Re: [openstack-dev] Fwd: FW: [Neutron] Group Based Policy and the way forward

2014-08-08 Thread CARVER, PAUL
Wuhongning [mailto:wuhongn...@huawei.com] wrote: >Does it make sense to move all advanced extension out of ML2, like security >group, qos...? Then we can just talk about advanced service itself, without >bothering basic neutron object (network/subnet/port) A modular layer 3 (ML3) analogous to ML2

[openstack-dev] [Neutron] Is network ordering of vNICs guaranteed?

2014-08-08 Thread CARVER, PAUL
I'm hearing "friend of a friend" that people have looked at the code and determined that the order of networks on a VM is not guaranteed. Can anyone confirm whether this is true? If it is true, is there any reason why this is not considered a bug? I've never seen it happen myself. To elaborate,

Re: [openstack-dev] Fwd: FW: [Neutron] Group Based Policy and the way forward

2014-08-11 Thread CARVER, PAUL
loy wolfe [mailto:loywo...@gmail.com] wrote: >Then since Network/Subnet/Port will never be treated just as LEGACY >COMPATIBLE role, there is no need to extend Nova-Neutron interface to >follow the GBP resource. Anyway, one of optional service plugins inside >Neutron shouldn't has any impact on Nov

Re: [openstack-dev] [Neutron] Is network ordering of vNICs guaranteed?

2014-08-11 Thread CARVER, PAUL
Armando M. [mailto:arma...@gmail.com] wrote: >>On 9 August 2014 10:16, Jay Pipes wrote: >>Paul, does this friend of a friend have a reproduceable test >>script for this? >We would also need to know the OpenStack release where this issue manifest >itself. A number of bugs have been raised in the

Re: [openstack-dev] [nova][core] Expectations of core reviewers

2014-08-13 Thread CARVER, PAUL
Daniel P. Berrange [mailto:berra...@redhat.com] wrote: >our dispersed contributor base. I think that we should be examining >what we can achieve with some kind of virtual online mid-cycle meetups >instead. Using technology like google hangouts or some similar live >collaboration technology, not me

Re: [openstack-dev] [Neutron][DevStack] How to increase developer usage of Neutron

2014-08-14 Thread CARVER, PAUL
Mike Spreitzer [mailto:mspre...@us.ibm.com] wrote: >I'll bet I am not the only developer who is not highly competent with >bridges and tunnels, Open VSwitch, Neutron configuration, and how DevStack >transmutes all those. My bet is that you would have more developers using >Neutron if there were a

Re: [openstack-dev] [nova][core] Expectations of core reviewers

2014-08-14 Thread CARVER, PAUL
Daniel P. Berrange [mailto:berra...@redhat.com] wrote: >Depending on the usage needs, I think Google hangouts is a quite useful >technology. For many-to-many session its limit of 10 participants can be >an issue, but for a few-to-many broadcast it could be practical. What I >find particularly appe

Re: [openstack-dev] [nova][core] Expectations of core reviewers

2014-08-14 Thread CARVER, PAUL
Russell Bryant [mailto:rbry...@redhat.com] wrote: >An ideal solution would allow attendees to join as individuals from >anywhere. A lot of contributors work from home. Is that sort of thing >compatible with your system? In principle, yes, but that loses the immersive telepresence aspect which i

[openstack-dev] [Neutron] Partially Shared Networks

2014-01-10 Thread CARVER, PAUL
If anyone is giving any thought to networks that are available to multiple tenants (controlled by a configurable list of tenants) but not visible to all tenants I'd like to hear about it. I'm especially thinking of scenarios where specific networks exist outside of OpenStack and have specific p

[openstack-dev] [Neutron] Partially Shared Networks

2014-01-15 Thread CARVER, PAUL
Sorry for this not threading properly. I had set the Mailman config to filter on Neutron topic but it ended up filtering out everything so I only saw responses by looking at the archive. I removed the filter in Mailman and will have to filter locally on my end. But I don't have any of the origin

Re: [openstack-dev] Proposal for dd disk i/o performance blueprint of cinder.

2014-01-15 Thread CARVER, PAUL
Chris Friesen [mailto:chris.frie...@windriver.com] wrote: >I read a proposal about using thinly-provisioned logical volumes as a >way around the cost of wiping the disks, since they zero-fill on demand >rather than incur the cost at deletion time. I think it make a difference where the requirem

Re: [openstack-dev] Proposal for dd disk i/o performance blueprint of cinder.

2014-01-16 Thread CARVER, PAUL
Alan Kavanagh wrote: >I posted a query to Ironic which is related to this discussion. My thinking >was I want to ensure the case you note here (1) " a >tenant can not read >another tenants disk.." the next (2) was where in Ironic you provision a >baremetal server that has an >onboard dish

Re: [openstack-dev] Proposal for dd disk i/o performance blueprint of cinder.

2014-01-16 Thread CARVER, PAUL
Clint Byrum wrote: >Is that really a path worth going down, given that tenant-A could just >drop evil firmware in any number of places, and thus all tenants afterward >are owned anyway? I think a change of subject line is in order for this topic (assuming it hasn't been discussed in sufficient d

Re: [openstack-dev] "Evil" Firmware

2014-01-16 Thread CARVER, PAUL
Clint Byrum wrote: >Excerpts from Alan Kavanagh's message of 2014-01-15 19:11:03 -0800: >> Hi Paul >> >> I posted a query to Ironic which is related to this discussion. My thinking >> was I want to ensure the case you note here (1) " a tenant can not read >> >another tenants disk.." the ne

[openstack-dev] [Neutron] Selectively disabling certain built in iptables rules

2014-01-21 Thread CARVER, PAUL
Feel free to tell me this is a bad idea and scold me for even asking, but please help me figure out how to do it anyway. This is for a specific tenant in a specific lab that was built specifically for that one tenant to do some experimental work that requires VMs to route and other VMs to act as

Re: [openstack-dev] [Neutron] Selectively disabling certain built in iptables rules

2014-01-21 Thread CARVER, PAUL
Darragh O'Reilly wrote: >Neutron does not know about flavors or images. But it has ports which have a >name attribute that can be set to an arbitrary string, e.g. 'anti_spoof_off'. >The >name does not need to be unique within the tenant. Then your overridden methods >could check for that string.

Re: [openstack-dev] [nova][neutron]About creating vms without ip address

2014-01-22 Thread CARVER, PAUL
Yuriy Taraday wrote: >Fuel needs to manage nodes directly via DHCP and PXE and you can't do that >with Neutron since you can't make its >dnsmasq service quiet. Can you elaborate on what you mean by this? You can turn of Neutron’s dnsmasq on a per network basis, correct? Do you mean something el

Re: [openstack-dev] [neutron] Neutron should disallow /32 CIDR

2014-01-23 Thread CARVER, PAUL
Paul Ward: Thank you to all who have participated in this thread. I've just proposed a fix in gerrit. For those involved thus far, if you could review I would be greatly appreciative! https://review.openstack.org/#/c/68742/1 I wouldn't go so far as to say this verification SHOULDN'T be added

Re: [openstack-dev] [neutron] Neutron should disallow /32 CIDR

2014-01-23 Thread CARVER, PAUL
Paul Ward wrote: >Given your statement about routers potentially using a /30 network, I think we >should leave the restriction at /30 >rather than /29. I'm assuming your statement that >some routers use /30 >subnets to connect to each other could >potentially apply to neutron-created routers.

Re: [openstack-dev] [nova]Why not allow to create a vm directly with two VIF in the same network

2014-01-24 Thread CARVER, PAUL
I agree that I'd like to see a set of use cases for this. This is the second time in as many days that I've heard about a desire to have such a thing but I still don't think I understand any use cases adequately. In the physical world it makes perfect sense, LACP, MLT, Etherchannel/Portchannel,

Re: [openstack-dev] [nova]Why not allow to create a vm directly with two VIF in the same network

2014-01-27 Thread CARVER, PAUL
Lingxian Kong wrote: >Actually, in the scenario of NFV, all the rules or behaviors of the physical >world will apply to that in the virtual world, right? >IMHO, despite of the scenarios, we should at least guarantee the consistency >of creating vms with nics and attaching nics . I'll need to t

Re: [openstack-dev] [oslo] log message translations

2014-01-27 Thread CARVER, PAUL
Joshua Harlow wrote: >From what I know most all (correct me if I am wrong) open source projects >don't translate log messages; so it seems odd to be the special snowflake >project/s. >Do people find this type of translation useful? >It'd be nice to know how many people really do so the benefit/dr

Re: [openstack-dev] [oslo] log message translations

2014-01-27 Thread CARVER, PAUL
Jay Pipes wrote: >Have you ever tried using Google Translate for anything more than very >simple phrases? >The results can be... well, interesting ;) And given the amount of >technical terms used in these messages, I doubt GT or any automated >translating service would provide a whole lot of valu

Re: [openstack-dev] [nova]Why not allow to create a vm directly with two VIF in the same network

2014-01-28 Thread CARVER, PAUL
should at least guarantee the consistency of creating vms with nics and attaching nics. 在 2014-01-24 22:33:36,"CARVER, PAUL" mailto:pc2...@att.com>> 写道: I agree that I’d like to see a set of use cases for this. This is the second time in as many days that I’ve heard about a desir

Re: [openstack-dev] [nova]Why not allow to create a vm directly with two VIF in the same network

2014-01-30 Thread CARVER, PAUL
Vishvananda Ishaya wrote: >In testing I have been unable to saturate a 10g link using a single VM. Even >with multiple streams, >the best I have been able to do (using virtio and vhost_net is about 7.8g. Can you share details about your hardware and vSwitch config (possibly off list if that isn

Re: [openstack-dev] [neutron][ml2] Maintaining support for the Tail-f NCS mech driver in Icehouse

2014-02-09 Thread CARVER, PAUL
Kyle Mestery wrote: >So, in general I don't think this will fly because it's my understanding the >OpenStack servers only test fully open source code. Allowing a third party >vendor system to run on the OpenStack servers as part of any functional >testing would open an entirely new can of worms h

Re: [openstack-dev] [Solum] Question about Zuul's role in Solum

2014-02-13 Thread CARVER, PAUL
Julien Vey wrote: >About Gerrit, I think it is also a little too much. Many users have their > own reviewing system, Pull requests with github, bitbucket or stash, >their own instance of gerrit, or even a custom git workflow. >Gerrit would be a great feature for future versions of Solum. but only

Re: [openstack-dev] B203 table 6 for Neutron//Re: SDN NBI Core APIs consumed by OpenStack: Wednesday May 14th at 10:30-11am in the developer lounge at 3rd floor

2014-05-14 Thread CARVER, PAUL
Tina, That was a good conversation. Would you be available for some additional followup on the L3 VPN topic at 4:00 today? I have a coworker who wasn't available for the discussion earlier today. Original message From: Tina TSOU Date: To: "OpenStack Development Mailing L

Re: [openstack-dev] [Neutron][NFV] NFV BoF at design summit

2014-05-14 Thread CARVER, PAUL
I'm planning to go to the neutron policy session at 1:30 but I'd like to find a chance to meet you and say hi. I'll be at the summit through Friday. Original message From: Luke Gorrie Date: To: "OpenStack Development Mailing List (not for usage questions)" Cc: "Ian Wells

Re: [openstack-dev] [Openstack-dev][Neutron] Port Mirroring Extension in Neutron

2014-05-15 Thread CARVER, PAUL
Port mirroring is definitely a topic that I hear coming from network operations. The netops folks are accustomed to having sniffers all over the place and being able to span switch ports as a first step in network troubleshooting. The concern about "how do I span a port" is one of the first que

[openstack-dev] [Neutron] Port mirroring

2014-05-16 Thread CARVER, PAUL
Did anything interesting come out of the port mirroring discussion in the Neutron pod this morning? Through a failure to hear the alert from my phone I completely forgot to show up. ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org ht

[openstack-dev] Gerrit rst

2014-05-16 Thread CARVER, PAUL
When looking at a change in Gerrit that includes an rst file, is there any easy way to view the rendered view rather than merely the markup view? The side by side diff is great, but I'd really like a clickable link to the rendered view, especially for ones that include nwdiag or blockdiag synta

Re: [openstack-dev] Manual VM migration

2014-05-21 Thread CARVER, PAUL
Are you sure steps 1 and 2 aren’t in the wrong order? Seems like if you’re going to halt the source VM you should take your snapshot after halting. (Of course if you don’t intend to halt the VM you can just do your best to quiesce your most active writers before taking the snapshot and hope the

Re: [openstack-dev] [neutron][group-based-policy] Should we revisit the priority of group-based policy?

2014-05-23 Thread CARVER, PAUL
Mohammad Banikazemi wrote: >in Atlanta the support was overwhelmingly positive in my opinion. I just >wanted to make sure this does not get >lost in our discussions. Absolutely. I hadn't been following the group policy discussions prior to the summit but I was very impressed with what I saw a

Re: [openstack-dev] [neutron][L3] VM Scheduling v/s Network as input any consideration ?

2014-05-30 Thread CARVER, PAUL
Mathieu Rohon wrote: >I'm also very interested in scheduling VMs with Network requirement. This >seems to be in the scope of NFV workgroup >[1]. >For instance, I think that scheduling should take into account bandwith/QoS >requirement for a VM, or specific Nic This falls in my area of interest a

Re: [openstack-dev] [neutron] blueprint ovs-firewall-driver: OVS implementation of security groups

2014-06-03 Thread CARVER, PAUL
Amir Sadoughi wrote: >Specifically, OVS lacks connection tracking so it won't have a RELATED feature >or stateful rules >for non-TCP flows. (OVS connection tracking is currently under development, to >be released by 2015 It definitely needs a big obvious warning label on this. A stateless fire

[openstack-dev] [neutron] Can tenants provide hints to router scheduling?

2014-06-13 Thread CARVER, PAUL
Suppose a tenant knows that some of their networks are particularly high bandwidth and others are relatively low bandwidth. Is there any mechanism that a tenant can use to let Neutron know what sort of bandwidth is expected through a particular router? I'm concerned about the physical NICs on s

Re: [openstack-dev] Proposal to move from Freenode to OFTC

2014-03-06 Thread CARVER, PAUL
James E. Blair [mailto:jebl...@openstack.org] wrote: >significant amount of time chasing bots. It's clear that Freenode is >better able to deal with attacks than OFTC would be. However, OFTC >doesn't have to deal with them because they aren't happening; and that's >worth considering. Does anyon

Re: [openstack-dev] [all][db][performance] Proposal: Get rid of soft deletion (step by step)

2014-03-12 Thread CARVER, PAUL
I have personally witnessed someone (honestly, not me) select "Terminate Instance" when they meant "Reboot Instance" and that mistake is way too easy. I'm not sure if it was a brain mistake or mere slip of the mouse, but it's enough to make people really nervous in a production environment. If t

Re: [openstack-dev] [nova][scheduler] Availability Zones and Host aggregates..

2014-03-28 Thread CARVER, PAUL
Jay Pipes wrote: >I'm proposing getting rid of the host aggregate hack (or maybe evolving >it?) as well as the availability zone concept and replacing them with a >more flexible generic container object that may be hierarchical in >nature. Is the thing you're proposing to replace them with someth

Re: [openstack-dev] [Neutron][Heat] The Neutron API and orchestration

2014-04-08 Thread CARVER, PAUL
Zane Bitter wrote: >(1) Create a network >Instinctively, I want a Network to be something like a virtual VRF >(VVRF?): a separate namespace with it's own route table, within which >subnet prefixes are not overlapping, but which is completely independent >of other Networks that may contain overl

[openstack-dev] [Neutron] Security Group logging

2014-04-08 Thread CARVER, PAUL
Are there any blueprints or discussion around logging the actions of iptables rules that are generated from security groups? Typically a firewall produces copious logs. As far as I can tell, Neutron security groups permit or deny traffic but don't provide any record at all of what happened. Obv

Re: [openstack-dev] [Openstack][nova][Neutron] Launch VM with multiple Ethernet interfaces with I.P. of single subnet.

2014-04-17 Thread CARVER, PAUL
Akihiro Motoki wrote: >To cope with such cases, allowed-address-pairs extension was implemented. >http://docs.openstack.org/api/openstack-network/2.0/content/allowed_address_pair_ext_ops.html Question on this in particular: Is a tenant permitted to do this? If so, what exactly is the iptables

Re: [openstack-dev] [Openstack][nova][Neutron] Launch VM with multiple Ethernet interfaces with I.P. of single subnet.

2014-04-17 Thread CARVER, PAUL
Aaron Rosen wrote: >Sorry not really. It's still not clear to me why multiple nics would be >required on the same L2 domain. I’m a fan of this old paper for nostalgic reasons http://static.usenix.org/legacy/publications/library/proceedings/neta99/full_papers/limoncelli/limoncelli.pdf but a sea

[openstack-dev] [Neutron] High bandwidth routers

2014-06-23 Thread CARVER, PAUL
Is anyone using Neutron for high bandwidth workloads? (for sake of discussion let's "high" = "50Gbps or greater") With routers being implemented as network namespaces within x86 servers it seems like Neutron networks would be pretty bandwidth constrained relative to "real" routers. As we start

Re: [openstack-dev] [Neutron] DVR SNAT shortcut

2014-06-26 Thread CARVER, PAUL
Original message From: Yi Sun Date: To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [Neutron] DVR SNAT shortcut Yi wrote: +1, I had another email to discuss about FW (FWaaS) and DVR integration. Traditionally, we run firewall with router so that fire

Re: [openstack-dev] Using tmux instead of screen in devstack

2014-07-01 Thread CARVER, PAUL
Anant Patil wrote: >I use tmux (an alternative to screen) a lot and I believe lot of other >developers use it. >I have been using devstack for some time now and would like to add the option >of >using tmux instead of screen for creating sessions for openstack services. >I couldn't find a way to d

Re: [openstack-dev] [Neutron] cloud-init IPv6 support

2014-07-07 Thread CARVER, PAUL
Andrew Mann wrote: >What's the use case for an IPv6 endpoint? This service is just for instance >metadata, >so as long as a requirement to support IPv4 is in place, using solely an IPv4 >endpoint >avoids a number of complexities: The obvious use case would be deprecation of IPv4, but the questi

Re: [openstack-dev] [Neutron] Specs approved for Juno-3 and exceptions

2014-07-24 Thread CARVER, PAUL
Alan Kavanagh wrote: >If we have more work being put on the table, then more Core members would >definitely go a long way with assisting this, we cant wait for folks to be >reviewing stuff as an excuse to not get features landed in a given release. Stability is absolutely essential so we can't f

Re: [openstack-dev] [Neutron] [Spec freeze exception] Support Stateful and Stateless DHCPv6 by dnsmasq

2014-07-24 Thread CARVER, PAUL
Collins, Sean wrote: > On Wed, Jul 23, 2014 at 12:06:06AM EDT, Xu Han Peng wrote: >> I would like to request one Juno Spec freeze exception for "Support Stateful >> and Stateless DHCPv6 by dnsmasq" BP. >> >> The spec is under review: >> https://review.openstack.org/#/c/102411/ >> >> Code change

Re: [openstack-dev] How to improve the specs review process (was Re: [Neutron] Group Based Policy and the way forward)

2014-08-06 Thread CARVER, PAUL
On Aug 6, 2014, at 2:01 PM, Mohammad Banikazemi mailto:m...@us.ibm.com>> wrote: >Yes, indeed. >I do not want to be over dramatic but the discussion on the original "Group >Based Policy and the way forward" thread is nothing short of heartbreaking. >After months and months of discussions, three p

[openstack-dev] [Neutron] (RE: Change in openstack/neutron-specs[master]: Introducing Tap-as-a-Service)

2015-02-24 Thread CARVER, PAUL
p/SPAN/mirror capability when I'd much rather integrate the analyzers into OpenStack. -Original Message- From: Kyle Mestery (Code Review) [mailto:rev...@openstack.org] Sent: Tuesday, February 24, 2015 17:37 To: vinay yadhav Cc: CARVER, PAUL; Marios Andreou; Sumit Naiksatam; Anil Rao

Re: [openstack-dev] Neutron exception when creating a network using Contrail R4.1 and OpenStack Ocata

2017-12-06 Thread CARVER, PAUL
Anda, Will you be able to join the OpenContrail summit today? The Zoom link is below if you weren't able to make advance plans to join us in person in Austin. Hopefully the presentations will be helpful and there will be time for discussion directly related to this topic. https://zoom.us/j/516

Re: [openstack-dev] [neutron][neutron-lib]Service function defintion files

2017-12-28 Thread CARVER, PAUL
It was a gating criteria for stadium status. The idea was that the for a stadium project the neutron team would have review authority over the API but wouldn't necessarily review or be overly familiar with the implementation. A project that didn't have it's API definition in neutron-lib could do

Re: [openstack-dev] [neutron][neutron-lib]Service function defintion files

2017-12-29 Thread CARVER, PAUL
nStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [neutron][neutron-lib]Service function defintion files On 28 December 2017 at 06:57, CARVER, PAUL mailto:pc2...@att.com>> wrote: It was a gating criteria for stadium status. The idea was that the for a sta

Re: [openstack-dev] [tc] summary of joint leadership meeting from 20 May

2018-06-04 Thread CARVER, PAUL
On Monday, June 04, 2018 18:47, Jay Pipes wrote: >Just my two cents, but the OpenStack and Linux foundations seem to be pumping >out new "open events" at a pretty regular clip -- >OpenStack Summit, OpenDev, >Open Networking Summit, OpenStack Days, OpenInfra Days, OpenNFV summit, the >list kee

Re: [openstack-dev] use of storyboard (was [TC] Stein Goal Selection)

2018-06-11 Thread CARVER, PAUL
Jumping into the general Storyboard topic, but distinct from the previous questions about searching, is there any equivalent in Storyboard to the Launchpad series and milestones diagrams? e.g.: https://launchpad.net/nova/+series https://launchpad.net/neutron/+series https://launchpad.net/cinder/

Re: [openstack-dev] use of storyboard (was [TC] Stein Goal Selection)

2018-06-11 Thread CARVER, PAUL
Doug Hellmann wrote: >I'm not sure what sort of project-specific documentation we think we need. Perhaps none if there is a standard, but is there a standard? Can you give me examples in Storyboard of "standard" views that present information even vaguely similar to https://launchpad.net/nova

Re: [openstack-dev] use of storyboard (was [TC] Stein Goal Selection)

2018-06-11 Thread CARVER, PAUL
Jeremy Stanley wrote: >I'm just going to come out and call bullshit on this one. How many of the >800 >official OpenStack deliverable repos have a view like that with any actual >relevant detail? If it's "standard" then certainly more than half, right? Well, that's a bit rude, so I'm not going

Re: [openstack-dev] use of storyboard (was [TC] Stein Goal Selection)

2018-06-11 Thread CARVER, PAUL
Matt Riedemann wrote: >The specs thing was mentioned last week in IRC when talking about blueprints >in launchpad and I just want to reiterate the specs are >more about high level designs and reviewing those designs in Gerrit which was >/ is a major drawback in the 'whiteboard' in launchpad fo

Re: [openstack-dev] [storyboard] Prioritization?

2018-09-25 Thread CARVER, PAUL
Doug Hellmann wrote: >If we're just throwing data into it without trying to use it to communicate, >then I can see us having lots of different views of priority with >the same level of "official-ness". I don't think that's what we're doing >though. I think we're trying to help teams track wh