



!!!