Re: [openstack-dev] [python-neutronclient][neutron] sub-project client extensions

I started down the path of making a python-neutronclient extension, but got stuck on the lack of support for child resource extensions as described here https://bugs.launchpad.net/python-neutronclient/+bug/1446428. I submitted a bugfix here https://review.openstack.org/#/c/202597/?. Amir ___

Re: [openstack-dev] [RFC] Kilo release cycle schedule proposal

is Memorial Day; I'd expect return flights starting on Friday to be worse for the weekend of the 22nd, but I don't have data on that. Amir Sadoughi From: Thierry Carrez [thie...@openstack.org] Sent: Tuesday, September 23, 2014 9:54 AM To: opensta

Re: [openstack-dev] [neutron] make mac address updatable: which plugins?

I agree with Kevin here. Just a note, don't bother with openvswitch and linuxbridge plugins as they are marked for deletion this cycle, imminently (already deprecated)[0]. Amir [0] http://eavesdrop.openstack.org/meetings/networking/2014/networking.2014-08-04-21.02.html Announcements 2e. _

Re: [openstack-dev] [neutron] ovs-neutron-agent wipes out all flows on startup

Indeed a blueprint has been filed (on Launchpad, not neutron-specs) on this already[0], but there has been no work on this as far as I can tell. I think it would be worthwhile contribution. Amir [0] https://blueprints.launchpad.net/neutron/+spec/neutron-agent-soft-restart _

Re: [openstack-dev] [neutron] blueprint ovs-firewall-driver: OVS implementation of security groups

logging, I don’t know if OVS is capable of it. If iptables in Neutron does not currently support that feature, I don’t think Neutron should explicitly support out-of-tree features. Amir On Jun 3, 2014, at 6:59 AM, CARVER, PAUL mailto:pc2...@att.com>> wrote: Amir Sadoughi wrote: >Specific

Re: [openstack-dev] [neutron] blueprint ovs-firewall-driver: OVS implementation of security groups

Carl, You are correct in both distinctions. Like I mentioned to Paul, beyond explicit configuration for the cloud operator, documentation and API validation for the end user, is there anything specific you would like to see as a “warning label”? Amir On Jun 3, 2014, at 9:01 AM, Carl Baldwin m

Re: [openstack-dev] [neutron] blueprint ovs-firewall-driver: OVS implementation of security groups

ted for non-tcp traffic. What about the ESTABLISHED feature? The blueprint specs refers to tcp_flags=ack. Or will that be supported through the source port matching extension which is being promoted? More comments inline. On 3 June 2014 01:22, Amir Sadoughi mailto:amir.sadou...@rackspace.com>&

[openstack-dev] [neutron] blueprint ovs-firewall-driver: OVS implementation of security groups

Hi all, In the Neutron weekly meeting today[0], we discussed the ovs-firewall-driver blueprint[1]. Moving forward, OVS features today will give us "80%" of the iptables security groups behavior. Specifically, OVS lacks connection tracking so it won’t have a RELATED feature or stateful rules for

Re: [openstack-dev] Neutron Migrations, service plugins and Grenade jobs

I know alembic is designed to be global, but could we extend it to track multiple histories for a given database. In other words, various branches for different namespaces on a single database. Would this feature ameliorate the issues? Amir On Apr 15, 2014, at 8:24 AM, Kyle Mestery mailto:mes

Re: [openstack-dev] [Neutron] Status of ovs-firewall-driver blueprint?

e: On Mon, Apr 7, 2014 at 11:01 AM, Amir Sadoughi mailto:amir.sadou...@rackspace.com>> wrote: Hi Vishal, I've restarted my work on the blueprint last week now that Juno is open for development and OVS 2.1.0 is available, targeting juno-1. My plan is to have a working implementation

Re: [openstack-dev] [Neutron] Status of ovs-firewall-driver blueprint?

Hi Vishal, I’ve restarted my work on the blueprint last week now that Juno is open for development and OVS 2.1.0 is available, targeting juno-1. My plan is to have a working implementation available by the summit design discussion to make sure we cover all our bases. Between the blueprint page

Re: [openstack-dev] [Neutron][IPv6][Security Group] BP: Support ICMP type filter by security group

existing security groups extension to not interfere with existing security groups extension API implementations. If you’d like to continue, you should probably follow that route also. Amir Sadoughi On Mar 3, 2014, at 7:39 AM, Xuhan Peng mailto:pengxu...@gmail.com>> wrote: I created

[openstack-dev] [Neutron] neutron package missing from pypi

I don’t know for how long this has been the case, but upon doing some venv rebuilding I noticed neutron is no longer in pypi. Is this on purpose? https://pypi.python.org/pypi/neutron Thanks, Amir Sadoughi ___ OpenStack-dev mailing list OpenStack

Re: [openstack-dev] [Network] Allocate MAC and IP address for a VM instance

Hi all, In Rackspace's quark plugin (github.com/rackerlabs/quark), we’ve developed an extension for MAC address ranges (MARs) as a top-level resource. Thus, the Neutron service manages the MAC address allocation from a pool of ranges (as opposed to randomly generating a MAC address). However, w

Re: [openstack-dev] [Neturon] firewall_driver and ML2 and vif_security discussion

That also makes sense to me as the simplest option. Looking forward to all of your patches. Thanks, Amir On Jan 16, 2014, at 2:13 PM, Kyle Mestery mailto:mest...@siliconloons.com>> wrote: On Jan 16, 2014, at 1:37 PM, Nachi Ueno mailto:na...@ntti3.com>> wrote: Hi Amir 20

Re: [openstack-dev] [Neturon] firewall_driver and ML2 and vif_security discussion

Hi all, I just want to make sure I understand the plan and its consequences. I’m on board with the YAGNI principle of hardwiring mechanism drivers to return their firewall_driver types for now. However, after (A), (B), and (C) are completed, to allow for Open vSwitch-based security groups (bl

Re: [openstack-dev] [Neutron][ML2] Unit test coverage

cover neutron.tests.unit.ml2 (filtered, sorted): http://paste.openstack.org/show/55375/ Amir On Dec 12, 2013, at 4:48 PM, Amir Sadoughi wrote: > Mathieu, > > Here are my results for running the unit tests for the agents. > > I ran `tox -e cover neutron.tests.unit.openvswitch.test_o

[openstack-dev] [Neutron] blueprint ovs-firewall-driver: Security groups extension API addition

eutron[4] and python-neutronclient[5] implementing these suggested additions. The security groups RPC API already has a field for source-port-range-min and source-port-range-max so this change would only affect the DB and frontend API. I’m open to any and all feedback. Thanks, Amir Sadough

[openstack-dev] [Neutron] blueprint ovs-firewall-driver follow-up meeting

OpenStack meetings[2], Monday at 2000 UTC (right before Neutron meeting) is open for #openstack-meeting. Looking forward to continue the discussion there. Thanks, Amir Sadoughi [1] https://wiki.openstack.org/wiki/Meetings/ML2#Meeting_Dec_11.2C_2013 [2] https://wiki.openstack.org/wiki/Meetings

Re: [openstack-dev] [Neutron][ML2] Unit test coverage

607134 255 7376% ... Amir On Dec 11, 2013, at 3:01 PM, Mathieu Rohon wrote: > the coverage is quite good on the ML2 plugin. > it looks like the biggest effort should be done on the ovs and lb agents, no? > > On Wed, Dec 11, 2013 at 9:00 PM, Amir Sadoughi >

[openstack-dev] [Neutron][ML2] Unit test coverage

>From today’s ML2 meeting, I had an action item to produce coverage report for >ML2 unit tests. Here is the command line output of the tests and report I produced: http://paste.openstack.org/show/54845/ Amir Sadoughi ___ OpenStack-dev mailin

Re: [openstack-dev] [neutron] Why neutron-openvswitch-agent use linux-bridge?

Hi George, I’m working on a blueprint to implement OVS flows for security groups. https://blueprints.launchpad.net/neutron/+spec/ovs-firewall-driver Currently, neutron only implements security groups with iptables even when Open vSwitch is used. Amir On Nov 27, 2013, at 1:29 PM, George Shukli

Re: [openstack-dev] Reg : Security groups implementation using openflows in quantum ovs plugin

Yes, my work has been on ML2 with neutron-openvswitch-agent. I’m interested to see what Jun Park has. I might have something ready before he is available again, but would like to collaborate regardless. Amir On Nov 19, 2013, at 3:31 AM, Kanthi P mailto:pavuluri.kan...@gmail.com>> wrote: Hi

Re: [openstack-dev] Reg : Security groups implementation using openflows in quantum ovs plugin

Hi Kanthi, I’ve already started the implementation (prototype phase) of such a blueprint, ovs-firewall-driver . Amir On Nov 18, 2013, at 4:26 PM, Kanthi P mailto:pavuluri.kan...@gmail.com>> wrote: Hi All, We are planning to