*** Jabadia has quit IRC | 00:00 | |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Add DB mappings with NSX logical switches https://review.openstack.org/54579 | 00:00 |
---|---|---|
openstackgerrit | Rajesh Mohan proposed a change to openstack/neutron: Firewall as a Service (FWaaS) Service Insertion https://review.openstack.org/62599 | 00:14 |
*** pballand has quit IRC | 00:16 | |
*** markwash_ has joined #openstack-neutron | 00:20 | |
*** markwash has quit IRC | 00:21 | |
*** markwash_ is now known as markwash | 00:21 | |
*** haleyb has quit IRC | 00:23 | |
*** banix has quit IRC | 00:23 | |
*** yamahata has joined #openstack-neutron | 00:26 | |
*** haleyb has joined #openstack-neutron | 00:35 | |
*** yamahata has quit IRC | 00:40 | |
*** haleyb has quit IRC | 00:40 | |
*** haleyb has joined #openstack-neutron | 00:44 | |
*** notel has joined #openstack-neutron | 00:48 | |
*** haleyb has quit IRC | 00:48 | |
*** Jabadia has joined #openstack-neutron | 00:55 | |
openstackgerrit | A change was merged to openstack/neutron: Add security groups tables for ML2 plugin via migration https://review.openstack.org/63585 | 00:57 |
*** haleyb has joined #openstack-neutron | 00:57 | |
*** ozialien has joined #openstack-neutron | 00:59 | |
*** carl_baldwin has quit IRC | 00:59 | |
*** ozialien has quit IRC | 01:00 | |
*** ozialien has joined #openstack-neutron | 01:00 | |
*** Jabadia has quit IRC | 01:00 | |
anteaya | jog0: woohoo | 01:03 |
anteaya | jog0: sunny and warm | 01:03 |
anteaya | yesterday was nice, Monday was HOT | 01:03 |
anteaya | today is good so far | 01:03 |
*** haleyb has quit IRC | 01:03 | |
anteaya | I selfishly am glad you are not here, because now you are coming to Montreal | 01:03 |
anteaya | <- selfish | 01:03 |
anteaya | jog0: anything you wanted from Australia? | 01:04 |
*** csd has quit IRC | 01:04 | |
anteaya | besides being here? | 01:04 |
*** markwash has quit IRC | 01:04 | |
*** haleyb has joined #openstack-neutron | 01:05 | |
*** SumitNaiksatam has quit IRC | 01:07 | |
*** haleyb has quit IRC | 01:10 | |
nati_ueno | sdague: Hi I got this error in tempest with clean install ubuntu 13.04 https://gist.github.com/nati/8309892 | 01:10 |
nati_ueno | sdague: Do you know this error? | 01:10 |
*** haleyb has joined #openstack-neutron | 01:11 | |
sdague | that means there is a syntax error in a test somewhere | 01:11 |
nati_ueno | sdague: hmm this is the clean one | 01:11 |
sdague | though it might be the mock import error | 01:11 |
sdague | pip install mock | 01:11 |
sdague | I thought we'd fixed that though | 01:11 |
nati_ueno | sdague: Thanks! let me try | 01:12 |
nati_ueno | sdague: I said Requirement already satisfied | 01:12 |
sdague | yeh, that's in test-requirements | 01:12 |
sdague | oh, that didn't fix it? | 01:13 |
sdague | so in general, that's a compile error | 01:13 |
nati_ueno | sdague: yes | 01:13 |
nati_ueno | sdague: I tired ./run_test.sh | 01:13 |
sdague | evaluation error | 01:13 |
nati_ueno | sdague: is this right way? | 01:13 |
sdague | tox -efull is better | 01:13 |
nati_ueno | sdague: I faced [Errno 13] Permission denied: '/usr/local/lib/python2.7/dist-packages/test-easy-install-15916.pth' | 01:14 |
nati_ueno | sdague: should I run it with sudo ? | 01:14 |
nati_ueno | sdague: I got this error also. WARNING:test command found but not installed in testenv | 01:14 |
*** WackoRobie has joined #openstack-neutron | 01:14 | |
sdague | yeh, sorry, I don't have time to debug right now. I'd also ask on the -qa channel | 01:15 |
sdague | it's dinner time here | 01:15 |
nati_ueno | sdague: sure! Thanks | 01:15 |
*** haleyb has quit IRC | 01:16 | |
*** Apsu has quit IRC | 01:21 | |
*** yfujioka has joined #openstack-neutron | 01:21 | |
*** Apsu has joined #openstack-neutron | 01:21 | |
*** haleyb has joined #openstack-neutron | 01:23 | |
*** marun has quit IRC | 01:27 | |
*** SumitNaiksatam has joined #openstack-neutron | 01:28 | |
*** ashaikh has joined #openstack-neutron | 01:32 | |
*** yamahata has joined #openstack-neutron | 01:42 | |
*** xuhanp has joined #openstack-neutron | 01:43 | |
*** haleyb has quit IRC | 01:49 | |
*** haleyb has joined #openstack-neutron | 01:52 | |
*** Jabadia has joined #openstack-neutron | 01:56 | |
*** alagalah has quit IRC | 01:56 | |
*** ozialien has quit IRC | 01:57 | |
*** Jabadia has quit IRC | 02:01 | |
*** ijw has quit IRC | 02:12 | |
*** tongli has quit IRC | 02:18 | |
*** BBG_Stephen has quit IRC | 02:21 | |
*** haleyb has quit IRC | 02:22 | |
*** nati_ueno has quit IRC | 02:23 | |
*** haleyb has joined #openstack-neutron | 02:25 | |
*** WackoRobie has quit IRC | 02:31 | |
*** haleyb has quit IRC | 02:31 | |
*** markmcclain has quit IRC | 02:33 | |
*** haleyb has joined #openstack-neutron | 02:35 | |
*** changbl has joined #openstack-neutron | 02:44 | |
openstackgerrit | Lee Li proposed a change to openstack/neutron: ipt_mgr.ipv6 written in the wrong ipt_mgr.ipv4 https://review.openstack.org/63981 | 02:45 |
*** haleyb has quit IRC | 02:47 | |
*** alagalah has joined #openstack-neutron | 02:48 | |
*** Jabadia has joined #openstack-neutron | 02:57 | |
*** Jabadia has quit IRC | 02:59 | |
*** Jabadia has joined #openstack-neutron | 02:59 | |
*** Jabadia has quit IRC | 03:03 | |
openstackgerrit | Rajesh Mohan proposed a change to openstack/neutron: Firewall as a Service (FWaaS) Service Insertion https://review.openstack.org/62599 | 03:04 |
*** haleyb has joined #openstack-neutron | 03:05 | |
*** haleyb has quit IRC | 03:22 | |
*** alagalah has quit IRC | 03:25 | |
*** Leilei has joined #openstack-neutron | 03:26 | |
*** LeileiZhou_ has joined #openstack-neutron | 03:27 | |
*** clev has joined #openstack-neutron | 03:32 | |
*** haleyb has joined #openstack-neutron | 03:35 | |
*** haleyb has quit IRC | 03:40 | |
*** WackoRobie has joined #openstack-neutron | 03:41 | |
*** haleyb has joined #openstack-neutron | 03:42 | |
*** ozialien has joined #openstack-neutron | 03:44 | |
*** evgenyf has joined #openstack-neutron | 03:45 | |
*** otherwiseguy has quit IRC | 03:45 | |
*** WackoRobie has quit IRC | 03:46 | |
*** carl_baldwin has joined #openstack-neutron | 03:47 | |
*** marun has joined #openstack-neutron | 03:51 | |
*** harlowja is now known as harlowja_away | 03:52 | |
openstackgerrit | gongysh proposed a change to openstack/neutron: merge add-flow() calls https://review.openstack.org/61341 | 03:55 |
*** Jabadia has joined #openstack-neutron | 04:00 | |
*** WackoRobie has joined #openstack-neutron | 04:04 | |
*** Jabadia has quit IRC | 04:05 | |
*** haleyb has quit IRC | 04:12 | |
*** yfried has joined #openstack-neutron | 04:14 | |
*** haleyb has joined #openstack-neutron | 04:16 | |
*** alagalah has joined #openstack-neutron | 04:18 | |
*** carl_baldwin has quit IRC | 04:23 | |
*** sbalukoff has joined #openstack-neutron | 04:25 | |
*** pballand has joined #openstack-neutron | 04:26 | |
*** carl_baldwin has joined #openstack-neutron | 04:28 | |
*** WackoRobie has quit IRC | 04:33 | |
*** alagalah has quit IRC | 04:36 | |
*** marun has quit IRC | 04:42 | |
*** carl_baldwin has quit IRC | 04:55 | |
*** chandankumar has joined #openstack-neutron | 05:00 | |
*** clev has quit IRC | 05:00 | |
*** Jabadia has joined #openstack-neutron | 05:00 | |
*** carl_baldwin has joined #openstack-neutron | 05:02 | |
*** Jabadia has quit IRC | 05:05 | |
*** yfried has quit IRC | 05:06 | |
*** evgenyf has quit IRC | 05:36 | |
*** carl_baldwin has quit IRC | 05:37 | |
*** LeileiZhou_ has quit IRC | 05:41 | |
*** LeileiZhou_ has joined #openstack-neutron | 05:42 | |
*** irenab has joined #openstack-neutron | 05:43 | |
*** WackoRobie has joined #openstack-neutron | 05:44 | |
*** banix has joined #openstack-neutron | 05:44 | |
*** ozialien has quit IRC | 05:47 | |
*** doude has quit IRC | 05:48 | |
*** doude_ has joined #openstack-neutron | 05:48 | |
*** WackoRobie has quit IRC | 05:48 | |
openstackgerrit | Vijay Kumar Venkatachalam proposed a change to openstack/neutron: TEST CODE: Please Ignore, No need to REVIEW this code https://review.openstack.org/65070 | 05:52 |
*** banix has quit IRC | 06:00 | |
*** Jabadia has joined #openstack-neutron | 06:00 | |
*** Apsu has quit IRC | 06:06 | |
*** morganfainberg has quit IRC | 06:07 | |
*** obondarev_ has joined #openstack-neutron | 06:12 | |
*** sbalukoff has quit IRC | 06:13 | |
*** sc68cal has quit IRC | 06:14 | |
*** yfried has joined #openstack-neutron | 06:17 | |
*** amrit has quit IRC | 06:18 | |
*** sc68cal has joined #openstack-neutron | 06:19 | |
*** changbl has quit IRC | 06:20 | |
*** changbl has joined #openstack-neutron | 06:23 | |
*** rkofman has joined #openstack-neutron | 06:26 | |
*** sputnik13net has quit IRC | 06:29 | |
openstackgerrit | Jenkins proposed a change to openstack/neutron: Imported Translations from Transifex https://review.openstack.org/64786 | 06:44 |
*** zigo_ is now known as zigo | 06:46 | |
irenab | hi, asking for review : https://review.openstack.org/#/c/53609/. Thanks! | 06:55 |
*** Apsu has joined #openstack-neutron | 07:01 | |
*** morganfainberg has joined #openstack-neutron | 07:02 | |
*** sputnik13net has joined #openstack-neutron | 07:03 | |
*** ashaikh has quit IRC | 07:12 | |
*** pradipta has joined #openstack-neutron | 07:17 | |
*** ashaikh has joined #openstack-neutron | 07:24 | |
*** ashaikh has quit IRC | 07:29 | |
openstackgerrit | Zhenguo Niu proposed a change to openstack/neutron: Whitelist external netaddr and psutil requirement https://review.openstack.org/65209 | 07:29 |
*** markwash has joined #openstack-neutron | 07:35 | |
*** rkofman has left #openstack-neutron | 07:37 | |
*** Ilja1 has joined #openstack-neutron | 07:37 | |
*** jlibosva has joined #openstack-neutron | 07:49 | |
*** mili_ has joined #openstack-neutron | 07:50 | |
openstackgerrit | Yoshihiro Kaneko proposed a change to openstack/neutron: add quota support for ryu plugin https://review.openstack.org/65245 | 07:52 |
*** markwash has quit IRC | 08:04 | |
*** Mierdin1 has left #openstack-neutron | 08:14 | |
*** amuller has joined #openstack-neutron | 08:16 | |
*** yfujioka has quit IRC | 08:19 | |
*** coolsvap has joined #openstack-neutron | 08:30 | |
*** sbalukoff has joined #openstack-neutron | 08:31 | |
*** sbalukoff has quit IRC | 08:35 | |
yfried | jaypipes: ping | 08:39 |
*** Ilja1 has quit IRC | 08:43 | |
*** mili_ has quit IRC | 08:47 | |
*** sbalukoff has joined #openstack-neutron | 08:48 | |
*** mili_ has joined #openstack-neutron | 08:52 | |
*** garyk has joined #openstack-neutron | 08:56 | |
garyk | salv-orlando: ping | 08:56 |
garyk | arosen: ping | 08:57 |
*** safchain has joined #openstack-neutron | 08:59 | |
*** jpich has joined #openstack-neutron | 09:03 | |
*** jistr has joined #openstack-neutron | 09:04 | |
*** jroovers has joined #openstack-neutron | 09:06 | |
*** bashok has joined #openstack-neutron | 09:06 | |
*** irenab has quit IRC | 09:09 | |
*** ygbo has joined #openstack-neutron | 09:13 | |
openstackgerrit | Roman Podoliaka proposed a change to openstack/neutron: Fix the migration adding a UC to agents table https://review.openstack.org/61663 | 09:17 |
*** Ilja1 has joined #openstack-neutron | 09:19 | |
*** jhurlbert has quit IRC | 09:20 | |
*** markwash has joined #openstack-neutron | 09:23 | |
*** jhurlbert has joined #openstack-neutron | 09:30 | |
*** yamahata has quit IRC | 09:34 | |
openstackgerrit | Édouard Thuleau proposed a change to openstack/neutron: OVS lib defer apply doesn't handle concurrency https://review.openstack.org/63917 | 09:44 |
openstackgerrit | Hirofumi Ichihara proposed a change to openstack/neutron: Fix admin_state_up cannot stop l3-agent router forwarding packets by false https://review.openstack.org/44195 | 09:45 |
*** irenab has joined #openstack-neutron | 09:47 | |
*** jp_at_hp has joined #openstack-neutron | 09:50 | |
*** jp_at_hp has quit IRC | 09:51 | |
*** jp_at_hp has joined #openstack-neutron | 09:51 | |
*** Ilja1 has quit IRC | 09:57 | |
*** bashok has quit IRC | 10:06 | |
*** bashok has joined #openstack-neutron | 10:06 | |
openstackgerrit | Édouard Thuleau proposed a change to openstack/neutron: OVS lib defer apply doesn't handle concurrency https://review.openstack.org/63917 | 10:09 |
*** xuhanp has quit IRC | 10:10 | |
*** afazekas has joined #openstack-neutron | 10:10 | |
*** mili_ has quit IRC | 10:20 | |
openstackgerrit | Sylvain Afchain proposed a change to openstack/neutron: Add parameter and iptables rules to protect dnsmasq ports https://review.openstack.org/61994 | 10:21 |
*** mili_ has joined #openstack-neutron | 10:25 | |
*** mili__ has joined #openstack-neutron | 10:43 | |
*** mili_ has quit IRC | 10:46 | |
*** mili__ has quit IRC | 10:50 | |
*** yamahata has joined #openstack-neutron | 10:53 | |
*** alex_klimov has joined #openstack-neutron | 11:12 | |
*** mili_ has joined #openstack-neutron | 11:14 | |
*** jhurlbert has quit IRC | 11:15 | |
*** DynamiteXXL has joined #openstack-neutron | 11:16 | |
*** mili__ has joined #openstack-neutron | 11:16 | |
*** jhurlbert has joined #openstack-neutron | 11:19 | |
*** mili_ has quit IRC | 11:20 | |
*** bvandenh has joined #openstack-neutron | 11:22 | |
*** networkstatic is now known as networkstatic_zZ | 11:29 | |
*** pcm_ has joined #openstack-neutron | 11:36 | |
*** pcm_ has quit IRC | 11:37 | |
*** pcm_ has joined #openstack-neutron | 11:38 | |
*** evgenyf has joined #openstack-neutron | 11:51 | |
*** yfried has quit IRC | 11:52 | |
*** alexpilotti has joined #openstack-neutron | 11:53 | |
*** Ilja1 has joined #openstack-neutron | 11:55 | |
*** pradipta has quit IRC | 12:06 | |
salv-orlando | hi garyk | 12:10 |
garyk | hi, how are you | 12:11 |
*** evgenyf has quit IRC | 12:12 | |
*** LeileiZhou_ has quit IRC | 12:16 | |
*** mili__ has quit IRC | 12:17 | |
*** mili_ has joined #openstack-neutron | 12:18 | |
*** LeileiZhou_ has joined #openstack-neutron | 12:19 | |
openstackgerrit | Sylvain Afchain proposed a change to openstack/neutron: Add parameter and iptables rules to protect dnsmasq ports https://review.openstack.org/61994 | 12:24 |
*** pradipta has joined #openstack-neutron | 12:24 | |
*** evgenyf has joined #openstack-neutron | 12:27 | |
*** alexpilotti has quit IRC | 12:43 | |
*** armax has joined #openstack-neutron | 12:45 | |
*** coolsvap has quit IRC | 12:47 | |
*** pradipta has quit IRC | 12:48 | |
*** heyongli has joined #openstack-neutron | 12:57 | |
*** armax has quit IRC | 12:58 | |
*** armax has joined #openstack-neutron | 12:58 | |
*** armax has quit IRC | 13:15 | |
*** xuhanp has joined #openstack-neutron | 13:15 | |
*** armax has joined #openstack-neutron | 13:16 | |
*** jistr is now known as jistr|english | 13:17 | |
*** matrohon has quit IRC | 13:22 | |
*** evgenyf has quit IRC | 13:24 | |
*** banix has joined #openstack-neutron | 13:30 | |
ihrachys | hi. could anyone consider my findings for https://blueprints.launchpad.net/neutron/+spec/selecting-subnet-when-creating-vm which I put at whiteboard? It seems the blueprint does not require any actual code changes to neutron, as the feature is already there; though we may be interested to create blueprints for nova and horizon to expose existing neutron functionality. | 13:34 |
*** banix has quit IRC | 13:35 | |
openstackgerrit | Zang MingJie proposed a change to openstack/neutron: Configure plugins by name https://review.openstack.org/64822 | 13:43 |
*** ijw has joined #openstack-neutron | 13:51 | |
*** rossella_s has joined #openstack-neutron | 13:52 | |
*** Leilei has quit IRC | 13:55 | |
*** Leilei has joined #openstack-neutron | 13:55 | |
*** dims has quit IRC | 13:55 | |
*** dims has joined #openstack-neutron | 13:57 | |
*** sputnik13net has quit IRC | 13:57 | |
*** yamahata has quit IRC | 14:03 | |
*** ijw has quit IRC | 14:07 | |
*** aymenfrikha has joined #openstack-neutron | 14:07 | |
*** LeileiZhou_ has quit IRC | 14:07 | |
*** Leilei has quit IRC | 14:07 | |
*** ijw has joined #openstack-neutron | 14:07 | |
*** heyongli has quit IRC | 14:17 | |
*** irenab has quit IRC | 14:21 | |
*** matrohon has joined #openstack-neutron | 14:22 | |
*** alex_klimov has quit IRC | 14:23 | |
*** mili_ has quit IRC | 14:26 | |
*** mili__ has joined #openstack-neutron | 14:28 | |
*** alex_klimov has joined #openstack-neutron | 14:29 | |
*** amotoki has joined #openstack-neutron | 14:37 | |
*** mili__ has quit IRC | 14:40 | |
*** dims has quit IRC | 14:40 | |
*** rossella_s has quit IRC | 14:40 | |
*** pcm_ has quit IRC | 14:40 | |
*** morganfainberg has quit IRC | 14:40 | |
*** Apsu has quit IRC | 14:40 | |
*** rossella_s has joined #openstack-neutron | 14:42 | |
*** jistr|english is now known as jistr | 14:42 | |
*** peristeri has joined #openstack-neutron | 14:42 | |
*** mili__ has joined #openstack-neutron | 14:42 | |
*** dims has joined #openstack-neutron | 14:42 | |
*** pcm_ has joined #openstack-neutron | 14:42 | |
*** morganfainberg has joined #openstack-neutron | 14:42 | |
*** Apsu has joined #openstack-neutron | 14:42 | |
*** changbl has quit IRC | 14:47 | |
*** clev has joined #openstack-neutron | 14:47 | |
*** rossella_s has quit IRC | 14:49 | |
*** armax has quit IRC | 14:50 | |
*** armax has joined #openstack-neutron | 14:51 | |
*** evgenyf has joined #openstack-neutron | 14:51 | |
russellb | enikanorov: ping | 14:52 |
enikanorov | russellb: hi | 14:52 |
russellb | enikanorov: I noticed that you've used "reverify bug 123" about 5 times | 14:53 |
enikanorov | yes | 14:53 |
russellb | ... why? | 14:53 |
russellb | https://bugs.launchpad.net/launchpad/+bug/123 | 14:53 |
russellb | looks unrelated to openstack. | 14:53 |
russellb | the system requires a bug number for a good reason, so please use it properly | 14:53 |
enikanorov | yes, so if there's an issue with the infra, which doesn't have a bug id | 14:54 |
enikanorov | and recheck no bug doesn't work anymore | 14:54 |
russellb | there should be a bug | 14:54 |
russellb | ask in #openstack-infra if you're not sure the bug # | 14:54 |
russellb | if there's not one, you can file one | 14:54 |
russellb | even if it's just going to get closed. it helps failures get classified properly | 14:55 |
enikanorov | ok. sorry for the shortcut. | 14:55 |
russellb | thanks | 14:55 |
*** jistr has quit IRC | 14:56 | |
*** jistr has joined #openstack-neutron | 14:57 | |
*** jistr is now known as jistr|mtg | 14:57 | |
*** networkstatic_zZ has quit IRC | 15:01 | |
*** networkstatic has joined #openstack-neutron | 15:02 | |
*** WackoRobie has joined #openstack-neutron | 15:03 | |
*** evgenyf has quit IRC | 15:03 | |
*** evgenyf has joined #openstack-neutron | 15:04 | |
*** rwsu has joined #openstack-neutron | 15:09 | |
*** mili_ has joined #openstack-neutron | 15:12 | |
*** rossella_s has joined #openstack-neutron | 15:13 | |
openstackgerrit | Zang MingJie proposed a change to openstack/neutron: Configure plugins by name https://review.openstack.org/64822 | 15:13 |
*** mili_ has quit IRC | 15:15 | |
*** mili__ has quit IRC | 15:15 | |
*** mili_ has joined #openstack-neutron | 15:15 | |
openstackgerrit | enikanorov proposed a change to openstack/neutron: Introduce Loadbalancer instance https://review.openstack.org/60207 | 15:16 |
*** julim has joined #openstack-neutron | 15:17 | |
*** otherwiseguy has joined #openstack-neutron | 15:18 | |
openstackgerrit | enikanorov proposed a change to openstack/neutron: Introduce Loadbalancer instance https://review.openstack.org/60207 | 15:22 |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Add DB mappings with NSX logical switches https://review.openstack.org/54579 | 15:22 |
*** jecarey has joined #openstack-neutron | 15:23 | |
*** bashok has quit IRC | 15:28 | |
*** aveiga has joined #openstack-neutron | 15:28 | |
*** markmcclain has joined #openstack-neutron | 15:31 | |
*** xuhanp has quit IRC | 15:37 | |
*** afazekas has quit IRC | 15:37 | |
*** networkstatic has quit IRC | 15:40 | |
*** bmeshjason has joined #openstack-neutron | 15:44 | |
*** coolsvap has joined #openstack-neutron | 15:47 | |
*** armax_ has joined #openstack-neutron | 15:49 | |
enikanorov | markmcclain: Hi. I wanted to ask you to approve this bp https://blueprints.launchpad.net/neutron/+spec/lbaas-service-instance which is actually required by https://blueprints.launchpad.net/neutron/+spec/lbaas-multiple-vips-per-pool which you have approved some time ago. In fact the dependency is the opposite, hence the request. | 15:49 |
enikanorov | also, i think we have a good consensus around introducing an instance, and i have uploaded an implementation that is ready for review | 15:50 |
markmcclain | enikanorov: reading | 15:51 |
*** armax has quit IRC | 15:51 | |
*** armax_ is now known as armax | 15:51 | |
enikanorov | markmcclain: "dependency is the opposite" i meant that initially multiple vips per pool was required by service instance, but in fact it's opposite. | 15:51 |
*** chandankumar has quit IRC | 15:53 | |
*** chandankumar_ has joined #openstack-neutron | 15:53 | |
*** chandankumar__ has joined #openstack-neutron | 15:55 | |
*** carl_baldwin has joined #openstack-neutron | 15:55 | |
*** chandankumar_ has quit IRC | 15:57 | |
*** sputnik13net has joined #openstack-neutron | 15:57 | |
*** sputnik13net has quit IRC | 15:57 | |
*** mili__ has joined #openstack-neutron | 16:00 | |
openstackgerrit | enikanorov proposed a change to openstack/python-neutronclient: Add cli commands to manage loadbalancer instance https://review.openstack.org/61561 | 16:04 |
*** mili_ has quit IRC | 16:06 | |
*** garyk has quit IRC | 16:08 | |
*** yamahata has joined #openstack-neutron | 16:08 | |
*** jlibosva has quit IRC | 16:08 | |
*** ashaikh has joined #openstack-neutron | 16:10 | |
*** banix has joined #openstack-neutron | 16:16 | |
*** alex_klimov has quit IRC | 16:24 | |
*** clev has quit IRC | 16:27 | |
*** jecarey has quit IRC | 16:27 | |
*** jecarey has joined #openstack-neutron | 16:31 | |
*** alex_klimov has joined #openstack-neutron | 16:33 | |
*** networkstatic has joined #openstack-neutron | 16:34 | |
*** John____ has joined #openstack-neutron | 16:39 | |
John____ | Hi, Is it possible to add a vnic to a running instance via API? (I'm using Neutron) | 16:40 |
*** Jabadia has quit IRC | 16:42 | |
*** Jabadia has joined #openstack-neutron | 16:42 | |
*** jistr|mtg is now known as jistr | 16:43 | |
*** beagles is now known as beagles_brb | 16:45 | |
*** Jabadia has quit IRC | 16:47 | |
*** Jabadia has joined #openstack-neutron | 16:48 | |
*** alagalah_ has joined #openstack-neutron | 16:48 | |
*** armax has quit IRC | 16:51 | |
*** Jabadia has quit IRC | 16:52 | |
*** Ilja1 has quit IRC | 16:52 | |
*** changbl has joined #openstack-neutron | 16:53 | |
*** markmcclain has quit IRC | 16:55 | |
*** garyk has joined #openstack-neutron | 16:56 | |
*** jdev789 has joined #openstack-neutron | 16:56 | |
*** jdev has joined #openstack-neutron | 16:56 | |
*** tongli has joined #openstack-neutron | 16:56 | |
*** chandankumar__ has quit IRC | 17:00 | |
*** John____ has quit IRC | 17:02 | |
*** clev has joined #openstack-neutron | 17:04 | |
*** DynamiteXXL has quit IRC | 17:07 | |
*** alagalah_ has quit IRC | 17:10 | |
*** jdev789 has quit IRC | 17:12 | |
*** jdev has quit IRC | 17:13 | |
*** Ilja1 has joined #openstack-neutron | 17:13 | |
*** markwash has quit IRC | 17:18 | |
*** yamahata has quit IRC | 17:18 | |
*** markwash has joined #openstack-neutron | 17:19 | |
openstackgerrit | Marios Andreou proposed a change to openstack/neutron: WIP - make allocation_pools attribute of subnet updateable by PUT https://review.openstack.org/62042 | 17:23 |
*** pballand has quit IRC | 17:24 | |
*** bjornar has joined #openstack-neutron | 17:25 | |
*** jdev789 has joined #openstack-neutron | 17:28 | |
*** jdev has joined #openstack-neutron | 17:28 | |
*** alagalah has joined #openstack-neutron | 17:30 | |
*** jpich has quit IRC | 17:32 | |
*** pballand has joined #openstack-neutron | 17:33 | |
*** mili__ has quit IRC | 17:35 | |
*** mili_ has joined #openstack-neutron | 17:35 | |
*** obondarev_ has quit IRC | 17:39 | |
*** jistr has quit IRC | 17:43 | |
*** ozialien has joined #openstack-neutron | 17:43 | |
*** Ilja1 has quit IRC | 17:44 | |
*** harlowja_away is now known as harlowja | 17:46 | |
*** alagalah has quit IRC | 17:49 | |
*** marun has joined #openstack-neutron | 17:50 | |
*** nati_ueno has joined #openstack-neutron | 17:51 | |
*** ozialien has quit IRC | 17:54 | |
*** Jabadia has joined #openstack-neutron | 17:58 | |
*** evgenyf has quit IRC | 17:59 | |
*** rkofman has joined #openstack-neutron | 18:00 | |
*** ygbo has quit IRC | 18:01 | |
*** Jabadia has quit IRC | 18:03 | |
*** pballand has quit IRC | 18:05 | |
*** beagles_brb is now known as beagles | 18:06 | |
*** amuller has quit IRC | 18:07 | |
*** sputnik13net has joined #openstack-neutron | 18:08 | |
*** Jabadia has joined #openstack-neutron | 18:08 | |
*** safchain has quit IRC | 18:08 | |
*** Jabadia has quit IRC | 18:15 | |
*** Jabadia has joined #openstack-neutron | 18:16 | |
arosen | garyk: pong! | 18:22 |
*** ozialien has joined #openstack-neutron | 18:23 | |
*** otherwiseguy has quit IRC | 18:32 | |
*** mili_ has quit IRC | 18:47 | |
*** mlemay has joined #openstack-neutron | 18:48 | |
*** arash_ has joined #openstack-neutron | 18:51 | |
arash_ | Hello | 18:51 |
peristeri | Is anyone having problem running devstack? I was updating devstack by running ./unstack.sh && ./stack.sh. The process freezes in ./stack.sh on this command: neutron net-create --tenant_id bcd4c7291fde4ac0a9646baf1616c317 private | 18:52 |
arash_ | I am Arash, working on an extension for Neutron | 18:52 |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Add DB mappings with NSX logical routers https://review.openstack.org/54584 | 18:54 |
openstackgerrit | A change was merged to openstack/neutron: neutron-rootwrap-xen-dom0 handles data from stdin https://review.openstack.org/62346 | 18:56 |
*** yfried has joined #openstack-neutron | 18:56 | |
*** aveiga has quit IRC | 19:01 | |
*** markmcclain has joined #openstack-neutron | 19:03 | |
*** changbl has quit IRC | 19:08 | |
sc68cal | Is anyone else seeing this error in devstack? http://paste.openstack.org/show/60818/ | 19:11 |
sc68cal | Fresh vagrant vm, no cached pip packages or apt packages | 19:11 |
markmcclain | sc68cal: what version of neutronclient do you have installed? | 19:13 |
*** jroovers has quit IRC | 19:13 | |
markmcclain | make sure you've got 3.3.3 | 19:14 |
sc68cal | markmcclain: OK - yeah I think I remember you mentioned something about that on Monday | 19:14 |
sc68cal | ah, I'm having the same issues as peristeri | 19:15 |
sc68cal | peristeri: ping | 19:15 |
markmcclain | yeah the bug you've hit looks like you've got cliff 1.5 installed | 19:15 |
markmcclain | and neutronclient 3.3.2 | 19:15 |
sc68cal | ah - ok, my neutronclient is being pulled from an internal branch. Let me find your commit and cherry pick it that fixes the cliff issue | 19:16 |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Process port_update notifications in the main agent loop https://review.openstack.org/61964 | 19:17 |
*** changbl has joined #openstack-neutron | 19:19 | |
markmcclain | sc68cal: you'll probably want to rebase vs cherry pick | 19:21 |
sc68cal | markmcclain: agreed | 19:21 |
openstackgerrit | stephen-ma proposed a change to openstack/neutron: L3 Agent restart causes network outage https://review.openstack.org/30988 | 19:23 |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Process port_update notifications in the main agent loop https://review.openstack.org/61964 | 19:25 |
arash_ | I am working on an extension for Neutron | 19:26 |
arash_ | The purpose is to create a extension to the Network object in Neutron called "FlowNetwork". This extended network class has the same attributes as the typical Network class but also has the ability to have knowledge about flows and work with an OpenFlow controller | 19:26 |
arash_ | As I went through different existing extensions | 19:26 |
arash_ | I realized there is a method "get-resource(cls)" which is implemented differently for each extension | 19:27 |
arash_ | Does any body know how should this method be implemented | 19:27 |
arash_ | any documentations or idea would be greatly appreciated | 19:28 |
*** thuc has joined #openstack-neutron | 19:31 | |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Improve handling of security group updates https://review.openstack.org/63100 | 19:31 |
*** rossella_s has quit IRC | 19:33 | |
sc68cal | arash_: I do not believe there is any documentation for it | 19:34 |
*** mili_ has joined #openstack-neutron | 19:35 | |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Avoid re-wiring ports unnecessarily https://review.openstack.org/63558 | 19:36 |
sc68cal | arash_: take a look at the code for the extension class - https://github.com/openstack/neutron/blob/master/neutron/api/extensions.py there are some docstrings | 19:38 |
*** jroovers has joined #openstack-neutron | 19:38 | |
sc68cal | arash_: the security group extension has a good example | 19:40 |
sc68cal | arash_: https://github.com/openstack/neutron/blob/master/neutron/extensions/securitygroup.py#L264 | 19:40 |
sc68cal | Basically it's how you add new URLs to the WSGI router, so that when you do GET /foo, neutron will route it to the correct methods in your extension | 19:41 |
peristeri | sc68cal ping | 19:41 |
arash_ | in security group extension | 19:42 |
arash_ | for the method get-resources we have: | 19:42 |
arash_ | plugin = manager.NeutronManager.get_plugin() | 19:42 |
arash_ | however | 19:42 |
arash_ | in loadbalancer extension for example we have: | 19:42 |
arash_ | plugin = manager.NeutronManager.get_service_plugins()[ constants.LOADBALANCER] | 19:42 |
arash_ | I am not sure when we use | 19:43 |
arash_ | get_plugin() | 19:43 |
arash_ | and when we use: | 19:43 |
arash_ | get_service_plugins() | 19:43 |
peristeri | sc68cal I'm using fedora 19. | 19:44 |
sc68cal | arash_: depends on the structure of your extension - do you have your code posted somewhere I can look at it? | 19:44 |
markmcclain | arash_: get_plugin() is when you extending the base plugin… service_plugins are when you are adding a new service (vpn, l3, load balancing, fw) | 19:45 |
*** thuc has quit IRC | 19:45 | |
sc68cal | ^^^^ what Mark says | 19:45 |
*** thuc has joined #openstack-neutron | 19:46 | |
arash_ | actually I am adding something called flownetwork | 19:46 |
sc68cal | peristeri: which version of python-neutronclient is getting installed | 19:46 |
sc68cal | arash_: Does it just add a new attribute to a network? or is it a brand new resource as well | 19:46 |
arash_ | it is a new resouce with attributes extended from network object | 19:47 |
*** evgenyf has joined #openstack-neutron | 19:47 | |
sc68cal | arash_: what attributes does flownetwork have | 19:49 |
sc68cal | arash_: and what attributes do you add to the network object | 19:50 |
*** thuc has quit IRC | 19:50 | |
*** thuc has joined #openstack-neutron | 19:51 | |
*** thuc has quit IRC | 19:51 | |
openstackgerrit | Nachi Ueno proposed a change to openstack/neutron: API Extension for SSL-VPN services https://review.openstack.org/58897 | 19:51 |
arash_ | It has attributes to work with openflow | 19:51 |
*** thuc has joined #openstack-neutron | 19:51 | |
arash_ | I believe then it should be get_service_plugin | 19:53 |
sc68cal | arash_: OK - and what attributes does it add to the network, just a reference back to the flownetwork object? | 19:53 |
sc68cal | I disagree - it doesn't sound like a new service | 19:54 |
*** mlavalle has joined #openstack-neutron | 19:55 | |
arash_ | what is the way we can define a sevice | 19:55 |
arash_ | or a way to distinguish | 19:55 |
*** jdev has quit IRC | 19:55 | |
*** jdev789 has quit IRC | 19:56 | |
peristeri | how do I check for the version? | 19:57 |
markmcclain | arash_: sounds like you want to leave towards get_plugin() since you're extending a base resource (Network) | 19:57 |
sc68cal | peristeri: neutron --version | 19:57 |
markmcclain | s/leave/lean/ | 19:57 |
peristeri | 2.3.3 | 19:58 |
*** otherwiseguy has joined #openstack-neutron | 19:59 | |
arash_ | thanks mark | 20:01 |
arash_ | thanks sc68cal | 20:02 |
sc68cal | arash_: no problem - I need to do a developer doc for writing an extension and document some of this stuff | 20:03 |
arash_ | that would be nice | 20:03 |
sc68cal | I don't remember if anyone's ever done a presentation at the conference about it. I know salv-orlando did one about writing a plugin from scratch. Maybe we need to do one for writing an extension from scratch | 20:03 |
sc68cal | We discussed removing the home-grown WSGI and moving to pecan at the last conference, which will remove this pain point | 20:04 |
sc68cal | markmcclain: upgrading to 2.3.3 fixed that issue, now I'm stuck on the migration bug for the ml2 agents | 20:05 |
sc68cal | https://launchpad.net/neutron/+bug/1254246 | 20:05 |
markmcclain | yeah.. I've got an online version working, but offline does not work because SQLA does not support the underlying calls we need | 20:05 |
markmcclain | temporarily you can enable lbaas | 20:06 |
*** networkstatic has quit IRC | 20:06 | |
markmcclain | and the migration will run correctly | 20:06 |
sc68cal | k | 20:07 |
sc68cal | the joys of chasing trunk :) | 20:07 |
markmcclain | yeah | 20:07 |
markmcclain | also the joys of wanting a feature in SQLA | 20:07 |
*** safchain has joined #openstack-neutron | 20:13 | |
*** safchain has quit IRC | 20:13 | |
*** sputnik13net has quit IRC | 20:16 | |
*** Jabadia has quit IRC | 20:17 | |
peristeri | sc68cal have you solved the problem with devstack? | 20:22 |
sc68cal | peristeri: Unfortunately no, got stuck on another bug | 20:23 |
peristeri | sc68cal thanks, I'll see what I could find | 20:31 |
*** mili_ has quit IRC | 20:46 | |
*** arash_ has quit IRC | 20:48 | |
*** jdev has joined #openstack-neutron | 20:54 | |
*** jdev789 has joined #openstack-neutron | 20:54 | |
*** mili_ has joined #openstack-neutron | 20:54 | |
*** mlemay has quit IRC | 20:55 | |
*** jdev has quit IRC | 20:57 | |
*** jdev789 has quit IRC | 20:57 | |
*** sputnik13net has joined #openstack-neutron | 21:01 | |
*** ozialien has quit IRC | 21:05 | |
openstackgerrit | Édouard Thuleau proposed a change to openstack/neutron: OVS lib defer apply doesn't handle concurrency https://review.openstack.org/63917 | 21:08 |
openstackgerrit | Nachi Ueno proposed a change to openstack/neutron: API Extension for SSL-VPN services https://review.openstack.org/58897 | 21:11 |
openstackgerrit | A change was merged to openstack/neutron: Remove plugin_name_v2 and extension_manager in test_config https://review.openstack.org/54058 | 21:14 |
*** Ilja1 has joined #openstack-neutron | 21:15 | |
*** mlavalle has quit IRC | 21:15 | |
*** thansen_ has quit IRC | 21:17 | |
*** thansen has joined #openstack-neutron | 21:17 | |
*** bvandenh has quit IRC | 21:21 | |
*** mili_ has quit IRC | 21:28 | |
openstackgerrit | Aaron Rosen proposed a change to openstack/neutron: Add test to port_security to test with security_groups https://review.openstack.org/65543 | 21:32 |
openstackgerrit | Aaron Rosen proposed a change to openstack/neutron: Don't require passing in port_security=False if security_groups present https://review.openstack.org/65544 | 21:32 |
nati_ueno | rkukura: Hi around? | 21:35 |
rkukura | nati_ueno: Yes, but can I get back to you in a couple minutes? | 21:36 |
nati_ueno | rkukura: sure Thanks | 21:36 |
*** mili_ has joined #openstack-neutron | 21:43 | |
rkukura | nati_ueno: OK | 21:47 |
nati_ueno | rkukura: I would like to discuss with you about https://review.openstack.org/#/c/21946/30 | 21:47 |
nati_ueno | rkukura: I agree with you about your comment, but I wanna do it on next commit | 21:48 |
rkukura | nati_ueno: OK | 21:48 |
nati_ueno | rkukura: Neutron sec group is broken for some month,, so I wanna get a first step | 21:48 |
nati_ueno | rkukura: Thanks | 21:48 |
nati_ueno | rkukura: regarding to vif_type fix, do you want me to remove it from db also? | 21:49 |
rkukura | nati_ueno: That could be done in this patch or as a follow-on | 21:49 |
nati_ueno | rkukura: OK let's me work on follow-up commit | 21:50 |
rkukura | nati_ueno: But it would make sense to do it at the same time rather than have two separate driver API changes and two separate DB migrations | 21:51 |
openstackgerrit | Amir Sadoughi proposed a change to openstack/neutron: Added source-port-range-{min,max} to sec. groups https://review.openstack.org/62129 | 21:51 |
nati_ueno | rkukura: yeah, it the patch didn't affect every plugins.. | 21:51 |
nati_ueno | rkukura: s/it/if it/ | 21:51 |
nati_ueno | rkukura: I just found your comment in the commit. Let's me reply on gerrit | 21:52 |
rkukura | nati_ueno: If it wasn't so urgent, I'd probably recommend an initial patch that adds extend_port_dict to MechanismDriver, and uses this for VIF_TYPE and CAPABILITIES. Then a 2nd patch would replace CAPABILITIES with VIF_SECURITY. | 21:54 |
*** mili_ has quit IRC | 21:54 | |
*** mlavalle has joined #openstack-neutron | 21:55 | |
rkukura | nati_ueno: What I'd like to do initially is review your proposed changes to ml2 as if they were for that initial patch, ignoring all the VIF_SECURITY, firewall driver, and other plugin changes. | 21:56 |
nati_ueno | rkukura: IMO, the patch may need some weeks for review | 21:56 |
rkukura | nati_ueno: In the mean time, we can sort out the plan for how the VIF_SECURITY info gets from the L2 agent config on the node to the server and then to nova. | 21:57 |
nati_ueno | rkukura: VIF_SECURITY isn't used by L2 agent | 21:57 |
rkukura | nati_ueno: Are you saying the current patch needs some weeks for review? If so, then maybe breaking it into stages will help. | 21:57 |
rkukura | nati_ueno: I understand its not used by the L2 agent. But doesn't the value come from the firewall driver used by the L2 agent to provide security groups? | 21:58 |
nati_ueno | rkukura: no, refactoring ml2 takes some time for me | 21:58 |
nati_ueno | rkukura: I do agree. Server should tell agent to select firewall driver in client side | 21:58 |
rkukura | nati_ueno: Thats not what I was saying | 21:59 |
nati_ueno | rkukura: ah, sorry. may I ask more? | 21:59 |
rkukura | nati_ueno: At least with ml2, hererogenous deployments are possible, so L2 agent config may differ on different nodes. | 22:00 |
*** bjornar has quit IRC | 22:00 | |
nati_ueno | rkukura: I agree | 22:00 |
rkukura | that was supposed to be "heterogeneous" | 22:00 |
nati_ueno | rkukura: OK so you wanna let agent report vif_security values? | 22:01 |
rkukura | Its an idea worth considering, and is already used for bridge_mappings as explained in gerrit | 22:01 |
rkukura | The firewall driver is really only used by the L2 agent, right? | 22:02 |
nati_ueno | rkukura: yes | 22:02 |
rkukura | RIght now, the server looks at whether firewall_driver is no-op, in order to decide whether to enable the SG extension API, but that is kind of a hack | 22:03 |
nati_ueno | rkukura: I agree. we shouldn't use no-op driver. | 22:04 |
rkukura | So why not have the L2 load the firewall driver, get the VIF_SECURITY data from it, and include this in its agents_db RPC data? | 22:05 |
nati_ueno | rkukura: we should have enable_security_group config | 22:05 |
rkukura | s/L2/L2 agent/ | 22:05 |
rkukura | nati_ueno: Agreed on the config, at least for ml2. | 22:05 |
nati_ueno | I think this will be long discussion | 22:05 |
rkukura | nati_ueno: There may be a bug for that already. | 22:05 |
nati_ueno | so there is to way to manage configurations in the cluster | 22:06 |
nati_ueno | centralized or config in each host | 22:06 |
rkukura | nati_ueno: Right now, puppet seems to be the way | 22:06 |
nati_ueno | Note: This is independent discussion with hetro or homo | 22:06 |
nati_ueno | rkukura: yes. The trend is centralized way because of operational cost | 22:07 |
nati_ueno | Even if the config management is centralized, we can setup hetero config | 22:07 |
nati_ueno | Eg. setup config per host in horizon | 22:07 |
rkukura | centrally managed config has been mentioned, along with modular agent, in ml2 proprosals and roadmap discussions | 22:07 |
nati_ueno | Ok so "update vif secturiy by agent" sounds like not centralized management for me | 22:08 |
rkukura | But I think that is after icehouse. Right now, the solution seems to be to push configs to nodes with puppet or similar, right? | 22:08 |
nati_ueno | so if so why not do this refactoring on that timing? | 22:09 |
rkukura | Each L2 agent needs to know which firewall_driver to use. Until we have something better, that's based on each node's config. Puppet or similar can be used to centrally manage the config of all those nodes. | 22:09 |
nati_ueno | Puppet is a kind of helper tool. IMO, the system should ease operational cost | 22:10 |
rkukura | I think managing the config centrally via an API is a big task - lots of variables, such as bridge_mappings, plus details like creating OVS bridges, setting NICs as ports, .... | 22:10 |
nati_ueno | so Nova asks neutron for vif_security, and neutron asks l2_agent vif security. Bug L2_agent is on the same host of nova | 22:11 |
nati_ueno | if we let l2 agent to config it, why not nova and l2 agent talk directly? (or let nova read l2-agent config) | 22:12 |
rkukura | Nova doesn't know or care whether an L2 agent is involved. Remember that some mechanism drivers don't use L2 agents. | 22:12 |
rkukura | So nova can't assume there is an L2 agent - it just wants to know how to setup the VIF security. | 22:12 |
nati_ueno | rkukura: I know Not every driver using l2 agent. | 22:13 |
rkukura | I'm not suggesting the the server make new RPC calls to the L2 agent to get the VIF security. There are already the agent_db calls from agent to server that can be used for this, just like they are currently used for bridge_mappings. | 22:13 |
nati_ueno | rkukura: however, even if l2 agent case, the control flow sounds like not simple. | 22:13 |
rkukura | One the agent has reported in, the vif security info for that agent will be in the agents_db table in the server. | 22:14 |
*** sputnik13net has quit IRC | 22:14 | |
nati_ueno | rkukura: so if our roadmap is centralized management, why not move toward on that goal step by step? | 22:15 |
nati_ueno | rkukura: we can move one by one | 22:15 |
rkukura | I'm not sure centralized API-based management is an agreed goal. It really hasn't been discussed much. | 22:16 |
nati_ueno | Ah I got it | 22:16 |
rkukura | Is nova working toward removing config files from its compute nodes? | 22:16 |
nati_ueno | I'm not sure | 22:17 |
rkukura | Seems a coordinated effort across projects would be needed if the goal is to do centralized config through OpenStack APIs. | 22:17 |
rkukura | Doesn't help much to do this for neuton but not for nova, keystone, ... | 22:18 |
*** sputnik13net has joined #openstack-neutron | 22:18 | |
nati_ueno | OK so how do you think? centralized vs host config. which is better? | 22:18 |
rkukura | In an ideal world, starting with a clean slate, I think I'd take a centralized approach, but this would require a distributed config component as part of the core architecture. | 22:20 |
nati_ueno | I agree. so I believe openstack should go that way | 22:21 |
nati_ueno | remove many configs and set it up by controllers | 22:21 |
*** mili_ has joined #openstack-neutron | 22:21 | |
*** rwsu has quit IRC | 22:22 | |
rkukura | I've designed systems that had a pluggable config service for exactly this purpose. Plugins to the config service could even be file-based for simple deployments. | 22:22 |
rkukura | nati_ueno: This sounds like a great oslo session topic for the J summit. | 22:22 |
nati_ueno | rkukura: I agree. | 22:22 |
*** jecarey has quit IRC | 22:23 | |
nati_ueno | so This is why I thought it takes few weeks to fix vif_type and vif_security refacotring.. | 22:23 |
nati_ueno | This issues is not easy. (at least for me) | 22:23 |
nati_ueno | And the current patch is works with limited functionality | 22:23 |
nati_ueno | but it is better than broken for few month | 22:23 |
nati_ueno | I have nova side fix too | 22:24 |
nati_ueno | so I wanna finish this review before 1st birth day of this patch.. (This patch born Feb13/2013) | 22:24 |
rkukura | nati_ueno: Agree we need a solution urgently. I'll do a more detailed review of the current patch ASAP, especially the ml2 parts that would apply with either approach. Good goal! | 22:25 |
nati_ueno | rkukura: Thanks! | 22:25 |
rkukura | I may look for you here tomorrow to continue discussion, or via email. | 22:26 |
nati_ueno | rkukura: I got it. I'll start a thread in mailing list | 22:26 |
rkukura | nati_ueno: OK. I need to get some dinner together for me and the kids. | 22:27 |
nati_ueno | rkukura: Thank you for your talking time to discuss this! Have a good night! | 22:27 |
*** mili_ has quit IRC | 22:27 | |
*** mili_ has joined #openstack-neutron | 22:28 | |
*** mili_ has quit IRC | 22:28 | |
*** mili_ has joined #openstack-neutron | 22:29 | |
*** rwsu has joined #openstack-neutron | 22:30 | |
*** bmeshjason has quit IRC | 22:33 | |
openstackgerrit | Nachi Ueno proposed a change to openstack/neutron: Improve vif attributes related with firewalling https://review.openstack.org/21946 | 22:34 |
*** markwash has quit IRC | 22:36 | |
*** thuc has quit IRC | 22:38 | |
*** markwash has joined #openstack-neutron | 22:38 | |
*** thuc has joined #openstack-neutron | 22:39 | |
pcm_ | nati_ueno: Hi | 22:39 |
*** pcm_ has quit IRC | 22:41 | |
*** pcm_ has joined #openstack-neutron | 22:42 | |
jroovers | nati_ueno: I added a version 0 of VPNaaS scenario test - https://review.openstack.org/#/c/65515/ | 22:42 |
*** thuc has quit IRC | 22:43 | |
*** jroovers has quit IRC | 22:51 | |
openstackgerrit | Aaron Rosen proposed a change to openstack/neutron: Add test to port_security to test with security_groups https://review.openstack.org/65543 | 22:52 |
openstackgerrit | Aaron Rosen proposed a change to openstack/neutron: Don't require passing in port_security=False if security_groups present https://review.openstack.org/65544 | 22:52 |
*** WackoRobie has quit IRC | 22:53 | |
*** dims has quit IRC | 22:53 | |
*** jroovers has joined #openstack-neutron | 22:54 | |
*** rkofman has left #openstack-neutron | 22:56 | |
*** jecarey has joined #openstack-neutron | 22:56 | |
*** ozialien has joined #openstack-neutron | 22:56 | |
pcm_ | nati_ueno: Quick question. Did you see my review reply on https://review.openstack.org/#/c/64676/ ? Was wondering your thoughts. | 22:56 |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Add DB mappings with NSX logical routers https://review.openstack.org/54584 | 23:00 |
*** ozialien has quit IRC | 23:04 | |
*** ozialien has joined #openstack-neutron | 23:04 | |
*** ozialien has quit IRC | 23:04 | |
*** mili__ has joined #openstack-neutron | 23:06 | |
*** dims_ has joined #openstack-neutron | 23:08 | |
*** mili_ has quit IRC | 23:09 | |
*** thuc has joined #openstack-neutron | 23:09 | |
*** clev has quit IRC | 23:11 | |
pcm_ | nati_ueno: ping | 23:12 |
*** carl_baldwin has quit IRC | 23:13 | |
*** thuc has quit IRC | 23:18 | |
nati_ueno | pcm_: pong | 23:23 |
nati_ueno | pcm_: I see your reply now, let me reply on gerrit | 23:23 |
pcm_ | nati_ueno: OK. Thanks | 23:29 |
pcm_ | nati_ueno: Another Q: If one changes a connection (or policy), when connection is action, when do the changes get applied? | 23:29 |
pcm_ | nati_ueno: Will it just get sent to driver as an update and then openswan will restart w/new config? | 23:30 |
nati_ueno | pcm_: I prefer reload config in openswan, but basically yes | 23:31 |
nati_ueno | pcm_: I'm not sure we can provide such function without dataplane disconnection | 23:32 |
pcm_ | nati_ueno: do you think it breaks and restarts the connection? | 23:32 |
nati_ueno | pcm_: If it make data plane disconnected, i prefer not provider update | 23:32 |
pcm_ | nati_ueno: wondering about reference impl. | 23:33 |
nati_ueno | pcm_: Ah sorry I'm not sure. We should test it | 23:33 |
*** networkstatic has joined #openstack-neutron | 23:33 | |
*** thuc has joined #openstack-neutron | 23:33 | |
nati_ueno | pcm_: may be kernel config didn't affected openswan processs, so it may not be disconnected | 23:33 |
*** jgrimm has quit IRC | 23:33 | |
nati_ueno | pcm_: however, it sounds we should re-establish ipsec connection when we change connection configration | 23:33 |
nati_ueno | pcm_: eg, ciphers | 23:34 |
*** networkstatic has quit IRC | 23:34 | |
nati_ueno | pcm_: if some update causes data plane disconnection, it's not intuitive and dangerous design | 23:34 |
nati_ueno | pcm_: so I prefer let user delete connection first, then create new connection | 23:34 |
nati_ueno | if we can't provide update without dataplane disconnection | 23:34 |
pcm_ | nati_ueno: Looking at the code, trying to figure out what it does. I see that, if I restart VPN on one side, it seems like the connection doesn't always come up. | 23:35 |
pcm_ | nati_ueno: Looks like other side rejects in one of the phases. If I restart on the other end, then it comes up fine. | 23:36 |
nati_ueno | pcm_: may be it depends on dpd values.. (i'm not sure thought) | 23:36 |
*** sputnik13net has quit IRC | 23:37 | |
pcm_ | nati_ueno: So on change, it looks like it stops and then starts openswan. I guess it'll be ok, once that happens on both ends. | 23:41 |
nati_ueno | pcm_: I'm not sure. we need to test it | 23:41 |
pcm_ | nati_ueno: I was stopping, and then starting one end (w/o changing any settings), and it wasn't always negotiating. | 23:41 |
nati_ueno | pcm_: which configuration did you change? | 23:42 |
pcm_ | nati_ueno: I wasn't in the test. I was just stopping one end and then starting again w/same config. Saw that it wasn't always coming up. | 23:43 |
pcm_ | nati_ueno: Later, I was looking into how config changes are handled, and it seems like it'll do the same start/stop. | 23:43 |
nati_ueno | pcm_: gotcha. | 23:43 |
*** Ilja1 has quit IRC | 23:43 | |
*** peristeri has quit IRC | 23:43 | |
pcm_ | nati_ueno: Granted, in my case, I have a Cisco router on one end that is stopping/starting. It was reporting that the negot failed | 23:44 |
pcm_ | nati_ueno: Looks like VPN on other end was rejecting some ID. | 23:44 |
nati_ueno | pcm_: ah btw did you connected vpnaas ref impl with cisco router? | 23:44 |
pcm_ | nati_ueno: yes | 23:45 |
nati_ueno | pcm_: Awesome if so, could you share the config with community? | 23:45 |
pcm_ | nati_ueno: Sure. Where should I place it? | 23:45 |
nati_ueno | pcm_: Wiki is good start. But we are lacking admin manual for vpn. so how about let work on it togetter? | 23:46 |
pcm_ | nati_ueno: As part of the vendor impl, I'm working toward configuring Cisco device via OpenStack (for I-3) | 23:46 |
nati_ueno | via netconf? | 23:46 |
pcm_ | nati_ueno: sure | 23:46 |
pcm_ | nati_ueno: No, via a REST API | 23:47 |
nati_ueno | pcm_: oh IOS has rest interface? | 23:47 |
* pcm_ feverishly trying to get everything pulled together | 23:48 | |
openstackgerrit | Salvatore Orlando proposed a change to openstack/neutron: Make timeout for ovs-vsctl configurable https://review.openstack.org/61105 | 23:48 |
pcm_ | nati_ueno: Some of the boxes have a REST I/F (not sure how many). | 23:49 |
*** ashaikh has quit IRC | 23:50 | |
nati_ueno | pcm_: cool | 23:50 |
pcm_ | nati_ueno: Yeah. Lots to do to get it all going. Been pretty swamped. | 23:50 |
*** aymenfrikha has quit IRC | 23:51 | |
pcm_ | nati_ueno: Appreciate your suggestions/guidance on my questions. | 23:51 |
openstackgerrit | Rajesh Mohan proposed a change to openstack/neutron: Firewall as a Service (FWaaS) Service Insertion https://review.openstack.org/62599 | 23:53 |
nati_ueno | pcm_: Thanks TTYL | 23:54 |
pcm_ | nati_ueno: ok. | 23:54 |
*** evgenyf has quit IRC | 23:55 | |
*** networkstatic has joined #openstack-neutron | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!