Thursday, 2018-01-11

*** yamamoto has quit IRC00:24
*** yamamoto has joined #openstack-fwaas00:27
*** yamamoto has quit IRC00:39
*** threestrands has quit IRC01:03
*** yamamoto has joined #openstack-fwaas01:39
*** yamamoto has quit IRC01:47
*** annp has joined #openstack-fwaas02:11
*** yamamoto has joined #openstack-fwaas02:19
*** threestrands has joined #openstack-fwaas02:47
*** yamamoto_ has joined #openstack-fwaas03:12
*** yamamoto has quit IRC03:16
*** annp has quit IRC06:38
*** yamamoto has joined #openstack-fwaas06:45
*** yamamoto_ has quit IRC06:49
*** threestrands has quit IRC07:00
*** threestrands has joined #openstack-fwaas07:01
*** threestrands has quit IRC07:01
*** threestrands has joined #openstack-fwaas07:01
*** threestrands has quit IRC07:02
*** threestrands has joined #openstack-fwaas07:03
*** threestrands has quit IRC07:03
*** threestrands has joined #openstack-fwaas07:03
*** threestrands has quit IRC07:04
*** threestrands has joined #openstack-fwaas07:04
*** jafeha__ is now known as jafeha07:23
*** reedip has quit IRC07:34
*** reedip has joined #openstack-fwaas07:47
*** annp has joined #openstack-fwaas08:01
*** AlexeyAbashkin has joined #openstack-fwaas08:08
*** threestrands has quit IRC08:08
*** reedip has quit IRC08:34
*** reedip has joined #openstack-fwaas08:46
*** chandanc has joined #openstack-fwaas09:15
chandanchello annp09:15
chandanci am seeing the following in  a co-existance setup09:15
chandanccookie=0xb23259d96259d97f, duration=63946.011s, table=91, n_packets=1515, n_bytes=166194, idle_age=76, priority=1 actions=NORMAL09:15
chandanc cookie=0xb23259d96259d97f, duration=63946.002s, table=92, n_packets=1247, n_bytes=124056, idle_age=1, priority=0 actions=drop09:15
chandanc cookie=0xb23259d96259d97f, duration=63945.993s, table=93, n_packets=2, n_bytes=180, idle_age=63762, priority=0 actions=drop09:15
chandanci think table 92 should be NORMAL action09:16
chandancref: https://review.openstack.org/#/c/526488/09:17
*** openstackgerrit has joined #openstack-fwaas10:08
openstackgerritCuong Nguyen proposed openstack/neutron-fwaas master: [WIP] Add log validator for FWaaS side  https://review.openstack.org/53279210:08
*** AlexeyAbashkin has quit IRC11:06
*** chandanc has quit IRC11:16
*** AlexeyAbashkin has joined #openstack-fwaas11:25
*** yamamoto has quit IRC12:01
*** yamamoto has joined #openstack-fwaas12:01
annpchandanc, Let's discuss on today meeting. I have to go home, now. :) See you later.12:03
*** annp has quit IRC12:05
*** chandanc has joined #openstack-fwaas12:46
*** chandanc has quit IRC13:00
*** hoangcx_ has joined #openstack-fwaas13:01
*** chandanc has joined #openstack-fwaas13:02
*** chandanc has quit IRC13:05
*** yushiro has joined #openstack-fwaas13:58
*** annp has joined #openstack-fwaas13:58
*** SridarK has joined #openstack-fwaas13:59
xgerman_o/14:00
yushiroHi fwaas folks!14:00
annphi14:00
yushiro#startmeeting fwaas14:00
openstackMeeting started Thu Jan 11 14:00:42 2018 UTC and is due to finish in 60 minutes.  The chair is yushiro. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
*** openstack changes topic to " (Meeting topic: fwaas)"14:00
openstackThe meeting name has been set to 'fwaas'14:00
yushiro#chair SridarK yushiro xgerman_14:00
openstackCurrent chairs: SridarK xgerman_ yushiro14:00
SridarKHi FWaaS folks14:01
yushiroHi SridarK.  How are you?  Is it fine?14:01
SridarKyushiro: ah thank u - much better today14:02
SridarKmany thx for the enquiry14:02
yushiroSridarK, That's good :)14:02
xgerman_+114:02
SridarKyushiro: would u or xgerman_ run the mtg today14:02
xgerman_I ran last time — yushiro?14:03
yushiroYes, sure :)14:03
xgerman_thx14:03
yushiroOK, let's start14:03
yushiro#topic Queens14:03
*** openstack changes topic to "Queens (Meeting topic: fwaas)"14:03
xgerman_everybody remmeber to vote this week in the board elections…14:03
yushiroxgerman_, +1  Thanks for your announcement.14:04
SridarK+114:04
xgerman_2 weeks until Q-3/code-freeze14:04
annp+114:05
xgerman_and OpenStack will stick with 6 month cycles for now14:05
yushiroYes.14:05
annp:)14:05
xgerman_http://lists.openstack.org/pipermail/openstack-dev/2018-January/126080.html14:05
SridarKThis is always a short cycle with the winter break14:05
*** chandanc has joined #openstack-fwaas14:06
yushiroYes, it's seasonal characteristic..14:06
chandancHello All14:06
yushirochandanc, Hi!14:07
chandancsorry, i am late14:07
annpchandanc hi14:07
yushirochandanc, NP :)14:07
chandanchello annp yushiro14:07
yushiroOK, anything announcement?14:07
yushiroOK, go on the current topic(Q-3)14:08
xgerman_yep14:08
yushiroAs xgerman_ said, we have only 1 week a little.14:08
yushirountil feature freeze.14:09
yushiroSo, I'd like to determine some patches to focus on.14:10
SridarKat least all the L2 support patches are in14:10
xgerman_+114:10
chandancya14:10
yushiroagree14:10
yushiro#link https://review.openstack.org/#/c/475183  - Add configurable option for default_fwg association14:11
annp+114:11
yushiroIn addition, in neutron side,  security-group logging feature has totally been merged(now pending for zuul job)14:12
xgerman_sweet14:13
yushiroIn order to use SG + SG-logging + FWaaS v2 correctly, we need to add following patch.14:13
yushiro#link https://review.openstack.org/#/c/530450/14:13
annpyeah14:13
SridarKnice14:13
yushiroTherefore, for fwaas v2 with L2 perspective, we need to merge above 2 patches I think.14:14
chandancok14:14
xgerman_ok14:14
SridarKok got it14:15
chandancannp i had a doubt about the tables14:15
yushiroSo, chandanc , I need your help for reviewing https://review.openstack.org/#/c/530450/  if possible :)14:15
chandancyushiro: sure14:15
yushirochandanc, thanks :)14:15
chandancas i mentioned earlier in IRC can you please explain the drop action14:16
chandancno pb14:16
chandanci mean14:16
chandancchandanc: cookie=0xb23259d96259d97f, duration=63946.011s, table=91, n_packets=1515, n_bytes=166194, idle_age=76, priority=1 actions=NORMAL14:16
chandanc[2:45pm] chandanc:  cookie=0xb23259d96259d97f, duration=63946.002s, table=92, n_packets=1247, n_bytes=124056, idle_age=1, priority=0 actions=drop14:16
chandanc[2:45pm] chandanc:  cookie=0xb23259d96259d97f, duration=63945.993s, table=93, n_packets=2, n_bytes=180, idle_age=63762, priority=0 actions=drop14:16
chandanc[2:46pm] chandanc: i think table 92 should be NORMAL action14:16
*** annp has quit IRC14:17
chandancok i will discuss with annp to understand the above, feel free to move on14:18
xgerman_k14:18
yushirochandanc, oops, OK, I see.14:18
chandancyushiro no pb14:18
yushirocurrently,  doude has posted pluggable driver patch.14:19
yushiro#link https://review.openstack.org/#/c/480265/ - Implements a plugable backend driver14:19
yushiroI think it's worth to merge until Queens because it's a big change in 1 patch.  SridarK and xgerman_ , how do you think about it?14:20
chandancbig one14:21
*** annp has joined #openstack-fwaas14:21
SridarKyushiro: yes it is significant change14:21
xgerman_doude has been working on it for a while so if we get it in would be good14:21
SridarKlets keep the review going14:21
xgerman_but I think L2 support has precedence14:22
SridarKxgerman_: +114:22
yushiroSridarK, xgerman_ +114:22
annpsorry my connection is lost. :(14:22
chandancdoe it open up fwaas for vendors ?14:22
SridarKworst case - we will get it in first thing next cycle14:23
yushiroOK, the priority is    1. L2 remaining patches   2. plugable backend driver14:23
SridarKchandanc: I am not sure that it is a requirement for vendors - it will make things easier14:23
chandancSridarK: ok, will be interesting, will go through the patch14:24
yushirochandanc, In my understanting, there is some usecase not to refer DB layer in FWaaS for some vendors.14:24
chandancyushiro: ok14:25
xgerman_yeah, if we can avoid vendors not accessing DB directly wiuld be good14:25
chandancagree14:25
SridarK+114:26
SridarKalso some cleanup on commit hooks14:26
yushiroannp, So, could you help for https://review.openstack.org/#/c/47518314:26
annpyushiro, yes, I can help :)14:27
yushiroTomorrow, I don't have bandwidth for it due to some powerpoint creation.... :(14:27
annpyushiro, I will do that for you tomorrow. :)14:27
yushiroAnyway :)14:27
doudeHi there14:27
yushiroannp, thanks14:28
doudesorry I'm late (again)14:28
xgerman_+114:28
annpchandanc, sorry my connection is lost.14:28
chandancno pb14:28
doudemy patch looks big but it's essentially code re-organization14:28
yushiroHi doude ,  NP.  We just talked your patch.  Thanks for your update :)14:28
chandanccan you please explain the drop action14:28
annpchandanc, please see there https://review.openstack.org/#/c/526488/1/neutron/agent/linux/openvswitch_firewall/firewall.py@44714:29
chandancoh ok14:29
chandanc:)14:29
yushirodoude, I know.  I think it's difficult to split any patches.  That's why you pushed in 1 patch I think.14:29
doudeyes yushiro14:30
annpchandanc, :)14:30
doudethe in14:30
doudethe only code I added is the code for the driver interface https://review.openstack.org/#/c/480265/9/neutron_fwaas/services/firewall/service_drivers/driver_api.py14:30
doudeanything else is existing code I moved14:30
yushiroYes, we'll keep on reviewing your patch and will try to merge it until Q-3 after merged L2 remaining patches.14:32
SridarK+114:32
yushiroL2 remaining patches are only 2.  1st: https://review.openstack.org/#/c/475183   2nd: https://review.openstack.org/#/c/530450/14:33
yushirodoude, Therefore, it will be great if you can help these patches with us :)14:33
yushiros/help/help reviewing14:33
annpyushrio, that means remote fwg will be do in Rocky, right?14:34
doudecan I help you on that l2 patches?14:34
doudesure I'll try yushiro14:35
xgerman_annp I still have hope14:35
xgerman_but getting neutron to merge neutron_lib patch is like pulling teeth14:35
yushiroannp, Hmm, hopefully I'd like to merge.14:35
yushirodoude, +10014:35
annpxgerman_, I can propose the patch for that in next week. But I'm afraid we don't have enough time for review14:36
yushiroannp, However, it is challenging14:36
annpBut I will try best :)14:36
yushiroannp, great :)14:36
xgerman_+114:37
yushiroOK, let's move on14:37
yushiro#topic Horizon support14:37
*** openstack changes topic to "Horizon support (Meeting topic: fwaas)"14:37
xgerman_one more Q-3 thing: https://review.openstack.org/#/c/470912/3314:38
xgerman_came to my attention this week — confused if we still need that…14:38
yushiroxgerman_,  wow, thanks.14:38
yushirohoangcx, ping14:39
xgerman_yeah, I think with OVS this is obsolete but…14:39
hoangcx_xgerman_: that is for sg in neutron side14:40
yushiroannp, I think it's for netlink for SG, right?14:40
hoangcx_for fwaas annp has a patch for that. AFAIR14:40
yushiros/annp/hoangcx14:40
annp:)14:40
annphttps://review.openstack.org/#/c/527044/14:41
annpxgerman_ Is this patch?14:41
xgerman_this is our path, yes14:42
yushiroOK, this patch is also necessary.14:42
xgerman_+114:42
hoangcx_annp: is the patch for both v1 and v2 OR v1 only?14:42
annpfor both of them14:42
yushiroyup14:42
hoangcx_great :)14:43
hoangcx_xgerman_: I think it is safe to land the patch14:43
yushiroOK, I'll update etherpad for reviewing during Q-3.14:44
hoangcx_xgerman_: because in fwaas we have configuration option to switch each other14:44
xgerman_ok, thanks14:44
hoangcx_xgerman_: but it is not in sg in neutron14:44
yushiro+1 FWaaS is configurable to use netlink or not.14:45
hoangcx_yushiro: right!14:45
yushirohoangcx_, will review it.14:45
xgerman_+114:45
yushiroso... Sarath is planning to update: https://docs.google.com/document/d/1yKreFzwHsp-TMhB1xDH-EhGHBTGawFAaG1x6ukGJUK4/edit?usp=sharing14:45
annp+114:46
yushiroToday, Sarath is not here but we can put on comment into above google doc.14:46
yushiro#topic Stadium Compliance14:47
*** openstack changes topic to "Stadium Compliance (Meeting topic: fwaas)"14:47
yushiroIs there any update ?14:48
yushiroreedip, here?14:48
xgerman_don’t think so - all tempest/zuul stuff we punted to Rocky14:48
yushiroxgerman_, Aha, OK.14:49
xgerman_that’s my impression14:49
yushiroxgerman_, ya, my point of view, there is no update in these days either.14:50
yushiro#topic Open Discussion14:50
*** openstack changes topic to "Open Discussion (Meeting topic: fwaas)"14:50
xgerman_we should make that a topic for PTG planning14:50
yushiroYes, I'd like to talk about it too :)14:50
xgerman_:-)14:50
yushiroAre you guys going to attend dublin PTG?  It's OK to join virtual meeting :)14:51
xgerman_will be there14:51
yushiroxgerman_, great14:51
xgerman_With all the L2 patches we will need to do some documentation + maybe some video14:51
yushiroI'll be there too.14:52
xgerman_chandanc: volunteered for making a demo video ;-)14:52
chandancya, will get to it during the weekend14:52
xgerman_sweet!!14:52
yushirochandanc, perfect14:52
xgerman_I need to figure out how we can promote it on superuser ;-)14:53
SridarK:-)14:53
yushiroSridarK, How about you about dublin PTG ?14:53
chandancBTW xgerman_ i thing the SG issue that you mentioned might be coming from the layers above driver14:53
SridarKNo i cannot make PTG14:53
xgerman_:-(14:53
SridarKyushiro: will u make it ?14:53
chandanci saw the same behavor for iptables driver as well14:53
yushiroYes, I will be there (maybe)14:54
xgerman_chandanc: yes, I think keeping our explicit behavior makes sense14:54
yushiroSo, we can communicate in skype or webEX during PTG.14:54
xgerman_+114:55
SridarKso maybe atleast xgerman_ and possibly yushiro will be there14:55
chandancxgerman_: +114:55
SridarKyes we can do something virtual14:55
chandanc+214:55
xgerman_in the past wifi was questionable so wish us luck14:56
SridarKoh yes14:56
yushiroI'll have portable wi-fi.14:56
annpSridarK +114:56
chandanc:)14:56
yushirofor redundancy :)14:56
chandancawesome14:56
SridarKwe can also do a quick sync up before the PTG14:56
annpgreat yushiro :)14:56
xgerman_SridarK: +114:57
yushiroSridarK, +114:57
annp+114:57
chandancyushiro failover mode or load balancing mode :)14:57
annp:)14:58
SridarK:-)14:58
yushirochandanc, I hope active-active :)14:58
yushirohaha14:58
xgerman_lol14:58
chandanccool :)14:58
yushiroMaybe dublin is cold but we're 'Firewall'.  I think it's a little warm.14:58
SridarK:-)14:59
xgerman_:-)14:59
chandancsure14:59
annp:)14:59
yushiroSo, let's do our best in Q-3!!14:59
SridarK+114:59
annp+114:59
yushiro#endmeeting15:00
*** openstack changes topic to "Queens (Meeting topic: fwaas)"15:00
openstackMeeting ended Thu Jan 11 15:00:00 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:00
SridarKOk thanks all for joining15:00
openstackMinutes:        http://eavesdrop.openstack.org/meetings/fwaas/2018/fwaas.2018-01-11-14.00.html15:00
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/fwaas/2018/fwaas.2018-01-11-14.00.txt15:00
openstackLog:            http://eavesdrop.openstack.org/meetings/fwaas/2018/fwaas.2018-01-11-14.00.log.html15:00
xgerman_o/15:00
annpsee you guys.15:00
SridarKbye all15:00
yushiroThanks all!15:00
yushirowill update on etherpad..15:00
annp+1 yushiro15:00
chandancannp yushiro can you be around for 5 mins15:00
annpyes15:00
chandanci am was testing the OVS driver and I might have found a bug15:01
chandancthe change in driver seems to be small15:01
yushirochandanc, sure15:01
chandancwill it be possible to make it part of the other ovs patch ?15:02
chandanchttps://review.openstack.org/#/c/53045015:02
annpchandanc, of course, please propose that15:02
chandancsure will do,15:02
yushiroyes, please :)15:03
chandancthanks15:03
yushirochandanc, ah,  it's better to put -1 and put your comment.15:03
yushiroAfter that, plz update as you like :)15:03
chandancok sure15:03
annpyeah, +115:03
yushiroThanks chandanc15:03
chandancthanks guys, catch you tomorrow15:04
annpthanks and see you tomorrow15:04
annpgood night yushiro :)15:04
chandancbye15:04
*** chandanc has quit IRC15:04
annpHave a great day ahead, chandanc, xgerman, SridarK, doube15:05
annpbye bye15:05
SridarKannp: thx u too GN15:05
*** annp has quit IRC15:05
yushirogood night15:09
*** yushiro has quit IRC15:09
*** hoangcx_ has quit IRC15:12
*** mlavalle has joined #openstack-fwaas15:18
*** cleong has joined #openstack-fwaas15:20
*** yamamoto has quit IRC15:37
*** yamamoto has joined #openstack-fwaas15:38
*** yamamoto has quit IRC15:43
*** mlavalle has quit IRC16:14
*** AlexeyAbashkin has quit IRC16:53
*** amotoki has quit IRC17:24
-openstackstatus- NOTICE: Due to an unexpected issue with zuulv3.o.o, we were not able to preserve running jobs for a restart. As a result, you'll need to recheck your previous patchsets17:46
*** yamamoto has joined #openstack-fwaas18:00
*** yamamoto has quit IRC18:04
*** SridarK has quit IRC18:07
*** SumitNaiksatam has joined #openstack-fwaas18:19
*** AlexeyAbashkin has joined #openstack-fwaas18:20
*** AlexeyAbashkin has quit IRC18:24
*** AlexeyAbashkin has joined #openstack-fwaas18:57
*** AlexeyAbashkin has quit IRC19:01
*** SumitNaiksatam has quit IRC20:29
*** cleong has quit IRC21:33
*** threestrands has joined #openstack-fwaas21:58
*** threestrands has quit IRC21:58
*** threestrands has joined #openstack-fwaas21:58
*** threestrands has quit IRC21:59
*** threestrands has joined #openstack-fwaas21:59
*** threestrands has quit IRC21:59
*** threestrands has joined #openstack-fwaas21:59
*** threestrands has quit IRC22:00
*** threestrands has joined #openstack-fwaas22:01
*** threestrands has quit IRC22:02
*** threestrands has joined #openstack-fwaas22:02

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!