Page MenuHomeVyOS Platform

Support ERSPAN port mirroring
In progress, NormalPublicFEATURE REQUEST

Description

It seems that vyos does not support port mirroring. In some routers and switch devices, supporting port mirroring can facilitate network analysis and sampling. I found that it seems that the tee module of iptables can be used for port mirroring

https://superuser.com/questions/753294/mirror-port-via-iptables

http://ipset.netfilter.org/iptables-extensions.man.html#lbDU

Consider how to support the ERSPAN protocol

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)

Event Timeline

jack9603301 triaged this task as Wishlist priority.Thu, Oct 29, 3:57 PM
jack9603301 created this task.

Do you mean that?

set interfaces ethernet eth1 mirror

Yes, but iptables tee seems to support packet copy of various rules

The feature request of T2424 shows that only one-way port mirroring is currently supported, and it has not yet started

pasik added a subscriber: pasik.Thu, Oct 29, 9:10 PM
c-po added a subscriber: c-po.Sun, Nov 15, 9:13 PM

Why not use ERSPAN?

I'm curious about how to do ERSPAN?

I took a brief look, the ip command seems to support the relevant tunnel type

TYPE := { vlan | veth | vcan | vxcan | dummy | ifb | macvlan | macvtap |
           bridge | bond | team | ipoib | ip6tnl | ipip | sit | vxlan |
           gre | gretap | erspan | ip6gre | ip6gretap | ip6erspan |
           vti | nlmon | team_slave | bond_slave | bridge_slave |
           ipvlan | ipvtap | geneve | vrf | macsec | netdevsim | rmnet |
           xfrm }
jack9603301 renamed this task from Support port mirroring to Support ERSPAN port mirroring.Wed, Nov 25, 12:48 PM
jack9603301 updated the task description. (Show Details)
jack9603301 updated the task description. (Show Details)
jack9603301 changed the task status from Open to In progress.Wed, Nov 25, 1:12 PM
jack9603301 claimed this task.
jack9603301 moved this task from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
jack9603301 raised the priority of this task from Wishlist to Normal.Wed, Nov 25, 2:15 PM