| *** yamamoto has joined #openstack-fwaas | 00:30 | |
| *** yamamoto has quit IRC | 00:33 | |
| *** yamamoto has joined #openstack-fwaas | 00:49 | |
| *** yamamoto has quit IRC | 01:18 | |
| *** yamamoto has joined #openstack-fwaas | 01:20 | |
| *** yamamoto has quit IRC | 01:23 | |
| *** chandanc has joined #openstack-fwaas | 01:32 | |
| *** chandanc has quit IRC | 01:32 | |
| *** lnicolas has quit IRC | 01:42 | |
| *** lnicolas has joined #openstack-fwaas | 01:42 | |
| *** lnicolas has quit IRC | 01:44 | |
| *** SridarK has joined #openstack-fwaas | 01:57 | |
| *** yamamoto has joined #openstack-fwaas | 02:24 | |
| *** yamamoto has quit IRC | 02:33 | |
| *** yamamoto has joined #openstack-fwaas | 02:48 | |
| *** yamamoto has quit IRC | 03:22 | |
| *** yamamoto has joined #openstack-fwaas | 04:23 | |
| *** yamamoto has quit IRC | 04:33 | |
| *** yushiro has joined #openstack-fwaas | 04:38 | |
| yushiro | Hi SridarK | 04:38 |
|---|---|---|
| yushiro | Thanks for your e-mail | 04:38 |
| yushiro | I just woke up and try to update some patches. | 04:39 |
| *** visualbasKW5LUY has joined #openstack-fwaas | 04:49 | |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! wymmrrei: bradjones amotoki openstackstatus ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | 04:49 |
| *** SridarK has quit IRC | 04:49 | |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! pphlhl: jafeha bbzhao openstack ▄▄▄▄▄▄▄▄▄▄▄ | 04:49 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! wvvucaw: obre_ amotoki xgerman_ ▄▄▄▄▄▄▄▄▄▄ | 04:49 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! wojbywcy: xgerman_ jafeha SridarK ▄▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| *** yushiro has quit IRC | 04:50 | |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! hqteyd: reedip obre_ njohnston ▄▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! hwcoy: jafeha fyxim bradjones ▄▄▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! yzjxnysywz: xgerman_ mestery SridarK ▄▄▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! dxhwexnij: jhesketh amotoki jafeha ▄▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! tbvgl: amotoki xgerman_ openstackstatus ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! ujglwyzzef: doude openstackgerrit xgerman_ ▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! humjeb: jhesketh SridarK fyxim ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| visualbasKW5LUY | ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ USA NUMBER 315-505-4666 FOR LIVE HOT SEX RIGHT NOW!!! xugiaksyda: SridarK mestery zigo ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | 04:50 |
| *** visualbasKW5LUY has quit IRC | 04:50 | |
| *** yamamoto has joined #openstack-fwaas | 05:06 | |
| *** yamamoto has quit IRC | 05:08 | |
| *** yamamoto has joined #openstack-fwaas | 05:21 | |
| *** yamamoto has quit IRC | 05:32 | |
| *** yushiro has joined #openstack-fwaas | 05:44 | |
| *** chandanc has joined #openstack-fwaas | 05:53 | |
| chandanc | Hello yushiro | 05:54 |
| yushiro | Hi chandanc | 05:54 |
| yushiro | First of all, super good catch! | 05:54 |
| chandanc | let me update the driver part and push for review | 05:54 |
| yushiro | Yup | 05:54 |
| chandanc | yushiro: thanks, hope this is the last :) | 05:54 |
| yushiro | yes | 05:54 |
| yushiro | chandanc, You' gonna update https://review.openstack.org/#/c/539461/ ? | 05:55 |
| chandanc | yes | 05:55 |
| yushiro | OK, | 05:55 |
| yushiro | If you update the patch, i'll try to test with "both OVS" and "noop + ovs". | 05:56 |
| yushiro | chandanc, I'm trying to call RPC when trusted port are updated. | 05:59 |
| chandanc | sure yushiro | 05:59 |
| yushiro | chandanc, I'm targeting 1.metadata connection and 2.router. Is there any target to listen? | 06:01 |
| chandanc | yushiro: i think you can call https://github.com/openstack/neutron-lib/blob/master/neutron_lib/utils/net.py#L46 to determine if we need to call rpc | 06:03 |
| *** yamamoto has joined #openstack-fwaas | 06:03 | |
| yushiro | chandanc, Yes, I'll use this method to judge updated port is trusted or not. | 06:03 |
| chandanc | ok sure | 06:04 |
| yushiro | chandanc, In RPC method, we should call to set OVS flow for them. Should we define a new method in driver side ? I'd like to reuse some method if exist. | 06:05 |
| chandanc | i am adding | 06:06 |
| chandanc | https://review.openstack.org/#/c/385085/30/neutron/agent/linux/openvswitch_firewall/firewall.py@530 | 06:06 |
| chandanc | with same name | 06:06 |
| yushiro | OK, | 06:06 |
| yushiro | Thanks. So, I'll update in server-side. | 06:06 |
| chandanc | these should be called by agent | 06:07 |
| chandanc | so you can add some RPC calls on the agent which can be called from server and then use these apis to call the driver | 06:08 |
| yushiro | Yes.. ah, chandanc I realized that handle_update_port() in fwaas_plugin_v2.py | 06:10 |
| *** yamamoto has quit IRC | 06:10 | |
| yushiro | in this method, it is called 3 times. | 06:10 |
| chandanc | ya from there call the agent RPC , from agent rpc call driver api | 06:10 |
| yushiro | 1. created(not bind) 2. updated(binded) 3. updated(status : ACTIVE) | 06:11 |
| chandanc | oh | 06:11 |
| chandanc | we can go for only case 3 | 06:11 |
| yushiro | chandanc, Yes, exactly. | 06:11 |
| yushiro | newly created VM port can be judged only "2". Haha, it is a little complicated. | 06:12 |
| yushiro | So, in timing "3", we should judge is_port_trusted() and 'status' is 'ACTIVE'. | 06:13 |
| yushiro | That is my understanding. Plz tell your opinion :) | 06:13 |
| yushiro | s/tell/tell me | 06:13 |
| *** chandanc has quit IRC | 06:22 | |
| *** chandanc has joined #openstack-fwaas | 06:25 | |
| openstackgerrit | chandanc proposed openstack/neutron-fwaas master: Remove disable option for default FWG and allow only on VM ports https://review.openstack.org/539461 | 06:29 |
| openstackgerrit | chandanc proposed openstack/neutron-fwaas master: Remove disable option for default FWG and allow only on VM ports https://review.openstack.org/539461 | 06:31 |
| chandanc | yushiro: i just updated the driver | 06:31 |
| chandanc | that ws the easy part | 06:31 |
| chandanc | but there is a issue, the process_trusted_ports needs to be called with ports instead of port_ids | 06:32 |
| chandanc | this is due to the local vlan problem we resolved earlier | 06:33 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/neutron-fwaas-dashboard master: Imported Translations from Zanata https://review.openstack.org/540577 | 06:38 |
| yushiro | OK | 06:52 |
| chandanc | yushiro: after looking at the agent side, there might be an easier way | 07:00 |
| yushiro | So, currently, I should bring port object as an argument into agent-side. | 07:01 |
| chandanc | http://paste.openstack.org/show/659934/ | 07:01 |
| chandanc | yes yushiro | 07:01 |
| chandanc | do you think that will work ? | 07:02 |
| yushiro | handle_port() can work but delete_port() cannot work I think. Because delete_port is only include its ID. | 07:03 |
| chandanc | actually, for the delete i need only id | 07:04 |
| yushiro | Ah, if so, it works but lemme check 1 thing. | 07:04 |
| yushiro | In delete case, it work correctly if you need only ID. | 07:04 |
| chandanc | sure, this might be a short term fix | 07:05 |
| yushiro | However, in handle_port() case, tell me the timing to setup rules for DHCP/router port. Only once when it is created? or any update timing? | 07:05 |
| chandanc | i think only once for created | 07:06 |
| chandanc | that should be enough right ? | 07:07 |
| yushiro | Yes, that's my understanding. In other words, it should prevent any other update event. | 07:07 |
| chandanc | ya, ok let me test on my setup | 07:07 |
| chandanc | yushiro: actually i had a discussion with sridar and he told me one more test | 07:08 |
| chandanc | with floating ip to access the vm | 07:08 |
| yushiro | chandanc, OK, sure. I'm still implementing at handle_update_port(). | 07:10 |
| chandanc | ok, let me try | 07:10 |
| yushiro | will update patch as WIP | 07:12 |
| chandanc | yushiro: the patch seems to be working | 07:26 |
| chandanc | but i will do further tests | 07:26 |
| yushiro | Oh, that's good | 07:29 |
| yushiro | ah, chandanc I think your patch is good because we need to case if q-agt is restarted. | 07:32 |
| chandanc | oh | 07:32 |
| chandanc | yes | 07:32 |
| chandanc | ok till now tests seems good | 07:33 |
| chandanc | i will push the changes | 07:33 |
| chandanc | once you are done, we can review what is needed and what can be removed | 07:33 |
| chandanc | yushiro: is that ok ? | 07:34 |
| yushiro | Yes | 07:34 |
| chandanc | ok | 07:34 |
| openstackgerrit | chandanc proposed openstack/neutron-fwaas master: Remove disable option for default FWG and allow only on VM ports https://review.openstack.org/539461 | 07:39 |
| yushiro | Thanks | 07:41 |
| chandanc | yushiro: sure and thanks for looking into the issue beyond weekdays | 07:42 |
| yushiro | chandanc, NP. | 07:42 |
| chandanc | i will be away for lunch, but we can have a meeting in the usual time if you need | 07:43 |
| chandanc | sent you a mail | 07:43 |
| yushiro | Sure, thanks. | 07:43 |
| *** chandanc has quit IRC | 07:50 | |
| *** HoloIRCUser2 has joined #openstack-fwaas | 08:00 | |
| *** HoloIRCUser2 is now known as chandanc_afk | 08:02 | |
| *** chandanc_afk has quit IRC | 08:02 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 08:07 | |
| *** HoloIRCUser2 has joined #openstack-fwaas | 08:07 | |
| *** yushiro has quit IRC | 08:08 | |
| *** AlexeyAbashkin has quit IRC | 08:11 | |
| *** HoloIRCUser2 has quit IRC | 08:18 | |
| *** yushiro has joined #openstack-fwaas | 08:52 | |
| *** yamamoto has joined #openstack-fwaas | 09:16 | |
| *** yamamoto has quit IRC | 09:21 | |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Remove disable option for default FWG and allow only on VM ports https://review.openstack.org/539461 | 09:48 |
| *** yushiro has quit IRC | 09:58 | |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Remove disable option for default FWG and allow only on VM ports https://review.openstack.org/539461 | 10:44 |
| *** yamamoto has joined #openstack-fwaas | 10:55 | |
| *** yamamoto has quit IRC | 10:56 | |
| *** yamamoto has joined #openstack-fwaas | 11:16 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 11:43 | |
| *** AlexeyAbashkin has quit IRC | 12:04 | |
| *** yamamoto has quit IRC | 12:06 | |
| *** yamamoto has joined #openstack-fwaas | 12:31 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 13:17 | |
| *** chandanc has joined #openstack-fwaas | 13:21 | |
| *** yushiro has joined #openstack-fwaas | 13:24 | |
| chandanc | hello yushiro | 13:27 |
| chandanc | i am restarting my devstack | 13:27 |
| chandanc | will check the updates | 13:28 |
| chandanc | yushiro: thanks for checking on the delete case, i did not check the exception case. | 13:32 |
| *** chandanc has quit IRC | 13:39 | |
| *** yushiro has quit IRC | 13:50 | |
| *** yushiro has joined #openstack-fwaas | 13:50 | |
| *** chandanc has joined #openstack-fwaas | 14:17 | |
| yushiro | Hi chandanc | 14:29 |
| chandanc | Hello yushiro | 14:29 |
| yushiro | Sorry, I was eating dinner. | 14:29 |
| chandanc | no problem | 14:29 |
| chandanc | i am still bringing up my devstack | 14:29 |
| chandanc | thanks for catching the delete issue | 14:30 |
| yushiro | chandanc, NP | 14:30 |
| yushiro | and fixed handle_port() a little bit. | 14:30 |
| chandanc | are you done with the UT | 14:30 |
| chandanc | yes is saw that, looks good to me | 14:31 |
| yushiro | Yes, the latest patch set is added UTs. | 14:31 |
| yushiro | TBH, we need tempest test for VM connection. | 14:31 |
| chandanc | PS 19 ? | 14:31 |
| yushiro | chandanc, yes | 14:32 |
| chandanc | i see a -1 from zuul | 14:32 |
| yushiro | Oh, tempest test is failed | 14:32 |
| chandanc | can you take a look | 14:32 |
| yushiro | checking now | 14:32 |
| chandanc | sure | 14:32 |
| yushiro | only failed 1 test.. | 14:33 |
| chandanc | i could not figureout the log | 14:35 |
| chandanc | do you have the link | 14:35 |
| chandanc | got it | 14:36 |
| yushiro | OK | 14:36 |
| chandanc | Details: (TestFWaaS_v2:test_icmp_reachability_scenarios) Server d577f81a-e7a1-47f0-8308-0831b5327d2b failed to reach ACTIVE status and task state "None" within the required time (196 s). Current status: BUILD. Current task state: spawning. | 14:39 |
| chandanc | recheck ? | 14:39 |
| yushiro | http://logs.openstack.org/61/539461/19/check/legacy-neutron-fwaas-v2-dsvm-tempest/ca35735/logs/screen-q-agt.txt.gz?level=ERROR | 14:41 |
| yushiro | chandanc, I think 'NoopFirewallL2Driver' object has no attribute 'process_trusted_ports' | 14:42 |
| chandanc | oh | 14:42 |
| yushiro | We missed a definition into base class. | 14:42 |
| chandanc | good catch :) | 14:42 |
| chandanc | ya | 14:42 |
| *** SridarK has joined #openstack-fwaas | 14:42 | |
| chandanc | hello SridarK | 14:43 |
| SridarK | chandanc: hi | 14:43 |
| yushiro | Hi SridarK | 14:43 |
| SridarK | sorry some issues - on joining | 14:43 |
| chandanc | it might be late for yushiro: | 14:43 |
| SridarK | yushiro: hi | 14:43 |
| SridarK | both of u thx for great work to work thru this issue | 14:44 |
| chandanc | but we can quickly sumarize | 14:44 |
| SridarK | we can also talk on webex if needed - we can share screen | 14:44 |
| chandanc | i am fine with that | 14:45 |
| SridarK | whichever is easier | 14:45 |
| yushiro | sure | 14:45 |
| chandanc | i think we found one UT issue | 14:45 |
| SridarK | ok let me start and email both of u | 14:45 |
| chandanc | SridarK: sure | 14:46 |
| yushiro | Thanks | 14:46 |
| chandanc | yushiro: will you push a patch for the UT ? | 14:46 |
| yushiro | Yes | 14:46 |
| chandanc | cool | 14:46 |
| yushiro | chandanc, just add definition into base driver class. | 14:46 |
| chandanc | yes | 14:47 |
| chandanc | for both process and remove | 14:47 |
| SridarK | guys pls check ur email | 14:48 |
| yushiro | Yes, I just joined :) Thank you | 14:50 |
| SridarK | yushiro: hmm I don't see u on | 14:51 |
| yushiro | SridarK, Now joining .. 45% ... | 14:51 |
| chandanc | ok | 14:52 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Remove disable option for default FWG and allow only on VM ports https://review.openstack.org/539461 | 14:54 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Remove disable option for default FWG and allow only on VM ports https://review.openstack.org/539461 | 15:00 |
| yushiro | http://paste.openstack.org/compare/660078/660077/ | 15:04 |
| yushiro | http://paste.openstack.org/compare/660388/660387 | 15:11 |
| yushiro | http://paste.openstack.org/compare/660395/660388 | 15:18 |
| chandanc | http://paste.openstack.org/show/660398/ | 15:24 |
| *** chandanc_ has joined #openstack-fwaas | 15:27 | |
| yushiro | 1. https://review.openstack.org/#/c/536234/ | 15:28 |
| yushiro | 2. https://review.openstack.org/#/c/539461 | 15:28 |
| *** chandanc has quit IRC | 15:28 | |
| *** chandanc_ is now known as chandanc | 15:28 | |
| yushiro | sudo ovs-ofctl dump-flows br-int | grep -o -e "table=.*" | sed -e "s/, n_packets=[0-9]\+, n_bytes=[0-9]\+, idle_age=[0-9]\+//g" | 15:32 |
| yushiro | ^^^ this is command to dump br-int | 15:32 |
| openstackgerrit | chandanc proposed openstack/neutron-fwaas master: Remove disable option for default FWG and allow only on VM ports https://review.openstack.org/539461 | 15:34 |
| *** chandanc has quit IRC | 15:42 | |
| *** chandanc_ has joined #openstack-fwaas | 15:43 | |
| yushiro | http://paste.openstack.org/compare/660409/660408 | 15:43 |
| SridarK | chandanc_: does the paste above look ok to u | 15:46 |
| yushiro | chandanc_, it is ^^^^^ result for double OVS + latest patch | 15:46 |
| *** chandanc_ has quit IRC | 15:48 | |
| yushiro | http://paste.openstack.org/show/660416 | 15:53 |
| *** chandanc has joined #openstack-fwaas | 15:57 | |
| *** AlexeyAbashkin has quit IRC | 15:59 | |
| *** yushiro has quit IRC | 16:07 | |
| *** SridarK has quit IRC | 16:37 | |
| *** chandanc has quit IRC | 17:28 | |
| *** yamamoto has quit IRC | 18:13 | |
| *** yamamoto has joined #openstack-fwaas | 18:16 | |
| *** yamamoto has quit IRC | 18:21 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 19:09 | |
| *** yamamoto has joined #openstack-fwaas | 19:20 | |
| *** yamamoto has quit IRC | 19:29 | |
| *** AlexeyAbashkin has quit IRC | 20:35 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!