| *** yamamoto_ has joined #openstack-fwaas | 00:18 | |
| *** yamamoto_ has quit IRC | 00:24 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/neutron-fwaas-dashboard master: Updated from global requirements https://review.openstack.org/494855 | 00:40 |
|---|---|---|
| openstackgerrit | OpenStack Proposal Bot proposed openstack/neutron-fwaas master: Updated from global requirements https://review.openstack.org/496051 | 01:10 |
| *** yamamoto_ has joined #openstack-fwaas | 01:21 | |
| *** yamamoto_ has quit IRC | 01:26 | |
| *** yamamoto_ has joined #openstack-fwaas | 02:22 | |
| *** yamamoto_ has quit IRC | 02:28 | |
| *** yamamoto has joined #openstack-fwaas | 02:56 | |
| *** yamamoto has quit IRC | 03:02 | |
| reedip | yushiro_kaiouken : Unable to deploy Devstack with the modifications you gave | 03:42 |
| yushiro_kaiouken | reedip, L2-agent ? | 03:42 |
| reedip | Seems the devstack is unable to find etc/neutron/plugins/ml2/ml2_conf.ini | 03:43 |
| reedip | There seems to be a "/" missing before etc/ | 03:43 |
| yushiro_kaiouken | Oh, really? I could deploy in latest version.... | 03:43 |
| reedip | Checking | 03:44 |
| yushiro_kaiouken | PS48 | 03:44 |
| reedip | Yes, PS 48 | 03:44 |
| yushiro_kaiouken | hmm, I didn't edit such path. | 03:45 |
| yushiro_kaiouken | I just added iniset $NEUTRON_CORE_PLUGIN_CONF agent extensions fwaas_v2 | 03:45 |
| yushiro_kaiouken | iniset $NEUTRON_CORE_PLUGIN_CONF fwaas enable_l2 $FWAAS_V2_ENABLE_L2 | 03:45 |
| yushiro_kaiouken | reedip, Did you try my procedure which I sent you an e-mail? | 03:50 |
| reedip | YES | 03:50 |
| reedip | yushiro_kaiouken : Trying to see if the value of Neutron_core_plugin_conf has been modified | 03:50 |
| reedip | in my devstack | 03:51 |
| yushiro_kaiouken | My devstack's last commit was af9f71d693cd548b18986e99f58503fa57f815f1 | 03:51 |
| yushiro_kaiouken | and succeeded | 03:52 |
| yushiro_kaiouken | Is your devstack later than above commit? | 03:52 |
| reedip | Mine is July 14 , probably way earlier :) | 03:56 |
| reedip | I checked out new code | 03:57 |
| reedip | and redeploying devstack | 03:57 |
| *** yamamoto has joined #openstack-fwaas | 04:03 | |
| *** yamamoto has quit IRC | 04:09 | |
| reedip | The same error | 04:25 |
| reedip | source /opt/stack/neutron-fwaas/devstack/plugin.sh stack post-config | 04:25 |
| reedip | 2017-08-22 04:09:50.310 | tee: etc/neutron/plugins/ml2/ml2_conf.ini: No such file or directory | 04:25 |
| yushiro_kaiouken | hmm | 04:33 |
| yushiro_kaiouken | how about aligning devstack version? | 04:34 |
| yushiro_kaiouken | plz try the same version. | 04:36 |
| yushiro_kaiouken | and same local.conf | 04:37 |
| amotoki | isn't a / required before $NEUTRON_CORE_PLUGIN_CONF ? it looks better you check the actual value of $NEUTRON_CORE_PLUGIN_CONF. | 04:37 |
| amotoki | but looking at the latest devstack, $NEUTRON_CORE_PLUGIN_CONF has a filename starting with a slash | 04:40 |
| amotoki | is your env up-to-date? | 04:40 |
| amotoki | we usually have no good solution to make older devstack work. The solution is to pull the latest devstack :) | 04:42 |
| yushiro_kaiouken | reedip, If you hit a same bug even if you use latest devstack, I'll update my patchset. | 04:53 |
| yushiro_kaiouken | Please let me know a result . | 04:53 |
| *** yamamoto has joined #openstack-fwaas | 05:05 | |
| reedip | amotoki , yushiro_kaiouken : I pulled the latest devstack and used this line in local.conf #enable_plugin neutron-fwaas https://github.com/openstack/neutron-fwaas.git refs/changes/71/323971/48 | 05:07 |
| reedip | the result was failure | 05:07 |
| reedip | when I changed the local.conf to enable_plugin neutron-fwaas https://git.openstack.org/openstack/neutron-fwaas | 05:08 |
| reedip | devstack worked succesfully | 05:08 |
| reedip | I have the latest devstack | 05:08 |
| yushiro_kaiouken | reedip, Did you include enable_service q-fwaas-v2 ? | 05:09 |
| *** SridarK has joined #openstack-fwaas | 05:09 | |
| reedip | yep | 05:09 |
| yushiro_kaiouken | and What was $NEUTRON_CORE_PLUGIN_CONF ? | 05:09 |
| *** yamamoto has quit IRC | 05:10 | |
| reedip | I didnt change it | 05:15 |
| reedip | So if it is working without checking out the L2 Agent, then it meansd that the NEUTRON_CORE_PLUGIN_CONF would have "/" | 05:15 |
| yushiro_kaiouken | OK, I'll fix it. However, I don't know why yesterday's devstack could work correctly... | 05:21 |
| reedip | Try to print the NEUTROn_CORE_PLUGIN_CONF in your patch | 05:22 |
| yushiro_kaiouken | I checked /etc/neutron/plugins/ml2/ml2_conf.ini and definitely added extensions=fwaas_v2 and enable_l2=True .. | 05:22 |
| yushiro_kaiouken | That's really strange. | 05:22 |
| reedip | Hmm | 05:26 |
| yushiro_kaiouken | anyway, I'll try to test in latest neutron,devstack | 05:26 |
| reedip | I checked .. NEUTRON_CORE_PLUGIN_CONF_FILENAME=${NEUTRON_CORE_PLUGIN_CONF_FILENAME:-ml2_conf.ini} | 05:27 |
| reedip | NEUTRON_CORE_PLUGIN_CONF=$NEUTRON_CORE_PLUGIN_CONF_PATH/$NEUTRON_CORE_PLUGIN_CONF_FILENAME | 05:27 |
| reedip | NEUTRON_CORE_PLUGIN_CONF_PATH=$NEUTRON_CONF_DIR/plugins/$NEUTRON_CORE_PLUGIN | 05:27 |
| reedip | NEUTRON_CONF_DIR=/etc/neutron | 05:28 |
| reedip | Seems like it should be correctly loading | 05:28 |
| yushiro_kaiouken | I removed /opt/stack/neutron-fwaas and /opt/stack/neutron and try to deploy ./stack.sh | 05:32 |
| openstackgerrit | Merged openstack/neutron-fwaas-dashboard master: Use flake8-import-order plugin https://review.openstack.org/495495 | 05:36 |
| yushiro_kaiouken | SridarK, thanks for your review of horizon patch. | 05:37 |
| yushiro_kaiouken | SridarK, regarding to duplicate displaying, it is solved to replace from 'public' to 'shared' for getting resources. Just was a typo. | 05:38 |
| reedip | I am also testing with some logs in the devstack/plugin.sh | 05:51 |
| reedip | seems your iniset is causing the issue yushiro_kaiouken | 05:52 |
| reedip | Btw dont stay as kaiouken so long,you will lose all your energy :P | 05:52 |
| yushiro_kaiouken | reedip, I have a lot of 'senzu' so it's OK :) | 06:03 |
| yushiro_kaiouken | reedip, yes, regarding l2-agent extension, I'll use plugin_agent_add_l2_agent_extension fwaas_v2 | 06:04 |
| yushiro_kaiouken | reedip, Regarding latter case, will add "/" at the top of $NEUTRON_CORE_PLUGIN_CONF | 06:05 |
| yushiro_kaiouken | it may be work | 06:05 |
| *** yamamoto has joined #openstack-fwaas | 06:06 | |
| yushiro_kaiouken | reedip, any comment ? | 06:07 |
| reedip | No , it wont work if you put / before $NEUTRON_CORE_PLUGIN_CONF | 06:09 |
| reedip | I am debugging it , wait | 06:11 |
| reedip | I mean continue , but lemme look at it | 06:12 |
| *** yamamoto has quit IRC | 06:12 | |
| yushiro_kaiouken | ah, won't work. OK | 06:15 |
| yushiro_kaiouken | hmm, I would have removed all of /etc/neutron ... | 06:15 |
| reedip | sensu beans are getting to your head | 06:16 |
| reedip | wait a minute, dont mess up your env :) | 06:16 |
| reedip | There may be some other issue | 06:16 |
| *** eezhova has joined #openstack-fwaas | 06:26 | |
| *** SridarK has quit IRC | 06:26 | |
| reedip | It is failing in iniset $NEUTRON_CORE_PLUGIN_CONF agent extensions fwaas_v2 | 06:26 |
| reedip | yushiro_kaiouken : I modified the file a bit and now cleaned the devstack. Redeploying, but an echo of $NEUTRON_CORE_PLUGIN_CONF shows etc/ and not /ext/ | 06:41 |
| reedip | %s/ext/etc/g | 06:42 |
| yushiro_kaiouken | I deployed latest devstack and succedded.. | 06:59 |
| yushiro_kaiouken | in Ubuntu | 06:59 |
| yushiro_kaiouken | 16.04 | 06:59 |
| yushiro_kaiouken | reedip, sorry I forgot checking $NEUTRON_CORE_PLUGIN_CONF but it was configured in /etc/neutron/plugins/ml2/ml2_conf.init | 07:01 |
| reedip | hmm | 07:02 |
| reedip | I am getting this error with only your patch | 07:08 |
| reedip | :P | 07:09 |
| yushiro_kaiouken | Maybe my patch is tired ;) haha | 07:12 |
| yushiro_kaiouken | reedip, did you use local.conf which I sent ? | 07:13 |
| reedip | yes... | 07:13 |
| yushiro_kaiouken | please remove /etc/neutron/* , /opt/stack/neutron and /opt/stack/neutron-fwaas | 07:14 |
| yushiro_kaiouken | Then, could you restart ./stack.sh ? | 07:14 |
| reedip | Lemme try | 07:15 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Fix filtering parameter to get firewall_group https://review.openstack.org/453786 | 07:15 |
| yushiro_kaiouken | hoangcx, pig | 07:16 |
| yushiro_kaiouken | hoangcx, sorry, ping | 07:16 |
| reedip | pig? | 07:16 |
| reedip | HAHAHAHAHAHAHA | 07:16 |
| yushiro_kaiouken | ouch!! | 07:16 |
| *** eezhova has quit IRC | 07:16 | |
| reedip | hahahaha | 07:16 |
| hoangcx | yushiro_kaiouken: pong :) | 07:19 |
| yushiro_kaiouken | hoangcx, I updated https://review.openstack.org/#/c/453786/ | 07:19 |
| yushiro_kaiouken | hoangcx, If you have time, could you review it? | 07:20 |
| hoangcx | yushiro_kaiouken: yes, thank you | 07:20 |
| -openstackstatus- NOTICE: Gerrit is going to be restarted due to slow performance | 07:36 | |
| -openstackstatus- NOTICE: Gerrit has been restarted successfully | 07:39 | |
| *** eezhova has joined #openstack-fwaas | 07:45 | |
| *** hoangcx has quit IRC | 08:20 | |
| *** hoangcx has joined #openstack-fwaas | 08:24 | |
| eezhova | Folks, can somebody explain why there is this logic that forbids associating a port with several firewall groups? E.g. https://github.com/openstack/neutron-fwaas/blob/master/neutron_fwaas/db/firewall/v2/firewall_db_v2.py#L735-L748 | 08:28 |
| eezhova | It contradicts with the FWaaS v2 spec that says that the new API "Allows multiple firewall group associations for the same Neutron port" https://specs.openstack.org/openstack/neutron-specs/specs/newton/fwaas-api-2.0.html#proposed-change | 08:28 |
| *** yamamoto has joined #openstack-fwaas | 08:35 | |
| reedip | I just mentioned that in the review eezhova | 08:36 |
| reedip | eezhova : _set_ports_for_firewall_group function is in create_firewall_group and update_firewall_group | 08:37 |
| reedip | eezhova : Ok, Now I see that the fwaas_plugin_v2 actually calls this function from create_fwg and update_fwg | 08:39 |
| yushiro_kaiouken | eezhova, hi | 08:40 |
| reedip | eezhova : the point is one port can be associated tio only one FWG | 08:40 |
| yushiro_kaiouken | eezhova, Previously, we thought fwg could use like security-group. As you know, a port can be associated with multiple security-groups. | 08:41 |
| reedip | But the FWG can have a list of ports , which have not yet been associated to any FWG | 08:41 |
| reedip | Port -> FWG is N:1 relationship | 08:41 |
| reedip | yushiro_kaiouken : please confirm | 08:41 |
| yushiro_kaiouken | eezhova, However, fwg has 'deny' rule and it is necessary to consider 'order' between firewall groups. | 08:43 |
| yushiro_kaiouken | eezhova, Now we cannot control the order between firewall groups. Therefore, we decided to associate 1 port can be associated 1 firewall group in current design. | 08:44 |
| yushiro_kaiouken | eezhova, BTW, regarding security-group, it includes only 'allow' rule, therefore no need to consider their order between security groups. | 08:45 |
| *** yushiro_kaiouken is now known as yushiro | 08:45 | |
| eezhova | yushiro, reedip thanks for replies. I wanted to make sure that it was a conscious and weighted decision not something that happened accidentally | 08:47 |
| yushiro | eezhova, we can associate 1 firewall group for 1 port. However, we can put multiple firewall rules on it with 'order' managed as ingress/egress_firewall_policy :) | 08:48 |
| amotoki | yushiro's extreme seems over :) | 08:48 |
| amotoki | yushiro: do you know the current status of fwaas dashboard? | 08:48 |
| amotoki | yushiro: are we waiting Sarath ? | 08:48 |
| eezhova | yushiro, that's a nice feature, I'll have to try it out :) | 08:49 |
| yushiro | amotoki, I'm still fixing/finding critical bug and not updated patchset. | 08:49 |
| yushiro | amotoki, yes, but I'd like to update current patch set... | 08:49 |
| amotoki | yushiro: I just wonder how we try to avoid duplicated works and accidental overriding.. | 08:50 |
| yushiro | amotoki, Indeed.. I'd like separate part of work with you and Sarath. | 08:51 |
| yushiro | amotoki, In order to increase efficiency | 08:51 |
| amotoki | yushiro: i've touched nothing :) | 08:52 |
| amotoki | previously Sarath overrode my patch set (devstack plugin) and i am just afraid the similar thing happens | 08:53 |
| yushiro | amotoki, OK. Well, I'm a little concern about it. | 08:54 |
| amotoki | some better communication needs... | 08:54 |
| yushiro | yeah... I'd like to work like 'mob programming' | 08:55 |
| yushiro | While today's IRC meeting, I'll keep on finding/fixing bug and make patch file. | 08:57 |
| *** yamamoto has quit IRC | 08:59 | |
| *** yamamoto has joined #openstack-fwaas | 08:59 | |
| *** yamamoto has quit IRC | 08:59 | |
| amotoki | yushiro: question on your comment: https://review.openstack.org/#/c/475840/17/neutron_fwaas_dashboard/dashboards/project/firewalls_v2/forms.py@181 | 09:07 |
| amotoki | yushiro: your code checks body[key] == 'None' first, but this means None is always sent to the server. Is it what you intend? | 09:08 |
| yushiro | amotoki, ah!! It's a bug! | 09:09 |
| amotoki | yushiro: just commented https://review.openstack.org/#/c/475840/17/neutron_fwaas_dashboard/dashboards/project/firewalls_v2/forms.py@181 | 09:10 |
| yushiro | amotoki, del body[key] should be called at first and call continue after del[key] | 09:10 |
| amotoki | yushiro: another approach without deepcopy | 09:10 |
| yushiro | amotoki, Thanks. | 09:11 |
| yushiro | amotoki, checked. Your approach is much more smart :) | 09:12 |
| amotoki | perhaps you would like to convert 'None' to None and then compare new values with the current values key by key | 09:12 |
| yushiro | Yes. | 09:13 |
| yushiro | A little trickey point is handle(), that is, edit view of firewall group cannot retrieve all of attributes. | 09:14 |
| yushiro | So, I had to choose attributes which enable to edit. | 09:15 |
| amotoki | what do you mean? do you talk about UpdateFirewall(Group)? | 09:16 |
| yushiro | amotoki, Yes, it is. | 09:21 |
| amotoki | yushiro: is there something wrong? | 09:22 |
| yushiro | amotoki, not wrong :) But I felt that initial_values was not necessary. | 09:23 |
| amotoki | yushiro: do you mean some fields you set in views.py do not appear in self.initial in the workflow class? | 09:24 |
| amotoki | oh.... UpdateFirewall class does not use workflow. it uses Form. | 09:25 |
| yushiro | amotoki, maybe yes : | 09:26 |
| yushiro | sorry amotoki, I'm not sure the relation b/w workflow and form | 09:27 |
| amotoki | yushiro: there is no relationship. workflow is another type of form which can contain multiple steps (as tab) | 09:27 |
| yushiro | What I'd like to say is initial_values is not necessary and it's enough to refer self.initlal and context.items() | 09:28 |
| amotoki | yushiro: yeah, that's true :) | 09:28 |
| yushiro | :) | 09:30 |
| amotoki | IMHO I am now feeling that we should defer v2 dashboard to queens and release it in early Queens | 09:32 |
| amotoki | depending on what the next patch set looks like, I think we need at least three rounds of reviews to land it and we don't have enough to do so :( | 09:33 |
| yushiro | Yes, it is so tight schedule. | 09:34 |
| amotoki | Thursday is the release day, so we should not count it as days we have. it means Wed is the last day for larger changes.... hmmm... too tight | 09:38 |
| yushiro | DO MY BEST! let's discuss about strategy in today's IRC meeting | 09:50 |
| *** yushiro has quit IRC | 09:51 | |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: FWaaS v2 extension for L2 agent https://review.openstack.org/323971 | 09:53 |
| *** yamamoto has joined #openstack-fwaas | 10:00 | |
| *** yamamoto has quit IRC | 10:05 | |
| openstackgerrit | Reedip proposed openstack/neutron-fwaas master: Fix periodic py35 job failure https://review.openstack.org/496190 | 10:21 |
| reedip | yushiro : http://status.openstack.org/openstack-health/#/g/project/openstack~2Fneutron-fwaas is the dashboard of the log failures of fwaas | 10:21 |
| reedip | and ^^ is the fix | 10:21 |
| reedip | amotoki : this was decided last week , jfyi | 10:23 |
| amotoki | reedip: what? | 10:23 |
| reedip | amotoki : http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-08-15-14.00.log.html#l-147 | 10:25 |
| reedip | amotoki : oh ok ... | 10:26 |
| reedip | saw your message | 10:26 |
| reedip | amotoki : can I provide http://status.openstack.org/openstack-health/#/g/project/openstack~2Fneutron-fwaas as an evidence ? | 10:28 |
| reedip | Though I guess once the job is fixed, this issue wont be visible | 10:28 |
| *** yamamoto has joined #openstack-fwaas | 10:30 | |
| openstackgerrit | Reedip proposed openstack/neutron-fwaas master: Fix periodic py35 job failure https://review.openstack.org/496190 | 10:30 |
| amotoki | reedip: what would you like to do? I think you just share error message you found. | 10:31 |
| amotoki | you don't need to paste full messages of the job. | 10:32 |
| reedip | amotoki : I updated the message to have only the error condition | 10:57 |
| reedip | amotoki: never mind, saw your comment | 10:58 |
| *** njohnston has quit IRC | 11:00 | |
| openstackgerrit | Reedip proposed openstack/neutron-fwaas master: Fix periodic py35 job failure https://review.openstack.org/496190 | 11:03 |
| *** njohnston has joined #openstack-fwaas | 11:06 | |
| *** yamamoto has quit IRC | 11:18 | |
| *** yamamoto has joined #openstack-fwaas | 11:30 | |
| *** yushiro has joined #openstack-fwaas | 11:42 | |
| *** yamamoto has quit IRC | 11:46 | |
| *** yamamoto has joined #openstack-fwaas | 11:48 | |
| yushiro | reedip, hi. Have you tried devstack with l2-agent which I told ? | 11:49 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/neutron-fwaas-dashboard master: Updated from global requirements https://review.openstack.org/494855 | 11:50 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Remove log translations https://review.openstack.org/479102 | 11:55 |
| *** yamamoto has quit IRC | 12:03 | |
| *** yamamoto has joined #openstack-fwaas | 12:04 | |
| *** yamamoto has quit IRC | 12:10 | |
| *** yamamoto has joined #openstack-fwaas | 12:12 | |
| openstackgerrit | Elena Ezhova proposed openstack/neutron-fwaas master: Fix router update on L3 agent restart https://review.openstack.org/495657 | 12:22 |
| *** yushiro has quit IRC | 12:57 | |
| *** yamamoto has quit IRC | 13:12 | |
| *** yamamoto has joined #openstack-fwaas | 13:14 | |
| *** yamamoto has quit IRC | 13:22 | |
| *** hoangcx_ has joined #openstack-fwaas | 13:25 | |
| *** chandanc has joined #openstack-fwaas | 13:53 | |
| *** SridarK has joined #openstack-fwaas | 13:57 | |
| *** SarathMekala has joined #openstack-fwaas | 13:58 | |
| *** chandanc_ has joined #openstack-fwaas | 13:59 | |
| *** chandanc has quit IRC | 13:59 | |
| *** chandanc_ is now known as chandanc | 13:59 | |
| *** yushiro has joined #openstack-fwaas | 13:59 | |
| *** reedip_ has joined #openstack-fwaas | 14:06 | |
| openstackgerrit | Merged openstack/neutron-fwaas-dashboard master: devstack: Remove workaround for horizon plugin framework https://review.openstack.org/495486 | 14:15 |
| *** yamamoto has joined #openstack-fwaas | 14:23 | |
| *** yamamoto has quit IRC | 14:28 | |
| openstackgerrit | Merged openstack/neutron-fwaas-dashboard master: Move Firewall panel in the left menu lower by default https://review.openstack.org/495487 | 14:41 |
| reedip_ | o/ | 15:01 |
| yushiro | SridarK, xgerman_ https://review.openstack.org/#/c/453786/ let me explain why this fix is necessary | 15:02 |
| reedip_ | the bug report states a lot yushiro :) | 15:03 |
| yushiro | aha :) | 15:03 |
| yushiro | Indeed ! | 15:03 |
| yushiro | perhaps I'm tired :) | 15:04 |
| reedip_ | senzu bean ?? | 15:04 |
| yushiro | reedip_, I had a lot of like senzu bean (red bull), but it is empty :) | 15:05 |
| reedip_ | dont drink too much red bull | 15:06 |
| reedip_ | it gives you initial energy | 15:06 |
| reedip_ | but once the caffine goes down, you get more tired than you were before :) | 15:06 |
| reedip_ | try espresso with Hot water ... it keeps you awake longer :P | 15:06 |
| yushiro | reedip_, oh, I didn't know both news. Thank you. | 15:07 |
| *** hoangcx_ has quit IRC | 15:07 | |
| yushiro | K, I'll go to bed now. See you tomorrow | 15:07 |
| reedip_ | I tried Monster and Red Bull and Espresso. Read it and experimented on it, so I know something . Try it and lemme know | 15:07 |
| yushiro | haha, OK :) | 15:08 |
| yushiro | You drunk so much ! | 15:08 |
| *** yushiro has quit IRC | 15:08 | |
| *** eezhova has quit IRC | 15:12 | |
| *** chandanc has quit IRC | 15:16 | |
| *** SarathMekala has quit IRC | 15:18 | |
| *** yamamoto has joined #openstack-fwaas | 15:25 | |
| *** yamamoto has quit IRC | 15:30 | |
| reedip_ | guess most people went | 15:34 |
| reedip_ | SridarK , xgerman_ can you look into https://review.openstack.org/#/c/453786/ ? It improves some functionality for filtering | 15:35 |
| reedip_ | also SridarK, xgerman_ have we considered using nftables as an agent for firewall ? | 15:35 |
| *** SarathMekala has joined #openstack-fwaas | 15:44 | |
| *** sarathmekala_ has joined #openstack-fwaas | 15:45 | |
| xgerman_ | reedip_ given that we are heading to ovn I am not sure how that would help. The thinh I am most excited about is https://www.cilium.io | 15:46 |
| reedip_ | OVN ? | 15:47 |
| xgerman_ | OVS | 15:47 |
| xgerman_ | I somethimes confuse the two since they are fundamentally the same | 15:47 |
| reedip_ | cilium looks nice | 15:47 |
| xgerman_ | yeah, if I had more time I would definitely explore that deeper | 15:48 |
| reedip_ | I think this is something I would like to discuss, as to what the roadmap of fwaas is , after V2 officially releases with the dashboard | 15:48 |
| xgerman_ | yeah, that makes sense | 15:48 |
| *** SarathMekala has quit IRC | 15:49 | |
| xgerman_ | we probably need some Kubernetes story to be cool | 15:50 |
| xgerman_ | K8 needs Loadbalancers but there firewall story is mostly calico | 15:50 |
| xgerman_ | if I would be a strategist in a networking company (hint, hint SridarK) I would invest resources to align that with hardware and OpenStack | 15:51 |
| reedip_ | how about kuryr? | 15:54 |
| reedip_ | Its kind of a project for Kubernetes networking | 15:54 |
| xgerman_ | nobody I know is using kuryr | 15:54 |
| xgerman_ | people like to do as mauch as they can in K8 and only go to OpenDtack when they have to like all the LB ins K8 suck | 15:55 |
| xgerman_ | so they use Octavia | 15:55 |
| xgerman_ | Calico fundamentally sucks, too, but there hasn’t been pressure to be better | 15:55 |
| reedip_ | hmm , so there is a scope of utilizing FWaaS in K8S and Docker | 15:55 |
| reedip_ | Basically k8s, docker would come by itself | 15:56 |
| xgerman_ | this si what cilium does but if you are on OpenStack… | 15:56 |
| xgerman_ | k8s has integartion with LBaaS and they use CNI to integrate with the network but they don’t have firewalls per se | 15:57 |
| xgerman_ | they only isolate network through policies — but don’t protect ports, source Ip, etc. | 15:57 |
| xgerman_ | so all those systems have some proprietary outside interface to manaipulate things | 15:58 |
| reedip_ | xgerman_ nice case study . You could have pitched this as a CFP for Sydney | 15:58 |
| xgerman_ | now if you manage to tie that into FWaaS (and the corresponding Amazon, Azure, etc.) services that would be a winner | 15:58 |
| reedip_ | :) | 15:58 |
| xgerman_ | yeah, yeah, I am not working for people who would support me in this | 15:59 |
| xgerman_ | that’s more SridarK’s land | 15:59 |
| reedip_ | ok... :) | 16:00 |
| *** reedip_ has quit IRC | 16:04 | |
| *** eezhova has joined #openstack-fwaas | 16:10 | |
| amotoki | xgerman_, SridarK, yushiro: I prepared a release patch of neutron-fwaas-dashboard and mark it WIP now https://review.openstack.org/#/c/496307/ | 16:21 |
| *** yamamoto has joined #openstack-fwaas | 16:26 | |
| *** yamamoto has quit IRC | 16:32 | |
| xgerman_ | thanks | 16:34 |
| *** SridarK has quit IRC | 16:38 | |
| *** yamamoto has joined #openstack-fwaas | 17:28 | |
| *** yamamoto has quit IRC | 17:35 | |
| openstackgerrit | Elena Ezhova proposed openstack/neutron-fwaas master: Fix router update on L3 agent restart https://review.openstack.org/495657 | 17:41 |
| *** SridarK has joined #openstack-fwaas | 17:55 | |
| SridarK | xgerman_: sorry i had stepped away and to get ready to head to the office | 17:56 |
| xgerman_ | no worries, was more of a general discussion about direction. I think we need to get in on the K8 action ;-) | 17:56 |
| SridarK | xgerman_: but great points on cillium - we shd discuss some during the PTG for container based security | 17:56 |
| SridarK | xgerman_: huge +1 | 17:57 |
| *** eezhova has quit IRC | 18:04 | |
| *** yamamoto has joined #openstack-fwaas | 18:31 | |
| *** yamamoto has quit IRC | 18:37 | |
| *** amotoki has quit IRC | 18:53 | |
| *** yamamoto has joined #openstack-fwaas | 19:33 | |
| *** yamamoto has quit IRC | 19:38 | |
| *** eezhova has joined #openstack-fwaas | 19:44 | |
| *** eezhova has quit IRC | 20:27 | |
| *** yamamoto has joined #openstack-fwaas | 20:35 | |
| *** yamamoto has quit IRC | 20:38 | |
| *** yamamoto has joined #openstack-fwaas | 20:38 | |
| *** yamamoto has quit IRC | 20:39 | |
| *** yamamoto has joined #openstack-fwaas | 21:10 | |
| *** yamamoto has quit IRC | 21:15 | |
| *** yamamoto_ has joined #openstack-fwaas | 22:11 | |
| *** yamamoto_ has quit IRC | 22:17 | |
| *** SridarK has quit IRC | 23:02 | |
| *** yamamoto_ has joined #openstack-fwaas | 23:13 | |
| *** yamamoto_ has quit IRC | 23:18 | |
| sarathmekala_ | Please check the mail for the code patch | 23:23 |
| *** sarathmekala_ has quit IRC | 23:31 | |
| *** yushiro has joined #openstack-fwaas | 23:46 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!