Thursday, 2017-11-02

« Wednesday, 2017-11-01 Index Friday, 2017-11-03 »
*** bbbbzhao_ has joined #openstack-fwaas01:42
*** AlexeyAbashkin has joined #openstack-fwaas04:18
*** bbbbzhao_ has quit IRC04:22
*** AlexeyAbashkin has quit IRC04:22
*** yamamoto has joined #openstack-fwaas04:24
*** eN_Guruprasad_Rn has joined #openstack-fwaas04:57
*** eN_Guruprasad_Rn has quit IRC05:12
*** eN_Guruprasad_Rn has joined #openstack-fwaas05:46
*** annp has quit IRC07:16
*** openstackgerrit has joined #openstack-fwaas07:40
openstackgerritOpenStack Proposal Bot proposed openstack/neutron-fwaas master: Updated from global requirements  https://review.openstack.org/51695307:40
openstackgerritOpenStack Proposal Bot proposed openstack/neutron-fwaas master: Updated from global requirements  https://review.openstack.org/51695307:40
*** AlexeyAbashkin has joined #openstack-fwaas07:58
*** annp has joined #openstack-fwaas08:15
*** yamamoto has quit IRC09:18
*** yamamoto has joined #openstack-fwaas09:24
*** yamamoto has quit IRC09:28
*** yamamoto has joined #openstack-fwaas09:35
*** yamamoto has quit IRC09:35
*** yamamoto has joined #openstack-fwaas09:57
*** yamamoto has quit IRC11:16
*** yamamoto has joined #openstack-fwaas11:19
*** yamamoto has quit IRC11:24
*** yamamoto has joined #openstack-fwaas12:11
*** yamamoto has quit IRC12:15
*** yamamoto has joined #openstack-fwaas12:15
*** yamamoto has quit IRC12:20
*** eN_Guruprasad_Rn has quit IRC12:38
*** eN_Guruprasad_Rn has joined #openstack-fwaas12:39
*** yamamoto has joined #openstack-fwaas12:47
*** yamamoto has quit IRC12:47
*** yamamoto has joined #openstack-fwaas12:50
*** eN_Guruprasad_Rn has quit IRC12:55
*** eN_Guruprasad_Rn has joined #openstack-fwaas12:55
*** eN_Guruprasad_Rn has quit IRC13:03
*** eN_Guruprasad_Rn has joined #openstack-fwaas13:05
*** eN_Guruprasad_Rn has quit IRC13:10
*** eN_Guruprasad_Rn has joined #openstack-fwaas13:23
*** AlexeyAbashkin has quit IRC13:23
*** yamamoto has quit IRC13:24
*** yamamoto has joined #openstack-fwaas13:28
*** AlexeyAbashkin has joined #openstack-fwaas13:45
*** hoangcx_ has joined #openstack-fwaas13:49
openstackgerritOpenStack Proposal Bot proposed openstack/neutron-fwaas master: Updated from global requirements  https://review.openstack.org/51695313:50
*** hoangcx_ has quit IRC13:52
*** annp_ has joined #openstack-fwaas13:53
*** hoangcx_ has joined #openstack-fwaas13:53
*** SarathMekala has joined #openstack-fwaas13:57
*** yushiro has joined #openstack-fwaas13:59
yushirohi14:00
annp_hi yushiro14:00
SarathMekalahi all O/14:00
yushiro#startmeeting fwaas14:00
openstackMeeting started Thu Nov  2 14:00:32 2017 UTC and is due to finish in 60 minutes.  The chair is yushiro. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
*** openstack changes topic to " (Meeting topic: fwaas)"14:00
openstackThe meeting name has been set to 'fwaas'14:00
yushiro#chair xgerman_ yushiro14:01
openstackCurrent chairs: xgerman_ yushiro14:01
*** SridarK has joined #openstack-fwaas14:01
yushiro#chair SridarK14:01
openstackCurrent chairs: SridarK xgerman_ yushiro14:01
SridarKHi FWaaS folks14:01
yushiroOK folks, let's begin.14:01
yushiro#topic Queens14:02
*** openstack changes topic to "Queens (Meeting topic: fwaas)"14:02
yushiroL2-agent:  https://review.openstack.org/#/c/323971/14:03
xgerman_o/14:04
yushiroSorry folks, I was in sick this week and there is no update..14:04
annp_Regarding to L2 agent: i just added allowed_address_pairs and port_security_enabled to port_details14:04
yushiroannp_, Great.  thanks.14:04
annp_yushrio, i was in sick also :)14:04
yushiroannp_, Really.  Please take care of it.14:04
SridarKyushiro: annp_ hope u guys get better soon14:05
annp_yushiro, yes. I got stomachache hichic14:05
yushiroSridarK, Thank you so much.14:05
annp_SridarK, thank so much.14:05
xgerman_SridarK: +114:05
SridarKI have started a deployment and will run tests - i have been busy on some internal deadlines14:05
annp_SridarK, thanks so much.14:05
yushiroSridarK, OK.14:06
SridarKyushiro: we can sync on Mon and look thru things and try to merge this next week14:06
yushiroSridarK, Sure.  will do.14:06
yushiroHopefully we can meet in Sydney with fine condition :)14:07
yushiroOVS based L2 firewall driver https://review.openstack.org/#/c/44725114:07
yushiroIs there some update, annp_ ?  I think we're testing in current patch.14:08
annp_Regarding to l2 driver, I have a concerning to egress_rules and ingress_rule14:09
annp_chandanc, are you here?14:10
yushiroSarathMekala, is chandan today ??14:10
annp_yushiro, currently, I'm focusing to co-existence between sg and fwg14:10
SarathMekalahe said he will join..14:11
yushiroSarathMekala, Good news. Thanks :)14:11
SarathMekalaI had a discussion in the morning :)14:11
annp_yushiro, SarathMekala, Can you check my comments in l2 driver patch?14:11
annp_Regarding to co-existence: i have a problem with conntrack14:12
yushiroannp_, You commented that rules are reversing 'ingress -> egress', right?14:12
annp_yushiro, yes!14:12
yushiroannp_, Is it OVS side issue?  or firewall driver's issue?14:13
annp_issue related to co-existence: when i create VM1 is attached to SGA and VM2 is attached to SGB14:14
annp_SGA and SGB has icmp rule14:14
annp_I attached VM1 to FWGA has icmp-allow,14:14
annp_I try to ping from VM2 to VM1 it's ok.14:14
SridarKannp_: the SGA & SGB - do they have a permit or deny ?14:15
SridarKfor icmp14:15
annp_But when i delete icmp-allow in FWGA, i try to ping from vm2 to vm1, i expect we couldn't reachout VM1, but result not good\14:16
annp_SridraK, in security group all rules are allow.14:16
SridarKoh sorry SG ok14:17
annp_conntrack state has been changed to +est-rep+rpl,14:17
annp_I guess problem related to conntrack change from per port to per network14:18
annp_https://github.com/openstack/neutron/commit/4f6aa3ffde2fd68b85bc5dfdaf6c2684931f3f61#diff-9639565b2ec91f2afe0f63f0cd4c189b14:19
yushiroannp_, Hmm, OK.  But, is it possible to fix in firewall side?14:21
xgerman_yeah, also why would our L2 not work per port?14:22
annp_yushiro, I think we can fix that.14:22
annp_xgerman_, yes. I'm thinking about that.14:23
yushiro'per port' is suitable I think.14:23
xgerman_yeah, my understanding was that FWG and SG worked the same14:24
xgerman_in L214:24
annp_xgerman_, yeah, i think so too. But i don't understand, why conntrack state change to OF_STATE_ESTABLISHED_REPLY14:25
annp_https://review.openstack.org/#/c/447251/47/neutron_fwaas/services/firewall/drivers/linux/l2/openvswitch_firewall/firewall.py@64614:25
annp_This flow made co-existence broken in above case!14:26
yushiroannp_, Could you write down how to reproduce into the etherpad?  https://etherpad.openstack.org/p/fwaas-v2-l214:26
annp_yushiro, OK. I will do that now.14:27
yushiroannp_, Thanks.14:27
annp_Can we comeback this problem later?14:27
annp_So Please go ahead14:27
yushiroOK, let's move on.14:28
SridarKannp_: do u need to pull in chandanc in to the discussion ?14:28
yushiro+1, it's better to sync with chandan about that.14:28
annp_SridarK, Yes. That's great!14:28
SarathMekalaannp_, will inform him... please send a mail with him in loop as well14:29
SridarKannp_: maybe send an email out and sched a time for discussion14:29
SridarKSarathMekala: ditto14:29
SarathMekala:)14:30
yushiro+1 It's better to paste etherpad link :)14:30
annp_SridarK, SarathMekala, I will do on tomorrow. I'm in home now. :)14:30
SridarKyushiro: maybe we can discuss on Mon as well - i am not too familiar with the driver changes14:30
SridarKannp_: +114:31
yushiroSridarK, yes14:31
yushiro#topic Horizon support14:31
*** openstack changes topic to "Horizon support (Meeting topic: fwaas)"14:31
yushiroAll of future improvements migrated into launchpad: https://bugs.launchpad.net/neutron-fwaas-dashboard14:32
yushiroAnd sorry for late.  I've already pushed release for dashboard: https://review.openstack.org/#/c/516549/14:32
SarathMekala+1 super14:33
xgerman_+114:33
SridarKyushiro: thx14:33
yushiroRegarding releasing, thanks for your +1.14:33
yushiroRegarding v2 dashboard bugs on launchpad, there are 2 points.  'Bug' and 'improvement'.  as amotoki said, 'improvement' should be migrated into Blueprint.14:34
SarathMekalaI have started a google doc on the enhancements @ https://docs.google.com/document/d/1yKreFzwHsp-TMhB1xDH-EhGHBTGawFAaG1x6ukGJUK4/edit?usp=sharing14:35
SarathMekalaits still WIP.. once I get your suggestions will start a blueprint with it14:35
yushiroSarathMekala, awesome!!!14:35
SridarKSarathMekala: great14:35
yushiroSarathMekala, I think it's much more better to refer related bug on launchpad :)14:36
SarathMekalayushiro, sure.. I will do that14:37
yushiroI'll also comment on your google doc :)14:37
SarathMekalasure14:38
yushiroSarathMekala, Can I paste google doc link on our weekly etherpad?14:38
SarathMekalasure.. go ahead14:38
SridarKyushiro: +114:38
SarathMekalaeven the etherpad needs some clean up.. I created some sections but could not fill them up14:39
yushiroSarathMekala, done.14:39
SarathMekala+114:39
yushiroOK, anything else to discuss about dashboard?14:40
SarathMekalathats for now..14:40
yushiroOK, let's move on.14:40
SarathMekalaamotoki, do you have anything to discuss?14:40
*** eN_Guruprasad_Rn has quit IRC14:41
yushiroI heard that amotoki has not good condition.  Maybe he is not here..14:41
SarathMekalaok.. please carry on14:42
yushiro#topic Stadium Compliance14:42
*** openstack changes topic to "Stadium Compliance (Meeting topic: fwaas)"14:42
yushiroreedip , I think you're busy before summit.  Do you have something to update?14:43
*** reedip_ has joined #openstack-fwaas14:43
reedip_i m late... sorry14:43
yushiroreedip, OK.  Anything to discuss about Stadium Compliance?14:43
reedip_nope, but I think there needs to be a report for fwaas, isnt it ? There were some migration patches ( where in neutron functions have been migrated to lib and the same are to be incorporated in our repo ) but I think they took a back seat some time back due to L214:44
xgerman_let’s get L2 done unless we get complains14:45
SridarKi think most things are done except for the fullstack PS14:45
xgerman_+114:46
SridarKand reedip_ started on that14:46
SridarKbut xgerman_ agreed on L2 priority14:46
reedip_but I am stuck in that , needed some assistance a while back ... I havent been able to contrbute for some weeks owing to company work... but will start again on weekends and spare time :)14:46
xgerman_any manager we know and can lean on ?14:47
SridarK:-)14:47
reedip_umm , not here , but dont worry , I have been multi tasking , so will be back from Saturday14:47
SridarKreedip_: no worries - i think everyone is kind of in that boat14:48
reedip_give me tomorrow :P14:48
reedip_yeah, I know :D14:48
xgerman_SridarK +114:48
yushirowow, reedip_ you're preparing Sydney summit presentation, right?  multi-task!!14:48
reedip_No , I am not coming to Sydney14:48
reedip_travel not supported :(14:48
xgerman_BTW: The foundation wants to play a more active role in devs getting support14:49
reedip_I talked to mlavalle about someone else taking my session14:49
xgerman_reedip14:49
yushirooh, really.  I've seen your presentation.  I see.14:49
reedip_xgerman_ I hope so ... because the attrition is getting higher14:49
reedip_yushiro : where ? Can you send the link ? I think I may have skipped it :)14:50
xgerman_yeah,  if you need travel grants, etc. you can reach out to them14:50
reedip_I dont think its possible now :)14:50
yushirohttps://www.openstack.org/summit/sydney-2017/summit-schedule/global-search?t=reedip14:50
reedip_for sydney14:50
yushiroYou're moderator.14:51
yushirosorry, not prezentation but forum.14:52
reedip_yeah, thats the catch :(14:52
xgerman_yep — reedip_ give it a try — they might have hotel rooms they haven’t filled14:52
yushiro:)14:53
reedip_nevermind, next summit/PTG14:53
reedip_xgerman_ btw I think the foundation would like to give travel grants to core devs ;)14:54
yushiro#topic Open Discussion14:54
*** openstack changes topic to "Open Discussion (Meeting topic: fwaas)"14:54
reedip_for eg. Yushiro got it for PTG :)14:54
xgerman_yeah, I got my fair share of grants, too14:54
xgerman_but I am funded for Dublin ;-)14:55
yushiroreedip_, yes, I was so lucky.14:55
xgerman_+114:55
yushirobzhao, Thanks for your update your audit notification spec.14:55
yushirobzhao, I'll check the latest version of your spec.14:55
reedip_yushiro : we are doing open discussion :)14:55
yushiroYes :)14:56
reedip_yeah , i need to get back to help bzhao .. he has been doing a lot of work on the specs , and I am not able to help him out14:56
SarathMekalaI reviewed the firewall audit spec and gave some comments today14:56
SarathMekalaplease take a look14:56
xgerman_I am a bit worried about availability zones in the spec.14:56
xgerman_If somebody life migrates info becomes stale14:57
reedip_hmm... xgerman ny reason14:57
reedip_k14:57
yushiroxgerman_, Yeah, I don't catch up a correct reason to handle 'availability_zone' either.14:57
yushiroSarathMekala, Good :)14:58
xgerman_yep,  the whole nova AZ, cell, etc. concept is pretty opaque to me14:58
yushiroSo, folks, how about next week's IRC meeting?14:58
xgerman_and it seems to mean different things to different operators14:58
xgerman_yushiro +114:58
reedip_lemme get an opinion on that from a nova core14:59
xgerman_reedip_ +114:59
SridarKat time15:00
yushiroOh, it's time15:00
yushiro#endmeeting15:00
*** openstack changes topic to "#openstack-fwaas"15:00
openstackMeeting ended Thu Nov  2 15:00:38 2017 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:00
openstackMinutes:        http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-11-02-14.00.html15:00
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-11-02-14.00.txt15:00
openstackLog:            http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-11-02-14.00.log.html15:00
SridarKthanks all for joining15:00
SarathMekalabye all O/15:00
yushiroYeah, thank you.15:00
xgerman_o/15:01
yushiroRegarding next IRC meeting, will discuss in ML.15:01
doudehi15:01
*** hoangcx_ has quit IRC15:01
SridarKyushiro: yes - i think we can cancel15:01
SridarK  yushiro: lets figure out logistics to connect on Mon15:02
SridarKwe can review the L2 PS and coordinate with xgerman_ to merge15:02
amotokisorry for that. I was offline during the meeting :(15:02
amotokiwas there any topic I need to be involved in?15:02
SridarKamotoki: i think nothing critical - SarathMekala wanted to check if there was something u wanted to discuss on Dashboard15:03
yushiroSridarK, Sure.  I'll on Sydney on Sunday morning.  It's OK to meet in after keynote or lunch time.15:04
SridarKyushiro: sounds good15:04
yushiroSridarK, I have to attend another forum from 15:20 - 16:00, so it's OK except this time :)15:04
yushiroSridarK, anyway, I'll send e-mail for my telephone number in Sydney tomorrow or day after tomorrow.15:05
amotokiSridarK: thanks. I see. we can discuss with SarathMekala later. possibly we can discuss it in Sydney too15:05
*** reedip_ has quit IRC15:06
yushiro+1+115:06
annp_SridarK, yushiro, xgerman_, i just updated test case for co-existence between SG and FWG: https://etherpad.openstack.org/p/fwaas-v2-l215:06
yushiroThank annp_15:06
*** SarathMekala has quit IRC15:06
yushiroI'll go to bed..  Thanks today.15:07
yushirogood night.15:07
annp_yushiro, you're welcome! tomorrow, i will share with you about our implementation!15:08
yushiroannp_, thanks15:08
*** yushiro has quit IRC15:08
annp_see you! good night.15:08
SridarKannp_: thx15:17
SridarKamotoki: sounds good will meet at Sydney15:17
amotokiSridarK: thanks. email or IRC will work for me. ping me if the time is fixed. i will try to join :)15:21
*** eN_Guruprasad_Rn has joined #openstack-fwaas15:22
annp_SridarK, I will go bed now, see you. Good night, amotoki :)15:23
amotokigood night all15:24
*** annp_ has quit IRC15:26
*** bzhao has quit IRC15:38
*** yamamoto has quit IRC15:41
*** yamamoto has joined #openstack-fwaas15:43
*** yamamoto has quit IRC15:48
*** AlexeyAbashkin has quit IRC15:53
*** yamamoto has joined #openstack-fwaas16:04
*** yamamoto has quit IRC16:04
*** eN_Guruprasad_Rn has quit IRC16:13
*** SridarK has quit IRC16:29
*** vks1 has joined #openstack-fwaas16:52
*** vks11 has joined #openstack-fwaas17:00
*** vks1 has quit IRC17:01
*** yamamoto has joined #openstack-fwaas17:05
*** yamamoto has quit IRC17:12
*** AlexeyAbashkin has joined #openstack-fwaas17:31
*** AlexeyAbashkin has quit IRC17:35
*** vks11 has quit IRC17:58
*** SumitNaiksatam has joined #openstack-fwaas18:01
*** AlexeyAbashkin has joined #openstack-fwaas18:09
*** AlexeyAbashkin has quit IRC18:14
*** vishwanathj has quit IRC19:23
openstackgerritOpenStack Proposal Bot proposed openstack/neutron-fwaas master: Updated from global requirements  https://review.openstack.org/51695319:24
openstackgerritOpenStack Proposal Bot proposed openstack/neutron-fwaas master: Updated from global requirements  https://review.openstack.org/51695319:32
*** SumitNaiksatam has quit IRC20:10
*** AlexeyAbashkin has joined #openstack-fwaas21:08
*** AlexeyAbashkin has quit IRC21:13
*** yamamoto has joined #openstack-fwaas21:51
*** AlexeyAbashkin has joined #openstack-fwaas22:08
*** AlexeyAbashkin has quit IRC22:13
openstackgerritOpenStack Proposal Bot proposed openstack/neutron-fwaas master: Updated from global requirements  https://review.openstack.org/51695323:15
« Wednesday, 2017-11-01 Index Friday, 2017-11-03 »

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!