Thursday, 2015-04-16

*** nlahouti has quit IRC00:00
*** markvoelker_ has quit IRC00:02
*** johnbelamaric has quit IRC00:04
*** aranjan has quit IRC00:07
*** aranjan has joined #openstack-neutron00:07
*** yamahata has quit IRC00:10
*** achanda_ has joined #openstack-neutron00:11
*** xgerman_ has quit IRC00:12
*** aranjan has quit IRC00:14
*** yamamoto has quit IRC00:15
*** achanda_ has quit IRC00:16
*** achanda has quit IRC00:16
*** yeungp has quit IRC00:21
*** drjones has quit IRC00:21
*** _cjones_ has joined #openstack-neutron00:21
*** sthillma has quit IRC00:24
*** _cjones_ has quit IRC00:25
*** sthillma has joined #openstack-neutron00:25
*** signed8bit_ZZZzz has quit IRC00:25
*** britthouser has quit IRC00:32
*** daneyon has quit IRC00:33
*** daneyon has joined #openstack-neutron00:34
*** tomoe_ has quit IRC00:34
*** TrevorV has quit IRC00:35
*** ozialien has joined #openstack-neutron00:35
*** TrevorV has joined #openstack-neutron00:36
*** r-daneel has quit IRC00:37
*** dims_ has quit IRC00:40
*** watanabe_isao has joined #openstack-neutron00:42
openstackgerritArmando Migliaccio proposed openstack/neutron: Addressg TODO related to Security Groups RPC API's classes  https://review.openstack.org/17416800:43
openstackgerritArmando Migliaccio proposed openstack/neutron: Deal with TODO related to Security Groups RPC API's classes  https://review.openstack.org/17416800:43
watanabe_isaosalv-orl_: Good morinig sir.00:43
mestery_kevinbenton: Ack00:44
watanabe_isaosalv-orl_: There is a _ behind your name ... I will just state my question, please answer me if you see it and have time to answer it.00:45
*** GLaupre has joined #openstack-neutron00:47
watanabe_isaosalv-orl_: It is about bug/1443798, in comment #14. My English is not good enough to understand your sentence:"The resulting patch will still be very small.". Could you please explain it for me in another way?00:47
*** oda-g has joined #openstack-neutron00:48
watanabe_isao<(@.@)>00:48
GLaupreI want to make a prove of concept for project. Can some one help me understanding where is the limit of the minimum requirement for the ML2 plugin considering one mechanism driver? I want to use a NIC with possiblity of offloading some work considering the VLAN tag tagging for example?00:50
*** tsg_ has quit IRC00:56
*** aswadr has joined #openstack-neutron00:58
*** johnbelamaric has joined #openstack-neutron00:58
*** tiswanso has joined #openstack-neutron00:59
*** tiswanso has quit IRC01:01
*** tiswanso has joined #openstack-neutron01:01
*** johnbelamaric has quit IRC01:03
*** seizadi has joined #openstack-neutron01:05
*** marun_ has joined #openstack-neutron01:06
*** ozialien has quit IRC01:06
*** markvoelker has joined #openstack-neutron01:07
*** marun has quit IRC01:08
*** thomasem has quit IRC01:15
*** zacksh has quit IRC01:15
*** ivar-laz_ has joined #openstack-neutron01:15
*** banix has joined #openstack-neutron01:15
*** padkrish has quit IRC01:16
*** zacksh has joined #openstack-neutron01:16
*** shaohe_feng1 has quit IRC01:16
*** padkrish has joined #openstack-neutron01:16
*** baoli has joined #openstack-neutron01:17
*** julim has joined #openstack-neutron01:18
*** ivar-lazzaro has quit IRC01:19
*** ivar-laz_ has quit IRC01:19
*** padkrish has quit IRC01:20
openstackgerritArmando Migliaccio proposed openstack/neutron: Drop the ovs_lib compat layer as per TODO note  https://review.openstack.org/17417901:21
*** _markb1_ has quit IRC01:21
openstackgerritArmando Migliaccio proposed openstack/neutron: Drop the ovs_lib compat layer as per TODO note  https://review.openstack.org/17417901:21
*** baoli has quit IRC01:22
*** sridhar_ram has quit IRC01:25
*** crc32 has joined #openstack-neutron01:25
*** armax has quit IRC01:28
*** sbfox has quit IRC01:28
*** markvoelker has quit IRC01:30
openstackgerritMerged openstack/neutron: Stop running L3 functional tests with both OVSDB interfaces  https://review.openstack.org/16851301:32
*** _cjones_ has joined #openstack-neutron01:33
*** s3wong has quit IRC01:33
*** Tiancheng has joined #openstack-neutron01:35
*** fedexo has joined #openstack-neutron01:39
*** dims has joined #openstack-neutron01:40
*** dttocs_ has quit IRC01:40
*** SumitNaiksatam has quit IRC01:41
*** erkules_ has joined #openstack-neutron01:44
*** banix has quit IRC01:47
*** dims has quit IRC01:47
*** erkules has quit IRC01:47
*** stanzgy has joined #openstack-neutron01:50
*** gongysh has joined #openstack-neutron02:02
*** harlowja is now known as harlowja_away02:05
*** popw has joined #openstack-neutron02:07
*** strictlyb has quit IRC02:08
*** ujjain has quit IRC02:08
*** baoli has joined #openstack-neutron02:27
*** liusheng has joined #openstack-neutron02:33
*** _cjones_ has quit IRC02:33
*** stanzgy has quit IRC02:34
*** stanzgy has joined #openstack-neutron02:34
*** SumitNaiksatam has joined #openstack-neutron02:35
*** dannywilson has quit IRC02:36
*** tomoe_ has joined #openstack-neutron02:36
*** xgerman_ has joined #openstack-neutron02:40
*** tomoe_ has quit IRC02:41
*** xgerman_ has quit IRC02:42
*** crc32 has quit IRC02:43
*** aleksandr_null_ has quit IRC02:43
*** sthillma has quit IRC02:45
*** dims has joined #openstack-neutron02:48
*** aleksandr_null has joined #openstack-neutron02:48
*** strictlyb has joined #openstack-neutron02:50
*** banix has joined #openstack-neutron02:53
*** dims has quit IRC02:53
*** Longgeek has joined #openstack-neutron02:57
*** amuller has quit IRC02:58
*** padkrish has joined #openstack-neutron03:04
*** padkrish has quit IRC03:04
*** padkrish has joined #openstack-neutron03:05
*** marun_ has quit IRC03:07
*** padkrish has quit IRC03:08
*** seizadi has quit IRC03:11
*** britthouser has joined #openstack-neutron03:11
*** britthou_ has joined #openstack-neutron03:13
*** armax has joined #openstack-neutron03:15
*** britthouser has quit IRC03:16
*** shwetaap has joined #openstack-neutron03:22
*** baoli has quit IRC03:26
*** zhhuabj has quit IRC03:27
*** marun_ has joined #openstack-neutron03:31
*** watanabe_isao has quit IRC03:33
*** achanda has joined #openstack-neutron03:33
*** yamamoto has joined #openstack-neutron03:41
*** marun_ has quit IRC03:44
openstackgerritMerged openstack/neutron: IPv6 SLAAC subnet create should update ports on net  https://review.openstack.org/17209203:45
*** shi has quit IRC03:46
*** shi has joined #openstack-neutron03:46
*** Tiancheng has quit IRC03:47
*** Tiancheng has joined #openstack-neutron03:47
*** _kiran_ has joined #openstack-neutron03:47
*** Marga_ has joined #openstack-neutron03:49
*** Marga_ has quit IRC03:49
*** Marga_ has joined #openstack-neutron03:50
*** hareeshp has joined #openstack-neutron03:50
*** _kiran_ has quit IRC03:53
*** hareeshp has quit IRC03:55
*** strictlyb has quit IRC03:56
*** garyk has quit IRC03:58
*** _cjones_ has joined #openstack-neutron04:00
*** watanabe_isao has joined #openstack-neutron04:03
*** strictlyb has joined #openstack-neutron04:03
*** Longgeek_ has joined #openstack-neutron04:05
*** ayoung has joined #openstack-neutron04:05
*** Longgeek has quit IRC04:06
*** amotoki has joined #openstack-neutron04:07
*** dttocs has joined #openstack-neutron04:07
*** jbell8 has joined #openstack-neutron04:08
openstackgerritMerged openstack/neutron: Router is not unscheduled when the last port is deleted  https://review.openstack.org/15929604:10
*** jbell8 has quit IRC04:12
*** Guest16106 has quit IRC04:25
*** seizadi has joined #openstack-neutron04:28
*** garyk has joined #openstack-neutron04:28
*** achanda has quit IRC04:30
*** aranjan has joined #openstack-neutron04:30
*** seizadi has quit IRC04:32
*** Tiancheng has quit IRC04:33
*** fawadkhaliq has joined #openstack-neutron04:38
*** Murali has joined #openstack-neutron04:40
*** banix has quit IRC04:41
*** abregman has joined #openstack-neutron04:41
*** sthillma has joined #openstack-neutron04:42
*** frickler_ is now known as frickler04:43
*** _cjones_ has quit IRC04:43
*** yfried has quit IRC04:44
*** sthillma has quit IRC04:45
*** yatin has joined #openstack-neutron04:46
*** afazekas has quit IRC04:51
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: ovs_lib: Fix a race between get_port_tag_dict and port removal  https://review.openstack.org/17420304:56
*** tsg has joined #openstack-neutron05:00
*** achanda has joined #openstack-neutron05:00
*** fedexo has quit IRC05:04
*** yalie has joined #openstack-neutron05:06
*** hareeshp has joined #openstack-neutron05:06
*** nlahouti has joined #openstack-neutron05:07
*** Marga_ has quit IRC05:07
*** cshahani has joined #openstack-neutron05:08
*** fedexo has joined #openstack-neutron05:08
*** nlahouti has quit IRC05:09
*** nlahouti has joined #openstack-neutron05:09
*** hareeshp has quit IRC05:11
*** neeti has joined #openstack-neutron05:12
*** Murali has quit IRC05:15
*** tflynn has joined #openstack-neutron05:16
*** Kennan has quit IRC05:17
*** Kennan has joined #openstack-neutron05:17
*** tflynn has quit IRC05:22
*** yog__ has joined #openstack-neutron05:23
openstackgerritArmando Migliaccio proposed openstack/neutron: Sentinel patch to compare DVR single vs multi node CI stability  https://review.openstack.org/17400305:23
*** tflynn has joined #openstack-neutron05:23
openstackgerritNeo proposed openstack/neutron-vpnaas: Fix strongswan driver to support rhel  https://review.openstack.org/17420505:28
*** jschwarz has joined #openstack-neutron05:30
*** dave-mcc_ has quit IRC05:31
*** vthapar has joined #openstack-neutron05:33
*** tflynn_ has joined #openstack-neutron05:40
*** cshahani has quit IRC05:41
*** trinaths has joined #openstack-neutron05:41
*** tflynn has quit IRC05:43
*** yfried has joined #openstack-neutron05:44
*** dims has joined #openstack-neutron05:45
*** gongysh has quit IRC05:46
*** kiran_ has joined #openstack-neutron05:47
*** yatin has quit IRC05:48
*** kiran_ is now known as kiranr05:50
*** vishwanathj has joined #openstack-neutron05:50
*** dims has quit IRC05:50
*** kiranr is now known as kiran-r05:50
*** pal has joined #openstack-neutron05:52
*** vishwana_ has quit IRC05:54
*** yfried is now known as yfried|afk05:54
*** yfried|afk is now known as yfried05:54
*** akamyshnikova_ has joined #openstack-neutron06:02
*** itzikb has joined #openstack-neutron06:06
openstackgerritOpenStack Proposal Bot proposed openstack/neutron: Imported Translations from Transifex  https://review.openstack.org/17262806:13
*** lionelz has joined #openstack-neutron06:14
*** _cjones_ has joined #openstack-neutron06:21
*** aleksandr_null has quit IRC06:22
*** armax_ has joined #openstack-neutron06:22
*** hareeshp has joined #openstack-neutron06:22
*** aleksandr_null has joined #openstack-neutron06:22
*** armax has quit IRC06:23
*** armax_ is now known as armax06:23
*** oda-g has quit IRC06:23
*** apuimedo has joined #openstack-neutron06:24
*** hareeshp has quit IRC06:27
*** space-hunter has joined #openstack-neutron06:29
*** redbeard has joined #openstack-neutron06:30
openstackgerritMiguel Angel Ajo proposed openstack/neutron: Reduce prefix and suffix length in ipsets  https://review.openstack.org/17422006:34
*** Kennan2 has joined #openstack-neutron06:35
*** aranjan has quit IRC06:35
*** nmagnezi has joined #openstack-neutron06:36
*** Kennan has quit IRC06:36
ajoping kevinbenton , up ?06:36
ajohttps://review.openstack.org/#/c/173753/   I can update it if you want06:36
*** moshele has joined #openstack-neutron06:37
ajoto add my follow-up, and fix the unit tests from security groups rpc.06:37
*** armax has quit IRC06:38
openstackgerritShigeki Obuchi proposed openstack/python-neutronclient: Add REJECT rule on Neutron FWaaS  https://review.openstack.org/14842406:39
*** jckasper has quit IRC06:40
*** fedexo has quit IRC06:41
*** yatin has joined #openstack-neutron06:41
*** anilvenkata has joined #openstack-neutron06:42
*** ebagdasa1 has joined #openstack-neutron06:46
*** shwetaap has quit IRC06:46
*** ebagdasa has quit IRC06:46
*** fawadkhaliq has quit IRC06:48
openstackgerritNeo proposed openstack/neutron-vpnaas: Fix strongswan driver to support rhel  https://review.openstack.org/17420506:48
*** bobmel has joined #openstack-neutron06:49
*** saju_m has joined #openstack-neutron06:51
*** fawadkhaliq has joined #openstack-neutron06:52
*** fawadk has joined #openstack-neutron06:53
*** ebagdasa1 has quit IRC06:53
*** ebagdasa has joined #openstack-neutron06:53
*** jckasper has joined #openstack-neutron06:53
openstackgerritAman Kumar proposed openstack/neutron: br-tun lost ports/flows if openvswitch restart  https://review.openstack.org/15977506:54
*** zhhuabj has joined #openstack-neutron06:54
*** safchain has joined #openstack-neutron06:55
*** tsg_ has joined #openstack-neutron06:56
*** fawadk has quit IRC06:57
*** fawadkhaliq has quit IRC06:57
*** sgran_ is now known as sgran06:59
*** numan has joined #openstack-neutron06:59
*** tsg has quit IRC06:59
*** aranjan has joined #openstack-neutron07:00
*** zhhuabj has quit IRC07:00
*** irenab has joined #openstack-neutron07:00
*** achanda has quit IRC07:02
*** matrohon has joined #openstack-neutron07:02
*** Murali has joined #openstack-neutron07:04
*** dansmith has quit IRC07:04
*** achanda has joined #openstack-neutron07:04
*** scheuran has joined #openstack-neutron07:04
*** tflynn_ has quit IRC07:05
*** yfried is now known as yfried|afk07:05
*** anilvenkata has quit IRC07:05
*** SridharGaddam has quit IRC07:06
*** zhhuabj has joined #openstack-neutron07:06
*** neeti has quit IRC07:06
*** Tiancheng has joined #openstack-neutron07:07
*** dansmith has joined #openstack-neutron07:08
*** dansmith is now known as Guest6767207:08
*** kawa2014 has joined #openstack-neutron07:09
*** aranjan has quit IRC07:09
*** yfried|afk is now known as yfried07:09
*** zhhuabj has quit IRC07:11
*** _cjones_ has quit IRC07:13
*** Tiancheng has quit IRC07:14
*** moha_hunt has joined #openstack-neutron07:15
*** moha_hunt has quit IRC07:16
openstackgerritShigeki Obuchi proposed openstack/neutron-specs: Add REJECT into action rule of FWaaS.  https://review.openstack.org/14953507:17
openstackgerritwatanabe isao proposed openstack/neutron: Restrict subnet create/update to avoid DHCP resync  https://review.openstack.org/17422807:17
*** liusheng has quit IRC07:18
*** zhhuabj has joined #openstack-neutron07:18
*** oreillyd has joined #openstack-neutron07:23
*** tsg_ has quit IRC07:24
kevinbentonajo: ping07:24
*** achanda has quit IRC07:25
ajokevinbenton pong, I'll be back in 20m07:25
ajofeel free to leave me any homework07:25
*** luqas has joined #openstack-neutron07:25
ajoI need to run, brb07:25
*** nyechiel has joined #openstack-neutron07:26
*** yalie has left #openstack-neutron07:28
*** anilvenkata has joined #openstack-neutron07:28
*** SridharG1 has joined #openstack-neutron07:28
*** nlahouti has quit IRC07:34
openstackgerritKevin Benton proposed openstack/neutron: Set IPset hash type to 'net' instead of 'ip'  https://review.openstack.org/17375307:37
*** ronis has joined #openstack-neutron07:37
ajokevinbenton: back07:37
*** belmoreira has joined #openstack-neutron07:37
ajosorry, at this time of day I have to run and put kids to kindergarten07:38
openstackgerritMiguel Angel Ajo proposed openstack/neutron: Reduce prefix and suffix length in ipsets  https://review.openstack.org/17422007:39
*** jlanoux has joined #openstack-neutron07:39
ajoyes kevinbenton , I totally agree about the embedded iptables checks07:40
*** chlong has quit IRC07:40
kevinbentonajo: no problem07:43
kevinbentonajo: i don't think worrying about collisions is a big deal here :)07:43
*** jistr has joined #openstack-neutron07:43
ajokevinbenton, I did the numbers once for the original implementation, but we're cutting two more digits07:44
kevinbenton16^1707:44
kevinbentonwhoops07:44
kevinbenton17^1607:44
ajofor the current trim?07:44
ajowhy 17? :)07:44
ajoI'm the kind of guy how disables UUID comparison for ZFS deduplication... ;)07:45
ajohow->who07:45
*** hareeshp has joined #openstack-neutron07:45
*** hareeshp has quit IRC07:46
kevinbentonajo: here is a set NETIPv45d5e4955-d64c-40af-807:46
kevinbentonajo: 45d5e4955-d64c-40af-807:47
*** hareeshp has joined #openstack-neutron07:47
kevinbentonless the dashes07:47
ajothe dashes are included07:47
ajoahh07:47
ajosorry07:47
ajo:)07:47
*** devvesa has joined #openstack-neutron07:47
ajo4^1807:47
kevinbentonthat 4 shouldn't be on there07:47
ajo4^1707:47
kevinbentonwhere are you getting 4 though?07:48
ajoeach digit is 4 bits07:48
ajoas it's hex07:48
kevinbentonthey are hex chars, each can have a possible 16 values07:48
ajo...07:48
kevinbentonajo: ok, if you want to calculate it that way07:48
ajonah XDD07:48
ajoyou're right XD07:49
ajohmmm07:49
ajo16 possible values ^ 17 digits07:49
openstackgerritSlawek Kaplonski proposed openstack/neutron-specs: fwaas rules directions  https://review.openstack.org/17134007:49
ajothat's p= 3.3881317890172014e-21   vs p=7.62939453125e-23 with the follow up patch07:49
*** devvesa has quit IRC07:50
*** tomoe_ has joined #openstack-neutron07:50
*** tomoe_ has quit IRC07:50
kevinbentonyeah, or the way you were going is 4 bits * 17 slots to make 68 bits07:50
ajosince we're renaming the set's I'd do it for kilo, it's a gain forever ;), one less call from an customer in trouble...07:50
ajop's are calculated for only 2 ipsets :)07:51
*** hareeshp has quit IRC07:52
ajokevinbenton, I could be a bit nitpick, but I'd sleep better if p was 007:52
ajoeverywhere in neutron07:52
kevinbentonajo: that can't be the case, UUIDs aren't guarunteed to be unique :)07:53
ajokevinbenton, but don't we check at database insertion?07:54
ajoI guess that would fail, preventing any later hidden issues07:54
ajoI hope all uuid fields are set to be unique ;)07:54
ajootherwise... less sleep for me ;)07:55
ajoI never win a lottery, but it could be I never play ;)07:55
kevinbentonyou'd have a better chance of winning the lottery07:56
kevinbentonthan this colliding07:56
*** devvesa has joined #openstack-neutron07:57
kevinbentonwith interface names we only have 9 hex chars i believe07:57
kevinbentonif you want to lose sleep over something...07:58
*** fawadkhaliq has joined #openstack-neutron07:58
*** doude has quit IRC07:59
*** ihrachyshka has joined #openstack-neutron07:59
kevinbentonbirthday attack for this 68 bits would indicate that after 17 billion sets we would have a 50% chance of collision08:00
*** nyechiel_ has joined #openstack-neutron08:00
*** roeyc has joined #openstack-neutron08:00
*** jpena has joined #openstack-neutron08:00
ajokevinbenton you almost convincend me, but my patch will hurt? :)08:01
kevinbentonwell do you want it into Kilo as well?08:02
*** nyechiel has quit IRC08:02
*** fawadkhaliq has quit IRC08:03
ajokevinbenton, it's either in kilo, or I'd rather prefer no making more ipset naming changes across versions08:03
ajothat's my point08:03
ajomainly08:03
*** abregman1 has joined #openstack-neutron08:03
ajootherwise we'd be leaving ipset leftovers on every upgrade08:03
kevinbentonajo: well i want to merge Brian's patch and then my patch to handle clearing a set with different params08:04
*** tomoe_ has joined #openstack-neutron08:04
*** kawa2014 has quit IRC08:04
kevinbentonajo: and switch back to the old naming scheme in the process08:04
*** abregman has quit IRC08:04
ajokevinbenton, ahaaa08:04
ajook, if that's the plan, I like it08:05
*** abregman1 has quit IRC08:05
ajobut I guess, that's for L08:05
ajonot for K08:05
*** abregman has joined #openstack-neutron08:05
*** aranjan has joined #openstack-neutron08:05
kevinbentonajo: yeah, because the one i had was too scary this late08:06
ajoyep08:06
*** zhhuabj has quit IRC08:06
*** kawa2014 has joined #openstack-neutron08:06
ajoit's a good thing and will save some trouble in the future :)08:06
*** doude has joined #openstack-neutron08:06
*** abregman has quit IRC08:06
*** abregman has joined #openstack-neutron08:07
ajokevinbenton, about RBAC08:07
ajokevinbenton it came up in the last QoS "pre-meeting" of yesterday08:07
kevinbentonajo: yeah, amuller mentioned it to me earlier today08:07
ajoand we thought it could be interesting to redefine RBAC to be something a bit wider,08:07
ajoalso controlling access over QoS profiles to tenants08:08
kevinbentonajo: that's why it got rejected in the first place :)08:08
ajomay be it's also useful to other resources08:08
ajo:)08:08
ajoack08:08
*** Tiancheng has joined #openstack-neutron08:08
ajokevinbenton, so you were proposed to make it more generic?08:08
kevinbentonajo: but i am going to try to make it generic enough to extend to other resources easily08:08
*** ociuhandu has joined #openstack-neutron08:08
ajovery nice, we'll make good use of it08:08
*** ygbo has joined #openstack-neutron08:09
ajokevinbenton: I'll subscribe the spec, but feel free to ping me via IRC if there are updates08:09
kevinbentonajo: ack08:09
*** kawa2014 has quit IRC08:10
*** kawa2014 has joined #openstack-neutron08:10
*** numan has quit IRC08:12
*** gildub has quit IRC08:14
*** hareeshp has joined #openstack-neutron08:16
*** hareeshp has quit IRC08:18
salv-orl_ajo, kevinbenton: let's validate rbac on something which is already "a thing" - ie: the network08:18
salv-orl_and then we apply it to QoS. Otherwise you will just be adding a dependency to the QoS work08:19
ajosalv-orl_, ack, makes sense08:19
*** aranjan has quit IRC08:19
ajosalv-orl_, we can do it for "M" and have a basic QoS for "L"08:19
* ajo feels lucky ;)08:19
*** hichihara has quit IRC08:20
* ajo means... he's feeling positive about getting a QoS merged for "M"08:20
ajo...08:21
ajoKL08:21
* ajo self destroys 08:21
* ajo means... he's feeling positive about getting a QoS merged for "L"08:21
ajoXDD08:21
*** fawadkhaliq has joined #openstack-neutron08:24
*** pal has quit IRC08:27
*** moha_hunt has joined #openstack-neutron08:32
*** obondarev_ has quit IRC08:33
*** dtynan has quit IRC08:36
*** obondarev has joined #openstack-neutron08:37
openstackgerritwatanabe isao proposed openstack/neutron: Restrict subnet create/update to avoid DHCP resync  https://review.openstack.org/17422808:37
*** Vishal_ has joined #openstack-neutron08:38
*** watanabe_isao has quit IRC08:38
*** yfried_ has joined #openstack-neutron08:39
*** jlibosva has joined #openstack-neutron08:40
*** mestery has joined #openstack-neutron08:40
*** yfried has quit IRC08:41
*** obondarev has quit IRC08:43
*** mestery_ has quit IRC08:43
*** Vishal__ has joined #openstack-neutron08:43
*** vthapar has quit IRC08:44
*** Vishal_ has quit IRC08:46
*** pal has joined #openstack-neutron08:47
*** nyechiel_ has quit IRC08:49
*** garyk has quit IRC08:51
*** dtynan has joined #openstack-neutron08:51
*** nyechiel_ has joined #openstack-neutron08:51
*** garyk has joined #openstack-neutron08:52
*** jyuso1 has joined #openstack-neutron08:53
*** numan has joined #openstack-neutron08:55
*** vthapar has joined #openstack-neutron08:55
*** ilyashakhat has quit IRC08:55
*** skraynev has quit IRC08:55
*** eezhova has quit IRC08:55
*** kkuznetsova has quit IRC08:56
*** akamyshnikova has quit IRC08:56
*** enikanorov has quit IRC08:56
*** tomoe_ has quit IRC08:56
ajokevinbenton: 1-e^-(400000000000000000000/(2*2^(68))) = 0.492109:00
ajoyou meed more than 17billion for p=0.5 if I calculated wrong09:00
ajoif I calculated right...09:01
ajoit seems I'm not writing anything right today :)09:01
ajokevinbenton: 1-e^-(1670000000000000000000000/(2*2^(68+3*4))) with 3 more digits09:04
ajowe just make it still more improbable ...09:04
ajoanyway, I agree both chances are remote09:05
salv-orl_ajo: and that would be 17 billion ipsets for 50% chance of conflicts09:06
ajosalv-orl_, yes, but that's with my follow up patch :)09:06
salv-orl_ajo: as without? it like 1 billion?09:06
ajo.    400000000000000000000  without09:07
ajo 1670000000000000000000000 with09:07
ajoahh.. damn alignment :)09:08
ajomy font is not fixed size09:08
salv-orl_wow 400 more. great. but what's the number of ipsets for a realistic probability of user distruption? for instance 0.1%?09:08
salv-orl_ajo: come on. do your coming out.09:08
salv-orl_you are using comic sans, aren't you?09:09
ajo:-)09:09
ajoyeah, those calculations are for a 50% chance of collision based on the sg_id09:09
*** pask81 has joined #openstack-neutron09:09
ajowhat do you mean exactly with 0.1% ?09:09
*** tomoe_ has joined #openstack-neutron09:10
ajosalv-orl_ ^09:10
*** jaypipes has quit IRC09:10
ajowith that amount of security groups the database is long dead before...09:10
salv-orl_ajo: preamble. this is just coffee-cup chat. Indeed I don't believe it has a huge relevance for the stability of the software09:10
salv-orl_however 50% means things are tottaly screwed up09:10
*** yfried__ has joined #openstack-neutron09:10
salv-orl_so the number of tolerable ipsets for getting a conflict should be found for a small probability of conflict09:11
ajolet me calc, 1 sec09:11
salv-orl_0.1% for instance means one customer having a clash out of 1,00009:11
salv-orl_and for most openstack companies 1,000 customers is a wild dream ;)))))09:11
salv-orl_oh sorry this is open source. we don't say customers, but users09:11
*** ilyashakhat has joined #openstack-neutron09:12
*** eezhova has joined #openstack-neutron09:12
*** akamyshnikova has joined #openstack-neutron09:12
*** skraynev has joined #openstack-neutron09:12
ajosalv-orl_, :) customers, users... aren't they the same? :) they can come an fill a bug09:13
*** yfried__ is now known as yfried|afk09:13
*** kkuznetsova has joined #openstack-neutron09:13
openstackgerritJohn Schwarz proposed openstack/neutron: Add callback prior to deleting a subnet  https://review.openstack.org/17426809:13
*** rm_work is now known as rm_work|away09:13
*** abregman1 has joined #openstack-neutron09:13
ajoso, for a 0.1% : http://www.wolframalpha.com/input/?i=0.001%3D1-e%5E-%28x%2F%282*2%5E%2868%2B3*4%29%29%2909:14
ajoand http://www.wolframalpha.com/input/?i=0.001%3D1-e%5E-%28x%2F%282*2%5E%2868%29%29%2909:14
*** yfried_ has quit IRC09:14
*** ujjain has joined #openstack-neutron09:14
enikanorov_salv-orl_: why are you so short today? where's ando?09:14
ajo590591155176472576 vs09:14
salv-orl_wolphramalpha? I still have the casio calculator I used in high school on my desk09:14
openstackgerritAnkit Agrawal proposed openstack/neutron: Remove use of contextlib.nested  https://review.openstack.org/16767709:15
salv-orl_ando is off today09:15
ajo241906137160283167129609:15
*** abregman has quit IRC09:15
ajosalv-orl_, I have a TI-89, but it's out of batteries :)09:15
*** aranjan has joined #openstack-neutron09:15
ajook09:15
ajotoo many security groups in any case09:15
enikanorov_anyway, salv-orl_ maybe you know, why we don't have a dependency in requirements.txt for python ovs bindings?09:16
enikanorov_needed for direct access to ovsdb09:16
ajo590591155176472576 / 1000 = 590591155176472 security groups per "user" to get a 0.1% chance of collision09:16
*** pask81 has quit IRC09:16
salv-orl_ok ajo... do you agree we're having a bit of a pointless discussion then ?09:17
ajoconsidering good RNGs, of course :)09:17
ajosalv-orl_, yes, I agree :)09:17
ajosalv-orl_, thanks for pushing me a bit into perspective09:17
*** ujjain has quit IRC09:19
*** ujjain has joined #openstack-neutron09:19
*** dims has joined #openstack-neutron09:19
*** pask81 has joined #openstack-neutron09:19
*** aranjan has quit IRC09:20
*** obondarev has joined #openstack-neutron09:22
ajoenikanorov_ which dependency is missing?09:23
*** yamamoto has quit IRC09:23
*** dims has quit IRC09:24
salv-orl_ajo: still, it's not like I would reject your patch... it's just that makes an unlikely threat even more unlikely09:27
ajoof course salv-orl_ , It makes the chances more unlikely, but not impossible09:27
enikanorov_ajo: from ovs.db import idl09:27
enikanorov_ovs.db09:27
ajoenikanorov_, I will ask terry wilson later, may be he always had it installed into his system?,09:28
ajoenikanorov_: I believe I tried ovs.db direct connection once, and I don't remember installing any dependency manually09:28
*** lukasa_work has joined #openstack-neutron09:29
*** tomoe_ has quit IRC09:30
*** five is now known as stanzgy_09:30
*** lukasa has quit IRC09:32
*** irenab has quit IRC09:36
*** aswadr has quit IRC09:36
*** yfried|afk is now known as yfried__09:37
gsagieeinkanorov : there is no dependency because there is no pip package for it yet, it has to be installed otherwise09:37
gsagieeinkanorov: Terry wilson is working on that already in the OVS upstream09:38
gsagieThere is a patch to the gate to install it for the tests, i can send you the location if you need09:38
gsagieenikanorov_ , ajo : ^^09:38
*** roeyc has quit IRC09:38
ajoahhh, ok :)09:39
ajogsagie thanks for clarification09:39
enikanorov_gsagie: good to know09:39
enikanorov_gsagie: i've seen the code on github09:39
*** txomon|fon has quit IRC09:44
*** aix has joined #openstack-neutron09:44
*** ishant has joined #openstack-neutron09:45
*** sudipto has joined #openstack-neutron09:46
*** yfried__ is now known as yfried|afk09:47
*** afazekas has joined #openstack-neutron09:47
*** yamamoto has joined #openstack-neutron09:49
openstackgerritGal Sagie proposed openstack/neutron: OVS_LIB API addition - change bridge controller connection-mode  https://review.openstack.org/16791309:50
*** obondarev has quit IRC09:50
*** vthapar has quit IRC09:50
*** Marga_ has joined #openstack-neutron09:55
*** txomon|fon has joined #openstack-neutron09:56
*** Vishal__ has quit IRC09:58
*** obondarev has joined #openstack-neutron09:59
*** yfried|afk is now known as yfried__09:59
*** jckasper has quit IRC10:01
*** moha_hunt has quit IRC10:03
*** hareeshp has joined #openstack-neutron10:05
*** numan has quit IRC10:05
*** hareeshpc has joined #openstack-neutron10:06
*** dims has joined #openstack-neutron10:07
*** irenab has joined #openstack-neutron10:07
*** hareeshpc has quit IRC10:07
*** hareeshpc has joined #openstack-neutron10:08
*** hareeshp has quit IRC10:09
*** txomon|fon has quit IRC10:12
*** jckasper has joined #openstack-neutron10:13
*** yfried__ is now known as yfried|afk10:15
*** irenab has quit IRC10:15
*** aranjan has joined #openstack-neutron10:16
*** abregman1 has quit IRC10:17
*** yamamoto has quit IRC10:19
*** yuanying has quit IRC10:20
*** yuanying has joined #openstack-neutron10:21
*** aranjan has quit IRC10:21
*** pask81 has quit IRC10:23
*** numan has joined #openstack-neutron10:25
*** txomon|fon has joined #openstack-neutron10:26
*** pask81 has joined #openstack-neutron10:27
openstackgerritMerged openstack/neutron: Imported Translations from Transifex  https://review.openstack.org/17262810:27
*** luqas has quit IRC10:28
openstackgerritNeo proposed openstack/neutron-vpnaas: Fix strongswan driver to support rhel  https://review.openstack.org/17420510:29
*** abregman has joined #openstack-neutron10:31
*** ajo_ has joined #openstack-neutron10:31
*** luqas has joined #openstack-neutron10:32
*** yuanying has quit IRC10:32
*** hareeshpc has quit IRC10:32
*** ajo has quit IRC10:32
*** hareeshp has joined #openstack-neutron10:33
*** luqas has quit IRC10:33
*** luqas has joined #openstack-neutron10:34
*** hareeshpc has joined #openstack-neutron10:37
openstackgerritNeo proposed openstack/neutron-vpnaas: Fix strongswan driver to support rhel  https://review.openstack.org/17420510:38
*** hareeshp has quit IRC10:38
*** yfried|afk is now known as yfried__10:39
*** pask81 has quit IRC10:39
*** popw has quit IRC10:40
*** irenab has joined #openstack-neutron10:42
gsagieHello all, any common code to start a class task after X seconds?10:43
*** space-hunter has quit IRC10:44
*** fawadkhaliq has quit IRC10:46
*** roeyc has joined #openstack-neutron10:46
*** irenab has quit IRC10:48
*** yamamoto has joined #openstack-neutron10:50
*** stanzgy has quit IRC10:51
*** pc_m has joined #openstack-neutron10:52
*** irenab has joined #openstack-neutron10:52
*** beagles has quit IRC10:53
*** irenab has quit IRC10:54
*** irenab has joined #openstack-neutron10:55
openstackgerritvenkata anil proposed openstack/neutron-vpnaas: [VPNaas] NSS init failing for libreswan  https://review.openstack.org/17429910:55
*** yamamoto has quit IRC10:56
*** lionelz has quit IRC10:57
openstackgerritvenkata anil proposed openstack/neutron-vpnaas: NSS init failing for libreswan  https://review.openstack.org/17429910:57
*** Marga_ has quit IRC10:59
*** yamamoto has joined #openstack-neutron11:01
*** yamamoto has quit IRC11:03
openstackgerritGal Sagie proposed openstack/neutron: OVS_LIB API addition - change bridge controller connection-mode  https://review.openstack.org/16791311:04
*** Tiancheng has quit IRC11:06
*** yamamoto has joined #openstack-neutron11:12
openstackgerritLi Ma proposed openstack/neutron-specs: Implement external physical bridge mapping in linuxbridge  https://review.openstack.org/17368311:13
*** amotoki_ has joined #openstack-neutron11:15
*** aranjan has joined #openstack-neutron11:17
*** aix has quit IRC11:17
openstackgerritJohn Davidge proposed openstack/neutron: Implement Neutron IPv6 Prefix Delegation  https://review.openstack.org/15869711:17
*** gildub has joined #openstack-neutron11:18
*** claudiub has joined #openstack-neutron11:20
*** gongysh has joined #openstack-neutron11:22
*** aranjan has quit IRC11:23
*** enikanorov has joined #openstack-neutron11:26
*** nyechiel__ has joined #openstack-neutron11:27
*** jpena is now known as jpena|lunch11:27
*** cbouch has joined #openstack-neutron11:29
*** nyechiel_ has quit IRC11:30
*** space-hunter has joined #openstack-neutron11:37
*** pal has quit IRC11:38
*** sbalukoff1 has quit IRC11:40
*** sbalukoff1 has joined #openstack-neutron11:40
*** ggnel has joined #openstack-neutron11:41
*** aix has joined #openstack-neutron11:45
*** fawadkhaliq has joined #openstack-neutron11:47
*** jamielennox is now known as jamielennox|away11:47
*** gongysh has quit IRC11:51
*** fawadkhaliq has quit IRC11:52
*** shi has quit IRC11:53
*** ujjain has quit IRC11:53
*** shi has joined #openstack-neutron11:54
*** ujjain- has joined #openstack-neutron11:54
*** nlahouti has joined #openstack-neutron11:55
*** ujjain- has quit IRC11:55
*** ujjain- has joined #openstack-neutron11:55
ajo_sc68cal: do you know if the blueprint can be renamed: https://blueprints.launchpad.net/neutron/+spec/quantum-qos-api11:56
*** ishant has quit IRC11:56
ajo_it's a bit rusty11:56
ajo_(quantum-) ;)11:56
*** ajo_ is now known as ajo11:56
ihrachyshkaajo, owner definitely can do it11:57
ajo:-) thank ihrachyshka I was unsure11:58
ihrachyshkaajo, you click Change details, and then edit name11:59
ajook, but only the owner, right?,11:59
ajowe need to wait for sc68cal then11:59
ajo:)11:59
ihrachyshkaI guess yes, owner/assigner (?)12:00
ihrachyshkaI mean, either author or assignee12:00
*** tiswanso has quit IRC12:00
*** lionelz has joined #openstack-neutron12:01
*** ujjain- is now known as ujjain12:01
*** trinaths has quit IRC12:05
*** Marga_ has joined #openstack-neutron12:06
*** luqas has quit IRC12:07
*** prad has quit IRC12:10
*** atuvenie has joined #openstack-neutron12:10
*** atuvenie_ has joined #openstack-neutron12:10
*** atuvenie_ has quit IRC12:11
*** jckasper has quit IRC12:12
*** space-hunter has quit IRC12:13
*** dims has quit IRC12:14
*** dims__ has joined #openstack-neutron12:17
*** zhenguo has quit IRC12:17
*** beagles has joined #openstack-neutron12:17
openstackgerritJohn Davidge proposed openstack/neutron: Implement Neutron IPv6 Prefix Delegation  https://review.openstack.org/15869712:17
openstackgerritJohn Davidge proposed openstack/neutron: Implement Neutron IPv6 Prefix Delegation  https://review.openstack.org/15869712:19
*** aranjan has joined #openstack-neutron12:19
*** jpena|lunch is now known as jpena12:20
*** yamamoto has quit IRC12:20
*** yfried__ is now known as yfried|afk12:21
ihrachyshkasalv-orl_, hey. a question on policy. in get_admin_roles(), we extract admin roles in _extract_roles, and in case it finds a check that has .rules attribute, it returns all of those roles as if all of them are necessarily enough to become admin. I think it's written assuming it's for OrCheck, but AndCheck would require BOTH roles to be present to get admin permissions, so returning those roles as if each of them provides a12:22
ihrachyshkadmin perms seems wrong to me. the code in question is: http://git.openstack.org/cgit/openstack/neutron/tree/neutron/policy.py#n46412:22
*** julim has quit IRC12:22
ihrachyshkacomments?12:23
*** john-davidge has joined #openstack-neutron12:23
*** phil_h has quit IRC12:24
*** zhhuabj has joined #openstack-neutron12:25
*** aranjan has quit IRC12:25
*** hareeshpc has quit IRC12:26
*** hareeshp has joined #openstack-neutron12:26
*** nyechiel has joined #openstack-neutron12:26
salv-orl_ihrachyshka: yes, that code was written under the assumption the context_is_admin rules will not have an and clause among roles12:26
salv-orl_supporting that seems not trivial considering that get_admin_roles just returns a list of unqualified roles12:28
*** amuller has joined #openstack-neutron12:28
*** nyechiel__ has quit IRC12:29
ihrachyshkasalv-orl_, btw what's the actual intent of putting roles inside context? is it used by some external resources? like controllers? (I saw something similar in opencontrail plugin code)12:30
ihrachyshkathere is a NOTE in get_admin_roles from you that suggests its some temporary thing12:31
*** raildo has joined #openstack-neutron12:32
*** pal has joined #openstack-neutron12:32
*** gildub has quit IRC12:33
*** yfried|afk is now known as yfried__12:37
openstackgerritPaul Michali proposed openstack/neutron-vpnaas: VPNaaS: Revise functional test hooks  https://review.openstack.org/16811512:41
*** tiswanso has joined #openstack-neutron12:43
*** baoli has joined #openstack-neutron12:44
*** julim has joined #openstack-neutron12:47
openstackgerritJohn Schwarz proposed openstack/neutron: Add callback prior to deleting a subnet  https://review.openstack.org/17426812:47
openstackgerritPaul Michali proposed openstack/neutron-vpnaas: VPNaaS: Refactor functional tests to use discover  https://review.openstack.org/17214212:48
*** Marga_ has quit IRC12:51
openstackgerritNikolay Fedotov proposed openstack/neutron: Two api tests for 'firewall insertion mode' feature  https://review.openstack.org/16585912:51
*** cbouch has quit IRC12:52
*** rpothier has joined #openstack-neutron12:53
salv-orl_ihrachyshka: nope. It's for a relatively remote use case when one defines roles different from "admin" for doing admin-level ops12:53
salv-orl_I had once somebody complaining they had their admin called "opsadmin" or whatever because they were integrating with a corporate ldap12:54
salv-orl_the role names came from the corporate ldap and neutron had to reflect those names12:54
ihrachyshkasalv-orl_, ok, but what does it buy us when we send the role name in context?12:55
*** dboik has joined #openstack-neutron12:55
*** rkukura has quit IRC12:57
*** cference_ has joined #openstack-neutron12:57
*** Marga_ has joined #openstack-neutron12:58
*** baoli has quit IRC13:01
*** baoli has joined #openstack-neutron13:02
*** kbringard has joined #openstack-neutron13:03
*** annegentle has joined #openstack-neutron13:04
*** yapeng has joined #openstack-neutron13:06
*** luqas has joined #openstack-neutron13:08
*** fawadkhaliq has joined #openstack-neutron13:10
openstackgerritShaoRan Xiao proposed openstack/neutron: [WIP]Definition of the Virtual Network Performance interface  https://review.openstack.org/16481413:10
*** yapeng_ has joined #openstack-neutron13:12
*** luqas has quit IRC13:13
openstackgerritMerged openstack/neutron: Provide details for configure multiple DHCP agents  https://review.openstack.org/17280613:13
*** johnbelamaric has joined #openstack-neutron13:13
haleybajo: since kevin's initial ipset NET name change didn't merge, should you just fold your new change into that?13:14
*** yapeng has quit IRC13:14
*** tiswanso has quit IRC13:14
ajohaleyb, that was my suggestion,13:15
salv-orl_ihrachyshka: those role names are then used for subsequent policy checks. Now, is your next question why would we do that if the roles are supposed to be provided from the keystone middleware?13:15
ajohaleyb, we did a few number calculations I posted into my patch, one way or another the chances are almost impossible for collision13:15
*** Marga_ has quit IRC13:15
*** criptoverso has joined #openstack-neutron13:16
ajoyet, my follow up patch makes it yet less possible... I didn't want to delay kevinbenton's patch .. ;)13:16
ihrachyshkasalv-orl_, YEAH! :)13:17
haleybajo: ok.  i had thought about that naming issue, really just figured something almost just as short (Ntnv4) was close13:17
*** jckasper has joined #openstack-neutron13:17
ajoNtnv4 ?13:17
haleyb"neutron v4"13:17
haleybi.e. something to identify it as being added by neutron, like all those iptables chains/rules13:18
*** ferest has joined #openstack-neutron13:18
ajoah, like the "q" prefix for namespaces :)13:19
ajoeven N4 / N6 if we shorten the "ip version" ethertype13:20
haleybRight, and N is even better13:20
*** Longgeek_ has quit IRC13:20
haleybi was going to write a cleanup module too to deal with the left-over sets if there are any, but I haven't finished reading scrollback to see if that's necessary13:21
*** ferest has quit IRC13:22
ajohmm, haleyb , having a cleanup tool is a good idea :)13:22
*** aranjan has joined #openstack-neutron13:22
salv-orl_ihrachyshka: and the answer is that there a few mixins doing db ops at startup.13:22
salv-orl_those db ops are not initiated by an API request and come on at a time where the policy engine might not be initialized at all.13:23
haleybajo: so will the new naming stay at N* ?  old at IPv* ?13:23
ajoyes :=13:24
ajo:-)13:24
salv-orl_ihrachyshka: but I believe we are now at a stage where the role scan can be removed.13:24
*** yatin has quit IRC13:24
ihrachyshkasalv-orl_, that would be great, since it would reduce one of the places where we could need oslo.policy to expose RuleCheck, RoleCheck etc.13:24
ihrachyshkasomething oslo team is not willing to do13:25
ihrachyshkathough I need to understand a bit more about those mixins. any references to mixins that are (were?) affected?13:25
salv-orl_the lbaas one was the problematic one13:26
*** aranjan has quit IRC13:26
salv-orl_but that specific one is changing a lot, this is why we might not need that anymore.13:27
ihrachyshkasalv-orl_, ok, thanks, I will take a look. ++ for answers.13:27
*** jckasper has quit IRC13:28
*** yamamoto has joined #openstack-neutron13:28
*** bobmel_ has joined #openstack-neutron13:28
*** jamie_h has joined #openstack-neutron13:29
*** zhipeng has joined #openstack-neutron13:29
*** julien_ZTE has joined #openstack-neutron13:29
*** markvoelker has joined #openstack-neutron13:30
mesteryHenryG_: I proposed dane's IPv6 fix back to stable/kilo, nice work on getting that one resolved! https://review.openstack.org/#/c/174373/13:30
openstackgerritAnn Kamyshnikova proposed openstack/neutron: Add some more comments to models/frozen.py  https://review.openstack.org/17437913:31
*** bobmel has quit IRC13:31
*** luqas has joined #openstack-neutron13:32
*** hareeshp has quit IRC13:32
*** jckasper has joined #openstack-neutron13:34
*** hareeshp has joined #openstack-neutron13:35
*** jckasper has quit IRC13:36
*** Guest67672 is now known as dansmith13:36
*** jckasper has joined #openstack-neutron13:37
*** dansmith is now known as Guest1445313:37
*** dttocs has quit IRC13:38
*** prad has joined #openstack-neutron13:40
*** johnbelamaric has quit IRC13:40
*** signed8bit has joined #openstack-neutron13:40
*** mwagner_lap has quit IRC13:40
*** irenab has quit IRC13:40
*** jckasper_ has joined #openstack-neutron13:42
*** johnbelamaric has joined #openstack-neutron13:42
*** rushil has joined #openstack-neutron13:42
*** Guest14453 is now known as dansmith_13:43
*** jckasper has quit IRC13:43
*** irenab has joined #openstack-neutron13:45
*** annegentle has quit IRC13:48
*** johnbelamaric has quit IRC13:48
*** Sukhdev has joined #openstack-neutron13:52
*** leenheer has joined #openstack-neutron13:52
*** fawadkhaliq has quit IRC13:52
*** yfauser has joined #openstack-neutron13:52
*** leenheer has quit IRC13:52
*** shwetaap has joined #openstack-neutron13:53
*** tiswanso has joined #openstack-neutron13:53
*** yapeng has joined #openstack-neutron13:54
*** xgerman has joined #openstack-neutron13:54
*** yfauser has left #openstack-neutron13:55
*** signed8bit has quit IRC13:56
*** shwetaap has quit IRC13:56
*** jgrimm is now known as zz_jgrimm13:56
*** zzzeek has joined #openstack-neutron13:56
*** yapeng_ has quit IRC13:57
*** dave-mccowan has joined #openstack-neutron13:58
*** dansmith_ is now known as dansmith13:58
*** itzikb has quit IRC14:01
*** zhenguo has joined #openstack-neutron14:01
*** saju_m has quit IRC14:02
*** fawadkhaliq has joined #openstack-neutron14:04
*** yamamoto has quit IRC14:04
*** ferest has joined #openstack-neutron14:05
*** Sukhdev has quit IRC14:06
*** thomasem has joined #openstack-neutron14:08
*** ayoung has quit IRC14:09
*** ferest has quit IRC14:10
*** shaohe_feng has joined #openstack-neutron14:10
openstackgerritMerged openstack/neutron: Increase max attempts to 2 for pings on ARP tests  https://review.openstack.org/17415414:10
*** a_le has joined #openstack-neutron14:11
dguerrihello there. Quick question :) I am trying to configure a vrrp instance with openstack vms. I managed to get "allowed_address_pairs" working so, internally, I can ping the virtual IP I have configured. How can I associate that IP to a floating IP?14:11
*** HenryG_ is now known as HenryG14:11
*** dboik has quit IRC14:12
*** dboik has joined #openstack-neutron14:13
*** a_le has quit IRC14:15
*** nlahouti has quit IRC14:15
*** yfried__ is now known as yfried|afk14:15
*** yfried|afk is now known as yfried__14:15
*** mwagner_lap has joined #openstack-neutron14:16
*** markvoelker_ has joined #openstack-neutron14:16
*** yog__ has quit IRC14:17
*** annegentle has joined #openstack-neutron14:18
*** markvoelker has quit IRC14:19
*** thomasem has quit IRC14:21
*** thomasem has joined #openstack-neutron14:21
*** emagana has joined #openstack-neutron14:21
*** nlahouti has joined #openstack-neutron14:23
*** aranjan has joined #openstack-neutron14:23
*** markvoelker has joined #openstack-neutron14:23
*** ferest has joined #openstack-neutron14:25
*** markvoelker_ has quit IRC14:26
*** kiran-r has quit IRC14:27
*** nlahouti has quit IRC14:28
openstackgerritNeo proposed openstack/neutron-vpnaas: Fix strongswan driver to support rhel  https://review.openstack.org/17420514:28
*** aranjan has quit IRC14:29
*** afaranha has joined #openstack-neutron14:29
*** zhhuabj has quit IRC14:29
openstackgerritJohn Schwarz proposed openstack/neutron: Add callback prior to deleting a subnet  https://review.openstack.org/17426814:30
*** yapeng has quit IRC14:32
openstackgerritPaul Michali proposed openstack/neutron-vpnaas: VPNaaS: Revise functional test hooks  https://review.openstack.org/16811514:33
*** markvoelker has quit IRC14:34
*** hareeshp has quit IRC14:34
pc_m  mestery: hi14:34
mesterypc_m: good morning14:34
pc_mmestery: Can you review https://review.openstack.org/#/c/169008/5? I think it is good to go.14:34
*** abregman has quit IRC14:35
*** abregman1 has joined #openstack-neutron14:35
*** banix has joined #openstack-neutron14:35
*** carl_baldwin has joined #openstack-neutron14:35
pc_mmestery: Also, I did a (trivial) FW commit that missed Kilo. Could use a review to get that one out of the way. https://review.openstack.org/#/c/171637/14:35
mesterypc_m: Will look14:35
pc_mmestery: Thanks you.14:36
*** britthou_ has quit IRC14:37
*** abregman1 has quit IRC14:37
*** abregman has joined #openstack-neutron14:37
pc_mmestery: There are a bunch of VPN bugs in LP. I've looked at a few so far, but there are a pile. They need to be prioritized as well.14:38
pc_mmestery: Advice?14:38
mesterypc_m: Can you see what you think and email me a summary and I'll provide guidance that way?14:38
pc_mmestery: I can try, but there are like 30 of them...14:39
*** jaypipes has joined #openstack-neutron14:39
*** seizadi has joined #openstack-neutron14:40
mesterypc_m: Wow! Do your best, make a high level pass and I'll sync with you14:40
pc_mmestery: OK.14:40
pc_mmestery: Some have been around for a while, some not vetted, some duplicates. I can set status, but not priority (and have no idea on some of these).14:42
*** jbell8 has joined #openstack-neutron14:42
*** garyk has quit IRC14:43
*** zhhuabj has joined #openstack-neutron14:43
*** tsg_ has joined #openstack-neutron14:44
*** nmagnezi has quit IRC14:46
mesterypc_m: Thanks for covering these14:47
*** pavel_bondar has joined #openstack-neutron14:47
pc_mmestery: np.14:47
*** akamyshnikova_ has quit IRC14:48
*** hareeshp has joined #openstack-neutron14:49
*** hareeshp has quit IRC14:49
*** hareeshp has joined #openstack-neutron14:49
*** akamyshnikova has quit IRC14:50
*** smccully has joined #openstack-neutron14:50
*** subscope has quit IRC14:50
*** atuvenie has quit IRC14:51
*** zz_jgrimm is now known as jgrimm14:51
*** jobewan has joined #openstack-neutron14:51
openstackgerritCarl Baldwin proposed openstack/neutron: Remove hack for sending gratuitous arp from fip ns  https://review.openstack.org/17412914:52
*** mlavalle has joined #openstack-neutron14:53
*** dttocs has joined #openstack-neutron14:55
*** pal has quit IRC14:56
openstackgerritNikolay Fedotov proposed openstack/neutron-vpnaas: Scenario test for vpnaas: ipsec-site-connection  https://review.openstack.org/15974614:56
*** chem has quit IRC14:57
*** phil_h has joined #openstack-neutron14:57
*** TrevorV_ has joined #openstack-neutron14:58
*** chem has joined #openstack-neutron14:58
*** anilvenkata has quit IRC14:58
*** Marga_ has joined #openstack-neutron14:59
openstackgerritPaul Michali proposed openstack/neutron-vpnaas: VPNaaS: Refactor functional tests to use discover  https://review.openstack.org/17214215:00
*** banix has quit IRC15:00
*** jobewan has quit IRC15:00
*** johnbelamaric has joined #openstack-neutron15:00
*** pal has joined #openstack-neutron15:00
*** baoli has quit IRC15:01
*** ajmiller has joined #openstack-neutron15:01
*** tiswanso has quit IRC15:01
*** baoli has joined #openstack-neutron15:01
*** dboik_ has joined #openstack-neutron15:02
*** jobewan has joined #openstack-neutron15:02
*** tiswanso_ has joined #openstack-neutron15:02
*** scheuran has quit IRC15:03
openstackgerritAndrew Boik proposed openstack/neutron: Allow only one IPv4 and one IPv6 fixed IP on router gateway port  https://review.openstack.org/16778415:04
*** annegentle has quit IRC15:04
*** markvoelker has joined #openstack-neutron15:04
*** dboik has quit IRC15:05
*** marun_ has joined #openstack-neutron15:05
*** zhenguo has quit IRC15:06
*** ronis has quit IRC15:07
*** dannywilson has joined #openstack-neutron15:09
*** armax has joined #openstack-neutron15:10
*** markvoelker has quit IRC15:11
*** rushil has quit IRC15:12
*** atuvenie has joined #openstack-neutron15:13
*** tsg_ has quit IRC15:14
*** rushil has joined #openstack-neutron15:15
*** rushil has quit IRC15:16
*** shwetaap has joined #openstack-neutron15:16
*** scheuran has joined #openstack-neutron15:18
*** rm_work|away is now known as rm_work15:18
*** dannywilson has quit IRC15:19
*** banix has joined #openstack-neutron15:20
*** sridhar_ram has joined #openstack-neutron15:23
*** shaohe_feng has quit IRC15:24
*** alexpilotti has joined #openstack-neutron15:24
*** aranjan has joined #openstack-neutron15:25
*** ZZelle has joined #openstack-neutron15:25
*** abregman has quit IRC15:27
*** aranjan_ has joined #openstack-neutron15:27
*** atuvenie has quit IRC15:27
*** abregman has joined #openstack-neutron15:27
*** aranjan has quit IRC15:28
*** britthouser has joined #openstack-neutron15:28
*** aranjan_ has quit IRC15:28
*** atuvenie has joined #openstack-neutron15:29
*** yapeng has joined #openstack-neutron15:30
*** abregman has quit IRC15:30
*** tsg_ has joined #openstack-neutron15:31
*** seizadi has quit IRC15:31
*** bobmel_ has quit IRC15:32
*** russellb has quit IRC15:32
*** ozialien has joined #openstack-neutron15:32
*** nplanel has joined #openstack-neutron15:32
*** bobmel has joined #openstack-neutron15:32
*** numan has quit IRC15:32
*** aranjan_ has joined #openstack-neutron15:33
*** aranjan_ has quit IRC15:34
*** nlahouti has joined #openstack-neutron15:34
*** abregman1 has joined #openstack-neutron15:35
*** russellb has joined #openstack-neutron15:35
*** abregman has joined #openstack-neutron15:36
*** dave-mccowan has quit IRC15:37
*** yfried__ has quit IRC15:37
*** bobmel has quit IRC15:37
*** jmeridth has left #openstack-neutron15:37
*** ozialien has left #openstack-neutron15:38
*** abregman1 has quit IRC15:38
*** sridhar_ram has quit IRC15:38
*** Marga_ has quit IRC15:39
*** abregman has quit IRC15:40
*** aranjan has joined #openstack-neutron15:40
*** sudipto has quit IRC15:41
*** TrevorV_ has quit IRC15:42
*** aranjan has quit IRC15:44
*** abregman has joined #openstack-neutron15:44
*** abregman has quit IRC15:45
openstackgerritRobin Wang proposed openstack/neutron-specs: Agent Group and Tooz Driver  https://review.openstack.org/17443815:45
*** annegentle has joined #openstack-neutron15:46
*** Murali has quit IRC15:47
*** busterswt has joined #openstack-neutron15:49
*** sridhar_ram has joined #openstack-neutron15:50
busterswtmatrohon Opened https://bugs.launchpad.net/neutron/+bug/1445089 for LinuxBridge/VXLAN allowed-address-pairs issues as requested15:50
openstackLaunchpad bug 1445089 in neutron "allowed-address-pairs broken with l2pop/arp responder and LinuxBridge/VXLAN" [Undecided,New]15:50
matrohonbusterswt : cool thanks15:51
*** jschwarz has quit IRC15:51
vishwanathjpc_m, Hi15:52
pc_mvishwanathj: hi15:52
vishwanathjpc_m, was wondering if you had the links to the patch set related to updating requirements.txt to point to Kilo?15:52
matrohonbusterswt : great description!15:53
vishwanathjremember SumitNaiksatam and mestery talked about this at the FWaaS IRC meeting yesterday15:53
busterswtmatrohon :)15:53
pc_mvishwanathj: I had issues with my local repo (I didn't pull branch right), so in the discussion to try to resolve, Kyle ended up doing 3 patches for the repos.15:54
*** roeyc has quit IRC15:54
*** yeungp has joined #openstack-neutron15:54
matrohonbusterswt : do you want to try to fix upstream?15:54
*** bjornar_ has joined #openstack-neutron15:54
busterswtmatrohon What would be your approach to fix?15:55
pc_mvishwanathj: Reviews are 174070, 174071, 174068 (FW)15:55
*** _cjones_ has joined #openstack-neutron15:55
vishwanathjpc_m, i found it thanks....https://review.openstack.org/#/c/174068/15:55
*** dave-mccowan has joined #openstack-neutron15:55
*** sridhar_ram1 has joined #openstack-neutron15:56
*** russellb has quit IRC15:57
*** sridhar_ram has quit IRC15:57
matrohonbusterswt : I don't think it's a big deal, the main point will be to reproduce it with two devstack15:57
*** yapeng_ has joined #openstack-neutron15:57
matrohonbusterswt : I can give a hand of course!15:58
*** luqas has quit IRC15:59
*** garyk has joined #openstack-neutron15:59
*** jckasper_ has quit IRC15:59
*** yapeng has quit IRC16:00
*** jlanoux has quit IRC16:00
matrohonbusterswt : but considering that your team seems to be the main one known to use l2pop+lb+vxlan, it make sense you start to get familiar with the code16:00
*** nmagnezi has joined #openstack-neutron16:00
matrohonbusterswt : maybe you are already familiar with that part of the code!16:00
*** banix has quit IRC16:01
busterswtmatrohon i'm happy to replicate in a multi-devstack environment if it helps out. I've installed devstack once :)16:01
*** russellb has joined #openstack-neutron16:01
busterswtmatrohon getting more and more famiiiar every day!16:02
*** Sukhdev has joined #openstack-neutron16:02
*** ferest has quit IRC16:03
*** ferest has joined #openstack-neutron16:03
*** jschwarz has joined #openstack-neutron16:05
*** emagana has quit IRC16:05
*** pask81 has joined #openstack-neutron16:05
*** kbringard has quit IRC16:07
*** Marga_ has joined #openstack-neutron16:07
*** markvoelker has joined #openstack-neutron16:08
*** ferest has quit IRC16:08
*** jistr has quit IRC16:08
*** ociuhandu has quit IRC16:08
*** banix has joined #openstack-neutron16:09
*** banix has quit IRC16:09
*** hareeshp has quit IRC16:10
*** afazekas has quit IRC16:11
*** irenab has quit IRC16:12
*** sdake has joined #openstack-neutron16:12
*** ygbo has quit IRC16:12
*** gsagie_ has joined #openstack-neutron16:12
sdakehey guys debugging a problem with Juno Neutron - I created a heat template with a resource group that spawns 30 nova servers + 30 ports + 30 floating ips16:12
*** emagana has joined #openstack-neutron16:13
sdakeall of my vms get dhcp access and metadata access, but nova doesn't show the networks in nova list16:13
*** scheuran has quit IRC16:13
sdakehttp://paste.fedoraproject.org/211955/9881214216:13
sdakeit shows *some* of the networks16:13
*** markvoelker has quit IRC16:13
*** ociuhandu has joined #openstack-neutron16:14
*** marun_ is now known as marun16:14
*** kbringard has joined #openstack-neutron16:14
*** tiswanso_ has quit IRC16:15
*** annegentle has quit IRC16:15
haleybsdake: does neutron net-list show them all ?16:15
sdakehaleyb you mean port-list?16:16
*** Marga_ has quit IRC16:16
sdakewow bigbone16:16
sdakehttp://ur1.ca/k6rxw -> http://paste.fedoraproject.org/211974/1429200916:16
haleybsdake: you said it wasn't showing the networks ?16:16
sdakethanks for that16:16
sdakesorry showing the ip addresses - check out  fist paste last column16:17
*** britthouser has quit IRC16:17
haleybsdake: well, from what i remember, nova only synchronizes itself with neutron every so often, so is sometimes stale16:17
sdakemy system has been up for30 minutes16:18
sdakeI think it hsould have synced by now ;)16:18
sdakesingle node16:18
openstackgerritMerged openstack/neutron-fwaas: FWaaS: Remove check for bash usage  https://review.openstack.org/17163716:18
sdakenm second paste, there are 30 ports assigned the ips16:19
*** tiswanso_ has joined #openstack-neutron16:19
*** baoli has quit IRC16:20
haleybsdake: i can't seem to find info on the way sync works, but there might have even been a summit talk on it.  30 minutes does seem like enough time though16:21
*** baoli has joined #openstack-neutron16:24
*** baoli has quit IRC16:24
*** _kiran_ has joined #openstack-neutron16:24
*** _kiran_ is now known as kiran-r16:27
*** baoli has joined #openstack-neutron16:27
haleybsdake: hmm, there is a config value called heal_instance_info_cache_interval, which defaults to 60 seconds16:27
*** krtaylor has quit IRC16:28
sdakewe are not setting that at all16:29
sdakeso we are using the juno defaults whatever they are ;-)16:29
haleybyou'd see it in the nova log somewhere, maybe you've hit some synchronization bug if neutron port-list is showing all the IPs16:30
jaypipessalv-orl_: added some thoughts to the API rework blueprint spec...16:30
*** daneyon has quit IRC16:31
*** hareeshp has joined #openstack-neutron16:31
*** daneyon has joined #openstack-neutron16:31
*** Marga_ has joined #openstack-neutron16:32
*** annegentle has joined #openstack-neutron16:32
*** pask81 has quit IRC16:33
*** SridharG1 has left #openstack-neutron16:34
cference_edwarnicke, hey16:35
edwarnickeopendaylight16:35
edwarnickeNot openstack16:35
edwarnicke#opendaylight-neutron16:35
cference_Ah crap16:35
*** ronis has joined #openstack-neutron16:36
*** vishwanathj has quit IRC16:37
*** kawa2014 has quit IRC16:37
*** EmilienM is now known as EmilienM|afk16:39
*** jckasper_ has joined #openstack-neutron16:40
*** criptoverso has quit IRC16:40
*** kawa2014 has joined #openstack-neutron16:40
*** kawa2014 has quit IRC16:40
*** nlahouti has quit IRC16:41
*** gsagie_ has quit IRC16:43
*** belmoreira has quit IRC16:43
*** claudiub has quit IRC16:43
*** kiran-r has quit IRC16:45
*** aranjan has joined #openstack-neutron16:46
*** sbalukoff1 has quit IRC16:46
*** pal_ has joined #openstack-neutron16:46
*** atuvenie has quit IRC16:47
*** afazekas has joined #openstack-neutron16:47
*** pal has quit IRC16:47
*** matrohon has quit IRC16:48
*** yapeng_ has quit IRC16:48
*** ivar-lazzaro has joined #openstack-neutron16:49
*** kiran-r has joined #openstack-neutron16:49
*** aranjan has quit IRC16:49
*** amotoki_ has quit IRC16:50
*** slaweq has joined #openstack-neutron16:50
*** gsagie_ has joined #openstack-neutron16:51
salv-orl_thanks jaypipes!16:51
jaypipessalv-orl_: no problemo.16:51
*** safchain has quit IRC16:52
*** krtaylor has joined #openstack-neutron16:53
*** britthouser has joined #openstack-neutron16:53
*** russellb has quit IRC16:55
*** hareeshp has quit IRC16:55
*** crose has joined #openstack-neutron16:55
*** emagana has quit IRC16:56
*** slaweq has quit IRC16:58
*** harlowja_away is now known as harlowja16:58
*** banix has joined #openstack-neutron16:58
*** luqas has joined #openstack-neutron16:59
*** yapeng_ has joined #openstack-neutron16:59
*** yapeng_ has quit IRC17:00
*** russellb has joined #openstack-neutron17:00
*** devvesa has quit IRC17:00
*** ivar-laz_ has joined #openstack-neutron17:01
*** rkukura has joined #openstack-neutron17:02
*** aranjan has joined #openstack-neutron17:02
*** Marga__ has joined #openstack-neutron17:02
*** Marga_ has quit IRC17:02
*** Sukhdev has quit IRC17:02
*** britthouser has quit IRC17:03
*** luqas has quit IRC17:04
*** sthillma has joined #openstack-neutron17:04
*** britthouser has joined #openstack-neutron17:04
*** pritesh has joined #openstack-neutron17:05
*** ivar-lazzaro has quit IRC17:05
*** yapeng has joined #openstack-neutron17:05
*** pritesh has quit IRC17:06
*** emagana has joined #openstack-neutron17:06
*** dannywilson has joined #openstack-neutron17:06
*** seizadi has joined #openstack-neutron17:06
*** apuimedo has quit IRC17:07
*** sbfox has joined #openstack-neutron17:07
*** dannywilson has quit IRC17:08
*** dannywilson has joined #openstack-neutron17:09
*** annegentle has quit IRC17:09
*** dannywilson has quit IRC17:09
*** dannywilson has joined #openstack-neutron17:10
*** dannywilson has quit IRC17:10
*** nlahouti has joined #openstack-neutron17:10
*** dannywilson has joined #openstack-neutron17:10
*** kiran-r has quit IRC17:10
*** dannywilson has quit IRC17:10
*** jschwarz has quit IRC17:12
*** markvoelker has joined #openstack-neutron17:12
*** annegentle has joined #openstack-neutron17:14
pc_mAnyone versed in oslo rootwrap? I'm struggling trying to get a known working functional test to run with changes to the test setup.17:17
*** yapeng has quit IRC17:18
*** dboik_ has quit IRC17:18
*** achanda has joined #openstack-neutron17:18
*** dboik has joined #openstack-neutron17:19
*** Networkn3rd has joined #openstack-neutron17:21
*** aranjan has quit IRC17:22
*** aranjan has joined #openstack-neutron17:23
*** pal_ has quit IRC17:23
salv-orl_mestery, HenryG: do you think we should push a placeholder kilo migration? I don't remember if we do that once we close version X or when we open version X+1?17:24
salv-orl_if you have it already in review, I apologise in advance for being lazy in searching on gerrit17:25
*** pal has joined #openstack-neutron17:26
mesterysalv-orl_: YEs, and I don't know either. HenryG, do you recall?17:26
HenryGMy memory is fuzzy on this. Let me try and look what we did for juno.17:27
salv-orl_we did the placeholder as usual. I think before releasing but I'm not sure17:27
*** aranjan has quit IRC17:27
HenryGmestery: salv-orl_: https://review.openstack.org/12726517:28
HenryGThat was merged Oct 10. When was the release?17:28
*** jpena is now known as jpena|away17:28
*** britthouser has quit IRC17:28
*** jlibosva has quit IRC17:28
kevinbentonlast fall17:28
HenryGdon't say things like that when I am drinking coffee17:29
kevinbenton:)17:29
*** yfried__ has joined #openstack-neutron17:30
*** tflynn has joined #openstack-neutron17:30
*** Marga__ has quit IRC17:30
*** Networkn3rd has quit IRC17:30
*** pal has quit IRC17:32
*** ronis_ has joined #openstack-neutron17:32
*** a_le has joined #openstack-neutron17:32
HenryGAre we anticipating any more kilo db migrations before the release is cut? We could probably do the kilo marker now.17:32
salv-orl_I think we can. that marker is just a placeholder. should there be a last-minute migration (and it really shouldn't) then the placeholder can be movd17:33
HenryGok, I can do it. Should it be proposed to master?17:34
salv-orl_HenryG: master and stable/kilo17:34
HenryGok17:34
*** ronis has quit IRC17:35
*** britthouser has joined #openstack-neutron17:36
HenryGmestery: does it need a bug?17:36
*** oreillyd has quit IRC17:37
*** dboik_ has joined #openstack-neutron17:37
salv-orl_I don't know about mestery but I would not require it17:37
*** Marga_ has joined #openstack-neutron17:38
GLaupreHello everyone. I am trying to do a proof of concept for a project. I am wondering what are the minimum requirements that a MD for ML2 plugin should implement and where can I find that information? The idea is to use some hardware offload features of a NIC to bypass the vlan tagging/detagging by software bridges in a VLAN setup.17:38
*** john-davidge has quit IRC17:38
*** tsg_ has quit IRC17:38
mesteryNo bug requred salv-orl_ HenryG17:38
mestery:)17:38
*** britthouser has quit IRC17:38
*** tiswanso_ has quit IRC17:38
openstackgerritHenry Gessau proposed openstack/neutron: Add Kilo release milestone  https://review.openstack.org/17448317:39
*** tiswanso_ has joined #openstack-neutron17:40
HenryGmestery: salv-orl_: please check my copy&paste17:40
*** ihrachyshka has quit IRC17:40
mesteryHenryG: looking17:40
*** s3wong has joined #openstack-neutron17:40
*** dboik has quit IRC17:41
*** markvoelker has quit IRC17:43
*** EmilienM|afk is now known as EmilienM17:43
*** jprovazn has joined #openstack-neutron17:44
*** ociuhandu has quit IRC17:45
HenryGsalv-orl_: what about the *ass migration branches?17:45
*** yamahata has joined #openstack-neutron17:45
*** britthouser has joined #openstack-neutron17:46
*** a_le has quit IRC17:47
*** nyechiel has quit IRC17:47
*** alexpilotti has quit IRC17:48
*** a_le has joined #openstack-neutron17:48
*** tiswanso_ has quit IRC17:49
*** dave-mccowan has quit IRC17:50
salv-orl_HenryG: push a placeholder there too if it has not already been done17:51
salv-orl_there should not be a problem with name uniqueness17:51
*** igordcard_ has joined #openstack-neutron17:52
*** britthouser has quit IRC17:53
*** fawadkhaliq has quit IRC17:53
HenryGsalv-orl_: tried it, seems to be no problem with uniqueness17:53
*** sbalukoff1 has joined #openstack-neutron17:55
*** EmilienM is now known as EmilienM|afk17:55
*** johnbelamaric1 has joined #openstack-neutron17:56
*** gsagie_ has quit IRC17:57
*** johnbelamaric1 has quit IRC17:57
*** yapeng_ has joined #openstack-neutron17:57
*** johnbelamaric has quit IRC17:57
*** aix has quit IRC17:57
*** fawadkhaliq has joined #openstack-neutron17:57
*** yfauser has joined #openstack-neutron17:58
*** bobmel has joined #openstack-neutron17:58
*** sridhar_ram1 is now known as sridhar_ram17:58
*** afazekas has quit IRC17:59
*** yfauser has left #openstack-neutron17:59
*** sdake_ has joined #openstack-neutron17:59
openstackgerritHenry Gessau proposed openstack/neutron-fwaas: Add Kilo release milestone  https://review.openstack.org/17449818:00
*** tiswanso has joined #openstack-neutron18:01
openstackgerritHenry Gessau proposed openstack/neutron-vpnaas: Add Kilo release milestone  https://review.openstack.org/17450018:01
*** jaypipes has quit IRC18:01
*** jaypipes has joined #openstack-neutron18:01
HenryGmestery: *aas marker reviews posted ^^18:02
mesteryHenryG: You rule :)18:02
mesteryHenryG: lbaas too? dougwig would like that :)18:02
*** aranjan has joined #openstack-neutron18:02
*** seizadi1 has joined #openstack-neutron18:02
*** Marga_ has quit IRC18:02
*** seizadi has quit IRC18:02
*** sdake has quit IRC18:02
HenryGmestery: dougwig: it's also up, https://review.openstack.org/17449718:02
*** ivar-laz_ has quit IRC18:03
HenryGmestery: lbaas patches announce on the lbaas channel18:03
mesteryHenryG: yup18:03
mesteryquadruple tasking18:03
*** ivar-lazzaro has joined #openstack-neutron18:03
HenryGmestery: will cherrypick to stables once jenkins passes18:03
*** ferest has joined #openstack-neutron18:03
mesteryHenryG: ack!18:04
openstackgerritKevin Benton proposed openstack/neutron: Fix _device_to_port_id for non-tap devices  https://review.openstack.org/17313718:05
HenryGmestery: going offline for ~30 min18:05
*** ijw has joined #openstack-neutron18:06
*** Marga_ has joined #openstack-neutron18:06
*** britthouser has joined #openstack-neutron18:07
*** ferest has quit IRC18:08
*** markmcclain has quit IRC18:09
*** jpena|away has quit IRC18:10
GLaupreCan someone give me directions please?18:10
GLaupre:p18:11
*** fawadkhaliq has quit IRC18:11
*** rangansw has joined #openstack-neutron18:11
*** moshele has quit IRC18:12
openstackgerritDoug Hellmann proposed openstack/python-neutronclient: Uncap library requirements for liberty  https://review.openstack.org/17454018:13
*** sdake has joined #openstack-neutron18:13
*** leenheer has joined #openstack-neutron18:14
*** sdake_ has quit IRC18:17
*** baoli has quit IRC18:18
*** achanda has quit IRC18:20
*** crose has quit IRC18:21
*** leenheer has quit IRC18:21
*** Sukhdev has joined #openstack-neutron18:24
openstackgerritArmando Migliaccio proposed openstack/neutron: Clarify the init logic for the ML2 plugin  https://review.openstack.org/17416818:24
openstackgerritArmando Migliaccio proposed openstack/neutron: Deal with TODO related to Security Groups RPC API's classes  https://review.openstack.org/17416818:26
*** wwwBUKOLAYcom has joined #openstack-neutron18:26
openstackgerritArmando Migliaccio proposed openstack/neutron: Clarify the init logic for the ML2 plugin  https://review.openstack.org/17455518:27
*** achanda has joined #openstack-neutron18:28
*** EmilienM|afk is now known as EmilienM18:33
*** rdo has quit IRC18:34
*** yeungp has quit IRC18:36
*** fawadkhaliq has joined #openstack-neutron18:36
*** rdo has joined #openstack-neutron18:36
*** dboik_ has quit IRC18:37
salv-orl_mestery, armax: added a snarky comment to bug 144411218:37
openstackbug 1444112 in neutron "ML2 security groups only work with agent drivers" [High,Confirmed] https://launchpad.net/bugs/1444112 - Assigned to Armando Migliaccio (armando-migliaccio)18:37
mesterysalv-orl_: I expect nothing less :)18:37
mesterykevinbenton: Yikes, your ipset fixes are not doing well in the gate: https://review.openstack.org/#/c/174033/18:37
mesterykevinbenton: We need this to land today so we can cherry-pick them over to stable/kilo for RC2 tomorrow.18:37
armaxsalv-orl_: actually I was about to reply on that one18:38
mesterykevinbenton: Any ideas? I've gotta run for out for 30 minmutes, just making sure this is on your radar.18:38
armaxsalv-orl_: thanks for chiming in18:38
kevinbentonmestery: yeah, i didn't realize how unstable the gate was18:38
kevinbentonmestery: failures seem unrelated and are different each time18:38
mesterykevinbenton: I thought dane's fix would ahve helped18:38
kevinbentonmestery: i do need re-approval on https://review.openstack.org/#/c/173753/18:38
kevinbentonmestery: there was another unit test that had a ipset strings embedded that i missed18:39
kevinbentonmestery: i will keep monitoring them today18:39
mesterykevinbenton: OMG, *sigh*18:39
*** seizadi1 has quit IRC18:39
*** seizadi has joined #openstack-neutron18:39
mesterykevinbenton: Thanks sir! Me too, this is the only other bug on the RC list I consider release critical18:39
salv-orl_kevinbenton: did the ipset full cause gate failures often? in that case I'd stash patch £173573 in the revert18:39
* mestery goes AFK for 30 minutes18:39
*** dboik has joined #openstack-neutron18:39
salv-orl_armax: I am just adding some noise on the bug you're trying to fix. Assuming it's a bug.18:40
armaxsalv-orl_: yes it’s going to be18:40
armaxsalv-orl_: rest assured18:40
armaxsalv-orl_: you’ve anticipated me, wait for my forthcoming comment18:40
salv-orl_armax are you sure ML2 has not been designed to work that way?18:40
kevinbentonsalv-orl_: i don't understand18:40
*** sridhar_ram has quit IRC18:41
salv-orl_if you merge the revert for haleyb fixes18:41
armaxsalv-orl_: well, I believe that most of the Neutron components have been designed with the RPC assumption in mind18:41
salv-orl_for a little while the ipset size issue will be again in the gate18:41
armaxsalv-orl_: not just ML2, but L3, Firewall, VPN, etc18:41
salv-orl_if the gate is already unstable, this will add another reason for failure18:41
salv-orl_and l3_db for that matter18:41
salv-orl_and the dvr mixin18:41
*** yamahata has quit IRC18:42
armaxsalv-orl_: right18:42
salv-orl_and everything that it's been developed in the past 12 months18:42
armaxsalv-orl_: or longer18:42
salv-orl_since when we start to push plugins which were not ML2 + agent aside18:42
kevinbentonsalv-orl_: oh, i didn't think that was the cause, but maybe i should flip the order of the patches18:42
salv-orl_that was when we began ignoring the distinction between mgmt and control plane18:42
armaxsalv-orl_: perhaps we never made that distinction clear enough18:42
salv-orl_kevinbenton: it wasn't but it could be on the next recheck!18:42
*** markvoelker has joined #openstack-neutron18:42
armaxsame story goes for DHCP18:43
armaxsalv-orl_: isn’t that what pluggable IPAM is about?18:43
salv-orl_armax: that is right. I had a bug open since grizzly for l3_db notifying the agent and never fixed it18:43
*** sthillma has quit IRC18:43
*** sridhar_ram has joined #openstack-neutron18:43
armaxsalv-orl_: so, yes…we made that fundamental assumption that turned to be flawed18:43
openstackgerritDarragh O'Reilly proposed openstack/neutron: lb-agent: ensure tap mtu is the same as physical device  https://review.openstack.org/17455818:43
salv-orl_armax: not it in its currently implementation. But that is outside of my hands. The dev team has different ideas18:44
*** sthillma has joined #openstack-neutron18:44
armaxsalv-orl_: you mean DHCP?18:44
salv-orl_armax: IPAM18:44
kevinbentonsalv-orl_: can you +2 on https://review.openstack.org/#/c/173753/ ?18:44
armaxsalv-orl_: I used DHCP and IPAM interchangeably here…so we’re talking the same thing18:44
*** vishwanathj has joined #openstack-neutron18:45
salv-orl_armax: I'm confusing you. If you want to talk more you'd have to wait until after dinner18:45
salv-orl_in the meanwhile my cat will be happy to replace me18:45
armaxsalv-orl_: ok go get your tummy full we’ll talk later18:45
armaxsalv-orl_: meow18:45
*** julien_ZTE has quit IRC18:47
*** julien_ZTE has joined #openstack-neutron18:47
*** rdo has quit IRC18:49
*** Marga_ has quit IRC18:49
*** sthillma has quit IRC18:49
*** Marga_ has joined #openstack-neutron18:49
HenryGdougwig: ping18:50
*** sthillma has joined #openstack-neutron18:50
*** crose has joined #openstack-neutron18:50
HenryGdougwig: un-ping18:51
*** rdo has joined #openstack-neutron18:51
*** seizadi1 has joined #openstack-neutron18:51
*** seizadi has quit IRC18:52
*** achanda has quit IRC18:52
*** moha_hunt has joined #openstack-neutron18:53
*** Marga_ has quit IRC18:54
*** redbeard has quit IRC18:54
*** Marga_ has joined #openstack-neutron18:54
*** doude has quit IRC18:54
*** doude_ has joined #openstack-neutron18:54
*** sudipto has joined #openstack-neutron18:55
*** slaweq has joined #openstack-neutron18:57
*** yapeng_ has quit IRC18:58
*** slaweq has quit IRC18:58
*** tsg has joined #openstack-neutron18:58
*** slaweq has joined #openstack-neutron18:59
*** ozialien has joined #openstack-neutron18:59
*** thomasem has quit IRC19:01
*** ijw has quit IRC19:01
*** sridhar_ram1 has joined #openstack-neutron19:01
*** sridhar_ram has quit IRC19:02
*** thomasem has joined #openstack-neutron19:05
*** carl_baldwin has quit IRC19:06
*** nmagnezi has quit IRC19:06
*** fawadkhaliq has quit IRC19:06
*** sbfox has quit IRC19:07
*** yeungp has joined #openstack-neutron19:08
*** jamie_h has quit IRC19:08
dougwigHenryG: ack, un-ack19:10
*** yfauser has joined #openstack-neutron19:11
*** yfauser has left #openstack-neutron19:11
*** achanda has joined #openstack-neutron19:12
openstackgerritPaul Michali proposed openstack/neutron-vpnaas: VPNaaS: Revise functional test hooks  https://review.openstack.org/16811519:12
openstackgerritSalvatore Orlando proposed openstack/neutron: Quota model: use HasTenantId mixin  https://review.openstack.org/17457019:13
*** markvoelker has quit IRC19:14
*** dttocs has quit IRC19:15
HenryGdougwig: I guess I'll ask anyway to make sure. Looks like the *aaSes are releasing Kilo in step with neutron core? Will that always be the case or will they diverge one day?19:16
*** carl_baldwin has joined #openstack-neutron19:17
sc68calHenryG: hopefully we can keep it to only Swift that has their own release schedule....19:18
dougwigHenryG: they will stay in step for as long as they're running inside neutron-server, I think.19:20
*** padkrish has joined #openstack-neutron19:23
*** padkrish has quit IRC19:24
*** padkrish has joined #openstack-neutron19:25
*** nlahouti has quit IRC19:30
*** gildub has joined #openstack-neutron19:35
*** kbringard has quit IRC19:35
*** Marga_ has quit IRC19:35
*** padkrish has quit IRC19:36
*** annegentle has quit IRC19:36
*** padkrish has joined #openstack-neutron19:37
salv-orl_dougwig, sc68cal, HenryG: afaict from what I recall with the "big tent" changes every project will be free to set their own release schedule19:39
salv-orl_so as dougwig said lbaas and others are only constrained by the dependency of having to run inside neutron-server container19:39
dougwigsalv-orl_: true, but neutron-*aas are all under the neutron project.19:39
salv-orl_but then in the furue they19:39
salv-orl_will be free to choose their best destiny since there will be no more "networking" program, only openstack projects19:40
*** davrodpin has joined #openstack-neutron19:40
salv-orl_I'd still rather keep in sync the release of all openstack networking-related projects, but the list will quickly grow in the future so I suspect this won't be feasible long-term19:41
*** TrevorV_ has joined #openstack-neutron19:41
salv-orl_speaking of which... I want to propose a svcaas to project19:41
*** kbringard has joined #openstack-neutron19:41
*** padkrish has quit IRC19:42
salv-orl_the answer to all *aas projects - a "service as a service" project, which can provide every service you want in a "aas" fashion.19:42
*** TrevorV_ has quit IRC19:42
kbringardAASaaS?19:43
kbringardit's just services, all the way down19:43
*** sridhar_ram1 has quit IRC19:45
-openstackstatus- NOTICE: gerrit has been restarted to clear a problem with its event stream. any gerrit changes updated or approved between 19:14 and 19:46 utc will need to be rechecked or have their approval reapplied for zuul to pick them up19:47
*** yfauser has joined #openstack-neutron19:47
*** julim has quit IRC19:48
*** yfauser has left #openstack-neutron19:48
openstackgerritMerged openstack/neutron: Synced versionutils from oslo-incubator  https://review.openstack.org/17248019:49
*** yamahata has joined #openstack-neutron19:52
*** jprovazn has quit IRC19:55
*** sudipto has quit IRC19:56
*** padkrish has joined #openstack-neutron19:56
*** dboik has quit IRC19:58
*** dboik has joined #openstack-neutron19:58
*** tiswanso has quit IRC19:58
*** irenab has joined #openstack-neutron20:00
*** matrohon has joined #openstack-neutron20:00
*** annegentle has joined #openstack-neutron20:01
*** tiswanso has joined #openstack-neutron20:02
*** tiswanso has quit IRC20:02
*** baoli has joined #openstack-neutron20:02
*** tiswanso has joined #openstack-neutron20:03
*** baoli has quit IRC20:04
*** baoli has joined #openstack-neutron20:05
*** sridhar_ram has joined #openstack-neutron20:05
*** jobewan has quit IRC20:06
*** Marga_ has joined #openstack-neutron20:06
*** irenab has quit IRC20:07
*** hanzhang has joined #openstack-neutron20:08
anteayaanyone know who runs ryu ci?20:09
anteayathey dont' have a wikipage20:10
anteayahttps://wiki.openstack.org/wiki/ThirdPartySystems20:10
anteayaI am hoping to talk to someone associated with this account20:10
*** annegentle has quit IRC20:10
*** Marga_ has quit IRC20:11
*** annegentle has joined #openstack-neutron20:11
*** shi has quit IRC20:11
*** dboik has quit IRC20:11
*** markvoelker has joined #openstack-neutron20:12
*** dboik has joined #openstack-neutron20:12
enikanorov_amuller: hi20:12
*** claudiub has joined #openstack-neutron20:14
enikanorov_amuller: i'm trying to run keepalived functional tests locally and see it failing every time20:14
enikanorov_is there any special config that needs to be applied on the box to successfully run it?20:15
*** carl_baldwin has quit IRC20:17
*** dttocs has joined #openstack-neutron20:19
*** atuvenie has joined #openstack-neutron20:20
openstackgerritArmando Migliaccio proposed openstack/neutron: Add security groups events  https://review.openstack.org/17458820:20
*** jrist has joined #openstack-neutron20:21
openstackgerritArmando Migliaccio proposed openstack/neutron: Add security groups events  https://review.openstack.org/17458820:22
*** sthillma has quit IRC20:22
*** haplomephistos has joined #openstack-neutron20:23
*** Sukhdev has quit IRC20:24
*** emagana has quit IRC20:24
openstackgerritBrian Haley proposed openstack/neutron: Add IPset cleanup script  https://review.openstack.org/17459020:26
*** sthillma has joined #openstack-neutron20:26
*** s3wong has quit IRC20:28
*** ZZelle_ has joined #openstack-neutron20:29
*** yfauser has joined #openstack-neutron20:29
*** yfauser has left #openstack-neutron20:29
*** s3wong has joined #openstack-neutron20:31
haplomephistosWhere would one look if they suddenly started getting binding_failed on the port added with a neutron router-gateway-set?  I get lota of "qr-3a0f7b2e-66 device failed: No such device" type messages and it isn't completely tying me to the bridge so I can't ping out my namespace.20:33
*** achanda has quit IRC20:35
*** luqas has joined #openstack-neutron20:37
*** ozialien has quit IRC20:38
*** achanda has joined #openstack-neutron20:40
*** luqas has quit IRC20:42
*** rkukura_ has joined #openstack-neutron20:42
*** rkukura has quit IRC20:42
*** rkukura_ is now known as rkukura20:42
*** markvoelker has quit IRC20:44
*** nlahouti has joined #openstack-neutron20:45
*** emagana has joined #openstack-neutron20:46
*** annegentle has quit IRC20:46
dguerrihello there, is it possible to associate a floatingIP address to an address managed by the allowed_address_pairs extension? (http://docs.openstack.org/admin-guide-cloud/content/section_allowed_address_pairs_workflow.html)20:49
dguerrisorry probably wrong channel :(20:50
kevinbentondguerri: i don't think you can right now :(20:51
kevinbentondguerri: just because the association is with a port20:51
kevinbentondguerri: but let me look into it really quick in the code20:51
kevinbentondguerri: you might be able to20:53
dguerrikevinbenton I have been using this "guide": http://blog.aaronorosen.com/implementing-high-availability-instances-with-neutron-using-vrrp/ but the "detached" port used there won't come up, so traffic won't get through20:53
dguerrikevinbenton how? :)20:53
*** dannywilson has joined #openstack-neutron20:54
kevinbentondguerri: one sec20:54
dguerrisure20:54
*** rpothier has quit IRC20:55
*** aranjan has quit IRC20:57
*** cburgess_ has quit IRC20:58
amullerenikanorov_: heya, back20:58
amullerenikanorov_: Can you paste the failure logs?20:58
*** cburgess has joined #openstack-neutron20:58
enikanorov_amuller: a sec20:58
kevinbentondguerri: ugh, no, it looks like the validation only checks against fixed ips20:59
*** pc_m has quit IRC20:59
dguerrikevinbenton I wonder how this guy got it working http://docs.openstack.org/admin-guide-cloud/content/section_allowed_address_pairs_workflow.html21:01
kevinbentondguerri: well allowed address pairs work okay21:01
dguerribut it's the only documentation about that I have been able to find21:01
*** dannywil_ has joined #openstack-neutron21:01
kevinbentondguerri: just floating ip to an allowed address hasn't come up i think before21:01
dguerriyep21:01
*** aranjan has joined #openstack-neutron21:02
dguerrihe creates a port with the shared fixed IP, and then he associates it with a floatingIP.21:03
*** dannywilson has quit IRC21:03
dguerritrouble is that it won't come up :)21:03
dguerriI think because it is attached to nothing21:03
*** crose has quit IRC21:04
enikanorov_amuller: http://paste.openstack.org/show/204145/21:05
*** aranjan_ has joined #openstack-neutron21:05
amullerenikanorov_: that's odd, does the machine have keepalived?21:05
amullerenikanorov_: try keepalived -h21:05
amullerenikanorov_: it's a devstack requirement21:05
*** ronis_ has quit IRC21:06
kevinbentondguerri: are you just referring to the status of the port?21:06
*** baoli has quit IRC21:06
*** aranjan has quit IRC21:06
*** yfried__ is now known as yfried|afk21:07
*** baoli has joined #openstack-neutron21:07
*** slaweq has quit IRC21:07
kevinbentondguerri: because that will show down21:07
kevinbentondguerri: but the floating ip should work21:07
dguerrimmmh21:07
*** Marga_ has joined #openstack-neutron21:07
dguerriyes port status and floating IP status are both down21:07
kevinbentondguerri: yeah, ignore the status's of those and just see if connectivity works21:08
dguerrinope, unfortunately it won't. I thought because of the status21:09
enikanorov_amuller: yes it does. Keepalived v1.2.7 (08/14,2013)21:09
*** aranjan_ has quit IRC21:09
amullerenikanorov_: are there any logs in syslog related to keepalived?21:09
*** apuimedo has joined #openstack-neutron21:09
kevinbentondguerri: ok, let me see if i encounter the same issue21:10
kevinbentondguerri: are you using dvr?21:10
enikanorov_amuller: looking. i think i've seen something like it didn't like the configuration that test has provided21:10
amullerenikanorov_: at least that would make sense21:11
*** harlowja is now known as harlowja_away21:11
enikanorov_amuller: some errors like21:11
enikanorov_Apr 15 20:38:41 localhost Keepalived_vrrp[25580]: No such interface, eth121:11
enikanorov_Apr 15 20:38:41 localhost Keepalived_vrrp[25580]: VRRP is trying to assign VIP to unknown eth1 interface !!! go out and fixe your conf !!!21:11
enikanorov_same with eth2 and eth1021:12
*** Marga_ has quit IRC21:12
dguerrikevinbenton, thank you so much for the help. No, not using dvr21:12
*** emagana has quit IRC21:12
openstackgerritMerged openstack/neutron-vpnaas: Add Kilo release milestone  https://review.openstack.org/17450021:12
*** mwagner_lap has quit IRC21:13
*** sbfox has joined #openstack-neutron21:13
*** EmilienM is now known as EmilienM|afk21:13
*** atuvenie has quit IRC21:13
dguerrikevinbenton: hold on... yes. dvr extension is there21:13
amullerenikanorov_: let me look in my setup, maybe on my setup I get those errors but keepalived is willing to spawn (different version)21:14
kevinbentondguerri: ok21:14
*** moha_hunt has quit IRC21:15
enikanorov_amuller: hmm, on another box func test is passing, same version of keepalived, same errors in the syslog21:15
enikanorov_ubuntu 14.0421:15
*** annegentle has joined #openstack-neutron21:16
*** tiswanso has quit IRC21:17
*** aranjan has joined #openstack-neutron21:18
amullerenikanorov_: it's passing on my machine with no errors in syslog, fedora 20 and keepalived 1.2.15-221:18
*** Marga_ has joined #openstack-neutron21:18
amullerenikanorov_: are the L3 HA functional tests passing?21:19
kevinbentonsalv-orl_: are you around still?21:19
amullerenikanorov_: for example neutron.tests.functional.agent.test_l3_agent.*.test_ha_router_lifecycle21:20
amullerenikanorov_: that will fail if keepalived doesn't spawn21:20
amullerenikanorov_: also can you run neutron.tests.functional.agent.linux.test_keepalived.*.test_keepalived_respawns   ?21:21
enikanorov_respawns fails as well as *spawns21:22
*** ijw has joined #openstack-neutron21:22
amullerenikanorov_: and the ha_router_lifecycle test?21:22
*** dims__ has quit IRC21:23
*** Marga_ has quit IRC21:23
*** slaweq has joined #openstack-neutron21:24
*** Marga_ has joined #openstack-neutron21:24
enikanorov_amuller: there's a problem with func tests. if i enable tests with sudo, i starts failing because it can't import ovs.db...21:25
enikanorov_and each test takes like 5-10 seconds21:25
*** slaweq has quit IRC21:25
amullerenikanorov_: on both of your machines?21:26
amullerotherwiseguy: ping21:26
*** slaweq has joined #openstack-neutron21:26
otherwiseguyamuller: pong21:26
amullerotherwiseguy: if enikanorov_ can't import ovs.db is it the issue of the mssing OVS python library?21:26
enikanorov_amuller: that's really an issue with ovs.db which i don't have and it's not a dependency21:26
amullerin functional tests21:26
otherwiseguyenikanorov_: install the python-openvswitch package.21:26
enikanorov_otherwiseguy: ok21:26
amullerotherwiseguy: what installs it currently I forgot?21:27
*** yfried|afk is now known as yfried__21:27
otherwiseguyamuller: the configure_for_func_testing.sh script will install it for you if you run that.21:27
otherwiseguyBut otherwise it's just a "yeah, you have to remember that."21:27
otherwiseguyIt should have been added to devstack to install python-openvswitch, but meh.21:27
*** slaweq has quit IRC21:27
*** slaweq has joined #openstack-neutron21:28
otherwiseguyI now have setuptools stuff merged into the ovs tree and am getting ready to make the first PyPI release of the ovs library so we can just put it in requirements.txt.21:28
enikanorov_otherwiseguy: good to know. trying21:28
amullerenikanorov_: you should run configure_for_func_testing.sh on machines you want to run the functional tests21:28
enikanorov_yep, trying21:28
amullerotherwiseguy++21:28
otherwiseguyand am apparently becoming the PyPI maintainer for the library. So probably a lot more fixes and releases for the library itself coming.21:29
amullerotherwiseguy: bam21:30
amullerthat's how you do it :)21:30
*** matrohon has quit IRC21:30
*** sridhar_ram has quit IRC21:30
enikanorov_otherwiseguy: apparently installing python-openvswitch doesn't fix importing error. i guess i need to install it into .tox/funcitonal/*python*/21:31
*** banix has quit IRC21:31
otherwiseguyenikanorov_: you should be using dsvm-functional.21:31
otherwiseguyfunctional doesn't allow external libraries.21:31
otherwiseguyyeah, it is entirely too fragile and crazy.21:32
openstackgerritDoug Wiegley proposed openstack/neutron-specs: Lbaas, use Octavia as reference implementation  https://review.openstack.org/17461621:32
enikanorov_ok21:32
*** sridhar_ram1 has joined #openstack-neutron21:33
kevinbentondguerri: yeah, this approach may have been broken by the changes to dvr21:33
*** Marga_ has quit IRC21:34
*** ijw has quit IRC21:34
*** tflynn_ has joined #openstack-neutron21:34
*** Marga_ has joined #openstack-neutron21:35
dguerrikevinbenton well, bummer. But good to know. At least now I can stop trying  (I have been struggling aaaalll day) :)21:35
dguerrithanks man21:35
kevinbentondguerri: would associating the floating ip directly to one of the devices using an allowed address pair fit your use case?21:36
*** yamahata has quit IRC21:36
*** yamahata has joined #openstack-neutron21:37
*** yfried__ is now known as yfried|afk21:37
vishwanathjamotoki, mestery, hi...What do you guys think about adding "Horizon Impact" and "Neutron Client Impact" section to the neutron specs? My personal opinion is that this could be helpful for implementers to think through and plan for such efforts when implementing a neutron spec.21:37
*** tflynn has quit IRC21:37
*** emagana has joined #openstack-neutron21:38
dguerrikevinbenton yes, it will work for now.21:38
*** jamielennox|away is now known as jamielennox21:39
kevinbentondguerri: it would require a code change21:40
kevinbentondguerri: but it doesn't look bad21:40
kevinbentondguerri: can you try disabling DVR and see if it works without DVR?21:40
*** markvoelker has joined #openstack-neutron21:42
dguerrikevinbenton unfortunately I don't have admin on that infra21:42
blogandguerri: i've followed that same blog before and i am almost certain i got the floatingip working21:42
kevinbentondguerri: i suspect that the changes for floating IP routing in DVR is what's keeping it from working21:43
mesteryvishwanathj: Seems like a decent idea, though in theory people would file python-neutronclient BPs and Horizon ones as well21:43
kevinbentondguerri: because floating IPs are now realized directly on the compute node of the port21:43
kevinbentondguerri: and since the port you create isn't bound to a compute node, i don't think the floating IP gets realized anywhere21:44
dguerrikevinbenton that explain it21:44
*** annegentle has quit IRC21:44
blogankevinbenton: thats not good21:44
*** yapeng has joined #openstack-neutron21:44
kevinbentonblogan, dguerri: yeah, in that scenario i would hope it would just fallback to the agent running SNAT or something21:45
*** annegentle has joined #openstack-neutron21:45
blogankevinbenton, dguerri: i have to test this out now myself21:45
kevinbentonblogan: yeah, give it a shot21:46
dguerriblogan, thanks!21:46
openstackgerritRyan Tidwell proposed openstack/neutron: Block subnet create with mismatched IP subnet version and subnetpool IP version  https://review.openstack.org/17359421:46
*** dannywil_ has quit IRC21:46
*** sbfox has quit IRC21:46
*** annegentle has quit IRC21:47
*** dannywilson has joined #openstack-neutron21:47
*** annegentle has joined #openstack-neutron21:48
*** apuimedo has quit IRC21:48
*** shwetaap has quit IRC21:48
openstackgerritDoug Wiegley proposed openstack/neutron-specs: Decompose vendor plugins/drivers for neutron-*aas  https://review.openstack.org/17461921:49
*** sthillma has quit IRC21:54
*** sthillma has joined #openstack-neutron21:55
*** EmilienM|afk is now known as EmilienM21:55
*** amuller has quit IRC21:55
*** jbell8 has quit IRC21:56
*** gildub is now known as gildub_bbl21:59
*** yapeng has quit IRC22:02
*** yamahata has quit IRC22:02
*** yapeng has joined #openstack-neutron22:02
*** slaweq has quit IRC22:04
*** aranjan has quit IRC22:05
kevinbentonblogan: yeah, i see that nothing is responding to the ARP request for the floating IP even though it's associated to a port22:05
kevinbentondougwig: another level of decomposition!22:06
dougwigkevinbenton: taking the temperature.  i just like being yelled at.22:06
*** yapeng has quit IRC22:07
*** aranjan has joined #openstack-neutron22:08
*** dims__ has joined #openstack-neutron22:08
*** annegentle has quit IRC22:09
*** annegentle has joined #openstack-neutron22:10
blogankevinbenton: just tried it out and it worked, but i realized my neutron master hadn't been updated in 2 weeks :(22:11
*** busterswt has quit IRC22:11
openstackgerritMerged openstack/neutron: Revert "Add ipset element and hashsize tunables"  https://review.openstack.org/17403322:12
kevinbentonblogan: so create a port to get an IP22:12
kevinbentonblogan: add that IP in allowed address pairs of another port22:12
kevinbentonblogan: associate a floating IP to the first port22:13
kevinbentonblogan: and you can connect to the other port via the floating IP?22:13
*** harlowja_away is now known as harlowja22:13
kevinbentonblogan: (aftering configuring the OS with the floating IP)22:13
*** markvoelker has quit IRC22:13
kevinbentonblogan: whoops, i mean the IP of the first port22:13
*** baoli has quit IRC22:13
*** baoli has joined #openstack-neutron22:14
blogankevinbenton: that IP has to be raised on an interface22:14
*** annegentle has quit IRC22:15
blogankevinbenton: that blog uses keepalived, which raises the port's IP22:15
bloganso arp does happen22:15
bloganim testing again on a more updated neutron22:15
bloganso it may not work for me now22:16
kevinbentonblogan: i meant that the l3 agent wasn't even responding to ARP, let alone the compute node22:17
*** yamahata has joined #openstack-neutron22:21
dguerriblogan: are you using dvr?22:21
blogandguerri: oh no, do i need that enabled?22:21
kevinbentonblogan: yeah22:21
blogandamnit22:21
bloganlol22:21
kevinbentonblogan: this is a dvr bug22:21
bloganim an idiot22:22
kevinbentonblogan: read teh backlog! :)22:22
dguerri:)22:22
blogani didnt read the entire scrollback lol22:22
* blogan goes back into the hole he came from22:22
kevinbentonblogan: i was busting out git bisect and everything ... :)22:22
bloganwell glad i could waste yalls time and mine22:22
dguerriblogan, nevertheless now we know that if there is something broken, it must be something related to dvr22:22
kevinbentonblogan: yeah, it was useful to confirm that it's specific to dvr22:23
kevinbentonarmax: does DVR have logic to bring a floating IP up on the snat node if there isn't an l3 agent on a compute node where the port exists?22:23
bloganwell as long as we put a little silver lining to my idocy22:23
bloganidiocy22:23
bloganbut yeah it works with me updating neutron to current master too22:24
*** kbringard has quit IRC22:25
*** dboik_ has joined #openstack-neutron22:25
*** hanzhang has quit IRC22:26
*** hanzhang has joined #openstack-neutron22:27
*** smccully has quit IRC22:28
*** sdake_ has joined #openstack-neutron22:28
*** dboik has quit IRC22:29
*** Marga_ has quit IRC22:29
*** dboik_ has quit IRC22:30
*** Marga_ has joined #openstack-neutron22:30
*** Marga_ has quit IRC22:30
*** krtaylor has quit IRC22:31
*** Marga_ has joined #openstack-neutron22:31
*** jaypipes has quit IRC22:31
*** sdake has quit IRC22:31
*** annegentle has joined #openstack-neutron22:31
*** Marga_ has quit IRC22:32
*** Marga_ has joined #openstack-neutron22:32
*** annegentle has quit IRC22:33
*** sdake_ has quit IRC22:33
*** annegentle has joined #openstack-neutron22:33
*** ferest has joined #openstack-neutron22:34
*** annegentle has quit IRC22:37
*** ferest has quit IRC22:39
*** EmilienM is now known as EmilienM|afk22:40
*** rkukura has quit IRC22:44
*** tflynn_ has quit IRC22:45
armaxkevinbenton: ping22:45
*** tflynn has joined #openstack-neutron22:46
kevinbentonarmax: yo22:46
armaxnot sure I understand your question22:46
kevinbentonarmax: with dvr enabled, a floating IP associated to an unbound port doesn't seem to be brought online on any l3 agent22:47
armaxwhat would you do with an unbound FIP?22:47
kevinbentonanother instance is configured with the IP of the unbound port as an allowed address pair22:48
armaxkevinbenton: as soon the port becomes bound then the FIP appears on teh host associated to the l3 agent in charge of that host22:48
*** markvoelker has joined #openstack-neutron22:48
kevinbentonwell multiple instances are22:48
*** markvoelker_ has joined #openstack-neutron22:49
kevinbentondguerri was trying to follow Aaron's guide here: http://blog.aaronorosen.com/implementing-high-availability-instances-with-neutron-using-vrrp/22:49
kevinbentonand it doesn't work with DVR22:49
*** padkrish has quit IRC22:49
*** dims__ has quit IRC22:50
*** markvoel_ has joined #openstack-neutron22:50
*** padkrish has joined #openstack-neutron22:50
armaxkevinbenton: ok, but are we sure that’s because of an unbound port?22:50
*** markvoe__ has joined #openstack-neutron22:51
kevinbentonarmax: seems to be22:51
kevinbentonarmax: no l3 agent will respond to an ARP request for the floating IP when i try it22:51
*** gildub_bbl is now known as gildub22:52
armaxkevinbenton: ok, now I am with you22:52
*** markvoelker has quit IRC22:53
*** aveiga has joined #openstack-neutron22:53
armaxkevinbenton: in aaron’s case the fip is associated to an unbound port22:53
armaxkevinbenton: and yet routing works fine22:54
*** markvoelker_ has quit IRC22:54
*** dboik_ has joined #openstack-neutron22:54
*** padkrish has quit IRC22:54
*** Marga_ has quit IRC22:54
*** Marga_ has joined #openstack-neutron22:55
armaxkevinbenton: I don’t think taht for such scenario DVR makes much sense22:55
*** markvoel_ has quit IRC22:55
armaxkevinbenton: because if we allowed to have teh FIP namespace to land on the dvr_snat agent22:55
armaxkevinbenton: you’re basically back to central routing22:56
kevinbentonarmax: right22:56
armaxkevinbenton: am I making any sense?22:56
armaxkevinbenton: I am not saying that lack of VRRP support is nice22:56
armaxkevinbenton: I am tryign to wrap my head around this22:56
*** zhipeng has quit IRC22:56
kevinbentonarmax: i was thinking maybe there was some fallback logic where the SNAT one would host a floating IP if there wasn't another l3 agent that could handle it22:56
*** padkrish has joined #openstack-neutron22:56
kevinbentonarmax: for example if one of the compute nodes wasn't running the l3 agent22:57
kevinbentonarmax: it would be the same scenario22:57
kevinbentonarmax: right?22:57
*** padkrish has quit IRC23:00
*** padkrish has joined #openstack-neutron23:01
*** yuanying has joined #openstack-neutron23:01
*** chlong has joined #openstack-neutron23:01
armaxkevinbenton: no23:01
armaxkevinbenton: dvr is already riddled with too many special cases23:02
armaxkevinbenton: I think such a fallback logic would be very problematic23:02
armaxkevinbenton: would the l3 agent not be running because it’s intentional or because of a transient or permanent fault?23:03
kevinbentonarmax: intentional23:03
armaxkevinbenton: right, but how would you detect that?23:03
armaxkevinbenton: you’re thinking of supporting another kind of hybrid approach23:04
kevinbentonarmax: "if port.host_id not in active_l3_agents"23:04
kevinbentonarmax: yeah, this is unfortunate23:04
*** jgrimm is now known as zz_jgrimm23:04
kevinbentonarmax: it means dvr can't work with bare metals hosts either :(23:04
armaxkevinbenton: where some computes may have l3 agents running and some do?23:04
*** padkrish_ has joined #openstack-neutron23:04
*** Marga_ has quit IRC23:05
kevinbentonarmax: that particular example was just for illustration23:05
*** baoli has quit IRC23:05
kevinbentonarmax: strike it from the record :)23:05
armaxkevinbenton: that depends on how you intend to run bare metal hosts23:05
*** padkrish has quit IRC23:05
kevinbentonarmax: use DVR with VLAN mode23:06
*** dttocs has quit IRC23:06
kevinbentonarmax: put bare metal host on neutron vlan23:06
armaxkevinbenton: or even use DVR with L2GW23:06
kevinbentonarmax: create a port for the bare metal host in neutron so dhcp responds23:06
armaxkevinbenton: but maybe we’re going into a much different discussion23:06
*** padkrish_ has quit IRC23:07
armaxkevinbenton: basically you’re saying that you’d like the user to tell the FIP creation to bound an l3 agent of your chosing23:07
armaxkevinbenton: maybe that’s more interesting23:07
*** zzzeek has quit IRC23:07
kevinbentonarmax: that would work as a fallback23:07
armaxkevinbenton: or perhaps slightly easier to support23:07
kevinbentonarmax: but it would need to be tenant-driven as well (not admin-only)23:07
dguerriarmax kevinbenton about supporting VRRP with DVR: as VRRP is actually working with fixed IPs, it's just a matter of "exposing" those IPs outside. A possible workaround would be to trigger the FIP association with a keepalived trigger.23:07
armaxkevinbenton: yeah that’s the sucky part23:07
dguerrithat's not a solution, just a workaround23:08
kevinbentondguerri: right23:08
armaxbut what begs the question23:08
armaxis: for an unbound FIP why would you need a DVR at all?23:08
kevinbentondguerri, armax: i think now that we're already at the point of major code changes, let's just allow floating IP to be associated with an allowed address pair23:08
armaxkevinbenton: I must be missing something23:08
dguerriprobably what you were saying earlier, kevinbenton23:08
*** yamamoto has joined #openstack-neutron23:09
kevinbentonarmax: it doesn't need to be DVR, it just needs to work somewhere23:09
kevinbentonarmax: like it does without DVR23:09
armaxkevinbenton: understood23:09
armaxkevinbenton: I guess if I could choose I’d create a centralized router23:09
armaxkevinbenton: because that’s all I’d need for this type of scenario23:10
armaxkevinbenton: but I can see the complication23:10
kevinbentonarmax: right, but a tenant can't make that choice23:10
armaxkevinbenton: should the backend implicitily create me a DVR by default23:10
kevinbentonarmax: and the tenant actually might want DVR for everything else23:10
armaxkevinbenton: maybe we need to allow mobility of FIP's23:10
*** EmilienM|afk is now known as EmilienM23:10
kevinbentonarmax: it would be cool to be able to move them around23:11
armaxkevinbenton: they land where it makes the most sense23:11
kevinbentonarmax: and then maybe have an 'assign to random' option for this scenario23:11
armaxkevinbenton: so if unbound on some specified pool23:11
armaxand if bound, closest to the source23:11
kevinbentonarmax: right23:11
armaxkevinbenton: mumble muble23:12
kevinbentonarmax: will you have code up for review today or tomorrow?23:12
armaxkevinbenton: I was gonna ask you the same question, darn you beat me to it23:12
dguerrikevinbenton armax  o.O'  lol23:12
*** britthouser has quit IRC23:12
* armax pretends he didn’t understand the question23:12
dguerrishall I open a bug?23:12
* armax slowly walks away23:12
kevinbentondguerri: i think so23:12
dguerricool23:13
kevinbentondguerri: even if we don't go the route of floating IP mobility, we should at least allow it to be associated with a port based on an allowed address pair23:13
armaxdguerri: sure, please tag the bug with l3-dvr-backlog so that it stays close to its friends23:13
dguerriwill do23:13
armaxkevinbenton: we need to be careful23:13
*** sridhar_ram has joined #openstack-neutron23:14
kevinbentonarmax: do you see an issue with that?23:14
armaxnot yet, but I am  sure they’ll come up23:14
armaxkevinbenton: like this one: https://review.openstack.org/#/c/174228/23:14
* armax jumps from L3 to DHCP23:14
armaxkevinbenton: your patch to anticipate DHCP allocation caused a bit of havoc23:14
*** sridhar_ram1 has quit IRC23:14
armaxkevinbenton: it’s always difficult to try to have the full picture23:15
kevinbentonarmax: good23:15
armaxkevinbenton: until we start poking at the beast23:15
armaxI’d like for swami to chime in on the bug report, he’s supposed to be our resident expert for DVR23:17
*** carl_baldwin has joined #openstack-neutron23:17
kevinbentonarmax: how did my patch cause that bug?23:17
kevinbentonarmax: people could update subnets before my patch, no?23:17
armaxkevinbenton: well the problem occurs at subnet create23:17
armaxkevinbenton: let’s say that your patch made a latent problem more evident23:18
armaxkevinbenton: having said that it’s still unclear how we regressed because from juno to kilo the subnet creation with that type of cidr was prevented23:18
armaxkevinbenton: but moving the dhcp port creation at the subnet_create time23:19
armaxkevinbenton: made the issue appear sooner, I suppose23:19
armaxkevinbenton: the issue was there, you only catalyzed it23:19
*** rdo has quit IRC23:20
*** rdo has joined #openstack-neutron23:22
dguerriarmax kevinbenton https://bugs.launchpad.net/neutron/+bug/1445255  not the best bug report I have ever filed... but I need some rest (quite late in this TZ :) )23:22
openstackLaunchpad bug 1445255 in neutron "FloatingIP and allowed_address_pairs won't work with DVR" [Undecided,New]23:22
armaxdguerri: which one is it?23:22
dguerriUK23:23
dguerrithanks again for your help23:23
armaxdguerri: no worries23:23
armaxdguerri: thanks for trying the beast23:23
dguerri;)23:23
*** dguerri is now known as _dguerri23:23
*** _dguerri is now known as dguerri23:24
*** tflynn_ has joined #openstack-neutron23:27
*** yamamoto has quit IRC23:27
*** igordcard_ has quit IRC23:27
*** seizadi has joined #openstack-neutron23:30
*** seizadi1 has quit IRC23:30
*** tflynn has quit IRC23:30
*** tflynn_ has quit IRC23:31
*** sdake has joined #openstack-neutron23:34
*** Sukhdev has joined #openstack-neutron23:34
*** Marga_ has joined #openstack-neutron23:36
Sukhdevarmax: Ping23:36
armaxSukhdev: pong23:36
Sukhdevarmax: do you have few minutes? Having issue with L2GW data path23:37
*** padkrish has joined #openstack-neutron23:37
armaxSukhdev: let me see if I can help you but I am not well equipped at the moment23:38
*** Marga_ has quit IRC23:40
HenryGotherwiseguy: ping23:45
*** julien_ZTE has quit IRC23:47
*** yamamoto has joined #openstack-neutron23:49
*** hichihara has joined #openstack-neutron23:50
*** emagana has quit IRC23:50
*** xgerman has quit IRC23:52
*** sdake_ has joined #openstack-neutron23:55
*** nlahouti has quit IRC23:58
*** markvoe__ has quit IRC23:58
*** sdake has quit IRC23:59
*** nlahouti has joined #openstack-neutron23:59
*** dannywilson has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!