Re: [openstack-dev] [neutron][vpnaas] VPNaaS Subteam meetings
Hi all, I would also vote for (A) with 1500 UTC which is 23:00 in Beijing time -:) On Fri, Mar 6, 2015 at 1:22 PM, Mohammad Hanif wrote: > Hi all, > > I would also vote for (C) with 1600 UTC or later. This will hopefully > increase more participation from the Pacific time zone. > > Thanks, > —Hanif. > > From: Mathieu Rohon > Reply-To: "OpenStack Development Mailing List (not for usage questions)" > Date: Thursday, March 5, 2015 at 1:52 AM > To: "OpenStack Development Mailing List (not for usage questions)" > Subject: Re: [openstack-dev] [neutron][vpnaas] VPNaaS Subteam meetings > > Hi, > > I'm fine with C) and 1600 UTC would be more adapted for EU time Zone :) > > However, I Agree that neutron-vpnaas meetings was mainly focus on > maintaining the current IPSec implementation, by managing the slip out, > adding StrongSwan support and adding functional tests. > Maybe we will get a broader audience once we will speak about adding new > use cases such as edge-vpn. > Edge-vpn use cases overlap with the Telco WG VPN use case [1]. May be > those edge-vpn discussions should occur during the Telco WG meeting? > > [1] > https://wiki.openstack.org/wiki/TelcoWorkingGroup/UseCases#VPN_Instantiation > > On Thu, Mar 5, 2015 at 3:02 AM, Sridhar Ramaswamy > wrote: > >> Hi Paul. >> >> I'd vote for (C) and a slightly later time-slot on Tuesdays - 1630 UTC >> (or later). >> >> The meetings so far was indeed quite useful. I guess the current busy >> Kilo cycle is also contributing to the low turnout. As we pick up things >> going forward this forum will be quite useful to discuss edge-vpn and, >> perhaps, other vpn variants. >> >> - Sridhar >> >> On Tue, Mar 3, 2015 at 3:38 AM, Paul Michali wrote: >> >>> Hi all! The email, that I sent on 2/24 didn't make it to the mailing >>> list (no wonder I didn't get responses!). I think I had an issue with my >>> email address used - sorry for the confusion! >>> >>> So, I'll hold the meeting today (1500 UTC meeting-4, if it is still >>> available), and we can discuss this... >>> >>> >>> We've been having very low turnout for meetings for the past several >>> weeks, so I'd like to ask those in the community interested in VPNaaS, what >>> the preference would be regarding meetings... >>> >>> A) hold at the same day/time, but only on-demand. >>> B) hold at a different day/time. >>> C) hold at a different day/time, but only on-demand. >>> D) hold as a on-demand topic in main Neutron meeting. >>> >>> Please vote your interest, and provide desired day/time, if you pick B >>> or C. The fallback will be (D), if there's not much interest anymore for >>> meeting, or we can't seem to come to a consensus (or super-majority :) >>> >>> Regards, >>> >>> PCM >>> >>> Twitter: @pmichali >>> TEXT: 6032894458 >>> PCM (Paul Michali) >>> >>> IRC pc_m (irc.freenode.com) >>> Twitter... @pmichali >>> >>> >>> >>> __ >>> OpenStack Development Mailing List (not for usage questions) >>> Unsubscribe: >>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >>> >>> >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Best Regards Zhang Hua(张华) Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] A question about strange behavior of oslo.config in eclipse
Hi Doug, I can't find above error when using the latest codes (2015-02-22), but new error occur ( see [1] ). I feel it has no concern with the code(ConfigOpts.import_opt), the same code can be run in both bash and pycharm, it just didn't work in eclipse+pydev. It looks like there are some conflicts between oslo/monkey patch and pydev. You are python expert, could you give me some input by the following traceback ? Another question, 'Gevent compatible debugging' feature both in eclipse and pycharm doesn't work, changing 'thread=False' for monkey patch may cause the error [2], so now I have to get back to use pdb to debug openstack. Could you have some idea to make oslo/monkey patch is more friendly for IDE ? many thanks. *[1]*, traceback when running 'neutron-server --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini' in eclipse+pydev env. while we can run this command well in bash and pycharm. Traceback (most recent call last): File "/usr/local/bin/neutron-server", line 9, in load_entry_point('neutron==2015.1.dev202', 'console_scripts', 'neutron-server')() File "/usr/local/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 521, in load_entry_point return get_distribution(dist).load_entry_point(group, name) File "/usr/local/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 2632, in load_entry_point return ep.load() File "/usr/local/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 2312, in load return self.resolve() File "/usr/local/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 2318, in resolve module = __import__(self.module_name, fromlist=['__name__'], level=0) File "/bak/openstack/neutron/neutron/cmd/eventlet/server/__init__.py", line 13, in from neutron import server File "/bak/openstack/neutron/neutron/server/__init__.py", line 26, in from neutron.common import config File "/bak/openstack/neutron/neutron/common/config.py", line 25, in import oslo_messaging File "/usr/local/lib/python2.7/dist-packages/oslo_messaging/__init__.py", line 18, in from .notify import * File "/usr/local/lib/python2.7/dist-packages/oslo_messaging/notify/__init__.py", line 23, in from .notifier import * File "/usr/local/lib/python2.7/dist-packages/oslo_messaging/notify/notifier.py", line 32, in help='Driver or drivers to handle sending notifications.'), File "/usr/local/lib/python2.7/dist-packages/oslo_config/cfg.py", line 1108, in __init__ item_type=types.MultiString(), AttributeError: 'module' object has no attribute 'MultiString' *[2] * 2015-02-22 14:56:24.117 ERROR oslo_messaging.rpc.dispatcher [req-65501748-3db5-43b6-b00e-732565d2192a TestNetworkVPNaaS-1393357785 TestNetworkVPNaaS-1147259963] Exception during message handling: _oslo_messaging_localcontext_9bb7d928d1a042e085f354eb118e98a0 2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher Traceback (most recent call last): 2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher File "/usr/local/lib/python2.7/dist-packages/oslo_messaging/rpc/dispatcher.py", line 142, in _dispatch_and_reply 2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher executor_callback)) 2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher File "/usr/local/lib/python2.7/dist-packages/oslo_messaging/rpc/dispatcher.py", line 188, in _dispatch 2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher localcontext.clear_local_context() 2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher File "/usr/local/lib/python2.7/dist-packages/oslo_messaging/localcontext.py", line 55, in clear_local_context 2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher delattr(_STORE, _KEY) 2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher AttributeError: _oslo_messaging_localcontext_9bb7d928d1a042e085f354eb118e98a0 On Sat, Feb 14, 2015 at 7:05 AM, Doug Hellmann wrote: > > > On Thu, Feb 12, 2015, at 07:19 AM, Joshua Zhang wrote: > > Hi Doug, > > > >Thank you very much for your reply. I don't have any codes, so no any > > special codes as well. > >Only thing I did is that: > >1, use devstack to install a fresh openstack env, all are ok. > >2, import neutron-vpnaas directory (no any my own codes) into eclipse > >as > > pydev project, for example, run unit test > > (neutron_vpnaas.tests.unit.services.vpn.test_vpn_service ) in eclipse, it > > throws the following exception. > >3, but this unit t
Re: [openstack-dev] A question about strange behavior of oslo.config in eclipse
Hi Doug, Thank you very much for your reply. I don't have any codes, so no any special codes as well. Only thing I did is that: 1, use devstack to install a fresh openstack env, all are ok. 2, import neutron-vpnaas directory (no any my own codes) into eclipse as pydev project, for example, run unit test (neutron_vpnaas.tests.unit.services.vpn.test_vpn_service ) in eclipse, it throws the following exception. 3, but this unit test can be run well in bash, see http://paste.openstack.org/show/172016/ 4, this unit test can also be run well in eclipse as long as I edit neutron/openstack/common/policy.py file to change oslo.config into oslo_config. == ERROR: test_add_nat_rule (neutron_vpnaas.tests.unit.services.vpn.test_vpn_service.TestVPNDeviceDriverCallsToService) neutron_vpnaas.tests.unit.services.vpn.test_vpn_service.TestVPNDeviceDriverCallsToService.test_add_nat_rule -- _StringException: Traceback (most recent call last): File "/bak/openstack/neutron-vpnaas/neutron_vpnaas/tests/unit/services/vpn/test_vpn_service.py", line 98, in setUp super(TestVPNDeviceDriverCallsToService, self).setUp() File "/bak/openstack/neutron-vpnaas/neutron_vpnaas/tests/unit/services/vpn/test_vpn_service.py", line 53, in setUp super(VPNBaseTestCase, self).setUp() File "/bak/openstack/neutron-vpnaas/neutron_vpnaas/tests/base.py", line 36, in setUp override_nvalues() File "/bak/openstack/neutron-vpnaas/neutron_vpnaas/tests/base.py", line 30, in override_nvalues cfg.CONF.set_override('policy_file', neutron_policy) File "/usr/local/lib/python2.7/dist-packages/oslo_config/cfg.py", line 1679, in __inner result = f(self, *args, **kwargs) File "/usr/local/lib/python2.7/dist-packages/oslo_config/cfg.py", line 1949, in set_override opt_info = self._get_opt_info(name, group) File "/usr/local/lib/python2.7/dist-packages/oslo_config/cfg.py", line 2262, in _get_opt_info raise NoSuchOptError(opt_name, group) NoSuchOptError: no such option: policy_file On Tue, Feb 10, 2015 at 10:38 PM, Doug Hellmann wrote: > > > On Tue, Feb 10, 2015, at 04:29 AM, Joshua Zhang wrote: > > Hi Stacker, > >A question about oslo.config, maybe a very silly question. but pls > >tell > > me if you know, thanks in advance. > > > >I know oslo has removed 'olso' namespace, oslo.config has been changed > > to oslo_config, it also retains backwards compat. > > > >I found I can run openstack successfully, but as long as I run > >something > > in eclipse/pydev it always said like 'NoSuchOptError: no such option: > > policy_file'. I can change 'oslo.config' to 'oslo_config' in > > neutron/openstack/common/policy.py temporarily to bypass this problem > > when > > I want to debug something in eclipse. But I want to know why? who can > > help > > me to explain ? thanks. > > It sounds like you have code in one module using an option defined > somewhere else and relying on import ordering to cause that option to be > defined. The import_opt() method of the ConfigOpts class is meant to > help make these cross-module option dependencies explicit [1]. If you > provide a more detailed traceback I may be able to give more specific > advice about where changes are needed. > > Doug > > [1] > > http://docs.openstack.org/developer/oslo.config/configopts.html?highlight=import_opt#oslo_config.cfg.ConfigOpts.import_opt > > > > > > > -- > > Best Regards > > Zhang Hua(张华) > > Software Engineer | Canonical > > IRC: zhhuabj > > > __ > > OpenStack Development Mailing List (not for usage questions) > > Unsubscribe: > > openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > -- Best Regards Zhang Hua(张华) Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] A question about strange behavior of oslo.config in eclipse
Hi Stacker, A question about oslo.config, maybe a very silly question. but pls tell me if you know, thanks in advance. I know oslo has removed 'olso' namespace, oslo.config has been changed to oslo_config, it also retains backwards compat. I found I can run openstack successfully, but as long as I run something in eclipse/pydev it always said like 'NoSuchOptError: no such option: policy_file'. I can change 'oslo.config' to 'oslo_config' in neutron/openstack/common/policy.py temporarily to bypass this problem when I want to debug something in eclipse. But I want to know why? who can help me to explain ? thanks. -- Best Regards Zhang Hua(张华) Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [nova] Do we need new nova configuration option to show compute nodes with shared_storage or not ?
I'm sorry, my mistake due to my negligence, pls ignore my above reply. sorry. On Mon, Feb 2, 2015 at 4:04 PM, Joshua Zhang wrote: > 长波, > 你对oslo比较熟,能帮我看看这个问题吗, > https://answers.launchpad.net/oslo.config/+question/261550 > > On Tue, Jan 27, 2015 at 12:13 PM, ChangBo Guo wrote: > >> Hi ALL, >> >> I have been working on bug 1414432 [1] recently, I would like do more >> discussion before further work. >> >> I'm talking about libvirt driver( maybe fit for other hypervisor), there >> are two kinds of storages which are used for instance's root_disk. >> 1) non-shared storage on each compute nodes >> 2) shared storage between compute nodes >> 2.1 shared instance_path and root_disk (shared everything ike NFS) >> 2.2 shared root_disk without shared instance_path (shared volume >> backend like ceph) >> >> Current we check if shared storage or not in concrete actions like >> live-migration, evacuate, these need pass instance as argument, >> I think the value of hared storage or not should base on compute node, >> should not base on instance. >> So do we need new nova configuration option to show compute nodes with >> shared_storage or not ? >> >> benefits: >> >>1) Don't need check for each instance while taking action >>2) Can handle similar bug easily like [1] from API level. >> >> If yes, >> some thing like, compute-node-storage-type= [ non-shared | shared-all | >> shared-volume ] or part-shared >> In order to support some compute nodes with shared_storage, and others >> doesn't in one OpenStack development, >> another configuration shared_storage_compute_nodes =[node3, node5] >> >> Any thoughts ? >> >> >> [1]https://bugs.launchpad.net/nova/+bug/1414432 >> >> -- >> ChangBo Guo(gcb) >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> > > > -- > Best Regards > Zhang Hua(张华) > Software Engineer | Canonical > IRC: zhhuabj > -- Best Regards Zhang Hua(张华) Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [nova] Do we need new nova configuration option to show compute nodes with shared_storage or not ?
长波, 你对oslo比较熟,能帮我看看这个问题吗, https://answers.launchpad.net/oslo.config/+question/261550 On Tue, Jan 27, 2015 at 12:13 PM, ChangBo Guo wrote: > Hi ALL, > > I have been working on bug 1414432 [1] recently, I would like do more > discussion before further work. > > I'm talking about libvirt driver( maybe fit for other hypervisor), there > are two kinds of storages which are used for instance's root_disk. > 1) non-shared storage on each compute nodes > 2) shared storage between compute nodes > 2.1 shared instance_path and root_disk (shared everything ike NFS) > 2.2 shared root_disk without shared instance_path (shared volume > backend like ceph) > > Current we check if shared storage or not in concrete actions like > live-migration, evacuate, these need pass instance as argument, > I think the value of hared storage or not should base on compute node, > should not base on instance. > So do we need new nova configuration option to show compute nodes with > shared_storage or not ? > > benefits: > >1) Don't need check for each instance while taking action >2) Can handle similar bug easily like [1] from API level. > > If yes, > some thing like, compute-node-storage-type= [ non-shared | shared-all | > shared-volume ] or part-shared > In order to support some compute nodes with shared_storage, and others > doesn't in one OpenStack development, > another configuration shared_storage_compute_nodes =[node3, node5] > > Any thoughts ? > > > [1]https://bugs.launchpad.net/nova/+bug/1414432 > > -- > ChangBo Guo(gcb) > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Best Regards Zhang Hua(张华) Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron][vpnaas] Can we require kernel 3.8+ for use with StrongSwan IPSec VPN for Kilo?
pls note that actually this patch doesn't have minumum kernel requirement because it only uses 'mount --bind' and 'net namespace', not use 'mount namespace'. ('mount --bind' is since linux 2.4, 'net namespace' is since Linux 3.0, 'mount namespace' is since Linux 3.8). so I think sanity checks for 3.8 is not need, any thoughts ? thanks. On Fri, Jan 23, 2015 at 2:12 PM, Kevin Benton wrote: > >If we can consolidate that and use a single tool from the master neutron > repository, that would be my vote. > > +1 with a hook mechanism so the sanity checks stay in the *aas repos and > they are only run if installed. > >> > On Thu, Jan 22, 2015 at 7:30 AM, Kyle Mestery wrote: > >> On Wed, Jan 21, 2015 at 10:27 AM, Ihar Hrachyshka >> wrote: >> >>> On 01/20/2015 05:40 PM, Paul Michali wrote: >>> >>> Review https://review.openstack.org/#/c/146508/ is adding support for >>> StrongSwan VPN, which needs mount bind to be able to specify different >>> paths for config files. >>> >>> The code, which used some older patch, does a test for /proc/1/ns/net, >>> instead of /proc/1/ns/mnt, because it stated that the latter is only >>> supported in kernel 3.8+. That was a while ago, and I'm wondering if the >>> condition is still true. If we know that for Kilo and on, we'll be dealing >>> with 3.8+ kernels, we could use the more accurate test. >>> >>> Can we require 3.8+ kernel for this? >>> >>> >>> I think we can but it's better to check with distributions. Red Hat >>> wise, we ship a kernel that is newer than 3.8. >>> >>> If so, how and where do we ensure that is true? >>> >>> >>> Ideally, you would implement a sanity check for the feature you need >>> from the kernel. Though it opens a question of whether we want to ship >>> multiple sanity check tools for each of repos (neutron + 3 *aas repos). >>> >>> If we can consolidate that and use a single tool from the master neutron >> repository, that would be my vote. >> >>> >>> Also, if you can kindly review the code here: >>> https://review.openstack.org/#/c/146508/5/neutron_vpnaas/services/vpn/common/netns_wrapper.py, >>> I'd really appreciate it, as I'm not versed in the Linux proc files at all. >>> >>> Thanks! >>> >>> >>> PCM (Paul Michali) >>> >>> IRC pc_m (irc.freenode.com) >>> Twitter... @pmichali >>> >>> >>> >>> __ >>> OpenStack Development Mailing List (not for usage questions) >>> Unsubscribe: >>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribehttp://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >>> >>> >>> >>> >>> __ >>> OpenStack Development Mailing List (not for usage questions) >>> Unsubscribe: >>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >>> >>> >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> > > > -- > Kevin Benton > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Best Regards Zhang Hua(张华) Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron] Changes to the core team
+1 On Tue, Jan 20, 2015 at 12:59 PM, Aaron Rosen wrote: > +1 > > On Fri, Jan 16, 2015 at 12:03 PM, Carl Baldwin wrote: > >> +1 >> >> On Thu, Jan 15, 2015 at 3:31 PM, Kyle Mestery >> wrote: >> > The last time we looked at core reviewer stats was in December [1]. In >> > looking at the current stats, I'm going to propose some changes to the >> core >> > team. Reviews are the most important part of being a core reviewer, so >> we >> > need to ensure cores are doing reviews. The stats for the 90 day period >> [2] >> > indicate some changes are needed for core reviewers who are no longer >> > reviewing on pace with the other core reviewers. >> > >> > First of all, I'm removing Sumit Naiksatam from neutron-core. Sumit has >> been >> > a core reviewer for a long time, and his past contributions are very >> much >> > thanked by the entire OpenStack Neutron team. If Sumit jumps back in >> with >> > thoughtful reviews in the future, we can look at getting him back as a >> > Neutron core reviewer. But for now, his stats indicate he's not >> reviewing at >> > a level consistent with the rest of the Neutron core reviewers. >> > >> > As part of the change, I'd like to propose Doug Wiegley as a new Neutron >> > core reviewer. Doug has been actively reviewing code across not only >> all the >> > Neutron projects, but also other projects such as infra. His help and >> work >> > in the services split in December were the reason we were so successful >> in >> > making that happen. Doug has also been instrumental in the Neutron >> LBaaS V2 >> > rollout, as well as helping to merge code in the other neutron service >> > repositories. >> > >> > I'd also like to take this time to remind everyone that reviewing code >> is a >> > responsibility, in Neutron the same as other projects. And core >> reviewers >> > are especially beholden to this responsibility. I'd also like to point >> out >> > that +1/-1 reviews are very useful, and I encourage everyone to continue >> > reviewing code even if you are not a core reviewer. >> > >> > Existing neutron cores, please vote +1/-1 for the addition of Doug to >> the >> > core team. >> > >> > Thanks! >> > Kyle >> > >> > [1] >> > >> http://lists.openstack.org/pipermail/openstack-dev/2014-December/051986.html >> > [2] http://russellbryant.net/openstack-stats/neutron-reviewers-90.txt >> > >> > >> __ >> > OpenStack Development Mailing List (not for usage questions) >> > Unsubscribe: >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> > >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> > > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Best Regards Zhang Hua(张华) Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron] Can Neutron VPNaaS work with strongswan? (Openswan removed from Debian)
Hi Thomas, I worked out a patch https://review.openstack.org/#/c/100791/ based on the latest strongSwan configurations, it can work. but the neutron-spec is still on review, see https://review.openstack.org/#/c/101457/ Can someone help review and approve that spec, thanks. On Mon, Oct 13, 2014 at 12:50 PM, trinath.soman...@freescale.com < trinath.soman...@freescale.com> wrote: > Hi- > > Yes, VPNaaS works with Strong Swan too. I have tried and was successful. > > Take the cherry-pick of 67 patchset from > https://review.openstack.org/#/c/33148 > > Work on the conflicts and run neutron. It works perfect. > > Hope this helps. > > -- > Trinath Somanchi - B39208 > trinath.soman...@freescale.com | extn: 4048 > > -Original Message- > From: Thomas Goirand [mailto:z...@debian.org] > Sent: Sunday, October 12, 2014 9:54 AM > To: OpenStack Development Mailing List (not for usage questions) > Subject: [openstack-dev] [neutron] Can Neutron VPNaaS work with > strongswan? (Openswan removed from Debian) > > Hi, > > As you may know, OpenSwan has been largely unmaintained in Debian, and > then was removed from Testing, and then Sid last summer. OpenSwan had some > unaddressed security issues, and removing it from Debian was IMO the > correct thing to do. Ubuntu followed, and Utopic doesn't have OpenSwan > anymore either. > > Though there's StrongSwan, which is apparently an alternative. But can > Neutron work with it? If not, how much work would it be to make Neutron use > StrongSwan instead of OpenSwan, and could the maintainers of the VPNaaS > people do this be worked on for Kilo? BTW, why not using something as > popular as OpenVPN, which has more chances to be well maintained? > > Cheers, > > Thomas Goirand (zigo) > > ___ > OpenStack-dev mailing list > OpenStack-dev@lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > ___ > OpenStack-dev mailing list > OpenStack-dev@lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > -- Best Regards Zhang Hua(张华) Software Engineer | Canonical IRC: zhhuabj ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev