Monday, 2017-04-10

*** gouthamr has quit IRC00:00
*** fragatina has quit IRC00:03
*** stanzgy has joined #openstack-neutron00:04
*** crushil has joined #openstack-neutron00:09
*** neiljerram has quit IRC00:10
*** pmannidi has joined #openstack-neutron00:11
*** fnaval has joined #openstack-neutron00:14
*** fragatina has joined #openstack-neutron00:16
*** karthikpr has quit IRC00:24
*** seanatcisco has joined #openstack-neutron00:25
*** ircuser-1 has quit IRC00:29
*** fnaval has quit IRC00:31
*** zhurong has joined #openstack-neutron00:33
*** thorst has quit IRC00:33
*** markstur has quit IRC00:35
*** fnaval has joined #openstack-neutron00:35
*** markstur has joined #openstack-neutron00:36
*** hoangcx has joined #openstack-neutron00:39
openstackgerritRuijing proposed openstack/networking-odl master: enable new netvirt  https://review.openstack.org/45338600:40
*** markstur has quit IRC00:40
*** seanatcisco has quit IRC00:42
*** seanatcisco has joined #openstack-neutron00:43
*** mickeys has quit IRC00:50
*** kiseok7 has joined #openstack-neutron00:53
*** limao has joined #openstack-neutron00:54
*** pckizer has quit IRC00:55
*** mohankumar has joined #openstack-neutron01:05
*** yedongcan has joined #openstack-neutron01:08
*** iwamoto has joined #openstack-neutron01:09
*** nicolasbock has joined #openstack-neutron01:10
*** mohankumar_ has joined #openstack-neutron01:10
*** mohankumar has quit IRC01:10
*** NikhilS has joined #openstack-neutron01:11
*** radhikam has joined #openstack-neutron01:14
*** sam_nowitzki has joined #openstack-neutron01:16
*** masaki has joined #openstack-neutron01:18
*** radhikam has quit IRC01:24
*** seanatcisco has quit IRC01:24
*** longlq_ has joined #openstack-neutron01:25
*** longlq_ has quit IRC01:26
*** longlq_ has joined #openstack-neutron01:27
*** sam_nowitzki has quit IRC01:28
*** seanatcisco has joined #openstack-neutron01:28
*** longlq_ has quit IRC01:28
*** longlq_ has joined #openstack-neutron01:29
*** longlq_ has quit IRC01:30
*** longlq_ has joined #openstack-neutron01:30
*** radhikam has joined #openstack-neutron01:31
*** longlq_ has quit IRC01:32
*** cuongnv has joined #openstack-neutron01:32
*** radhikam has quit IRC01:33
*** thorst has joined #openstack-neutron01:34
*** thorst has quit IRC01:37
*** thorst has joined #openstack-neutron01:37
*** thorst has quit IRC01:37
*** pck has joined #openstack-neutron01:38
*** mickeys has joined #openstack-neutron01:50
*** nplanel has joined #openstack-neutron01:52
*** fnaval has quit IRC01:56
*** mickeys has quit IRC01:56
*** zhurong has quit IRC01:58
*** tuanluong has joined #openstack-neutron01:59
*** tuanluong_ has joined #openstack-neutron02:02
*** tuanluong has quit IRC02:05
*** gouthamr has joined #openstack-neutron02:06
*** zhurong has joined #openstack-neutron02:10
*** aojea has joined #openstack-neutron02:13
*** lujinluo has joined #openstack-neutron02:17
*** aojea has quit IRC02:18
*** mohankumar_ has quit IRC02:20
*** markstur has joined #openstack-neutron02:26
*** hjensas has joined #openstack-neutron02:33
*** hjensas has quit IRC02:33
*** hjensas has joined #openstack-neutron02:33
*** masaki has quit IRC02:34
*** hjensas has quit IRC02:37
*** thorst has joined #openstack-neutron02:38
*** ramishra has joined #openstack-neutron02:39
*** armax has quit IRC02:42
*** armax has joined #openstack-neutron02:42
*** armax has quit IRC02:43
*** markstur has quit IRC02:44
*** yamamoto has joined #openstack-neutron02:45
*** tuanluong has joined #openstack-neutron02:47
*** tuanluong_ has quit IRC02:49
*** wu_ng has joined #openstack-neutron02:50
*** mickeys has joined #openstack-neutron02:53
*** nicolasbock has quit IRC02:53
*** mickeys has quit IRC02:57
*** thorst has quit IRC02:57
*** masaki has joined #openstack-neutron02:59
*** vj3k has joined #openstack-neutron02:59
*** mohankumar_ has joined #openstack-neutron03:01
*** yamamoto has quit IRC03:01
*** masaki has quit IRC03:02
*** masaki has joined #openstack-neutron03:03
*** mriedem has quit IRC03:06
*** markstur has joined #openstack-neutron03:14
*** gouthamr has quit IRC03:16
*** markstur has quit IRC03:19
*** ramishra has quit IRC03:19
*** ramishra has joined #openstack-neutron03:21
*** jhershbe has joined #openstack-neutron03:21
*** yamahata has joined #openstack-neutron03:21
*** gkadam has joined #openstack-neutron03:24
*** mohankumar_ has quit IRC03:26
*** vj3k has quit IRC03:30
*** zhhuabj has quit IRC03:35
*** psahoo has joined #openstack-neutron03:35
*** limao has quit IRC03:40
*** john-davidge has joined #openstack-neutron03:41
*** catintheroof has joined #openstack-neutron03:43
*** limao has joined #openstack-neutron03:43
*** john-davidge has quit IRC03:46
*** limao has quit IRC03:48
*** markstur has joined #openstack-neutron03:50
*** zhhuabj has joined #openstack-neutron03:50
openstackgerritMerged openstack/networking-ovn master: Updated from global requirements  https://review.openstack.org/45450403:51
*** catintheroof has quit IRC03:51
*** markstur has quit IRC03:53
*** mickeys has joined #openstack-neutron03:53
*** thorst has joined #openstack-neutron03:55
*** mickeys has quit IRC03:58
*** jhershbe has quit IRC03:58
*** suresh12 has joined #openstack-neutron03:59
*** thorst has quit IRC03:59
*** yamamoto has joined #openstack-neutron04:01
*** radhikam has joined #openstack-neutron04:03
*** anilvenkata has joined #openstack-neutron04:04
*** markvoelker has joined #openstack-neutron04:05
*** mdnadeem has joined #openstack-neutron04:06
*** limao has joined #openstack-neutron04:11
*** vks1 has joined #openstack-neutron04:17
*** udesale has joined #openstack-neutron04:20
*** Dinesh_Bhor has joined #openstack-neutron04:22
*** markstur has joined #openstack-neutron04:24
*** nplanel has quit IRC04:30
*** nplanel has joined #openstack-neutron04:32
*** seanatcisco has quit IRC04:32
*** nplanel has quit IRC04:33
*** nplanel has joined #openstack-neutron04:34
openstackgerritMerged openstack/networking-ovn master: Allow tuning the probe interval from the IDL session  https://review.openstack.org/45416304:35
*** zhhuabj has quit IRC04:36
*** zhhuabj has joined #openstack-neutron04:41
*** gcheresh has joined #openstack-neutron04:42
*** Jack_Iv has joined #openstack-neutron04:43
*** mickeys has joined #openstack-neutron04:54
*** thorst has joined #openstack-neutron04:55
*** Jack_Iv has quit IRC04:58
*** Jack_Iv has joined #openstack-neutron04:58
*** mickeys has quit IRC04:58
*** ociuhandu has quit IRC05:00
*** thorst has quit IRC05:00
*** ociuhandu has joined #openstack-neutron05:01
*** ratailor has joined #openstack-neutron05:02
*** Jack_Iv has quit IRC05:02
*** ayogi has joined #openstack-neutron05:04
*** crushil has quit IRC05:07
*** Jack_Iv has joined #openstack-neutron05:13
*** iranzo has joined #openstack-neutron05:17
*** iranzo has quit IRC05:17
*** iranzo has joined #openstack-neutron05:17
*** ayogi has quit IRC05:21
*** sridharg has joined #openstack-neutron05:21
*** ayogi has joined #openstack-neutron05:24
gkadam@openstack-neutron, ping : Can we add more than one external network to the OpenStack environment along with the existing single external flat network?05:24
*** rcernin has joined #openstack-neutron05:25
*** Jack_Iv has quit IRC05:26
*** Jack_Iv has joined #openstack-neutron05:27
*** mosulica has joined #openstack-neutron05:30
*** trinaths has joined #openstack-neutron05:32
*** markstur has quit IRC05:38
openstackgerritYAMAMOTO Takashi proposed openstack/neutron master: extraroute_db: Clean up update_router  https://review.openstack.org/41079305:40
openstackgerritYAMAMOTO Takashi proposed openstack/neutron master: extraroute_db: Remove _get_extra_routes_dict_by_router_id  https://review.openstack.org/41079405:40
*** vijaykc4 has joined #openstack-neutron05:42
*** Jack_Iv has quit IRC05:42
*** john-davidge has joined #openstack-neutron05:42
*** yamamoto_ has joined #openstack-neutron05:42
*** Jack_Iv has joined #openstack-neutron05:42
*** yamamoto has quit IRC05:45
*** john-davidge has quit IRC05:46
*** mickeys has joined #openstack-neutron05:50
*** ociuhandu has quit IRC05:55
*** thorst has joined #openstack-neutron05:56
*** gcb has joined #openstack-neutron05:57
*** cshastri has joined #openstack-neutron05:58
*** tuanluong has quit IRC06:00
*** thorst has quit IRC06:00
*** pcaruana has joined #openstack-neutron06:01
*** mosulica has quit IRC06:02
*** ociuhandu has joined #openstack-neutron06:05
*** dsneddon has quit IRC06:06
*** tbh has joined #openstack-neutron06:07
*** sticker has joined #openstack-neutron06:11
stickerHey, whats the best way to suggest another entry in the l3.filters file?  I had an issue recently on my CentOS setup that was caused by rootwrap being unable to kill a process and a line in l3.filters fixed it06:13
stickerit's not really code so not sure if it is really a *bug* per se06:13
*** pgadiya has joined #openstack-neutron06:13
*** ratailor is now known as Guest543206:14
*** tuanluong has joined #openstack-neutron06:14
*** sridharg has quit IRC06:17
*** amotoki has joined #openstack-neutron06:23
*** mosulica has joined #openstack-neutron06:24
*** radhikam has quit IRC06:24
*** ramishra has quit IRC06:25
*** ramishra has joined #openstack-neutron06:27
*** g3ek has quit IRC06:27
*** manheim has joined #openstack-neutron06:29
*** ociuhandu has quit IRC06:31
*** janki has joined #openstack-neutron06:33
*** rossella_s has quit IRC06:33
*** rossella_s has joined #openstack-neutron06:34
*** andreas_s has joined #openstack-neutron06:35
*** janki has quit IRC06:35
*** janki has joined #openstack-neutron06:36
*** suresh12 has quit IRC06:36
*** g3ek has joined #openstack-neutron06:36
*** zhhuabj has quit IRC06:41
*** jlinkes has joined #openstack-neutron06:41
*** fragatina has quit IRC06:42
*** ociuhandu has joined #openstack-neutron06:44
*** tesseract has joined #openstack-neutron06:48
openstackgerritMerged openstack/neutron-fwaas master: Added 'shared' attribute for firewall resources  https://review.openstack.org/45170506:48
*** jaosorior has joined #openstack-neutron06:49
*** vijaykc4 has quit IRC06:51
*** ramishra has quit IRC06:51
*** ramishra has joined #openstack-neutron06:53
*** mosulica has quit IRC06:54
*** voelzmo has joined #openstack-neutron06:54
*** amarao has joined #openstack-neutron06:56
*** thorst has joined #openstack-neutron06:57
*** mosulica has joined #openstack-neutron06:57
*** obondarev has joined #openstack-neutron06:58
*** voelzmo has quit IRC06:59
*** zhhuabj has joined #openstack-neutron06:59
*** thorst has quit IRC07:01
*** voelzmo has joined #openstack-neutron07:01
*** dmellado has joined #openstack-neutron07:08
*** mickeys has quit IRC07:08
*** jpena|off has joined #openstack-neutron07:08
*** reedip_ has quit IRC07:09
*** vijaykc4 has joined #openstack-neutron07:09
*** markvoelker has quit IRC07:12
*** ltomasbo|away has joined #openstack-neutron07:14
*** markstur has joined #openstack-neutron07:14
*** markvoelker has joined #openstack-neutron07:15
*** voelzmo has quit IRC07:15
*** nplanel has quit IRC07:16
*** markstur has quit IRC07:19
*** gcheresh has quit IRC07:22
*** korzen has joined #openstack-neutron07:22
*** ltomasbo|away is now known as ltomasbo07:22
*** vijaykc4 has quit IRC07:27
*** vijaykc4 has joined #openstack-neutron07:27
*** vijaykc4 has quit IRC07:28
*** vijaykc4 has joined #openstack-neutron07:28
*** vijaykc4 has quit IRC07:28
*** vijaykc4 has joined #openstack-neutron07:29
*** nplanel has joined #openstack-neutron07:29
*** sridharg has joined #openstack-neutron07:29
*** vijaykc4 has quit IRC07:30
*** vijaykc4 has joined #openstack-neutron07:30
*** vijaykc4 has quit IRC07:31
*** reedip has joined #openstack-neutron07:31
*** vijaykc4 has joined #openstack-neutron07:31
*** vijaykc4 has quit IRC07:32
*** hjensas has joined #openstack-neutron07:32
*** reedip has quit IRC07:32
*** vijaykc4 has joined #openstack-neutron07:32
*** vijaykc4 has quit IRC07:32
*** oreillyd has joined #openstack-neutron07:33
*** oreillyd_ has joined #openstack-neutron07:33
*** brault has joined #openstack-neutron07:35
*** adriant has quit IRC07:35
*** mosulica has quit IRC07:36
*** reedip has joined #openstack-neutron07:36
*** brault has quit IRC07:36
*** neiljerram has joined #openstack-neutron07:37
openstackgerritAnn Taraday proposed openstack/neutron master: New enginefacade for ports and sg groups  https://review.openstack.org/40471507:40
*** manheim has quit IRC07:42
*** manheim has joined #openstack-neutron07:43
*** voelzmo has joined #openstack-neutron07:43
*** john-davidge has joined #openstack-neutron07:43
*** gcb has quit IRC07:46
*** brault has joined #openstack-neutron07:48
*** john-davidge has quit IRC07:48
*** lpetrut has joined #openstack-neutron07:48
*** mosulica has joined #openstack-neutron07:48
*** rmart04 has joined #openstack-neutron07:49
openstackgerritzhichao zhu proposed openstack/neutron master: Fix some reST field lists in docstrings  https://review.openstack.org/44988207:51
*** jlibosva has joined #openstack-neutron07:54
*** anilvenkata is now known as anilvenkata_afk07:57
*** thorst has joined #openstack-neutron07:58
*** TMM has quit IRC07:59
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-neutron08:01
*** Jack_Iv has quit IRC08:02
*** Jack_Iv has joined #openstack-neutron08:02
*** rossella_s has quit IRC08:02
*** Jack_Iv has quit IRC08:03
*** Jack_Iv_ has joined #openstack-neutron08:03
*** Jack_Iv_ has quit IRC08:03
*** xinliang has joined #openstack-neutron08:03
*** xinliang has quit IRC08:03
*** xinliang has joined #openstack-neutron08:03
*** Jack_Iv has joined #openstack-neutron08:03
*** vijaykc4 has joined #openstack-neutron08:06
*** rossella_s has joined #openstack-neutron08:06
*** tmorin has joined #openstack-neutron08:06
*** Jack_Iv has quit IRC08:08
*** rossella_s has quit IRC08:08
*** mickeys has joined #openstack-neutron08:09
*** efoley has joined #openstack-neutron08:12
*** gcb has joined #openstack-neutron08:12
*** mickeys has quit IRC08:14
*** bfernando has joined #openstack-neutron08:15
*** efoley_ has joined #openstack-neutron08:17
*** rossella_s has joined #openstack-neutron08:17
*** thorst has quit IRC08:17
*** MoguCloud1 has joined #openstack-neutron08:17
*** Jack_Iv has joined #openstack-neutron08:18
*** MoguCloud has quit IRC08:19
*** MoguCloud1 is now known as MoguCloud08:19
openstackgerritDavid Shaughnessy proposed openstack/neutron master: Implement QoS OpenFlowFunction for DSCP  https://review.openstack.org/39968008:20
*** efoley has quit IRC08:20
*** ralonsoh has joined #openstack-neutron08:21
*** aojea has joined #openstack-neutron08:26
*** davidsha has joined #openstack-neutron08:33
*** Jack_Iv has quit IRC08:33
*** Jack_Iv has joined #openstack-neutron08:34
*** suresh12 has joined #openstack-neutron08:37
*** Jack_Iv has quit IRC08:39
*** suresh12 has quit IRC08:41
openstackgerritYAMAMOTO Takashi proposed openstack/neutron master: DO NOT MERGE: flush_on_subtransaction=True  https://review.openstack.org/45515908:42
*** tritri has joined #openstack-neutron08:42
*** john-davidge has joined #openstack-neutron08:42
openstackgerritYAMAMOTO Takashi proposed openstack/networking-midonet master: TEST FOR CI DO NOT REVIEW  https://review.openstack.org/19938708:42
tritriHi there, I'm looking for someone that could help with the network part of my openstack ocata installation, I can't figure out how to correctly create the network provider and selfservice, please ping me... I don't know if I can bother this chan with that though ^^08:44
*** iranzo has quit IRC08:47
*** gcheresh has joined #openstack-neutron08:49
*** pjm6 has quit IRC08:49
*** ociuhandu has quit IRC08:51
*** janki has quit IRC08:53
*** iranzo has joined #openstack-neutron08:54
*** iranzo has quit IRC08:54
*** iranzo has joined #openstack-neutron08:54
*** ircuser-1 has joined #openstack-neutron08:57
davidshareedip: ping08:58
*** TMM has joined #openstack-neutron08:59
*** ociuhandu has joined #openstack-neutron09:00
reedipdavidsha : hi09:00
reedipwhazzup ?09:00
davidshareedip: hey how are you keeping?09:01
reedipdavidsha : just came back ... I am fine, how are u ?09:01
reedip:)09:01
davidshareedip: good, just checking emails and reviewing patches!09:01
reedipdavidsha : oh good .. I am just starting my monday :) ... have some patches to push09:02
davidshareedip: You attend the Tap-aas meetings? I'm just wondering when there on.09:02
*** masaki has quit IRC09:03
davidshareedip: Same had things to rebase, not too bad just waiting on jenkins to get back now...09:03
reedipdavidsha : its on Wednesday . Its at about 0630 UTC09:04
davidshareedip: as opposed to 1830 UTC?09:04
reedipyeah ., 0630 UTC09:05
reediptoo early for you I guess davidsha09:05
davidshakk, No I'll be up just wanted to make sure. Just wanted to plug the Flow manager spec, but a rebase up last week but no reviews so far.09:06
reedipdavidsha :ohh , wrt TaaS ?09:07
reedipI have the spec in my ToDo list, will review tonight09:07
davidshareedip: Thanks, The spec had more or less been approved it was just waiting for armando to review but it went into merge conflict and was forgotten.09:08
reedipoh ok09:09
*** mickeys has joined #openstack-neutron09:10
reedipdavidsha : so you are looking to use TaaS in the spec?09:10
*** tuanluong has quit IRC09:10
davidshareedip: Taas is mentioned in the spec and was one of the use cases.09:13
reedipyeah, we discussed the same in the PTG09:13
*** thorst has joined #openstack-neutron09:14
*** ociuhandu has quit IRC09:14
*** mickeys has quit IRC09:14
tritrisorry to bother you, but would any of you guys have time to help me understand how to configure openstack's network they way I would like to ? I can't seem to figure it out09:15
davidshatritri: Try #openstack , this irc is for developers.09:16
tritrioh ok, I was wondering about that =p09:16
tritrigood day =)09:16
*** tritri has left #openstack-neutron09:16
reedipralonsoh : ping09:17
*** pjm6 has joined #openstack-neutron09:17
reedipdavidsha : some patches  in neutron-lib and neutron-fwaas are not showing Jenkins results09:17
reedipand the patches were updated 3-4 days ago09:17
*** ociuhandu has joined #openstack-neutron09:18
reedipis there any known issue?09:18
davidshareedip: give me a sec I'll try and check09:18
*** thorst has quit IRC09:18
ralonsohreedip: pong09:19
reedipralonsoh : regarding https://review.openstack.org/#/c/453110/209:19
reedipralonsoh : Firewall just needs the keys, they would be converted into key-value pair by the agent in neutron-fwaas09:20
reedipthats why we do not need the dict09:20
ralonsohreedip: I know. list(constants.IPTABLES_PROTOCOL_MAP.keys())09:20
ralonsohreedip: what I'm saying is to use this instead the generator you are using09:21
ralonsohreedip: that's all09:21
reedipand regarding movement to neutron-lib/constants, I am not sure if they should be moved as they are not global constants but local to firewall. So I thinok we can move the constants to neutron-lib/api/definitions/constants.py09:21
ralonsohreedip: I agree. If there is other extension using it, maybe you can propose it. But now keep it there09:22
reedipoh , ok ralonsoh, I would also need the None, but I guess I can just do list(constants.IPTABLES_PROTOCOL_MAP.keys()) + [None]09:22
ralonsohreedip: yes, that was in my comment09:22
ralonsohreedip:     PROTOCOL_VALUES = list(constants.IPTABLES_PROTOCOL_MAP.keys()) + [None]09:22
reedipralonsoh : by the way, are we getting any advantage of using the method you stated over my method? I would appreciate if you can guide me09:22
*** limao has quit IRC09:23
ralonsohreedip: faster and cleaner? But I need to check if this is faster09:23
reedipdavidsha : thanks for the recheck but I cant see it on Zuul....09:23
ralonsohreedip: give me 2 mins09:23
reedipralonsoh : sure09:23
reedipsomething is wrong ralonsoh ( maybe my patches arent going to Zuul :P )09:24
reedipsorry that was for davidsha ^^^\09:24
ralonsohreedip: which one?09:24
davidshareedip: Looks like the tests all stopped running sometime 2 days ago http://grafana.openstack.org/dashboard/db/neutron-lib-failure-rate09:25
reedipdavidsha : thats weird ... havent any bug been logged for this ?09:27
davidshareedip: doesn't look like it09:28
davidshakevinbenton: ping09:28
reedipdavidsha, kevinbenton : last patch to have been addressed by neutron-lib is https://review.openstack.org/#/c/404488/09:29
*** sambetts|afk is now known as sambetts09:29
openstackgerritLucas Alvares Gomes proposed openstack/networking-ovn master: Docs: Do not turn warnings into errors  https://review.openstack.org/45518209:32
openstackgerritLujin Luo proposed openstack/neutron master: [WIP] Integration of Router OVO  https://review.openstack.org/42186309:34
openstackgerritReedip proposed openstack/neutron-lib master: Add new protocols in Firewalls  https://review.openstack.org/45311009:35
reedipdavidsha : should we log a bug ?09:35
*** janki has joined #openstack-neutron09:42
reedipralonsoh : one more query related to https://review.openstack.org/#/c/442375/09:43
*** Jack_Iv has joined #openstack-neutron09:44
reedipralonsoh : I think there is no additional TC to be added as per your last comment09:44
openstackgerritLucas Alvares Gomes proposed openstack/networking-ovn master: Docs: Uses DevStack script to create the user  https://review.openstack.org/45518609:44
*** suresh12 has joined #openstack-neutron09:45
*** suresh12 has quit IRC09:45
*** suresh12 has joined #openstack-neutron09:45
ralonsohreedip: you are modifying update_policy_rule and create_policy_rule, but you are only testing the update function09:46
*** jhershbe has joined #openstack-neutron09:46
davidshareedip: sorry, I'd wait till kb responds.09:48
*** trinaths has left #openstack-neutron09:51
*** bzhao has quit IRC09:55
*** bzhao has joined #openstack-neutron09:56
*** aarefiev_afk is now known as aarefiev09:59
*** vijaykc4 has quit IRC10:00
*** john-dav_ has joined #openstack-neutron10:00
*** john-davidge has quit IRC10:00
*** john-dav_ is now known as john-davidge10:01
*** iwamoto has quit IRC10:01
*** obondarev has quit IRC10:02
*** boden has joined #openstack-neutron10:05
reedipralonsoh : okay , so I need to add the create_policy , right?10:10
*** sdague has joined #openstack-neutron10:10
reedipdavidsha : ok, no issues10:10
*** mickeys has joined #openstack-neutron10:11
*** vijaykc4 has joined #openstack-neutron10:11
ralonsohreedip: I think so. You need to add those tests too10:11
reedipralonsoh : but one question.10:11
reedipralonsoh : can we link a QoS rule during QoS policy creation ?10:11
reedipI mean can we create a QoS policy while passing the rule in it? the test cases dont seem to do so as of now.10:12
ralonsohreedip: no, you need to create the QoS policy first. Then you can create a rule associated to this policy10:14
*** hoangcx has quit IRC10:15
reedipralonsoh : but thats like Updating the QoS policy , right :) ( In a way you are updating it )10:15
*** mickeys has quit IRC10:16
*** gcb has quit IRC10:16
reedipralonsoh : by the way, I have already updated the test_create_qos_policy funtion in the current patch10:17
*** bobmel_ has quit IRC10:18
ralonsohreedip: let me check the tests again. But I think you are never using QosPlugin.create_policy_rule10:18
reedipralonsoh : you can check test_create_policy_rule10:18
*** abregman has quit IRC10:19
reedipI am mocking check_bandwidth_limit_rule and returning None , because there are no rules associuated to the the Policy at creation time10:19
reedips/check_bandwidth_limit_rule/check_bandwidth_rule_conflict10:19
*** vijaykc4 has quit IRC10:21
*** nicolasbock has joined #openstack-neutron10:22
*** reedip has quit IRC10:23
*** reedip has joined #openstack-neutron10:23
*** bobmel has joined #openstack-neutron10:24
ralonsohreedip: you can add a new rule (e.g. max) to a policy with an existing rule (e.g. min). In this case, you can check your rule validator10:24
slaweqajo: hello10:25
reedipralonsoh : but isnt it updating the policy ?10:25
reedipI am doing this in the update_policy tests10:25
*** ociuhandu has quit IRC10:25
slaweqajo: do You remember about review patch with "improved rules validation"?10:25
*** cuongnv has quit IRC10:26
ralonsohreedip: yes, you are right. My point is you never use QosPlugin.create_policy_rule. Don't worry, I think this is better with an example. Can I submit a new PS with some examples in you patch?10:28
*** jhershbe has quit IRC10:28
ralonsohreedip: if you don't mind10:28
openstackgerritReedip proposed openstack/neutron master: Check DefaultPrefixLength in Subnetpools  https://review.openstack.org/44798310:28
reedipralonsoh : no I dont mind. Please do it, will help me understand what I am missing out10:28
reedip:)10:28
ralonsohreedip: thanks!10:28
reedipthanks for your help10:28
*** bobmel has quit IRC10:29
*** bobmel has joined #openstack-neutron10:29
openstackgerritReedip proposed openstack/neutron-lib master: Add CIDR for canonical format conversion  https://review.openstack.org/43252110:32
openstackgerritReedip proposed openstack/neutron master: Add ipv6 canonical address converter to API  https://review.openstack.org/26728310:32
*** NikhilS has quit IRC10:33
openstackgerritReedip proposed openstack/neutron master: Pass the complete info in sg/rules db into PRECOMMIT_XXX callback  https://review.openstack.org/44842010:33
*** rossella_s has quit IRC10:33
*** rossella_s has joined #openstack-neutron10:34
*** udesale has quit IRC10:37
*** psahoo has quit IRC10:38
*** Jack_Iv has quit IRC10:39
*** Jack_Iv has joined #openstack-neutron10:39
*** gcheresh has quit IRC10:40
*** psahoo has joined #openstack-neutron10:41
*** obondarev has joined #openstack-neutron10:42
*** vijaykc4 has joined #openstack-neutron10:44
*** wu_ng has quit IRC10:46
*** masaki has joined #openstack-neutron10:48
*** mdnadeem has quit IRC10:48
*** masaki has quit IRC10:48
*** markstur has joined #openstack-neutron10:50
*** Jack_Iv has quit IRC10:51
*** Jack_Iv has joined #openstack-neutron10:52
*** mdnadeem has joined #openstack-neutron10:53
*** markstur has quit IRC10:55
*** ociuhandu has joined #openstack-neutron10:55
*** Jack_Iv has quit IRC10:56
*** vijaykc4 has quit IRC10:56
*** jhershbe has joined #openstack-neutron10:58
*** bobmel has quit IRC11:04
*** sdague_ has joined #openstack-neutron11:04
*** ZZelle_ has quit IRC11:06
*** jamesdenton has joined #openstack-neutron11:07
openstackgerritReedip proposed openstack/neutron-fwaas master: Use neutron-lib definition of neutron-fwaas API  https://review.openstack.org/42147211:07
*** jhershbe has quit IRC11:08
*** venki1 has joined #openstack-neutron11:08
openstackgerritThomas Morin proposed openstack/networking-bagpipe master: Add fullstack tests framework  https://review.openstack.org/40800811:11
*** suresh12 has quit IRC11:11
*** suresh12 has joined #openstack-neutron11:12
venki1hi guys, has anyone tried android as instance in Openstack ?11:12
*** jamesdenton has quit IRC11:12
*** Jack_Iv has joined #openstack-neutron11:13
*** Jack_Iv has quit IRC11:13
*** Jack_Iv has joined #openstack-neutron11:13
*** Jack_Iv has quit IRC11:15
*** lucasagomes is now known as lucas-hungry11:15
*** Jack_Iv has joined #openstack-neutron11:15
*** ZZelle has joined #openstack-neutron11:15
*** thorst has joined #openstack-neutron11:15
*** ZZelle is now known as Guest8586711:16
*** suresh12 has quit IRC11:16
*** thorst has quit IRC11:20
*** jamielennox|away is now known as jamielennox11:25
*** gcheresh has joined #openstack-neutron11:26
*** alegacy has quit IRC11:26
*** jprovazn has joined #openstack-neutron11:32
*** nplanel has quit IRC11:33
*** vijaykc4 has joined #openstack-neutron11:34
openstackgerritThomas Morin proposed openstack/networking-bagpipe master: bagpipe-bgp: follow exabgp peer down change  https://review.openstack.org/45527311:38
*** yedongcan has left #openstack-neutron11:38
*** Guest70770 is now known as rook11:39
*** anilvenkata_afk is now known as anilvenkata11:43
*** venki1 has quit IRC11:53
*** janki has quit IRC11:55
*** thorst has joined #openstack-neutron11:55
*** stevemar has joined #openstack-neutron11:57
*** mickeys has joined #openstack-neutron12:05
*** venki has joined #openstack-neutron12:08
*** mickeys has quit IRC12:09
*** markvoelker has quit IRC12:10
*** vijaykc4 has quit IRC12:12
*** lucas-hungry is now known as lucasagomes12:12
*** vijaykc4 has joined #openstack-neutron12:13
*** ranjithd has joined #openstack-neutron12:17
*** ltomasbo is now known as ltomasbo|away12:19
*** ltomasbo|away is now known as ltomasbo12:21
*** vks1 has quit IRC12:23
*** markvoelker has joined #openstack-neutron12:25
*** zhurong has quit IRC12:26
*** hjensas has quit IRC12:26
*** pgadiya has quit IRC12:26
*** lujinluo has quit IRC12:27
*** gouthamr has joined #openstack-neutron12:28
*** haleyb has quit IRC12:32
slaweqralonsoh: hello12:32
slaweqralonsoh: I have question about https://review.openstack.org/#/c/449831/7/neutron/objects/qos/policy.py12:32
slaweqand Your comment there12:32
slaweqdo You think it is worth to make this small fix in separate patch to have it merger faster?12:33
slaweqI can do such small patch12:33
*** mriedem has joined #openstack-neutron12:35
ralonsohslaweq: if you prefer that, you can create a bug for this. For sure this small patch will merge fast. The bug is evident12:36
*** catintheroof has joined #openstack-neutron12:36
*** ayogi has quit IRC12:37
openstackgerritAnn Taraday proposed openstack/neutron master: [WIP]Use reader and writer for routers and agents  https://review.openstack.org/39612112:37
*** tbh has quit IRC12:37
*** radhikam has joined #openstack-neutron12:38
*** tbachman has quit IRC12:38
*** tbachman has joined #openstack-neutron12:38
slaweqralonsoh: ok, thx. I will do it today12:38
ralonsohslaweq: thank you!12:38
openstackgerritMerged openstack/ovsdbapp master: Refactor to give other schemas a place to live  https://review.openstack.org/45292412:44
*** psahoo has quit IRC12:49
*** gcb has joined #openstack-neutron12:50
*** Guest5432 has quit IRC12:53
*** rmart04_ has joined #openstack-neutron12:55
*** rmart04 has quit IRC12:56
*** rmart04_ is now known as rmart0412:56
*** gcheresh has quit IRC12:57
*** gcheresh has joined #openstack-neutron12:58
openstackgerritDaniel Mellado proposed openstack/networking-ovn master: Enhance local.conf.sample documentation  https://review.openstack.org/45531113:01
*** fragatina has joined #openstack-neutron13:02
*** rmart04 has quit IRC13:05
openstackgerritRussell Bryant proposed openstack/networking-ovn master: docs: Update distro version note.  https://review.openstack.org/45531413:08
*** lyan has joined #openstack-neutron13:08
*** rmart04 has joined #openstack-neutron13:08
openstackgerritRussell Bryant proposed openstack/networking-ovn master: docs: Remove dpdk-snapshot repo.  https://review.openstack.org/45531513:10
*** rmart04 has quit IRC13:10
*** gkadam has quit IRC13:10
*** lyan has quit IRC13:12
*** lyan has joined #openstack-neutron13:12
*** tonytan4ever has joined #openstack-neutron13:14
openstackgerritSlawek Kaplonski proposed openstack/neutron master: [WIP] Add QoS bandwidth limit for instance ingress traffic  https://review.openstack.org/44983113:15
*** claudiub has joined #openstack-neutron13:15
*** haleyb has joined #openstack-neutron13:15
openstackgerritCarlos Goncalves proposed openstack/neutron master: Port data plane status extension implementation  https://review.openstack.org/42434013:16
*** mdnadeem has quit IRC13:18
*** baoli has joined #openstack-neutron13:20
*** swebster has quit IRC13:20
openstackgerritRussell Bryant proposed openstack/networking-ovn master: Support connecting OVN DB over SSL  https://review.openstack.org/42496913:22
*** rmart04 has joined #openstack-neutron13:23
*** Administrator_ has quit IRC13:23
*** Administrator_ has joined #openstack-neutron13:24
*** stanzgy has quit IRC13:25
*** rmart04 has quit IRC13:25
*** Guest85867 is now known as ZZelle_13:26
*** ZZelle_ is now known as ZZelle13:26
*** rmart04 has joined #openstack-neutron13:28
bodenFYI: neutron-lib 1.4.0 was recently released: https://pypi.python.org/pypi/neutron-lib/1.4.013:30
*** cleong has joined #openstack-neutron13:30
*** lewo has quit IRC13:30
*** lewo has joined #openstack-neutron13:30
*** chlong has joined #openstack-neutron13:31
openstackgerritMerged openstack/networking-ovn master: Docs: Uses DevStack script to create the user  https://review.openstack.org/45518613:31
*** tbachman_ has joined #openstack-neutron13:31
*** rmart04 has quit IRC13:32
*** rmart04 has joined #openstack-neutron13:32
*** tbachman has quit IRC13:33
*** tbachman_ is now known as tbachman13:33
*** openstackgerrit has quit IRC13:33
*** erolg has joined #openstack-neutron13:34
*** janzian has joined #openstack-neutron13:34
*** gcheresh has quit IRC13:35
*** rmart04_ has joined #openstack-neutron13:37
*** rmart04 has quit IRC13:38
*** rmart04_ is now known as rmart0413:38
slaweqralonsoh: https://bugs.launchpad.net/neutron/+bug/168144013:48
openstackLaunchpad bug 1681440 in neutron "QoS policy object can't be suitable with 1.2 version of object" [Undecided,New] - Assigned to Slawek Kaplonski (slaweq)13:48
*** crushil has joined #openstack-neutron13:51
ralonsohslaweq: I'll review the patch as soon as you submit it13:51
*** trevormc has joined #openstack-neutron13:52
*** sdague has quit IRC13:52
*** baoli has quit IRC13:52
*** xinliang has quit IRC13:52
*** xinliang has joined #openstack-neutron13:53
*** vijaykc4 has quit IRC13:54
*** kbringard has joined #openstack-neutron13:55
*** sdague has joined #openstack-neutron13:56
*** sdague__ has joined #openstack-neutron13:56
*** MoguCloud1 has joined #openstack-neutron14:02
*** MoguCloud has quit IRC14:02
*** MoguCloud1 is now known as MoguCloud14:02
*** baoli has joined #openstack-neutron14:03
*** dave-mccowan has joined #openstack-neutron14:04
slaweqralonsoh: thx14:04
slaweqI will send this patch today for sure14:05
*** baoli has quit IRC14:08
*** radhikam has quit IRC14:08
*** dave-mccowan has quit IRC14:09
*** openstackgerrit has joined #openstack-neutron14:10
openstackgerritTerry Wilson proposed openstack/ovsdbapp master: Add unit tests from Neutron  https://review.openstack.org/45436114:11
*** baoli has joined #openstack-neutron14:12
*** suresh12 has joined #openstack-neutron14:12
*** sdague has quit IRC14:12
*** sdague__ is now known as sdague14:13
trevormcis there any way to do traffic-protection, like allowing or disabling unicast, multicast, or broadcast? I saw this wiki but found it wasn't implemented in neutron, https://wiki.openstack.org/wiki/Neutron/TrafficProtection14:14
openstackgerritSlawek Kaplonski proposed openstack/neutron master: Make QoS policy object compatible with versions 1.2 and higher  https://review.openstack.org/45533814:15
slaweqralonsoh: ^^ here You go :)14:15
ralonsohslaweq: perfect14:16
*** ankur-gupta-f1 has joined #openstack-neutron14:17
*** tidwellr has joined #openstack-neutron14:17
*** ataraday_ has joined #openstack-neutron14:22
*** zkassab has joined #openstack-neutron14:22
*** MoguCloud has quit IRC14:22
*** MoguCloud has joined #openstack-neutron14:23
*** Drankis has joined #openstack-neutron14:23
*** jlinkes has quit IRC14:26
*** markstur has joined #openstack-neutron14:27
*** rkukura has joined #openstack-neutron14:27
*** lucasxu has joined #openstack-neutron14:27
*** ihrachys has joined #openstack-neutron14:27
*** jlinkes has joined #openstack-neutron14:28
*** fragatina has quit IRC14:29
*** Drankis has quit IRC14:29
*** ihrachys has quit IRC14:30
*** ihrachys has joined #openstack-neutron14:30
*** markstur has quit IRC14:31
*** rossella_s has quit IRC14:33
*** rossella_s has joined #openstack-neutron14:34
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron master: Add check for Bandwidth Limit Rules  https://review.openstack.org/44237514:35
*** Jack_Iv has quit IRC14:38
*** Jack_Iv has joined #openstack-neutron14:38
ralonsohreedip: ^^14:39
*** hjensas has joined #openstack-neutron14:40
*** suresh12 has quit IRC14:41
*** vks1 has joined #openstack-neutron14:46
ralonsohtrevormc: I think this is an old spec (feb 14), not accepted14:46
trevormctrue, but I was wondering if it was implemented through some other agent, like firewall or l2pop14:46
ralonsohtrevormc: not exactly. You have some protections in firewall (arp, mac-spoofing, etc)14:48
ralonsohtrevormc: but not this parameters (unicast, multicast, broadcast)14:48
ralonsohtrevormc: I suppose this if for the VF agent14:48
trevormcralonsoh, thanks yeah it is. I was in the last drivers meeting and they said I should derive my API from existing ones.14:49
trevormcso for those rules, they could go into secgroups or firewall I suppose.14:49
ralonsohfirewall will read from secgroups14:50
*** vks1 has quit IRC14:50
*** baoli has quit IRC14:51
*** armax has joined #openstack-neutron14:52
*** amarao has quit IRC14:55
*** korzen has quit IRC14:55
jlibosvaihrachys: hi, do you have a minute to consult the dhcp rpc notification ignored? You said something about ignoring message if host is different?14:56
*** scottda has joined #openstack-neutron14:57
*** rmart04 has quit IRC14:58
*** yamahata has quit IRC15:00
*** yamahata has joined #openstack-neutron15:00
*** suresh12 has joined #openstack-neutron15:00
ihrachysjlibosva, I think things like https://github.com/openstack/neutron/blob/master/neutron/agent/dhcp/agent.py#L365 were skipping ports if not hosted or smth15:01
ihrachyswould need time to dig15:01
ihrachysin a meeting now15:01
*** nplanel has joined #openstack-neutron15:01
*** blogan has joined #openstack-neutron15:01
*** manheim has quit IRC15:01
erolg hi everyone, i am try to run brocade vrouter neutron plugin. When I try to start, i am getting "no such option in group DEFAULT: nova_admin_auth_url" from oslo_config. I would say it is deprecated parameter but how can i reuse it?15:01
*** fnaval has joined #openstack-neutron15:02
*** rcernin has quit IRC15:03
*** fnaval_ has joined #openstack-neutron15:04
*** baoli has joined #openstack-neutron15:04
*** fnaval__ has joined #openstack-neutron15:06
*** vks1 has joined #openstack-neutron15:06
*** fnaval has quit IRC15:08
ThiagoCMCHey guys, anyone using Ocata's Networking OVN with both GENEVE and Provider Networks on top of DPDK?15:08
*** aojea has quit IRC15:09
*** udesale has joined #openstack-neutron15:09
*** nplanel has quit IRC15:09
*** fnaval_ has quit IRC15:10
*** dosaboy has quit IRC15:10
*** baoli has quit IRC15:10
*** voelzmo has quit IRC15:13
davidshaThiagoCMC: might be better to ask this in #openstack , This chat is for developers.15:13
*** crushil has quit IRC15:13
*** voelzmo has joined #openstack-neutron15:13
*** chyka has joined #openstack-neutron15:14
davidshaerolg: try asking in #openstack , this seems like a deployment issue rather than development.15:16
*** mosulica has quit IRC15:16
ZZelle#lxcontainers15:16
erolgdavidsha, thanks.15:17
davidshaerolg: no problem.15:17
ralonsohyamamoto_: hi15:18
*** voelzmo has quit IRC15:18
*** udesale has quit IRC15:18
*** grantma__ has joined #openstack-neutron15:19
*** wolverineav has joined #openstack-neutron15:19
*** xiaohhui has quit IRC15:20
*** anilvenkata has quit IRC15:21
*** ventifus has joined #openstack-neutron15:22
*** sridharg has quit IRC15:22
*** dosaboy has joined #openstack-neutron15:23
*** lyan has quit IRC15:23
openstackgerritBrian Haley proposed openstack/neutron master: Fix duplicated sg rules check for IPv6 ICMP  https://review.openstack.org/42767015:23
*** chyka has quit IRC15:24
*** chyka has joined #openstack-neutron15:25
*** vijaykc4 has joined #openstack-neutron15:26
vks1hi folks, I am getting this error with ovs-agent: Exception: Could not retrieve schema from tcp:127.0.0.1:6640: Connection refused15:26
vks1Unable to execute ['ovs-vsctl', '--timeout=10', '--oneline', '--format=json', '--', '--id=@manager', 'create', 'Manager', 'target="ptcp:6640:127.0.0.1"', '--', 'add', 'Open_vSwitch', '.', 'manager_options', '@manager', '--', 'set', 'Manager', 'ptcp:6640:127.0.0.1', 'inactivity_probe=10000']. Exception: Exit code: -14; Stdin: ; Stdout: ; Stderr: 2017-04-10T15:24:35Z|00002|fatal_signal|WARN|terminating with signal 14 (Alarm clock)15:27
*** aarefiev is now known as aarefiev_afk15:27
*** vijaykc4 has quit IRC15:30
*** fnaval has joined #openstack-neutron15:31
davidshavks1: Is the agent crashing after the error or does it just keep going?15:31
vks1davidsha: I am using devstack. Its crashing and agent is also not running15:32
davidshavks1: The problem is you can only have one openvswitch manager and you're old one seems to have not been deleted, try unstacking and see if that helps15:33
vks1davidsha: I have tried that but of no use15:34
*** fnaval__ has quit IRC15:35
davidshavks1: try sudo ovs-vsctl del-manager15:35
*** thorst is now known as thorst_afk15:35
davidshawhen you try and start the agent it should create a new manager now.15:36
*** crushil has joined #openstack-neutron15:36
vks1davidsha: let me try15:37
*** mlavalle has joined #openstack-neutron15:37
*** cshastri has quit IRC15:38
*** vijaykc4 has joined #openstack-neutron15:38
vks1davidsha: deleted , will rebuild15:38
davidshakk15:38
*** TMM has quit IRC15:40
*** baoli has joined #openstack-neutron15:40
*** jlinkes has quit IRC15:41
*** oreillyd has quit IRC15:42
*** oreillyd_ has quit IRC15:42
vks1davidsha: this is weird , same error. error logs http://paste.openstack.org/show/606059/15:45
*** lpetrut has quit IRC15:47
*** obondarev has quit IRC15:48
*** obondarev has joined #openstack-neutron15:49
*** manheim has joined #openstack-neutron15:50
*** tidwellr has quit IRC15:52
*** tidwellr has joined #openstack-neutron15:53
davidshavks1: Are you working inside a proxy?15:53
vks1davidsha: no15:54
davidshacan you paste "ovs-vsctl get-manager"?15:54
*** manheim has quit IRC15:55
ralonsohihrachys: hi15:55
ihrachysralonsoh, hi15:56
ralonsohihrachys: I saw the comment in https://review.openstack.org/#/c/454220/15:56
ihrachysoh right. and I always mix your nick with rodrigods so I pinged a wrong person in a meeting ;)15:56
ralonsohihrachys: sorry for that. I don't understand you question15:57
vks1davidsha: it looks OK, ptcp:6640:127.0.0.115:57
ihrachysralonsoh, first step would be updating the bug report to talk in terms of use cases and what you try to solve15:57
*** seanatcisco has joined #openstack-neutron15:57
*** iyamahat has joined #openstack-neutron15:57
*** sterdnotshaken has joined #openstack-neutron15:58
ihrachysatm it's worded in such a way that puzzles some folks (including me) about what's the end result from user perspective15:58
ralonsohihrachys: ok, mainly to fix the problem we had with QoS objects15:58
ihrachysralonsoh, a patch showing the issue may have been handy15:59
*** marst has joined #openstack-neutron15:59
davidshavks1: thats the problem, try "ovs-vsctl del-manager ptcp:6640:127.0.0.1"15:59
ralonsohihrachys: ? but you make a comment in the patch15:59
ralonsohihrachys: https://review.openstack.org/#/c/454220/15:59
davidshaand make sure it deleted with "ovs-vsctl get-manager"15:59
vks1davidsha: ok, but I deleted15:59
davidshaDoes it show there is no manager?16:00
*** lucasxu has quit IRC16:00
ihrachysralonsoh, yes I do. I ask for explanation of what you try to solve (in commit message or in the bug report)16:00
ralonsohihrachys: ok, I'll amend the bug description16:01
*** mickeys has joined #openstack-neutron16:01
ihrachysralonsoh, oh you mean that's the patch that exposes the error? I am not sure I understand. this is the patch that refactors the code16:01
ihrachysbut not that shows there is anything wrong with current code16:01
ihrachysralonsoh, one thing that I don't get about the bug report, it talks in terms of micro-versioning that allegedly is used in neutron, but there is no such thing in neutron (assuming we talk about the same - api micro-versioning)16:02
ralonsohihrachys: I know neutron doesn't use it. So, so you think the bug is valid?16:03
*** sterdnotshaken1 has joined #openstack-neutron16:03
*** XinBai has joined #openstack-neutron16:03
ihrachysralonsoh, I don't understand the use case that fails, so I can't judge right away16:04
*** Jack_Iv has quit IRC16:04
*** Jack_Iv has joined #openstack-neutron16:04
ralonsohihrachys: ok. If I'm not able to find this case, I'll mark this bug as invalid.16:04
*** mickeys has quit IRC16:05
*** lucasagomes is now known as lucas-afk16:05
ihrachysok. don't get me wrong, I just want to understand what spurred davidsha reporting it and you coding :)16:05
*** sterdnotshaken has quit IRC16:06
davidshaihrachys: Hey, just on this bug, someone was telling me that OvO should be used to modify the field parameter rather than throwing exceptions. an example being: https://github.com/openstack/nova/blob/c9eb9530314d047f5013941ebcfd5ef0192a9dc3/nova/objects/network.py#L9016:06
vks1davidsha: It failed I checked "get-manager" and there was nothing16:06
*** janzian has quit IRC16:07
vks1davidsha: it failed with same error16:07
ihrachysdavidsha, nova uses the library in a different way16:07
ihrachysI think16:07
davidshavks1: I'm not sure then I'm afraid.16:07
*** andreas_s has quit IRC16:07
ihrachyshm, sec, actually...16:07
davidshaihrachys: kk16:07
vks1davidsha: thanks I will debug further16:08
davidshavks1: kk, there is also #openstack that might be of some help. good luck!16:08
rodrigodsihrachys, ralonsoh :)16:08
ihrachysdavidsha, ok probably the main piece of the patch is https://review.openstack.org/#/c/454220/2/neutron/objects/qos/policy.py@240?16:08
ihrachysyes, it probably makes sense to be more liberal there16:09
*** mickeys has joined #openstack-neutron16:09
ralonsohihrachys, davidsha: yes, and the rule append process16:09
ralonsohihrachys, davidsha: to remove rules not supported by the current backend16:09
*** dsneddon has joined #openstack-neutron16:09
ihrachysfor rules, we need to think if that's ok to leave part of policy rules not enforced on a port16:10
davidshaihrachys: When I was reporting the bug I was referring to https://review.openstack.org/#/c/454220/2/neutron/objects/qos/rule.py however ralonsoh said that it can't be modified in the way I was thinking.16:10
davidshaWhen I reported the bug.16:10
*** lyan has joined #openstack-neutron16:11
*** suresh12 has quit IRC16:12
ihrachysI guess the patch is actually fine (maybe not so much for ruletype but that's details); so maybe ralonsoh just reword the bug report to talk about how neutron fails to apply a qos policy with null description for old agents16:12
ihrachysthat would be a clear use case16:12
ralonsohihrachys: perfect!16:13
*** tidwellr has quit IRC16:13
ihrachysdata plane should not silently break on description being set to null16:13
ihrachysfor rules, we will assess separately16:13
ihrachysI would go as far as to say those are separate bugs16:13
ihrachysbut that's just me16:13
ralonsohihrachys: ok, to treat rules I'll open other bug16:14
ihrachysperfect16:14
ihrachysand then we can speed up landing of description change since it should be very simple16:14
*** reedip_ has joined #openstack-neutron16:15
*** ankur-gupta-f1 has quit IRC16:17
*** obondarev has quit IRC16:21
*** ltomasbo is now known as ltomasbo|away16:22
*** tmorin has quit IRC16:22
*** tidwellr has joined #openstack-neutron16:23
openstackgerritOctave Orgeron proposed openstack/neutron master: Enables MySQL Cluster Support for Neutron  https://review.openstack.org/44613616:24
*** vijaykc4 has quit IRC16:26
*** davidsha has quit IRC16:26
openstackgerritIgor Duarte Cardoso proposed openstack/networking-sfc master: Replace space with underscore in doc file  https://review.openstack.org/45538116:28
*** janzian has joined #openstack-neutron16:29
*** vijaykc4 has joined #openstack-neutron16:31
*** jlibosva has quit IRC16:31
*** bcafarel has quit IRC16:32
*** tonytan4ever has quit IRC16:35
*** grantma__ has quit IRC16:35
*** ataraday_ has quit IRC16:41
*** blogan has quit IRC16:43
*** john-davidge has quit IRC16:44
*** john-dav_ has joined #openstack-neutron16:44
*** m1dev has joined #openstack-neutron16:44
*** g3ek has quit IRC16:47
*** jaosorior is now known as jaosorior_away16:51
*** aojea has joined #openstack-neutron16:51
*** tesseract has quit IRC16:52
*** markstur has joined #openstack-neutron16:53
*** g3ek has joined #openstack-neutron16:56
*** ataraday_ has joined #openstack-neutron16:56
*** sterdnotshaken has joined #openstack-neutron16:57
*** markstur has quit IRC16:58
*** ramishra has quit IRC16:58
*** rossella_s has quit IRC16:59
*** tonytan4ever has joined #openstack-neutron17:00
*** sterdnotshaken1 has quit IRC17:00
*** lucasxu has joined #openstack-neutron17:02
*** john-dav_ is now known as john-davidge17:02
*** fragatina has joined #openstack-neutron17:02
*** Jack_Iv has quit IRC17:08
*** vks1 has quit IRC17:08
*** suresh12 has joined #openstack-neutron17:08
*** amotoki has quit IRC17:09
openstackgerritMerged openstack/neutron master: Move conntrack zones to IPTablesFirewall  https://review.openstack.org/44135317:09
*** debedb has joined #openstack-neutron17:10
debedbquestion about plugin driver - anyone?17:11
debedbipam plugin that is17:11
*** suresh12 has quit IRC17:12
*** sterdnotshaken has quit IRC17:14
*** sterdnotshaken has joined #openstack-neutron17:15
*** debedb has left #openstack-neutron17:15
*** thorst_afk is now known as thorst17:16
*** debedb37 has joined #openstack-neutron17:16
*** debedb has joined #openstack-neutron17:16
*** debedb37 has quit IRC17:16
*** bfernando has quit IRC17:19
*** john-davidge has quit IRC17:20
*** erolg has quit IRC17:20
reedip_kevinbenton : ping17:21
reedip_ihrachys: ping17:21
kevinbentonreedip_: pong17:24
reedip_kevinbenton : sorry, but did u get our earlier pings? about neutron-lib17:25
*** TMM has joined #openstack-neutron17:25
*** TMM has joined #openstack-neutron17:25
ihrachyskevinbenton, https://review.openstack.org/#/q/topic:bug/1672701 the reverts, let's make them in quick, we btw also just hit it in RDO17:25
*** TMM has quit IRC17:26
*** efoley_ has quit IRC17:27
kevinbentonihrachys: done17:30
kevinbentonreedip_: are you saying no jobs at all are running when you propose a patch to neutron-lib?17:30
reedip_kevinbenton : yeah, I couldnt see any job running for 2 days as did davidsha17:31
kevinbentonreedip_: did you propose a patch to neutron-lib?17:31
*** ralonsoh has quit IRC17:31
*** Jack_Iv has joined #openstack-neutron17:32
reedip_kevinbenton: https://review.openstack.org/#/c/453110/17:32
kevinbentonreedip_: ack17:33
kevinbentonreedip_: looking17:33
reedip_kevinbenton: however, https://review.openstack.org/#/c/432521/ was proposed 2 hours later, and now I see that it had some tests executed. so maybe there is some other issue17:33
reedip_kevinbenton : thanks for your help17:33
debedboops something with my client.. I’ll try again17:34
debedbhave a q about pluggable ipam in newton17:34
debedbseems the information about instance (Device_id) and host that the port belongs to is no longer available at that stage somehow - but it was there in liberty…17:35
*** TMM has joined #openstack-neutron17:36
openstackgerritKevin Benton proposed openstack/neutron-lib master: Add new protocols in Firewalls  https://review.openstack.org/45311017:36
*** ociuhandu has quit IRC17:39
*** fragatina has quit IRC17:42
*** KurtB has joined #openstack-neutron17:44
*** gonzalo2kx has joined #openstack-neutron17:45
*** gonzalo2kx has quit IRC17:46
*** mriedem1 has joined #openstack-neutron17:50
*** mriedem has quit IRC17:51
haleybreedip: ping regarding https://review.openstack.org/#/c/427670/ (ipv6 icmp change) and tempest code17:51
*** s3wong has joined #openstack-neutron17:52
haleybreedip_: ^^ if you didn't see the ping to your other nick17:52
reedip_hi haleyb17:52
haleybhi reedip_ - so the update I made to the neutron code causes (at least) one failure in tempest with a duplicate SG error17:53
reedip_ok haleyb17:54
reedip_haleyb should we push the tempest patch, in such a case?17:56
haleybso i'm thinking that test needs to change to not try all three.  i didn't know if we could make a separate test that would do the duplicates, since i'm remembering tempest runs against older releases too right?17:56
reedip_yes, tempest runs against previous versions, AFAIK17:56
haleybso if we merge the tempest patch we won't be able to merge the neutron one, since tempest is gating17:57
*** radhikam has joined #openstack-neutron17:59
*** baoli has quit IRC17:59
haleybreedip_: so we need to make the tempest test smarter - i.e. it should handle either 'icmp' or 'ipv6-icmp' coming back from the neutron API18:00
reedip_haleyb : the current tempest patch takes all 3 values, but considers them to be ipv6icmp18:00
*** Jack_Iv has quit IRC18:00
*** sambetts is now known as sambetts|afk18:00
*** mriedem1 is now known as mriedem18:00
*** lyan has quit IRC18:01
reedip_ok, got it, as your current patch can return either icmp or ipv6-icmp, so change is required in line#178  of tempest/api/network/test_security_groups.py18:01
reedip_haleyb: in https://review.openstack.org/#/c/431276/16/tempest/api/network/test_security_groups.py18:01
*** obondarev has joined #openstack-neutron18:02
haleybreedip_: i think my current patch will always return ipv6-icmp for IPv6, which is a change from what i had proposed - it seemed a better value after i looked into it friday18:02
*** baoli has joined #openstack-neutron18:02
reedip_haleyb: and thats what the tempest patch is doing. For IPv6, it always expects ipv6-icmp18:03
reedip_haleyb:  https://review.openstack.org/#/c/43127618:03
haleybreedip_: yes, but when all those protocols are listed, the second and third icmp generate a duplicate error18:03
haleybbefore the neutron patch they would all succeed18:04
*** crushil has quit IRC18:04
reedip_haleyb: right, and thats what tempest reports as a problem. We should not report an error for duplicate rules, but we can log a message and proceed forward18:04
*** ociuhandu has joined #openstack-neutron18:04
reedip_haleyb: I mean if we do not want to break API between 2 releases, and if duplicate rules are not something which we need to report an Exception for, then just having a Warning Log is enough18:05
reedip_haleyb : this would ensure we do not have any corner case in Rolling Upgrades as well18:06
haleybreedip_: right, i haven't even gotten to de-duping exising rules yet though, that could confuse users who see rules go away, even if they are duplicates18:07
reedip_haleyb: this was something I discussed with ihrachys some time earlier, and he had an opinion that the existing rules can exist, because they are not causing any major hurdles ( ideally the first rule would match any requirement and similar rules placed below wont be in action ever).18:09
*** dsneddon has quit IRC18:09
reedip_however, future rules can be curtailed, to avoid further duplication18:09
haleybreedip_: regarding breaking the API, we could probably create a tempest test that creates duplicates, since it can detect when neutron is normalizing the icmp protocol values.  i know it's a hack18:09
haleybs/creates/tries to create18:09
reedip_haleyb : tempest might not accept it :)18:10
reedip_they are pretty strict with API right now :)18:10
haleybreedip_: yeah, because we'd have to create one with icmp and see the returned value was ipv6-icmp18:10
reedip_haleyb : yeah... but I think not reporting an error and just logging a message wont be an issue, because18:11
reedip_haleyb : (a) User still has the rule18:11
reedip_even though its an existing rule18:11
reedip_haleyb (b) : user doesnt get an error so the API/tempest doesnt break18:11
reedip_so user doesnt need to worry either18:12
reedip_haleyb : and Reno should be enough for the user after  this dedup18:12
haleybreedip_: so you mean neutron wouldn't complain?  i.e. it would return the previous icmp rule?18:13
reedip_haleyb:  I mean, if user enter a duplicate rule, then the error exception and 400 error code need not be returned to the user18:14
reedip_haleyb : because it is not harming the system , as a similar rule already exists18:14
haleybreedip_: i think we're in-sync.  the neutron patch would catch the duplicate, but have to check this case, and just return the existing18:15
reedip_haleyb : yeah, that works as well18:15
* haleyb wonders what reedip_ was thinking if that wasn't it :)18:15
reedip_hehe18:16
*** aojea has quit IRC18:16
reedip_haleyb : yeah, we are in sync... :18:17
reedip_:)18:17
haleybreedip_: ok, let me try and change the neutron code to do that, without breaking anything.  if done right then the tempest code should be happy18:18
reedip_haleyb : ok :)18:18
*** debedb has quit IRC18:21
haleybreedip_: hmm, but then we won't detect duplicate icmpv6 rules18:21
reedip_haleyb : we wont explicitly shout it out, but internally we would be preventing duplicate rules.18:21
kevinbentonreedip_: i don't see any relevant changes in project-config that would cause it to skip all jobs18:22
reedip_the catch is with third party driver though, like ODL18:22
*** Jack_Iv has joined #openstack-neutron18:23
*** crushil has joined #openstack-neutron18:23
reedip_kevinbenton : yeah I know, I was just wondering why suddenly the patch doesnt execute anything even though its not dependent on any commit18:23
reedip_kevinbenton : but as I said earlier, I pushed another patch and its job executed, so this patch may have some other issues. I will check it once again. thanks18:24
kevinbentonreedip_: well the difference is that this patch wasn't a 'doc only' change18:25
kevinbentonreedip_: https://review.openstack.org/#/c/432521/18:25
reedip_haleyb : as I was saying earlier, if third parties convert ipv6-icmp to something they undertand ( ODL is changing to icmpv6 ) , then everything should be ok.18:25
kevinbentonreedip_: because it modified the tests directory18:25
haleybreedip_: perhaps ipv6-icmp/ipv6-icmp raises, but ipv6-icmp/icmp and ipv6-icmp/icmpv6 doesn't (if two calls happen)18:25
*** dsneddon has joined #openstack-neutron18:25
reedip_kevinbenton ; ok, so you mean that as the tests were changed, so tests executed ... and in the firewall patch, there were no tests, so no tests executed (???)18:26
openstackgerritTerry Wilson proposed openstack/neutron master: Use the ovsdbapp library  https://review.openstack.org/45301418:26
*** baoli has quit IRC18:26
kevinbentonreedip_: right, see we have this logic18:26
kevinbentonreedip_: https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L1549-L155718:26
kevinbentonreedip_: but that regex is only supposed to skip some jobs, not all of them18:27
reedip_kevinbenton : intresting :)18:27
kevinbentonihrachys: do you know what could cause a complete job skip for jenkins in neutron-lib?18:27
kevinbentonihrachys: that regex seems sane and hasn't had changes in a while18:28
*** sterdnotshaken has quit IRC18:29
kevinbentonreedip_: oh, i wonder if it's because of the change-id being the same in fwaas18:29
kevinbentonreedip_: with a depends-on to the same change-id18:29
kevinbentonreedip_: zuul might not like change-id duplication when using depends-on18:30
reedip_kevinbenton : ohh.. damn it18:30
ihrachyskevinbenton, which patch\18:30
reedip_yeah, got it kevinbenton : I hacked zuul to skip tests18:30
ihrachysok seems like you solved the issue, so I get back to my lair18:31
kevinbentonihrachys: yes, please return :)18:31
reedip_sorry guys :)18:31
kevinbentonreedip_: no prob18:31
reedip_haleyb : interesting scenario , so ipv6-icmp /ipv6-icmp raises duplicate error18:32
reedip_haleyb :thats because the same was implemented earlier18:32
*** baoli has joined #openstack-neutron18:32
kevinbentonihrachys: is there a bug tracking that linux bridge job instability?18:32
reedip_haleyb : but now, if we do ipv6-icmp/icmpv6 then no error is generated18:32
*** vijaykc4 has quit IRC18:32
reedip_haleyb : but then we also have this scenario , icmpv6/icmpv6. this will currently generate error18:33
haleybreedip_: right, that second wouldn't generate an error, but would return the exisitng rule18:33
reedip_haleyb: but now if we convert icmpv6 to ipv6-icmp . then the above sencario would be ipv6-icmp/icmpv6  and it doesnt return an error18:34
haleybicmpv6/icmpv6 wouldn't in this case since both the first and second didn't match18:34
reedip_haleyb :yeah, so... this is getting a bit crazy18:34
haleybyup18:34
reedip_not raising the error might break some  tempest tests.... raising the error breaks tempest tests :D18:35
*** seanatcisco has quit IRC18:35
ihrachyskevinbenton, which one18:36
kevinbentonihrachys: the higher failure rate for the linux bridge job18:37
*** ataraday_ has quit IRC18:37
ihrachysgrenade?18:38
haleybreedip_: yes, and it could be confusing for API users18:39
ihrachysif that's the one, there was https://bugs.launchpad.net/neutron/+bug/1674443 but it's now incomplete because it lacks details18:39
openstackLaunchpad bug 1674443 in neutron "gate-grenade-dsvm-neutron-linuxbridge-multinode fails on smoke test sometimes " [Undecided,Incomplete]18:39
ihrachysso you could as well create a new one for specific issue if you see one18:39
reedip_haleyb : so I think raising the error for each duplicate entry seems more appropriate18:41
openstackgerritReedip proposed openstack/neutron-lib master: Add new protocols in Firewalls  https://review.openstack.org/45542218:41
haleybreedip_: so we'd have to change the tempest test, and possibly add one to cover this case that only runs Pike+18:42
reedip_haleyb : yeah, but I dont know how to run a version dependent tempest test18:43
*** sterdnotshaken has joined #openstack-neutron18:43
haleybwelcome to the club :)18:43
openstackgerritReedip proposed openstack/neutron-fwaas master: Add new protocols in Firewalls  https://review.openstack.org/44033118:44
reedip_hehehe :)18:44
reedip_kevinbenton; do you have any idea of running a version dependent test for tempest ?18:45
kevinbentonreedip_: no, it doesn't support that intentionally18:46
kevinbentonreedip_: a new behavior should be exposed with a new extension18:46
kevinbentonreedip_: and then you use required-ext decorator18:46
haleybkevinbenton: in this case we're not adding functionality, we're better detecting SG rules are duplicates18:47
reedip_kevinbenton : but what haleyb and I am proposing is not related to an extension, it basically catches duplicate SG rules for icmp, IP version 618:47
kevinbentonreedip_: does it start throwing errors or something?18:47
reedip_kevinbenton : earlier, ipv6-icmp, icmp and icmpv6 all were treated different18:48
haleyband they shouldn't have been18:48
reedip_kevinbenton : but they internally are creating the same set of rules for IPV6 , ICMP protocol18:48
openstackgerritFelipe Monteiro proposed openstack/neutron master: Adding missing neutron policies to policy.json  https://review.openstack.org/45542318:49
reedip_kevinbenton : what haleyb and I am working on, is to generate an exception in case of such dulicacy18:49
reedip_s/dulicacy/duplicacy18:49
*** jprovazn has quit IRC18:50
*** ralonsoh has joined #openstack-neutron18:50
haleybkevinbenton: basically, standardize on one value, 'ipv6-icmp' for IPv6 ICMP security group rules, instead of allowing three18:50
reedip_kevinbenton :but tempest right now accepts these 3 protocols separately and returns 204 ( IIRC )18:50
haleybi can find the ML pointer18:51
*** debedb_ has joined #openstack-neutron18:51
haleybhttp://lists.openstack.org/pipermail/openstack-dev/2017-March/114570.html18:52
kevinbentonreedip_, haleyb: sounds like a backwards incompatible change then18:52
kevinbentoncan we silently de-dup instead?18:52
reedip_kevinbenton : it kind of is18:52
reedip_kevinbenton : silent dedup creates more issues18:52
reedip_kevinbenton : if we internally change , for ex. icmpv6 to ipv6-icmp18:53
reedip_kevinbenton : then previously, icmpv6/icmpv6 would have been generating an error, now it wont :)18:53
reedip_kevinbenton : because of the silent dedup18:53
*** debedb_ is now known as debedb18:53
*** lyan has joined #openstack-neutron18:54
*** seanatcisco has joined #openstack-neutron18:54
kevinbentonreedip_: i mean just that particular case18:55
*** sdague_ has quit IRC18:55
*** iranzo has quit IRC18:55
kevinbentonhmm18:56
kevinbentonlet me think about it :)18:56
*** suresh12 has joined #openstack-neutron18:56
*** crose has joined #openstack-neutron18:56
haleybkevinbenton: you are now where i was 30 minutes ago, seemed simple at first but what will the API user notice and care about18:57
*** suresh12 has quit IRC18:57
*** suresh12 has joined #openstack-neutron18:57
*** sterdnotshaken1 has joined #openstack-neutron19:06
*** sterdnotshaken has quit IRC19:06
reedip_sorry, was on a call ...19:08
reedip_kevinbenton : yeah , take ur time. patches are https://review.openstack.org/427670 , and https://review.openstack.org/43127619:09
reedip_haleyb, kevinbenton : I would be taking a leave now, good night.. let me know your thoughts though, my primary acccount will be logged in ( reedip)  :)19:10
*** reedip_ is now known as outofmemory19:10
*** fragatina has joined #openstack-neutron19:10
*** sterdnotshaken has joined #openstack-neutron19:13
ihrachyskevinbenton, https://review.openstack.org/#/c/454870/ probably a gate fix for another functional failure19:14
*** edmondsw_ has joined #openstack-neutron19:15
*** edmondsw_ has quit IRC19:15
ihrachysI am not sure if that's the one, since in newton where I saw that I don't have full names, just lengths (that is solved by backports https://review.openstack.org/#/q/Ic5a3b347bea7e5aa8a5caee5035568e5954f58dc,n,z)19:16
*** sterdnotshaken1 has quit IRC19:16
openstackgerritReedip proposed openstack/neutron-lib master: Add new protocols in Firewalls  https://review.openstack.org/45542219:18
*** obondarev has quit IRC19:18
*** john-davidge has joined #openstack-neutron19:20
openstackgerritReedip proposed openstack/neutron master: Add check for Bandwidth Limit Rules  https://review.openstack.org/44237519:22
openstackgerritIhar Hrachyshka proposed openstack/neutron master: ip_lib: ignore gre and lo devices in get_devices by default  https://review.openstack.org/45543119:24
*** john-davidge has quit IRC19:25
openstackgerritIhar Hrachyshka proposed openstack/neutron master: ip_lib: ignore gre and lo devices in get_devices by default  https://review.openstack.org/45543119:26
*** marst_ has joined #openstack-neutron19:27
*** manheim has joined #openstack-neutron19:28
*** marst has quit IRC19:30
*** manheim has quit IRC19:33
*** iranzo has joined #openstack-neutron19:34
openstackgerritBrian Haley proposed openstack/neutron master: DNM: test for infra DVR+HA multinode change  https://review.openstack.org/45543319:34
openstackgerritPaul Carver proposed openstack/networking-bgpvpn master: Move API definition out of n8g-bgpvpn into neutron-lib  https://review.openstack.org/39558519:36
*** tonytan4ever has quit IRC19:36
*** tonytan4ever has joined #openstack-neutron19:40
*** iranzo has quit IRC19:44
*** suresh12 has quit IRC19:44
*** sterdnotshaken1 has joined #openstack-neutron19:50
*** sterdnotshaken has quit IRC19:53
*** gouthamr has quit IRC19:54
*** achadha has joined #openstack-neutron19:58
*** namnh has joined #openstack-neutron19:59
*** gcheresh has joined #openstack-neutron20:00
*** n0cat has joined #openstack-neutron20:02
*** yamahata has quit IRC20:03
n0cathello20:04
*** grantma__ has joined #openstack-neutron20:09
*** Jack_Iv has quit IRC20:15
*** Jack_Iv has joined #openstack-neutron20:15
*** n0cat has quit IRC20:15
*** g3ek has quit IRC20:16
openstackgerritMerged openstack/networking-ovn master: Enhance local.conf.sample documentation  https://review.openstack.org/45531120:16
openstackgerritMerged openstack/networking-ovn master: Docs: Do not turn warnings into errors  https://review.openstack.org/45518220:16
openstackgerritSlawek Kaplonski proposed openstack/neutron master: Make QoS policy object compatible with versions 1.2 and higher  https://review.openstack.org/45533820:17
*** Jack_Iv has quit IRC20:20
*** john-davidge has joined #openstack-neutron20:21
*** arbaindu has joined #openstack-neutron20:23
arbainduAnyone know how exactly what triggers the l2pop driver / OVS agent to re-add fdb flows for tunnels?20:24
arbainduAll we did was restart the ovs agent on hypervisors, noticed that the l2pop flows on br-tun are lost20:24
arbainduthis kills traffic, specifically because the multidest flows are lost. VMs can no longer ARP20:25
arbainduunicast entries for remote MACs are lost as well20:25
*** g3ek has joined #openstack-neutron20:26
*** rkukura has quit IRC20:26
*** john-davidge has quit IRC20:26
*** rkukura has joined #openstack-neutron20:26
openstackgerritMerged openstack/networking-odl master: Fixing a typo in function and variable name  https://review.openstack.org/45486820:27
*** john-davidge has joined #openstack-neutron20:29
*** markstur has joined #openstack-neutron20:29
*** fragatin_ has joined #openstack-neutron20:31
*** ralonsoh has quit IRC20:31
*** fragatina has quit IRC20:34
*** markstur has quit IRC20:34
openstackgerritBrian Haley proposed openstack/neutron master: DNM: IPv6 ICMP API hack  https://review.openstack.org/45544420:34
*** armax has quit IRC20:34
*** irenab has quit IRC20:36
*** irenab has joined #openstack-neutron20:36
*** john-davidge has quit IRC20:37
openstackgerritFelipe Monteiro proposed openstack/neutron master: Adding missing neutron policies to policy.json  https://review.openstack.org/45542320:38
*** grantma__ has quit IRC20:40
openstackgerritTrevor McCasland proposed openstack/neutron master: WIP: Manage BUM traffic with secgroups  https://review.openstack.org/45544520:40
*** tonytan4ever has quit IRC20:41
*** cleong has quit IRC20:41
*** tonytan4ever has joined #openstack-neutron20:41
*** tonytan4ever has quit IRC20:46
*** lihi has quit IRC20:47
*** lihi has joined #openstack-neutron20:48
*** aojea has joined #openstack-neutron20:51
*** namnh has quit IRC20:52
kevinbentonihrachys: done20:52
kevinbentonhaleyb: ping20:52
kevinbentonhaleyb: confused about .exists()20:53
openstackgerritBrian Haley proposed openstack/neutron master: Add sanity check for conntrack  https://review.openstack.org/45545020:53
*** karthikpr has joined #openstack-neutron20:53
kevinbentonhaleyb: https://review.openstack.org/#/c/283757/50/neutron/agent/l3/dvr_fip_ns.py@40320:53
*** karthikpr has quit IRC20:53
*** karthikpr has joined #openstack-neutron20:54
haleybkevinbenton: looking20:54
*** gcheresh has quit IRC20:55
*** crose has quit IRC20:58
*** suresh12 has joined #openstack-neutron20:59
kevinbentonihrachys: you still around for a few mins to talk about sanity checks?20:59
*** karthikpr has quit IRC20:59
ihrachyskevinbenton, yea20:59
kevinbentonihrachys: we seem to have a large chunk of people that don't know sanity checks exist, let alone run them21:00
kevinbentonihrachys: what do you think about running the easy ones at agent startup?21:00
kevinbentonihrachys: (e.g. the one brian proposed right above)21:00
kevinbentonihrachys: then we bail with systemexit on failure and have a sane failure mode21:00
kevinbentonihrachys: rather than something subtle later21:00
ihrachyskevinbenton, will the agent crash without it?21:01
ihrachysok I see the answer21:01
ihrachysI think there is place for mixed usage of some checks21:01
ihrachysnot all of them21:01
kevinbentonihrachys: yeah, would definitely have to be evaluated one-by-one21:01
ihrachyswould make sense to have some kind of a decorator that we could use to tag checks for runtime invokation21:01
kevinbentonihrachys: and only invoke when certain options are enabled, etc21:01
*** suresh12 has quit IRC21:01
haleybkevinbenton: fns_ip.device is of class IPDevice, which has an exists()21:02
*** manheim has joined #openstack-neutron21:02
ihrachysI am fine with it. I would ask otherwiseguy for his thoughts on the matter, he was opinionated before.21:02
kevinbentonhaleyb: ack, not sure how i missed that21:03
*** tonytan4ever has joined #openstack-neutron21:03
kevinbentonotherwiseguy: why do you hate sanity checks at startups and thus hate our users? :)21:03
*** thorst has quit IRC21:03
ihrachysI think he hated version checks for the most part21:03
kevinbentonhaleyb: i thought it did, but then was looking at the code to leave another comment21:03
ihrachysat least initially21:03
haleybkevinbenton: after that i get a free pass on the change, right? :)21:04
kevinbentonihrachys: version checks make sense, particularily when certain companies backport features to older versions :)21:04
kevinbentonhaleyb: no, it just means my next comment i leave will be valid :P21:04
arbaindukevinbenton: Hey, had question regarding the conntrack issue we were discussing last week21:04
arbainduEnded up disabling security groups altogether and that fixed this up too right away21:05
otherwiseguykevinbenton, I only hate our users who don't know how to properly set up their system. :p21:05
arbainduBut, i was wondering what the downside would be to not doing a conntrack delete altogether upon port delete?21:05
ihrachyskevinbenton, you mean to piss off those companies?21:05
ihrachysthen yes, agreed21:05
arbainduthis would only cause problems in case of a fixed IP being moved to a new security group, right? (VM gets deleted, new VM comes up with recycled fixed IP, but on diff sec group)21:06
otherwiseguykevinbenton, I just don't like doing things every startup that only need to be done once at setup. Kind of a separation of concerns. "That's the installer's job." :p21:06
ihrachyswe could probably have it as an opt-in (or opt-out) to make both camps happy21:07
*** seanatcisco has quit IRC21:07
*** grantma__ has joined #openstack-neutron21:08
kevinbentonarbaindu: it doesn't even cause a bad connectivity problem21:08
kevinbentonarbaindu: it's just that existing established connections won't be cleared21:08
kevinbentonarbaindu: that's the only downside21:08
kevinbentonarbaindu: so if you have a rule that allows HTTP for example21:08
kevinbentonarbaindu: and a client starts a download from your instance21:09
otherwiseguyAlso, if every bit of software at runtime decided to make system-level configuration changes, they'd step all over each other.21:09
kevinbentonarbaindu: then you delete the SG rule21:09
arbainduright, the http connection would still be going through21:09
kevinbentonarbaindu: without the conntrack call, the connection will remain active21:09
kevinbentonarbaindu: yep21:09
openstackgerritSlawek Kaplonski proposed openstack/neutron master: [WIP] Add QoS bandwidth limit for instance ingress traffic  https://review.openstack.org/44983121:09
kevinbentonarbaindu: that's the only downside, which is pretty minor21:09
openstackgerritboden proposed openstack/neutron-lib master: Introduce service definitions  https://review.openstack.org/45545121:10
haleybkevinbenton: i would call that a security issue if removing a SG rule doesn't stop traffic21:10
arbainduWhat about in case where the VM/port is deleted, but then -re-assigned?21:10
*** zkassab has quit IRC21:10
arbaindusorry i am not too familiar with conntrack - how long does it keep up established connections?21:10
openstackgerritSlawek Kaplonski proposed openstack/neutron master: [WIP] Add QoS bandwidth limit for instance ingress traffic  https://review.openstack.org/44983121:10
openstackgerritSlawek Kaplonski proposed openstack/neutron master: [WIP] Add QoS bandwidth limit for instance ingress traffic  https://review.openstack.org/44983121:11
arbaindusay a VM gets deleted, and we removed the conntrack delete. Some time later VM comes up - possibly on a different security group. would http connection still be allowed?21:11
kevinbentonarbaindu: well if it's re-assigned you can have leftover connections that might result in open TCP connections flooding to your instance21:11
kevinbentonarbaindu: only an existing HTTP connection21:11
kevinbentonarbaindu: which that other VM would reject anyway since it's mid TCP stream21:11
kevinbentonihrachys: no, i mean i understand not liking strict version checks21:12
*** boden has quit IRC21:12
kevinbentonotherwiseguy: a sanity check doesn't make runtime configuration changes21:12
haleybarbaindu: there is a sysctl that controls it, but it's more than a few minutes without seeing a packet, if traffic is flowing it will stay open until removed21:12
arbainduyea that's what I guessed. gotcha, didnt know there was a sysctl parameter for it.21:12
arbainduso in that case, seems like conntrack is causing more problems than solving?21:13
arbainduat least in slowness - it seems to take up the bulk of the rpc_loop duration21:13
kevinbentonhaleyb: well in TCP case it will also close immediately on RST or FIN21:13
haleybkevinbenton: yes, at end of connection.  I just remember if you have a ping going, without running conntrack -D it will continue21:14
kevinbentonhaleyb: yeah, ping and UDP are different21:14
arbaindugiven that ovs agent only scans for ports once per loop,OVS gets blocked on this step quite a bit21:14
kevinbentonhaleyb: they are just timing criteria21:14
kevinbentonarbaindu: it's becomes a big issue in pretty narrow scenarios21:15
kevinbentonarbaindu: lots of port deletes on a single agent for ports that all belong to the same security group21:15
*** pcaruana has quit IRC21:15
kevinbentonarbaindu: if they weren't in the same security group it wouldn't be an issue21:15
kevinbentonotherwiseguy: " I only hate our users who don't know how to properly set up their system. :p"  is how you end up having software that nobody likes to use :/21:18
otherwiseguyok, so you are talking about running them and then just logging, not fixing? Then my main argument against it is just that it leads to ever increasing startup times. Also, sanity checks were initially designed to do relatively expensive checks instead of relying on simple things like version number checks.21:18
kevinbentonotherwiseguy: or making them fatal21:18
otherwiseguykevinbenton, no, you just make the write the right tool to help them. :) Like an installer.21:18
kevinbentonotherwiseguy: yeah, no fixing21:19
kevinbentonotherwiseguy: i.e. the agent immediately dies and says conntrack must be installed if they are using the iptables driver21:19
kevinbentonotherwiseguy: rather than vomit exceptions on every port delete or security group update21:19
*** crushil has quit IRC21:19
openstackgerritBrian Haley proposed openstack/neutron master: Add sanity check for conntrack  https://review.openstack.org/45545021:23
otherwiseguykevinbenton, real users will be using an installer and config management stuff would by my argument. doing the checks at runtime seems like developing for the wrong audience.21:23
*** catintheroof has quit IRC21:25
kevinbentonotherwiseguy: so are you opposed to config validation then as well?21:26
*** trevormc has quit IRC21:30
*** achadha has quit IRC21:30
*** karthikpr has joined #openstack-neutron21:31
*** karthikpr has quit IRC21:31
*** pramodrj07 has joined #openstack-neutron21:32
*** MasterOfBugs has joined #openstack-neutron21:32
otherwiseguykevinbenton, Depends. If it is "this config makes no sense, you can't have these mutually exclusive options" then it seems reasonable to check it. But when you start getting into things like, "you have this configured, but it requires a feature in this external software", meh. I hoped sanity check would be a tool to enable admins to verify their configs at config time.21:32
otherwiseguyAnd installer's could run it when making config changes if they really wanted to.21:33
otherwiseguys/'//21:33
kevinbentonotherwiseguy: but i don't understand the distinction other than the runtime cost. putting an invalid IP in the 'tunnel_ip' seems just as invalid as not having dnsmasq installed21:33
otherwiseguyer, management software I suppose.21:34
*** haleyb has quit IRC21:35
kevinbentonotherwiseguy: what i want to avoid is this21:36
kevinbentonotherwiseguy: http://lists.openstack.org/pipermail/openstack/2017-April/019125.html21:36
kevinbentonfirst sentence21:36
kevinbentonwhether or not installers exist that handle these things21:36
kevinbentonwe have an official deployment guide21:36
kevinbentonthat results in users ending up with errors21:37
otherwiseguyDoes the official deployment guide mention running sanity check?21:37
otherwiseguyIf not, it should. And then problem solved. :D21:37
kevinbentonotherwiseguy: i don't think it does21:37
kevinbentonotherwiseguy: right, either we continually keep fixing all of the dozens of ways to deploy openstack21:38
kevinbentonotherwiseguy: the "you're holding it wrong" approach21:38
kevinbentonotherwiseguy: or just run the things at startup to save us all mailing list messages21:38
*** tidwellr has quit IRC21:39
*** lucasxu has quit IRC21:40
*** karthikpr has joined #openstack-neutron21:40
*** tidwellr has joined #openstack-neutron21:40
*** armax has joined #openstack-neutron21:40
*** janzian has quit IRC21:41
*** Sukhdev has joined #openstack-neutron21:41
*** baoli has quit IRC21:43
otherwiseguyor make sure the documentation is right so people don't have search through log files to notice something is wrong. That's the other nice thing about sanity-check. You run it, it tells you what's wrong.21:44
*** baoli has joined #openstack-neutron21:44
*** tidwellr has quit IRC21:44
otherwiseguyI'm not going to go mental or anything if we have some runtime checks. I just think there are better ways most of the time to let users know about config problems.21:44
otherwiseguylike that one "well, it runs fine. i just happened to look in the log and saw this"21:45
otherwiseguyif they are fatal errors, I'm less irritated by them.21:46
*** baoli has quit IRC21:48
*** fragatin_ has quit IRC21:54
*** fragatina has joined #openstack-neutron21:54
*** karthikpr has quit IRC21:55
*** KurtB has quit IRC21:56
otherwiseguykevinbenton, as in, if we are doing (cheap) checks at runtime (please no version number checks), and failing to load...it isn't the end of the world, anyway. :p21:57
otherwiseguythough i'd still prefer updated documentation that mentions using sanity-check.21:58
*** grantma__ has quit IRC22:01
*** fragatin_ has joined #openstack-neutron22:01
*** fragatina has quit IRC22:03
*** mickeys has quit IRC22:04
*** liangy has joined #openstack-neutron22:04
openstackgerritSlawek Kaplonski proposed openstack/neutron master: Add QoS bandwidth limit for instance ingress traffic  https://review.openstack.org/44983122:05
*** lyan has quit IRC22:07
*** manheim has quit IRC22:08
*** mlavalle has quit IRC22:15
*** m1dev has quit IRC22:15
*** hoonetorg has quit IRC22:16
*** manheim has joined #openstack-neutron22:19
*** ihrachys has quit IRC22:25
*** nplanel has joined #openstack-neutron22:26
*** armax has quit IRC22:26
*** catintheroof has joined #openstack-neutron22:27
*** kbringard has quit IRC22:29
*** gouthamr has joined #openstack-neutron22:32
*** seanatcisco has joined #openstack-neutron22:33
*** coreycb is now known as coreycb_vaca22:35
*** hoonetorg has joined #openstack-neutron22:39
arbainduWhat causes l2pop mech driver to send add_fdb_entries? Seems like just update port status changes to ACTIVE?22:47
arbainduwe restart ovs agent, and br-tun does not add any flooding flow rules22:47
arbaindubut we never receive update from l2pop22:47
arbainduis there known issues with this?22:47
*** aojea has quit IRC22:48
arbainduwe see the setup_tunnel_port skips adding the install_flood_to_tun if l2pop is enabled... won't this break connectivity?22:49
*** john-davidge has joined #openstack-neutron22:49
*** fnaval has quit IRC22:49
*** john-davidge has quit IRC22:53
*** kbaegis has joined #openstack-neutron22:54
*** manheim has quit IRC23:00
*** manheim has joined #openstack-neutron23:01
*** thorst has joined #openstack-neutron23:02
*** adriant has joined #openstack-neutron23:03
*** mickeys has joined #openstack-neutron23:05
*** mickeys has quit IRC23:09
*** sdague has quit IRC23:12
*** mickeys has joined #openstack-neutron23:12
*** seanatcisco has quit IRC23:13
*** scottda has quit IRC23:15
*** kbaegis has left #openstack-neutron23:17
*** tonytan4ever has quit IRC23:20
*** liangy has quit IRC23:21
*** chyka has quit IRC23:25
*** chyka has joined #openstack-neutron23:25
*** mordred has joined #openstack-neutron23:25
*** marst_ has quit IRC23:29
*** crushil has joined #openstack-neutron23:32
*** karthikpr has joined #openstack-neutron23:34
*** karthikpr has quit IRC23:38
openstackgerritIsaku Yamahata proposed openstack/networking-odl master: devstack: add boron SR3 release definition  https://review.openstack.org/45283923:41
*** g3ek has quit IRC23:51
*** lujinluo has joined #openstack-neutron23:53
*** karthikpr has joined #openstack-neutron23:56
*** manheim has quit IRC23:58
*** marst has joined #openstack-neutron23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!