Re: [Openstack-operators] Ubuntu Kernel with Meltdown mitigation SSL issues

2018-01-18 Thread Logan V.
We upgraded our control plane to 4.4.0-109 + intel-microcode 3.20180108.0~ubuntu16.04.2 several days ago, and are about 1/2 of the way thru upgrading our compute hosts with these changes. We use Ocata for all services, and no issue like this has been observed yet on our env. Control hosts are

Re: [Openstack-operators] [openstack-dev] [nova] heads up to users of Aggregate[Core|Ram|Disk]Filter: behavior change in >= Ocata

2018-01-18 Thread Jay Pipes
On 01/18/2018 03:06 PM, Logan V. wrote: We have used aggregate based scheduler filters since deploying our cloud in Kilo. This explains the unpredictable scheduling we have seen since upgrading to Ocata. Before this post, was there some indication I missed that these filters can no longer be

Re: [Openstack-operators] [openstack-dev] [nova] heads up to users of Aggregate[Core|Ram|Disk]Filter: behavior change in >= Ocata

2018-01-18 Thread Mathieu Gagné
Hi, On Tue, Jan 16, 2018 at 4:24 PM, melanie witt wrote: > Hello Stackers, > > This is a heads up to any of you using the AggregateCoreFilter, > AggregateRamFilter, and/or AggregateDiskFilter in the filter scheduler. > These filters have effectively allowed operators to set

Re: [Openstack-operators] Ubuntu Kernel with Meltdown mitigation SSL issues

2018-01-18 Thread Adam Heczko
Hello Sam, thank you for sharing this information. Could you please provide more information related to your specific setup. How is Keystone API endpoint TLS terminated in your setup? AFAIK in our OpenStack labs we haven't observed anything like this although we terminate TLS on Nginx or HAProxy.

Re: [Openstack-operators] Ubuntu Kernel with Meltdown mitigation SSL issues

2018-01-18 Thread Sam Morrison
We have an F5 doing all the SSL in front of our API servers. SSL-Session: Protocol : TLSv1.2 Cipher: ECDHE-RSA-AES256-GCM-SHA384 The majority of the requests that were failing was a glance request /v2/images?limit=20 (around 25% of requests which is around 1-2 a second) Glance is on

Re: [Openstack-operators] [openstack-dev] [nova] heads up to users of Aggregate[Core|Ram|Disk]Filter: behavior change in >= Ocata

2018-01-18 Thread Mathieu Gagné
On Thu, Jan 18, 2018 at 5:19 PM, Jay Pipes wrote: > On 01/18/2018 03:54 PM, Mathieu Gagné wrote: >> >> Hi, >> >> On Tue, Jan 16, 2018 at 4:24 PM, melanie witt wrote: >>> >>> Hello Stackers, >>> >>> This is a heads up to any of you using the