| *** yamamoto has joined #openstack-fwaas | 00:05 | |
| bzhao | reedip, ping | 01:13 |
|---|---|---|
| hoangcx | Hi Team, this patch fixed UTs gate fail https://review.openstack.org/#/c/512985/ . But docs job failed also because of Zuulv3 config | 01:45 |
| hoangcx | I have proposed the fix for that https://review.openstack.org/#/c/513212/ Please chime in and accelerate if you guys want to have more pieces in Q-1 | 01:46 |
| *** annp has joined #openstack-fwaas | 01:47 | |
| *** openstackgerrit has joined #openstack-fwaas | 01:59 | |
| openstackgerrit | Nguyen Phuong An proposed openstack/neutron-fwaas master: FWaaS v2 extension for L2 agent https://review.openstack.org/323971 | 01:59 |
| *** vks1 has joined #openstack-fwaas | 02:14 | |
| *** vks1 has quit IRC | 02:14 | |
| openstackgerrit | Nguyen Phuong An proposed openstack/neutron-fwaas master: OVS based l2 Firewall driver for FWaaS v2 https://review.openstack.org/447251 | 02:43 |
| openstackgerrit | Nguyen Phuong An proposed openstack/neutron-fwaas master: [DNM]: PoC for ovs_driver of fwaas can be works co-existing with sg https://review.openstack.org/513226 | 02:43 |
| openstackgerrit | Nguyen Phuong An proposed openstack/neutron-fwaas master: OVS based l2 Firewall driver for FWaaS v2 https://review.openstack.org/447251 | 03:21 |
| *** hoangcx has quit IRC | 03:25 | |
| *** annp has quit IRC | 03:25 | |
| *** annp has joined #openstack-fwaas | 03:26 | |
| *** hoangcx has joined #openstack-fwaas | 03:26 | |
| *** reedip_ has joined #openstack-fwaas | 03:50 | |
| reedip_ | o/ | 03:50 |
| *** reedip_ has quit IRC | 04:17 | |
| *** annp has quit IRC | 04:21 | |
| *** annp has joined #openstack-fwaas | 04:21 | |
| *** reedip_ has joined #openstack-fwaas | 04:29 | |
| openstackgerrit | Nguyen Phuong An proposed openstack/neutron-fwaas master: Adding unique contraint for port_id https://review.openstack.org/512154 | 04:36 |
| *** reedip_ has quit IRC | 05:13 | |
| *** reedip_ has joined #openstack-fwaas | 06:52 | |
| *** vishwana_ has joined #openstack-fwaas | 06:54 | |
| *** vishwanathj has quit IRC | 06:54 | |
| *** reedip_ has quit IRC | 06:57 | |
| *** vishwanathj has joined #openstack-fwaas | 06:58 | |
| *** vishwana_ has quit IRC | 06:59 | |
| *** reedip_ has joined #openstack-fwaas | 07:10 | |
| *** yushiro has joined #openstack-fwaas | 07:11 | |
| *** reedip_ has quit IRC | 07:22 | |
| annp | yushiro, ping | 08:05 |
| yushiro | pon | 08:05 |
| annp | yushiro, Have you review and test ovs l2 driver on your local environment? | 08:05 |
| yushiro | I'll test in today's midnight. | 08:08 |
| yushiro | annp, sorry | 08:08 |
| annp | yushiro, thanks. I'm waiting about that :) I hope ovs driver will work fine for us. :) Anyway, could you bless for l2 agent patch? :) | 08:11 |
| yushiro | Yes, I'm OK to put +2 for l2-agent patch after zuul smiled. | 08:16 |
| yushiro | and default fwg . | 08:16 |
| yushiro | OVS part, you tested? If so, plz send a result for me. | 08:17 |
| *** yushiro has quit IRC | 08:17 | |
| annp | yushiro, I have tested it with case VM1 and VM2 attached security group A has icmp-ingress and icmp-egress, Ping VM1 to Vm2 OK! (of course) | 08:24 |
| annp | then i create a fwg with icmp-allow with both ingreess or egress direction, after that, I attached VM1 to fwg, then try to ping vm1 to vm2 It works fine! | 08:26 |
| annp | I just tested this case. | 08:27 |
| *** AlexeyAbashkin has joined #openstack-fwaas | 08:28 | |
| *** yamamoto has quit IRC | 08:32 | |
| *** yamamoto has joined #openstack-fwaas | 09:13 | |
| openstackgerrit | Cao Xuan Hoang proposed openstack/neutron-fwaas-dashboard master: [DNM] Test Zuulv3 migration https://review.openstack.org/513324 | 09:15 |
| *** hoangcx has quit IRC | 09:16 | |
| *** annp has quit IRC | 09:16 | |
| *** hoangcx has joined #openstack-fwaas | 09:17 | |
| *** annp has joined #openstack-fwaas | 09:17 | |
| *** yamamoto has quit IRC | 09:49 | |
| *** annp has quit IRC | 10:20 | |
| *** yamamoto has joined #openstack-fwaas | 10:50 | |
| *** yamamoto has quit IRC | 10:53 | |
| *** yamamoto has joined #openstack-fwaas | 10:53 | |
| *** yamamoto has quit IRC | 10:53 | |
| *** yamamoto has joined #openstack-fwaas | 11:02 | |
| *** AlexeyAbashkin has quit IRC | 11:24 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 11:26 | |
| *** AlexeyAbashkin has quit IRC | 11:51 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 11:55 | |
| openstackgerrit | Merged openstack/neutron-fwaas master: Fix UTs gate failed https://review.openstack.org/512985 | 12:10 |
| *** lnicolas has quit IRC | 12:20 | |
| *** bbbbzhao_ has joined #openstack-fwaas | 12:44 | |
| *** SridarK has joined #openstack-fwaas | 13:48 | |
| *** hoangcx_ has joined #openstack-fwaas | 13:54 | |
| *** yushiro has joined #openstack-fwaas | 13:57 | |
| *** annp has joined #openstack-fwaas | 13:59 | |
| SridarK | Hi FWaaS folks | 13:59 |
| xgerman_ | o/ | 13:59 |
| annp | hi | 13:59 |
| yushiro | hi folks o/ | 13:59 |
| SridarK | lets get started | 13:59 |
| SridarK | #startmeeting fwaas | 13:59 |
| openstack | Meeting started Thu Oct 19 13:59:55 2017 UTC and is due to finish in 60 minutes. The chair is SridarK. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:59 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:59 |
| *** openstack changes topic to " (Meeting topic: fwaas)" | 13:59 | |
| openstack | The meeting name has been set to 'fwaas' | 13:59 |
| SridarK | #chair xgerman_ yushiro | 14:00 |
| openstack | Current chairs: SridarK xgerman_ yushiro | 14:00 |
| SridarK | Firstly apologies i had to miss last week meeting and also the last week has been busy on other things at work | 14:00 |
| SridarK | lets get started | 14:00 |
| openstackgerrit | Murali Annamneni proposed openstack/neutron-fwaas master: Enable MySQL Cluster Support for neutron-fwaas https://review.openstack.org/513392 | 14:01 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: FWaaS v2 extension for L2 agent https://review.openstack.org/323971 | 14:01 |
| SridarK | Great that the Dashboard patch is in | 14:01 |
| xgerman_ | +1 | 14:01 |
| SridarK | #topic Queens L2 support | 14:01 |
| *** openstack changes topic to "Queens L2 support (Meeting topic: fwaas)" | 14:01 | |
| yushiro | +1 thanks Sarath akihiro | 14:01 |
| SridarK | and thanks yushiro as well | 14:01 |
| yushiro | SridarK, Aha :) | 14:02 |
| doude | Hi | 14:02 |
| SridarK | yushiro: pls go ahead i think we are almost there | 14:02 |
| yushiro | OK, let me explain something | 14:02 |
| SridarK | #link https://review.openstack.org/#/c/323971/ | 14:02 |
| yushiro | Yesterday, I and annp has discussed about handling fixed_ip address. | 14:03 |
| yushiro | We decided to handle in driver-side same as neutron ovs-agent. | 14:04 |
| yushiro | So, we've included 'fixed_ips' into port_detail parameter and send port_detail to driver-side. Here is our latest version. | 14:05 |
| yushiro | I've tested in my environment and works fine. | 14:05 |
| yushiro | So, If zuul got +1 for l2-agent patch, I think it's OK to be merged.. | 14:06 |
| annp | +1 yushiro :) | 14:06 |
| xgerman_ | nice — | 14:06 |
| SridarK | yushiro: i see some details for test setup on etherpad https://etherpad.openstack.org/p/fwaas-v2-l2 | 14:07 |
| SridarK | I will do some testing by tomorrow as well | 14:07 |
| yushiro | SridarK, Yes. However, let me check 1 thing about releasing. | 14:08 |
| yushiro | When is a final deadline for Q-1? tomorrow? | 14:08 |
| SridarK | yushiro: hmm i am not sure that it is that critical | 14:09 |
| SridarK | we will need to merge the driver as well for things to be functional | 14:09 |
| yushiro | SridarK, Yes, exactly. | 14:09 |
| hoangcx_ | yushiro: SridarK Here https://review.openstack.org/#/c/512432/ | 14:09 |
| yushiro | hoangcx_, thanks | 14:10 |
| SridarK | hoangcx_: thx | 14:10 |
| xgerman_ | We would need to bump the SHA here: https://review.openstack.org/#/c/512432/2/deliverables/queens/neutron-fwaas.yaml | 14:11 |
| *** mlavalle has joined #openstack-fwaas | 14:11 | |
| xgerman_ | Q-3 is still not released | 14:11 |
| * mlavalle slides silently in | 14:11 | |
| xgerman_ | Q-1 | 14:11 |
| SridarK | i think it is good we got the dashboard in - my feeling is that on the L2 support it is key that we do more testing | 14:11 |
| yushiro | xgerman_, thanks. SridarK OK I see. | 14:12 |
| yushiro | Ah, I have 1 concern about l2 patch. Currently, if we try to associate a port into dirrefent firewall_group at same time, a relation will be broken. | 14:13 |
| SridarK | i think for things to make sense: the FWaaS L2 Agent, L2 Driver and Def FWG needs to be in | 14:13 |
| SridarK | yushiro: but i am thinking validation on the plugin shd fail that | 14:14 |
| yushiro | SridarK, I think this is race condition. 2 requests try to check DB status at same time. | 14:15 |
| SridarK | yushiro: aha ok | 14:15 |
| annp | Sridark, yushiro: we've already pushed patch for fixing that | 14:15 |
| yushiro | We don't guard in DB layer in FirewallGroupPortAssociation table. I think we need to have unique constraint for 'port_id' in this table. | 14:15 |
| yushiro | annp, yees.. could you paste your patch? | 14:15 |
| annp | https://review.openstack.org/#/c/512154/ | 14:16 |
| SridarK | ok and annp that is ur patch | 14:16 |
| annp | As reedip said: we no need migration file | 14:16 |
| annp | So i removed this file. | 14:16 |
| SridarK | annp Hmm it is the same db table for L3 ports as well | 14:17 |
| yushiro | annp, sorry. What are you going to fix ?? | 14:17 |
| SridarK | so i am a bit confused - let me look more and think more after i am fully awake and comment on Gerrit | 14:18 |
| mlavalle | lol | 14:18 |
| SridarK | :-) | 14:18 |
| yushiro | annp, I think your approach is better because we've already released fwaas v2 for L3. | 14:18 |
| yushiro | mlavalle, Hi :) | 14:18 |
| SridarK | yushiro: yes that was my thought too | 14:18 |
| SridarK | lets comment on gerrit | 14:19 |
| annp | SridarK: ok! | 14:19 |
| * mlavalle waves back to the entire team :-) | 14:19 | |
| SridarK | shall we move on to the driver ? | 14:19 |
| yushiro | SridarK, yes, please. | 14:20 |
| SridarK | #link https://review.openstack.org/#/c/447251/ | 14:20 |
| annp | Please go ahead | 14:20 |
| SridarK | annp: | 14:20 |
| annp | :) | 14:20 |
| SridarK | pls go ahead | 14:20 |
| SridarK | annp ^^ | 14:20 |
| SridarK | and annp thanks for the help on this | 14:20 |
| annp | for ovs driver it's ready for reviewing and testing | 14:20 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: OVS based l2 Firewall driver for FWaaS v2 https://review.openstack.org/447251 | 14:20 |
| annp | fwg can works co-existing sg now | 14:20 |
| yushiro | annp, yes. | 14:21 |
| annp | yushiro, did you test this driver? | 14:21 |
| SridarK | annp pls upd the testing etherpad with any details so all can test | 14:21 |
| SridarK | https://etherpad.openstack.org/p/fwaas-v2-l2 | 14:21 |
| SridarK | annp: oh very nice that u have verified co-existence with SG | 14:22 |
| yushiro | annp, Now I'm testing but failed to create VM instance (No sql_connection parameter is established) | 14:22 |
| SridarK | This area will need careful testing (on co-existence) | 14:22 |
| yushiro | annp and I discussed yesterday and annp replied to Inessa yesterday, right? | 14:23 |
| annp | SridarK: Sorry, I don't have test case here. So Tomorrow, I will try to test and update etherpad | 14:23 |
| annp | yushiro, yes. You can see that on gerrit. | 14:23 |
| SridarK | annp: no worries - just share any details so others can also use that info for testing | 14:23 |
| annp | SridarK, thanks. I hope you have chance to verify ovs driver :) | 14:24 |
| SridarK | annp: yes i will test it as well | 14:24 |
| yushiro | SridarK, Now i've updated https://etherpad.openstack.org/p/fwaas-v2-l2 local.conf with OVS fw driver and L2-agent | 14:24 |
| SridarK | yushiro: yes thanks for that | 14:24 |
| xgerman_ | +1 | 14:25 |
| SridarK | annp: anything else u would like to discuss ? | 14:25 |
| annp | that's all from me :) | 14:25 |
| annp | please go ahead | 14:25 |
| SridarK | i think chandanc may be off this week | 14:25 |
| yushiro | annp, I'll paste ovs-ofctl dump-flows br-int for testing. | 14:25 |
| SridarK | yushiro: yes good idea | 14:26 |
| annp | yushiro, really cool. it useful for debugging | 14:26 |
| SridarK | and on default fwg - i think we are ready to go - in a way it would make sense for this to get after the L2 agent patch | 14:27 |
| SridarK | but looks like it is in need of a blessing from CI | 14:27 |
| SridarK | yushiro: annp anything else u would like to discuss on L2 | 14:28 |
| yushiro | SridarK, 1 thing. We've separated perfectly default fwg and l2-agent patch. | 14:28 |
| SridarK | overall i think some great progress on this | 14:28 |
| SridarK | yushiro: +1 | 14:28 |
| yushiro | 1. default fwg 2. l2-agent 3. Auto-association default fwg in l2-agent | 14:28 |
| *** reedip_ has joined #openstack-fwaas | 14:28 | |
| reedip_ | hey guys , sorry, its a festival in India .... something similar to Hanabi | 14:28 |
| reedip_ | https://g.co/kgs/xgt8SL | 14:28 |
| reedip_ | late to join tjhe meeting | 14:29 |
| SridarK | and mlavalle also many thanks for increasing the priority on the blueprint (and for joining the mtg) | 14:29 |
| SridarK | reedip_: no worries | 14:29 |
| SridarK | ok lets move on | 14:29 |
| yushiro | Patch '3.' is just updating handle_port()... | 14:29 |
| yushiro | That's all. | 14:29 |
| SridarK | yushiro: ok | 14:29 |
| yushiro | reedip_, sounds exellent :) | 14:30 |
| SridarK | that makes more sense to me | 14:30 |
| mlavalle | SridarK: should it be higher. I wanted to give it visibility, but not put the team on the spotlight, without your consent | 14:30 |
| SridarK | no | 14:30 |
| SridarK | mlavalle: no that is fine i think - we are making progress | 14:30 |
| xgerman_ | +! | 14:30 |
| mlavalle | cool | 14:30 |
| SridarK | mlavalle: thx again | 14:30 |
| xgerman_ | mlavalle when will Q-1 be cut? | 14:31 |
| mlavalle | today | 14:31 |
| mlavalle | we had a patch lined up last night | 14:31 |
| mlavalle | but still marked as WIP | 14:31 |
| SridarK | and lets get in annp's patch on constraint for port_id | 14:31 |
| yushiro | SridarK, +1 | 14:32 |
| xgerman_ | +1 | 14:32 |
| annp | SridarK: Is there some concerning? | 14:33 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Adding unique contraint for port_id https://review.openstack.org/512154 | 14:33 |
| SridarK | ok on Q-1 - i think we are ok with L2 stuff getting in over the next few days and be part of Q-2 | 14:33 |
| reedip_ | I think the migration in the port ID is not needed , TBH | 14:34 |
| reedip_ | I guess I am late for the party though :) | 14:34 |
| SridarK | annp: no concerns - i think we are good on that - i will review again and we can close that | 14:34 |
| annp | SridarK, Ok! :) | 14:34 |
| xgerman_ | +1 | 14:34 |
| SridarK | reedip_: we had some discussion on that but lets come back to that | 14:34 |
| yushiro | reedip_, we talked about that before. I think it's better to keep current approach because we've already published fwaas v2 with L3. | 14:35 |
| SridarK | #topic Queens Dashboard | 14:35 |
| *** openstack changes topic to "Queens Dashboard (Meeting topic: fwaas)" | 14:35 | |
| reedip_ | yushiro : hmm .. ok, lets take it up in a while | 14:35 |
| SridarK | #link https://review.openstack.org/#/c/475840/ | 14:35 |
| SridarK | thanks SarathMekala amotoki and yushiro for jumping in as well | 14:35 |
| SridarK | we have our first cut of dasboard support in | 14:36 |
| yushiro | You're welcome!!! | 14:36 |
| amotoki | thanks all | 14:36 |
| SridarK | i think we acknowledge that there may be some tweaking reqd but it is good to have this | 14:36 |
| amotoki | who wants to cut a release? it does not follow cycle-with-milestones, so we need to cut a release separately | 14:37 |
| SridarK | and hopefully with L2 support in - it will be an incremental effort to add that | 14:37 |
| amotoki | another info: please file bugs on remaining things on v2 dashboard with v2-dashboard tag | 14:37 |
| reedip_ | amotoki : ok | 14:38 |
| amotoki | https://bugs.launchpad.net/neutron-fwaas-dashboard/+bugs/?field.tag=v2-dashboard | 14:38 |
| SridarK | amotoki: thx for the info | 14:38 |
| openstackgerrit | Nguyen Phuong An proposed openstack/neutron-fwaas master: Adding unique constraint for port_id https://review.openstack.org/512154 | 14:38 |
| amotoki | and we need a release note for v2 dashboard before the release | 14:38 |
| yushiro | amotoki, I'd like to help for cutting. But I'm newbee :) | 14:38 |
| amotoki | yushiro: i can help you if you'd try | 14:38 |
| yushiro | amotoki, Thanks for launchpad link. I'll migrate from etherpad to launchpad for bug. | 14:38 |
| amotoki | yushiro: it is a simple thing | 14:39 |
| yushiro | amotoki, Yes, thanks. | 14:39 |
| SridarK | amotoki: thx, yushiro then we can take turns | 14:39 |
| amotoki | one more thing: have anyone checked zuulv3 integration with fwaas dashboard? | 14:40 |
| yushiro | :) | 14:40 |
| yushiro | sorry, not yet. | 14:40 |
| hoangcx_ | amotoki: Yes. I do | 14:40 |
| xgerman_ | yeah, I was hoping it would be one of the instances where it works automagically | 14:40 |
| reedip_ | no, but I think there is a patch for zuul by hoangcx_ | 14:40 |
| reedip_ | xgerman_ too positive :) | 14:41 |
| SridarK | hoangcx_: can u point to ur patch pls | 14:41 |
| amotoki | yeah, the dashboard consumes horizon, so one fix is needed. | 14:41 |
| amotoki | this is what hoangcx_ proposed | 14:41 |
| hoangcx_ | https://review.openstack.org/#/c/513336/ | 14:41 |
| SridarK | hoangcx_: thx | 14:41 |
| xgerman_ | sweet | 14:42 |
| hoangcx_ | I fixed gate for fwaas and then the dashboard | 14:42 |
| yushiro | hoangcx_, thanks | 14:42 |
| SridarK | hoangcx_: thx | 14:42 |
| SridarK | anything further on dashboard ? | 14:44 |
| SridarK | if not we can move on | 14:45 |
| amotoki | nothing from me | 14:45 |
| SridarK | ok | 14:45 |
| SridarK | #topic Open Discussion | 14:45 |
| *** openstack changes topic to "Open Discussion (Meeting topic: fwaas)" | 14:45 | |
| SridarK | doude: thx for the pointer to the doc in last mtg | 14:45 |
| doude | np | 14:45 |
| yushiro | amotoki, would it be possible to support cutting tomorrow? | 14:45 |
| doude | did you had tie to look at it? | 14:46 |
| yushiro | s/cutting/cutting release | 14:46 |
| doude | s/tie/time | 14:46 |
| SridarK | doude: not yet | 14:46 |
| doude | and on the review? | 14:46 |
| SridarK | doude: but i will look and we can discuss more from next week | 14:46 |
| xgerman_ | TC elections this week; next PTG week of 2/26 in Dublin,. Ireland | 14:46 |
| SridarK | if u think we are ready we can make that a regular topic | 14:46 |
| doude | don't hesitate to ping me on IRC (I'm in French time zone) | 14:47 |
| SridarK | doude: ok thx | 14:47 |
| doude | yes | 14:47 |
| amotoki | yushiro: perhaps I can | 14:47 |
| reedip_ | tahts UTC +2 , right? | 14:47 |
| xgerman_ | but doing CA hours? | 14:47 |
| doude | Do you think it could land for Queens release? | 14:47 |
| yushiro | amotoki, or today's midnight? (just joking) haha | 14:47 |
| doude | yes UTC+2 | 14:47 |
| SridarK | xgerman_: will u be able to make the summit ? | 14:47 |
| amotoki | yushiro: both works for me :) | 14:47 |
| xgerman_ | nope | 14:47 |
| -amotoki- yushiro: if you want | 14:47 | |
| SridarK | doude: i think we can defn focus on that | 14:47 |
| SridarK | once the L2 support is in - that should make things easier to prioritze | 14:48 |
| doude | ok so until L2 stuff merge we can discuss the solution | 14:48 |
| yushiro | amotoki, You're always superman :) Please help me in tomorrow's morning. | 14:48 |
| SridarK | doude: sounds good | 14:48 |
| doude | and then when we decided how we'll proceed, I'll rebase my patch and update it | 14:49 |
| SridarK | yushiro: +1 | 14:49 |
| amotoki | no problem. only difference is to go to bed early or to get up later :) | 14:49 |
| xgerman_ | +1 | 14:49 |
| SridarK | :-) | 14:50 |
| yushiro | hahaha | 14:50 |
| SridarK | I hope many of the folks will be at the summit | 14:50 |
| reedip_ | Nope ... | 14:51 |
| yushiro | aha, 1 thing from me. | 14:51 |
| reedip_ | I have a forum topic but doesnt seem to that I would be going yet | 14:51 |
| yushiro | Folks, would you write your name if you join Sydney summit? https://etherpad.openstack.org/p/fwaas-meeting | 14:51 |
| yushiro | in Sydney summit attendee: section :) | 14:51 |
| SridarK | reedip_: oh ok | 14:52 |
| yushiro | reedip_, yeah, I checked you have a presentation :) | 14:52 |
| yushiro | annp, I think to test with ovs fw driver. Is it better to change sg driver for 'openvswitch' ? | 14:53 |
| SridarK | yushiro: oh yes u bring up a good point | 14:53 |
| xgerman_ | +1 | 14:53 |
| annp | yushiro, yes. | 14:53 |
| yushiro | OK, I'll describe in etherpad. | 14:54 |
| SridarK | do we have to support SG on iptables ? | 14:54 |
| annp | Please change! and let see what will happen :) | 14:54 |
| xgerman_ | yeah, but we should be able to run against an iptables SG, too? | 14:54 |
| xgerman_ | that would be similar to FWaaS stabd-alone | 14:54 |
| annp | SridarK, I'm not sure, I haven't tested with this case. | 14:54 |
| SridarK | annp: when u tested for co-existence with SG | 14:54 |
| *** yamamoto has quit IRC | 14:54 | |
| SridarK | what driver for SG did u use ? | 14:55 |
| annp | I just tested with SG based ovs and fwg | 14:55 |
| SridarK | annp: ok that is what i thought | 14:55 |
| SridarK | and that seems to be the more straightforward case to support | 14:55 |
| annp | yes, I think so. | 14:55 |
| yushiro | done | 14:56 |
| annp | We shouldn't care too much. :) | 14:56 |
| yushiro | Plz check 'How to configure some config files:' section after deployed devstack. | 14:56 |
| reedip_ | care about what ??? ::) | 14:56 |
| xgerman_ | yep, as long as we document it | 14:56 |
| annp | reedip, we shouldn't care iptables hybrid | 14:56 |
| yushiro | yes, SG and FWG on OVS. That is our real target. | 14:57 |
| reedip_ | kk | 14:57 |
| annp | +1 yushiro. | 14:57 |
| amotoki | if hybrid plug and hybrid SG driver are used, FW rules are applied at ovs flow and SG rules are applied at linuxbrige | 14:57 |
| hoangcx_ | I think we need to documented it out for something like "internal fwaas" as neutron does to help other contributor understand | 14:57 |
| xgerman_ | +1 | 14:58 |
| amotoki | i believe it works so ovs native support from fwaas is enough. is it right? | 14:58 |
| yushiro | amotoki, +100 | 14:58 |
| SridarK | yes agreed | 14:58 |
| xgerman_ | yep — I just thoiught we would get the Hyvrid for free | 14:59 |
| yushiro | Yes, that is our target. | 14:59 |
| annp | amotoki, yes, But i'm not sure. Let try to test with this case | 14:59 |
| SridarK | ok we are at time (not that there is another mtg in our channel) but lets conform to the time | 14:59 |
| reedip_ | we have some DVR related issues as well .. I couldnt look into them but SridarK we need some input once you have time | 14:59 |
| SridarK | Thanks all for attending | 15:00 |
| amotoki | annp: yeah. needs tests. anyway the order of rule enforcements is important. | 15:00 |
| SridarK | reedip_: got it | 15:00 |
| xgerman_ | +1 | 15:00 |
| SridarK | #endmeeting | 15:00 |
| *** openstack changes topic to "#openstack-fwaas" | 15:00 | |
| openstack | Meeting ended Thu Oct 19 15:00:17 2017 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-10-19-13.59.html | 15:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-10-19-13.59.txt | 15:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-10-19-13.59.log.html | 15:00 |
| amotoki | thanks all | 15:00 |
| yushiro | Thanks. good night... | 15:01 |
| annp | amotoki, I agree. So let documment if there is some limitation | 15:01 |
| SridarK | reedip_: thx for the reminddr on the dvr | 15:01 |
| reedip_ | SridarK Glad to help : | 15:01 |
| reedip_ | :) | 15:01 |
| yushiro | if we built 'iptables_hybrid' with fwaas v2, VM ---- linux br(sg) ---- br-int (fwg) ---- br-tun | 15:02 |
| yushiro | VM ---- linux br(sg) ---- br-int (fwg) ---- br-tun | 15:02 |
| yushiro | Structure perspective, I think it works as we expected.. but needs more test :) | 15:03 |
| annp | yushiro, +1 and please update your test case and ovs-flows if you test this. :) | 15:04 |
| yushiro | annp, yeah, but I'll test ovs driver first. | 15:05 |
| hoangcx_ | xgerman_: yushiro We proposed new method ha_state_change in neutron. Adoption for fwaas: https://review.openstack.org/#/c/512926/ | 15:05 |
| annp | yushiro, yeah! thanks. | 15:06 |
| xgerman_ | hoangcx_ thanks | 15:06 |
| *** hoangcx_ has quit IRC | 15:08 | |
| yushiro | OK forks, good night....... | 15:11 |
| reedip_ | gn Yushiro | 15:11 |
| reedip_ | Happy Diwali SridarK ... Do you celebrate it there ? | 15:11 |
| yushiro | reedip_, yeah. sleeply | 15:11 |
| *** yushiro has quit IRC | 15:12 | |
| reedip_ | wow he is quick ... | 15:12 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Adopt a new abstract method ha_state_change https://review.openstack.org/512926 | 15:12 |
| SridarK | reedip_: Many Thanks and wish u & family the same as well | 15:14 |
| reedip_ | :) thanks SridarK | 15:14 |
| SridarK | reedip_: yes we do celebrate in a smaller manner :-) | 15:14 |
| *** reedip_ has quit IRC | 15:19 | |
| *** annp has quit IRC | 15:50 | |
| *** yamamoto has joined #openstack-fwaas | 15:55 | |
| *** yamamoto has quit IRC | 16:11 | |
| *** yamamoto has joined #openstack-fwaas | 16:39 | |
| *** SridarK has quit IRC | 16:40 | |
| *** AlexeyAbashkin has quit IRC | 16:46 | |
| *** yamamoto has quit IRC | 16:53 | |
| *** bbbbzhao_ has quit IRC | 17:12 | |
| *** SumitNaiksatam has joined #openstack-fwaas | 17:54 | |
| *** SumitNaiksatam has quit IRC | 18:15 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 18:19 | |
| *** AlexeyAbashkin has quit IRC | 18:23 | |
| *** jdavis has joined #openstack-fwaas | 19:05 | |
| jdavis | When is fwaasv2 dashboard going to be available? Can anyone tell me? | 19:05 |
| *** AlexeyAbashkin has joined #openstack-fwaas | 19:17 | |
| *** AlexeyAbashkin has quit IRC | 19:21 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 20:17 | |
| *** AlexeyAbashkin has quit IRC | 20:21 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 20:38 | |
| *** AlexeyAbashkin has quit IRC | 20:42 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 20:59 | |
| *** AlexeyAbashkin has quit IRC | 21:03 | |
| xgerman_ | jdavis we will release it shortly… probably in a week or so | 21:17 |
| *** yamamoto has joined #openstack-fwaas | 21:50 | |
| *** jdavis has quit IRC | 22:04 | |
| *** jdavis has joined #openstack-fwaas | 22:25 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 23:16 | |
| *** AlexeyAbashkin has quit IRC | 23:21 | |
| *** jdavis has quit IRC | 23:26 | |
| *** mlavalle has quit IRC | 23:32 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 23:58 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!