| *** salv-orlando has quit IRC | 00:10 | |
| *** gongysh has joined #openstack-neutron-ovn | 00:19 | |
| *** mlavalle has quit IRC | 00:40 | |
| *** gongysh has quit IRC | 01:20 | |
| *** mickeys has quit IRC | 01:25 | |
| *** doonhammer has quit IRC | 02:06 | |
| *** s3wong has quit IRC | 02:49 | |
| *** mickeys has joined #openstack-neutron-ovn | 03:08 | |
| *** gongysh has joined #openstack-neutron-ovn | 03:10 | |
| *** yuelongguang has quit IRC | 03:43 | |
| *** janki has joined #openstack-neutron-ovn | 05:07 | |
| *** jchhatbar has joined #openstack-neutron-ovn | 05:29 | |
| *** janki has quit IRC | 05:30 | |
| *** salv-orlando has joined #openstack-neutron-ovn | 05:44 | |
| *** salv-orlando has quit IRC | 05:50 | |
| *** jchhatbar_ has joined #openstack-neutron-ovn | 06:03 | |
| *** jchhatbar has quit IRC | 06:05 | |
| *** armax has quit IRC | 06:15 | |
| *** armax has joined #openstack-neutron-ovn | 06:16 | |
| *** jchhatbar_ is now known as janki | 06:18 | |
| *** salv-orlando has joined #openstack-neutron-ovn | 06:46 | |
| *** salv-orlando has quit IRC | 06:50 | |
| *** salv-orlando has joined #openstack-neutron-ovn | 07:02 | |
| *** ltomasbo|away is now known as ltomasbo | 07:02 | |
| *** pcaruana has joined #openstack-neutron-ovn | 07:30 | |
| *** yamamoto has quit IRC | 07:52 | |
| *** yamamoto has joined #openstack-neutron-ovn | 08:28 | |
| *** yamamoto_ has joined #openstack-neutron-ovn | 08:36 | |
| *** yamamoto has quit IRC | 08:39 | |
| *** salv-orlando has quit IRC | 08:53 | |
| *** salv-orlando has joined #openstack-neutron-ovn | 09:06 | |
| *** mickeys has quit IRC | 09:15 | |
| *** yamamoto_ has quit IRC | 09:24 | |
| *** arslanq has joined #openstack-neutron-ovn | 09:32 | |
| arslanq | hi guys, i wanna try OVN on centOS. I have already an openstack setup (Newton) up and running on 3 nodes (1 controller and 2 computes). By default it is running OVS. I want to try OVN on it. Could anyone please guide me. | 09:34 |
|---|---|---|
| *** yuelongguang has joined #openstack-neutron-ovn | 09:35 | |
| *** yamamoto has joined #openstack-neutron-ovn | 09:35 | |
| *** yamamoto has quit IRC | 09:43 | |
| *** salv-orlando has quit IRC | 09:45 | |
| numans | arslanq, hi | 10:09 |
| numans | arslanq, you want to kind of migrate it ? | 10:09 |
| numans | arslanq, like stopping neutron services and starting ovn services ? | 10:09 |
| arslanq | numans: yes this is exactly what i wanna do....you can say a brownfield | 10:10 |
| numans | arslanq, how have you deployed openstack ? | 10:10 |
| numans | arslanq, are you using systemctl to stop/start the openstack services ? | 10:11 |
| numans | see if this helps you - https://review.openstack.org/#/c/427230/ | 10:11 |
| numans | arslanq, its an ansible playbook which stops the neutron services and starts the ovn services | 10:11 |
| numans | if you are using systemctl, it should work. Either way have a look into the playbook. I suggest you try to do something similar for your setup | 10:12 |
| arslanq | numans: did it work for you on CentOS??? | 10:15 |
| numans | arslanq, yes. | 10:15 |
| numans | arslanq, see the readme file | 10:15 |
| numans | we tested on a tripleo setup | 10:15 |
| arslanq | thanks numans, i'll give it a try right away and will let you know. | 10:15 |
| numans | the prerequisite is you are using ovs firewall driver instead of iptables | 10:16 |
| arslanq | could you please mention ansible version? | 10:16 |
| numans | arslanq, if not i suggest you first migrate to using ovs firewall driver | 10:16 |
| numans | i think its 2.2 | 10:16 |
| arslanq | i am not sure i am using iptables or firewall one....how to make sure that? | 10:16 |
| numans | have a look into the readme file. i think it has | 10:17 |
| arslanq | ok thanks i'll give it a try | 10:17 |
| numans | arslanq, if you haven't configured, i presume its iptables. | 10:17 |
| numans | one sec, let me point you to the config param for that | 10:17 |
| *** openstackgerrit has quit IRC | 10:18 | |
| numans | ansible compute,controller -f 9 -i hosts -m ini_file -a "dest=/etc/neutron/plugins/ml2/openvswitch_agent.ini section=securitygroup option=firewall_driver value=openvswitch" -b | 10:18 |
| numans | ansible compute,controller -f 9 -i hosts -a "sudo systemctl restart neutron-openvswitch-agent" | 10:18 |
| numans | arslanq, have a look at these commands | 10:19 |
| numans | you should be able to set it this way. you can first verify the present value in the openvswitch_agent.ini | 10:19 |
| arslanq | i have copied it. | 10:22 |
| arslanq | well could you please help me make this understand that, what networking is this? I just install openstack using packstack on three nodes, 1 controller 2 computes. It created ovs bridge on controller node i.e br-ex and by default it set 172.24.4.224/28 subnet. All external connectivity is working. but what if i want to use my own provider network. | 10:24 |
| numans | arslanq, i don't have much idea on packstack. may be before deploying you could configure the answers file with your provider network details. now that you have deployed, honestly i don't know how to. probably you can create your own provider network using "neutron net-create" and see if it works | 10:26 |
| arslanq | i just found that :) | 10:27 |
| arslanq | CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=physnet1:br-enp8s0 | 10:27 |
| arslanq | CONFIG_NEUTRON_OVS_BRIDGE_IFACES=br-enp8s0:enp8s0 | 10:27 |
| numans | ok great | 10:27 |
| *** fzdarsky|afk has joined #openstack-neutron-ovn | 10:33 | |
| arslanq | numans: wait a sec. this readme.rst says if it is using firewall driver. What if it is iptables one? | 10:40 |
| numans | arslanq, have you created the vms ? | 10:41 |
| numans | arslanq, if not i think its ok to use this playbook. | 10:41 |
| numans | arslanq, if you have already created vms and you want to migrate successfully to ovn, then you need to first configure to use firewall driver. | 10:41 |
| numans | i am not sure how that is done | 10:42 |
| numans | so probably you have to see the neutron docs or check in #openstack-neutron to see on how to do it. | 10:42 |
| arslanq | does not matter, i'll delete VMs and networks etc | 10:43 |
| *** fzdarsky|afk is now known as fzdarsky | 10:53 | |
| *** jchhatbar has joined #openstack-neutron-ovn | 10:59 | |
| *** janki has quit IRC | 11:01 | |
| *** salv-orlando has joined #openstack-neutron-ovn | 11:16 | |
| *** salv-orlando has quit IRC | 11:20 | |
| *** yamamoto has joined #openstack-neutron-ovn | 11:25 | |
| *** jchhatbar_ has joined #openstack-neutron-ovn | 11:26 | |
| *** jchhatbar has quit IRC | 11:28 | |
| *** yamamoto has quit IRC | 11:29 | |
| arslanq | numans: i was going to start migration but before that i had some queries please | 11:30 |
| numans | arslanq, sure | 11:32 |
| numans | arslanq, i will be back in 5 min | 11:33 |
| *** jchhatbar has joined #openstack-neutron-ovn | 11:47 | |
| *** jchhatbar is now known as janki | 11:48 | |
| *** jchhatbar_ has quit IRC | 11:50 | |
| *** fzdarsky has quit IRC | 11:56 | |
| numans | arslanq, i am back | 12:00 |
| arslanq | numans: ovn_encap_ip is the compute node ip of mgmt network right? | 12:03 |
| numans | arslanq, yes. | 12:03 |
| numans | arslanq, that would be the tunnel ip | 12:03 |
| numans | and compute nodes establish geneve tunnels with this ip | 12:03 |
| arslanq | numans: ovn_db_ip is mgmt ip of which node? | 12:04 |
| numans | arslanq, that should be your controller node | 12:04 |
| numans | you have one controller node right ? | 12:04 |
| arslanq | yes i have one controller node so same will be my DB node | 12:04 |
| numans | right | 12:04 |
| arslanq | numans: "ovn_bridge_mappings=net1:br-em1"....here net1 is mgmt network in your example 192.0.2.0 right? | 12:06 |
| arslanq | i mean net1 is a NIC connected to mgmt network | 12:07 |
| numans | arslanq, you can configure any value here, but make sure that you move the NIC which has public connectivity to ovs bridge br-em1 | 12:07 |
| numans | arslanq, you can rename to whatever eg .. datacentre:br-ex | 12:08 |
| numans | arslanq, i would suggest use =physnet1:br-enp8s0 | 12:08 |
| arslanq | normally i have one NIC which is connected to internet....i think that should work | 12:09 |
| numans | arslanq, because that's what packstack has configured. i may be wrong. | 12:09 |
| numans | ok. | 12:09 |
| numans | arslanq, have a look at it - http://openvswitch.org/support/dist-docs/ovn-controller.8.html | 12:09 |
| numans | and grep for external_ids:ovn-bridge-mappings | 12:09 |
| numans | in case you haven't already seen this | 12:09 |
| arslanq | numans: and this bridge will be created as new...regardless of other available bridges which were created earlier by OVS | 12:10 |
| numans | arslanq, if the bridge doesn't exist ovn-controller would create it. | 12:10 |
| numans | but if it already exists it would reuse is what i think | 12:11 |
| arslanq | ok, since this is being created on compute node, what will be the purpose of this bridge? | 12:11 |
| numans | arslanq, it is required for external connectivity | 12:12 |
| numans | arslanq, does your compute nodes have access to external connectivity ? | 12:12 |
| numans | arslanq, it's something like dvr | 12:12 |
| arslanq | yes my compute nodes have access to internet, but a bridge like br-ex is available on controller node not on computes...let me send you details of bridges on both nodes | 12:13 |
| numans | arslanq, its fine. in the case of ovn, the traffic for external connectivity doesn't go through controller node | 12:14 |
| numans | networking-ovn would choose one compute node and that would act as gateway for external connectivity ...(there are a couple of patches pending after which complete dnat would be supported) | 12:15 |
| arslanq | numans: here is the detail https://pastebin.mozilla.org/8978508 | 12:16 |
| *** salv-orlando has joined #openstack-neutron-ovn | 12:17 | |
| numans | ok. | 12:17 |
| arslanq | makes sense that ovn controller on computes handles the external traffic...right | 12:17 |
| numans | arslanq, you may have to add the physical interface to br-ex on compute nodes to have external traffic | 12:17 |
| numans | yes | 12:17 |
| *** numans is now known as numans_afk | 12:18 | |
| arslanq | yes i'll add.....meanwhile should i delete br-ex from controller? | 12:18 |
| numans_afk | arslanq, will be back in 10 min. | 12:18 |
| arslanq | ok | 12:18 |
| numans_afk | that's upto you | 12:18 |
| numans_afk | shouldn't matter according to me | 12:18 |
| *** janki has quit IRC | 12:19 | |
| arslanq | should i delete networks and recreate once migration is done? | 12:19 |
| *** salv-orlando has quit IRC | 12:21 | |
| *** fzdarsky has joined #openstack-neutron-ovn | 12:25 | |
| *** salv-orlando has joined #openstack-neutron-ovn | 12:25 | |
| *** numans_afk is now known as numans | 12:35 | |
| numans | arslanq, they should work even without deleting | 12:37 |
| *** gongysh has quit IRC | 12:37 | |
| arslanq | numans: ok moving forward | 12:39 |
| numans | great | 12:39 |
| arslanq | numans: no i meant more questions :P | 12:43 |
| numans | arslanq, sure | 12:43 |
| numans | i thought you are going to run the migration :) | 12:44 |
| arslanq | numans: https://pastebin.mozilla.org/8978519 | 12:46 |
| numans | arslanq, i didn't get the question. | 12:47 |
| numans | you mean the neutron services not running in compute nodes ? | 12:47 |
| arslanq | there is list of agents you are stopping on both nodes.....but on my setup i have only openvswitch-agent running on compute and rest of the agents are running on controller node....my question is will it fail or not? | 12:49 |
| arslanq | no it w | 12:52 |
| arslanq | numans: ok leave that i'll see it....could you please answer me this one neutron-metadata-agent | 12:54 |
| arslanq | sorry this one https://pastebin.mozilla.org/8978524 | 12:55 |
| numans | arslanq, it says ignore_errors to true, so its ok if the command fails. | 12:56 |
| numans | arslanq, this task reset the openflow version set on the br-int/br-ex. neutron ovs agent could have set a different OF flow version. so this command clears it | 12:56 |
| numans | so that ovn-controller can set the OF flow version it supports. | 12:56 |
| arslanq | it could be on br-int OR br-ex....makes sense | 12:57 |
| arslanq | numans: i got it thanks a lot.....i'll bother you if there is any issue during this migration | 12:58 |
| arslanq | thanks again | 12:58 |
| numans | sure. let me know how it goes | 12:58 |
| *** salv-orl_ has joined #openstack-neutron-ovn | 12:59 | |
| arslanq | numans: a quick question please, systemd module of ansible uses systemctl behind the scene...right? | 13:00 |
| numans | arslanq, i presume so. i am not familiar with ansible. may be you can refer the documentation on systemd module to be sure | 13:01 |
| arslanq | ok i'll do | 13:01 |
| *** salv-orlando has quit IRC | 13:02 | |
| arslanq | numans: No package openvswitch-ovn-host available, what did u do in your case? | 13:38 |
| numans | arslanq, :). it is expected to install the ovn packages and the playbook doesn't install them | 13:39 |
| numans | arslanq, what i suggest you is generate rpms, install them first and then run the playbook | 13:39 |
| arslanq | where did you get these packages ? | 13:40 |
| numans | arslanq, you can clone the ovs repo and run " make rpm-fedora RPMBUILD_OPT="--without check" | 13:41 |
| numans | arslanq, i dont think centos has ovs 2.6 and ovn packages yet. | 13:41 |
| arslanq | ok | 13:41 |
| numans | arslanq, on the controller node you can install openvswitch-ovn-common and openvswitch-ovn-central | 13:42 |
| numans | arslanq, on the compute node openvswitch-ovn-common and openvswitch-ovn-host | 13:42 |
| numans | arslanq, also please update the openvswitch package | 13:42 |
| numans | arslanq, if you want you can use branch 2.7 instead of master | 13:43 |
| numans | without latest openvswitch package it wouldn't work | 13:43 |
| *** fzdarsky has quit IRC | 13:43 | |
| arslanq | let me see...i'll inform you | 13:44 |
| arslanq | currently i have 2.5 version installed of openvswitch | 13:45 |
| *** fzdarsky has joined #openstack-neutron-ovn | 14:15 | |
| arslanq | numans: is this package required? openvswitch-kmod | 14:22 |
| numans | arslanq, which version of linux you are running ? | 14:30 |
| arslanq | centOS 7 | 14:30 |
| numans | arslanq, if its centos 7.3 with 3.10.514.... then its not required. else its required | 14:30 |
| numans | arslanq, or you can update to centos 7.3 | 14:31 |
| arslanq | i have kernel version 4.9 and centOS 7.3.1611 | 14:32 |
| arslanq | i think em good without kmod | 14:32 |
| arslanq | numans: the following command error outs | 14:48 |
| arslanq | ovs-vsctl set open . external_ids:ovn-encap-type=geneve | 14:48 |
| arslanq | ovs-vsctl: unix:/var/run/openvswitch/db.sock: database connection failed (No such file or directory) | 14:49 |
| arslanq | ovn-controller was not active....never mind | 14:51 |
| *** mlavalle has joined #openstack-neutron-ovn | 15:02 | |
| *** doonhammer has joined #openstack-neutron-ovn | 15:23 | |
| *** mickeys has joined #openstack-neutron-ovn | 15:36 | |
| *** mickeys has quit IRC | 15:42 | |
| arslanq | numans: you there? | 16:09 |
| numans | arslanq, yes | 16:09 |
| numans | tell me | 16:09 |
| arslanq | its all done, i did it manually. So, how do i make sure its working | 16:09 |
| numans | arslanq, that's great. | 16:11 |
| numans | you can create few networks, boot few vms and see if everything works fine | 16:11 |
| numans | arslanq, when you create some networks, ports, run "sudo ovn-nbctl show" in controller node | 16:11 |
| numans | and see if networking-ovn is creating the resources in NB db | 16:12 |
| arslanq | before that...the agents you are stopping playbook. are you expecting to come up these agents automatically? because i don't see them on any node | 16:12 |
| numans | arslanq, those agents aren't required for ovn | 16:12 |
| arslanq | ok fine | 16:12 |
| arslanq | and you told me that when i'll map bridge on compute....ovn-controller automatically create that bridge | 16:14 |
| arslanq | but it did not | 16:14 |
| arslanq | i hit this command: ovs-vsctl set open . external_ids:ovn-bridge-mappings=eth1:br-ex | 16:15 |
| arslanq | ovs-vsctl set Bridge br-int protocols=[] | 16:15 |
| *** armax has joined #openstack-neutron-ovn | 16:18 | |
| arslanq | numans: seems like metadata is not working....VM is taking more than usual time to show console | 16:26 |
| numans | arslanq, metadata is not yet supported in ovn. | 16:26 |
| arslanq | makes sense | 16:26 |
| numans | arslanq, you need to enable force_config_driver = true in nova.conf and restart nova-compute or while booting vms you can specify to use config drive | 16:27 |
| numans | arslanq, for bridge mappings, i think you need to create br-ex | 16:27 |
| arslanq | and what difference will it make? | 16:27 |
| numans | arslanq, if you want to push some meta data to your vm then you need to use config drive (for ovn) | 16:28 |
| arslanq | ok | 16:28 |
| numans | arslanq, for bridge mapping this is how it would work. you first set someting like ovs-vsctl set open . external_ids:ovn-bridge-mappings=datacentre:br-ex | 16:29 |
| numans | and then create a provider network like - | 16:30 |
| numans | arslanq, neutron net-create public --router:external --provider:network_type vlan --provider:physical_network datacentre --provider:segmentation_id 10 | 16:31 |
| numans | this is just an example | 16:31 |
| numans | notice the option "provider:physical_network" | 16:31 |
| numans | this should match with the "external_ids:ovn-bridge-mappings" | 16:31 |
| arslanq | yes i was going to ask what is datacenter?? eth1? | 16:32 |
| numans | arslanq, i guess its clear now | 16:32 |
| * numans signing off for now. | 16:33 | |
| arslanq | numans: ok. All set here on my side....i can create networks, and i can see them in database | 16:33 |
| numans | arslanq, hope it works fine for you :) | 16:33 |
| numans | arslanq, that's great | 16:33 |
| arslanq | numans: Thanks a lot | 16:33 |
| numans | you are welcome | 16:33 |
| arslanq | i can ping across computes | 16:33 |
| numans | that's cool. | 16:34 |
| arslanq | only external connectivity is remaning i'll make it happen on Monday......Thanks alot again | 16:34 |
| numans | wc | 16:34 |
| *** pcaruana has quit IRC | 16:53 | |
| arslanq | numans: when you get back, could you please tell me that why i cant ping across networks, whereas i can ping across computes within same network. | 16:58 |
| arslanq | numans: i started the l3 agent and it started working for me. | 17:12 |
| *** salv-orl_ has quit IRC | 18:12 | |
| *** fzdarsky is now known as fzdarsky|afk | 18:23 | |
| *** mickeys has joined #openstack-neutron-ovn | 18:41 | |
| *** ltomasbo is now known as ltomasbo|away | 18:56 | |
| *** s3wong has joined #openstack-neutron-ovn | 19:05 | |
| *** doonhammer has quit IRC | 20:13 | |
| *** doonhammer has joined #openstack-neutron-ovn | 20:24 | |
| *** zkassab has joined #openstack-neutron-ovn | 21:07 | |
| *** salv-orlando has joined #openstack-neutron-ovn | 21:45 | |
| *** fzdarsky|afk has quit IRC | 21:57 | |
| *** yamamoto has joined #openstack-neutron-ovn | 23:27 | |
| *** yamamoto has quit IRC | 23:31 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!