On Tue, Nov 22, 2016 at 06:53:02PM -0500, Lance Richardson wrote:
> > From: "Ben Pfaff" <[email protected]>
> > To: "Lance Richardson" <[email protected]>
> > Cc: [email protected]
> > Sent: Tuesday, November 22, 2016 6:43:04 PM
> > Subject: Re: [ovs-dev] [PATCH] ovn-nb: remote connection management in nb db
> > 
> > On Fri, Nov 11, 2016 at 11:14:20AM -0500, Lance Richardson wrote:
> > > Add support for managing remote connections, including
> > > SSL configuration, to northbound db schema, and add necessary
> > > commands to ovn-nbctl.
> > > 
> > > Signed-off-by: Lance Richardson <[email protected]>
> > 
> > This looks good to me but isn't it incomplete?  At least, we need to add
> > an appropriate --remote=db:... option when starting the ovsdb-server for
> > the northbound database.
> > 
> > I would add a NEWS item also.
> > 
> 
> I was planning to make the needed changes in ovn-ctl as a follow-on
> patch, thinking that the nb and sb changes would be independent of
> the ovn-ctl changes and wanting to defer the possibly controversial
> change of no longer starting the nb/sb ovsdb-server with a default
> remote (if SSL is desired, security is likely a concern, so having
> a default TCP port open with write access to the db would be undesirable).
> 
> 
> I could roll it all into a single series if that would be preferable.

I think I'd prefer that.

I understand the concerns.
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to