Re: [openstack-dev] [Neutron] VPC Proposal

2014-02-18 Thread Ravi Chunduru
Hi JC, I suggest we have a VPC meetup to get those who are interested on the same page and present the resulted draft proposal in the summit design discussions. Thanks, -Ravi. On Tue, Feb 18, 2014 at 10:12 AM, Martin, JC wrote: > We have started a discussion on the proper model to implement

Re: [openstack-dev] VPC Proposal

2014-02-16 Thread Ravi Chunduru
IMO, VPC means to have managed set of resources not just limited to networks but also projects. I feel its not about incrementally starting with AWS compatibility, But doing it right with AWS compatibility into consideration. Thanks, -Ravi. On Sun, Feb 16, 2014 at 8:47 AM, Harshad Nakil wrote:

Re: [openstack-dev] [keystone] role of Domain in VPC definition

2014-02-16 Thread Ravi Chunduru
I agree with JC that we need to pause and discuss VPC model with in openstack before considering AWS compatibility. As Subbu said, We need this discussion in Juno summit and get consensus. Thanks, -Ravi. On Sun, Feb 16, 2014 at 10:31 AM, Allamaraju, Subbu wrote: > Harshad, > > This is great. A

[openstack-dev] [keystone] role of Domain in VPC definition

2013-12-19 Thread Ravi Chunduru
Hi, We had some internal discussions on role of Domain and VPCs. I would like to expand and understand community thinking of Keystone domain and VPCs. Is VPC equivalent to Keystone Domain? If so, as a public cloud provider - I create a Keystone domain and give it to an organization which wants

Re: [openstack-dev] [keystone] domain admin role query

2013-12-18 Thread Ravi Chunduru
Thanks Dolph, It worked now. I specified domain id in the scope. -Ravi. On Wed, Dec 18, 2013 at 12:05 PM, Ravi Chunduru wrote: > Hi Dolph, > I dont have project yet to use in the scope. The intention is to get a > token using domain admin credentials and create project using it. &

Re: [openstack-dev] [keystone] domain admin role query

2013-12-18 Thread Ravi Chunduru
Hi Dolph, I dont have project yet to use in the scope. The intention is to get a token using domain admin credentials and create project using it. Thanks, -Ravi. On Wed, Dec 18, 2013 at 11:39 AM, Dolph Mathews wrote: > > On Wed, Dec 18, 2013 at 12:48 PM, Ravi Chunduru wrote: > >

Re: [openstack-dev] [keystone] domain admin role query

2013-12-18 Thread Ravi Chunduru
>> > >> as opposed to (in policy.json): > >> > >> "identity:create_project": "rule:admin_required", > >> > >> This is what you are looking for to scope the admin role to a domain. > >> > >> We need to start mo

[openstack-dev] [keystone] domain admin role query

2013-12-10 Thread Ravi Chunduru
Hi, I am trying out Keystone V3 APIs and domains. I created an domain, created a project in that domain, created an user in that domain and project. Next, gave an admin role for that user in that domain. I am assuming that user is now admin to that domain. Now, I got a scoped token with that use

Re: [openstack-dev] problems with rabbitmq on HA controller failure...anyone seen this?

2013-12-02 Thread Ravi Chunduru
We do had the same problem in our deployment. Here is the brief description of what we saw and how we fixed it. http://l4tol7.blogspot.com/2013/12/openstack-rabbitmq-issues.html On Mon, Dec 2, 2013 at 10:37 AM, Vishvananda Ishaya wrote: > > On Nov 29, 2013, at 9:24 PM, Chris Friesen > wrote: >

Re: [openstack-dev] Bad review patterns

2013-11-06 Thread Ravi Chunduru
Well said. This will encourage new developers. On Wed, Nov 6, 2013 at 11:26 AM, Andrew Woodward wrote: > Great thread and very insightful. Yes; please make this more > accessible to other reviewers. Adding this to the wiki is a great > start. > > Andrew > Mirantis > > On Wed, Nov 6, 2013 at 11:

Re: [openstack-dev] Re : welcoming new committers (was Re: When is it okay for submitters to say 'I don't want to add tests' ?)

2013-11-04 Thread Ravi Chunduru
Good points from John. The only concern for first time reviewers is that their comments gets overseen by the committer. If the review comment is good, I feel core-reviewer must put some weight on it and thus encourage genuine suggestions. On Mon, Nov 4, 2013 at 9:33 AM, John Dennis wrote: > On

Re: [openstack-dev] [Neutron][LBaaS] Object status and admin_state_up

2013-10-29 Thread Ravi Chunduru
Generally loadbalancer will have the following options enable - configurationally enable disable - configurationally disable up - status alive down - status down If we have the above it will be meaningful to get actual status of the object. Thanks, -Ravi. On Tue, Oct 29, 2013 at 4:33 PM, It

Re: [openstack-dev] [Neutron] Distributed Virtual Router Discussion

2013-10-22 Thread Ravi Chunduru
Count me in as well. On Tue, Oct 22, 2013 at 1:20 PM, Kyle Mestery (kmestery) wrote: > Count me in on this discussion as well. May make sense to have a lightning > talk at the summit, or an unconference slot. > > On Oct 22, 2013, at 1:50 PM, "Vasudevan, Swaminathan (PNB Roseville)" < > swaminat

Re: [openstack-dev] [Neutron] Tenant's info from plugin/services

2013-10-16 Thread Ravi Chunduru
As Yongsheng said, use keystone tenant-list. We overload keystone tenant with lot more tenant specific information as metadata and use it in other openstack services. On Wed, Oct 16, 2013 at 4:11 PM, Yongsheng Gong wrote: > I think this should be done in keystone. maybe you need a CLI command: >

Re: [openstack-dev] How to get VXLAN Endpoint IP without agent

2013-10-16 Thread Ravi Chunduru
I guess the intention is to make VXLAN work with out quantum agent. It means you are using an external openflow controller to manage OVS switches. In such a case, there is a need to specifically get the compute node IP from the VM data interface network( and not the management or openstack network

Re: [openstack-dev] What should be Neutron behavior with scoped token?

2013-10-07 Thread Ravi Chunduru
I raised a bug with my findings https://bugs.launchpad.net/neutron/+bug/1236704 On Fri, Oct 4, 2013 at 10:16 AM, Ravi Chunduru wrote: > Does the described behavior qualify as a bug? > > Thanks, > -Ravi. > > > On Thu, Oct 3, 2013 at 5:21 PM, Ravi Chunduru wrote: > &g

Re: [openstack-dev] What should be Neutron behavior with scoped token?

2013-10-04 Thread Ravi Chunduru
Does the described behavior qualify as a bug? Thanks, -Ravi. On Thu, Oct 3, 2013 at 5:21 PM, Ravi Chunduru wrote: > Hi, > In my tests, I observed that when an admin of a tenant runs 'nova list' > to list down all the servers of the tenant - nova-api makes a call to >

[openstack-dev] What should be Neutron behavior with scoped token?

2013-10-03 Thread Ravi Chunduru
Hi, In my tests, I observed that when an admin of a tenant runs 'nova list' to list down all the servers of the tenant - nova-api makes a call to quantum to get_ports with filter set to device owner. This operation is taking about 1m 30s in our setup(almost having 100 VMs i.e > 100 ports) While

Re: [openstack-dev] [Nova] [Libvirt] Virtio-Serial support for Nova libvirt driver

2013-10-02 Thread Ravi Chunduru
channels, Xen uses enable_cross_domain_channel - each with > their corresponding and custom ways of configuring the behaviour. > > > > Bob > > > ------ > *From:* Ravi Chunduru [ravi...@gmail.com] > *Sent:* 02 October 2013 19:07 > *To:* Daniel P. Berrange; O

Re: [openstack-dev] [Nova] [Libvirt] Virtio-Serial support for Nova libvirt driver

2013-10-02 Thread Ravi Chunduru
Hi Daniel, I will modify the blueprint as per your suggestions. Actually, we can use state_path in nova.conf if set or the default location. Thanks, -Ravi. On Tue, Oct 1, 2013 at 1:57 AM, Daniel P. Berrange wrote: > On Mon, Sep 30, 2013 at 02:25:30PM -0700, Ravi Chunduru wr

Re: [openstack-dev] [Nova] [Libvirt] Virtio-Serial support for Nova libvirt driver

2013-09-30 Thread Ravi Chunduru
> > Alessandro > > > On Sep 30, 2013, at 20:21 , Daniel P. Berrange > wrote: > > On Mon, Sep 30, 2013 at 09:46:02AM -0700, Ravi Chunduru wrote: > > Let me present an use case. > Today Nova enables to launch guests of different types. For real > deployments we

Re: [openstack-dev] [Nova] [Libvirt] Virtio-Serial support for Nova libvirt driver

2013-09-30 Thread Ravi Chunduru
Let me present an use case. Today Nova enables to launch guests of different types. For real deployments we would need appliances from various vendors to run as instances. Appliances can be Loadbalancer, Firewall, IPsec, Routers or UTM etc., These appliances can be tied up with Neutron Services

Re: [openstack-dev] [Nova] [Libvirt] Virtio-Serial support for Nova libvirt driver

2013-09-25 Thread Ravi Chunduru
I got this working after I made guest to behave as serial device and host side program as unix socket based client. Now all set to collaborate the BP with the use case. Thanks, -Ravi. On Wed, Sep 25, 2013 at 8:09 AM, Ravi Chunduru wrote: > I am working on this generic virtio-serial interf

Re: [openstack-dev] [Nova] [Libvirt] Virtio-Serial support for Nova libvirt driver

2013-09-25 Thread Ravi Chunduru
I am working on this generic virtio-serial interface for appliances. To start with I experimented on existing Wangpan's added feature on hw_qemu_guest agent. I am preparing to propose a blueprint to modify it for generic use and open to collaborate. I could bring up VM with generic source path(say

Re: [openstack-dev] [Nova] Virtio-Serial support for Nova libvirt driver

2013-09-24 Thread Ravi Chunduru
There is implementation for qemu guest agent checked into the code. https://blueprints.launchpad.net/nova/+spec/qemu-guest-agent-support On Tue, Sep 24, 2013 at 3:40 AM, P Balaji-B37839 wrote: > Hi, > > Virtio-Serial interface support for Nova - Libvirt is not available now. > Some VMs who wants

Re: [openstack-dev] [Nova] Candidacy for Compute (Nova) PTL

2013-09-20 Thread Ravi Chunduru
+1 On Fri, Sep 20, 2013 at 10:12 AM, Russell Bryant wrote: > Greetings, > > I would like to run for the OpenStack Compute (Nova) PTL position. > > I am the current Nova PTL. I have been working on OpenStack since late > 2011 and have been primarily been focused on Nova since then. I would > l

Re: [openstack-dev] [Neutron] Security groups with OVS instead of iptables?

2013-09-03 Thread Ravi Chunduru
It is possible to enforce security groups on OVS provided you have Openflow Controller instead of neutron agent managing the OVS switches. On Tue, Sep 3, 2013 at 10:29 AM, Scott Devoid wrote: > +1 for an answer to this. > > The reference documentation suggests running Neutron OVS with a total o

Re: [openstack-dev] Cells - Neutron Service

2013-08-29 Thread Ravi Chunduru
Its an interesting discussion you brought up today. I agree there is no clear definition of neutron service in that table. The cell goes by its definition of ability to create instance anywhere. Then there needs to be inter-vm communication for a given network. I feel Neutron must be shared servic

Re: [openstack-dev] [Nova][Blueprint] Network Aware scheduler

2013-08-07 Thread Ravi Chunduru
ttps://blueprints.launchpad.net/nova/+spec/network-bandwidth-entitlement* > *** > > ** ** > > Both have code posted for review.**** > > ** ** > > Cheers, > > Phil > > ** ** > > ** ** > > *From:* Ravi Chunduru [mailto:ravi...@gmail.com] > *Se

[openstack-dev] [Nova][Blueprint] Network Aware scheduler

2013-08-07 Thread Ravi Chunduru
Hi, Please let us know if any one working on this blueprint https://blueprints.launchpad.net/nova/+spec/network-aware-scheduler Thanks, -Ravi. ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/l

Re: [openstack-dev] [Neutron] Configuration of Openflow controller reachability information in OVS from Openstack

2013-08-07 Thread Ravi Chunduru
h implementation available for the same with openstack.*** > * > > ** ** > > I think, the below manual mentions the manual configuration using ovs cli. > > > ** ** > > ** ** > > ** ** > > Thanking you. > > ** ** > > -- > > Tri

Re: [openstack-dev] [Neutron] Configuration of Openflow controller reachability information in OVS from Openstack

2013-08-07 Thread Ravi Chunduru
you point me to where the OVS certificates are handled in Nicira code > base for quantum. > > ** ** > > ** ** > > -- > > Trinath Somanchi - B39208**** > > trinath.soman...@freescale.com | extn: 4048 > > ** ** > > *From:* Ravi Chunduru [ma

Re: [openstack-dev] [Neutron] Configuration of Openflow controller reachability information in OVS from Openstack

2013-08-06 Thread Ravi Chunduru
look into nicira neutrón plugin. I like the idea of ovs controller config driven through neutrón api. Nicira approach today is to add ovs certificates onto ovs controller manually. On Aug 6, 2013 9:09 PM, "Addepalli Srini-B22160" wrote: > > Hi, > > Using OVS Quantum Plugin and agent, it is poss

Re: [openstack-dev] Openstack Service requirement

2013-08-01 Thread Ravi Chunduru
s up, in addition to registering for > > notifications, it is needed to get the existing data using > > Nova/Neutrion API. > > > > > > > > Thanks > > > > SRini > > > > > > > > *From:*Ravi Chunduru [mailto:ravi...@gma

Re: [openstack-dev] Openstack Service requirement

2013-08-01 Thread Ravi Chunduru
ons, it is needed to get the existing data using Nova/Neutrion > API. > > ** ** > > Thanks > > SRini > > ** ** > > *From:* Ravi Chunduru [mailto:ravi...@gmail.com] > *Sent:* Wednesday, July 31, 2013 10:57 AM > *To:* OpenStack Development Mai

Re: [openstack-dev] Fwd: Blueprint information

2013-07-31 Thread Ravi Chunduru
I calls needed to achieve this goal. > If you want to proceed with implementing it directly in neutron, don't > mind my opinion. I am just a grumpy guy who loves to moan about pretty much > everything. > > Salvatore > > > > On 31 July 2013 19:41, Ravi Chunduru wrote: >

Re: [openstack-dev] Openstack Service requirement

2013-07-31 Thread Ravi Chunduru
Hi, Could any one respond on this? This helps us in designing services written on top of openstack. Thanks, -Ravi. On Tue, Jul 30, 2013 at 7:38 PM, Ravi Chunduru wrote: > Hi, > I was designing a Openstack service that listens on notifications > generated from Nova, Neutron etc.

Re: [openstack-dev] Fwd: Blueprint information

2013-07-31 Thread Ravi Chunduru
The blueprint proposed to assign auto floating IP during port creation. Since auto floating IP is supported in nova-network, +1 to implement the same in Neutron. Salvatore, Can you share with us the concerns in implementing in Neutron? Thanks, -Ravi. On Wed, Jul 31, 2013 at 12:57 AM, Salv

[openstack-dev] Openstack Service requirement

2013-07-30 Thread Ravi Chunduru
Hi, I was designing a Openstack service that listens on notifications generated from Nova, Neutron etc., for our custom needs to monitor and act up on events. I have an interesting observation from openstack perspective and I would like to know community thinking about it. By the time an openstac

[openstack-dev] [Neutron][LBaaS] Appliance support

2013-07-10 Thread Ravi Chunduru
Hi, I would like to know if we have any plans/proposal to move forward from haproxy in network namespace to support haproxy in a virtual appliance. And any vendor contribution in drivers for their appliances. Thanks, -Ravi. ___ OpenStack-dev mailing lis

Re: [openstack-dev] FW: [Keystone][Folsom] Token re-use

2013-06-20 Thread Ravi Chunduru
gt; min. ( download image from glance and create vm). Short lived token ( 5 > min) will be a real fun in this case. > > ** ** > > Thanks > > Haneef > > ** ** > > ** ** > > *From:* Ravi Chunduru [mailto:ravi...@gmail.com] > *Sent:* Thursday,

Re: [openstack-dev] FW: [Keystone][Folsom] Token re-use

2013-06-20 Thread Ravi Chunduru
ot expired. >> > > +10 > > >> >> >> >> >> >> >> On 06/19/2013 12:59 PM, Ravi Chunduru wrote: >> >> Thats still an open item in this thread. >> >> Let me summarize once again >> >> 1) Use case for keyst

Re: [openstack-dev] FW: [Keystone][Folsom] Token re-use

2013-06-19 Thread Ravi Chunduru
ate limiting by mixing request patterns. Also rate > limiting across regions may not be possible. > > a.UserId/Password > > b. UserName/Password/domainId > > c. UserName/Password/DomainName > > > > Thanks > > Haneef >

Re: [openstack-dev] FW: [Keystone][Folsom] Token re-use

2013-06-18 Thread Ravi Chunduru
*** > > ** ** > > ** ** > > *From: *Adam Young > *Reply-To: *OpenStack Development Mailing List < > openstack-dev@lists.openstack.org> > *Date: *Friday, June 14, 2013 3:33 PM > *To: *"openstack-dev@lists.openstack.org" < > openstack-dev@lists.opens

Re: [openstack-dev] Expired tokens in Keystone

2013-06-18 Thread Ravi Chunduru
ng them) without introducing a whole new call (e.g. PUT > /v3/auth/tokens ?). > > In the mean time, the burden remains on the client to cache and recycle > their own tokens. > > > -Dolph > > > On Fri, Jun 14, 2013 at 3:24 PM, Ravi Chunduru wrote: > >> On the prob