Re: [openstack-dev] [neutron] Does neutron support QinQ(vlan transparent) ?
Awesome! Thanks, I'll take some time to review this patch. we can discuss it deeper during the review At 2018-08-08 14:59:21, "Bence Romsics" wrote: >Hi, > >Just about a week ago Li Zhouzhou pushed a change for review to >support vlan transparency with ovs too (building on the relatively new >QinQ support in ovs): > >https://review.openstack.org/576687 > >I did not get time to look into the patch deeper yet, but I guess >reviews are always welcome. I also cc-ed this mail so he/she can chime >in. > >Cheers, >Bence Romsics >On Tue, Aug 7, 2018 at 1:32 PM Sean Mooney wrote: >> >> TL;DR >> it wont work with the ovs agent but "should" work with linux bridge. >> see full message below for details. >> regards >> sean. >> >> the linux bridge agent supports the vlan_transparent option only when >> createing networks with an l3 segmentation type e.g. vxlan,gre... >> >> ovs using the neutron l2 agnet does not supprot vlan_transparent >> netwroks because of how that agent use vlans for tenant isolation on >> the br-int. >> >> it is possible to use achive vlan transparancy with ovs usign an sdn >> controller such as odl or ovn but that was not what you asked in your >> question so i wont expand on that futher. >> >> if you deploy openstack with linux bridge networking and then create a >> tenant network of type vxlan with vlan_transparancy set to true and >> your tenants >> generate QinQ traffic with an mtu reduced so that it will fix within >> the vxlan tunnel unfragmented then yes it should be possibly however >> you may need to disable port_security/security groups on the port as >> im not sure if the ip tables firewall driver will correctly handel >> this case. >> >> an alternive to disabling security groups would be to add an explicit >> rule that matched on the etehrnet type and allowed QinQ traffic on >> ingress and egress from the vm. >> >> as far as i am aware this is not tested in the gate so while it should >> work the lack of documentation and test coverage means you will >> likely be one of the first to test it if you >> choose to do so and it may fail for many reasons. >> >> >> On 7 August 2018 at 09:15, Frank Wang wrote: >> > Hello folks, >> > >> > I noted that the API already has the vlan_transparent attribute in the >> > network, Do neutron-agents(linux-bridge, openvswitch) support QinQ? I >> > didn't find any reference materials that could guide me on how to use or >> > configure it. >> > >> > Thank for your time reading this, Any comments would be appreciated. >> > >> > >> > >> > >> > >> > __ >> > OpenStack Development Mailing List (not for usage questions) >> > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> > >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > >__ >OpenStack Development Mailing List (not for usage questions) >Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron] Does neutron support QinQ(vlan transparent) ?
Thanks for your detail explanation, Sean. Actually, I'm more concern how ovs l2 agent use vlans for tenant isolation on the br-int. I wanna discuss it deeper here Please correct me if I understanding something wrong, Is there any way to make ovs l2agent to support QinQ? for example, I believe QinQ also is a kind of tunnel encapsulation, like vxlan, gre. and I think we can implement it using Hierarchical Port Binding technique It would need two level bindings(of course, need two mechanism drivers). the top-level binding service vlan, lower-level binding customer vlan. The br-int is responsible for customer vlan, the br-tun is responsible for service vlan, Is it feasible? please feel free to leave you any idea. Thanks At 2018-08-07 19:32:44, "Sean Mooney" wrote: >TL;DR >it wont work with the ovs agent but "should" work with linux bridge. >see full message below for details. >regards >sean. > >the linux bridge agent supports the vlan_transparent option only when >createing networks with an l3 segmentation type e.g. vxlan,gre... > >ovs using the neutron l2 agnet does not supprot vlan_transparent >netwroks because of how that agent use vlans for tenant isolation on >the br-int. > >it is possible to use achive vlan transparancy with ovs usign an sdn >controller such as odl or ovn but that was not what you asked in your >question so i wont expand on that futher. > >if you deploy openstack with linux bridge networking and then create a >tenant network of type vxlan with vlan_transparancy set to true and >your tenants >generate QinQ traffic with an mtu reduced so that it will fix within >the vxlan tunnel unfragmented then yes it should be possibly however >you may need to disable port_security/security groups on the port as >im not sure if the ip tables firewall driver will correctly handel >this case. > >an alternive to disabling security groups would be to add an explicit >rule that matched on the etehrnet type and allowed QinQ traffic on >ingress and egress from the vm. > >as far as i am aware this is not tested in the gate so while it should >work the lack of documentation and test coverage means you will >likely be one of the first to test it if you >choose to do so and it may fail for many reasons. > > >On 7 August 2018 at 09:15, Frank Wang wrote: >> Hello folks, >> >> I noted that the API already has the vlan_transparent attribute in the >> network, Do neutron-agents(linux-bridge, openvswitch) support QinQ? I >> didn't find any reference materials that could guide me on how to use or >> configure it. >> >> Thank for your time reading this, Any comments would be appreciated. >> >> >> >> >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> > >__ >OpenStack Development Mailing List (not for usage questions) >Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [neutron] Does neutron support QinQ(vlan transparent) ?
Hello folks, I noted that the API already has the vlan_transparent attribute in the network, Do neutron-agents(linux-bridge, openvswitch) support QinQ? I didn't find any reference materials that could guide me on how to use or configure it. Thank for your time reading this, Any comments would be appreciated. __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [openstack-infra] How to take over a project?
Hi Sangho, I'm excited to see the networking-onos project moving forward again. that's very cool, please let me know if there are some features need to be done. Hope you can get rid of this problem quickly Thanks, Frank. At 2018-04-18 08:00:58, "Sangho Shin"wrote: Ian and Gary, Thank you so much for your answer. I will try what you suggested. Thank you, Sangho On 17 Apr 2018, at 7:47 PM, Gary Kotton wrote: Hi, You either need one of the ono core team or the neutron release team to add you. FYI - https://review.openstack.org/#/admin/groups/1001,members Thanks Gary From: Sangho Shin Reply-To: OpenStack List Date: Tuesday, April 17, 2018 at 5:01 AM To: OpenStack List Subject: [openstack-dev] [openstack-infra] How to take over a project? Dear OpenStack Infra team, I would like to know how to take over an OpenStack project. I am a committer of the networking-onos project (https://github.com/openstack/networking-onos), and I would like to take over the project. The current maintainer (cc’d) has already agreed with that. Please let me know the process to take over (or change the maintainer of) the project. BTW, it looks like even the current maintainer cannot create a new branch of the codes. How can we get the authority to create a new branch? Thank you, Sangho __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron]Does neutron-server support the main backup redundancy?
Thanks for your response, another question is Does the compute nodes or agents know how many neutron-servers running? I mean If there was a server corrupt, they will automatically connect to other servers? Thanks, At 2018-03-21 18:14:47, "Miguel Angel Ajo Pelayo" <majop...@redhat.com> wrote: You can run as many as you want, generally an haproxy is used in front of them to balance load across neutron servers. Also, keep in mind, that the db backend is a single mysql, you can also distribute that with galera. That is the configuration you will get by default when you deploy in HA with RDO/TripleO or OSP/Director. On Wed, Mar 21, 2018 at 3:34 AM Kevin Benton <ke...@benton.pub> wrote: You can run as many neutron server processes as you want in an active/active setup. On Tue, Mar 20, 2018, 18:35 Frank Wang <wangpeihui...@126.com> wrote: Hi All, As far as I know, neutron-server only can be a single node, In order to improve the reliability of the system, Does it support the main backup or active/active redundancy? Any comment would be appreciated. Thanks, __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [neutron]Does neutron-server support the main backup redundancy?
Hi All, As far as I know, neutron-server only can be a single node, In order to improve the reliability of the system, Does it support the main backup or active/active redundancy? Any comment would be appreciated. Thanks, __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Neutron]The components timing problem
Hi, Yeah, rabbitmq server on the same host. rabbitmq service was stopped a little while to try to reproduce a problem. Do you mean report_state always running even the rabbitmq connection is down? It sounds unreasonable. Thanks, Frank At 2018-01-23 17:58:58, "Sławomir Kapłoński" <sla...@kaplonski.pl> wrote: >Hi, > >Problem which You have here is that Your agent can't connect to rabbitmq. >Because of that rpc message with report_state is timeouted and that is the >reason of this error. >Is Your rabbitmq server on same host with ovs agent? Is rabbitmq server works >properly? > >— >Best regards >Slawek Kaplonski >sla...@kaplonski.pl > > > >> Wiadomość napisana przez Frank Wang <wangpeihui...@126.com> w dniu >> 23.01.2018, o godz. 10:44: >> >> Hi Sławomir, >> >> Thanks for you quick response. I'm using Ocata, Here is the exception >> stack. >> e: [Errno 111] ECONNREFUSED. Trying again in 14 seconds. Client port: None >> 2018-01-23 17:37:45.387 8636 ERROR oslo.messaging._drivers.impl_rabbit [-] >> [7b611083-b03c-4aaa-bb2f-a8f6cb89ab15] AMQP server on 127.0.0.1:5672 is >> unreachable: [Errno 111] ECONNREFUSED. Trying again in 14 seconds. Client >> port: None >> 2018-01-23 17:37:45.395 8636 ERROR oslo.messaging._drivers.impl_rabbit [-] >> [bc243998-c484-47b3-8a5d-59104470c441] AMQP server on 127.0.0.1:5672 is >> unreachable: [Errno 111] ECONNREFUSED. Trying again in 14 seconds. Client >> port: None >> 2018-01-23 17:37:45.402 8636 ERROR oslo.messaging._drivers.impl_rabbit [-] >> [f86f1d05-6f72-443a-967e-581c9c3af656] AMQP server on 127.0.0.1:5672 is >> unreachable: [Errno 111] ECONNREFUSED. Trying again in 14 seconds. Client >> port: None >> 2018-01-23 17:37:51.927 8636 ERROR oslo.messaging._drivers.impl_rabbit [-] >> [4c876705-fd92-4b32-8c45-98ff1ed75846] AMQP server on 127.0.0.1:5672 is >> unreachable: [Errno 111] ECONNREFUSED. Trying again in 14 seconds. Client >> port: None >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent [-] Failed >> reporting state! >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent Traceback >> (most recent call last): >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent File >> "/usr/lib/python2.7/site-packages/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py", >> line 312, in _report_state >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent True) >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent File >> "/usr/lib/python2.7/site-packages/neutron/agent/rpc.py", line 87, in >> report_state >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent return >> method(context, 'report_state', **kwargs) >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent File >> "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/client.py", line 169, >> in call >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent >> retry=self.retry) >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent File >> "/usr/lib/python2.7/site-packages/oslo_messaging/transport.py", line 97, in >> _send >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent >> timeout=timeout, retry=retry) >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent File >> "/usr/lib/python2.7/site-packages/oslo_messaging/_drivers/amqpdriver.py", >> line 458, in send >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent >> retry=retry) >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent File >> "/usr/lib/python2.7/site-packages/oslo_messaging/_drivers/amqpdriver.py", >> line 447, in _send >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent result = >> self._waiter.wait(msg_id, timeout) >> 2018-01-23 17:37:53.807 8636 ERROR >> neutron.plugins.ml2.d
Re: [openstack-dev] [Neutron]The components timing problem
er on 127.0.0.1:5672 via [amqp] client with port 51478. 2018-01-23 17:37:59.308 8636 INFO oslo.messaging._drivers.impl_rabbit [-] [99ff11c3-1662-461 Thanks, Frank At 2018-01-23 17:27:52, "Sławomir Kapłoński" <sla...@kaplonski.pl> wrote: >Hi, > >If both ovs agent and neutron-server reconnect to rabbitmq then it should >report state properly again IMO. >Can You maybe send more details about Your issue? What OpenStack version You >are running, exact stack trace of exception which You get and so on. > >— >Best regards >Slawek Kaplonski >sla...@kaplonski.pl > > > >> Wiadomość napisana przez Frank Wang <wangpeihui...@126.com> w dniu >> 23.01.2018, o godz. 10:08: >> >> Hi All, >> >> I'm really newbie about OpenStack Neutron, Please correct me if I say >> something wrong. There was a question I'd like to consult. AMQP is the >> messaging bus between neutron-server and *agents. we usually use rabbitmq as >> the back-end of messaging bus. The problem I encountered is the ovs agent >> raise an exception while reporting its own state to the server. Here is my >> guess, If I restart the controller node, what if the rabbitmq start early >> than neutron-server. I mean the ovs agent always trying to connect to the >> rabbitmq. It will report state to the server through RPC once the connection >> established. if the server is not ready at this time. Does it cause the >> agent exception? Any suggestion would be greatly appreciated! >> >> >> Thanks, >> Frank >> >> >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > >__ >OpenStack Development Mailing List (not for usage questions) >Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [Neutron]The components timing problem
Hi All, I'm really newbie about OpenStack Neutron, Please correct me if I say something wrong. There was a question I'd like to consult. AMQP is the messaging bus between neutron-server and *agents. we usually use rabbitmq as the back-end of messaging bus. The problem I encountered is the ovs agent raise an exception while reporting its own state to the server. Here is my guess, If I restart the controller node, what if the rabbitmq start early than neutron-server. I mean the ovs agent always trying to connect to the rabbitmq. It will report state to the server through RPC once the connection established. if the server is not ready at this time. Does it cause the agent exception? Any suggestion would be greatly appreciated! Thanks, Frank __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Neutron][dhcp] Restrict netmask of CIDR to avoid DHCP resync
Hello, It seems this bug was reported and fixed two years ago(https://review.openstack.org/#/c/174228/8/neutron/db/db_base_plugin_v2.py), but this bug appears again In Pike, Does anyone have any idea ? Thanks. Frank At 2017-12-20 11:41:29, "Frank Wang" <wangpeihui...@126.com> wrote: Hello folks, Here is the problem I encountered, I created a network with 172.16.111.0/30 subnet that disabled DHCP, there are two IP addresses which are available in the pool, 172.16.111.1 is reserved for the gateway, 172.16.111.2 was allocated to VM. there is no error happened when I update the subnet with enabled DHCP through the dashboard, Actually, the dhcp agent didn't create a corresponding namespace because of "No more IP addresses available", This cause inconsistency between the front and backend. I'd like to know why dhcp_agent does not transfer this exception to neutron_server, then report to the dashboard? Any help would be appreciated. __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [Neutron][dhcp] why dhcp agent doesn't report exception to neutron server?
Hello folks, Here is the problem I encountered, I created a network with 172.16.111.0/30 subnet that disabled DHCP, there are two IP addresses which are available in the pool, 172.16.111.1 is reserved for the gateway, 172.16.111.2 was allocated to VM. there is no error happened when I update the subnet with enabled DHCP through the dashboard, Actually, the dhcp agent didn't create a corresponding namespace because of "No more IP addresses available", This cause inconsistency between the front and backend. I'd like to know why dhcp_agent does not transfer this exception to neutron_server, then report to the dashboard? Any help would be appreciated. __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Neutron]
Andreas, Thanks for your quick respose, Currenty, We want to support Localization & Internationalization in our environment. Could you give me some guidance how to do it? May be I can work on this. By the way, I tried to add msgid from neutron-lib to neutron.po, It seems won't work.Thanks, Frank At 2017-11-23 15:41:43, "Andreas Jaeger" <a...@suse.com> wrote: >On 2017-11-23 08:36, Frank Wang wrote: >> *Hello, openstackers,* >> >> *I'd like to know if neutron-lib support* *Localization & >> Internationalization. I found neutron.po for neutron, but no *.po for >> neutron-lib. Does anyone have any idea how to support localization for >> neutron-lib. I appreciate it. please let me know if I miss something.* > >It is set up for translation but looking at the translation server, no >real work has been done and thus nothing was imported: > >https://translate.openstack.org/project/view/neutron-lib?dswid=4366 > >Andreas >-- > Andreas Jaeger aj@{suse.com,opensuse.org} Twitter: jaegerandi > SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany > GF: Felix Imendörffer, Jane Smithard, Graham Norton, > HRB 21284 (AG Nürnberg) >GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [Neutron]
Hello, openstackers, I'd like to know if neutron-lib supportLocalization & Internationalization. I found neutron.po for neutron, but no *.po for neutron-lib. Does anyone have any idea how to support localization for neutron-lib. I appreciate it. please let me know if I miss something. Thanks. Frank __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev