Monday, 2020-04-20

*** Xafloc has quit IRC00:00
*** shibboleth has quit IRC00:31
*** threestrands has joined #openstack00:35
*** slaweq has joined #openstack00:49
*** rapscalian has quit IRC00:54
*** brokencycle has quit IRC01:39
*** __ministry has joined #openstack02:01
*** jmasud has joined #openstack02:39
*** rvd has joined #openstack02:51
*** jhesketh has joined #openstack02:56
*** ircuser-1 has quit IRC03:09
*** jmasud has quit IRC03:53
*** skyraven has quit IRC04:43
*** kenperkins has quit IRC04:59
*** cah_link has joined #openstack05:00
*** tkajinam has quit IRC05:12
*** tkajinam has joined #openstack05:13
*** jmasud has joined #openstack05:14
*** iokiwi has quit IRC05:16
*** iokiwi has joined #openstack05:17
*** yaawang_ has quit IRC05:18
*** skyraven has joined #openstack05:19
*** yaawang_ has joined #openstack05:20
*** spiral has joined #openstack05:31
*** shyamb has joined #openstack05:48
*** skyraven has quit IRC05:58
*** skyraven has joined #openstack05:58
*** shyamb has quit IRC06:04
*** miloa has joined #openstack06:04
*** seco has joined #openstack06:04
*** jtomasek has joined #openstack06:05
*** shyamb has joined #openstack06:05
*** nightmare_unreal has joined #openstack06:32
*** suuuper has joined #openstack06:43
*** avivgt has joined #openstack06:44
*** mn3m has quit IRC06:45
*** mn3m has joined #openstack06:45
*** shyamb has quit IRC06:53
*** shyamb has joined #openstack06:53
*** fsimonce has joined #openstack07:01
*** shyamb has quit IRC07:03
*** ttsiouts has joined #openstack07:11
*** bengates has joined #openstack07:11
*** pcaruana has joined #openstack07:12
*** rpittau|afk is now known as rpittau07:12
*** tesseract has joined #openstack07:12
*** ttsiouts has quit IRC07:14
*** ttsiouts_ has joined #openstack07:14
*** threestrands_ has joined #openstack07:18
*** threestrands_ has quit IRC07:18
*** jmasud has quit IRC07:19
*** jmasud has joined #openstack07:20
*** bengates has quit IRC07:21
*** threestrands has quit IRC07:21
*** bengates has joined #openstack07:21
*** tamas_erdei has quit IRC07:22
*** jcapitao has joined #openstack07:26
*** lucadelmonte90 has joined #openstack07:33
*** sverrest has quit IRC07:45
*** imega has quit IRC07:46
*** imega has joined #openstack07:46
*** jmasud has quit IRC07:47
*** lucadelmonte90 is now known as squalluca07:51
*** alexmcleod has joined #openstack07:51
*** S4ren has joined #openstack07:52
*** negronjl has quit IRC07:58
*** negronjl has joined #openstack08:01
*** sshnaidm has joined #openstack08:22
*** shyamb has joined #openstack08:23
*** dsneddon has quit IRC08:41
*** dsneddon has joined #openstack08:41
*** shyam89 has joined #openstack08:45
*** shyamb has quit IRC08:48
*** ttsiouts_ has quit IRC08:48
*** ttsiouts has joined #openstack08:53
oklhostHi @all. Anybody facing issues with latest Google Chrome and "Launch Instance" button in horizon? The modal won't open...09:04
*** avolkov has joined #openstack09:11
squallucahello, i was wondering if you could give me some help, since my google-fu failed me on this one.In my company we are planning to deploy openstack (we are still in a very early stage), our datacenter network topology is partitioned in network islands, the delivery of public network is accomplished via vlans at each TOR switch, all racks belonging to09:14
squallucaa network island have access to a set o vlan segment used to delivery public networks, but racks on ther network islands are not reached by the same segments.We were planning to segregate the compute part with cells ( 1 per island), my doubt is, is there a way in neutron to specify the hosts from which this network is reachable and pass this info09:14
squallucato the placement service in order to schedule resources requesting a particular network to the right compute host?09:14
*** shyam89 has quit IRC09:20
*** shyam89 has joined #openstack09:20
*** gregwork has quit IRC09:24
admin0squalluca, its not clear if your public segment is on an island .. or the private segment also ?09:25
*** rcernin has quit IRC09:26
admin0for argumens, lets assume you need 5 different network ranges   1. to ssh to the server from your vpn/office (routable)   2.  API network   3. east-west (vxlan) network   4. storage  network 5. north-south ( public ip) routable09:27
admin0so between your racks, what network can talk to each other, and what cannot ?09:28
squallucaadmin0 hello, only the public ones, my goal would be to allow private segments ( on vxlan ) to span multiple cells, and have a separete sets of publics vlan for each cells09:28
squalluca@admin0 everything is shared but 5, noth sout traffic09:29
*** this10nly has joined #openstack09:29
admin0so for example, if you have 3 racks,   each rack can reach the (shared) north-south but everything else is segmented .. or   its the opposite  .. means each rack can share the other networks, but public will be segmented ?09:30
squalluca@admin0 the opposite, each rack can share the other networks but public is segmented09:31
admin0ok .. so what you are looking for is a way to map specific hypervisors ( or az, server groups ) to specific external networks09:31
squallucayes09:32
*** shyam89 has quit IRC09:32
admin0squalluca, i don't know the answer yet :)09:33
admin0and if you don't get a suitable solution, is this a fixed requirement or still subject to change in networking ?09:35
*** shyamb has joined #openstack09:35
squalluca@admin0 probably fixed, dropping that requirment will mean to rethink all our dc networking, technically doable, financially not :D09:37
admin0isn't sharing a network just a matter of adding a cable and the right vlan tag :) ?09:37
admin0technically, you can add multiple provider networks .. so lets say rack1-uplink, rack2-uplink and rack3-uplink .. and  each network will work only from their respective instances from the same rack09:39
admin0so if someone from rack2( or a-z 2 ) connects to rack-3 network, it will not work09:39
admin0but in a way that is transparent and works automatically out of the box, not sure .. ( maybe others will know )09:39
squallucaadmin0 in theory yes, but our dc have 10 islands, each with around 100 racks, it was thought to isolate l2 storms and broadcast to just a section of the dc09:41
squalluca@admin0 50 racks each sry09:41
*** shyam89 has joined #openstack09:45
squalluca@admin0 the closest thing that  i find that could work more or less are 'Routed provider networks', but from what i understand the segments must all have the same vlan id ( but maybe i am wrong) and it's not clear to me if i can add multiple segments to the same AZ09:46
*** shyamb has quit IRC09:48
*** Fre4k5en has joined #openstack09:50
*** rcernin has joined #openstack09:50
*** Fre4k5en has quit IRC10:06
*** mn3m has quit IRC10:13
*** rpittau is now known as rpittau|bbl10:15
admin0squalluca, openstack provides filtering so that user generated l2 storms ( or sniffing, snooping etc) does not hamper the network using ebtables10:19
admin0you can add multiple routed provider networks and it assumes all compute nodes can reach it10:19
admin0but if some are in diff island, they cannot reach .. but it will not fail either10:19
admin0if its private , you can ask users to use the correct networking in the correct a-z10:20
admin0so if you create 2 availability zones, say island1 and island2, create 2 provider networks, net1 and net2 .. and ask island1 users to use only net1 as net2 will not work10:20
admin0but another issue is network nodes10:21
admin0if a qrouter is in the wrong zone, you have to manually move it to the correct island10:21
*** imega has quit IRC10:21
squalluca@admin0 yes, i am aware that os  can prevent snooping and broadcast, but unfortunately we have other services in tha dcs, and i would probably have to kill all the network team to let me share vlans across all the dcs, they are old school :(10:26
*** imega has joined #openstack10:27
squalluca@admin0 maybe a combination of routed provided networks and neutron avaibility zones could do the trick? i was reading now about neutron azs, what i cannot grasp is, can i assign a neutron az to a  Open vSwitch agent o metadata agent?10:28
*** shyam89 has quit IRC10:33
*** jcapitao is now known as jcapitao_lunch10:37
admin0i think this can be solved ..10:46
admin0you install openstack .. and create a-z based on which island the server is in ..10:47
admin0after that, add a provider network on that specific a-z10:47
admin0since the public is not shared across islands, you may not have to share your vxlan ( east-west) across a-z as well10:50
admin0the only thing you share is API and maybe storage10:51
*** squalluca has quit IRC10:51
*** ttsiouts has quit IRC11:20
*** tkajinam has quit IRC11:21
*** ttsiouts has joined #openstack11:30
*** dsneddon has quit IRC11:31
*** this10nly has quit IRC11:31
*** this10nly has joined #openstack11:33
*** belmoreira has joined #openstack12:01
*** rpittau|bbl is now known as rpittau12:03
*** jcapitao_lunch is now known as jcapitao12:07
*** ttsiouts has quit IRC12:10
*** ttsiouts has joined #openstack12:12
*** ttsiouts has quit IRC12:17
*** jangutter has joined #openstack12:18
*** nksegos has joined #openstack12:19
*** ttsiouts has joined #openstack12:22
*** servagem has joined #openstack12:22
*** lucadelmonte90 has joined #openstack12:23
*** lucadelmonte90 is now known as squalluca12:24
*** Lucas_Gray has joined #openstack12:25
*** ttsiouts has quit IRC12:27
squalluca@admin0 "since the public is not shared across islands, you may not have to share your vxlan ( east-west) across a-z as well" yeah that was my doubt with this solution, if sharing tenant network across azs could create some issues, or if it is even possible, btw we will probably segregate users per AZ/Cell in the first phase, but the having the12:28
squallucaoption to allow cross az tenant traffic is something we would like in the long run12:28
*** ttsiouts has joined #openstack12:32
*** Goneri has joined #openstack12:42
*** ttsiouts has quit IRC12:44
*** ttsiouts has joined #openstack12:45
*** __ministry has quit IRC12:45
*** RickDeckard has joined #openstack12:55
*** nksegos has quit IRC12:59
*** nsegkos has joined #openstack12:59
*** nsegkos is now known as nksegos13:01
*** Lucas_Gray has quit IRC13:06
*** irclogbot_3 has quit IRC13:06
*** irclogbot_2 has joined #openstack13:08
*** dayou_ has joined #openstack13:09
*** dayou has quit IRC13:11
*** kenperkins has joined #openstack13:21
*** masticass has joined #openstack13:21
*** ttsiouts has quit IRC13:22
*** ttsiouts has joined #openstack13:32
*** ttsiouts has quit IRC13:37
*** hoonetorg has quit IRC13:40
*** squalluca has quit IRC13:40
*** ttsiouts has joined #openstack13:42
*** ttsiouts has quit IRC13:45
*** ttsiouts has joined #openstack13:45
*** cr4y1 has joined #openstack13:50
*** tkajinam has joined #openstack13:53
*** miloa has quit IRC13:56
-openstackstatus- NOTICE: Zuul is temporarily offline; service should be restored in about 15 minutes.13:57
*** lucadelmonte90 has joined #openstack13:58
*** hoonetorg has joined #openstack13:59
*** dayou_ has quit IRC14:16
*** dayou has joined #openstack14:17
*** morazi has quit IRC14:21
*** morazi has joined #openstack14:21
*** cah_link has quit IRC14:27
*** this10nly has quit IRC14:28
*** dsneddon has joined #openstack14:29
*** weaselkeeper has joined #openstack14:38
*** tkajinam has quit IRC14:59
*** sangeet has joined #openstack15:05
*** Nafallo has quit IRC15:07
*** Nafallo has joined #openstack15:08
*** dswebb has joined #openstack15:09
*** mmethot has quit IRC15:19
sangeetI am using Stein and ml2 plugin. I do not see Security Headers (X-Content-Type-Options and X-Frame-Options) in the response message. How can I get these headers in the responses from Neutron? Security Headers are defined and used for v2 api (neutron/api/v2/resources.py) but I did not see any such thing in neutron/pecan_wsgi/controllers/resource.py or neutron/plugins/ml2. Please help15:19
*** sangeet has quit IRC15:20
*** Nafallo_ has joined #openstack15:22
*** Nafallo has quit IRC15:23
*** sangeet has joined #openstack15:29
*** mmethot has joined #openstack15:34
*** gyee has joined #openstack15:40
*** ttsiouts has quit IRC15:43
-openstackstatus- NOTICE: Gerrit will be restarted to correct a misconfiguration which caused some git mirrors to have outdated references.15:46
*** chicocvenancio has quit IRC15:46
*** hoonetorg has quit IRC15:46
*** chicocvenancio has joined #openstack15:48
*** ttsiouts has joined #openstack15:51
*** ddstreet has quit IRC15:51
*** ddstreet has joined #openstack15:52
*** ianychoi_ is now known as ianychoi15:53
sangeetI am using Stein and ml2 plugin. I do not see Security Headers (X-Content-Type-Options and X-Frame-Options) in the response message. How can I get these headers in the responses from Neutron? Security Headers are defined and used for v2 api (neutron/api/v2/resources.py) but I did not see any such thing in neutron/pecan_wsgi/controllers/resource.py or neutron/plugins/ml2. Please help15:54
*** cah_link has joined #openstack15:56
*** KeithMnemonic has joined #openstack16:00
*** hoonetorg has joined #openstack16:00
*** bengates has quit IRC16:02
*** bengates has joined #openstack16:02
*** morazi has quit IRC16:03
*** morazi has joined #openstack16:05
*** bengates has quit IRC16:07
*** rpittau is now known as rpittau|afk16:07
*** seco has quit IRC16:09
*** lucadelmonte90 has quit IRC16:10
*** jmasud has joined #openstack16:12
*** morazi has quit IRC16:13
*** morazi has joined #openstack16:13
*** jcapitao has quit IRC16:14
*** morazi has quit IRC16:20
*** ttsiouts has quit IRC16:22
*** yaawang has joined #openstack16:33
*** yaawang_ has quit IRC16:33
*** ttsiouts has joined #openstack16:38
*** nksegos has quit IRC16:44
*** nsegkos has joined #openstack16:44
*** nsegkos is now known as nksegos16:44
*** cah_link has quit IRC16:45
*** jmasud has quit IRC16:46
*** jmasud has joined #openstack16:47
*** jmasud has quit IRC16:53
*** preece has quit IRC16:54
*** kklimonda has quit IRC16:54
*** ttsiouts has quit IRC16:54
*** jmasud has joined #openstack16:55
*** preece has joined #openstack16:55
*** kklimonda has joined #openstack16:55
*** sshnaidm is now known as sshnaidm|afk16:59
*** seco has joined #openstack17:06
*** aconole has joined #openstack17:11
*** seco has quit IRC17:12
*** tesseract has quit IRC17:18
*** S4ren has quit IRC17:33
*** ttsiouts has joined #openstack17:34
*** ttsiouts has quit IRC17:39
*** seco has joined #openstack17:45
*** seco has quit IRC17:50
*** billkgr has joined #openstack17:52
*** kenperkins has quit IRC17:57
*** kenperkins has joined #openstack17:58
*** ircuser-1 has joined #openstack18:00
*** nightmare_unreal has quit IRC18:02
*** billkgr has quit IRC18:07
*** kenperkins has quit IRC18:07
*** kenperkins has joined #openstack18:08
*** jmasud has quit IRC18:10
*** ttsiouts has joined #openstack18:11
*** billkgr has joined #openstack18:12
*** shibboleth has joined #openstack18:14
*** shibboleth has joined #openstack18:15
*** sauvin has quit IRC18:21
*** seco has joined #openstack18:22
*** ttsiouts has quit IRC18:26
*** ttsiouts has joined #openstack18:26
*** seco has quit IRC18:27
*** vexorg has quit IRC18:30
*** vexorg has joined #openstack18:31
*** jrosser has quit IRC18:41
*** jrosser has joined #openstack18:42
*** cah_link has joined #openstack18:42
*** jmasud has joined #openstack18:44
*** slaweq has quit IRC18:50
*** seco has joined #openstack18:54
*** slaweq has joined #openstack18:56
*** A-KO has quit IRC18:59
*** slaweq_ has joined #openstack19:02
*** slaweq has quit IRC19:05
*** ttsiouts has quit IRC19:06
*** KnownSyntax has quit IRC19:08
*** KnownSyntax has joined #openstack19:09
*** belmoreira has quit IRC19:10
*** shibboleth has quit IRC19:15
*** suuuper has quit IRC19:17
*** Lucas_Gray has joined #openstack19:18
*** nksegos has quit IRC19:20
*** nsegkos has joined #openstack19:20
*** Lucas_Gray has quit IRC19:21
*** nsegkos is now known as nksegos19:22
*** Lucas_Gray has joined #openstack19:24
*** Lucas_Gray has quit IRC19:41
*** ttsiouts has joined #openstack19:42
*** ttsiouts has quit IRC19:44
*** ttsiouts has joined #openstack19:44
*** Lucas_Gray has joined #openstack19:45
*** shibboleth has joined #openstack19:49
*** ttsiouts has quit IRC19:49
*** seco has quit IRC20:00
*** brokencycle has joined #openstack20:04
*** ttsiouts has joined #openstack20:18
*** JD|cloud is now known as ZFC20:24
*** ttsiouts has quit IRC20:28
*** ttsiouts has joined #openstack20:28
*** avivgt has quit IRC20:29
*** billkgr has quit IRC20:31
*** servagem has quit IRC20:34
*** cah_link has quit IRC20:47
*** jmasud has quit IRC20:54
*** jmasud has joined #openstack20:56
*** RickDeckard has quit IRC21:01
*** jangutter has quit IRC21:16
*** morazi has joined #openstack21:19
*** avolkov has quit IRC21:31
*** nksegos has quit IRC21:34
*** nsegkos has joined #openstack21:35
*** ymasson has quit IRC21:36
*** nsegkos is now known as nksegos21:37
*** ymasson has joined #openstack21:38
*** dosaboy has quit IRC21:46
*** phenom has quit IRC21:51
*** phenom has joined #openstack21:58
*** dosaboy has joined #openstack22:02
*** rcernin has quit IRC22:05
*** rcernin has joined #openstack22:06
*** jmasud has quit IRC22:11
*** nksegos has quit IRC22:12
*** Lucas_Gray has quit IRC22:13
*** nksegos has joined #openstack22:13
*** fsimonce has quit IRC22:13
*** nksegos has quit IRC22:20
*** ttsiouts has quit IRC22:27
*** spiral has quit IRC22:29
*** tboerger has joined #openstack22:33
tboergerlo aspiers 8)22:34
*** skyraven has quit IRC22:36
*** skyraven has joined #openstack22:37
*** jangutter has joined #openstack22:39
*** skyraven has quit IRC22:41
*** tkajinam has joined #openstack22:43
*** jtomasek has quit IRC22:43
*** jangutter has quit IRC22:45
*** jmasud has joined #openstack22:57
*** ttsiouts has joined #openstack23:04
*** Lucas_Gray has joined #openstack23:04
*** ttsiouts has quit IRC23:09
*** cr4y1 has quit IRC23:16
*** threestrands has joined #openstack23:18
*** slaweq_ has quit IRC23:21
*** timClicks has joined #openstack23:22
*** slaweq_ has joined #openstack23:24
*** slaweq_ has quit IRC23:29
*** skyraven has joined #openstack23:32
*** Lucas_Gray has quit IRC23:34
*** shibboleth has quit IRC23:35
*** ttsiouts has joined #openstack23:39
*** skyraven has quit IRC23:43
*** jangutter has joined #openstack23:46
*** timClicks has quit IRC23:51
*** kenperkins has quit IRC23:51
*** kenperkins has joined #openstack23:52
*** jangutter has quit IRC23:52

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!