Re: [openstack-dev] [neutron][routed-network] Host doesn't connected any segments when creating port

agree with Neil. thanks shihanzhang 在 2016-11-01 17:13:54，"Neil Jerram" <n...@tigera.io> 写道： Hi Zhi Chang, I believe the answer is that the physical network (aka fabric) should provide routing between those two subnets. This routing between segments is implicit in the

Re: [openstack-dev] [neutron][routed-network] Host doesn't connected any segments when creating port

Hi Zhi Chang, You also need to connect these two subnets to a router. Thanks, shihanzhang 在 2016-11-01 15:47:57，"zhi" <changzhi1...@gmail.com> 写道： Hi, shihanzhang. I still have a question about routed network. I have two subnets. One is 10.1.0.0/24 and the other is 10.1.1.0/

Re: [openstack-dev] [neutron][routed-network] Host doesn't connected any segments when creating port

Hi Zhi Chang, Maybe you should add a config option in [ovs] section: bridge_mappings = public:br-ex, physnet1:br-physnet1 to handle the provider network 'physnet1'. Thanks, shihanzhang At 2016-11-01 11:56:33, "zhi" <changzhi1...@gmail.com> wrote: hi shihanzhang. Below

Re: [openstack-dev] [neutron][routed-network] Host doesn't connected any segments when creating port

hi Zhi chang, Could you provide your ml2_conf.ini for ovs agent, I guess the reason is that your ovs-agent on host devstack can't handle the related segment id. Thanks, shihanzhang 在 2016-10-31 18:43:36，"zhi" <changzhi1...@gmail.com> 写道： Hi, all. Recently, I watch the

Re: [openstack-dev] 回复： [neutron]dragonflow deployment incorrectness

As I know, now dragonflow still use neutron l3-agent for snat, so the l3-agent is enabled and router namespace be created. 在 2016-07-28 08:53:20，kangjingt...@sina.com 写道： Hi The reason why a namepspace be created while creating router is just because l3-agent is enabled. You can

Re: [openstack-dev] [neutron][SFC]

Hi Alioune and Cathy, For devstack on ubuntu14.04, the default ovs version is 2.0.2, so there was the error as Alioune said. Do we need to install speical ovs version in networking-sfc devstack plugin.sh? 在 2016-06-07 07:48:26，"Cathy Zhang" 写道： Hi

Re: [openstack-dev] [Neutron] [Dragonflow] Support configuration of DB clusters

good suggestion！ At 2015-12-25 19:07:10, "Li Ma" wrote: >Hi all, currently, we only support db_ip and db_port in the >configuration file. Some DB SDK supports clustering, like Zookeeper. >You can specify a list of nodes when client application starts to >connect to

Re: [openstack-dev] KILO: neutron port-update --allowed-address-pairs action=clear throws an exception

which branch do you use? there is not this problem in master branch. At 2015-09-28 13:43:05, "masoom alam" wrote: Can anybody highlight why the following command is throwing an exception: Command# neutron port-update db3113df-14a3-4d6d-a3c5-d0517a134fc3

Re: [openstack-dev] KILO: neutron port-update --allowed-address-pairs action=clear throws an exception

; wrote: stable KILO shall I checkout the latest code are you saying this...Also can you please confirm if you have tested this thing at your endand there was no problem... Thanks On Sun, Sep 27, 2015 at 11:29 PM, shihanzhang <ayshihanzh...@126.com> wrote: w

Re: [openstack-dev] [Neutron] Port Forwarding API

2) The same FIP address can be used for different mappings, for example FIP with IP X can be used with different ports to map to different VM's X:4001 -> VM1 IP X:4002 -> VM2 IP (This is the essence of port forwarding). So we also need the port mapping

Re: [openstack-dev] [neutron][L3][QA] DVR job failure rate and maintainability

Sean, Thank you very much for writing this, DVR indeed need to get more attention, it's a very cool and usefull feature, especially in large-scale. In Juno, it firstly lands to Neutron, through the development of Kilo and Liberty, it's getting better and better, we have used it in our

Re: [openstack-dev] [neutron] Expected cli behavior when ovs-agent is down

hi Vikas Choudhary, when ovs-agent service recover(ovs-agent process restart), the dhcp port will not re-binding successfully? At 2015-08-22 14:26:08, Vikas Choudhary choudharyvika...@gmail.com wrote: Hi Everybody, I want to discuss on https://bugs.launchpad.net/neutron/+bug/1348589.This

Re: [openstack-dev] [Neutron] netaddr and abbreviated CIDR format

there was another patch [1] fix the invalid CIDR for subnet. thanks, hanzhang, shi [1] https://review.openstack.org/#/c/201942/ At 2015-08-22 03:33:26, Jay Pipes jaypi...@gmail.com wrote: On 08/21/2015 02:34 PM, Sean M. Collins wrote: So - the tl;dr is that I don't think that we should

Re: [openstack-dev] [Neutron] VPNaaS and DVR compatibility

I have same question, I have filed a bug on launchpad: https://bugs.launchpad.net/neutron/+bug/1476469, who can help to clarify it? Thanks, Hanzhang, shi At 2015-08-05 00:33:05, Sergey Kolekonov skoleko...@mirantis.com wrote: Hi, I'd like to clarify a situation around VPNaaS and DVR

Re: [openstack-dev] [Neutron]Subnet's dns nameserver doesn't orderby input

hi, Zhi Chang, this link: #https://bugs.launchpad.net/neutron/+bug/1218629 is ok. At 2015-07-06 17:13:12, Zhi Chang chang...@unitedstack.com wrote: Thanks for your reply. Could you send the html link again? This does maybe doesn't exist. Thx Zhi Chang -- Original

Re: [openstack-dev] [Neutron] Issue with neutron-dhcp-agent not recovering known ports cache after restart

hi Shraddha Pandhe, I think your analysis is right, I also encountered the same problem， I have filed a bug[1] and commit a patch [2] for this bug. thanks, hanzhang shi [1] https://launchpad.net/bugs/1469615 [2] https://review.openstack.org/#/c/196927/ 在 2015-07-01 08:25:48，Shraddha

Re: [openstack-dev] [neutron]Anyone looking at support for VLAN-aware VMs in Liberty?

Hi Eric, Huawei is also interested in this BP, Hope it can be discussed during the design summit. Thanks, shihanzhang 在 2015-05-12 08:23:07，Karthik Natarajan natar...@brocade.com 写道： Hi Eric, Brocade is also interested in the VLAN aware VM’s BP. Let’s discuss it during the design

Re: [openstack-dev] [Neutron] Deprecating the use_namespaces option - Now's the time to speak up!

+1 to deprecate this option At 2015-03-21 02:57:09, Assaf Muller amul...@redhat.com wrote: Hello everyone, The use_namespaces option in the L3 and DHCP Neutron agents controls if you can create multiple routers and DHCP networks managed by a single L3/DHCP agent, or if the agent manages only a

[openstack-dev] [neutron] Question about VPNaas

. -shihanzhang __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [neutron][sriov] PciDeviceRequestFailed error

I think the problem is in nova, can you show your pci_passthrough_whitelist in nova.conf? At 2014-12-04 18:26:21, Akilesh K akilesh1...@gmail.com wrote: Hi, I am using neutron-plugin-sriov-agent. I have configured pci_whitelist in nova.conf I have configured ml2_conf_sriov.ini. But

Re: [openstack-dev] [Neutron] FWaaS/Security groups Not blocking ongoing traffic

I also agree file a new bug for FWaaS At 2014-10-28 00:09:29, Carl Baldwin c...@ecbaldwin.net wrote: I think I'd suggest opening a new bug for FWaaS since it is a different component with different code. It doesn't seem natural to extend the scope of this bug to include it. Carl On Mon,

Re: [openstack-dev] [Neutron] Killing connection after security group rule deletion

Hi, Elena Ezhova, thanks for your work to this problem! I agree with your analysis, this why I commit this bug but don't submit patch for it. I have want to use conntrack to solve this bug, but I also thought the problem you have said: The problem here is that it is sometimes

Re: [openstack-dev] [neutron][security-groups] Neutron default security groups

As I know there is no a way to disable default security groups, but I think this BP can solve this problem: https://blueprints.launchpad.net/neutron/+spec/default-rules-for-default-security-group 在 2014-09-17 07:44:42，Aaron Rosen aaronoro...@gmail.com 写道： Hi, Inline: On Tue, Sep 16,

Re: [openstack-dev] [OSSN 0020] Disassociating floating IPs does not terminate NAT connections with Neutron L3 agent

Now there is already a bug:https://bugs.launchpad.net/neutron/+bug/1334926 for this problem, meanwhile the security group also has same problem, I have report a bug: https://bugs.launchpad.net/neutron/+bug/1335375 在 2014-09-16 01:46:11，Martinx - ジェームズ thiagocmarti...@gmail.com 写道： Hey

Re: [openstack-dev] [neutron]Performance of security group

hi neutroner! my patch about BP:https://blueprints.launchpad.net/openstack/?searchtext=add-ipset-to-security need install ipset in devstack, I have commit the patch:https://review.openstack.org/#/c/113453/, who can help me review it, thanks very much! Best regards, shihanzhang

Re: [OpenStack-Infra] how to install ipset in jenkins

I got it, thanks very much! At 2014-08-12 00:45:49, Henry Gessau ges...@cisco.com wrote: Jeremy Stanley fu...@yuggoth.org wrote: On 2014-08-11 20:32:10 +0800 (+0800), shihanzhang wrote: I have a Neutron BP that add ipset to neutron security group:https://blueprints.launchpad.net/neutron/+spec

[OpenStack-Infra] how to install ipset in jenkins

Hi all, I have a Neutron BP that add ipset to neutron security group:https://blueprints.launchpad.net/neutron/+spec/add-ipset-to-security, this BP require the ipset is installed on L2 agent node, but I don't know how to config that when my patch commit to jenkins, who can help me, thanks

Re: [openstack-dev] [Neutron] Is network ordering of vNICs guaranteed?

Hi Paul, as I know, nova can guarante the ordering of vNICS, can you provide the reproduceable test script for this, I am glad to test it At 2014-08-10 01:16:16, Jay Pipes jaypi...@gmail.com wrote: Paul, does this friend of a friend have a reproduceable test script for this? Thanks!

Re: [openstack-dev] [neutron]Performance of security group

ipset to optimize security group agent codes does not bring the best results! Best regards, shihanzhang. At 2014-07-02 04:43:24, Ihar Hrachyshka ihrac...@redhat.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 02/07/14 10:12, Miguel Angel Ajo wrote: Shihazhang

Re: [openstack-dev] [neutron]Performance of security group

. @shihanzhang do you find it reasonable? - Original Message - - Original Message - @Nachi: Yes that could a good improvement to factorize the RPC mechanism. Another idea: What about creating a RPC topic per security group (quid of the RPC topic scalability) on which an agent

Re: [openstack-dev] [Neutron]One security issue about floating ip

I think this problem also exist in security group! At 2014-06-27 11:20:31, stanzgy stan@gmail.com wrote: I have filed this bug on nova https://bugs.launchpad.net/nova/+bug/1334938 On Fri, Jun 27, 2014 at 10:19 AM, Yongsheng Gong gong...@unitedstack.com wrote: I have reported it on

Re: [openstack-dev] [Neutron] default security group rules in neutron

Hi, Lingxian I think it indeed backport this feature to neutron, it will be very convenient for operators to use default security group! At 2014-06-23 10:23:39, Lingxian Kong anlin.k...@gmail.com wrote: Greetings We use neutron as network functionality implementation in nova, and as

Re: [openstack-dev] [neutron]Performance of security group

specs? At 2014-06-19 10:11:34, Miguel Angel Ajo Pelayo mangel...@redhat.com wrote: Hi it's a very interesting topic, I was getting ready to raise the same concerns about our security groups implementation, shihanzhang thank you for starting this topic. Not only at low level where

[openstack-dev] [neutron]Performance of security group

Hello all, Now in neutron, it use iptable implementing security group, but the performance of this implementation is very poor, there is a bug:https://bugs.launchpad.net/neutron/+bug/1302272 to reflect this problem. In his test, with default security groups(which has remote security group),

Re: [openstack-dev] [neutron]Performance of security group

of the performance issues until the ovs firewall can be implemented down the the line. Do you have any performance comparisons? On Jun 18, 2014 7:46 PM, shihanzhang ayshihanzh...@126.com wrote: Hello all, Now in neutron, it use iptable implementing security group, but the performance

Re: [openstack-dev] [Openstack-dev][Neutron] Port Mirroring Extension in Neutron

Hi Vinay, I am very happy to participate in this discussion! 在 2014-05-16 00:03:35，Kanzhe Jiang kanzhe.ji...@bigswitch.com 写道： Hi Vinay, I am interested. You could sign up a slot for a Network POD discussion. Thanks, Kanzhe On Thu, May 15, 2014 at 7:13 AM, Vinay Yadhav

[openstack-dev] [Neutron] the question of security group rule

Howdy Stackers! There is a security group problem has been bothering me, but I do not know whether is appropriate to consult in there! For a security group rule, it will convert to iptable rules in compute node, but a iptable rule '-m state --state RELATED,ESTABLISHED -j RETURN' confuse me,

Re: [openstack-dev] [Neutron] Interest in discussing vendor plugins for L3 services?

I'm interested in it. UTC8. At 2014-02-15 00:31:47,punal patel punal.pa...@gmail.com wrote: I am interested. UTC - 8. On Fri, Feb 14, 2014 at 1:48 AM, Nick Ma skywalker.n...@gmail.com wrote: I'm also interested in it. UTC8. -- cheers, Li Ma ___

Re: [openstack-dev] [nova]Why not allow to create a vm directly with two VIF in the same network

it makes perfect sense, LACP, MLT, Etherchannel/Portchannel, etc. In the virtual world I need to see a detailed description of one or more use cases. Shihanzhang, why don’t you start up an Etherpad or something and start putting together a list of one or more practical use cases in which

[openstack-dev] [nova]Why not allow to create a vm directly with two VIF in the same network

I am a beginer of nova, there is a problem which has confused me, in the latest version, it not allowed to create a vm directly with two VIF in the same network, but allowed to add a VIF that it network is same with a existed VIF'network, there is the use case that a vm with two VIF in the same

Re: [openstack-dev] [Neutron] About ports backing floating IPs

I am also perplexed about the ports backing floating ips. when plugin is selected OVS or LB, the ip address belonging to a port backing that floating ip is really set on VIF of 'qg-' , what is the port real action? At 2014-01-15 07:50:36,Salvatore Orlando sorla...@nicira.com wrote:

[openstack-dev] [neutron] Implement NAPT in neutron (https://blueprints.launchpad.net/neutron/+spec/neutron-napt-api)

I think that these two BP is to achieve same function,it is very necessary to implement this function! https://blueprints.launchpad.net/neutron/+spec/router-port-forwarding https://blueprints.launchpad.net/neutron/+spec/neutron-napt-api At 2014-01-09 16:56:20,Nir Yechiel nyech...@redhat.com