1 <?xml version="1.0" encoding="utf-8"?>
2 <manpage program="ovn-controller" section="8" title="ovn-controller">
4 <p>ovn-controller -- Open Virtual Network local controller</p>
7 <p><code>ovn-controller</code> [<var>options</var>] [<var>ovs-database</var>]</p>
11 <code>ovn-controller</code> is the local controller daemon for
12 OVN, the Open Virtual Network. It connects up to the OVN
13 Southbound database (see <code>ovn-sb</code>(5)) over the OVSDB
14 protocol, and down to the Open vSwitch database (see
15 <code>ovs-vswitchd.conf.db</code>(5)) over the OVSDB protocol and
16 to <code>ovs-vswitchd</code>(8) via OpenFlow. Each hypervisor and
17 software gateway in an OVN deployment runs its own independent
18 copy of <code>ovn-controller</code>; thus,
19 <code>ovn-controller</code>'s downward connections are
20 machine-local and do not run over a physical network.
23 <h1>Configuration</h1>
25 <code>ovn-controller</code> retrieves most of its configuration
26 information from the local Open vSwitch's ovsdb-server instance.
27 The default location is <code>db.sock</code> in the local Open
28 vSwitch's "run" directory. It may be overridden by specifying the
29 <var>ovs-database</var> argument in one of the following forms:
34 <code>ssl:<var>ip</var>:<var>port</var></code>
37 The specified SSL <var>port</var> on the host at the given
38 <var>ip</var>, which must be expressed as an IP address (not a DNS
39 name) in IPv4 or IPv6 address format. If <var>ip</var> is an IPv6
40 address, then wrap <var>ip</var> with square brackets, e.g.:
41 <code>ssl:[::1]:6640</code>. The <code>--private-key</code>,
42 <code>--certificate</code> and either of <code>--ca-cert</code>
43 or <code>--bootstrap-ca-cert</code> options are mandatory when this
49 <code>tcp:<var>ip</var>:<var>port</var></code>
52 Connect to the given TCP <var>port</var> on <var>ip</var>, where
53 <var>ip</var> can be IPv4 or IPv6 address. If <var>ip</var> is an
54 IPv6 address, then wrap <var>ip</var> with square brackets, e.g.:
55 <code>tcp:[::1]:6640</code>.
60 <code>unix:<var>file</var></code>
63 On POSIX, connect to the Unix domain server socket named
67 On Windows, connect to a localhost TCP port whose value is written
73 <code>ovn-controller</code> assumes it gets configuration
74 information from the following keys in the <code>Open_vSwitch</code>
75 table of the local OVS instance:
79 <code>external_ids:system-id</code> specifies the chassis
80 name to use in the Chassis table.
85 <code>external_ids:ovn-bridge</code> specifies the
86 integration bridge to which logical ports are attached.
87 The default is <code>br-int</code>. If this bridge does
88 not exist when ovn-controller starts, it will be created
89 automatically with the default configuration suggested in
90 <code>ovn-architecture</code>(7).
95 <code>external_ids:ovn-remote</code> specifies the OVN
96 database that this system should connect to for its
102 <code>external_ids:ovn-encap-type</code> specifies the
103 encapsulation type that a chassis should use to connect to
104 this node. Supported tunnel types for connecting
105 hypervisors are <code>geneve</code> and <code>stt</code>.
106 Gateways may use <code>geneve</code>, <code>vxlan</code>,
112 <code>external_ids:ovn-encap-ip</code> specifies the IP
113 address that a chassis should use to connect to this node
114 using encapsulation type specified by
115 <code>external_ids:ovn-encap-ip</code>.
120 <code>external_ids:ovn-bridge-mappings</code> specifies a list
121 of key-value pairs that map a physical network name to a local
122 ovs bridge that provides connectivity to that network.
123 An example value mapping two physical network names to two ovs
124 bridges would be: <code>physnet1:br-eth0,physnet2:br-eth1</code>.
129 Currently, <code>ovn-controller</code> does not support changing
130 the OVN database mid-run. If the value needs to change, the
131 daemon must be restarted. This behavior should be improved.
135 <h1>RUNTIME MANAGEMENT COMMANDS</h1>
137 <code>ovs-appctl</code> can send commands to a running
138 <code>ovn-controller</code> process. The currently supported
139 commands are described below.
141 <dt><code>exit</code></dt>
143 Causes <code>ovn-controller</code> to gracefully terminate.