[openstack-dev] [Designate] In what sense is it multi-tenant?

2017-02-10 Thread Mike Spreitzer
In what sense is Designate multi-tenant? Can it be programmed to give different views to different DNS clients? (If so, how?) Thanks, Mike __ OpenStack Development Mailing List (not for usage questions) Unsubscribe:

Re: [openstack-dev] [designate] Status of the project

2017-02-10 Thread Mike Spreitzer
Joshua Harlow wrote on 02/10/2017 12:21:08 PM: > Knowing where this is at and the issues. It makes me wonder if it is > worthwhile to start thinking about how we can start to look at 'outside > the openstack' projects for DNS. I believe there is a few that are > similar

Re: [Openstack] [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-07-15 Thread Mike Spreitzer
on. BTW, when using packet tracing I find it troublesome to do the filtering and/or the pretty-printing online; I simply capture all the packets at a given interface and them examine them later with Wireshark. Regards, Mike From: Gustavo Randich <gustavo.rand...@gmail.com> To: Mike Spr

Re: [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-07-15 Thread Mike Spreitzer
on. BTW, when using packet tracing I find it troublesome to do the filtering and/or the pretty-printing online; I simply capture all the packets at a given interface and them examine them later with Wireshark. Regards, Mike From: Gustavo Randich <gustavo.rand...@gmail.com> To: Mike Spr

Re: [Openstack] Stop external network to reach instances (Was: Reaching VXLAN tenant networks from outside (without floating IPs))

2016-07-06 Thread Mike Spreitzer
Turbo Fredriksson wrote on 07/06/2016 07:29:48 AM: > Ok, I managed to get this working as well. Was quite > simple actually. > > But how do I _STOP_ this from happening?? If there's a root > user on the [local] network, they can simply add that route. > But in some cases I'd

Re: [Openstack] [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-06-30 Thread Mike Spreitzer
is to not forward traffic to the RFC 1918 addresses. I do not recall how the Neutron routers handle packets addressed to those addresses from sources on the "outside". Regards, Mike From: Gustavo Randich <gustavo.rand...@gmail.com> To: Mike Spreitzer/Watson/IBM@IBMUS Cc

Re: [Openstack] [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-06-29 Thread Mike Spreitzer
Gustavo Randich wrote on 06/29/2016 03:17:54 PM: > Hi operators... > > Transitioning from nova-network to Neutron (Mitaka), one of the key > issues we are facing is how to reach VMs in VXLAN tenant networks > without using precious floating IPs. > > Things that

Re: [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-06-29 Thread Mike Spreitzer
Gustavo Randich wrote on 06/29/2016 03:17:54 PM: > Hi operators... > > Transitioning from nova-network to Neutron (Mitaka), one of the key > issues we are facing is how to reach VMs in VXLAN tenant networks > without using precious floating IPs. > > Things that

Re: [openstack-dev] [Kuryr] [Neutron] Controlling security groups through Kuryr's libnetwork plugin [was: Waiting until Neutron PortisActive]

2016-06-12 Thread Mike Spreitzer
Antoni Segura Puimedon wrote on 06/11/2016 07:39:41 PM: > Well, with a label you can make the Neutron Port have an SG that > forbids pinging. Wait, what? Labels on what can do what? Thanks, Mike

Re: [openstack-dev] [Kuryr] [Neutron] Waiting until Neutron PortisActive

2016-06-11 Thread Mike Spreitzer
What about pinging? BTW, from where would the pings come? In the Docker/Swarm API today there is no way to disable ping. However, once Kuryr's libnetwork plugin is updated so that `docker network connect --ip=W.X.Y.Z ...` will latch onto a matching pre-existing Neutron Port, if it exists,

Re: [Openstack] Control network access between tenant networks in same neutron L3 router?

2016-05-10 Thread Mike Spreitzer
"Hong Hui Xiao" wrote on 05/09/2016 10:55:17 PM: > ... > I think the neutron fwaas can meet your requirement. Try "neutron help | > grep firewall" and [1] to see more. > > > [1] https://wiki.openstack.org/wiki/Neutron/FWaaS > > > HongHui Xiao(肖宏辉) > > > > From:

Re: [openstack-dev] [neutron] [designate] multi-tenancy in Neutron's DNS integration

2016-05-09 Thread Mike Spreitzer
"Hayes, Graham" <graham.ha...@hpe.com> wrote on 05/09/2016 04:08:07 PM: > ... > On 09/05/2016 20:55, Mike Spreitzer wrote: > ... > > Oh, right, the network gets to specify the rest of the FQDN. In my case > > I am interested in Neutron Ports on

Re: [openstack-dev] [neutron] [designate] multi-tenancy in Neutron's DNS integration

2016-05-09 Thread Mike Spreitzer
05/09/2016 03:05 PM > Subject: Re: [openstack-dev] [neutron] [designate] multi-tenancy in > Neutron's DNS integration > > On 09/05/2016 19:21, Mike Spreitzer wrote: > > I just read > > http://docs.openstack.org/mitaka/networking-guide/adv-config-dns.htmland > , unless &

[openstack-dev] [neutron] [designate] multi-tenancy in Neutron's DNS integration

2016-05-09 Thread Mike Spreitzer
I just read http://docs.openstack.org/mitaka/networking-guide/adv-config-dns.html and, unless I missed something, it seems to be describing something that is not multi-tenant. I am focused on FQDNs for Neutron Ports. For those, only the "hostname" part (the first label, in official DNS

[openstack-dev] [kuryr] Question for Antoni Puimedon about load balancers and overlay networks

2016-05-02 Thread Mike Spreitzer
I am looking at https://www.openstack.org/videos/video/project-kuryr-docker-delivered-kubernetes-next , around 28:00. You have said that overlay networks are involved, and are now talking about load balancers. Is this Neutron LBaaS? As far as I know, a Neutron LBaaS instance is "one-armed"

Re: [Openstack] Openstack powered Public cloud

2016-04-26 Thread Mike Spreitzer
There's no shortage of public IPv6 addresses. Regards, Mike ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe :

Re: [openstack-dev] [devstack][neutron] Eliminating the DevStack layer

2016-04-08 Thread Mike Spreitzer
I like this, for a reason not mentioned. I am not a Neutron dev or operator and have never learned how to deploy Neutron; I have always driven it through DevStack. The documentation for that has never been adequate, and I have concluded it will never be adequate. With inadequate

Re: [Openstack-operators] [neutron] Attach routing rules to networks?

2016-04-04 Thread Mike Spreitzer
with destination,nexthop pairs. The routes get pushed via DHCP. James Sent from my iPhone On Apr 2, 2016, at 9:28 PM, Mike Spreitzer <mspre...@us.ibm.com> wrote: Is there a way to attach a routing rule to a network or subnet, with the consequence that each device attached to that net or

[openstack-dev] [kuryr] Did kuryr need to know about Docker's cluster store?

2016-03-03 Thread Mike Spreitzer
On Feb 5 I was given a tarchive of kuryr with an install script that configures the docker daemon to use consul as its cluster store. If I modify the config of docker to use etcd instead then do I need to change anything in Kuryr? Thanks, Mike

Re: [openstack-dev] [neutron] - Changing the Neutron default security group rules

2016-03-02 Thread Mike Spreitzer
Kevin Benton wrote on 03/02/2016 01:27:27 PM: > Does it at least also include the UUID, or is there no way to tell > from 'nova show'? No direct way to tell, as far as I can see. __ OpenStack

Re: [openstack-dev] [neutron] - Changing the Neutron default security group rules

2016-03-02 Thread Mike Spreitzer
"Sean M. Collins" wrote on 03/02/2016 01:16:52 PM: > Meaning your users are creating new security groups and naming them > "default" - so you have the "default" default (heh) and then the one > that they created named default? > > Are security group names in Nova-Net unqiue?

Re: [openstack-dev] [neutron] - Changing the Neutron default security group rules

2016-03-02 Thread Mike Spreitzer
"Sean M. Collins" wrote on 03/02/2016 12:38:29 PM: > I think that the default security group should be left as is - and users > should be trained that they should bring/create security groups with the > appropriate rules for their need. Could we at least make it less

[openstack-dev] [devstack] [neutron] How to ask for linuxbridge instead of openvswitch

2016-02-29 Thread Mike Spreitzer
How would I modify the recipe at http://docs.openstack.org/developer/devstack/guides/neutron.html#using-neutron-with-a-single-interface to get linuxbridge instead of openvswitch? Thanks, Mike __ OpenStack Development

Re: [openstack-dev] [Neutron] MTU configuration pain

2016-01-25 Thread Mike Spreitzer
BTW, regarding devstack: See https://bugs.launchpad.net/devstack/+bug/1532924. I have been trying to get the current code to work, following the ideas in https://specs.openstack.org/openstack/fuel-specs/specs/7.0/jumbo-frames-between-instances.html#proposed-change . It fails only at the last

Re: [openstack-dev] [Neutron] MTU configuration pain

2016-01-23 Thread Mike Spreitzer
Adam Lawson wrote on 01/23/2016 02:27:46 PM: > For the sake of over-simplification, is there ever a reason to NOT > enable jumbo frames in a cloud/SDN context where most of the traffic > is between virtual elements that all support it? I understand that > some switches do

Re: [Openstack-operators] [openstack-operators]disable snat for router gateway

2016-01-19 Thread Mike Spreitzer
Aaron Segura wrote on 01/16/2016 12:19:53 PM: > You shouldn't have to do anything other than disable SNAT and set a > route for your tenant network upstream. Indeed, I have exercised exactly this. Regards, Mike ___

Re: [Openstack-operators] [neutron] Routing to tenant networks

2016-01-14 Thread Mike Spreitzer
> From: Carl Baldwin <c...@ecbaldwin.net> > To: Dan Sneddon <dsned...@redhat.com> > Cc: Matt Kassawara <mkassaw...@gmail.com>, Mike Spreitzer/Watson/ > IBM@IBMUS, "openstack-operators@lists.openstack.org" operat...@lists.openstack.org> > Date:

Re: [Openstack] [neutron] User documentation for Neutron's Firewall-as-a-Service (FWaaS)?

2016-01-12 Thread Mike Spreitzer
> From: Matt Kassawara <mkassaw...@gmail.com> > To: Mike Spreitzer/Watson/IBM@IBMUS > Cc: "openstack@lists.openstack.org" <openstack@lists.openstack.org> > Date: 01/12/2016 12:16 PM > Subject: Re: [Openstack] [neutron] User documentation for Neut

[Openstack] [neutron] User documentation for Neutron's Firewall-as-a-Service (FWaaS)?

2016-01-12 Thread Mike Spreitzer
Is there any user documentation for FWaaS besides http://docs.openstack.org/admin-guide-cloud/networking_introduction.html#firewall-as-a-service-fwaas-overview ? That one is a bit skimpy and, I suspect, a little outdated. For example, `neutron help firewall-create` mentions an option,

[Openstack-operators] [neutron] Routing to tenant networks

2016-01-12 Thread Mike Spreitzer
Is there any condition under which a Neutron router will route packets from a provider network to a tenant network with destination address unmolested? E.g., non-RFC1918 addresses on the tenant network? Does Neutron know anything about RFC6598? Thanks, Mike

[openstack-dev] [devstack] [neutron] Progress, and current problems

2016-01-05 Thread Mike Spreitzer
I have been trying to get http://docs.openstack.org/developer/devstack/guides/neutron.html#using-neutron-with-a-single-interface working on Ubuntu 14.04 (updated to the latest, which includes kernel 3.19). With the latest sources and a sufficiently recent OVS, the one-node install pretty

Re: [openstack-dev] [devstack] [neutron] Procedure for back-porting a bug fix to stable/liberty branch of a Neutron script in DevStack?

2016-01-04 Thread Mike Spreitzer
rting a bug fix to stable/liberty branch of a Neutron script > in DevStack? > > On Sun, Jan 3, 2016 at 4:01 PM, Mike Spreitzer <mspre...@us.ibm.com> wrote: > I would like to back-port https://review.openstack.org/#/c/242721/ > --- which fixed https://bugs.launchpad.net/devst

Re: [openstack-dev] [devstack] [neutron] Procedure for back-porting a bug fix to stable/liberty branch of a Neutron script in DevStack?

2016-01-03 Thread Mike Spreitzer
rting a bug fix to stable/liberty branch of a Neutron script > in DevStack? > > On Sun, Jan 3, 2016 at 4:01 PM, Mike Spreitzer <mspre...@us.ibm.com> wrote: > I would like to back-port https://review.openstack.org/#/c/242721/ > --- which fixed https://bugs.launchpad.net/devst

[openstack-dev] [devstack] [neutron] Procedure for back-porting a bug fix to stable/liberty branch of a Neutron script in DevStack?

2016-01-03 Thread Mike Spreitzer
I would like to back-port https://review.openstack.org/#/c/242721/ --- which fixed https://bugs.launchpad.net/devstack/+bug/1469596 --- to stable/liberty. I have contributed to main line development before, but not stable branches. I see that

Re: [openstack-dev] [neutron] Multiple locations for documentation of features

2015-12-08 Thread Mike Spreitzer
> From: Henry Gessau > To: "OpenStack Development Mailing List (not for usage questions)" > > Date: 12/04/2015 02:23 PM > Subject: Re: [openstack-dev] [neutron] Multiple locations for > documentation of features > > Sean M. Collins

[openstack-dev] The OVS and Provider Networks section of the guide to Neutron in DevStack

2015-10-20 Thread Mike Spreitzer
First let me make sure I understand what this section ( http://docs.openstack.org/developer/devstack/guides/neutron.html#neutron-networking-with-open-vswitch-and-provider-networks ) is trying to say. The second paragraph is saying that some infrastructure provider has allocated a VLAN tag (and

Re: [openstack-dev] [devstack] [neutron] A larger batch of questions about configuring DevStack to use Neutron

2015-10-17 Thread Mike Spreitzer
10/16/2015 01:12 PM > Subject: Re: [openstack-dev] [devstack] [neutron] A larger batch of > questions about configuring DevStack to use Neutron > > On Fri, Oct 16, 2015 at 02:02:57AM EDT, Mike Spreitzer wrote: > > Now I have tested the first section (taking the latest of both c

Re: [openstack-dev] [devstack] [neutron] A larger batch of questions about configuring DevStack to use Neutron

2015-10-16 Thread Mike Spreitzer
> From: Mike Spreitzer/Watson/IBM@IBMUS > To: "OpenStack Development Mailing List \(not for usage questions\)" > <openstack-dev@lists.openstack.org> > Date: 10/13/2015 03:39 AM > Subject: Re: [openstack-dev] [devstack] [neutron] A larger batch of > questions

Re: [openstack-dev] [devstack] A few questions on configuring DevStack for Neutron

2015-10-14 Thread Mike Spreitzer
Matt Riedemann wrote on 10/08/2015 09:48:33 PM: > On 10/8/2015 11:38 AM, Sean M. Collins wrote: > > Please see my response here: > > > > http://lists.openstack.org/pipermail/openstack-dev/2015-October/076251.html > > > > In the future, do not create multiple

Re: [openstack-dev] [devstack] [neutron] A larger batch of questions about configuring DevStack to use Neutron

2015-10-13 Thread Mike Spreitzer
atch of > questions about configuring DevStack to use Neutron > > On Thu, Oct 08, 2015 at 01:47:31PM EDT, Mike Spreitzer wrote: > > .. > > > > In the section > > > > http://docs.openstack.org/developer/devstack/guides/ > > > neutron.html#using-neutron-

Re: [openstack-dev] [devstack] [neutron] A larger batch of questions about configuring DevStack to use Neutron

2015-10-12 Thread Mike Spreitzer
figuring DevStack to use Neutron On Thu, Oct 08, 2015 at 01:47:31PM EDT, Mike Spreitzer wrote: > .. > > > In the section > > > http://docs.openstack.org/developer/devstack/guides/ > > neutron.html#using-neutron-with-a-single-interface > > > there is a hel

Re: [openstack-dev] [all] Recording little everyday OpenStack successes

2015-10-09 Thread Mike Spreitzer
Thierry Carrez wrote on 10/09/2015 05:42:49 AM: ... > So whenever you feel like you made progress, or had a little success in > your OpenStack adventures, or have some joyful moment to share, just > throw the following message on your local IRC channel: > > #success [Your

Re: [openstack-dev] [devstack] [neutron] A larger batch of questions about configuring DevStack to use Neutron

2015-10-08 Thread Mike Spreitzer
> From: "Sean M. Collins" <s...@coreitpro.com> ... > > On Tue, Oct 06, 2015 at 11:25:03AM EDT, Mike Spreitzer wrote: > > [Sorry, but I do not know if the thundering silence is because these > > questions are too hard, too easy, grossly off-topic, or simply

[openstack-dev] [devstack] [neutron] A larger batch of questions about configuring DevStack to use Neutron

2015-10-06 Thread Mike Spreitzer
[Sorry, but I do not know if the thundering silence is because these questions are too hard, too easy, grossly off-topic, or simply because nobody cares.] I have been looking at http://docs.openstack.org/developer/devstack/guides/neutron.htmland wonder about a few things. In the section

[openstack-dev] [devstack] A few questions on configuring DevStack for Neutron

2015-10-04 Thread Mike Spreitzer
[Apologies for re-posting, but I botched the subject line the first time and know that people use filters.] I have been looking at http://docs.openstack.org/developer/devstack/guides/neutron.html and wonder about a few things. In the section

[openstack-dev] A few questions on configuring DevStack for Neutron

2015-10-03 Thread Mike Spreitzer
I have been looking at http://docs.openstack.org/developer/devstack/guides/neutron.html and wonder about a few things. In the section http://docs.openstack.org/developer/devstack/guides/neutron.html#using-neutron-with-a-single-interface there is a helpful display of localrc contents. It

Re: [openstack-dev] [all] -1 due to line length violation in commit messages

2015-09-30 Thread Mike Spreitzer
> From: Gorka Eguileor > To: "OpenStack Development Mailing List (not for usage questions)" > > Date: 09/29/2015 07:34 AM > Subject: Re: [openstack-dev] [all] -1 due to line length violation > in commit messages ... > Since we are not all

Re: [openstack-dev] [magnum]swarm + compose = k8s?

2015-09-28 Thread Mike Spreitzer
> From: 王华 > To: "OpenStack Development Mailing List (not for usage questions)" > > Date: 09/28/2015 11:34 PM > Subject: [openstack-dev] [magnum]swarm + compose = k8s? > > Hi folks, > > Magnum now exposes service, pod, etc to users

Re: [openstack-dev] Compute API (Was Re: [nova][cinder] how to handle AZ bug 1496235?)

2015-09-28 Thread Mike Spreitzer
> From: Monty Taylor > To: Sylvain Bauza , "OpenStack Development > Mailing List (not for usage questions)" > Date: 09/28/2015 09:54 AM > Subject: Re: [openstack-dev] Compute API (Was Re: [nova][cinder] how > to handle

[openstack-dev] [devstack] Is there a way to configure devstack for one flat external network using Kilo, Neutron?

2015-09-28 Thread Mike Spreitzer
Is there a way to configure devstack to install Neutron such that there is just one network and that is an external network and Nova can create Compute Instances on it, using projects of Kilo vintage? Thanks, Mike __

Re: [Openstack] Data transmission failure between VM and outsidemachines

2015-09-27 Thread Mike Spreitzer
> From: "applyhhj" > To: "openstack" > Date: 09/27/2015 11:16 AM > Subject: [Openstack] Data transmission failure between VM and outside machines > > Hi, I have setup the openstack cloud and launched VMs in the cloud. > At first everything went

Re: [openstack-dev] [nova][neutron][devstack] New proposed 'default' network model

2015-09-15 Thread Mike Spreitzer
Monty Taylor wrote on 09/15/2015 11:04:07 AM: > a) an update to python-novaclient to allow a named network to be passed > to satisfy the "you have more than one network" - the nics argument is > still useful for more complex things I am not using the latest, but rather

Re: [openstack-dev] [nova][neutron][devstack] New proposed 'default' network model

2015-09-15 Thread Mike Spreitzer
"Armando M." wrote on 09/15/2015 03:50:24 PM: > On 15 September 2015 at 10:02, Doug Hellmann wrote: > Excerpts from Armando M.'s message of 2015-09-15 09:30:35 -0700: ... > As with the Glance image upload API discussion, this is an example > of an

Re: [openstack-dev] [nova][neutron][devstack] New proposed 'default' network model

2015-09-15 Thread Mike Spreitzer
Clark Boylan wrote on 09/15/2015 04:06:26 PM: > > I also strongly recommend to users to put vms on a private network and > > use floating ip's/load balancers. For many reasons. Such as, if you > > don't, the ip that gets assigned to the vm helps it become a pet. you > >

Re: [Openstack] veth pair disappear after hardware reboot

2015-08-30 Thread Mike Spreitzer
You know that veths do not survive reboot, right? It is up to Neutron or whatever needs them to create them after each boot. Have you checked that all the right Neutron services came up and are healthy after your reboot? ___ Mailing list:

[Openstack-operators] Neutron IPv6 manual for single-stacking in Juno

2015-08-04 Thread Mike Spreitzer
I see https://wiki.openstack.org/wiki/NEUTRON-IPV6-MANUAL explicitly disclaims interest in single-stacking and in Juno. Where would I go to learn how to use IPv6 in the single-stack Juno case? Thanks, Mike ___ OpenStack-operators mailing list

Re: [openstack-dev] [neutron] [fwaas] -IPv6 support in Kilo

2015-06-02 Thread Mike Spreitzer
From: Rukhsana Ansari rukhsana.ans...@oneconvergence.com To: openstack-dev@lists.openstack.org Date: 06/02/2015 01:59 PM Subject: [openstack-dev] [neutron] [fwaas] -IPv6 support in Kilo Hi, I was browsing the code to understand IPv6 support For FWaaS in Kilo. I don't see a

Re: [openstack-dev] [neutron] IPv4 transition/interoperation with IPv6

2015-05-06 Thread Mike Spreitzer
, Mike Spreitzer mspre...@us.ibm.com wrote: Does Neutron support any of the 4/6 interoperation/transition techniques? I wear an operator's hat nowadays, and want to make IPv6 as useful and easy to use as possible for my tenants. I think the interoperation/transition techniques will play a big

Re: [Openstack] Clean shutdown

2015-05-04 Thread Mike Spreitzer
Binan AL Halabi binanalhal...@yahoo.com wrote on 05/05/2015 01:15:51 AM: I have this question: When the autoscaling policy (scale down policy) is triggered and one of the server is going to be killed. Nova select the oldest to kill. The question is there a way to make the termination clean

[openstack-dev] [neutron] IPv4 transition/interoperation with IPv6

2015-05-04 Thread Mike Spreitzer
Does Neutron support any of the 4/6 interoperation/transition techniques? I wear an operator's hat nowadays, and want to make IPv6 as useful and easy to use as possible for my tenants. I think the interoperation/transition techniques will play a big role in this. Thanks,

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
like there is two external networks: one on br- ex1, second on br-ex2. But be alert that this not very stable configuration, you need to maintain it by yourself. On 04/25/2015 10:13 PM, Mike Spreitzer wrote: Is there a way to create multiple external networks from Neutron's point

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
Uwe Sauter uwe.sauter...@gmail.com wrote on 04/27/2015 10:54:15 AM: Am 27.04.2015 um 16:36 schrieb Mike Spreitzer: Uwe Sauter uwe.sauter...@gmail.com wrote on 04/25/2015 04:17:35 PM: Or instead of using Linux bridges you could use a manually created OpenVSwitch bridge. This allows you

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
Uwe Sauter uwe.sauter...@gmail.com wrote on 04/27/2015 01:22:35 PM: if I understood Georges answer correctly he suggested one bridge (br-join, either OVS or linux bridge) to connect other bridges via patch links, one for each external network you'd like to create. These second level

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
gustavo panizzo (gfa) g...@zumbi.com.ar wrote on 04/27/2015 11:23:13 AM: On 2015-04-27 22:59, Mike Spreitzer wrote: Uwe Sauter uwe.sauter...@gmail.com wrote on 04/27/2015 10:54:15 AM: What I suggested later on is that you probably don't need any second level bridge at all. Just create

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
gustavo panizzo (gfa) g...@zumbi.com.ar wrote on 04/27/2015 11:23:13 AM: On 2015-04-27 22:59, Mike Spreitzer wrote: Uwe Sauter uwe.sauter...@gmail.com wrote on 04/27/2015 10:54:15 AM: What I suggested later on is that you probably don't need any second level bridge at all. Just

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-27 Thread Mike Spreitzer
Uwe Sauter uwe.sauter...@gmail.com wrote on 04/27/2015 10:54:15 AM: Am 27.04.2015 um 16:36 schrieb Mike Spreitzer: Uwe Sauter uwe.sauter...@gmail.com wrote on 04/25/2015 04:17:35 PM: Or instead of using Linux bridges you could use a manually created OpenVSwitch bridge. This allows you

[Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-25 Thread Mike Spreitzer
Is there a way to create multiple external networks from Neutron's point of view, where both of those networks are accessed through the same host NIC? Obviously those networks would be using different subnets. I need this sort of thing because the two subnets are treated differently by the

[openstack-dev] [neutron] multiple external networks on the same host NIC

2015-04-25 Thread Mike Spreitzer
As an operator, is there a way I can create two external networks from Neutron's point of view, where both of those networks are accessed through the same host NIC? Obviously those networks would be using different subnets. I need this sort of thing because the two subnets are treated

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-25 Thread Mike Spreitzer
Uwe Sauter uwe.sauter...@gmail.com wrote on 04/25/2015 04:42:06 PM: Am 25.04.2015 um 22:28 schrieb Mike Spreitzer: From: Uwe Sauter uwe.sauter...@gmail.com Or instead of using Linux bridges you could use a manually created OpenVSwitch bridge. This allows you to add internal ports

Re: [Openstack-operators] [neutron] multiple external networks on the same host NIC

2015-04-25 Thread Mike Spreitzer
Kevin Benton blak...@gmail.com wrote on 04/25/2015 08:38:25 PM: Bridge mappings is an agent configuration value, it's not in the neutron server config. Run ps -ef and look for the neutron openvswitch agent process to see which configuration files it's referencing. The bridge mappings will

Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways

2015-04-17 Thread Mike Spreitzer
From: Jacob Godin jacobgo...@gmail.com To: Mike Spreitzer/Watson/IBM@IBMUS Cc: Daniel Comnea comnea.d...@gmail.com, OpenStack Operators openstack-operators@lists.openstack.org Date: 04/15/2015 08:37 AM Subject: Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways Ah

Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways

2015-04-17 Thread Mike Spreitzer
From: Mike Spreitzer/Watson/IBM@IBMUS From: Jacob Godin jacobgo...@gmail.com Ah, gotcha. So you're not using overlapping subnets then. Unfortunately that hack wouldn't work in our environment, but definitely something that others might consider using. Right, the solution I

Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways

2015-04-15 Thread Mike Spreitzer
From: Daniel Comnea comnea.d...@gmail.com To: Jacob Godin jacobgo...@gmail.com Cc: Mike Spreitzer/Watson/IBM@IBMUS, OpenStack Operators openstack- operat...@lists.openstack.org Date: 04/15/2015 02:34 AM Subject: Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways Sent

Re: [Openstack-operators] [Neutron] Floating IPs / Router Gateways

2015-04-14 Thread Mike Spreitzer
Jacob Godin jacobgo...@gmail.com wrote on 04/14/2015 05:12:48 PM: Absolutely. We're trying to reduce our public IPv4 usage, so having one per tenant network (not even including floating IPs) is a drain. I am having exactly the same issue. I am currently solving it with a different hack that

[Openstack] [neutron] how to use multiple external networks?

2015-04-08 Thread Mike Spreitzer
Supposing there are two external provider networks, and a tenant wants (a) some of his Compute Instances to have floating IP addresses on one of those external networks, (b) some other of his Compute Instances to have floating IP addresses on the other external network, and (c) all of his

Re: [openstack-dev] [neutron] Neutron scaling datapoints?

2015-04-08 Thread Mike Spreitzer
Are you looking at scaling the numbers of tenants, Neutron routers, and tenant networks as you scale hosts and guests? I think this is a plausible way to grow. The compartmentalizations that comes with growing those things may make a difference in results. Thanks, Mike From: Neil Jerram

Re: [Openstack] [neutron] how to use multiple external networks?

2015-04-08 Thread Mike Spreitzer
Oops, my original email did not contain all of the constraints. Each compute instance gets only one network interface, only one IP address. Does Juno Neutron have a way to solve this problem? Thanks, Mike From: James Denton james.den...@rackspace.com To: Mike Spreitzer/Watson/IBM

Re: [Openstack] Latency of Neutron's floatingip-associate operation?

2015-04-02 Thread Mike Spreitzer
I think I am seeing a latency on the order of 10 seconds between (a) the time Neutron returns success from that operation and (b) the time when the association is actually functioning. Is this sort of latency to be expected? I am using Juno, ML2, OVS, and GRE, if it matters. Sorry, I

[Openstack] Latency of Neutron's floatingip-associate operation?

2015-04-01 Thread Mike Spreitzer
I think I am seeing a latency on the order of 10 seconds between (a) the time Neutron returns success from that operation and (b) the time when the association is actually functioning. Is this sort of latency to be expected? I am using Juno, ML2, OVS, and GRE, if it matters. Thanks, Mike

[Openstack] [neutron] questions about IPv6 playing nice together with IPv4

2015-03-31 Thread Mike Spreitzer
Can Neutron do NAT between IPv4 and IPv6? For example, if there is a Neutron router between an external network having only IPv6 subnets and a tenant network having only IPv4 subnets, can there be a floating IP address in v6 bound to a private IP address in v4? If I have a tenant network with

Re: [Openstack] [openstack][ceilometer][icehouse]

2015-03-13 Thread Mike Spreitzer
Chinasubbareddy M chinasubbaredd...@persistent.com wrote on 03/13/2015 12:56:33 AM: need to write a code in python to Implement a new custom meter data in ceilometer, could you please help me out with your suggestion ? my intention is to collect the application sample data through that

Re: [openstack-dev] Heat: autoscaling across availability zones

2015-02-28 Thread Mike Spreitzer
From: Weidong Shao weidongs...@gmail.com To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org Date: 02/28/2015 02:12 PM Subject: [openstack-dev] Heat: autoscaling across availability zones From the heat template reference doc, it seems that

Re: [Openstack] Fn::FindInMap gives error in Heat HOT Template

2015-02-11 Thread Mike Spreitzer
That doc also says that Ref is not supported in template heat_template_version: 2014-10-16. Qiming Teng teng...@linux.vnet.ibm.com wrote on 02/12/2015 05:35:45 AM: From: Qiming Teng teng...@linux.vnet.ibm.com To: openstack@lists.openstack.org Date: 02/11/2015 09:47 PM Subject: Re:

[Openstack] Control over gateway subnet?

2014-11-21 Thread Mike Spreitzer
For a certain Neutron installation I plan to have one external network with several subnets. I was given a vague warning that there are problems with multiple subnets in an external network, but no details. Do you know of any? I have done a little testing and found no nasty surprise.

Re: [Openstack] How to run the HEAT autoscaling YAML

2014-11-10 Thread Mike Spreitzer
Venu Murthy ve...@thoughtworks.com wrote on 11/06/2014 08:34:37 PM: In terms of the architecture for OpenStack setup, if we have a controller node, Compute Node A and Compute Node B. In the same availability zone. I do understand that this autoscaling is more for the instances. But how

Re: [openstack-dev] [heat] AutoScalingGroup with LB Member

2014-11-03 Thread Mike Spreitzer
Cameron Seader csea...@suse.com wrote on 11/03/2014 06:22:32 PM: Please if you can help me out.. Here is my heat stack http://paste.opensuse.org/80575159 for some reason its failing on the member address.. not sure the syntax is right. Compare with

Re: [Openstack] How to run the HEAT autoscaling YAML

2014-11-03 Thread Mike Spreitzer
Mridhul Pax mrid...@live.com wrote on 11/03/2014 02:17:23 AM: From: Mridhul Pax mrid...@live.com To: openstack@lists.openstack.org openstack@lists.openstack.org Date: 11/03/2014 02:26 AM Subject: [Openstack] How to run the HEAT autoscaling YAML Hello All, I'm trying to run the

Re: [openstack-dev] [heat][ceilometer]: scale up/ down based on number of instances in a group

2014-10-28 Thread Mike Spreitzer
Daniel Comnea comnea.d...@gmail.com wrote on 10/27/2014 07:16:32 AM: Yes i did but if you look at this example https://github.com/openstack/heat-templates/blob/master/hot/autoscaling.yaml the flow is simple: CPU alarm in Ceilometer triggers the type: OS::Heat::ScalingPolicy which

Re: [openstack-dev] [DevStack] Proposal - add support for Markdown for docs

2014-10-27 Thread Mike Spreitzer
Sean Dague s...@dague.net wrote on 10/27/2014 09:13:27 AM: From: Sean Dague s...@dague.net On 10/22/2014 11:10 AM, Collins, Sean wrote: With some xargs, sed, and pandoc - I now present to you the first attempt at converting the DevStack docs to RST, and making the doc build look

Re: [openstack-dev] [all] How can we get more feedback from users?

2014-10-24 Thread Mike Spreitzer
Angus Salkeld asalk...@mirantis.com wrote on 10/24/2014 12:32:04 AM: I have felt some grumblings about usability issues with Heat templates/client/etc.. and wanted a way that users could come and give us feedback easily (low barrier). I started an etherpad (https://

Re: [openstack-dev] [all] add cyclomatic complexity check to pep8 target

2014-10-16 Thread Mike Spreitzer
I like the idea of measuring complexity. I looked briefly at `python -m mccabe`. It seems to measure each method independently. Is this really fair? If I have a class with some big methods, and I break it down into more numerous and smaller methods, then the largest method gets smaller,

[openstack-dev] [ceilometer] [heat] grace period for an alarm?

2014-10-14 Thread Mike Spreitzer
Can a Ceilometer client create an alarm with a grace period? That is, an initial period of time during which alarms are suppressed. For a related concept, see the grace period in an AWS autoscaling group. Note that in an OpenStack heat template, the author can not write an arithmetic

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-08 Thread Mike Spreitzer
Mark Kirkwood mark.kirkw...@catalyst.net.nz wrote on 10/07/2014 02:50:01 AM: On 07/10/14 19:44, Mike Spreitzer wrote: Mark Kirkwood mark.kirkw...@catalyst.net.nz wrote on 10/07/2014 02:23:36 AM: I think why this is not documented is the usual use-case for devstack is development

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-07 Thread Mike Spreitzer
Mark Kirkwood mark.kirkw...@catalyst.net.nz wrote on 10/07/2014 02:23:36 AM: I think why this is not documented is the usual use-case for devstack is development setups where real external ips for the VMs is usually not a point of interest. For instance I never need this...I do

Re: [openstack-dev] [Openstack-dev][nova] git fetch fails with permission denied (publickey)

2014-10-06 Thread Mike Spreitzer
Jennifer Mulsow/Austin/IBM@IBMUS wrote on 10/06/2014 06:45:21 PM: I have followed the instructions on https://wiki.openstack.org/wiki/ Gerrit_Workflow and am trying to fetch the nova repository, but it fails with Permission denied (publickey). I believe this has something to do with my

[Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
Is it possible to use DevStack to install OpenStack, including Neutron, so that OpenStack can make a VM that can communicate with the world beyond OpenStack? I am looking for a simple localrc or local.conf that will do this. Let us take a concrete example. Suppose I have a machine with one

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
From: Salvatore Orlando sorla...@nicira.com To: Mike Spreitzer/Watson/IBM@IBMUS Cc: OpenStack openstack@lists.openstack.org Date: 10/06/2014 05:40 PM Subject: Re: [Openstack] How to make DevStack install OpenStack with Neutron? Some (hopefully) helpful answer inline. Salvatore On 6

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
From: Salvatore Orlando sorla...@nicira.com To: Mike Spreitzer/Watson/IBM@IBMUS Cc: OpenStack openstack@lists.openstack.org Date: 10/06/2014 05:40 PM Subject: Re: [Openstack] How to make DevStack install OpenStack with Neutron? ... This is a localrc I have been using for ages

Re: [Openstack] Fwd: Re: How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
From: Ian Y. Choi i...@naimnetworks.com To: openstack@lists.openstack.org Cc: Mike Spreitzer/Watson/IBM@IBMUS Date: 10/06/2014 10:50 PM Subject: Fwd: Re: [Openstack] How to make DevStack install OpenStack with Neutron? Hello, I'm not sure which Linux distribution you are using

Re: [openstack-dev] [TripleO] a need to assert user ownership in preserved state

2014-10-01 Thread Mike Spreitzer
Clint Byrum cl...@fewbar.com wrote on 10/01/2014 09:50:33 PM: Recently we've been testing image based updates using TripleO, and we've run into an interesting conundrum. Currently, our image build scripts create a user per service for the image. We don't, at this time, assert a UID, so it

  1   2   3   4   >