Re: [openstack-dev] VPNaaS questions...

2013-10-24 Thread Paul Michali
I put the client code out for review as WIP:

https://review.openstack.org/#/c/53602/

Regards,

PCM (Paul Michali)

MAIL p...@cisco.com
IRC   pcm_  (irc.freenode.net)
TW   @pmichali

On Oct 23, 2013, at 4:53 PM, Nachi Ueno na...@ntti3.com wrote:

 Hi Paul
 
 I rebased the patch, and working on unit testing too
 https://review.openstack.org/#/c/41827/
 
 
 2013/10/23 Paul Michali p...@cisco.com:
 See PCM: in-line.
 
 
 PCM (Paul Michali)
 
 MAIL p...@cisco.com
 IRC   pcm_  (irc.freenode.net)
 TW   @pmichali
 
 On Oct 23, 2013, at 9:41 AM, Akihiro Motoki amot...@gmail.com wrote:
 
 Hi Paul,
 
 
 On Wed, Oct 23, 2013 at 9:56 PM, Paul Michali p...@cisco.com wrote:
 
 
 Hi guys,
 
 Some questions on VPNaaS…
 
 Can we get the review reopened of the service type framework changes for VPN
 on the server side?
 I was thinking of trying to rebase that patch, based on the latest from
 master, but before doing so, I ran TOX on the latest master commit. TOX
 fails with a bunch of errors, some reporting that the system is out of
 memory. I have a 4GB Ubuntu 12.04 VM for this and I see it max out on
 memory, when TOX is run on the whole Neutron code for py27. Anyone seen
 this?
 
 
 I see this too. On 4GB Ubuntu 13.04 VM, I have over 1GB swap while
 running the whole test
 and the test slows down after swap begins….
 
 
 PCM: Whew! I was worried that it was something in my setup.  Any idea on a
 root cause/workaround? Is this happening when Jenkins runs?
 
 
 
 
 
 I have tried the current patch of service type framework, and found that
 client changes are needed too. I have changes ready for review, should I
 post them, or do we need to wait (or indicate some dependency on the server
 side changes)?
 
 
 My suggestion is to post a patch with WIP status.
 We can test the server side patch with CLI. It really helps us all.
 
 
 PCM: Thanks! I wasn't sure how to proceed as the client change is useless
 w/o the server change.
 
 Yeah, please push wip :)
 
 
 I see that there is VPN connection status and VPN service status. What is
 the purpose of the latter? What is the status, if the service has multiple
 connections in different states?
 
 
 I see the same.
 
 
 PCM: Yeah, need to understand what the desired meaning is for the service
 status in this context.
 
 
 In openswan impl,
 vpnservice state is the state of openswan process.
 ipsec-site-connection state is actual connection state.
 
 so let's say we have two site.
 Vpnservice will be ACTIVE and ipsec-site-connection's state will be DOWN after
 we setup only one site.
 
 
 
 
 Have you guys tried VPNaaS with Havana and the now default ML2 plugin? I got
 a failure on connection create, saying that it could not find
 get_l3_agents_hosting_routers() attribute. I haven't looked into this yet,
 but will try as soon as I can.
 
 
 I think https://bugs.launchpad.net/neutron/+bug/1238846 is same as
 what you encountered.
 I believe this bug was fixed in the final RC. Doesn't it work?
 
 
 PCM: Ah, I missed that bug review. I probably need to update my repo with
 the latest to pick this up.  Thanks!
 
 Regards,
 
 PCM
 
 
 
 Thanks,
 Akihiro
 
 
 Thanks!
 
 PCM (Paul Michali)
 
 Contact info for Cisco users http://twiki.cisco.com/Main/pcm
 
 
 
 ___
 OpenStack-dev mailing list
 OpenStack-dev@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 
 
 ___
 OpenStack-dev mailing list
 OpenStack-dev@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 
 



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] VPNaaS questions...

2013-10-23 Thread Paul Michali
Hi guys,

Some questions on VPNaaS…

Can we get the review reopened of the service type framework changes for VPN on 
the server side?
I was thinking of trying to rebase that patch, based on the latest from master, 
but before doing so, I ran TOX on the latest master commit. TOX fails with a 
bunch of errors, some reporting that the system is out of memory. I have a 4GB 
Ubuntu 12.04 VM for this and I see it max out on memory, when TOX is run on the 
whole Neutron code for py27. Anyone seen this?
I have tried the current patch of service type framework, and found that client 
changes are needed too. I have changes ready for review, should I post them, or 
do we need to wait (or indicate some dependency on the server side changes)?
I see that there is VPN connection status and VPN service status. What is the 
purpose of the latter? What is the status, if the service has multiple 
connections in different states?
Have you guys tried VPNaaS with Havana and the now default ML2 plugin? I got a 
failure on connection create, saying that it could not find 
get_l3_agents_hosting_routers() attribute. I haven't looked into this yet, but 
will try as soon as I can.
Thanks!

PCM (Paul Michali)

Contact info for Cisco users http://twiki.cisco.com/Main/pcm




signature.asc
Description: Message signed with OpenPGP using GPGMail
___
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] VPNaaS questions...

2013-10-23 Thread Akihiro Motoki
Hi Paul,


On Wed, Oct 23, 2013 at 9:56 PM, Paul Michali p...@cisco.com wrote:

 Hi guys,

 Some questions on VPNaaS…

 Can we get the review reopened of the service type framework changes for VPN 
 on the server side?
 I was thinking of trying to rebase that patch, based on the latest from 
 master, but before doing so, I ran TOX on the latest master commit. TOX fails 
 with a bunch of errors, some reporting that the system is out of memory. I 
 have a 4GB Ubuntu 12.04 VM for this and I see it max out on memory, when TOX 
 is run on the whole Neutron code for py27. Anyone seen this?

I see this too. On 4GB Ubuntu 13.04 VM, I have over 1GB swap while
running the whole test
and the test slows down after swap begins

 I have tried the current patch of service type framework, and found that 
 client changes are needed too. I have changes ready for review, should I post 
 them, or do we need to wait (or indicate some dependency on the server side 
 changes)?

My suggestion is to post a patch with WIP status.
We can test the server side patch with CLI. It really helps us all.

 I see that there is VPN connection status and VPN service status. What is the 
 purpose of the latter? What is the status, if the service has multiple 
 connections in different states?

I see the same.

 Have you guys tried VPNaaS with Havana and the now default ML2 plugin? I got 
 a failure on connection create, saying that it could not find 
 get_l3_agents_hosting_routers() attribute. I haven't looked into this yet, 
 but will try as soon as I can.

I think https://bugs.launchpad.net/neutron/+bug/1238846 is same as
what you encountered.
I believe this bug was fixed in the final RC. Doesn't it work?

Thanks,
Akihiro


 Thanks!

 PCM (Paul Michali)

 Contact info for Cisco users http://twiki.cisco.com/Main/pcm



 ___
 OpenStack-dev mailing list
 OpenStack-dev@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


___
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] VPNaaS questions...

2013-10-23 Thread Paul Michali
See PCM: in-line.


PCM (Paul Michali)

MAIL p...@cisco.com
IRC   pcm_  (irc.freenode.net)
TW   @pmichali

On Oct 23, 2013, at 9:41 AM, Akihiro Motoki amot...@gmail.com wrote:

 Hi Paul,
 
 
 On Wed, Oct 23, 2013 at 9:56 PM, Paul Michali p...@cisco.com wrote:
 
 Hi guys,
 
 Some questions on VPNaaS…
 
 Can we get the review reopened of the service type framework changes for VPN 
 on the server side?
 I was thinking of trying to rebase that patch, based on the latest from 
 master, but before doing so, I ran TOX on the latest master commit. TOX 
 fails with a bunch of errors, some reporting that the system is out of 
 memory. I have a 4GB Ubuntu 12.04 VM for this and I see it max out on 
 memory, when TOX is run on the whole Neutron code for py27. Anyone seen this?
 
 I see this too. On 4GB Ubuntu 13.04 VM, I have over 1GB swap while
 running the whole test
 and the test slows down after swap begins….

PCM: Whew! I was worried that it was something in my setup.  Any idea on a root 
cause/workaround? Is this happening when Jenkins runs?




 
 I have tried the current patch of service type framework, and found that 
 client changes are needed too. I have changes ready for review, should I 
 post them, or do we need to wait (or indicate some dependency on the server 
 side changes)?
 
 My suggestion is to post a patch with WIP status.
 We can test the server side patch with CLI. It really helps us all.

PCM: Thanks! I wasn't sure how to proceed as the client change is useless w/o 
the server change.


 
 I see that there is VPN connection status and VPN service status. What is 
 the purpose of the latter? What is the status, if the service has multiple 
 connections in different states?
 
 I see the same.

PCM: Yeah, need to understand what the desired meaning is for the service 
status in this context.



 
 Have you guys tried VPNaaS with Havana and the now default ML2 plugin? I got 
 a failure on connection create, saying that it could not find 
 get_l3_agents_hosting_routers() attribute. I haven't looked into this yet, 
 but will try as soon as I can.
 
 I think https://bugs.launchpad.net/neutron/+bug/1238846 is same as
 what you encountered.
 I believe this bug was fixed in the final RC. Doesn't it work?

PCM: Ah, I missed that bug review. I probably need to update my repo with the 
latest to pick this up.  Thanks!

Regards,

PCM


 
 Thanks,
 Akihiro
 
 
 Thanks!
 
 PCM (Paul Michali)
 
 Contact info for Cisco users http://twiki.cisco.com/Main/pcm
 
 
 
 ___
 OpenStack-dev mailing list
 OpenStack-dev@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 
 
 ___
 OpenStack-dev mailing list
 OpenStack-dev@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] VPNaaS questions...

2013-10-23 Thread Nachi Ueno
Hi Paul

I rebased the patch, and working on unit testing too
https://review.openstack.org/#/c/41827/


2013/10/23 Paul Michali p...@cisco.com:
 See PCM: in-line.


 PCM (Paul Michali)

 MAIL p...@cisco.com
 IRC   pcm_  (irc.freenode.net)
 TW   @pmichali

 On Oct 23, 2013, at 9:41 AM, Akihiro Motoki amot...@gmail.com wrote:

 Hi Paul,


 On Wed, Oct 23, 2013 at 9:56 PM, Paul Michali p...@cisco.com wrote:


 Hi guys,

 Some questions on VPNaaS…

 Can we get the review reopened of the service type framework changes for VPN
 on the server side?
 I was thinking of trying to rebase that patch, based on the latest from
 master, but before doing so, I ran TOX on the latest master commit. TOX
 fails with a bunch of errors, some reporting that the system is out of
 memory. I have a 4GB Ubuntu 12.04 VM for this and I see it max out on
 memory, when TOX is run on the whole Neutron code for py27. Anyone seen
 this?


 I see this too. On 4GB Ubuntu 13.04 VM, I have over 1GB swap while
 running the whole test
 and the test slows down after swap begins….


 PCM: Whew! I was worried that it was something in my setup.  Any idea on a
 root cause/workaround? Is this happening when Jenkins runs?





 I have tried the current patch of service type framework, and found that
 client changes are needed too. I have changes ready for review, should I
 post them, or do we need to wait (or indicate some dependency on the server
 side changes)?


 My suggestion is to post a patch with WIP status.
 We can test the server side patch with CLI. It really helps us all.


 PCM: Thanks! I wasn't sure how to proceed as the client change is useless
 w/o the server change.

Yeah, please push wip :)


 I see that there is VPN connection status and VPN service status. What is
 the purpose of the latter? What is the status, if the service has multiple
 connections in different states?


 I see the same.


 PCM: Yeah, need to understand what the desired meaning is for the service
 status in this context.


In openswan impl,
vpnservice state is the state of openswan process.
ipsec-site-connection state is actual connection state.

so let's say we have two site.
Vpnservice will be ACTIVE and ipsec-site-connection's state will be DOWN after
 we setup only one site.




 Have you guys tried VPNaaS with Havana and the now default ML2 plugin? I got
 a failure on connection create, saying that it could not find
 get_l3_agents_hosting_routers() attribute. I haven't looked into this yet,
 but will try as soon as I can.


 I think https://bugs.launchpad.net/neutron/+bug/1238846 is same as
 what you encountered.
 I believe this bug was fixed in the final RC. Doesn't it work?


 PCM: Ah, I missed that bug review. I probably need to update my repo with
 the latest to pick this up.  Thanks!

 Regards,

 PCM



 Thanks,
 Akihiro


 Thanks!

 PCM (Paul Michali)

 Contact info for Cisco users http://twiki.cisco.com/Main/pcm



 ___
 OpenStack-dev mailing list
 OpenStack-dev@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


 ___
 OpenStack-dev mailing list
 OpenStack-dev@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



___
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev