Re: [openstack-dev] [Kuryr] Now part of OpenStack big-tent

2016-02-24 Thread Baohua Yang
Great and congrats! On Wed, Feb 24, 2016 at 11:51 PM, Gal Sagie wrote: > Hello Everyone, > > Just wanted to update you that Kuryr [1] was officially accepted yesterday > as a > big tent project. > > We are currently facing some interesting challenges and times and if you >

Re: [openstack-dev] [Kuryr] Starting Kuryr service requires root privilege

2016-01-26 Thread Baohua Yang
Thanks toni. Could u help add those instructions into doc? And we might need provide some tool to enable those CAP_NET_ADMIN cap in the startup scripts. On Tue, Jan 26, 2016 at 4:29 PM, Antoni Segura Puimedon < toni+openstac...@midokura.com> wrote: > On Tue, Jan 26, 2016 at 8:13 AM, Ba

Re: [openstack-dev] [Kuryr] Starting Kuryr service requires root privilege

2016-01-25 Thread Baohua Yang
ve this problem. > It is used in other OpenStack projects like Nova, Neutron. > > Regards, > Wanghua > > On Tue, Jan 26, 2016 at 1:07 PM, Baohua Yang <yangbao...@gmail.com> wrote: > >> Hi toni >> >> Recently we found some issue when starting kuryr service withou

[openstack-dev] [Kuryr] Starting Kuryr service requires root privilege

2016-01-25 Thread Baohua Yang
Hi toni Recently we found some issue when starting kuryr service without root privilege [1]. Tfukushima mentioned that you have some suggestion on using capacity to solve this? We currently make a temp workaround by suggesting using sudo to start the service [2]. Any advice? Thanks! [1]

Re: [openstack-dev] [Kuryr] IRC Meeting - Tuesday (1/26) 0300 UTC (#openstack-meeting-4)

2016-01-25 Thread Baohua Yang
Seems we missed the last meeting (01-18) agenda part at the wikipage. Thanks! On Mon, Jan 25, 2016 at 7:51 PM, Gal Sagie wrote: > Hello All, > > We are going to have an IRC meeting tomorrow. > > I have updated the agenda for the upcoming meeting [1] > Please review and add

Re: [openstack-dev] [kuryr] Failed to create network with kuryr driver type

2016-01-20 Thread Baohua Yang
Hi mars Which code are u using? I repeated your steps with latest master branch. And the error from kuryr is 127.0.0.1 - - [20/Jan/2016 17:23:50] "POST /IpamDriver.GetDefaultAddressSpaces HTTP/1.1" 200 - ERROR in

Re: [openstack-dev] [Kuryr] Testing, Rally and Wiki

2015-12-10 Thread Baohua Yang
Great! Would try to offer a hand on the wiki and testing. On Thu, Dec 10, 2015 at 10:11 PM, Gal Sagie wrote: > Hello everyone, > > As some of you have already noticed one of the top priorities for Kuryr > this cycle is to get > our CI and gate testing done. > > I have been

Re: [openstack-dev] [kuryr] gerrit/git review problem error code 10061

2015-11-10 Thread Baohua Yang
Thanks to all! It seems network connectivity problem. How sad again! :( i will try other ways. On Tue, Nov 10, 2015 at 12:52 AM, Jeremy Stanley <fu...@yuggoth.org> wrote: > On 2015-11-09 10:13:33 +0800 (+0800), Baohua Yang wrote: > > Anyone recently meet such problem after clo

[openstack-dev] [kuryr] gerrit/git review problem error code 10061

2015-11-08 Thread Baohua Yang
Hi, Anyone recently meet such problem after cloning the latest code from kuryr? Try proxy also, but not solved. $ git review -s Problem running 'git remote update gerrit' Fetching gerrit FATAL: Unable to connect to relay host, errno=10061 ssh_exchange_identification: Connection closed by

[openstack-dev] [kuryr] Current status of docker python lib supports for libnetwork

2015-11-08 Thread Baohua Yang
Hi, kuryr guys I may not attend tmr's IRC meeting, hence make a quick sync here. One task is to investigate the docker python lib support to libnetwork. I checked the code here at https://github.com/docker/docker-py. They do have the network api support in code (in api/network.py),

Re: [openstack-dev] [kuryr] mutihost networking with nova vm as docker host

2015-11-06 Thread Baohua Yang
It does cause confusing by calling container-inside-vm as nested container. The "nested" term in container area usually means container-inside-container. we may refer this (container-inside-vm) explicitly as vm-holding container. On Fri, Nov 6, 2015 at 12:13 PM, Vikas Choudhary

Re: [openstack-dev] [kuryr] competing implementations

2015-11-04 Thread Baohua Yang
Sure, thanks! And suggest add the time and channel information at the kuryr wiki page. On Wed, Nov 4, 2015 at 9:45 PM, Antoni Segura Puimedon < toni+openstac...@midokura.com> wrote: > > > On Wed, Nov 4, 2015 at 2:38 PM, Baohua Yang <yangbao...@gmail.com> wrote: > >&

Re: [openstack-dev] [kuryr] competing implementations

2015-11-04 Thread Baohua Yang
+1, Antoni! btw, is our weekly meeting still on meeting-4 channel? Not found it there yesterday. On Wed, Nov 4, 2015 at 9:27 PM, Antoni Segura Puimedon < toni+openstac...@midokura.com> wrote: > Hi Kuryrs, > > Last Friday, as part of the contributors meetup, we discussed also code > contribution

Re: [openstack-dev] [Neutron][Kuryr] - Design Summit etherpad

2015-11-01 Thread Baohua Yang
Thanks, and nice meeting everyone! On Mon, Nov 2, 2015 at 2:06 PM, Gal Sagie wrote: > Hello All, > > It was great meeting everyone in the summit, it ended too fast.. > We had a free design talk on Friday about Kuryr. (Thanks to everyone that > participated) > > We have

Re: [openstack-dev] [magnum][kolla] Stepping down as a Magnum core reviewer

2015-10-26 Thread Baohua Yang
Really a pity! We need more resources on the container part in OpenStack indeed, as so many new projects are just initiated. Community is not only about putting technologies together, but also putting technical guys together. Happy to see so many guys in the Tokyo Summit this afternoon. Let's

Re: [openstack-dev] New Pycharm License

2015-09-21 Thread Baohua Yang
Hi andrew Would greatly appreciate a PyCharm license key! Thanks a lot! On Thu, Sep 26, 2013 at 11:41 PM, Andrew Melton wrote: > Hey Devs, > > > > It's almost been a year since I sent out the first email and I've been > getting a few emails lately about alerts that

[openstack-dev] [Neutron] [DVR] easyOVS -- Smart tool to use/debug Neutron/DVR

2015-08-28 Thread Baohua Yang
Hi , all When using neutron (especially with DVR), I find it difficult to debug problems with lots of ovs rules, complicated iptables rules, network namespaces, routing tables, ... So I create https://github.com/yeasy/easyOVS https://github.com/yeasy/easyOVSeasyOVS

Re: [openstack-dev] [Magnum] Docker Native Networking

2015-06-14 Thread Baohua Yang
Just put here for more comments, thanks! IMHO, there are three different options, worth discussion before the designing: #Opt 1: Magnum as the API. The entire driver layer still leverages the third-party solutions like swarm or kubernetes, then we have to keep compatible with their limitation in

Re: [openstack-dev] [Magnum] Magnum installation problem with devstack kilo

2015-06-01 Thread Baohua Yang
. Regards -steve *From: *Baohua Yang *yangbao...@gmail.com* yangbao...@gmail.com * Reply-To: *OpenStack Development Mailing List (not for usage questions) *openstack-dev@lists.openstack.org* openstack-dev@lists.openstack.org * Date: *Sunday, May 31, 2015 at 10:08 PM * To: *OpenStack Development

[openstack-dev] [Magnum] Magnum installation problem with devstack kilo

2015-05-31 Thread Baohua Yang
Hi, all I am following http://git.openstack.org/cgit/openstack/magnum/tree/doc/source/dev/dev-quickstart.rst to install magnum with openstack kilo version. At the end, there are error messages like python update.py /opt/stack/magnum ... Syncing /opt/stack/magnum/requirements.txt

Re: [openstack-dev] [Heat] About the DEFAULT_PAGE_SIZE

2014-11-27 Thread Baohua Yang
Thanks qiming! On Fri, Nov 28, 2014 at 12:14 AM, Qiming Teng teng...@linux.vnet.ibm.com wrote: It looks like some constants not yet used in pagination. (refer to: heatclient/v1/stacks.py: StackManager.list()) Regards, Qiming On Thu, Nov 27, 2014 at 03:56:07PM +0800, Baohua Yang wrote

[openstack-dev] [Heat] About the DEFAULT_PAGE_SIZE

2014-11-26 Thread Baohua Yang
Hi, all Just notice there're several DEFAULT_PAGE_SIZE=20 lines inside the latest python-heatclient package, e.g., $ grep DEFAULT_PAGE_SIZE . -r ./heatclient/v1/actions.py:DEFAULT_PAGE_SIZE = 20 ./heatclient/v1/events.py:DEFAULT_PAGE_SIZE = 20 ./heatclient/v1/resources.py:DEFAULT_PAGE_SIZE =

Re: [openstack-dev] [neutron] what is the different between ovs-ofctl and iptalbes? Can we use ovs-ofctl to nat floating ip into fixed ip if we use openvswitch agent?

2014-11-04 Thread Baohua Yang
As I remember, ovs does not support binding-on veth rules. Hence now we might need tools like iptables. However, this might change in future. As to the l3 part, should be handled in more efficient way, e.g., NFV. On Tue, Nov 4, 2014 at 2:29 PM, loy wolfe loywo...@gmail.com wrote: maybe two

Re: [openstack-dev] [kolla] on Dockerfile patterns

2014-10-14 Thread Baohua Yang
And here is the best practice for using Dockerfile. https://docs.docker.com/articles/dockerfile_best-practices/ On Tue, Oct 14, 2014 at 11:51 AM, Angus Lees g...@inodes.org wrote: I've been reading a bunch of the existing Dockerfiles, and I have two humble requests: 1. It would be good if

Re: [openstack-dev] [neutron][security-groups] Neutron default security groups

2014-09-18 Thread Baohua Yang
Agree! +1 On Thu, Sep 18, 2014 at 1:47 PM, Lingxian Kong anlin.k...@gmail.com wrote: Hi, shihanzhang: Thanks for bringing this up, again. As I said before, this blueprint will solve the problems that the 'hard-coded' rules related to the default security group we are suffering from, which

Re: [openstack-dev] [neutron][security-groups] Neutron default security groups

2014-09-16 Thread Baohua Yang
The similar problem has been discussed before. There is no definitive answer, and currently seems we cannot simply disable it since G version. However, we can add some ALLOW rules to bypass the rules inside the iptables chains. Hope there be more flexibility to controller the security groups in

Re: [openstack-dev] Heat dependency visualisation

2014-09-16 Thread Baohua Yang
Nice work. We discussed similar work weeks ago. And the idea is to generate the dot file from a heat template, and then draw figures from the dot file. Even in the reversed direction, we can generate a heat template from a dot based file. Seems the community are eager to seem some heat template

Re: [openstack-dev] [neutron][security-groups] Neutron default security groups

2014-09-16 Thread Baohua Yang
, 2014 at 7:28 PM, Baohua Yang yangbao...@gmail.com wrote: The similar problem has been discussed before. There is no definitive answer, and currently seems we cannot simply disable it since G version. However, we can add some ALLOW rules to bypass the rules inside the iptables chains. Hope

Re: [openstack-dev] [nova][neutron] default allow security group

2014-09-10 Thread Baohua Yang
Not arguing if it's suitable to implement this with security-group commands. To solve the problem, I guess no 20 rules are necessary at all. You can just add one rules like the following to allow all traffic going out of the vm. iptables -I neutron-openvswi-o9LETTERID -j RETURN Where the id

Re: [openstack-dev] China blocking access to OpenStack git review push

2014-09-09 Thread Baohua Yang
There're several ways to overcome the problem. Other than https, using the socks proxy is also possible. $ sudo aptitude install connect-proxy ##for windows, just install the git $ cat ~/.ssh/config Host review.openstack.org ProxyCommand connect -S *PROXY_IP*:*PORT* %h %p IdentityFile

Re: [openstack-dev] [neutron][policy] Group-based Policy next steps

2014-09-09 Thread Baohua Yang
Agree. It's necessary for neutron to have GBP, and we can certainly utilize stackforge to help improve it. On Fri, Sep 5, 2014 at 11:08 PM, Mohammad Banikazemi m...@us.ibm.com wrote: I can only see the use of a separate project for Group Policy as a tactical and temporary solution. In my

Re: [openstack-dev] [neutron] New meeting rotation starting next week

2014-09-03 Thread Baohua Yang
+1. This would be better! Maybe we can send a google calendar invitation. On Thu, Sep 4, 2014 at 7:45 AM, Sukhdev Kapur sukhdevka...@gmail.com wrote: +1 It will be very useful to have neutron specific meetings on iCal - considering that they will be moving around... -Sukhdev On Mon,

Re: [openstack-dev] [all] Alpha release of Congress

2014-09-03 Thread Baohua Yang
Congrats! Will appear in J or K? And will there's an interface in horizon? Thanks! On Thu, Sep 4, 2014 at 5:41 AM, Tim Hinrichs thinri...@vmware.com wrote: Hi all, The alpha release of Congress is now available! We'd love any and all feedback. Components and Features - Support for

Re: [openstack-dev] [Neutron] Author tags

2014-08-28 Thread Baohua Yang
+1. On Wed, Aug 27, 2014 at 10:25 PM, Kyle Mestery mest...@mestery.com wrote: On Wed, Aug 27, 2014 at 8:24 AM, Gary Kotton gkot...@vmware.com wrote: Hi, A few cycles ago the Nova group decided to remove @author from copyright statements. This is due to the fact that this information is

Re: [openstack-dev] Thought on service plugin architecture (was [Neutron][QoS] Request to be considered for neutron-incubator)

2014-08-22 Thread Baohua Yang
+1 The agent number should be limited restrictly. On Thu, Aug 21, 2014 at 8:56 AM, loy wolfe loywo...@gmail.com wrote: On Wed, Aug 20, 2014 at 7:03 PM, Salvatore Orlando sorla...@nicira.com wrote: As the original thread had a completely different subject, I'm starting a new one here.

Re: [openstack-dev] [Neutron][DevStack] How to increase developer usage of Neutron

2014-08-22 Thread Baohua Yang
Through my experience, RDO should be the most reliable way to do the deployment. Also, there're some more detailed installation scripts, like https://github.com/ChaimaGhribi/OpenStack-Icehouse-Installation/blob/master/OpenStack-Icehouse-Installation.rst . Still, I think, as a developer, it would

Re: [openstack-dev] [Neutron][policy] Group Based Policy - Renaming

2014-08-13 Thread Baohua Yang
Like the policy-group naming. The policy-target is better than policy-point, but still feel there's some little confusing, as the target is usually meaning what it's for, but not what it's on. Hence, the policy-endpoint might be more exact. On Fri, Aug 8, 2014 at 11:43 PM, Jay Pipes

[openstack-dev] [HEAT] Is there any line length limitation in paste deploy configuration file?

2014-08-08 Thread Baohua Yang
Hi, Recently I have noticed the api-paste. ini file in heat has some very long lines (over the popular 80c). Wondering if there's recommended length limitation on it? Sometime, users have to read the file and change the configuration value, so I think it should be kept readable.

Re: [openstack-dev] [Neutron][third-party] Arista CI hits 10, 000 runs this morning

2014-08-06 Thread Baohua Yang
Woo~ Really nice work! On Thu, Aug 7, 2014 at 7:09 AM, Sukhdev Kapur sukhdevka...@gmail.com wrote: Folks, Just wanted to share with you that Arista CI has been up and running 24x7 since the beginning of this year with no down time. This morning it posted a vote on 10,000th Neutron

Re: [openstack-dev] How to improve the specs review process (was Re: [Neutron] Group Based Policy and the way forward)

2014-08-06 Thread Baohua Yang
+1. And the review process should be more efficient! On Thu, Aug 7, 2014 at 3:07 AM, Stefano Maffulli stef...@openstack.org wrote: On 08/06/2014 11:19 AM, Edgar Magana wrote: That is the beauty of the open source projects, there is always a smartest reviewer catching out the facts that

Re: [openstack-dev] Well-tested guides for OpenStack Icehouse installation and Instance creation with Neutron

2014-08-06 Thread Baohua Yang
Nice work. Suggest add some watch points/problem solution/diagnosis in the installations. Btw, recently we find both the RDO and devstack are very unstable for installation, wish there will be more test and improvements soon. On Wed, Aug 6, 2014 at 3:27 AM, chayma ghribi chaym...@gmail.com

Re: [openstack-dev] [oslo.cfg] Dynamically load in options/groups values from the configuration files

2014-07-27 Thread Baohua Yang
:10 PM, Baohua Yang yangbao...@gmail.com wrote: Hi, all The current oslo.cfg module provides an easy way to load name known options/groups from he configuration files. I am wondering if there's a possible solution to dynamically load them? For example, I do not know the group

[openstack-dev] [oslo.cfg] Dynamically load in options/groups values from the configuration files

2014-07-23 Thread Baohua Yang
Hi, all The current oslo.cfg module provides an easy way to load name known options/groups from he configuration files. I am wondering if there's a possible solution to dynamically load them? For example, I do not know the group names (section name in the configuration file), but

Re: [openstack-dev] [neutron] Specs repository update and the way forward

2014-07-22 Thread Baohua Yang
Great! And, not sure if it's right, but cannot find place to compare two commits through the website, e.g., the latest version and the last one. Guess this would be easier to find what changes in the new patch. On Mon, Jul 21, 2014 at 9:47 PM, Kyle Mestery mest...@mestery.com wrote: On Mon,

Re: [openstack-dev] [tc][rally] Application for a new OpenStack Program: Performance and Scalability

2014-07-22 Thread Baohua Yang
It's interesting and practical! There're some early efforts to make openstack more robust and efficient, however, we're still lacking one such framework. Just a little question. On the wiki, it says to consider the scalability problem. How can we measure the performance at large scale? By real

Re: [openstack-dev] [specs] how to continue spec discussion

2014-07-18 Thread Baohua Yang
Agreed. And we should keep records for each release. On Wed, Jul 16, 2014 at 7:57 PM, Tim Bell tim.b...@cern.ch wrote: As we approach Juno-3, a number of specs have been correctly marked as abandoned since they are not expected to be ready in time for the release. Is there a mechanism to

Re: [openstack-dev] [Neutron] port-forwarding for router

2014-07-18 Thread Baohua Yang
Hi, ma li, And, do you target a flexible port-forwarding (like [1], which does mirroring) or something like DNAT (as in the [2])? If the latter, suggest you contact the bp owner to see if can work together. [1] https://review.openstack.org/#/c/96149/6 [2]

Re: [openstack-dev] [Neutron] minimal device driver for VPN

2014-07-18 Thread Baohua Yang
Hi julio There are not many documents currently. The only one on neutron I can find is http://docs.openstack.org/developer/neutron/devref/index.html. From what you described, I suggest you have a look of the neutron. services.vpn code as an example. And from my experience, those

Re: [openstack-dev] [nova][neutron] Networks without subnets

2014-07-14 Thread Baohua Yang
IMHO, the non-subnet port can be created in the technique. This is quite useful especially when there is some special appliance, e.g., some firewall appliance without any IP necessarily. On Tue, Jul 15, 2014 at 1:18 AM, Ian Wells ijw.ubu...@cack.org.uk wrote: Funnily enough, when I first