[Openstack] Question to how to write a Plugin for Quantum

2013-05-26 Thread LIN DONG
Dear All:

I'm trying to write a plugin for quantum to integrate my own load balancer
such that I can replace openstack's. However, I'm stuck on how to make the
migration. I'm just wondering if anybody has the previous experience on
this or any help would be highly appreciated.

All the best

Lin
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question on the GRE Communication

2013-03-15 Thread Aru s
Thanks Logan

On Thu, Mar 14, 2013 at 7:16 PM, Logan McNaughton lo...@bacoosta.comwrote:

 I'm not sure about verifying the GRE tunnels, so I can't be much help
 there.

 As far as understanding how the tunneling happens, GRE is an open
 protocol, not specific to OpenStack, or any vendor, and googling GRE should
 give you plenty of information about it.
 On Mar 14, 2013 5:21 AM, Aru s arumo...@gmail.com wrote:

 Hi  Logan,

 Thanks for the reply. I have one more question.
 How we will check whether the tunneling is established or not?
 I have gone through lot of documents of gre setup and all are says that
 the ovs-vsctl show command will show the tunnel info.
 Also is there a doc to understand how the magic happens for tunneling.

 Regards,
 Arumon


 On Tue, Mar 12, 2013 at 6:23 PM, Logan McNaughton lo...@bacoosta.comwrote:

 For Quantum GRE tunneling, the network node and compute nodes need a NIC
 on your data network. You assign each of those NIC's an IP (for instance,
 192.168.1.1-3). Then (assuming you are using openvswitch with GRE
 tunneling) you set up your quantum configs. Look at the Quantum
 administration guide for an example of GRE tunneling with openvswitch.

 After that you just let it work its magic. All VM traffic is
 encapsulated inside GRE packets traveling between the nodes, it'll all look
 like packets in that 192.168.1-3 network.

 Once the packet reaches its destination node, the GRE encapsulation is
 removed and the VM packet is read.
 On Mar 12, 2013 6:36 AM, Aru s arumo...@gmail.com wrote:

  Hi,

 I am trying to configuring openstack with one controller and one
 network and two compute nodes.
 I am not able to understand how the communication of the VM's happens
 which are for the same tenant with same ip range but on the different
 compute hosts.
 Please help me to understand how GRE communication happens.

 Regards,
 Arumon

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp



___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question on the GRE Communication

2013-03-15 Thread Aru s
Thanks Robert.

On Thu, Mar 14, 2013 at 7:25 PM, Robert van Leeuwen 
robert.vanleeu...@spilgames.com wrote:

  Thanks for the reply. I have one more question.
  How we will check whether the tunneling is established or not?

 tcpdump can show you the GRE traffic:
 tcpdump -i ethX proto gre

 Cheers,
 Robert
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] question on the GRE Performance

2013-03-15 Thread 小包
Hi Guys,

*in my test, i found OVS GRE performance so lower, for example:*
*100Mbits Switch, GRE just 26Mbits speed,but use linux bridge 95Mbits,*
*
*
*so, my question is: why GRE speed low, or may be my config not right,*
*
*
*
*
*Thanks,*
*Tommy*
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question on the GRE Performance

2013-03-15 Thread Rick Jones

On 03/15/2013 08:05 AM, tommy(小包) wrote:

Hi Guys,

in my test, i found OVS GRE performance so lower, for example:
100Mbits Switch, GRE just 26Mbits speed,but use linux bridge
95Mbits,

so, my question is: why GRE speed low, or may be my config not right,/


95 and 26 Mbit/s measured at what level?  On the wire (including all 
the protocol headers) or to user level (after all the protocol headers)? 
That you were seeing 95 Mbit/s suggests user level but I'd like to make 
certain.


GRE adds header overhead, but I wouldn't think enough to take one from 
95 down to 26 Mbit/s to user level.  I would suggest looking at, in no 
particular order:


*) Netstat stats on your sender - is it retransmitting in one case and 
not the other?


*) per-CPU CPU utilization - is any one CPU on the sending, receiving or 
intervening iron saturating in one case and not the other?


and go from there. I'm guessing your tests are all bulk-transfer - you 
might want to consider adding some latency and/or aggregate small-packet 
performance tests.


happy benchmarking,

rick jones
the applicability varies,  but attached is some boilerplate I've 
built-up over time, on the matter of why is my network performance 
slow?  PS - the beforeafter utility mentioned is no longer available 
via ftp.cup.hp.com because ftp.cup.hp.com no longer exists.  I probably 
aught to put it up on ftp.netperf.org...



Some of my checklist items when presented with assertions of poor
network performance, in no particular order, numbered only for
convenience of reference:

1) Is *any one* CPU on either end of the transfer at or close to 100%
   utilization?  A given TCP connection cannot really take advantage
   of more than the services of a single core in the system, so
   average CPU utilization being low does not a priori mean things are
   OK.

2) Are there TCP retransmissions being registered in netstat
   statistics on the sending system?  Take a snapshot of netstat -s -t
   from just before the transfer, and one from just after and run it
   through beforeafter from
   ftp://ftp.cup.hp.com/dist/networking/tools:

   netstat -s -t  before
   transfer or wait 60 or so seconds if the transfer was already going
   netstat -s -t  after
   beforeafter before after  delta

3) Are there packet drops registered in ethtool -S statistics on
   either side of the transfer?  Take snapshots in a manner similar to
   that with netstat.

4) Are there packet drops registered in the stats for the switch(es)
   being traversed by the transfer?  These would be retrieved via
   switch-specific means.

5) What is the latency between the two end points.  Install netperf on
   both sides, start netserver on one side and on the other side run:

   netperf -t TCP_RR -l 30 -H remote

   and invert the transaction/s rate to get the RTT latency.  There
   are caveats involving NIC interrupt coalescing settings defaulting
   in favor of throughput/CPU util over latency:

   ftp://ftp.cup.hp.com/dist/networking/briefs/nic_latency_vs_tput.txt

   but when the connections are over a WAN latency is important and
   may not be clouded as much by NIC settings.

   This all leads into:

6) What is the *effective* TCP (or other) window size for the
   connection.  One limit to the performance of a TCP bulk transfer
   is:

   Tput = W(eff)/RTT

   The effective window size will be the lesser of:

   a) The classic TCP window advertised by the receiver. This is the
  value in the TCP header's window field shifted by the window
  scaling factor which was exchanged during connection
  establishment. The window scale factor is why one wants to get
  traces including the connection establishment.
   
  The size of the classic window will depend on whether/what the
  receiving application has requested via a setsockopt(SO_RCVBUF)
  call and the sysctl limits set in the OS.  If the receiving
  application does not call setsockopt(SO_RCVBUF) then under Linux
  the stack will autotune the advertised window based on other
  sysctl limits in the OS.  Other stacks may or may not autotune.
 
   b) The computed congestion window on the sender - this will be
  affected by the packet loss rate over the connection, hence the
  interest in the netstat and ethtool stats.

   c) The quantity of data to which the sending TCP can maintain a
  reference while waiting for it to be ACKnowledged by the
  receiver - this will be akin to the classic TCP window case
  above, but on the sending side, and concerning
  setsockopt(SO_SNDBUF) and sysctl settings.

   d) The quantity of data the sending application is willing/able to
  send at any one time before waiting for some sort of
  application-level acknowledgement.  FTP and rcp will just blast
  all the data of the file into the socket as fast as the socket
  will take it.  Scp has some application-layer windowing which
  may cause it to put less data out onto the connection 

Re: [Openstack] question on the GRE Communication

2013-03-14 Thread Aru s
Hi  Logan,

Thanks for the reply. I have one more question.
How we will check whether the tunneling is established or not?
I have gone through lot of documents of gre setup and all are says that the
ovs-vsctl show command will show the tunnel info.
Also is there a doc to understand how the magic happens for tunneling.

Regards,
Arumon


On Tue, Mar 12, 2013 at 6:23 PM, Logan McNaughton lo...@bacoosta.comwrote:

 For Quantum GRE tunneling, the network node and compute nodes need a NIC
 on your data network. You assign each of those NIC's an IP (for instance,
 192.168.1.1-3). Then (assuming you are using openvswitch with GRE
 tunneling) you set up your quantum configs. Look at the Quantum
 administration guide for an example of GRE tunneling with openvswitch.

 After that you just let it work its magic. All VM traffic is encapsulated
 inside GRE packets traveling between the nodes, it'll all look like packets
 in that 192.168.1-3 network.

 Once the packet reaches its destination node, the GRE encapsulation is
 removed and the VM packet is read.
 On Mar 12, 2013 6:36 AM, Aru s arumo...@gmail.com wrote:

  Hi,

 I am trying to configuring openstack with one controller and one network
 and two compute nodes.
 I am not able to understand how the communication of the VM's happens
 which are for the same tenant with same ip range but on the different
 compute hosts.
 Please help me to understand how GRE communication happens.

 Regards,
 Arumon

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question on the GRE Communication

2013-03-14 Thread Logan McNaughton
I'm not sure about verifying the GRE tunnels, so I can't be much help there.

As far as understanding how the tunneling happens, GRE is an open protocol,
not specific to OpenStack, or any vendor, and googling GRE should give you
plenty of information about it.
On Mar 14, 2013 5:21 AM, Aru s arumo...@gmail.com wrote:

 Hi  Logan,

 Thanks for the reply. I have one more question.
 How we will check whether the tunneling is established or not?
 I have gone through lot of documents of gre setup and all are says that
 the ovs-vsctl show command will show the tunnel info.
 Also is there a doc to understand how the magic happens for tunneling.

 Regards,
 Arumon


 On Tue, Mar 12, 2013 at 6:23 PM, Logan McNaughton lo...@bacoosta.comwrote:

 For Quantum GRE tunneling, the network node and compute nodes need a NIC
 on your data network. You assign each of those NIC's an IP (for instance,
 192.168.1.1-3). Then (assuming you are using openvswitch with GRE
 tunneling) you set up your quantum configs. Look at the Quantum
 administration guide for an example of GRE tunneling with openvswitch.

 After that you just let it work its magic. All VM traffic is encapsulated
 inside GRE packets traveling between the nodes, it'll all look like packets
 in that 192.168.1-3 network.

 Once the packet reaches its destination node, the GRE encapsulation is
 removed and the VM packet is read.
 On Mar 12, 2013 6:36 AM, Aru s arumo...@gmail.com wrote:

  Hi,

 I am trying to configuring openstack with one controller and one network
 and two compute nodes.
 I am not able to understand how the communication of the VM's happens
 which are for the same tenant with same ip range but on the different
 compute hosts.
 Please help me to understand how GRE communication happens.

 Regards,
 Arumon

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp



___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question on the GRE Communication

2013-03-14 Thread Robert van Leeuwen
 Thanks for the reply. I have one more question.
 How we will check whether the tunneling is established or not?

tcpdump can show you the GRE traffic:
tcpdump -i ethX proto gre

Cheers,
Robert
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question on the GRE Communication

2013-03-14 Thread The King in Yellow
That's the best way I found to see if GRE is up, just watching for two way
proto gre traffic.

Here's how you can match the IP addresses *inside* the GRE packet, which
you probably will want.  Note that 0x0a050505 is hexadecimal for my desired
IP address of 10.5.5.5:

root@os-network:~# tcpdump -i eth1 'proto gre and ( ip[58:4] = 0x0a050505
or ip[62:4] = 0x0a050505 )'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
16:18:17.434378 IP os-network-d  os-compute-01-d: GREv0, key=0x0, length
110: IP opskzlp119.snops.net  10.5.5.5: ICMP echo request, id 21321, seq
488, length 64
16:18:17.436190 IP os-compute-01-d  os-network-d: GREv0, key=0x0, length
110: IP 10.5.5.5  opskzlp119.snops.net: ICMP echo reply, id 21321, seq
488, length 64
16:18:18.435750 IP os-network-d  os-compute-01-d: GREv0, key=0x0, length
110: IP opskzlp119.snops.net  10.5.5.5: ICMP echo request, id 21321, seq
489, length 64
16:18:18.437798 IP os-compute-01-d  os-network-d: GREv0, key=0x0, length
110: IP 10.5.5.5  opskzlp119.snops.net: ICMP echo reply, id 21321, seq
489, length 64
:


On Thu, Mar 14, 2013 at 9:55 AM, Robert van Leeuwen 
robert.vanleeu...@spilgames.com wrote:

  Thanks for the reply. I have one more question.
  How we will check whether the tunneling is established or not?

 tcpdump can show you the GRE traffic:
 tcpdump -i ethX proto gre

 Cheers,
 Robert
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] question on the GRE Communication

2013-03-12 Thread Aru s
Hi,

I am trying to configuring openstack with one controller and one network
and two compute nodes.
I am not able to understand how the communication of the VM's happens which
are for the same tenant with same ip range but on the different compute
hosts.
Please help me to understand how GRE communication happens.

Regards,
Arumon
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question on the GRE Communication

2013-03-12 Thread Logan McNaughton
For Quantum GRE tunneling, the network node and compute nodes need a NIC on
your data network. You assign each of those NIC's an IP (for instance,
192.168.1.1-3). Then (assuming you are using openvswitch with GRE
tunneling) you set up your quantum configs. Look at the Quantum
administration guide for an example of GRE tunneling with openvswitch.

After that you just let it work its magic. All VM traffic is encapsulated
inside GRE packets traveling between the nodes, it'll all look like packets
in that 192.168.1-3 network.

Once the packet reaches its destination node, the GRE encapsulation is
removed and the VM packet is read.
On Mar 12, 2013 6:36 AM, Aru s arumo...@gmail.com wrote:

 Hi,

 I am trying to configuring openstack with one controller and one network
 and two compute nodes.
 I am not able to understand how the communication of the VM's happens
 which are for the same tenant with same ip range but on the different
 compute hosts.
 Please help me to understand how GRE communication happens.

 Regards,
 Arumon

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question regarding nova-compute

2013-02-18 Thread JuanFra Rodriguez Cardoso
Hi:

It seems a problem with dnsmasq. Ensure on compute hosts:
chown -R nova:nova /var/lib/nova and
/var/lib/nova/networks/nova-YOUR_BRIDGE{.conf, .pid}  have mode 644.
After that, issue: killall dnsmasq and then restart nova-network service.

Hope it's useful!

Regards,
JuanFra


2013/2/18 Aru s arumo...@gmail.com

 Hi Tam,

 I am new to openstack. i have setup a two node openstack setup in my lab.
 I have some questions on the networking part which mentioned below. Please
 help.

 I am using ubuntu server 12.10.
 I am using the flatmanager option, as both of my nodes have only single
 nic.
 first node is running all the services except the nova compute.
 only nova compute is running on the second node.
 I have cretated br100 on both the nodes and bridged to em1.
 I have one DHCP running external on the same network.
 All went good.

 The problem i can see is my VM's are getting ip from the external DHCP
 server, but the Horizon UI is showing different ip. please let me know if
 anymore info required.

 Regards,
 Arumon


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] question regarding nova-compute

2013-02-17 Thread Aru s
Hi Tam,

I am new to openstack. i have setup a two node openstack setup in my lab. I
have some questions on the networking part which mentioned below. Please
help.

I am using ubuntu server 12.10.
I am using the flatmanager option, as both of my nodes have only single
nic.
first node is running all the services except the nova compute.
only nova compute is running on the second node.
I have cretated br100 on both the nodes and bridged to em1.
I have one DHCP running external on the same network.
All went good.

The problem i can see is my VM's are getting ip from the external DHCP
server, but the Horizon UI is showing different ip. please let me know if
anymore info required.

Regards,
Arumon
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Disk Setup of Nova Compute Node

2013-01-17 Thread Razique Mahroua
Thanks for the link !some amazing benches around :) Let's hope we'll have more details on the methodology, but some results are stunning
Razique Mahroua-Nuage  Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15

Le 17 janv. 2013 à 01:54, Blair Bethwaite blair.bethwa...@gmail.com a écrit :On 17 January 2013 09:48, Sean Bigdatafun sean.bigdata...@gmail.com wrote:

IMO, it's always a tradeoff. I am just very curious how Amazon configures its EC2 hardware.

Good luck getting that information! You might be able to make some guesses from benchmark info though, there is plenty around. This post from Scalyr takes a great all round look at EC2 IO performance, and it's pretty recent data:http://blog.scalyr.com/2012/10/16/a-systematic-look-at-ec2-io/.

Personally, I would guess that for ephemeral drives they use either no RAID at all or RAID10, probably none though, especially as they don't advertise any reliability for these drives. The issue of rebuild performance in parity-based RAID configs and the effect it would have on guest performance would be a significant consideration. Having said that, it's difficult to find reports of ephemeral drive failures, and Amazon don't quote any failure rates themselves.

-- Cheers,~Blairo

___Mailing list: https://launchpad.net/~openstackPost to : openstack@lists.launchpad.netUnsubscribe : https://launchpad.net/~openstackMore help : https://help.launchpad.net/ListHelp___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Disk Setup of Nova Compute Node

2013-01-16 Thread Gui Maluf
Hey Sean,
Did you found which is the best set up for your RAID?
I'm facing the same situation here.
 I've 11 dell r710 servers, with 4x3TB disk each, and I'm wondering if
worth it using a RAID5 or JBOD for some server that will run a
compute-network-volume node.
Did you got any solution?
Thanks in advance


On Sat, Jan 12, 2013 at 7:21 PM, Razique Mahroua
razique.mahr...@gmail.comwrote:

 Sorry, the first sentence is wrong :

 Hi,
 actually, even for a raid 10 you would end up with 3TB usable (more around
 2800 GB)

 In both cases you end up with 2 TB :)

 Regards,
 *Razique Mahroua** - **Nuage  Co*
  razique.mahr...@gmail.com
 Tel : +33 9 72 37 94 15


 Le 12 janv. 2013 à 22:19, Razique Mahroua razique.mahr...@gmail.com a
 écrit :

 Hi,
 actually, even for a raid 10 you would end up with 3TB usable (more around
 2800 GB). You could even go for either a RAID6 or RAID10 actually, since
 you have 4TB you would end up with 2TB in both cases

 Performance wise RAID10 is in most cases faster when it comes to reading
 speed, sometimes slower when it comes to writing speed, it all depends on
 you controller. You would bench both RAIDs and pick the faster one :)


 *Razique Mahroua** - **Nuage  Co*
  razique.mahr...@gmail.com
 Tel : +33 9 72 37 94 15

 NUAGECO-LOGO-Fblan_petit.jpg

 Le 11 janv. 2013 à 23:23, Sean Bigdatafun sean.bigdata...@gmail.com a
 écrit :

 Razique,

 Let's think of the following scenario, we use Nova to build an EC2-kind of
 compute cluster. For EC2, they offer

 M1.Small = 1 vCPU + 1.7GB Mem + 160GB Disk
 M1.Medium = 2vCPU + 3.75GB Mem + 410GB Disk
 M1.Large = 4vCPU + 7.5GB Mem + 850GB Disk
 M1.ExtraLarge = 8.vCPU + 15GB Mem + 1.7TB Dsik
 ...

 This means that they at least have 1.7TB disk space on a physical server
 (presumably 2 x 1TB disk).


 What RAID option  would we use in designing our cluster? For our Nova
 compute nodes,

 -- Do we have a JBOD configuration of 2 disks?
 -- do we have a RAID 0 of 2 disks?
 -- or do we use more enterprise like RAID 5?


 Thanks and hopefully this starts some discussion in this direction.

 Thanks,
 Sean

 On Fri, Jan 11, 2013 at 12:46 AM, Razique Mahroua 
 razique.mahr...@gmail.com wrote:

 Hi Sean,
 I may be wrong, but I think there is not any best RAID strategy when it
 comes to the disk for the nodes or a normal one. All RAID type have their
 pros and cons.
 It'a all about security over performance against total space that would
 end up usable. What RAID controller is that?

 Regards,
 *Razique Mahroua** - **Nuage  Co*
 razique.mahr...@gmail.com
 Tel : +33 9 72 37 94 15

 NUAGECO-LOGO-Fblan_petit.jpg

 Le 11 janv. 2013 à 08:36, Sean Bigdatafun sean.bigdata...@gmail.com a
 écrit :

 When I have a set of rack servers that is 1TB * 4 disks in each of it as
 Nova Compute Node, what is the best RAID (or JBOD) strategy OpenStack
 community recommend?

 Basically I'd like to know what a normal disk setup a compute node should
 be using.

 Thanks,
 Sean
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp





 --
 --Sean





 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp




-- 
*guilherme* \n
\t *maluf*
NUAGECO-LOGO-Fblan_petit.jpg___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question about flavor_access extension

2013-01-16 Thread Day, Phil
Hi Folks,

Can anyone point me to some examples of using the flavour_access extension 
please ?

I've been playing around with this in Devstack, and so far I've found that 
whilst I can create a non-public flavor and add access to a specific tenant 
(which I take to show that the extension is loaded properly)


-  It doesn't show up in the result of flavor-list, even for tenants 
that have access to it, or if the user has the admin role



-  Providing I know the ID of the flavor I can get details of it with 
nova flavor-show even if the tenant hasn't been added for access



-  Providing I know the ID of the flavor I can create an instance to 
use it even if the tenant hasn't been added for access


Looking in the code I can't see any support in the API to ever list private 
flavors, or to validate the access to a flavor, but maybe I'm looking in the 
wrong place.

Has anyone else been using this extension ?

Cheers,
Phil
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Disk Setup of Nova Compute Node

2013-01-16 Thread Razique Mahroua
I always preferred RAID5 over JBOD myself, but you always need to bench first and decide after :)
Razique Mahroua-Nuage  Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15

Le 16 janv. 2013 à 18:11, Gui Maluf guimal...@gmail.com a écrit :Hey Sean,Did you found which is the best set up for your RAID?I'm facing the same situation here.I've 11 dell r710 servers, with 4x3TB disk each, and I'm wondering if worth it using a RAID5 or JBOD for some server that will run a compute-network-volume node.

Did you got any solution?Thanks in advanceOn Sat, Jan 12, 2013 at 7:21 PM, Razique Mahroua razique.mahr...@gmail.com wrote:

Sorry, the first sentence is wrong :

Hi,actually, even for a raid 10 you would end up with 3TB usable (more around 2800 GB)In both cases you end up with 2 TB :)Regards,
Razique Mahroua-Nuage  Co



razique.mahr...@gmail.comTel: +33 9 72 37 94 15

NUAGECO-LOGO-Fblan_petit.jpg

Le 12 janv. 2013 à 22:19, Razique Mahroua razique.mahr...@gmail.com a écrit :

Hi,actually, even for a raid 10 you would end up with 3TB usable (more around 2800 GB). You could even go for either a RAID6 or RAID10 actually, since you have 4TB you would end up with 2TB in both cases

Performance wise RAID10 is in most cases faster when it comes to reading speed, sometimes slower when it comes to writing speed, it all depends on you controller. You would bench both RAIDs and pick the faster one :)


Razique Mahroua-Nuage  Co



razique.mahr...@gmail.comTel: +33 9 72 37 94 15

NUAGECO-LOGO-Fblan_petit.jpg

Le 11 janv. 2013 à 23:23, Sean Bigdatafun sean.bigdata...@gmail.com a écrit :Razique,

Let's think of the following scenario, we use Nova to build an EC2-kind of compute cluster. For EC2, they offerM1.Small = 1 vCPU + 1.7GB Mem + 160GB Disk
M1.Medium= 2vCPU + 3.75GB Mem + 410GB DiskM1.Large = 4vCPU + 7.5GB Mem + 850GB DiskM1.ExtraLarge = 8.vCPU + 15GB Mem + 1.7TB Dsik...This means that they at least have 1.7TB disk space on a physical server (presumably 2 x 1TB disk). 


What RAID option would we use in designing our cluster? For our Nova compute nodes,-- Do we have a JBOD configuration of 2 disks?-- do we have a RAID 0 of 2 disks?


-- or do we use more enterprise like RAID 5?Thanks and hopefully this starts some discussion in this direction.Thanks,Sean


On Fri, Jan 11, 2013 at 12:46 AM, Razique Mahroua razique.mahr...@gmail.com wrote:


Hi Sean,I may be wrong, but I think there is not any "best" RAID strategy when it comes to the disk for the nodes or a "normal" one. All RAID type have their pros and cons.


It'a all about security over performance against total space that would end up usable. What RAID controller is that?Regards,
Razique Mahroua-Nuage  Co


razique.mahr...@gmail.comTel: +33 9 72 37 94 15


NUAGECO-LOGO-Fblan_petit.jpg

Le 11 janv. 2013 à 08:36, Sean Bigdatafun sean.bigdata...@gmail.com a écrit :When I have a set of rack servers that is 1TB * 4 disks in each of it as Nova Compute Node, what is the best RAID (or JBOD) strategy OpenStack community recommend?


Basically I'd like to know what a normal disk setup a compute node should be using.

Thanks,Sean
___Mailing list: https://launchpad.net/~openstackPost to : openstack@lists.launchpad.net


Unsubscribe : https://launchpad.net/~openstackMore help : https://help.launchpad.net/ListHelp


-- --Sean


___
Mailing list: https://launchpad.net/~openstack
Post to   : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help  : https://help.launchpad.net/ListHelp
-- guilherme \n\t maluf

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] New to OpenStack - question Swift+Keystone Horizon

2013-01-16 Thread Brian Ipsen
Hi

I have just started to take a look at OpenStack (especially Swift, as this is 
what is most needed for a case I am investigating).
So far I have managed to get a Swift node up and running (all-in-one) on 
Ubuntu, but for some reasons I have been asked to take at look at the RedHat 
preview-implementation of the Folsom release.

Since Nova and the other parts not are needed, I would prefer not to install 
those parts... But will Horizon still be able to work - just with Swift and the 
underlying identity service based on keystone ?

I have tried the RedHat approach, and Keystone is up and running. I then tried 
to install and configure Horizon according to the RedHat instructions (and 
installed Swift afterwards). But whenever I log on to the Horizon interface, I 
get an internal server error page back.

Sine I don't know whether Horizon will run on such a limited setup (and I have 
not been able to locate information about it), I don't know whether it could be 
a bug in the RedHat implementation - or it simply is an unsupported setup...

Regards
Brian

PS: The error I get is this (from httpd error log):
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] mod_wsgi (pid=1715): 
Exception occurred processing WSGI script 
'/usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi'.
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] Traceback (most recent 
call last):
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/core/handlers/wsgi.py, line 241, in 
__call__
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] response = 
self.get_response(request)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/core/handlers/base.py, line 179, in 
get_response
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] response = 
self.handle_uncaught_exception(request, resolver, sys.exc_info())
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/core/handlers/base.py, line 228, in 
handle_uncaught_exception
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
callback(request, **param_dict)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/utils/decorators.py, line 91, in 
_wrapped_view
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] response = 
view_func(request, *args, **kwargs)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/views/defaults.py, line 33, in 
server_error
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
http.HttpResponseServerError(t.render(Context({})))
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 140, in render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
self._render(context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 134, in _render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
self.nodelist.render(context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 823, in render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] bit = 
self.render_node(node, context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 837, in 
render_node
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
node.render(context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/loader_tags.py, line 123, in 
render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
compiled_parent._render(context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 134, in _render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
self.nodelist.render(context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 823, in render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] bit = 
self.render_node(node, context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 837, in 
render_node
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
node.render(context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/loader_tags.py, line 155, in 
render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
self.render_template(self.template, context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 

Re: [Openstack] New to OpenStack - question Swift+Keystone Horizon

2013-01-16 Thread Gabriel Hurley
Horizon's list of required services includes Nova, Glance and Keystone. At 
present no work has been done to make it run with a Swift + Keystone (only) 
configuration. That said, it's not impossible. The easiest route would likely 
be to unregister all of the Nova and Glance-related panels in the existing 
System and Project dashboards (this can be done using Horizon's 
customization_module setting, though documentation for it is minimal), and 
provide a custom user_home function that directs users to the Containers 
(e.g. Swift) panel upon login.

In general as long as you don't ever touch any of the panels that try to make 
API calls to Nova or Glance you can avoid having to run those services. 
Unfortunately, *a lot* of the panels *do* make calls to those services. The 
Swift Containers panel does not, though, so it can be done.

Keystone is absolutely required, though, along with proper Swift + Keystone 
auth integration. That part is critical.

All the best,


-  Gabriel

From: openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net 
[mailto:openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net] On 
Behalf Of Brian Ipsen
Sent: Wednesday, January 16, 2013 1:29 PM
To: openstack@lists.launchpad.net
Subject: [Openstack] New to OpenStack - question Swift+Keystone  Horizon

Hi

I have just started to take a look at OpenStack (especially Swift, as this is 
what is most needed for a case I am investigating).
So far I have managed to get a Swift node up and running (all-in-one) on 
Ubuntu, but for some reasons I have been asked to take at look at the RedHat 
preview-implementation of the Folsom release.

Since Nova and the other parts not are needed, I would prefer not to install 
those parts... But will Horizon still be able to work - just with Swift and the 
underlying identity service based on keystone ?

I have tried the RedHat approach, and Keystone is up and running. I then tried 
to install and configure Horizon according to the RedHat instructions (and 
installed Swift afterwards). But whenever I log on to the Horizon interface, I 
get an internal server error page back.

Sine I don't know whether Horizon will run on such a limited setup (and I have 
not been able to locate information about it), I don't know whether it could be 
a bug in the RedHat implementation - or it simply is an unsupported setup...

Regards
Brian

PS: The error I get is this (from httpd error log):
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] mod_wsgi (pid=1715): 
Exception occurred processing WSGI script 
'/usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi'.
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] Traceback (most recent 
call last):
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/core/handlers/wsgi.py, line 241, in 
__call__
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] response = 
self.get_response(request)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/core/handlers/base.py, line 179, in 
get_response
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] response = 
self.handle_uncaught_exception(request, resolver, sys.exc_info())
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/core/handlers/base.py, line 228, in 
handle_uncaught_exception
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
callback(request, **param_dict)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/utils/decorators.py, line 91, in 
_wrapped_view
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] response = 
view_func(request, *args, **kwargs)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/views/defaults.py, line 33, in 
server_error
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
http.HttpResponseServerError(t.render(Context({})))
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 140, in render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
self._render(context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 134, in _render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return 
self.nodelist.render(context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 823, in render
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] bit = 
self.render_node(node, context)
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34]   File 
/usr/lib/python2.6/site-packages/django/template/base.py, line 837, in 
render_node
[Wed Jan 16 20:12:40 2013] [error] [client 10.41.43.34] return

Re: [Openstack] Question about Disk Setup of Nova Compute Node

2013-01-16 Thread Sean Bigdatafun
Gui,

Here is my current plan on the table (I have not started the action yet):

Go for RAID 5, because if a VM happen to rely on data on a local disk, I
can avoid the situation he notice a bad luck. (if I use JBOD, then I have
to say sorry to her, my customer, in such case)

IMO, it's always a tradeoff. I am just very curious how Amazon configures
its EC2 hardware.

Sean


On Wed, Jan 16, 2013 at 9:11 AM, Gui Maluf guimal...@gmail.com wrote:

  I've 11 dell r710 servers, with 4x3TB disk each, and I'm wondering if
 worth it using a RAID5 or JBOD for some server that will run a
 compute-network-volume node.





-- 
--Sean
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Disk Setup of Nova Compute Node

2013-01-16 Thread Blair Bethwaite
On 17 January 2013 09:48, Sean Bigdatafun sean.bigdata...@gmail.com wrote:

 IMO, it's always a tradeoff. I am just very curious how Amazon configures
 its EC2 hardware.


Good luck getting that information! You might be able to make some guesses
from benchmark info though, there is plenty around. This post from Scalyr
takes a great all round look at EC2 IO performance, and it's pretty recent
data: http://blog.scalyr.com/2012/10/16/a-systematic-look-at-ec2-io/ .

Personally, I would guess that for ephemeral drives they use either no RAID
at all or RAID10, probably none though, especially as they don't advertise
any reliability for these drives. The issue of rebuild performance in
parity-based RAID configs and the effect it would have on guest performance
would be a significant consideration. Having said that, it's difficult to
find reports of ephemeral drive failures, and Amazon don't quote any
failure rates themselves.

-- 
Cheers,
~Blairo
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Disk Setup of Nova Compute Node

2013-01-12 Thread Razique Mahroua
Sorry, the first sentence is wrong :Hi,actually, even for a raid 10 you would end up with 3TB usable (more around 2800 GB)In both cases you end up with 2 TB :)Regards,
Razique Mahroua-Nuage  Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15

Le 12 janv. 2013 à 22:19, Razique Mahroua razique.mahr...@gmail.com a écrit :Hi,actually, even for a raid 10 you would end up with 3TB usable (more around 2800 GB). You could even go for either a RAID6 or RAID10 actually, since you have 4TB you would end up with 2TB in both casesPerformance wise RAID10 is in most cases faster when it comes to reading speed, sometimes slower when it comes to writing speed, it all depends on you controller. You would bench both RAIDs and pick the faster one :)
Razique Mahroua-Nuage  Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15NUAGECO-LOGO-Fblan_petit.jpg

Le 11 janv. 2013 à 23:23, Sean Bigdatafun sean.bigdata...@gmail.com a écrit :Razique,Let's think of the following scenario, we use Nova to build an EC2-kind of compute cluster. For EC2, they offerM1.Small = 1 vCPU + 1.7GB Mem + 160GB Disk
M1.Medium= 2vCPU + 3.75GB Mem + 410GB DiskM1.Large = 4vCPU + 7.5GB Mem + 850GB DiskM1.ExtraLarge = 8.vCPU + 15GB Mem + 1.7TB Dsik...This means that they at least have 1.7TB disk space on a physical server (presumably 2 x 1TB disk). 
What RAID option would we use in designing our cluster? For our Nova compute nodes,-- Do we have a JBOD configuration of 2 disks?-- do we have a RAID 0 of 2 disks?
-- or do we use more enterprise like RAID 5?Thanks and hopefully this starts some discussion in this direction.Thanks,Sean
On Fri, Jan 11, 2013 at 12:46 AM, Razique Mahroua razique.mahr...@gmail.com wrote:
Hi Sean,I may be wrong, but I think there is not any "best" RAID strategy when it comes to the disk for the nodes or a "normal" one. All RAID type have their pros and cons.
It'a all about security over performance against total space that would end up usable. What RAID controller is that?Regards,
Razique Mahroua-Nuage  Co
razique.mahr...@gmail.comTel: +33 9 72 37 94 15
NUAGECO-LOGO-Fblan_petit.jpg

Le 11 janv. 2013 à 08:36, Sean Bigdatafun sean.bigdata...@gmail.com a écrit :When I have a set of rack servers that is 1TB * 4 disks in each of it as Nova Compute Node, what is the best RAID (or JBOD) strategy OpenStack community recommend?
Basically I'd like to know what a normal disk setup a compute node should be using.

Thanks,Sean
___Mailing list: https://launchpad.net/~openstackPost to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstackMore help : https://help.launchpad.net/ListHelp
-- --Sean


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Disk Setup of Nova Compute Node

2013-01-11 Thread Razique Mahroua
Hi Sean,I may be wrong, but I think there is not any "best" RAID strategy when it comes to the disk for the nodes or a "normal" one. All RAID type have their pros and cons.It'a all about security over performance against total space that would end up usable. What RAID controller is that?Regards,
Razique Mahroua-Nuage  Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15

Le 11 janv. 2013 à 08:36, Sean Bigdatafun sean.bigdata...@gmail.com a écrit :When I have a set of rack servers that is 1TB * 4 disks in each of it as Nova Compute Node, what is the best RAID (or JBOD) strategy OpenStack community recommend?Basically I'd like to know what a normal disk setup a compute node should be using.

Thanks,Sean
___Mailing list: https://launchpad.net/~openstackPost to : openstack@lists.launchpad.netUnsubscribe : https://launchpad.net/~openstackMore help : https://help.launchpad.net/ListHelp___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Disk Setup of Nova Compute Node

2013-01-11 Thread Sean Bigdatafun
Razique,

Let's think of the following scenario, we use Nova to build an EC2-kind of
compute cluster. For EC2, they offer

M1.Small = 1 vCPU + 1.7GB Mem + 160GB Disk
M1.Medium = 2vCPU + 3.75GB Mem + 410GB Disk
M1.Large = 4vCPU + 7.5GB Mem + 850GB Disk
M1.ExtraLarge = 8.vCPU + 15GB Mem + 1.7TB Dsik
...

This means that they at least have 1.7TB disk space on a physical server
(presumably 2 x 1TB disk).


What RAID option  would we use in designing our cluster? For our Nova
compute nodes,

-- Do we have a JBOD configuration of 2 disks?
-- do we have a RAID 0 of 2 disks?
-- or do we use more enterprise like RAID 5?


Thanks and hopefully this starts some discussion in this direction.

Thanks,
Sean

On Fri, Jan 11, 2013 at 12:46 AM, Razique Mahroua razique.mahr...@gmail.com
 wrote:

 Hi Sean,
 I may be wrong, but I think there is not any best RAID strategy when it
 comes to the disk for the nodes or a normal one. All RAID type have their
 pros and cons.
 It'a all about security over performance against total space that would
 end up usable. What RAID controller is that?

 Regards,
 *Razique Mahroua** - **Nuage  Co*
 razique.mahr...@gmail.com
 Tel : +33 9 72 37 94 15


 Le 11 janv. 2013 à 08:36, Sean Bigdatafun sean.bigdata...@gmail.com a
 écrit :

 When I have a set of rack servers that is 1TB * 4 disks in each of it as
 Nova Compute Node, what is the best RAID (or JBOD) strategy OpenStack
 community recommend?

 Basically I'd like to know what a normal disk setup a compute node should
 be using.

 Thanks,
 Sean
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp





-- 
--Sean
NUAGECO-LOGO-Fblan_petit.jpg___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question about Disk Setup of Nova Compute Node

2013-01-10 Thread Sean Bigdatafun
When I have a set of rack servers that is 1TB * 4 disks in each of it as
Nova Compute Node, what is the best RAID (or JBOD) strategy OpenStack
community recommend?

Basically I'd like to know what a normal disk setup a compute node should
be using.

Thanks,
Sean
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question about hostname.

2012-12-03 Thread Lei Zhang
Hi all,

I change the machine hostname by using follow commands

$ hostname puppet-master.domain.com
$ sed -i 's/HOSTNAME=.*/HOSTNAME=puppet-master.domain.com/'
/etc/sysconfig/network

But when checking it. I got following output

$ hostnamepuppet-master.domain.com
$ hostname --long
puppet-master.domain.com.novalocal

$ hostname -A
localhost

If I add the ip-domain mapping to the /etc/hosts file, it became right.

$ echo 10.0.0.10 puppet-master.domain.com puppet-master  /etc/hosts
$ hostnamepuppet-master.domain.com
$ hostname --longpuppet-master.domain.com

$ hostname -Apuppet-master.domain.com

I want to know why the hosts contents affect the hostname command
-- 
Lei Zhang

Blog: http://jeffrey4l.github.com
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question: how to make floating ip pools?

2012-11-27 Thread 이창만
Thanks a lot guys.

I've solved my issue for your advice. :)
It was caused by Port_id and Nova.conf of compute node.
Now I have to deploy swift and lunch vm instance using iso.
I'm appreciate if you answer my foolish question.

Best Regard.


 -Original Message-
 From: Choe, Cheng-Dae [mailto:white...@gmail.com]
 Sent: Tuesday, November 27, 2012 4:46 PM
 To: 이창만
 Cc: openstack@lists.launchpad.net
 Subject: Re: [Openstack] Question: how to make floating ip pools?
 
 Hi...
 --
 Choe, Cheng-Dae
 http://blog.woosum.net
 twitter: kiddtm
 
 2012. 11. 27., 오후 2:59, 이창만 cm224@samsung.com 작성:
 
 
  Hello,
 
  I am doing below guide.
  https://github.com/mseknibilel/OpenStack-Folsom-Install-
 guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst
 
  At Ch.11 Your First VM, I've encountered a error.
  My question is:
  1) What is the $put_id_floating_ip and $put_id_vm_port?
  e.g.) $ quantum floatingip-associate $put_id_floating_ip $put_id_vm_port
 put_id_floating_ip  is your floating id. below command show your floatingip.
 # quantum floatingip-list
 +--+--+
 -+--+
 | id   | fixed_ip_address |
 floating_ip_address | port_id  |
 +--+--+
 -+--+
 | abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
 | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |
 +--+--+
 -+--+
 
 $put_id_vm_port is that your vm's port that attached your network. when
 your instance and floatingip is like below
 root@control:~# nova list
 +--+---++--
 +
 | ID   | Name  | Status | Networks
 |
 +--+---++--
 +
 | a7b32a1d-25b7-4efe-97ba-1dafd478ef2b | test0 | ACTIVE | admin=172.16.1.3
 |
 +--+---++--
 +
 root@control:~# quantum port-list -- --device_id=a7b32a1d-25b7-4efe-97ba-
 1dafd478ef2b
 +--+--+---+
 ---
 +
 | id   | name | mac_address   |
 fixed_ips
 |
 +--+--+---+
 ---
 +
 | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |  | fa:16:3e:fd:9a:c5 |
 {subnet_id: f5a5e76c-3884-4438-b698-39fd30dc5ec5, ip_address:
 172.16.1.3} |
 +--+--+---+
 ---
 +
 root@control:~# quantum floatingip-list
 +--+--+
 -+--+
 | id   | fixed_ip_address |
 floating_ip_address | port_id  |
 +--+--+
 -+--+
 | abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
 | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |
 +--+--+
 -+--+
 
 you can associate floatingip to instance like this.
 # quantum floatingip-associate abfb3889-32f4-4854-bd61-6fb37e406faa
 3be818d4-b4e9-4e9f-b42f-66701bd57b47
 
 
 
  2) How can I know whether controller node and compute is connected?
 
 $ nova-manage service list
 command show that what nova services is running.
 
 
  The status of Controller node - I can't see any resources.
  a.Overview of Project on horizon
  i.Quota Summary is empty
  1.Used of Available Instances : NULL
  2.Used of Available vCPUs : NULL
  3.Used MB of MB Available RAM : NULL
 
  == Error Log ==
 
  root@node1:/home/zeus# quantum floatingip-create --tenant-id
 7230c184c85141b59f6a0df0843ea0d2 ext_net
  Created a new floatingip:
  +-+--+
  | Field   | Value|
  +-+--+
  | fixed_ip_address|  |
  | floating_ip_address | 192.168.2.3  |
  | floating_network_id | 1d6b740f-3f19-482b-a0b8-b4bcd83d5b3b |
  | id  | fd6429bd-cf71-45c0-bf0b-3c80e1fe527b |
  | port_id |  |
  | router_id

Re: [Openstack] Question: how to make floating ip pools?

2012-11-27 Thread Ahmed Al-Mehdi
Hello,

If you don't mind me asking, how did you create/launch the VM instance
using the Cirros image?  Did you use Horizon or command line?  If command
line, can you please share the commands you used?

Thank you,
Ahmed.


On 11/27/12 1:31 AM, 이창만 cm224@samsung.com wrote:

Thanks a lot guys.

I've solved my issue for your advice. :)
It was caused by Port_id and Nova.conf of compute node.
Now I have to deploy swift and lunch vm instance using iso.
I'm appreciate if you answer my foolish question.

Best Regard.


 -Original Message-
 From: Choe, Cheng-Dae [mailto:white...@gmail.com]
 Sent: Tuesday, November 27, 2012 4:46 PM
 To: 이창만
 Cc: openstack@lists.launchpad.net
 Subject: Re: [Openstack] Question: how to make floating ip pools?

 Hi...
 --
 Choe, Cheng-Dae
 http://blog.woosum.net
 twitter: kiddtm

 2012. 11. 27., 오후 2:59, 이창만 cm224@samsung.com 작성:

 
  Hello,
 
  I am doing below guide.
  https://github.com/mseknibilel/OpenStack-Folsom-Install-
 guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst
 
  At Ch.11 Your First VM, I've encountered a error.
  My question is:
  1) What is the $put_id_floating_ip and $put_id_vm_port?
  e.g.) $ quantum floatingip-associate $put_id_floating_ip
$put_id_vm_port
 put_id_floating_ip  is your floating id. below command show your
floatingip.
 # quantum floatingip-list

+--+--+--
--
 -+--+
 | id   | fixed_ip_address |
 floating_ip_address | port_id  |

+--+--+--
--
 -+--+
 | abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
 | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |

+--+--+--
--
 -+--+

 $put_id_vm_port is that your vm's port that attached your network. when
 your instance and floatingip is like below
 root@control:~# nova list

+--+---++
--
 +
 | ID   | Name  | Status | Networks
 |

+--+---++
--
 +
 | a7b32a1d-25b7-4efe-97ba-1dafd478ef2b | test0 | ACTIVE |
admin=172.16.1.3
 |

+--+---++
--
 +
 root@control:~# quantum port-list --
--device_id=a7b32a1d-25b7-4efe-97ba-
 1dafd478ef2b

+--+--+---+--
--

-
--
 +
 | id   | name | mac_address   |
 fixed_ips
 |

+--+--+---+--
--

-
--
 +
 | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |  | fa:16:3e:fd:9a:c5 |
 {subnet_id: f5a5e76c-3884-4438-b698-39fd30dc5ec5, ip_address:
 172.16.1.3} |

+--+--+---+--
--

-
--
 +
 root@control:~# quantum floatingip-list

+--+--+--
--
 -+--+
 | id   | fixed_ip_address |
 floating_ip_address | port_id  |

+--+--+--
--
 -+--+
 | abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
 | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |

+--+--+--
--
 -+--+

 you can associate floatingip to instance like this.
 # quantum floatingip-associate abfb3889-32f4-4854-bd61-6fb37e406faa
 3be818d4-b4e9-4e9f-b42f-66701bd57b47


 
  2) How can I know whether controller node and compute is connected?

 $ nova-manage service list
 command show that what nova services is running.

 
  The status of Controller node - I can't see any resources.
  a.Overview of Project on horizon
 i.Quota Summary is empty
 1.Used of Available Instances : NULL
 2.Used of Available vCPUs : NULL
 3.Used MB of MB Available RAM : NULL
 
  == Error Log ==
 
  root@node1:/home/zeus# quantum floatingip-create --tenant-id
 7230c184c85141b59f6a0df0843ea0d2 ext_net
  Created a new floatingip:
  +-+--+
  | Field   | Value|
  +-+--+
  | fixed_ip_address|  |
  | floating_ip_address

Re: [Openstack] Question: how to make floating ip pools?

2012-11-27 Thread Choe, Cheng-Dae
Please refer my vm creation script
http://blog.woosum.net/archives/990

2012년 11월 27일 화요일에 Ahmed Al-Mehdi님이 작성:

 Hello,

 If you don't mind me asking, how did you create/launch the VM instance
 using the Cirros image?  Did you use Horizon or command line?  If command
 line, can you please share the commands you used?

 Thank you,
 Ahmed.


 On 11/27/12 1:31 AM, 이창만 cm224@samsung.com wrote:

 Thanks a lot guys.
 
 I've solved my issue for your advice. :)
 It was caused by Port_id and Nova.conf of compute node.
 Now I have to deploy swift and lunch vm instance using iso.
 I'm appreciate if you answer my foolish question.
 
 Best Regard.
 
 
  -Original Message-
  From: Choe, Cheng-Dae [mailto:white...@gmail.com]
  Sent: Tuesday, November 27, 2012 4:46 PM
  To: 이창만
  Cc: openstack@lists.launchpad.net
  Subject: Re: [Openstack] Question: how to make floating ip pools?
 
  Hi...
  --
  Choe, Cheng-Dae
  http://blog.woosum.net
  twitter: kiddtm
 
  2012. 11. 27., 오후 2:59, 이창만 cm224@samsung.com 작성:
 
  
   Hello,
  
   I am doing below guide.
   https://github.com/mseknibilel/OpenStack-Folsom-Install-
  guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst
  
   At Ch.11 Your First VM, I've encountered a error.
   My question is:
   1) What is the $put_id_floating_ip and $put_id_vm_port?
   e.g.) $ quantum floatingip-associate $put_id_floating_ip
 $put_id_vm_port
  put_id_floating_ip  is your floating id. below command show your
 floatingip.
  # quantum floatingip-list
 
 +--+--+--
 --
  -+--+
  | id   | fixed_ip_address |
  floating_ip_address | port_id  |
 
 +--+--+--
 --
  -+--+
  | abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
  | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |
 
 +--+--+--
 --
  -+--+
 
  $put_id_vm_port is that your vm's port that attached your network. when
  your instance and floatingip is like below
  root@control:~# nova list
 
 +--+---++
 --
  +
  | ID   | Name  | Status | Networks
  |
 
 +--+---++
 --
  +
  | a7b32a1d-25b7-4efe-97ba-1dafd478ef2b | test0 | ACTIVE |
 admin=172.16.1.3
  |
 
 +--+---++
 --
  +
  root@control:~# quantum port-list --
 --device_id=a7b32a1d-25b7-4efe-97ba-
  1dafd478ef2b
 
 +--+--+---+--
 --
 
 -
 --
  +
  | id   | name | mac_address   |
  fixed_ips
  |
 
 +--+--+---+--
 --
 
  -+--+
 
  you can associate floatingip to instance like this.
  # quantum floatingip-associate abfb3889-32f4-4854-bd61-6fb37e406faa
  3be818d4-b4e9-4e9f-b42f-66701bd57b47
 
 
  
   2) How can I know whether controller node and compute is connected?
 
  $ nova-manage service list
  command show that what nova services is running.
 
  
   The status of Controller node - I can't see any resources.
   a.Overview of Project on horizon
  i.Quota Summary is empty
  1.Used of Available Instances : NULL
  2.Used of Available vCPUs : NULL
  3.Used MB of MB Available RAM : NULL
  
   == Error Log ==
  
   root@node1:/home/zeus# quantum floatingip-create --tenant-id
  7230c184c85141b59f6a0df0843ea0d2 ext_net
   Created a new floatingip:
   +-+--+
   | Field   | Value|
   +-+--+
   | fixed_ip_address|  |
   | floating_ip_address | 192.168.2.3  |
   | floating_network_id | 1d6b740f-3f19-482b-a0b8-b4bcd83d5b3b |
   | id  | fd6429bd-cf71-45c0-bf0b-3c80e1fe527b |
   | port_id |  |
   | router_id   |  |
   | tenant_id   | 7230c184c85141b59f6a0df0843ea0d2 |
   +-+--+
   root@node1:/home/zeus# quantum port-list
  
 +--+--+---+--
 
 -
 --
  ---+
   | id   | name | mac_address   |
  fixed_ips

Re: [Openstack] Question: how to make floating ip pools?

2012-11-27 Thread Ahmed Al-Mehdi
Thank you for sending the link to your script, much appreciated.

Can you please shed some light when to use the —tenant_id=admin and 
--tenant_id=proj_one (a tenant other than admin tenant) when issuing the 
quantum command, e.g. creating external/internl network, sub-net, launching VM, 
etc.


In your script, do you assume the user has set OS_TENANT__NAME to admin or 
proj_one?

Thank you,
Ahmed.


From: Choe, Cheng-Dae white...@gmail.commailto:white...@gmail.com
Date: Tuesday, November 27, 2012 7:07 AM
To: Ahmed Al-Mehdi ah...@coraid.commailto:ah...@coraid.com
Cc: 이창만 cm224@samsung.commailto:cm224@samsung.com, 
openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net 
openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net, Bilel 
Msekni 
bilel.mse...@telecom-sudparis.eumailto:bilel.mse...@telecom-sudparis.eu
Subject: Re: [Openstack] Question: how to make floating ip pools?

Please refer my vm creation script
http://blog.woosum.net/archives/990

2012년 11월 27일 화요일에 Ahmed Al-Mehdi님이 작성:
Hello,

If you don't mind me asking, how did you create/launch the VM instance
using the Cirros image?  Did you use Horizon or command line?  If command
line, can you please share the commands you used?

Thank you,
Ahmed.


On 11/27/12 1:31 AM, 이창만 cm224@samsung.com wrote:

Thanks a lot guys.

I've solved my issue for your advice. :)
It was caused by Port_id and Nova.conf of compute node.
Now I have to deploy swift and lunch vm instance using iso.
I'm appreciate if you answer my foolish question.

Best Regard.


 -Original Message-
 From: Choe, Cheng-Dae [mailto:white...@gmail.com]
 Sent: Tuesday, November 27, 2012 4:46 PM
 To: 이창만
 Cc: openstack@lists.launchpad.net
 Subject: Re: [Openstack] Question: how to make floating ip pools?

 Hi...
 --
 Choe, Cheng-Dae
 http://blog.woosum.net
 twitter: kiddtm

 2012. 11. 27., 오후 2:59, 이창만 cm224@samsung.com 작성:

 
  Hello,
 
  I am doing below guide.
  https://github.com/mseknibilel/OpenStack-Folsom-Install-
 guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst
 
  At Ch.11 Your First VM, I've encountered a error.
  My question is:
  1) What is the $put_id_floating_ip and $put_id_vm_port?
  e.g.) $ quantum floatingip-associate $put_id_floating_ip
$put_id_vm_port
 put_id_floating_ip  is your floating id. below command show your
floatingip.
 # quantum floatingip-list

+--+--+--
--
 -+--+
 | id   | fixed_ip_address |
 floating_ip_address | port_id  |

+--+--+--
--
 -+--+
 | abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
 | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |

+--+--+--
--
 -+--+

 $put_id_vm_port is that your vm's port that attached your network. when
 your instance and floatingip is like below
 root@control:~# nova list

+--+---++
--
 +
 | ID   | Name  | Status | Networks
 |

+--+---++
--
 +
 | a7b32a1d-25b7-4efe-97ba-1dafd478ef2b | test0 | ACTIVE |
admin=172.16.1.3
 |

+--+---++
--
 +
 root@control:~# quantum port-list --
--device_id=a7b32a1d-25b7-4efe-97ba-
 1dafd478ef2b

+--+--+---+--
--

-
--
 +
 | id   | name | mac_address   |
 fixed_ips
 |

+--+--+---+--
--

 -+--+

 you can associate floatingip to instance like this.
 # quantum floatingip-associate abfb3889-32f4-4854-bd61-6fb37e406faa
 3be818d4-b4e9-4e9f-b42f-66701bd57b47


 
  2) How can I know whether controller node and compute is connected?

 $ nova-manage service list
 command show that what nova services is running.

 
  The status of Controller node - I can't see any resources.
  a.Overview of Project on horizon
 i.Quota Summary is empty
 1.Used of Available Instances : NULL
 2.Used of Available vCPUs : NULL
 3.Used MB of MB Available RAM : NULL
 
  == Error Log ==
 
  root@node1:/home/zeus# quantum floatingip-create --tenant-id
 7230c184c85141b59f6a0df0843ea0d2 ext_net
  Created a new floatingip:
  +-+--+
  | Field   | Value|
  +-+--+
  | fixed_ip_address

Re: [Openstack] Question: how to make floating ip pools?

2012-11-27 Thread Choe, Cheng-Dae
Hi..~
--
Choe, Cheng-Dae
http://blog.woosum.net
twitter: kiddtm

2012. 11. 28., 오전 12:28, Ahmed Al-Mehdi ah...@coraid.com 작성:

 Thank you for sending the link to your script, much appreciated.
 
 Can you please shed some light when to use the —tenant_id=admin and 
 --tenant_id=proj_one (a tenant other than admin tenant) when issuing the 
 quantum command, e.g. creating external/internl network, sub-net, launching 
 VM, etc.

when first run it require to create external network. so we require admin 
tenant, admin user
$ . openrc admin
$ vm_create.sh # without argument then it create external/internal networks 
only
$ vm_create.sh admin_vm  # then create admin user's instance named admin_vm
$ . openrc demo# switch to demo tenant
$ vm_create.sh demo_vm  # create demo tenant's internal networks and create 
instance named demo_vm

in summary
- when create external network, it requires admin tenant, admin user
- the other things are run by and tenant, user

 
 
 In your script, do you assume the user has set OS_TENANT__NAME to admin or 
 proj_one?
 
 Thank you,
 Ahmed.
 
 
 From: Choe, Cheng-Dae white...@gmail.com
 Date: Tuesday, November 27, 2012 7:07 AM
 To: Ahmed Al-Mehdi ah...@coraid.com
 Cc: 이창만 cm224@samsung.com, openstack@lists.launchpad.net 
 openstack@lists.launchpad.net, Bilel Msekni 
 bilel.mse...@telecom-sudparis.eu
 Subject: Re: [Openstack] Question: how to make floating ip pools?
 
 Please refer my vm creation script
 http://blog.woosum.net/archives/990
 
 2012년 11월 27일 화요일에 Ahmed Al-Mehdi님이 작성:
 Hello,
 
 If you don't mind me asking, how did you create/launch the VM instance
 using the Cirros image?  Did you use Horizon or command line?  If command
 line, can you please share the commands you used?
 
 Thank you,
 Ahmed.
 
 
 On 11/27/12 1:31 AM, 이창만 cm224@samsung.com wrote:
 
 Thanks a lot guys.
 
 I've solved my issue for your advice. :)
 It was caused by Port_id and Nova.conf of compute node.
 Now I have to deploy swift and lunch vm instance using iso.
 I'm appreciate if you answer my foolish question.
 
 Best Regard.
 
 
  -Original Message-
  From: Choe, Cheng-Dae [mailto:white...@gmail.com]
  Sent: Tuesday, November 27, 2012 4:46 PM
  To: 이창만
  Cc: openstack@lists.launchpad.net
  Subject: Re: [Openstack] Question: how to make floating ip pools?
 
  Hi...
  --
  Choe, Cheng-Dae
  http://blog.woosum.net
  twitter: kiddtm
 
  2012. 11. 27., 오후 2:59, 이창만 cm224@samsung.com 작성:
 
  
   Hello,
  
   I am doing below guide.
   https://github.com/mseknibilel/OpenStack-Folsom-Install-
  guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst
  
   At Ch.11 Your First VM, I've encountered a error.
   My question is:
   1) What is the $put_id_floating_ip and $put_id_vm_port?
   e.g.) $ quantum floatingip-associate $put_id_floating_ip
 $put_id_vm_port
  put_id_floating_ip  is your floating id. below command show your
 floatingip.
  # quantum floatingip-list
 
 +--+--+--
 --
  -+--+
  | id   | fixed_ip_address |
  floating_ip_address | port_id  |
 
 +--+--+--
 --
  -+--+
  | abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
  | 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |
 
 +--+--+--
 --
  -+--+
 
  $put_id_vm_port is that your vm's port that attached your network. when
  your instance and floatingip is like below
  root@control:~# nova list
 
 +--+---++
 --
  +
  | ID   | Name  | Status | Networks
  |
 
 +--+---++
 --
  +
  | a7b32a1d-25b7-4efe-97ba-1dafd478ef2b | test0 | ACTIVE |
 admin=172.16.1.3
  |
 
 +--+---++
 --
  +
  root@control:~# quantum port-list --
 --device_id=a7b32a1d-25b7-4efe-97ba-
  1dafd478ef2b
 
 +--+--+---+--
 --
 
 -
 --
  +
  | id   | name | mac_address   |
  fixed_ips
  |
 
 +--+--+---+--
 --
 
  -+--+
 
  you can associate floatingip to instance like this.
  # quantum floatingip-associate abfb3889-32f4-4854-bd61-6fb37e406faa
  3be818d4-b4e9-4e9f-b42f-66701bd57b47
 
 
  
   2) How can I know whether controller node and compute is connected?
 
  $ nova-manage service list
  command show that what nova services is running.
 
  
   The status of Controller node

[Openstack] Question: how to make floating ip pools?

2012-11-26 Thread 이창만

Hello,

I am doing below guide.
https://github.com/mseknibilel/OpenStack-Folsom-Install-guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst

At Ch.11 Your First VM, I've encountered a error.
My question is:
1) What is the $put_id_floating_ip and $put_id_vm_port?
e.g.) $ quantum floatingip-associate $put_id_floating_ip $put_id_vm_port

2) How can I know whether controller node and compute is connected?

The status of Controller node - I can't see any resources.
a.Overview of Project on horizon
i.Quota Summary is empty
1.Used of Available Instances : NULL
2.Used of Available vCPUs : NULL
3.Used MB of MB Available RAM : NULL

== Error Log ==

root@node1:/home/zeus# quantum floatingip-create --tenant-id 
7230c184c85141b59f6a0df0843ea0d2 ext_net
Created a new floatingip:
+-+--+
| Field   | Value|
+-+--+
| fixed_ip_address|  |
| floating_ip_address | 192.168.2.3  |
| floating_network_id | 1d6b740f-3f19-482b-a0b8-b4bcd83d5b3b |
| id  | fd6429bd-cf71-45c0-bf0b-3c80e1fe527b |
| port_id |  |
| router_id   |  |
| tenant_id   | 7230c184c85141b59f6a0df0843ea0d2 |
+-+--+
root@node1:/home/zeus# quantum port-list
+--+--+---++
| id   | name | mac_address   | fixed_ips   
   |
+--+--+---++
| 1a284c3e-bacf-4281-a1a2-b8d3f485dab1 |  | fa:16:3e:0d:4e:c0 | 
{subnet_id: 994af63f-d5f2-492d-9229-aa878651b95d, ip_address: 
192.168.2.2} |
| 1a93a78e-cb59-4647-bf13-49e3553bb2aa |  | fa:16:3e:b1:9c:10 | 
{subnet_id: b9a8c9b4-7ebf-43c6-b8d5-afb44c13ba54, ip_address: 
10.10.10.1}  |
| d9b3496d-89e6-4ae7-b117-e22048acb6ef |  | fa:16:3e:50:e9:91 | 
{subnet_id: 994af63f-d5f2-492d-9229-aa878651b95d, ip_address: 
192.168.2.3} |
| ed32a365-48ce-4f94-8b7f-6e02c8d876d3 |  | fa:16:3e:2d:bc:93 | 
{subnet_id: b9a8c9b4-7ebf-43c6-b8d5-afb44c13ba54, ip_address: 
10.10.10.2}  |
+--+--+---++
root@node1:/home/zeus# quantum floatingip-associate 
fd6429bd-cf71-45c0-bf0b-3c80e1fe527b 1a284c3e-bacf-4281-a1a2-b8d3f485dab1
Bad floatingip request: Port 1a284c3e-bacf-4281-a1a2-b8d3f485dab1 is associated 
with a different tenant than Floating IP fd6429bd-cf71-45c0-bf0b-3c80e1fe527b 
and therefore cannot be bound.
root@node1:/home/zeus# quantum floatingip-associate 
fd6429bd-cf71-45c0-bf0b-3c80e1fe527b d9b3496d-89e6-4ae7-b117-e22048acb6ef
Bad floatingip request: Port d9b3496d-89e6-4ae7-b117-e22048acb6ef is associated 
with a different tenant than Floating IP fd6429bd-cf71-45c0-bf0b-3c80e1fe527b 
and therefore cannot be bound.



== All Sequence and log ==


root@node1:/home/zeus# keystone tenant-create --name project_one
+-+--+
|   Property  |  Value   |
+-+--+
| description |  |
|   enabled   |   True   |
|  id | 7230c184c85141b59f6a0df0843ea0d2 |
| name|   project_one|
+-+--+
root@node1:/home/zeus# keystone user-create --name=user_one --pass=user_one 
--tenant-id 7230c184c85141b59f6a0df0843ea0d2 --email=user_...@domain.com
+--+-+
| Property |  Value 
 |
+--+-+
|  email   |   
user_...@domain.com   |
| enabled  |   True 
 |
|id| 
0f85641b96e24857a857bc70ecef7752|
|   name   | user_one   

Re: [Openstack] Question: how to make floating ip pools?

2012-11-26 Thread Choe, Cheng-Dae
Hi...
--
Choe, Cheng-Dae
http://blog.woosum.net
twitter: kiddtm

2012. 11. 27., 오후 2:59, 이창만 cm224@samsung.com 작성:

 
 Hello,
 
 I am doing below guide.
 https://github.com/mseknibilel/OpenStack-Folsom-Install-guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst
 
 At Ch.11 Your First VM, I've encountered a error.
 My question is:
 1) What is the $put_id_floating_ip and $put_id_vm_port?
 e.g.) $ quantum floatingip-associate $put_id_floating_ip $put_id_vm_port
put_id_floating_ip  is your floating id. below command show your floatingip.
# quantum floatingip-list
+--+--+-+--+
| id   | fixed_ip_address | floating_ip_address 
| port_id  |
+--+--+-+--+
| abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
| 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |
+--+--+-+--+

$put_id_vm_port is that your vm's port that attached your network. when your 
instance and floatingip is like below
root@control:~# nova list
+--+---++--+
| ID   | Name  | Status | Networks |
+--+---++--+
| a7b32a1d-25b7-4efe-97ba-1dafd478ef2b | test0 | ACTIVE | admin=172.16.1.3 |
+--+---++--+
root@control:~# quantum port-list -- 
--device_id=a7b32a1d-25b7-4efe-97ba-1dafd478ef2b
+--+--+---+---+
| id   | name | mac_address   | fixed_ips   
  |
+--+--+---+---+
| 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |  | fa:16:3e:fd:9a:c5 | 
{subnet_id: f5a5e76c-3884-4438-b698-39fd30dc5ec5, ip_address: 
172.16.1.3} |
+--+--+---+---+
root@control:~# quantum floatingip-list
+--+--+-+--+
| id   | fixed_ip_address | floating_ip_address 
| port_id  |
+--+--+-+--+
| abfb3889-32f4-4854-bd61-6fb37e406faa | 172.16.1.3   | 10.100.1.131
| 3be818d4-b4e9-4e9f-b42f-66701bd57b47 |
+--+--+-+--+

you can associate floatingip to instance like this.
# quantum floatingip-associate abfb3889-32f4-4854-bd61-6fb37e406faa 
3be818d4-b4e9-4e9f-b42f-66701bd57b47


 
 2) How can I know whether controller node and compute is connected?

$ nova-manage service list
command show that what nova services is running.

 
 The status of Controller node - I can't see any resources.
 a.Overview of Project on horizon
   i.Quota Summary is empty
   1.Used of Available Instances : NULL
   2.Used of Available vCPUs : NULL
   3.Used MB of MB Available RAM : NULL
 
 == Error Log ==
 
 root@node1:/home/zeus# quantum floatingip-create --tenant-id 
 7230c184c85141b59f6a0df0843ea0d2 ext_net
 Created a new floatingip:
 +-+--+
 | Field   | Value|
 +-+--+
 | fixed_ip_address|  |
 | floating_ip_address | 192.168.2.3  |
 | floating_network_id | 1d6b740f-3f19-482b-a0b8-b4bcd83d5b3b |
 | id  | fd6429bd-cf71-45c0-bf0b-3c80e1fe527b |
 | port_id |  |
 | router_id   |  |
 | tenant_id   | 7230c184c85141b59f6a0df0843ea0d2 |
 +-+--+
 root@node1:/home/zeus# quantum port-list
 +--+--+---++
 | id   | name | mac_address   | fixed_ips 
  

Re: [Openstack] Question: how to make floating ip pools?

2012-11-26 Thread Ahmed Al-Mehdi
Can you please retry issuing the command quantum floatingip-associate …
with the additional option --tenant-id 7230c184c85141b59f6a0df0843ea0d2.

-Ahmed.



On 11/26/12 9:59 PM, 이창만 cm224@samsung.com wrote:


Hello,

I am doing below guide.
https://github.com/mseknibilel/OpenStack-Folsom-Install-guide/blob/VLAN/2N
ICs/OpenStack_Folsom_Install_Guide_WebVersion.rst

At Ch.11 Your First VM, I've encountered a error.
My question is:
1) What is the $put_id_floating_ip and $put_id_vm_port?
e.g.) $ quantum floatingip-associate $put_id_floating_ip $put_id_vm_port

2) How can I know whether controller node and compute is connected?

The status of Controller node - I can't see any resources.
a.Overview of Project on horizon
   i.Quota Summary is empty
   1.Used of Available Instances : NULL
   2.Used of Available vCPUs : NULL
   3.Used MB of MB Available RAM : NULL

== Error Log ==

root@node1:/home/zeus# quantum floatingip-create --tenant-id
7230c184c85141b59f6a0df0843ea0d2 ext_net
Created a new floatingip:
+-+--+
| Field   | Value|
+-+--+
| fixed_ip_address|  |
| floating_ip_address | 192.168.2.3  |
| floating_network_id | 1d6b740f-3f19-482b-a0b8-b4bcd83d5b3b |
| id  | fd6429bd-cf71-45c0-bf0b-3c80e1fe527b |
| port_id |  |
| router_id   |  |
| tenant_id   | 7230c184c85141b59f6a0df0843ea0d2 |
+-+--+
root@node1:/home/zeus# quantum port-list
+--+--+---+---
--
---+
| id   | name | mac_address   |
fixed_ips
 |
+--+--+---+---
--
---+
| 1a284c3e-bacf-4281-a1a2-b8d3f485dab1 |  | fa:16:3e:0d:4e:c0 |
{subnet_id: 994af63f-d5f2-492d-9229-aa878651b95d, ip_address:
192.168.2.2} |
| 1a93a78e-cb59-4647-bf13-49e3553bb2aa |  | fa:16:3e:b1:9c:10 |
{subnet_id: b9a8c9b4-7ebf-43c6-b8d5-afb44c13ba54, ip_address:
10.10.10.1}  |
| d9b3496d-89e6-4ae7-b117-e22048acb6ef |  | fa:16:3e:50:e9:91 |
{subnet_id: 994af63f-d5f2-492d-9229-aa878651b95d, ip_address:
192.168.2.3} |
| ed32a365-48ce-4f94-8b7f-6e02c8d876d3 |  | fa:16:3e:2d:bc:93 |
{subnet_id: b9a8c9b4-7ebf-43c6-b8d5-afb44c13ba54, ip_address:
10.10.10.2}  |
+--+--+---+---
--
---+
root@node1:/home/zeus# quantum floatingip-associate
fd6429bd-cf71-45c0-bf0b-3c80e1fe527b 1a284c3e-bacf-4281-a1a2-b8d3f485dab1
Bad floatingip request: Port 1a284c3e-bacf-4281-a1a2-b8d3f485dab1 is
associated with a different tenant than Floating IP
fd6429bd-cf71-45c0-bf0b-3c80e1fe527b and therefore cannot be bound.
root@node1:/home/zeus# quantum floatingip-associate
fd6429bd-cf71-45c0-bf0b-3c80e1fe527b d9b3496d-89e6-4ae7-b117-e22048acb6ef
Bad floatingip request: Port d9b3496d-89e6-4ae7-b117-e22048acb6ef is
associated with a different tenant than Floating IP
fd6429bd-cf71-45c0-bf0b-3c80e1fe527b and therefore cannot be bound.



== All Sequence and log ==


root@node1:/home/zeus# keystone tenant-create --name project_one
+-+--+
|   Property  |  Value   |
+-+--+
| description |  |
|   enabled   |   True   |
|  id | 7230c184c85141b59f6a0df0843ea0d2 |
| name|   project_one|
+-+--+
root@node1:/home/zeus# keystone user-create --name=user_one
--pass=user_one --tenant-id 7230c184c85141b59f6a0df0843ea0d2
--email=user_...@domain.com
+--+--
---+
| Property |
Value  |
+--+--
---+
|  email   |
user_...@domain.com   |
| enabled  |
True  |
|id|
0f85641b96e24857a857bc70ecef7752
  |
|   name   |
user_one|
| password |
$6$rounds=4$1onptUe8GDtkmQpa$XGZbdFVuEyfhc9E27N6cxnJbV.iiIY/2SZGEBsAfe
ILXcBLRecBwWAQ4bx1S1EdX/z.634rYubjmbV0W1dpX6/ |
| tenantId 

[Openstack] Question about nova-api log message entries

2012-11-19 Thread Ahmed Al-Mehdi
Hello,

I am running into an issue creating a VM instance (RPC message timeout in 
nova-network).   I have a few questions about the following entires in 
nova-api.log file:

1)   2012-11-18 15:50:27 DEBUG nova.openstack.common.rpc.amqp [-] Making 
asynchronous call on network ... from (pid=1688) multicall 
/usr/lib/python2.7/dist-packages/nova/openstack/common/rpc/amqp.py:351
2)   2012-11-18 15:50:27 DEBUG nova.openstack.common.rpc.amqp [-] MSG_ID is 
4b1f8e549f1448589d9d35b7eb4b6364 from (pid=1688) multicall 
/usr/lib/python2.7/dist-packages/nova/openstack/common/rpc/amqp.py:354
3)   2012-11-18 15:50:28 DEBUG nova.compute.api 
[req-f2b4df1f-6c29-48dc-991b-93fb5eb29d08 ce016bb05df949ebbafcc7c165359d7c 
ce1e819636744dc680fa5515f6475e87] Going to run 1 instances... from (pid=1688) 
_create_instance /usr/lib/python2.7/dist-packages/nova/compute/api.py:490
4)   2012-11-18 15:50:28 DEBUG nova.openstack.common.rpc.amqp [-] Making 
asynchronous cast on scheduler... from (pid=1688) cast 
/usr/lib/python2.7/dist-packages/nova/openstack/common/rpc/amqp.py:376


Questions:
 - Is log message 1 and 4 related to  nova-api sending a message to 
nova-network and nova-scheduler through the rabbitmq queue server?
 - I have a two node setup, one controller-node (on which no nova-compute 
running) and one compute-node (on which nova-compute is running).  Who/which 
service on which node is printing log message 3.  The reason I ask is because 
log message 3 is prefixed with nova.compute.api, but I feel at this point no 
message has reached nova-compute service on compute-node.
 - The MSG_ID in log message 2 pertains to which message?
 - Out of curiosity, what is the difference between Making asynchronous call 
(log message 1) vs. Making asynchronous cast (log message 2).

Any info in understanding the log messages would be highly appreciated.

Thank you,
Ahmed.

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about pv mode on compute and network

2012-11-09 Thread John Garbutt
Hi,

Sorry I missed this, I am still behind on my email.

In the current model every XCP node gets a VM with nova-compute running on it, 
and it must be a linux PV VM.

That node does several management tasks. For example, with raw images, it will 
stream the image into a VDI attached to that VM. In the current world, you need 
to be a PV VM for the hotplug of that volume to be allowed. So, to cut a long 
story short, yes, it needs to be a PV VM.

I noticed some storage questions. Generally you should have a single local SR 
of type EXT on each of your XCP hosts. Hopefully that is all covered in the 
Admin guide. Let me know if anything is confusing, and I will update the guide 
to help clarify things.

If you want shared storage you need to look towards using Cinder. So 
attaching volumes, doing boot-from-volume, and other such things. Right now we 
have support for things that produce iSCSI targets, and some NFS shared storage 
support is just dropping into Grizzly over the next week or so.

I hope that helps,
John

 -Original Message-
 From: openstack-bounces+john.garbutt=citrix@lists.launchpad.net
 [mailto:openstack-bounces+john.garbutt=citrix@lists.launchpad.net] On
 Behalf Of Egoitz Aurrekoetxea Aurre
 Sent: 04 November 2012 10:32
 To: openstack@lists.launchpad.net
 Subject: Re: [Openstack] Question about pv mode on compute and network
 
  or just I nova-compute and nova-network -- 1 nova-compute and nova... I
 wanted to mean.
 
 
 El 04/11/2012, a las 11:04, Egoitz Aurrekoetxea Aurre ego...@ramattack.net
 escribió:
 
  Hi all,
 
  Why the nova-compute and nova-network services should run in pv mode??.
 What's the real reason for it?. If I have a farm of five servers of Xen Cloud
 Platform. all of them belonging to the same pool (same cloud) should I have a
 nova-compute per xcp server?? or just I nova-compute and nova-network will
 handle the whole pool smoothly??.
 
  Best regards,
 
 
  ___
  Mailing list: https://launchpad.net/~openstack
  Post to : openstack@lists.launchpad.net
  Unsubscribe : https://launchpad.net/~openstack
  More help   : https://help.launchpad.net/ListHelp
 
 
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about pv mode on compute and network

2012-11-04 Thread Egoitz Aurrekoetxea Aurre
 or just I nova-compute and nova-network -- 1 nova-compute and nova….. I 
 wanted to mean…


El 04/11/2012, a las 11:04, Egoitz Aurrekoetxea Aurre ego...@ramattack.net 
escribió:

 Hi all,
 
 Why the nova-compute and nova-network services should run in pv mode??. 
 What's the real reason for it?. If I have a farm of five servers of Xen Cloud 
 Platform… all of them belonging to the same pool (same cloud) should I have a 
 nova-compute per xcp server?? or just I nova-compute and nova-network will 
 handle the whole pool smoothly??.
 
 Best regards,
 
 
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question about instance_metadata and instance_system_metadata

2012-11-01 Thread hzyangtk
Hi, all

Recently, I find out that when the instance with some metadata or 
system_metadata was deleted, but instance_metadata and instance_system_metadata 
these two tables are still keep the metadata and system_metadata deleted=0 
(means these datas are not deleted).
I am a little confused about this. Is this a bug or other somethings ?

Thanks very much.


2012-11-01



hzyangtk___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Keystone RBAC

2012-10-03 Thread Shake Chen
Hi

I also have question about RBAC.

when we can setting the roles permission in Horizon?


On Thu, Oct 4, 2012 at 2:56 AM, Dolph Mathews
dolph.math...@rackspace.comwrote:

  (replying on list)

  RBAC policy enforce is already implemented on consuming services and
 default policies are provided by policy.json files (e.g.
 https://github.com/openstack/nova/blob/master/etc/nova/policy.json ).

  We haven't yet implemented a method for services to consume policy blobs
 from Identity API v3, /v3/policies (which itself is still in development),
 rather than loading policy.json files.

  For an example of scoping RBAC per project, see the admin_or_owner rule
 in nova's policy.json above.

  As for the efficiency of policy storage, I'm not clear on what your
 concerns are?

  -Dolph
   --
 *From:* MS. Faraji [ms.far...@utoronto.ca]
 *Sent:* Wednesday, October 03, 2012 1:34 PM
 *To:* Dolph Mathews
 *Subject:* Question about Keystone RBAC

   Hi,

 I sent an email to inquire about RBAC implementation in Keystone before,
 and you generously shared your information. However, there are a couple of
 questions that I have in mind.
 I searched the Internet and documents; however, I did not find useful
 information about them. I hope you can help me to find it out.

 1) Consider the enforce API is implemented, which side should use it?
 Service or Keystone itself. If Keystone uses this function, how does it
 know about the action that a user
 wants to perform on a resource. If service call it as an API, what is the
 endpoint? How services use authorization in Keystone?

 2) Can roles and associated actions be defined in the scope of project or
 domain? For example demo can do release in project 1 but not in project 2.

 3) Is the plain storage of capabilities ( no data structure) efficient? In
 terms of required storage space and later lookups.

 Thanks in advance for your help and assistance,
 I look forward to your response.


 Moh,


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp




-- 
Shake Chen
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Keystone RBAC

2012-10-03 Thread Dolph Mathews
That will provided by Identity API v3, currently in draft:
https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md

The when is first dependent on:

1) Identity API v3 support in keystone
https://review.openstack.org/#/c/12106/
2) Identity API v3 support in keystoneclient
https://review.openstack.org/#/c/12806/
3) services need to consume the centralized policy info, probably through
common middleware
4) adding UI support in horizon

An open question: are you looking to modify policy per service or do you
need policy granularity per endpoint?

-Dolph


On Wed, Oct 3, 2012 at 7:29 PM, Shake Chen shake.c...@gmail.com wrote:

 Hi

 I also have question about RBAC.

 when we can setting the roles permission in Horizon?


 On Thu, Oct 4, 2012 at 2:56 AM, Dolph Mathews dolph.math...@rackspace.com
  wrote:

  (replying on list)

  RBAC policy enforce is already implemented on consuming services and
 default policies are provided by policy.json files (e.g.
 https://github.com/openstack/nova/blob/master/etc/nova/policy.json ).

  We haven't yet implemented a method for services to consume policy
 blobs from Identity API v3, /v3/policies (which itself is still in
 development), rather than loading policy.json files.

  For an example of scoping RBAC per project, see the admin_or_owner rule
 in nova's policy.json above.

  As for the efficiency of policy storage, I'm not clear on what your
 concerns are?

  -Dolph
   --
 *From:* MS. Faraji [ms.far...@utoronto.ca]
 *Sent:* Wednesday, October 03, 2012 1:34 PM
 *To:* Dolph Mathews
 *Subject:* Question about Keystone RBAC

   Hi,

 I sent an email to inquire about RBAC implementation in Keystone before,
 and you generously shared your information. However, there are a couple of
 questions that I have in mind.
 I searched the Internet and documents; however, I did not find useful
 information about them. I hope you can help me to find it out.

 1) Consider the enforce API is implemented, which side should use it?
 Service or Keystone itself. If Keystone uses this function, how does it
 know about the action that a user
 wants to perform on a resource. If service call it as an API, what is the
 endpoint? How services use authorization in Keystone?

 2) Can roles and associated actions be defined in the scope of project or
 domain? For example demo can do release in project 1 but not in project 2.

 3) Is the plain storage of capabilities ( no data structure) efficient?
 In terms of required storage space and later lookups.

 Thanks in advance for your help and assistance,
 I look forward to your response.


 Moh,


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp




 --
 Shake Chen



 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] question about multi-host network configuration

2012-09-17 Thread Xin Zhao

Hello,

Our openstack cluster has 2 racks of physical nodes, I want to set up 
two openstack network service hosts, each serving one rack.

Can I do that?

Thanks,
Xin



smime.p7s
Description: S/MIME Cryptographic Signature
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about multi-host network configuration

2012-09-17 Thread Razique Mahroua
Sure, just install nova-network on every node and enable themulti_host=true flag on every nova.conf file :)
Nuage  Co - Razique Mahrouarazique.mahr...@gmail.com

Le 17 sept. 2012 à 16:38, Xin Zhao xz...@bnl.gov a écrit :Hello,Our openstack cluster has 2 racks of physical nodes, I want to set up two openstack network service hosts, each serving one rack.Can I do that?Thanks,Xin___Mailing list: https://launchpad.net/~openstackPost to : openstack@lists.launchpad.netUnsubscribe : https://launchpad.net/~openstackMore help : https://help.launchpad.net/ListHelp___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about multi-host network configuration

2012-09-17 Thread Xin Zhao

  
  
Sorry I should have made it more clear:
  among the hosts in one rack, only one of them have 
  2 nics, one being internet facing, all other nodes have only one
  internal nic. So I can't run 
  nova-network on *every* compute node. 
  
  Xin
  
  On 9/17/2012 10:55 AM, Razique Mahroua wrote:


  
  Sure, just install nova-network on every node and enable the
  multi_host=true flag on every nova.conf file :)
  
  
  

  Nuage  Co -
  Razique Mahroua
razique.mahr...@gmail.com
  
  
  


  Le 17 sept. 2012  16:38, Xin Zhao xz...@bnl.gov
a crit :
  
  Hello,

Our openstack cluster has 2 racks of physical nodes, I want
to set up two openstack network service hosts, each serving
one rack.
Can I do that?

Thanks,
Xin

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
  


  


  



smime.p7s
Description: S/MIME Cryptographic Signature
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about multi-host network configuration

2012-09-17 Thread Razique Mahroua
ok in such case, install nova-network on both servers having the two nics, which network mode do you intend to use ?
Nuage  Co - Razique Mahrouarazique.mahr...@gmail.com

Le 17 sept. 2012 à 16:59, Xin Zhao xz...@bnl.gov a écrit :
  

  
  
Sorry I should have made it more clear:
  among the hosts in one rack, only one of them have 
  2 nics, one being internet facing, all other nodes have only one
  internal nic. So I can't run 
  nova-network on *every* compute node. 
  
  Xin
  
  On 9/17/2012 10:55 AM, Razique Mahroua wrote:


  
  Sure, just install nova-network on every node and enable the
  multi_host=true flag on every nova.conf file :)
  
  
  

  Nuage  Co -
  Razique Mahroua
razique.mahr...@gmail.com
  
  Pièce jointe.jpeg
  


  Le 17 sept. 2012 à 16:38, Xin Zhao xz...@bnl.gov
a écrit :
  
  Hello,

Our openstack cluster has 2 racks of physical nodes, I want
to set up two openstack network service hosts, each serving
one rack.
Can I do that?

Thanks,
Xin

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
  


  


  

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about multi-host network configuration

2012-09-17 Thread Xin Zhao

  
  
I have been using flatdhcp mode in a
  single-host network configuration. Will flatdhcp also work in
  this 2 nova-network setting, or a vlan 
  mode is preferred here? 
  
  Thanks,
  Xin
  
  
  On 9/17/2012 11:05 AM, Razique Mahroua wrote:


  
  ok in such case, install nova-network on both servers having the
  two nics, which network mode do you intend to use ?
  

  Nuage  Co -
  Razique Mahroua
razique.mahr...@gmail.com
  
  
  


  Le 17 sept. 2012  16:59, Xin Zhao xz...@bnl.gov
a crit :
  
  


  Sorry I should have made it
more clear: among the hosts in one rack, only one of
them have 
2 nics, one being internet facing, all other nodes have
only one internal nic. So I can't run 
nova-network on *every* compute node. 

Xin

On 9/17/2012 10:55 AM, Razique Mahroua wrote:
  
  

Sure, just install nova-network on every node and enable
the
multi_host=true flag on every nova.conf file :)



   Nuage  Co - Razique Mahroua
  razique.mahr...@gmail.com

Pice
  jointe.jpeg 
  
  
Le 17 sept. 2012  16:38, Xin Zhao xz...@bnl.gov

  a crit :

Hello,
  
  Our openstack cluster has 2 racks of physical
  nodes, I want to set up two openstack network
  service hosts, each serving one rack.
  Can I do that?
  
  Thanks,
  Xin
  
  ___
  Mailing list: https://launchpad.net/~openstack
  Post to : openstack@lists.launchpad.net
  Unsubscribe : https://launchpad.net/~openstack
  More help : https://help.launchpad.net/ListHelp

  
  

  
  

  


  


  



smime.p7s
Description: S/MIME Cryptographic Signature
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about multi-host network configuration

2012-09-17 Thread Narayan Desai
Sure, we've been running in that sort of configuration since bexar.
The only tricky part is that you need to make sure that you run
nova-api-metadata on each nova-network server, and you need to make
sure that floating IPs can get to the appropriate fixed addresses (ie
if a fixed address is not routed from the nova-network instance where
the floating address is served from). That last bit pretty much
requires setting up something like ospf for route exchange between
your nova-network servers. (fixed networks aren't pegged to one n-net
instance or the other, so they can move over time)
 -nld

On Mon, Sep 17, 2012 at 9:38 AM, Xin Zhao xz...@bnl.gov wrote:
 Hello,

 Our openstack cluster has 2 racks of physical nodes, I want to set up two
 openstack network service hosts, each serving one rack.
 Can I do that?

 Thanks,
 Xin


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question NovAclient + Keystone

2012-09-10 Thread Radhakrishnan, Ganesan (Ganesh)
Hello,
Does Python-novaclient support https for interacting w/ keystone service? If 
yes, where can I find more information about the details - packages, versions 
depedndecies etc? Thanks. Ganesh

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question regarding who the nova database is updated

2012-08-28 Thread Heng Xu
Hi folks:
I was trying to add a new column to the Nova database table compute_nodes. 
however, I was not sure of how it is updated periodically, all I know is that 
comsume_from_instance() function in host_manager.py update the memory, then I 
was not able to find how nova subsequently update the compute_nodes table in 
the database. Any help will be appreciated, please let me know the exact 
location (file, function, etc.) and how I can mimc that to modify my own new 
field in the compute_nodes table. Thanks in advance.

Heng

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question regarding who the nova database is updated

2012-08-28 Thread Joseph Suh
Heng,

I maybe wrong as the latest code is somewhat different from the one I followed 
last time, but it looks like the information is update at line 440 in 
nova/nova/compute/resource_tracker.py.

Thanks,

Joseph

- Original Message -
From: Heng Xu shouhengzhang...@mail.utoronto.ca
To: openstack@lists.launchpad.net
Sent: Tuesday, August 28, 2012 1:52:18 PM
Subject: [Openstack] Question regarding who the nova database is updated



Hi folks: 
I was trying to add a new column to the Nova database table compute_nodes. 
however, I was not sure of how it is updated periodically, all I know is that 
comsume_from_instance() function in host_manager.py update the memory, then I 
was not able to find how nova subsequently update the compute_nodes table in 
the database. Any help will be appreciated, please let me know the exact 
location (file, function, etc.) and how I can mimc that to modify my own new 
field in the compute_nodes table. Thanks in advance. 

Heng 


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question about undo delete in Swift with Object Version

2012-08-22 Thread ZHOU Yuan
Hi stackers,

I'm trying to understand the object version feature in Swift.
In the current implementation we can store multi-versions of the same
object in Swift. However when you delete it from the container, the
latest version is deleted and this is not recoverable, right?

Is there any magic to restore the deleted version? As I know, some
users want to keep the history versions, like svn.

--yuan

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about undo delete in Swift with Object Version

2012-08-22 Thread John Dickinson
With the current implementation of versioning in Swift, this isn't possible. 
It's better to think of the feature as versioned writes.

--John


On Aug 22, 2012, at 12:13 AM, ZHOU Yuan dunk...@gmail.com wrote:

 Hi stackers,
 
 I'm trying to understand the object version feature in Swift.
 In the current implementation we can store multi-versions of the same
 object in Swift. However when you delete it from the container, the
 latest version is deleted and this is not recoverable, right?
 
 Is there any magic to restore the deleted version? As I know, some
 users want to keep the history versions, like svn.
 
 --yuan
 
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp



smime.p7s
Description: S/MIME cryptographic signature
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about undo delete in Swift with Object Version

2012-08-22 Thread ZHOU Yuan
Hi John,

Thanks, versioned writes sounds really cool!
Do you have any plan on this now?

On Wed, Aug 22, 2012 at 3:25 PM, John Dickinson m...@not.mn wrote:
 With the current implementation of versioning in Swift, this isn't possible. 
 It's better to think of the feature as versioned writes.

 --John


 On Aug 22, 2012, at 12:13 AM, ZHOU Yuan dunk...@gmail.com wrote:

 Hi stackers,

 I'm trying to understand the object version feature in Swift.
 In the current implementation we can store multi-versions of the same
 object in Swift. However when you delete it from the container, the
 latest version is deleted and this is not recoverable, right?

 Is there any magic to restore the deleted version? As I know, some
 users want to keep the history versions, like svn.

 --yuan

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question on tests

2012-08-22 Thread Joshua Harlow
Hi all,

I'm getting anvil to run tests and I was just wondering on a couple of tests I 
see there (the issues might be bugs?)

I have had to exclude the following since they error (when say swift isn't 
there, or memcache/ldap isn't there), should those instead be skipping 
themselves when there needed 3rd party libraries is not installed? Thoughts? 
That would seem more appropriate then errorring out (when those things really 
aren't core keystone…)

[
# These 2 seem to require swift, not always installed...
'test_swift_auth_middleware',
'test_s3_token_middleware',
# Aren't always installing memcache...
'test_backend_memcache',
# Oddness: 'unable to access signing dir /root/keystone-signing'
'test_nomemcache',
# Aren't always installing ldap...
'test_backend_ldap',
]

This running: http://pastebin.com/3Aaz4iLC

To accomplish this new feature if u want to try it on RHEL6+ (getting ubuntu 
back in shape for the core components that anvil is supporting)…

$ sudo ./smithy -a install
….
$ sudo ./smithy -p conf/personas/solo/keystone.yaml -a test
…

That Is It :-P

-Josh
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Flat DHCP networking

2012-08-21 Thread hitesh wadekar
Oh..I see.

I look forward to see your code for it :)

Thanks,
Hitesh

On Tue, Aug 21, 2012 at 11:27 AM, Eugene Kirpichov ekirpic...@gmail.comwrote:

 Heh, that's an article by my colleague Piotr Siwczak, which I already
 read very thouroughly during the review process - but thanks ;)

 Actually I already found the answer to my question and added it to the
 documentation (when the codereview is completed) - it was related to
 nova-dhcpbridge script.

 On Mon, Aug 20, 2012 at 10:21 PM, hitesh wadekar
 hitesh.wade...@gmail.com wrote:
  May be this article will help.
 
 
 http://www.mirantis.com/blog/openstack-networking-flatmanager-and-flatdhcpmanager/
 
  Thanks,
  Hitesh
 
 
  On Tue, Aug 21, 2012 at 3:16 AM, Eugene Kirpichov ekirpic...@gmail.com
  wrote:
 
  Hi,
 
  I found the code. It's a dnsmasq dhcp-script called by dnsmasq for
  various events, it resides in nova/bin/nova-dhcpbridge and it, among
  other things, calls release_fixed_ip when the lease expires.
 
  On Sat, Aug 18, 2012 at 1:01 AM, Aaron Rosen aro...@nicira.com wrote:
   Hi Eugene,
  
   I'm not sure I have not looked at the code (I'm guessing that it
   probably
   keeps the lease around since it knows the VM is still active instead
 of
   recycling the ip address). Though this is just a guess. You should
 look
   at
   the implementation details if you are curious.
  
   Aaron
  
  
   On Sat, Aug 18, 2012 at 3:48 AM, Eugene Kirpichov 
 ekirpic...@gmail.com
   wrote:
  
   Thanks. And how will n-net react?
  
  
  
   18.08.2012, в 0:43, Aaron Rosen aro...@nicira.com написал(а):
  
   Hi Eugene,
  
   This means that if a VM stops it's DHCP client that nova-network will
   be
   aware of this since the VM will not attempt to renew it's DHCP lease.
  
   Aaron
  
   On Fri, Aug 17, 2012 at 5:58 PM, Eugene Kirpichov
   ekirpic...@gmail.com
   wrote:
  
   Hi,
  
   The documentation
  
  
  
 http://docs.openstack.org/diablo/openstack-compute/admin/content/configuring-flat-dhcp-networking.html
   has the passage: The nova-network service will track leases and
   releases in the database so it knows if a VM instance has stopped
   properly configuring via DHCP
  
   Can someone briefly explain me what this means, if possible with
 rough
   pointers to code?
   I don't recall nova noticing when my VM actually stopped properly
   configuring via DHCP.
  
   --
   Eugene Kirpichov
   http://www.linkedin.com/in/eugenekirpichov
  
   ___
   Mailing list: https://launchpad.net/~openstack
   Post to : openstack@lists.launchpad.net
   Unsubscribe : https://launchpad.net/~openstack
   More help   : https://help.launchpad.net/ListHelp
  
  
  
 
 
 
  --
  Eugene Kirpichov
  http://www.linkedin.com/in/eugenekirpichov
 
  ___
  Mailing list: https://launchpad.net/~openstack
  Post to : openstack@lists.launchpad.net
  Unsubscribe : https://launchpad.net/~openstack
  More help   : https://help.launchpad.net/ListHelp
 
 



 --
 Eugene Kirpichov
 http://www.linkedin.com/in/eugenekirpichov

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Flat DHCP networking

2012-08-20 Thread Eugene Kirpichov
Hi,

I found the code. It's a dnsmasq dhcp-script called by dnsmasq for
various events, it resides in nova/bin/nova-dhcpbridge and it, among
other things, calls release_fixed_ip when the lease expires.

On Sat, Aug 18, 2012 at 1:01 AM, Aaron Rosen aro...@nicira.com wrote:
 Hi Eugene,

 I'm not sure I have not looked at the code (I'm guessing that it probably
 keeps the lease around since it knows the VM is still active instead of
 recycling the ip address). Though this is just a guess. You should look at
 the implementation details if you are curious.

 Aaron


 On Sat, Aug 18, 2012 at 3:48 AM, Eugene Kirpichov ekirpic...@gmail.com
 wrote:

 Thanks. And how will n-net react?



 18.08.2012, в 0:43, Aaron Rosen aro...@nicira.com написал(а):

 Hi Eugene,

 This means that if a VM stops it's DHCP client that nova-network will be
 aware of this since the VM will not attempt to renew it's DHCP lease.

 Aaron

 On Fri, Aug 17, 2012 at 5:58 PM, Eugene Kirpichov ekirpic...@gmail.com
 wrote:

 Hi,

 The documentation

 http://docs.openstack.org/diablo/openstack-compute/admin/content/configuring-flat-dhcp-networking.html
 has the passage: The nova-network service will track leases and
 releases in the database so it knows if a VM instance has stopped
 properly configuring via DHCP

 Can someone briefly explain me what this means, if possible with rough
 pointers to code?
 I don't recall nova noticing when my VM actually stopped properly
 configuring via DHCP.

 --
 Eugene Kirpichov
 http://www.linkedin.com/in/eugenekirpichov

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp






-- 
Eugene Kirpichov
http://www.linkedin.com/in/eugenekirpichov

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Flat DHCP networking

2012-08-20 Thread hitesh wadekar
May be this article will help.

http://www.mirantis.com/blog/openstack-networking-flatmanager-and-flatdhcpmanager/


Thanks,
Hitesh

On Tue, Aug 21, 2012 at 3:16 AM, Eugene Kirpichov ekirpic...@gmail.comwrote:

 Hi,

 I found the code. It's a dnsmasq dhcp-script called by dnsmasq for
 various events, it resides in nova/bin/nova-dhcpbridge and it, among
 other things, calls release_fixed_ip when the lease expires.

 On Sat, Aug 18, 2012 at 1:01 AM, Aaron Rosen aro...@nicira.com wrote:
  Hi Eugene,
 
  I'm not sure I have not looked at the code (I'm guessing that it probably
  keeps the lease around since it knows the VM is still active instead of
  recycling the ip address). Though this is just a guess. You should look
 at
  the implementation details if you are curious.
 
  Aaron
 
 
  On Sat, Aug 18, 2012 at 3:48 AM, Eugene Kirpichov ekirpic...@gmail.com
  wrote:
 
  Thanks. And how will n-net react?
 
 
 
  18.08.2012, в 0:43, Aaron Rosen aro...@nicira.com написал(а):
 
  Hi Eugene,
 
  This means that if a VM stops it's DHCP client that nova-network will be
  aware of this since the VM will not attempt to renew it's DHCP lease.
 
  Aaron
 
  On Fri, Aug 17, 2012 at 5:58 PM, Eugene Kirpichov ekirpic...@gmail.com
 
  wrote:
 
  Hi,
 
  The documentation
 
 
 http://docs.openstack.org/diablo/openstack-compute/admin/content/configuring-flat-dhcp-networking.html
  has the passage: The nova-network service will track leases and
  releases in the database so it knows if a VM instance has stopped
  properly configuring via DHCP
 
  Can someone briefly explain me what this means, if possible with rough
  pointers to code?
  I don't recall nova noticing when my VM actually stopped properly
  configuring via DHCP.
 
  --
  Eugene Kirpichov
  http://www.linkedin.com/in/eugenekirpichov
 
  ___
  Mailing list: https://launchpad.net/~openstack
  Post to : openstack@lists.launchpad.net
  Unsubscribe : https://launchpad.net/~openstack
  More help   : https://help.launchpad.net/ListHelp
 
 
 



 --
 Eugene Kirpichov
 http://www.linkedin.com/in/eugenekirpichov

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Flat DHCP networking

2012-08-20 Thread Eugene Kirpichov
Heh, that's an article by my colleague Piotr Siwczak, which I already
read very thouroughly during the review process - but thanks ;)

Actually I already found the answer to my question and added it to the
documentation (when the codereview is completed) - it was related to
nova-dhcpbridge script.

On Mon, Aug 20, 2012 at 10:21 PM, hitesh wadekar
hitesh.wade...@gmail.com wrote:
 May be this article will help.

 http://www.mirantis.com/blog/openstack-networking-flatmanager-and-flatdhcpmanager/

 Thanks,
 Hitesh


 On Tue, Aug 21, 2012 at 3:16 AM, Eugene Kirpichov ekirpic...@gmail.com
 wrote:

 Hi,

 I found the code. It's a dnsmasq dhcp-script called by dnsmasq for
 various events, it resides in nova/bin/nova-dhcpbridge and it, among
 other things, calls release_fixed_ip when the lease expires.

 On Sat, Aug 18, 2012 at 1:01 AM, Aaron Rosen aro...@nicira.com wrote:
  Hi Eugene,
 
  I'm not sure I have not looked at the code (I'm guessing that it
  probably
  keeps the lease around since it knows the VM is still active instead of
  recycling the ip address). Though this is just a guess. You should look
  at
  the implementation details if you are curious.
 
  Aaron
 
 
  On Sat, Aug 18, 2012 at 3:48 AM, Eugene Kirpichov ekirpic...@gmail.com
  wrote:
 
  Thanks. And how will n-net react?
 
 
 
  18.08.2012, в 0:43, Aaron Rosen aro...@nicira.com написал(а):
 
  Hi Eugene,
 
  This means that if a VM stops it's DHCP client that nova-network will
  be
  aware of this since the VM will not attempt to renew it's DHCP lease.
 
  Aaron
 
  On Fri, Aug 17, 2012 at 5:58 PM, Eugene Kirpichov
  ekirpic...@gmail.com
  wrote:
 
  Hi,
 
  The documentation
 
 
  http://docs.openstack.org/diablo/openstack-compute/admin/content/configuring-flat-dhcp-networking.html
  has the passage: The nova-network service will track leases and
  releases in the database so it knows if a VM instance has stopped
  properly configuring via DHCP
 
  Can someone briefly explain me what this means, if possible with rough
  pointers to code?
  I don't recall nova noticing when my VM actually stopped properly
  configuring via DHCP.
 
  --
  Eugene Kirpichov
  http://www.linkedin.com/in/eugenekirpichov
 
  ___
  Mailing list: https://launchpad.net/~openstack
  Post to : openstack@lists.launchpad.net
  Unsubscribe : https://launchpad.net/~openstack
  More help   : https://help.launchpad.net/ListHelp
 
 
 



 --
 Eugene Kirpichov
 http://www.linkedin.com/in/eugenekirpichov

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp





-- 
Eugene Kirpichov
http://www.linkedin.com/in/eugenekirpichov

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Flat DHCP networking

2012-08-18 Thread Eugene Kirpichov
Thanks. And how will n-net react?



18.08.2012, в 0:43, Aaron Rosen aro...@nicira.com написал(а):

 Hi Eugene, 
 
 This means that if a VM stops it's DHCP client that nova-network will be 
 aware of this since the VM will not attempt to renew it's DHCP lease.
 
 Aaron
 
 On Fri, Aug 17, 2012 at 5:58 PM, Eugene Kirpichov ekirpic...@gmail.com 
 wrote:
 Hi,
 
 The documentation
 http://docs.openstack.org/diablo/openstack-compute/admin/content/configuring-flat-dhcp-networking.html
 has the passage: The nova-network service will track leases and
 releases in the database so it knows if a VM instance has stopped
 properly configuring via DHCP
 
 Can someone briefly explain me what this means, if possible with rough
 pointers to code?
 I don't recall nova noticing when my VM actually stopped properly
 configuring via DHCP.
 
 --
 Eugene Kirpichov
 http://www.linkedin.com/in/eugenekirpichov
 
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp
 
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Flat DHCP networking

2012-08-18 Thread Aaron Rosen
Hi Eugene,

I'm not sure I have not looked at the code (I'm guessing that it probably
keeps the lease around since it knows the VM is still active instead of
recycling the ip address). Though this is just a guess. You should look at
the implementation details if you are curious.

Aaron

On Sat, Aug 18, 2012 at 3:48 AM, Eugene Kirpichov ekirpic...@gmail.comwrote:

 Thanks. And how will n-net react?



 18.08.2012, в 0:43, Aaron Rosen aro...@nicira.com написал(а):

 Hi Eugene,

 This means that if a VM stops it's DHCP client that nova-network will be
 aware of this since the VM will not attempt to renew it's DHCP lease.

 Aaron

 On Fri, Aug 17, 2012 at 5:58 PM, Eugene Kirpichov ekirpic...@gmail.comwrote:

 Hi,

 The documentation

 http://docs.openstack.org/diablo/openstack-compute/admin/content/configuring-flat-dhcp-networking.html
 has the passage: The nova-network service will track leases and
 releases in the database so it knows if a VM instance has stopped
 properly configuring via DHCP

 Can someone briefly explain me what this means, if possible with rough
 pointers to code?
 I don't recall nova noticing when my VM actually stopped properly
 configuring via DHCP.

 --
 Eugene Kirpichov
 http://www.linkedin.com/in/eugenekirpichov

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp



___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question about Flat DHCP networking

2012-08-18 Thread Aaron Rosen
Hi Eugene,

This means that if a VM stops it's DHCP client that nova-network will be
aware of this since the VM will not attempt to renew it's DHCP lease.

Aaron

On Fri, Aug 17, 2012 at 5:58 PM, Eugene Kirpichov ekirpic...@gmail.comwrote:

 Hi,

 The documentation

 http://docs.openstack.org/diablo/openstack-compute/admin/content/configuring-flat-dhcp-networking.html
 has the passage: The nova-network service will track leases and
 releases in the database so it knows if a VM instance has stopped
 properly configuring via DHCP

 Can someone briefly explain me what this means, if possible with rough
 pointers to code?
 I don't recall nova noticing when my VM actually stopped properly
 configuring via DHCP.

 --
 Eugene Kirpichov
 http://www.linkedin.com/in/eugenekirpichov

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question about Flat DHCP networking

2012-08-17 Thread Eugene Kirpichov
Hi,

The documentation
http://docs.openstack.org/diablo/openstack-compute/admin/content/configuring-flat-dhcp-networking.html
has the passage: The nova-network service will track leases and
releases in the database so it knows if a VM instance has stopped
properly configuring via DHCP

Can someone briefly explain me what this means, if possible with rough
pointers to code?
I don't recall nova noticing when my VM actually stopped properly
configuring via DHCP.

-- 
Eugene Kirpichov
http://www.linkedin.com/in/eugenekirpichov

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question for Quantum V2 subnet

2012-08-14 Thread Takaaki Suzuki
Hi

Thank you for your comment.
I see. dual stack network need ipv4 and bunch of ipv6 prefix
(link-local, global, temporary global..) on one network.

 The reason for this is because you can have multiple subnets on the same
 L2 bcast domain. You can use ip aliasing in order to use multiple subnets on
 one virtual nic. For example ifconfig eth0:1 a.b.c.d/24; ifconfig eth0:2
 d.e.f.g/24
This means, It seems like vlan tagging?

Thanks!
Suzuki

On Tue, Aug 14, 2012 at 12:50 PM, Dan Wendlandt d...@nicira.com wrote:
 In a dual stack deployment there may be a v4 and a v6 subnet on the same
 network.

 There's also the case that a service provider has a notion of a public
 network, which is represented by a UUID.  After a period of time, they may
 run out of IPs in one subnet, and want to assign another subnet as well,
 without forcing tenants to have to start using a new identifier for the
 public network.   Of course, the provider would be responsible for creating
 L3 connectivity between the two subnets.

 Others can chime in, but those where the two cases that I remember.

 Dan


 On Mon, Aug 13, 2012 at 8:31 PM, Aaron Rosen aro...@nicira.com wrote:

 The reason for this is because you can have multiple subnets on the same
 L2 bcast domain. You can use ip aliasing in order to use multiple subnets on
 one virtual nic. For example ifconfig eth0:1 a.b.c.d/24; ifconfig eth0:2
 d.e.f.g/24

 Aaron


 On Mon, Aug 13, 2012 at 7:52 PM, Takaaki Suzuki suz...@midokura.com
 wrote:

 Hi all.

 I have one question. I prepared devstack with Qauntum V2.
 Now I can create Subnet for Network.
 And I can add multiple Subnet for one Network. VM can use multiple
 subnet for one virtual NIC?
 Why quantum v2 can create multiple subnet for one Network?

 quantum --os_token 1b73ace152c440ea939c2329fd115e56 --os_url
 http://localhost:9696/ net-list

 ++--+---++--+--+
 | admin_state_up | id   | name  |
 status | subnets  | tenant_id
   |

 ++--+---++--+--+
 | True   | d7a8106c-7ca6-4302-a065-6a87c859ed9c | test
 | ACTIVE | 474ea30c-9337-4f48-854c-9f572538a44c |
 4fb66e3355304be5a6f3340d7067b369 |
 |  |
||  |
 52ffda8c-61aa-465b-ae62-1ef57e9bed85 |
 |
 |  |
||  |
 9a659285-c6b1-4e6f-b3f0-c3e37341e0be |
|

 quantum --os_token 1b73ace152c440ea939c2329fd115e56 --os_url
 http://localhost:9696/ subnet-list

 +--+--+---+--+++--+--+
 | allocation_pools | cidr
| gateway_ip| id   | ip_version
 | name   | network_id   | tenant_id
 |

 +--+--+---+--+++--+--+
 | {start: 192.168.100.2, end: 192.168.100.254} |
 192.168.100.0/24 | 192.168.100.1 |
 474ea30c-9337-4f48-854c-9f572538a44c |  4 | test01 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |
 | {start: 192.168.210.2, end: 192.168.210.254} |
 192.168.210.0/24 | 192.168.210.1 |
 52ffda8c-61aa-465b-ae62-1ef57e9bed85 |  4 | test03 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |
 | {start: 192.168.200.2, end: 192.168.200.254} |
 192.168.200.0/24 | 192.168.200.1 |
 9a659285-c6b1-4e6f-b3f0-c3e37341e0be |  4 | test02 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |

 +--+--+---+--+++--+--+

 Thanks!
 Suzuki

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp



 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp




 --
 ~~~
 Dan Wendlandt
 Nicira, Inc: www.nicira.com
 twitter: 

[Openstack] Question for Quantum V2 subnet

2012-08-13 Thread Takaaki Suzuki
Hi all.

I have one question. I prepared devstack with Qauntum V2.
Now I can create Subnet for Network.
And I can add multiple Subnet for one Network. VM can use multiple
subnet for one virtual NIC?
Why quantum v2 can create multiple subnet for one Network?

quantum --os_token 1b73ace152c440ea939c2329fd115e56 --os_url
http://localhost:9696/ net-list
++--+---++--+--+
| admin_state_up | id   | name  |
status | subnets  | tenant_id
  |
++--+---++--+--+
| True   | d7a8106c-7ca6-4302-a065-6a87c859ed9c | test
| ACTIVE | 474ea30c-9337-4f48-854c-9f572538a44c |
4fb66e3355304be5a6f3340d7067b369 |
|  |
   ||  |
52ffda8c-61aa-465b-ae62-1ef57e9bed85 |
|
|  |
   ||  |
9a659285-c6b1-4e6f-b3f0-c3e37341e0be |
   |

quantum --os_token 1b73ace152c440ea939c2329fd115e56 --os_url
http://localhost:9696/ subnet-list
+--+--+---+--+++--+--+
| allocation_pools | cidr
   | gateway_ip| id   | ip_version
| name   | network_id   | tenant_id
|
+--+--+---+--+++--+--+
| {start: 192.168.100.2, end: 192.168.100.254} |
192.168.100.0/24 | 192.168.100.1 |
474ea30c-9337-4f48-854c-9f572538a44c |  4 | test01 |
d7a8106c-7ca6-4302-a065-6a87c859ed9c |
4fb66e3355304be5a6f3340d7067b369 |
| {start: 192.168.210.2, end: 192.168.210.254} |
192.168.210.0/24 | 192.168.210.1 |
52ffda8c-61aa-465b-ae62-1ef57e9bed85 |  4 | test03 |
d7a8106c-7ca6-4302-a065-6a87c859ed9c |
4fb66e3355304be5a6f3340d7067b369 |
| {start: 192.168.200.2, end: 192.168.200.254} |
192.168.200.0/24 | 192.168.200.1 |
9a659285-c6b1-4e6f-b3f0-c3e37341e0be |  4 | test02 |
d7a8106c-7ca6-4302-a065-6a87c859ed9c |
4fb66e3355304be5a6f3340d7067b369 |
+--+--+---+--+++--+--+

Thanks!
Suzuki

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question for Quantum V2 subnet

2012-08-13 Thread Aaron Rosen
The reason for this is because you can have multiple subnets on the same L2
bcast domain. You can use ip aliasing in order to use multiple subnets on
one virtual nic. For example ifconfig eth0:1 a.b.c.d/24; ifconfig eth0:2
d.e.f.g/24

Aaron

On Mon, Aug 13, 2012 at 7:52 PM, Takaaki Suzuki suz...@midokura.com wrote:

 Hi all.

 I have one question. I prepared devstack with Qauntum V2.
 Now I can create Subnet for Network.
 And I can add multiple Subnet for one Network. VM can use multiple
 subnet for one virtual NIC?
 Why quantum v2 can create multiple subnet for one Network?

 quantum --os_token 1b73ace152c440ea939c2329fd115e56 --os_url
 http://localhost:9696/ net-list

 ++--+---++--+--+
 | admin_state_up | id   | name  |
 status | subnets  | tenant_id
   |

 ++--+---++--+--+
 | True   | d7a8106c-7ca6-4302-a065-6a87c859ed9c | test
 | ACTIVE | 474ea30c-9337-4f48-854c-9f572538a44c |
 4fb66e3355304be5a6f3340d7067b369 |
 |  |
||  |
 52ffda8c-61aa-465b-ae62-1ef57e9bed85 |
 |
 |  |
||  |
 9a659285-c6b1-4e6f-b3f0-c3e37341e0be |
|

 quantum --os_token 1b73ace152c440ea939c2329fd115e56 --os_url
 http://localhost:9696/ subnet-list

 +--+--+---+--+++--+--+
 | allocation_pools | cidr
| gateway_ip| id   | ip_version
 | name   | network_id   | tenant_id
 |

 +--+--+---+--+++--+--+
 | {start: 192.168.100.2, end: 192.168.100.254} |
 192.168.100.0/24 | 192.168.100.1 |
 474ea30c-9337-4f48-854c-9f572538a44c |  4 | test01 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |
 | {start: 192.168.210.2, end: 192.168.210.254} |
 192.168.210.0/24 | 192.168.210.1 |
 52ffda8c-61aa-465b-ae62-1ef57e9bed85 |  4 | test03 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |
 | {start: 192.168.200.2, end: 192.168.200.254} |
 192.168.200.0/24 | 192.168.200.1 |
 9a659285-c6b1-4e6f-b3f0-c3e37341e0be |  4 | test02 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |

 +--+--+---+--+++--+--+

 Thanks!
 Suzuki

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question for Quantum V2 subnet

2012-08-13 Thread Dan Wendlandt
In a dual stack deployment there may be a v4 and a v6 subnet on the same
network.

There's also the case that a service provider has a notion of a public
network, which is represented by a UUID.  After a period of time, they may
run out of IPs in one subnet, and want to assign another subnet as well,
without forcing tenants to have to start using a new identifier for the
public network.   Of course, the provider would be responsible for creating
L3 connectivity between the two subnets.

Others can chime in, but those where the two cases that I remember.

Dan


On Mon, Aug 13, 2012 at 8:31 PM, Aaron Rosen aro...@nicira.com wrote:

 The reason for this is because you can have multiple subnets on the same
 L2 bcast domain. You can use ip aliasing in order to use multiple subnets
 on one virtual nic. For example ifconfig eth0:1 a.b.c.d/24; ifconfig eth0:2
 d.e.f.g/24

 Aaron


 On Mon, Aug 13, 2012 at 7:52 PM, Takaaki Suzuki suz...@midokura.comwrote:

 Hi all.

 I have one question. I prepared devstack with Qauntum V2.
 Now I can create Subnet for Network.
 And I can add multiple Subnet for one Network. VM can use multiple
 subnet for one virtual NIC?
 Why quantum v2 can create multiple subnet for one Network?

 quantum --os_token 1b73ace152c440ea939c2329fd115e56 --os_url
 http://localhost:9696/ net-list

 ++--+---++--+--+
 | admin_state_up | id   | name  |
 status | subnets  | tenant_id
   |

 ++--+---++--+--+
 | True   | d7a8106c-7ca6-4302-a065-6a87c859ed9c | test
 | ACTIVE | 474ea30c-9337-4f48-854c-9f572538a44c |
 4fb66e3355304be5a6f3340d7067b369 |
 |  |
||  |
 52ffda8c-61aa-465b-ae62-1ef57e9bed85 |
 |
 |  |
||  |
 9a659285-c6b1-4e6f-b3f0-c3e37341e0be |
|

 quantum --os_token 1b73ace152c440ea939c2329fd115e56 --os_url
 http://localhost:9696/ subnet-list

 +--+--+---+--+++--+--+
 | allocation_pools | cidr
| gateway_ip| id   | ip_version
 | name   | network_id   | tenant_id
 |

 +--+--+---+--+++--+--+
 | {start: 192.168.100.2, end: 192.168.100.254} |
 192.168.100.0/24 | 192.168.100.1 |
 474ea30c-9337-4f48-854c-9f572538a44c |  4 | test01 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |
 | {start: 192.168.210.2, end: 192.168.210.254} |
 192.168.210.0/24 | 192.168.210.1 |
 52ffda8c-61aa-465b-ae62-1ef57e9bed85 |  4 | test03 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |
 | {start: 192.168.200.2, end: 192.168.200.254} |
 192.168.200.0/24 | 192.168.200.1 |
 9a659285-c6b1-4e6f-b3f0-c3e37341e0be |  4 | test02 |
 d7a8106c-7ca6-4302-a065-6a87c859ed9c |
 4fb66e3355304be5a6f3340d7067b369 |

 +--+--+---+--+++--+--+

 Thanks!
 Suzuki

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp



 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp




-- 
~~~
Dan Wendlandt
Nicira, Inc: www.nicira.com
twitter: danwendlandt
~~~
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question on hostname generation?

2012-08-10 Thread Joshua Harlow
Hi all,

I was wondering about the following case (and am not sure if its been addressed 
in folsom).

At yahoo, instead of the default hostname that seems to be automatically 
established (ie 'server-XYZ.novalocal' was in essex) we were wondering if there 
is anything in folsom that say lets us override that generation with either a 
module (or a subclass) or a new function without having to patch nova code. 
Sometimes we want a default hostname of a different format (as probably do 
others) and I just am not sure if quantum is directing this default hostname, 
or if nova still is, or if its some mix of both (the metadata + cloud-init can 
affect the hostname as well, so perhaps the configdrive work should be the only 
one establish a 'real' hostname?).

I have found the following pieces of hostname related code but am not sure if 
this is all the places that make hostnames :-)

 *   
https://github.com/openstack/nova/blob/master/nova/api/metadata/base.py#L109

Is this the only place nowadays?? Is there something in quantum also?

Thx much, just trying to track this down.

-Josh
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on nova disk injection...

2012-06-07 Thread Thierry Carrez
Eric Windisch wrote:
 What implementation suboption would have your preference ? Is
 nova-rootwrap now universally used ? Should we prefer compatibility or
 absence of confusion ?
 
 There is an issue of how to extend rootwrap from third-party backend
 drivers. If this was (is?) addressed, universal use of rootwrap will be
 an easier sell.

Step 1 on the blueprint[1] is about moving allowed commands (filter
definitions) from python code to configuration files in a rootwrap.d
directory. This makes plugging new commands (to accommodate plugin
needs) possible. Work in progress is in a branch on github[2].

[1] https://blueprints.launchpad.net/nova/+spec/folsom-nova-rootwrap
[2] https://github.com/ttx/nova/tree/bp/folsom-nova-rootwrap

Cheers,

-- 
Thierry Carrez (ttx)
Release Manager, OpenStack

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on nova disk injection...

2012-06-06 Thread Eric Windisch
 
 
 
 What implementation suboption would have your preference ? Is
 nova-rootwrap now universally used ? Should we prefer compatibility or
 absence of confusion ?

There is an issue of how to extend rootwrap from third-party backend drivers. 
If this was (is?) addressed, universal use of rootwrap will be an easier sell.___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question on nova disk injection...

2012-06-05 Thread Joshua Harlow
Hi all,

Just some questions that I had about how nova is doing disk injection and such.

I was noticing that it the main disk/api.py does a lot of tee, cat and similar 
commands. Is there any reason it couldn't just use the standard python open and 
write data and such.

Is it because of sudo access (which is connected to rootwrap?), just wondering 
since it seems sort of odd that to write a file there a tee call has to be done 
with piped input, when python already has file operators and such...

Thx!
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on nova disk injection...

2012-06-05 Thread Russell Bryant
On 06/05/2012 05:42 PM, Joshua Harlow wrote:
 Hi all,
 
 Just some questions that I had about how nova is doing disk injection
 and such.
 
 I was noticing that it the main disk/api.py does a lot of tee, cat and
 similar commands. Is there any reason it couldn’t just use the standard
 python open and write data and such.
 
 Is it because of sudo access (which is connected to rootwrap?), just
 wondering since it seems sort of odd that to write a file there a tee
 call has to be done with piped input, when python already has file
 operators and such...

Yes, if it is using run_as_root=True, then it has to be run with
nova-rootwrap.

-- 
Russell Bryant

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on nova disk injection...

2012-06-05 Thread Joshua Harlow
Why couldn't nova just escalate pythons privileges to the super user when 
writing a file (thus allowing it to use python file writing functions and such).

Then after it writes it could drop it back to down to some other user?

That might make sense, idk, instead of having the disk injection act like a 
shell script which basically just emits a bunch of [tee, mv, touch, mkdir, cp] 
commands.

I've done something like this for anvil, not sure if its useful here but who 
knows:

https://github.com/yahoo/Openstack-Anvil/blob/master/anvil/shell.py#L70

On 6/5/12 2:50 PM, Russell Bryant rbry...@redhat.com wrote:

On 06/05/2012 05:42 PM, Joshua Harlow wrote:
 Hi all,

 Just some questions that I had about how nova is doing disk injection
 and such.

 I was noticing that it the main disk/api.py does a lot of tee, cat and
 similar commands. Is there any reason it couldn't just use the standard
 python open and write data and such.

 Is it because of sudo access (which is connected to rootwrap?), just
 wondering since it seems sort of odd that to write a file there a tee
 call has to be done with piped input, when python already has file
 operators and such...

Yes, if it is using run_as_root=True, then it has to be run with
nova-rootwrap.

--
Russell Bryant

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on nova disk injection...

2012-06-05 Thread Eric Windisch


On Tuesday, June 5, 2012 at 19:18 PM, Joshua Harlow wrote:

 Re: [Openstack] Question on nova disk injection... Why couldn’t nova just 
 escalate pythons privileges to the super user when writing a file (thus 
 allowing it to use python file writing functions and such).

Because we use Eventlet. os.setuid applies to the entire process. Coroutine 
switching during this would be dangerous.

Three options seem to exist:

1. We can fork, but then we'll need use IPC, which in our case would be 
implemented via the RPC abstraction.  We would need to make changes to 
services.py and/or the binaries and possibly the RPC abstraction itself.  This 
would work well with ZeroMQ as it would be actual IPC, but the brokered RPC 
solutions would be less efficient. Overall, this reeks of complexity and 
danger, but the end result should be a clear net positive.

2. One less elegant, but easy, solution might just be to extend the rootwrap 
functionality. Have it support calling commands on the system *and* executing 
trusted Python methods with trusted arguments.  We'd still be shelling out to 
rootwrap, but rootwrap could internally provide 'mkdir' and 'chmod' style 
commands around the os stdlib, rather than shelling out a second time, as it 
does currently.

3. rootwrap itself could actually be implemented as a Nova service, if we could 
trust the RPC mechanism direct access to the rootwrap methods -- which we is 
not all too safe, currently. This would effectively be a mix of options 1/2.

I'm inclined to suggest option #2 as it is a relatively simple improvement that 
would give us short-term gains without much friction. This wouldn't exclude the 
other options from being worked on and seems to be a requirement for #3, anyway.

--  
Eric Windisch

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on nova disk injection...

2012-06-05 Thread Joshua Harlow
Interesting, darn, that sorta makes it harder than it seems like it should be.

Is there any pattern that we can follow for this that other programs use, do 
most other programs shell out as root, and expect there command sets to be 
restricted? Do other similar programs just assume that they are running as a 
user that won't need to be restricted? Java seems like it would have the same 
issue, but of course its threaded, I there any similar concept there of 
temporarily escalating privileges for a thread, performing some action, then 
reducing privileges? I wonder if eventlet could support something like this (or 
be modified to?). Anyone else know other ways of doing this that might be 
useful? The suggestions that involve RPC being one way.

On 6/5/12 5:35 PM, Eric Windisch e...@cloudscaling.com wrote:





On Tuesday, June 5, 2012 at 19:18 PM, Joshua Harlow wrote:


Re: [Openstack] Question on nova disk injection... Why couldn't nova just 
escalate pythons privileges to the super user when writing a file (thus 
allowing it to use python file writing functions and such).

Because we use Eventlet. os.setuid applies to the entire process. Coroutine 
switching during this would be dangerous.

Three options seem to exist:

1. We can fork, but then we'll need use IPC, which in our case would be 
implemented via the RPC abstraction.  We would need to make changes to 
services.py and/or the binaries and possibly the RPC abstraction itself.  This 
would work well with ZeroMQ as it would be actual IPC, but the brokered RPC 
solutions would be less efficient. Overall, this reeks of complexity and 
danger, but the end result should be a clear net positive.

2. One less elegant, but easy, solution might just be to extend the rootwrap 
functionality. Have it support calling commands on the system *and* executing 
trusted Python methods with trusted arguments.  We'd still be shelling out to 
rootwrap, but rootwrap could internally provide 'mkdir' and 'chmod' style 
commands around the os stdlib, rather than shelling out a second time, as it 
does currently.

3. rootwrap itself could actually be implemented as a Nova service, if we could 
trust the RPC mechanism direct access to the rootwrap methods -- which we is 
not all too safe, currently. This would effectively be a mix of options 1/2.

I'm inclined to suggest option #2 as it is a relatively simple improvement that 
would give us short-term gains without much friction. This wouldn't exclude the 
other options from being worked on and seems to be a requirement for #3, anyway.
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on nova disk injection...

2012-06-05 Thread Eric Windisch
Yun,

The setuid bit is unnecessary, python can be launched by the root user. It 
would then drop privileges. For instance, the sshd daemon does not require a 
setuid bit, it is simply executed by root. It uses privilege separation  and 
does the set(e)uid for users that login through it.

Having a compiled program and a setuid bit destroys a number of the reasons why 
you would want to have this run as root. For one thing, if your daemon runs as 
root and drops to the 'nova' user, compromises within the context of running as 
the nova user cannot allow the daemon to be modified and re-executed.  Without 
having any 'sudo' requirements, the nova user would be quite constrained, 
relative to the current situation.  

--  
Eric Windisch


On Tuesday, June 5, 2012 at 21:18 PM, Yun Mao wrote:

 Python is a scripting language. To get setuid work, you usually have
 to give the setuid permission to /usr/bin/python which is a big no no.
  
 One work around is to have a customized compiled program (e.g. from
 C), which takes a python file as input, do all kinds of sanity check,
 and switch to root user to execute Python. But in that case it's not
 that much more appealing from the rootwrap.
  
 my 2c.
 Yun
  
 On Tue, Jun 5, 2012 at 5:42 PM, Joshua Harlow harlo...@yahoo-inc.com 
 (mailto:harlo...@yahoo-inc.com) wrote:
  Hi all,
   
  Just some questions that I had about how nova is doing disk injection and
  such.
   
  I was noticing that it the main disk/api.py does a lot of tee, cat and
  similar commands. Is there any reason it couldn’t just use the standard
  python open and write data and such.
   
  Is it because of sudo access (which is connected to rootwrap?), just
  wondering since it seems sort of odd that to write a file there a tee call
  has to be done with piped input, when python already has file operators and
  such...
   
  Thx!
   
  ___
  Mailing list: https://launchpad.net/~openstack
  Post to : openstack@lists.launchpad.net 
  (mailto:openstack@lists.launchpad.net)
  Unsubscribe : https://launchpad.net/~openstack
  More help   : https://help.launchpad.net/ListHelp
   
  
  
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net (mailto:openstack@lists.launchpad.net)
 Unsubscribe : https://launchpad.net/~openstack
 More help : https://help.launchpad.net/ListHelp
  
  


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about security

2012-06-01 Thread Vishvananda Ishaya
Generally I handle this by using a different eth device (or vlan) for the 
instance network.  Then you make sure that no services on compute are listening 
on 0.0.0.0

If you have only one interface for example, you can run three vlans across it

eth0:10 - public network public ip address for routing and floating ips and 
such. Nothing should listen here
eth0:11 - management network 192.168.0.0/24 range Rabbit and mysql run on 
this network. All services (ssh, etc.) run here
eth0:12 - vm network 10.0.0.0/8 range for vms. Nothing should listen here 
(except dnsmasq obviously)

Vish

On May 31, 2012, at 7:35 PM, William Herry wrote:

 We use FlatDHCP network mode, all thing work fine, instance has 10.0.0.x ip 
 and 10.0.0.1 as gateway
 Our problem is that service(most time compute node) has little restrict from 
 instance, 
 which instance can see a lot opened port on service, I am thinking if this is 
 a security problem
 
 restrict service on compute node not listen on 10.0.0.x ip is the way I can 
 thing to solve this, any other ways?
 
 Thanks
 
 -- 
 
 
 
 William Herry
 
 williamherrych...@gmail.com
 
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] question about security

2012-05-31 Thread William Herry
We use FlatDHCP network mode, all thing work fine, instance has 10.0.0.x ip
and 10.0.0.1 as gateway
Our problem is that service(most time compute node) has little restrict
from instance,
which instance can see a lot opened port on service, I am thinking if this
is a security problem

restrict service on compute node not listen on 10.0.0.x ip is the way I can
thing to solve this, any other ways?

Thanks

-- 



William Herry

williamherrych...@gmail.com
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question about cloudfiles API

2012-05-24 Thread Shawn Heisey
This question is probably more appropriate for the Swift mailing list, 
but I could not figure out how to subscribe to that list, so it's going 
here.  I'm OK with moving it there, if someone can tell me how to get 
subscribed, or if I'm in completely the wrong place, let me know.


I am attempting to evaluate Swift for our environment.  I have set up a 
Swift cluster using the ubuntu multi-server HOWTO and I can use the 
commandline utilities to upload and download files.  Now I need to do a 
test using the Java API.  I downloaded java-cloudfiles and I can't seem 
to make it work.  It fails at the login() step.


FilesClient client = new FilesClient(username, password, 
authUrl, null, 1);

if (client.login())
{

javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
at 
com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:352)
at 
org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128)
at 
org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:397)
at 
org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:148)
at 
org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:150)
at 
org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:121)
at 
org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:575)
at 
org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:425)
at 
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:820)
at 
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:754)
at 
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:732)
at 
com.rackspacecloud.client.cloudfiles.FilesClient.login(FilesClient.java:278)

at com.REDACTED.swiftest.Main.main(Main.java:50)

This all works with the curl command using the same auth URL.  I've got 
the default user/password set up from the HOWTO.


Initially I suspected that the problem was due to the self-signed 
certificate, but watching syslog on the primary proxy server, I don't 
see any requests logged, but I do see a conversation happen on port 8080 
with tcpdump.  How can I troubleshoot this?


Thanks,
Shawn


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on notifications

2012-04-27 Thread Monsyne Dragon
Yes, the publisher_id is servicename.host, so ya, you can determine the compute 
host from that.

On Apr 25, 2012, at 4:44 PM, Joshua Harlow wrote:

Hi all,

I was looking at the notification outputs, which are very useful and I was 
wondering if the way to say figure out which hypervisor a VM is being built on.

There seems to be the following key: publisher_id: compute.buildingbuild 
(event is compute.instance.create.end)

It would seem the stuff after “compute” is the hostname, would that be correct, 
or should the scheduler messages be intercepted, which as example has the 
following:

weighted_host: {
host: buildingbuild,
weight: -1488.0
}

I would think the first practice would be right, since its from the compute 
node instead of the scheduler, but would like some feedback :-)

Thx!
___
Mailing list: https://launchpad.net/~openstack
Post to : 
openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

--
Monsyne M. Dragon
OpenStack/Nova
cell 210-441-0965
work x 5014190

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on notifications

2012-04-26 Thread Joshua Harlow
Thx.

With these messages, instead of the compute.instance.create.end it can't be 
guaranteed that the instance actually got created right?

If I listen for the compute.instance.create.end and use the hostname (which 
is part of the publisher id) then I can know that it actually got created?

Is the weighted_host also dependent on which type of scheduler is used? (I 
would assume that not all schedulers do weighting?)

On 4/25/12 5:29 PM, Sandy Walsh sandy.wa...@rackspace.com wrote:

You want these events:

scheduler.run_instance.start (generated when scheduling begins)
scheduler.run_instance.scheduled (when a host is selected. one per instance)
scheduler.run_instance.end (all instances placed)

The .scheduled event will have the target hostname in it in the
weighted_host key ...

For example ...

[u'monitor.info',
 {u'_context_auth_token': None,
  u'_context_is_admin': True,
  u'_context_project_id': None,
  u'_context_quota_class': None,
  u'_context_read_deleted': u'no',
  u'_context_remote_address': None,
  u'_context_request_id': u'req-...ac',
  u'_context_roles': [u'admin', u'identity:admin'],
  u'_context_timestamp': u'2012-04-25T20:32:44.506538',
  u'_context_user_id': None,
  u'event_type': u'scheduler.run_instance.scheduled',
  u'message_id': u'2df8...fc',
  u'payload': {u'instance_id': u'7c21...960',
 u'request_spec': {u'block_device_mapping': [],
   u'image': {u'checksum': u'ee0e...cfcc',
  u'container_format': u'ovf',
  u'created_at': u'2012-02-29 23:12:16',
  u'deleted': False,
  u'deleted_at': None,
  u'disk_format': u'vhd',
  u'id': u'079...b5fb',
  u'is_public': True,
  u'min_disk': u'10',
  u'min_ram': u'256',
  u'name': u'CentOS 6.0',
  u'properties': {u'arch': u'x86-64',
 u'auto_disk_config': u'True',
 u'os_distro': u'centos',
 u'os_type': u'linux',
 u'os_version': u'6.0',
 u'rax_managed': u'false',
 u'rax_options': u'0'},
 u'size': 390243020,
 u'status': u'active',
 u'updated_at': u'2012-02-29 23:12:32'},
  u'instance_properties': {u'access_ip_v4': None,
   u'access_ip_v6': None,
   u'architecture': u'x86-64',
   u'auto_disk_config': True,
   u'availability_zone': None,
   u'config_drive': u'',
  .u'config_drive_id': u'',
  u'display_description': u'testserver...9870',
  u'display_name': u'testserver...9870',
  u'ephemeral_gb': 0,
  u'image_ref': u'0790...b5fb',
  u'instance_type_id': 1,
  u'kernel_id': u'',
  u'key_data': None,
  u'key_name': None,
  u'launch_index': 0,
  u'launch_time': u'2012-04-25T20:32:10Z',
  u'locked': False,
  u'memory_mb': 256,
  u'metadata': {},
  u'os_type': u'linux',
  u'power_state': 0,
  u'progress': 0,
  u'project_id': u'5820792',
  u'ramdisk_id': u'',
  u'reservation_id': u'r-j...mm',
  u'root_device_name': None,
  u'root_gb': 10,
  u'user_data': u'',
  u'user_id': u'162201',
  u'uuid': u'7c210...ed8960',
  u'vcpus': 4,
  u'vm_mode': None,
  u'vm_state': u'building'},
   u'instance_type': {u'created_at': None,
  u'deleted': False,
  u'deleted_at': None,
  u'ephemeral_gb': 0,
  u'extra_specs': {},
  u'flavorid': u'1',
  u'id': 1,
  u'memory_mb': 256,
  u'name': u'256MB instance',
  u'root_gb': 10,
  

Re: [Openstack] Question on notifications

2012-04-26 Thread Sandy Walsh
Yes, correct, I thought you wanted the info as soon as the scheduler decided on 
a host. create.end will only fire when the instance has been created. 

And you're correct about the scheduler, but all schedulers will likely be a 
derivation of FilterScheduler or simply have custom filters/weights. Simple and 
Change will turn to filters/weights soon. Depends on your installation. 

-Sandy





From: Joshua Harlow [harlo...@yahoo-inc.com]
Sent: Thursday, April 26, 2012 5:07 PM
To: Sandy Walsh; openstack
Subject: Re: [Openstack] Question on notifications

Thx.

With these messages, instead of the “compute.instance.create.end” it can’t be 
guaranteed that the instance actually got created right?

If I listen for the “compute.instance.create.end” and use the hostname (which 
is part of the publisher id) then I can know that it actually got created?

Is the “weighted_host” also dependent on which type of scheduler is used? (I 
would assume that not all schedulers do weighting?)

On 4/25/12 5:29 PM, Sandy Walsh sandy.wa...@rackspace.com wrote:




You want these events:



scheduler.run_instance.start (generated when scheduling begins)

scheduler.run_instance.scheduled (when a host is selected. one per instance)

scheduler.run_instance.end (all instances placed)



The .scheduled event will have the target hostname in it in the

weighted_host key ...



For example ...



[u'monitor.info',

 {u'_context_auth_token': None,

  u'_context_is_admin': True,

  u'_context_project_id': None,

  u'_context_quota_class': None,

  u'_context_read_deleted': u'no',

  u'_context_remote_address': None,

  u'_context_request_id': u'req-...ac',

  u'_context_roles': [u'admin', u'identity:admin'],

  u'_context_timestamp': u'2012-04-25T20:32:44.506538',

  u'_context_user_id': None,

  u'event_type': u'scheduler.run_instance.scheduled',

  u'message_id': u'2df8...fc',

  u'payload': {u'instance_id': u'7c21...960',

 u'request_spec': {u'block_device_mapping': [],

   u'image': {u'checksum': u'ee0e...cfcc',

  u'container_format': u'ovf',

  u'created_at': u'2012-02-29 23:12:16',

  u'deleted': False,

  u'deleted_at': None,

  u'disk_format': u'vhd',

  u'id': u'079...b5fb',

  u'is_public': True,

  u'min_disk': u'10',

  u'min_ram': u'256',

  u'name': u'CentOS 6.0',

  u'properties': {u'arch': u'x86-64',

 u'auto_disk_config': u'True',

 u'os_distro': u'centos',

 u'os_type': u'linux',

 u'os_version': u'6.0',

 u'rax_managed': u'false',

 u'rax_options': u'0'},

 u'size': 390243020,

 u'status': u'active',

 u'updated_at': u'2012-02-29 23:12:32'},

  u'instance_properties': {u'access_ip_v4': None,

   u'access_ip_v6': None,

   u'architecture': u'x86-64',

   u'auto_disk_config': True,

   u'availability_zone': None,

   u'config_drive': u'',

  .u'config_drive_id': u'',

  u'display_description': u'testserver...9870',

  u'display_name': u'testserver...9870',

  u'ephemeral_gb': 0,

  u'image_ref': u'0790...b5fb',

  u'instance_type_id': 1,

  u'kernel_id': u'',

  u'key_data': None,

  u'key_name': None,

  u'launch_index': 0,

  u'launch_time': u'2012-04-25T20:32:10Z',

  u'locked': False,

  u'memory_mb': 256,

  u'metadata': {},

  u'os_type': u'linux',

  u'power_state': 0,

  u'progress': 0,

  u'project_id': u'5820792',

  u'ramdisk_id': u'',

  u'reservation_id': u'r-j...mm',

  u'root_device_name': None,

  u'root_gb': 10,

  u'user_data': u'',

  u'user_id': u'162201',

  u'uuid': u'7c210...ed8960',

  u'vcpus': 4

[Openstack] Question on notifications

2012-04-25 Thread Joshua Harlow
Hi all,

I was looking at the notification outputs, which are very useful and I was 
wondering if the way to say figure out which hypervisor a VM is being built on.

There seems to be the following key: publisher_id: compute.buildingbuild 
(event is compute.instance.create.end)

It would seem the stuff after compute is the hostname, would that be correct, 
or should the scheduler messages be intercepted, which as example has the 
following:

weighted_host: {
host: buildingbuild,
weight: -1488.0
}

I would think the first practice would be right, since its from the compute 
node instead of the scheduler, but would like some feedback :-)

Thx!
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on notifications

2012-04-25 Thread Sandy Walsh
You want these events:

scheduler.run_instance.start (generated when scheduling begins)
scheduler.run_instance.scheduled (when a host is selected. one per instance)
scheduler.run_instance.end (all instances placed)

The .scheduled event will have the target hostname in it in the
weighted_host key ...

For example ...

[u'monitor.info',
 {u'_context_auth_token': None,
  u'_context_is_admin': True,
  u'_context_project_id': None,
  u'_context_quota_class': None,
  u'_context_read_deleted': u'no',
  u'_context_remote_address': None,
  u'_context_request_id': u'req-...ac',
  u'_context_roles': [u'admin', u'identity:admin'],
  u'_context_timestamp': u'2012-04-25T20:32:44.506538',
  u'_context_user_id': None,
  u'event_type': u'scheduler.run_instance.scheduled',
  u'message_id': u'2df8...fc',
  u'payload': {u'instance_id': u'7c21...960',
 u'request_spec': {u'block_device_mapping': [],
   u'image': {u'checksum': u'ee0e...cfcc',
  u'container_format': u'ovf',
  u'created_at': u'2012-02-29 23:12:16',
  u'deleted': False,
  u'deleted_at': None,
  u'disk_format': u'vhd',
  u'id': u'079...b5fb',
  u'is_public': True,
  u'min_disk': u'10',
  u'min_ram': u'256',
  u'name': u'CentOS 6.0',
  u'properties': {u'arch': u'x86-64',
 u'auto_disk_config': u'True',
 u'os_distro': u'centos',
 u'os_type': u'linux',
 u'os_version': u'6.0',
 u'rax_managed': u'false',
 u'rax_options': u'0'},
 u'size': 390243020,
 u'status': u'active',
 u'updated_at': u'2012-02-29 23:12:32'},
  u'instance_properties': {u'access_ip_v4': None,
   u'access_ip_v6': None,
   u'architecture': u'x86-64',
   u'auto_disk_config': True,
   u'availability_zone': None,
   u'config_drive': u'',
  .u'config_drive_id': u'',
  u'display_description': u'testserver...9870',
  u'display_name': u'testserver...9870',
  u'ephemeral_gb': 0,
  u'image_ref': u'0790...b5fb',
  u'instance_type_id': 1,
  u'kernel_id': u'',
  u'key_data': None,
  u'key_name': None,
  u'launch_index': 0,
  u'launch_time': u'2012-04-25T20:32:10Z',
  u'locked': False,
  u'memory_mb': 256,
  u'metadata': {},
  u'os_type': u'linux',
  u'power_state': 0,
  u'progress': 0,
  u'project_id': u'5820792',
  u'ramdisk_id': u'',
  u'reservation_id': u'r-j...mm',
  u'root_device_name': None,
  u'root_gb': 10,
  u'user_data': u'',
  u'user_id': u'162201',
  u'uuid': u'7c210...ed8960',
  u'vcpus': 4,
  u'vm_mode': None,
  u'vm_state': u'building'},
   u'instance_type': {u'created_at': None,
  u'deleted': False,
  u'deleted_at': None,
  u'ephemeral_gb': 0,
  u'extra_specs': {},
  u'flavorid': u'1',
  u'id': 1,
  u'memory_mb': 256,
  u'name': u'256MB instance',
  u'root_gb': 10,
  u'rxtx_factor': 1.0,
  u'swap': 512,
  u'updated_at': None,
  u'vcpu_weight': 10,
  u'vcpus': 4},
   u'num_instances': 1,
   u'security_group': [u'default']},

  u'weighted_host': {u'host': u'compute-xx-yy-zz-20',
 u'weight': 4945.0}},

  u'priority': u'INFO',
  u'publisher_id': 

Re: [Openstack] [Question #194111]: Does quantum support multi-nic setup ?

2012-04-24 Thread Vaze, Mandar
Dan,

I've updated the question (few more queries)

 Also, you didn't say exactly how you were running devstack.  Can you send 
 your config?

I've described my two-machine setup in the original question itself.

I didn't know how to add an attachment to the question, so here is my nova.conf 
for your reference
(See attached)

It is fairly standard one, generated by stack.sh

-Mandar


__
Disclaimer:This email and any attachments are sent in strictest confidence for 
the sole use of the addressee and may contain legally privileged, confidential, 
and proprietary data.  If you are not the intended recipient, please advise the 
sender by replying promptly to this email and then delete and destroy this 
email and any attachments without any further use, copying or forwarding


nova.conf
Description: nova.conf
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] question about configuring FlatDHCPManager

2012-04-19 Thread Xin Zhao

Hello,

I run nova compute (diablo) on RHEL6. Following the instruction, I 
configured the network as following, and it works:


$nova-manage network create ostester 10.0.0.0/24 1 256 --bridge=br0 
--bridge_interface=em1


Now I want to change it to use a new fixed_range, like 10.1.1.0/24, so I 
delete the network, then redefine it following the same
command format.  But it doesn't work, the instance starts still with the 
10.0.0.X ip, and of course, network doesn't work in the

instances.

What do I miss here?

Thanks,
Xin
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about configuring FlatDHCPManager

2012-04-19 Thread Vishvananda Ishaya
unfortunately there is a bug where deleting a network does not delete 
associated fixed ips:

https://bugs.launchpad.net/nova/+bug/754900

The fix has landed in trunk and is proposed for backport into stable/essex

https://review.openstack.org/6664

To work around this issue, you will have to delete the fixed ips manually from 
the database or drop and recreate the database.

Vish

On Apr 19, 2012, at 9:00 AM, Xin Zhao wrote:

 Hello,
 
 I run nova compute (diablo) on RHEL6. Following the instruction, I configured 
 the network as following, and it works: 
 
 $nova-manage network create ostester 10.0.0.0/24 1 256 --bridge=br0 
 --bridge_interface=em1
 
 Now I want to change it to use a new fixed_range, like 10.1.1.0/24, so I 
 delete the network, then redefine it following the same 
 command format.  But it doesn't work, the instance starts still with the 
 10.0.0.X ip, and of course, network doesn't work in the 
 instances. 
 
 What do I miss here? 
 
 Thanks,
 Xin
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about configuring FlatDHCPManager

2012-04-19 Thread Xin Zhao

OK, thanks for the info.

BTW, what's the nova-manage project scrub projectname do? Does it have 
the same effect as the manual steps you just mentioned do?


Xin

On 4/19/2012 1:01 PM, Vishvananda Ishaya wrote:
unfortunately there is a bug where deleting a network does not delete 
associated fixed ips:


https://bugs.launchpad.net/nova/+bug/754900

The fix has landed in trunk and is proposed for backport into stable/essex

https://review.openstack.org/6664

To work around this issue, you will have to delete the fixed ips 
manually from the database or drop and recreate the database.


Vish

On Apr 19, 2012, at 9:00 AM, Xin Zhao wrote:


Hello,

I run nova compute (diablo) on RHEL6. Following the instruction, I 
configured the network as following, and it works:


$nova-manage network create ostester 10.0.0.0/24 1 256 --bridge=br0 
--bridge_interface=em1


Now I want to change it to use a new fixed_range, like 10.1.1.0/24, 
so I delete the network, then redefine it following the same
command format.  But it doesn't work, the instance starts still with 
the 10.0.0.X ip, and of course, network doesn't work in the

instances.

What do I miss here?

Thanks,
Xin
___
Mailing list: https://launchpad.net/~openstack 
https://launchpad.net/%7Eopenstack
Post to : openstack@lists.launchpad.net 
mailto:openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack 
https://launchpad.net/%7Eopenstack

More help   : https://help.launchpad.net/ListHelp




___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] question about Fedora 16 and openstack

2012-04-16 Thread Chen, Hsing-Bung
HI,
I followed the information from
https://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova

Getting started with OpenStack Nova

I got error from this
Any comment?
Thanks.

HB


Ø  oz-install -d4 -u f16.tdl
DEBUG:oz.Guest.FedoraGuest:libvirt bridge name is virbr0
DEBUG:oz.Guest.FedoraGuest:Libvirt type is qemu
Traceback (most recent call last):
  File /usr/bin/oz-install, line 137, in module
guest = oz.GuestFactory.guest_factory(tdl, config, auto)
  File /usr/lib/python2.7/site-packages/oz/GuestFactory.py, line 51, in 
guest_factory
klass = oz.Fedora.get_class(tdl, config, auto)
  File /usr/lib/python2.7/site-packages/oz/Fedora.py, line 93, in get_class
return FedoraGuest(tdl, config, auto, virtio, True, virtio, True)
  File /usr/lib/python2.7/site-packages/oz/Fedora.py, line 39, in __init__
True, True, directkernel)
  File /usr/lib/python2.7/site-packages/oz/RedHat.py, line 42, in __init__
config, iso_allowed, url_allowed)
  File /usr/lib/python2.7/site-packages/oz/Guest.py, line 1154, in __init__
config, iso_allowed, url_allowed)
  File /usr/lib/python2.7/site-packages/oz/Guest.py, line 201, in __init__
self.url = self._check_url(iso=iso_allowed, url=url_allowed)
  File /usr/lib/python2.7/site-packages/oz/RedHat.py, line 804, in _check_url
response = urllib2.urlopen(url)
  File /usr/lib64/python2.7/urllib2.py, line 126, in urlopen
return _opener.open(url, data, timeout)
  File /usr/lib64/python2.7/urllib2.py, line 400, in open
response = meth(req, response)
  File /usr/lib64/python2.7/urllib2.py, line 513, in http_response
'http', request, response, code, msg, hdrs)
  File /usr/lib64/python2.7/urllib2.py, line 432, in error
result = self._call_chain(*args)
  File /usr/lib64/python2.7/urllib2.py, line 372, in _call_chain
result = func(*args)
  File /usr/lib64/python2.7/urllib2.py, line 619, in http_error_302
return self.parent.open(new, timeout=req.timeout)
  File /usr/lib64/python2.7/urllib2.py, line 400, in open
response = meth(req, response)
  File /usr/lib64/python2.7/urllib2.py, line 513, in http_response
'http', request, response, code, msg, hdrs)
  File /usr/lib64/python2.7/urllib2.py, line 438, in error
return self._call_chain(*args)
  File /usr/lib64/python2.7/urllib2.py, line 372, in _call_chain
result = func(*args)
--
  File /usr/lib64/python2.7/urllib2.py, line 521, in http_error_default
raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)
urllib2.HTTPError: HTTP Error 403: Use Proxy Server




___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about keystone and dashboard on RHEL6

2012-04-11 Thread Adam Young

On 04/03/2012 09:25 AM, Russell Bryant wrote:

On 04/02/2012 08:44 PM, Xin Zhao wrote:

On 4/2/2012 6:35 PM, Russell Bryant wrote:

On 04/02/2012 03:09 PM, Xin Zhao wrote:

Hello,

I am new to OpenStack and trying to install the diablo release on a
RHEL6 cluster. I follow instructions here:
http://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova

The instruction doesn't mention how to install and configure Keystone
and dashboard services, I wonder:

1) are these two services available for RHEL6, in diablo release?
2) do I need to go to the latest Essex release, and where the
instructions is?

The dashboard, horizon, is not included with the Diablo packages that
you find in EPEL6 right now.  When we update EPEL6 to Essex, which
should be within the next few weeks, horizon will be included as well.


How about keystone, the instructions here
(http://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova) doesn't
mention how to install and configure keystone, although it tells how to
clean up keystone, which makes me think there is something
missing in the earlier sections of this instruction.

Keystone is there.  It has already been updated to one of the Essex RCs,
acutally.  As EPEL6 gets updated to Essex, these instructions will
become the ones you want to follow, and they include Keystone:

https://fedoraproject.org/wiki/Getting_started_with_OpenStack_on_Fedora_17

I don't think that Diablo code is actually capable of using Keystone.  
Keystone is only required for Essex.


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about keystone and dashboard on RHEL6

2012-04-11 Thread David Busby
Diablo (at least for nova, glance, swift) is capable of using keystone
there is however a lot of manual configuration needed, something that is on
my list for complete when integrating keystone into my 2011.3 deploy per my
blog post.

All I can say at the moment is this is far from trivial, and finding
documentation on this can be a problem (if anyone on the list could correct
me on this, it would help massively and expidite my documentation of
integrating keystone with nova  glance on 2011.3)

Cheers

Davud


On Wed, Apr 11, 2012 at 4:16 PM, Adam Young ayo...@redhat.com wrote:

 On 04/03/2012 09:25 AM, Russell Bryant wrote:

 On 04/02/2012 08:44 PM, Xin Zhao wrote:

 On 4/2/2012 6:35 PM, Russell Bryant wrote:

 On 04/02/2012 03:09 PM, Xin Zhao wrote:

 Hello,

 I am new to OpenStack and trying to install the diablo release on a
 RHEL6 cluster. I follow instructions here:
 http://fedoraproject.org/wiki/**Getting_started_with_**OpenStack_Novahttp://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova

 The instruction doesn't mention how to install and configure Keystone
 and dashboard services, I wonder:

 1) are these two services available for RHEL6, in diablo release?
 2) do I need to go to the latest Essex release, and where the
 instructions is?

 The dashboard, horizon, is not included with the Diablo packages that
 you find in EPEL6 right now.  When we update EPEL6 to Essex, which
 should be within the next few weeks, horizon will be included as well.

  How about keystone, the instructions here
 (http://fedoraproject.org/**wiki/Getting_started_with_**OpenStack_Novahttp://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova)
 doesn't
 mention how to install and configure keystone, although it tells how to
 clean up keystone, which makes me think there is something
 missing in the earlier sections of this instruction.

 Keystone is there.  It has already been updated to one of the Essex RCs,
 acutally.  As EPEL6 gets updated to Essex, these instructions will
 become the ones you want to follow, and they include Keystone:

 https://fedoraproject.org/**wiki/Getting_started_with_**
 OpenStack_on_Fedora_17https://fedoraproject.org/wiki/Getting_started_with_OpenStack_on_Fedora_17

  I don't think that Diablo code is actually capable of using Keystone.
  Keystone is only required for Essex.


 __**_
 Mailing list: 
 https://launchpad.net/~**openstackhttps://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : 
 https://launchpad.net/~**openstackhttps://launchpad.net/~openstack
 More help   : 
 https://help.launchpad.net/**ListHelphttps://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about keystone and dashboard on RHEL6

2012-04-03 Thread Russell Bryant
On 04/02/2012 08:44 PM, Xin Zhao wrote:
 On 4/2/2012 6:35 PM, Russell Bryant wrote:
 On 04/02/2012 03:09 PM, Xin Zhao wrote:
 Hello,

 I am new to OpenStack and trying to install the diablo release on a
 RHEL6 cluster. I follow instructions here:
 http://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova

 The instruction doesn't mention how to install and configure Keystone
 and dashboard services, I wonder:

 1) are these two services available for RHEL6, in diablo release?
 2) do I need to go to the latest Essex release, and where the
 instructions is?
 The dashboard, horizon, is not included with the Diablo packages that
 you find in EPEL6 right now.  When we update EPEL6 to Essex, which
 should be within the next few weeks, horizon will be included as well.

 
 How about keystone, the instructions here
 (http://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova) doesn't
 mention how to install and configure keystone, although it tells how to
 clean up keystone, which makes me think there is something
 missing in the earlier sections of this instruction.

Keystone is there.  It has already been updated to one of the Essex RCs,
acutally.  As EPEL6 gets updated to Essex, these instructions will
become the ones you want to follow, and they include Keystone:

https://fedoraproject.org/wiki/Getting_started_with_OpenStack_on_Fedora_17

-- 
Russell Bryant

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] question about keystone and dashboard on RHEL6

2012-04-02 Thread Xin Zhao

Hello,

I am new to OpenStack and trying to install the diablo release on a 
RHEL6 cluster. I follow instructions here:

http://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova

The instruction doesn't mention how to install and configure Keystone 
and dashboard services, I wonder:


1) are these two services available for RHEL6, in diablo release?
2) do I need to go to the latest Essex release, and where the 
instructions is?


Thanks,
Xin

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about keystone and dashboard on RHEL6

2012-04-02 Thread Yong Sheng Gong
try this:http://wiki.openstack.org/NovaInstall/RHEL6Notes-openstack-bounces+gongysh=cn.ibm@lists.launchpad.net wrote: -To: openstack openstack@lists.launchpad.netFrom: Xin Zhao xz...@bnl.govSent by: openstack-bounces+gongysh=cn.ibm@lists.launchpad.netDate: 04/03/2012 03:09AMSubject: [Openstack] question about keystone and dashboard on RHEL6Hello,I am new to OpenStack and trying to install the diablo release on a RHEL6 cluster. I follow instructions here:http://fedoraproject.org/wiki/Getting_started_with_OpenStack_NovaThe instruction doesn't mention how to install and configure Keystone and dashboard services, I wonder:1) are these two services available for RHEL6, in diablo release?2) do I need to go to the latest Essex release, and where the instructions is?Thanks,Xin___Mailing list: https://launchpad.net/~openstackPost to   : openstack@lists.launchpad.netUnsubscribe : https://launchpad.net/~openstackMore help  : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about keystone and dashboard on RHEL6

2012-04-02 Thread Russell Bryant
On 04/02/2012 03:09 PM, Xin Zhao wrote:
 Hello,
 
 I am new to OpenStack and trying to install the diablo release on a
 RHEL6 cluster. I follow instructions here:
 http://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova
 
 The instruction doesn't mention how to install and configure Keystone
 and dashboard services, I wonder:
 
 1) are these two services available for RHEL6, in diablo release?
 2) do I need to go to the latest Essex release, and where the
 instructions is?

The dashboard, horizon, is not included with the Diablo packages that
you find in EPEL6 right now.  When we update EPEL6 to Essex, which
should be within the next few weeks, horizon will be included as well.

-- 
Russell Bryant

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] question about keystone and dashboard on RHEL6

2012-04-02 Thread Xin Zhao

On 4/2/2012 6:35 PM, Russell Bryant wrote:

On 04/02/2012 03:09 PM, Xin Zhao wrote:

Hello,

I am new to OpenStack and trying to install the diablo release on a
RHEL6 cluster. I follow instructions here:
http://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova

The instruction doesn't mention how to install and configure Keystone
and dashboard services, I wonder:

1) are these two services available for RHEL6, in diablo release?
2) do I need to go to the latest Essex release, and where the
instructions is?

The dashboard, horizon, is not included with the Diablo packages that
you find in EPEL6 right now.  When we update EPEL6 to Essex, which
should be within the next few weeks, horizon will be included as well.



How about keystone, the instructions here 
(http://fedoraproject.org/wiki/Getting_started_with_OpenStack_Nova) doesn't
mention how to install and configure keystone, although it tells how to 
clean up keystone, which makes me think there is something

missing in the earlier sections of this instruction.

Xin

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] Question on wsgi rate limiting

2012-03-30 Thread Caitlin Bestler
Throughout the discussion on distributed rate limiting I've had the annoying 
feeling that I've heard this joke before.

Basically, are we looking for our keys under the street lamp because the light 
is good rather than looking for them
where they were lost?

Has anyone studied the effectiveness of rate limitations implemented at this 
layer. From my experience with rate
shaping discussions in IEEE 802.1 Data Center Bridging group I am concerned 
that the response time working this
far up the stack will preclude effective rate shaping.

Of course, if someone has studied this and shown it to be effective then this 
would be great news. The light is
Better under the street lamp.

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread Jay Pipes
You make some good points about what is the appropriate level in the 
stack to do rate shaping, but I would just like to have a configurable, 
manageable and monitorable ratelimit/quota solution that doesn't seem 
like a giant hack :)


Baby steps.

-jay

On 03/30/2012 01:23 PM, Caitlin Bestler wrote:

Throughout the discussion on distributed rate limiting I’ve had the
annoying feeling that I’ve heard this joke before.

Basically, are we looking for our keys under the street lamp because the
light is good rather than looking for them
where they were lost?

Has anyone studied the effectiveness of rate limitations implemented at
this layer. From my experience with rate

shaping discussions in IEEE 802.1 Data Center Bridging group I am
concerned that the response time working this

far up the stack will preclude effective rate shaping.

Of course, if someone has studied this and shown it to be effective then
this would be great news. The light is

Better under the street lamp.



___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread andi abes
Caitlin, I'm curious what were the use cases and concerns in DCB?
If my memory serves me right (from rate limiting at L2 level) the main
issues are guaranteeing QoS, effective bandwidth usage, fair
allocation of memory buffer space. All of those goals damaged pretty
badly if congestion occurs and any of the resources are exhausted
(leading to indiscriminate packet loss, for lack of any other
recourse).

The use cases, at least the way as I conceive them for OS are very
different. They're not intended to resolve resource constraints as a
primary goal (though, that's definitely a secondary goal).  As an
example - issuing lots of Nova API calls is by itself not the problem
- executing the downstream effects of what those requests trigger is
whats being protected (access to DB, spawning VM's, Rabbit MQ message
rates etc).

For Swift, where pure bandwidth is a primary concern, and the primary
resource being consumed - I imagine you're right. Some L2/L3 traffic
shaping (and monitoring) would be advisable - but that's not to say
that's the only resource. e.g. creating and deleting containers
repeatedly will consume relatively little bandwidth, but will exert
quite a lot of resource consumption on the back end. Rate limiting
these API calls is probably prudent at the API layer.





On Fri, Mar 30, 2012 at 1:56 PM, Jay Pipes jaypi...@gmail.com wrote:
 You make some good points about what is the appropriate level in the stack
 to do rate shaping, but I would just like to have a configurable, manageable
 and monitorable ratelimit/quota solution that doesn't seem like a giant hack
 :)

 Baby steps.

 -jay


 On 03/30/2012 01:23 PM, Caitlin Bestler wrote:

 Throughout the discussion on distributed rate limiting I’ve had the
 annoying feeling that I’ve heard this joke before.

 Basically, are we looking for our keys under the street lamp because the
 light is good rather than looking for them
 where they were lost?

 Has anyone studied the effectiveness of rate limitations implemented at
 this layer. From my experience with rate

 shaping discussions in IEEE 802.1 Data Center Bridging group I am
 concerned that the response time working this

 far up the stack will preclude effective rate shaping.

 Of course, if someone has studied this and shown it to be effective then
 this would be great news. The light is

 Better under the street lamp.



 ___
 Mailing list: https://launchpad.net/~openstack
 Post to     : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to     : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread Caitlin Bestler
Caitlin Replies inline /Caitlin

-Original Message-
From: andi abes [mailto:andi.a...@gmail.com] 
Sent: Friday, March 30, 2012 11:32 AM
To: Jay Pipes; Caitlin Bestler
Cc: openstack@lists.launchpad.net
Subject: Re: [Openstack] Question on wsgi rate limiting

Caitlin, I'm curious what were the use cases and concerns in DCB?
If my memory serves me right (from rate limiting at L2 level) the main issues 
are guaranteeing QoS, effective bandwidth usage, fair allocation of memory 
buffer space. All of those goals damaged pretty badly if congestion occurs and 
any of the resources are exhausted (leading to indiscriminate packet loss, for 
lack of any other recourse).
Caitlin
Correct.  The fundamental goal was to allow storage-oriented classes of service 
which could be effectively guaranteed to be drop-free within a Datacenter.
FCoE as a specific application needed this to be a very strong guarantee, but 
congestion drops triggering TCP back-offs is generally not a good thing for 
storage traffic.

And once you cut through the match, this is ultimately about good algorithms 
that can be implemented in a distributed fashion that allocate the buffering 
capacity
Of the network elements somewhat intelligently and robustly.
/Caitlin

The use cases, at least the way as I conceive them for OS are very different. 
They're not intended to resolve resource constraints as a primary goal (though, 
that's definitely a secondary goal).  As an example - issuing lots of Nova API 
calls is by itself not the problem
- executing the downstream effects of what those requests trigger is whats 
being protected (access to DB, spawning VM's, Rabbit MQ message rates etc).

For Swift, where pure bandwidth is a primary concern, and the primary resource 
being consumed - I imagine you're right. Some L2/L3 traffic shaping (and 
monitoring) would be advisable - but that's not to say that's the only 
resource. e.g. creating and deleting containers repeatedly will consume 
relatively little bandwidth, but will exert quite a lot of resource consumption 
on the back end. Rate limiting these API calls is probably prudent at the API 
layer.
Caitlin
Yes, Nova APIs calls are very unlikely to cause network congestion.
Bulk payload transfers (whether Swift or Nova Volumes) is an issue.
My concern is that a truly effective solution will have to be at the Quantum 
level, not wsgi.
/Caitlin





On Fri, Mar 30, 2012 at 1:56 PM, Jay Pipes jaypi...@gmail.com wrote:
 You make some good points about what is the appropriate level in the 
 stack to do rate shaping, but I would just like to have a 
 configurable, manageable and monitorable ratelimit/quota solution that 
 doesn't seem like a giant hack
 :)

 Baby steps.

 -jay


 On 03/30/2012 01:23 PM, Caitlin Bestler wrote:

 Throughout the discussion on distributed rate limiting I've had the 
 annoying feeling that I've heard this joke before.

 Basically, are we looking for our keys under the street lamp because 
 the light is good rather than looking for them where they were lost?

 Has anyone studied the effectiveness of rate limitations implemented 
 at this layer. From my experience with rate

 shaping discussions in IEEE 802.1 Data Center Bridging group I am 
 concerned that the response time working this

 far up the stack will preclude effective rate shaping.

 Of course, if someone has studied this and shown it to be effective 
 then this would be great news. The light is

 Better under the street lamp.



 ___
 Mailing list: https://launchpad.net/~openstack Post to     : 
 openstack@lists.launchpad.net Unsubscribe : 
 https://launchpad.net/~openstack More help   : 
 https://help.launchpad.net/ListHelp


 ___
 Mailing list: https://launchpad.net/~openstack Post to     : 
 openstack@lists.launchpad.net Unsubscribe : 
 https://launchpad.net/~openstack More help   : 
 https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread andi abes
Caitlin, alas, you missed my point.

The intent of rate limiting API calls in OS goes well beyond limiting
network traffic. It's intended to ensure that no one tenant/user
consumes unduly high resources throughout the system. These resources
are not just network bandwidth, but the myriad of resources involved
in providing the service (DB access,  replication activity (both
CPU,mem and bandwidth).
These have little to do with networking or quantum (though having
quantum provide an API for bandwidth management would be cool).

You might want to think of this functionality as API-Quota - rather
than the traditional bandwidth only rate limits.


On Fri, Mar 30, 2012 at 2:40 PM, Caitlin Bestler
caitlin.best...@nexenta.com wrote:
 Caitlin Replies inline /Caitlin

 -Original Message-
 From: andi abes [mailto:andi.a...@gmail.com]
 Sent: Friday, March 30, 2012 11:32 AM
 To: Jay Pipes; Caitlin Bestler
 Cc: openstack@lists.launchpad.net
 Subject: Re: [Openstack] Question on wsgi rate limiting

 Caitlin, I'm curious what were the use cases and concerns in DCB?
 If my memory serves me right (from rate limiting at L2 level) the main issues 
 are guaranteeing QoS, effective bandwidth usage, fair allocation of memory 
 buffer space. All of those goals damaged pretty badly if congestion occurs 
 and any of the resources are exhausted (leading to indiscriminate packet 
 loss, for lack of any other recourse).
 Caitlin
 Correct.  The fundamental goal was to allow storage-oriented classes of 
 service which could be effectively guaranteed to be drop-free within a 
 Datacenter.
 FCoE as a specific application needed this to be a very strong guarantee, but 
 congestion drops triggering TCP back-offs is generally not a good thing for 
 storage traffic.

 And once you cut through the match, this is ultimately about good algorithms 
 that can be implemented in a distributed fashion that allocate the buffering 
 capacity
 Of the network elements somewhat intelligently and robustly.
 /Caitlin

 The use cases, at least the way as I conceive them for OS are very different. 
 They're not intended to resolve resource constraints as a primary goal 
 (though, that's definitely a secondary goal).  As an example - issuing lots 
 of Nova API calls is by itself not the problem
 - executing the downstream effects of what those requests trigger is whats 
 being protected (access to DB, spawning VM's, Rabbit MQ message rates etc).

 For Swift, where pure bandwidth is a primary concern, and the primary 
 resource being consumed - I imagine you're right. Some L2/L3 traffic shaping 
 (and monitoring) would be advisable - but that's not to say that's the only 
 resource. e.g. creating and deleting containers repeatedly will consume 
 relatively little bandwidth, but will exert quite a lot of resource 
 consumption on the back end. Rate limiting these API calls is probably 
 prudent at the API layer.
 Caitlin
 Yes, Nova APIs calls are very unlikely to cause network congestion.
 Bulk payload transfers (whether Swift or Nova Volumes) is an issue.
 My concern is that a truly effective solution will have to be at the Quantum 
 level, not wsgi.
 /Caitlin





 On Fri, Mar 30, 2012 at 1:56 PM, Jay Pipes jaypi...@gmail.com wrote:
 You make some good points about what is the appropriate level in the
 stack to do rate shaping, but I would just like to have a
 configurable, manageable and monitorable ratelimit/quota solution that
 doesn't seem like a giant hack
 :)

 Baby steps.

 -jay


 On 03/30/2012 01:23 PM, Caitlin Bestler wrote:

 Throughout the discussion on distributed rate limiting I've had the
 annoying feeling that I've heard this joke before.

 Basically, are we looking for our keys under the street lamp because
 the light is good rather than looking for them where they were lost?

 Has anyone studied the effectiveness of rate limitations implemented
 at this layer. From my experience with rate

 shaping discussions in IEEE 802.1 Data Center Bridging group I am
 concerned that the response time working this

 far up the stack will preclude effective rate shaping.

 Of course, if someone has studied this and shown it to be effective
 then this would be great news. The light is

 Better under the street lamp.



 ___
 Mailing list: https://launchpad.net/~openstack Post to     :
 openstack@lists.launchpad.net Unsubscribe :
 https://launchpad.net/~openstack More help   :
 https://help.launchpad.net/ListHelp


 ___
 Mailing list: https://launchpad.net/~openstack Post to     :
 openstack@lists.launchpad.net Unsubscribe :
 https://launchpad.net/~openstack More help   :
 https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread Caitlin Bestler


-Original Message-
From: andi abes [mailto:andi.a...@gmail.com] 
Sent: Friday, March 30, 2012 12:12 PM
To: Caitlin Bestler
Cc: Jay Pipes; openstack@lists.launchpad.net
Subject: Re: [Openstack] Question on wsgi rate limiting

Caitlin, alas, you missed my point.

The intent of rate limiting API calls in OS goes well beyond limiting network 
traffic. It's intended to ensure that no one tenant/user consumes unduly high 
resources throughout the system. These resources are not just network 
bandwidth, but the myriad of resources involved in providing the service (DB 
access,  replication activity (both CPU,mem and bandwidth).
These have little to do with networking or quantum (though having quantum 
provide an API for bandwidth management would be cool).

You might want to think of this functionality as API-Quota - rather than the 
traditional bandwidth only rate limits.

-

Yes, that label does make the difference in goals clearer.


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


  1   2   >