Re: [openstack-dev] [NOVA] How boot an instance on specific compute with provider-network: physnet1

2016-08-17 Thread Rick Jones
that. rick jones __ OpenStack Development Mailing List (not for usage questions) Unsubscribe:

Re: [openstack-dev] [Neutron] stable/liberty busted

2016-08-05 Thread Rick Jones
On 08/05/2016 02:52 AM, Kevin Benton wrote: Sorry I didn't elaborate a bit more, I was replying from my phone. The agent has logic that calculates the required flows for ports when it starts up and then reconciles that with the current flows in OVS so it doesn't disrupt traffic on every restart.

Re: [openstack-dev] [Neutron] stable/liberty busted

2016-08-04 Thread Rick Jones
On 08/04/2016 01:39 PM, Kevin Benton wrote: Yep. Some tests are making sure there are no packets lost. Some are making sure that stuff starts working eventually. Not to be pedantic, but what sort of requirement exists that no packets be lost? rick

Re: [openstack-dev] [Neutron] stable/liberty busted

2016-08-04 Thread Rick Jones
for strictness to decide which behavior the test is looking for. What situation requires continuous connectivity? rick jones __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ

Re: [openstack-dev] [Kuryr] [Neutron] Waiting until Neutron Port isActive

2016-06-13 Thread Rick Jones
th of time, poll again, see it is not yet "up" wait a longer semi-random length of time, lather, rinse, repeat until you've either gotten to the limits of your patience or the port has become "up." Fixed, short poll intervals can run the risk of congestive coll

Re: [openstack-dev] profiling - eg neutron-vpn-agent

2016-05-23 Thread Rick Jones
doesn't get a chance to write out. SIGTERM does seem to result in a file being written-out. Thanks. That gets me one step closer. happy benchmarking, rick jones __ OpenStack Development Mailing List (not for usage

[openstack-dev] profiling - eg neutron-vpn-agent

2016-05-23 Thread Rick Jones
not using Python 2.5, that is simply where web searching has lead me from the peanut gallery :) ) Alas, it seems that ^C'ing it doesn't have the profile written-out. So I'm looking for other methods. happy benchmarking, rick jones

Re: [openstack-dev] [neutron][kilo] - vxlan's max bandwidth

2016-04-19 Thread Rick Jones
I like larger MTUs, and used to call stateless offloads like TSO/GSO "Poor man's Jumbo Frames" but if you can get the stateless offloads going, you can go beyond the savings one gets from JumboFrames because a TSO/GSO/GRO "segment" can end-up being semi-effectively 32-6

Re: [openstack-dev] [neutron][kilo] - vxlan's max bandwidth

2016-04-15 Thread Rick Jones
it is just a paranoid question, but is there any 1 Gbit/s networking in your setup at all? happy benchmarking, rick jones __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.ope

Re: [openstack-dev] [neutron] - Changing the Neutron default security group rules

2016-03-02 Thread Rick Jones
server list will sort by instance name ... descending. And openstack server show will emit a less formatted version of the security group name than nova show does. happy benchmarking, rick jones __ OpenStack Development

Re: [openstack-dev] [nova][cinder] Limits on volume read throughput?

2016-03-01 Thread Rick Jones
ing a physical network :) You will be however likely crossing the loopback network on the node. What sort of per-CPU utilizations do you see when running the test to the instance? Also, out of curiosity, what block size are you using in dd? I wonder how well that "maps" to wha

Re: [openstack-dev] [Neutron] Intra-column wrapping in python-neutronclient

2016-02-24 Thread Rick Jones
;only" human-readable. And it is arguably the case that this new format is less human-readable than what was before, even discounting the loss of straight-forward cut-and-paste. And I would not discount the importance of straight-forward cut-and-paste. rick jones This is the reason

Re: [openstack-dev] [tricircle] Port Query Performance Test

2016-02-03 Thread Rick Jones
="neutron --os-token=$token --os-url=https://mutter to avoid grabbing a token each time. Might that be possible with what you are testing? rick jones __ OpenStack Development Mailing List (not for usage questions) Unsubs

Re: [openstack-dev] [Neutron] MTU configuration pain

2016-01-25 Thread Rick Jones
including it in their Gigabit Ethernet kit as a way to enable the systems of the day to have a hope of getting link-rate :) Perhaps they picked 9000 because it was twice the 4500 of FDDI, which itself was selected to allow space for 4096 bytes of data and then a good bit of headers.

Re: [openstack-dev] [Neutron] MTU configuration pain

2016-01-20 Thread Rick Jones
. rick jones __ OpenStack Development Mailing List (not for usage questions) Unsubscribe:

Re: [openstack-dev] [Neutron] virtual machine can not get DHCP lease due packet has no checksum

2015-06-02 Thread Rick Jones
due to an optimisation in the way QEMU treats packet checksums. You'll see the problem if your machine is running the VM on the same host as its DHCP server and the VM has a vulnerable client.) Is that specific to DHCP clients, or does this issue affect UDP traffic in general? rick jones

Re: [openstack-dev] [neutron] Neutron API rate limiting

2015-05-18 Thread Rick Jones
, 2015 at 10:01 PM, Rick Jones wrote: On May 14, 2015 9:26 PM, Gal Sagie wrote: Hello Ryan, We have proposed a spec

Re: [openstack-dev] [neutron] Neutron API rate limiting

2015-05-18 Thread Rick Jones
On 05/18/2015 02:01 PM, Chris Friesen wrote: On 05/18/2015 09:54 AM, Rick Jones wrote: Interestingly enough, what I've come across mostly (virtually entirely) has been compromised instances being used in sending spewage out onto the Big Bad Internet (tm). One thing I was thinking about

Re: [openstack-dev] [neutron] Neutron API rate limiting

2015-05-15 Thread Rick Jones
. Does there need to be both a packet and bit rate limit? I've some experience with bit rate limits and have seen otherwise rather throttled (bitrate) instances cause non-trivial problems with a network node. rick jones

Re: [openstack-dev] Controlling data sent to client

2015-03-10 Thread Rick Jones
On 03/10/2015 11:45 AM, Omkar Joshi wrote: Hi, I am using open stack swift server. Now say multiple clients are requesting 5GB object from server. The rate at which server can push data into server socket is much more than the rate at which client can read it from proxy server. Is there

Re: [openstack-dev] [neutron] OpenFlow security groups (pre-benchmarking plan)

2015-02-25 Thread Rick Jones
On 02/25/2015 05:52 AM, Miguel Ángel Ajo wrote: I’m writing a plan/script to benchmark OVS+OF(CT) vs OVS+LB+iptables+ipsets, so we can make sure there’s a real difference before jumping into any OpenFlow security group filters when we have connection tracking in OVS. The plan is to keep all of

Re: [openstack-dev] [Fuel] 10Gbe performance issue.

2015-01-26 Thread Rick Jones
On 01/22/2015 03:19 AM, Piotr Korthals wrote: Thanks, Rick looks like GRO was something we was missing in our setup. Here are some results form my tests iperf with GRO disabled on server side : 2,5-3Gbps iperf with GRO enabled on server side : 3,5-4 Gbps (gro was enabled on eth0, br-eth0,

Re: [openstack-dev] [Fuel] 10Gbe performance issue.

2015-01-21 Thread Rick Jones
like what one would get with 10 GbE in the days before GRO/LRO. happy benchmarking, rick jones __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ

Re: [openstack-dev] [Fuel] NTP settings.

2014-11-14 Thread Rick Jones
(e.g. in an off-the-grid bunker 2 miles beneath Fort Knox), synchronizing clocks on all environments just to the Fuel master will still work. I thought NTP (well ntpd) had an option to tell it to only ever slew the clock, never step it? Or is that only some implementations of NTP? rick jones

Re: [openstack-dev] [Neutron] Killing connection after security group rule deletion

2014-10-24 Thread Rick Jones
does upstream conntrack have to say about the matter? I tend to avoid such things where I can, but what do real firewalls do with such matters? If one removes a rule which allowed a given connection through, do they actually go ahead and nuke existing connections? rick jones

Re: [openstack-dev] [rally][iperf] Benchmarking network performance

2014-09-04 Thread Rick Jones
small packet and then a latency test. happy benchmarking, rick jones ___ OpenStack-dev mailing list

Re: [openstack-dev] [nova] should we have a stale data indication in nova list/show?

2014-06-24 Thread Rick Jones
the user deal with everything. Since nova knows something *may* be wrong shouldn't we convey that to the user (I'm not 100% sure we should myself). I suspect the user's first action will be to call Support asking Hey, why is my perfectly usable instance showing-up in the ERROR|UNKNOWN state? rick

Re: [openstack-dev] [nova] should we have a stale data indication in nova list/show?

2014-06-24 Thread Rick Jones
On 06/24/2014 02:53 PM, Steve Gordon wrote: - Original Message - From: Rick Jones To: OpenStack Development Mailing List (not for usage questions) On 06/24/2014 02:38 PM, Joe Gordon wrote: I agree nova shouldn't take any actions

Re: [openstack-dev] [neutron][rootwrap] Performance considerations, sudo?

2014-03-20 Thread Rick Jones
On 03/20/2014 09:07 AM, Yuriy Taraday wrote: On Thu, Mar 20, 2014 at 7:28 PM, Rick Jones wrote: Interesting result. Which versions of sudo and ip and with how many interfaces on the system? Here are the numbers: % sudo -V Sudo version

Re: [openstack-dev] [neutron][rootwrap] Performance considerations, sudo?

2014-03-05 Thread Rick Jones
of movement. happy benchmarking, rick jones the fastest procedure call is the one you never make Best, Miguel Ángel Ajo. Appendix: [1] Analyzing overhead: [root@rhos4-neutron2 ~]# echo int main() { return 0; } test.c [root@rhos4-neutron2 ~]# gcc test.c -o test [root@rhos4-neutron2 ~]# time

Re: [openstack-dev] [TripleO][Neutron] PMTUd broken in gre networks

2014-01-22 Thread Rick Jones
On 01/22/2014 03:01 AM, Robert Collins wrote: I certainly think having the MTU set to the right value is important. I wonder if there's a standard way we can signal the MTU (e.g. in the virtio interface) other than DHCP. Not because DHCP is bad, but because that would work with statically

Re: [openstack-dev] [Neutron] Partially Shared Networks

2014-01-13 Thread Rick Jones
overlap-router0001. $ neutron router-interface-add overlap-router0001 overlap-subnet0001 400-{u'QuantumError': u'Bad router request: Cidr of subnet d6015301-e5bf-4f1a-b3b3-5bde71a52496 overlaps with cidr of subnet faddcc32-7bb6-4cb2-862e-7738e5c54f6d'} rick jones

Re: [openstack-dev] [Nova][Vmware]Bad Performance when creating a new VM

2014-01-08 Thread Rick Jones
. It will be very much desirable to start the packet trace before the upload so you can capture the TCP connection establishment packets (aka the TCP SYNchronize segments) as those contain some important pieces of information about the capabilities of the connection. rick jones

Re: [openstack-dev] Introducing the new OpenStack service for Containers

2013-11-19 Thread Rick Jones
the end-users? rick jones ___ OpenStack-dev mailing list

Re: [openstack-dev] [Openstack] CLI command to figure out security-group's association to particular tenant/user

2013-06-28 Thread Rick Jones
VARIABLE specify the variable(s) to include, can be repeated --prefix PREFIX add a prefix to all variable names rick jones ___ OpenStack-dev mailing list