*** Xafloc has quit IRC | 00:00 | |
*** shibboleth has quit IRC | 00:31 | |
*** threestrands has joined #openstack | 00:35 | |
*** slaweq has joined #openstack | 00:49 | |
*** rapscalian has quit IRC | 00:54 | |
*** brokencycle has quit IRC | 01:39 | |
*** __ministry has joined #openstack | 02:01 | |
*** jmasud has joined #openstack | 02:39 | |
*** rvd has joined #openstack | 02:51 | |
*** jhesketh has joined #openstack | 02:56 | |
*** ircuser-1 has quit IRC | 03:09 | |
*** jmasud has quit IRC | 03:53 | |
*** skyraven has quit IRC | 04:43 | |
*** kenperkins has quit IRC | 04:59 | |
*** cah_link has joined #openstack | 05:00 | |
*** tkajinam has quit IRC | 05:12 | |
*** tkajinam has joined #openstack | 05:13 | |
*** jmasud has joined #openstack | 05:14 | |
*** iokiwi has quit IRC | 05:16 | |
*** iokiwi has joined #openstack | 05:17 | |
*** yaawang_ has quit IRC | 05:18 | |
*** skyraven has joined #openstack | 05:19 | |
*** yaawang_ has joined #openstack | 05:20 | |
*** spiral has joined #openstack | 05:31 | |
*** shyamb has joined #openstack | 05:48 | |
*** skyraven has quit IRC | 05:58 | |
*** skyraven has joined #openstack | 05:58 | |
*** shyamb has quit IRC | 06:04 | |
*** miloa has joined #openstack | 06:04 | |
*** seco has joined #openstack | 06:04 | |
*** jtomasek has joined #openstack | 06:05 | |
*** shyamb has joined #openstack | 06:05 | |
*** nightmare_unreal has joined #openstack | 06:32 | |
*** suuuper has joined #openstack | 06:43 | |
*** avivgt has joined #openstack | 06:44 | |
*** mn3m has quit IRC | 06:45 | |
*** mn3m has joined #openstack | 06:45 | |
*** shyamb has quit IRC | 06:53 | |
*** shyamb has joined #openstack | 06:53 | |
*** fsimonce has joined #openstack | 07:01 | |
*** shyamb has quit IRC | 07:03 | |
*** ttsiouts has joined #openstack | 07:11 | |
*** bengates has joined #openstack | 07:11 | |
*** pcaruana has joined #openstack | 07:12 | |
*** rpittau|afk is now known as rpittau | 07:12 | |
*** tesseract has joined #openstack | 07:12 | |
*** ttsiouts has quit IRC | 07:14 | |
*** ttsiouts_ has joined #openstack | 07:14 | |
*** threestrands_ has joined #openstack | 07:18 | |
*** threestrands_ has quit IRC | 07:18 | |
*** jmasud has quit IRC | 07:19 | |
*** jmasud has joined #openstack | 07:20 | |
*** bengates has quit IRC | 07:21 | |
*** threestrands has quit IRC | 07:21 | |
*** bengates has joined #openstack | 07:21 | |
*** tamas_erdei has quit IRC | 07:22 | |
*** jcapitao has joined #openstack | 07:26 | |
*** lucadelmonte90 has joined #openstack | 07:33 | |
*** sverrest has quit IRC | 07:45 | |
*** imega has quit IRC | 07:46 | |
*** imega has joined #openstack | 07:46 | |
*** jmasud has quit IRC | 07:47 | |
*** lucadelmonte90 is now known as squalluca | 07:51 | |
*** alexmcleod has joined #openstack | 07:51 | |
*** S4ren has joined #openstack | 07:52 | |
*** negronjl has quit IRC | 07:58 | |
*** negronjl has joined #openstack | 08:01 | |
*** sshnaidm has joined #openstack | 08:22 | |
*** shyamb has joined #openstack | 08:23 | |
*** dsneddon has quit IRC | 08:41 | |
*** dsneddon has joined #openstack | 08:41 | |
*** shyam89 has joined #openstack | 08:45 | |
*** shyamb has quit IRC | 08:48 | |
*** ttsiouts_ has quit IRC | 08:48 | |
*** ttsiouts has joined #openstack | 08:53 | |
oklhost | Hi @all. Anybody facing issues with latest Google Chrome and "Launch Instance" button in horizon? The modal won't open... | 09:04 |
---|---|---|
*** avolkov has joined #openstack | 09:11 | |
squalluca | hello, i was wondering if you could give me some help, since my google-fu failed me on this one.In my company we are planning to deploy openstack (we are still in a very early stage), our datacenter network topology is partitioned in network islands, the delivery of public network is accomplished via vlans at each TOR switch, all racks belonging to | 09:14 |
squalluca | a network island have access to a set o vlan segment used to delivery public networks, but racks on ther network islands are not reached by the same segments.We were planning to segregate the compute part with cells ( 1 per island), my doubt is, is there a way in neutron to specify the hosts from which this network is reachable and pass this info | 09:14 |
squalluca | to the placement service in order to schedule resources requesting a particular network to the right compute host? | 09:14 |
*** shyam89 has quit IRC | 09:20 | |
*** shyam89 has joined #openstack | 09:20 | |
*** gregwork has quit IRC | 09:24 | |
admin0 | squalluca, its not clear if your public segment is on an island .. or the private segment also ? | 09:25 |
*** rcernin has quit IRC | 09:26 | |
admin0 | for argumens, lets assume you need 5 different network ranges 1. to ssh to the server from your vpn/office (routable) 2. API network 3. east-west (vxlan) network 4. storage network 5. north-south ( public ip) routable | 09:27 |
admin0 | so between your racks, what network can talk to each other, and what cannot ? | 09:28 |
squalluca | admin0 hello, only the public ones, my goal would be to allow private segments ( on vxlan ) to span multiple cells, and have a separete sets of publics vlan for each cells | 09:28 |
squalluca | @admin0 everything is shared but 5, noth sout traffic | 09:29 |
*** this10nly has joined #openstack | 09:29 | |
admin0 | so for example, if you have 3 racks, each rack can reach the (shared) north-south but everything else is segmented .. or its the opposite .. means each rack can share the other networks, but public will be segmented ? | 09:30 |
squalluca | @admin0 the opposite, each rack can share the other networks but public is segmented | 09:31 |
admin0 | ok .. so what you are looking for is a way to map specific hypervisors ( or az, server groups ) to specific external networks | 09:31 |
squalluca | yes | 09:32 |
*** shyam89 has quit IRC | 09:32 | |
admin0 | squalluca, i don't know the answer yet :) | 09:33 |
admin0 | and if you don't get a suitable solution, is this a fixed requirement or still subject to change in networking ? | 09:35 |
*** shyamb has joined #openstack | 09:35 | |
squalluca | @admin0 probably fixed, dropping that requirment will mean to rethink all our dc networking, technically doable, financially not :D | 09:37 |
admin0 | isn't sharing a network just a matter of adding a cable and the right vlan tag :) ? | 09:37 |
admin0 | technically, you can add multiple provider networks .. so lets say rack1-uplink, rack2-uplink and rack3-uplink .. and each network will work only from their respective instances from the same rack | 09:39 |
admin0 | so if someone from rack2( or a-z 2 ) connects to rack-3 network, it will not work | 09:39 |
admin0 | but in a way that is transparent and works automatically out of the box, not sure .. ( maybe others will know ) | 09:39 |
squalluca | admin0 in theory yes, but our dc have 10 islands, each with around 100 racks, it was thought to isolate l2 storms and broadcast to just a section of the dc | 09:41 |
squalluca | @admin0 50 racks each sry | 09:41 |
*** shyam89 has joined #openstack | 09:45 | |
squalluca | @admin0 the closest thing that i find that could work more or less are 'Routed provider networks', but from what i understand the segments must all have the same vlan id ( but maybe i am wrong) and it's not clear to me if i can add multiple segments to the same AZ | 09:46 |
*** shyamb has quit IRC | 09:48 | |
*** Fre4k5en has joined #openstack | 09:50 | |
*** rcernin has joined #openstack | 09:50 | |
*** Fre4k5en has quit IRC | 10:06 | |
*** mn3m has quit IRC | 10:13 | |
*** rpittau is now known as rpittau|bbl | 10:15 | |
admin0 | squalluca, openstack provides filtering so that user generated l2 storms ( or sniffing, snooping etc) does not hamper the network using ebtables | 10:19 |
admin0 | you can add multiple routed provider networks and it assumes all compute nodes can reach it | 10:19 |
admin0 | but if some are in diff island, they cannot reach .. but it will not fail either | 10:19 |
admin0 | if its private , you can ask users to use the correct networking in the correct a-z | 10:20 |
admin0 | so if you create 2 availability zones, say island1 and island2, create 2 provider networks, net1 and net2 .. and ask island1 users to use only net1 as net2 will not work | 10:20 |
admin0 | but another issue is network nodes | 10:21 |
admin0 | if a qrouter is in the wrong zone, you have to manually move it to the correct island | 10:21 |
*** imega has quit IRC | 10:21 | |
squalluca | @admin0 yes, i am aware that os can prevent snooping and broadcast, but unfortunately we have other services in tha dcs, and i would probably have to kill all the network team to let me share vlans across all the dcs, they are old school :( | 10:26 |
*** imega has joined #openstack | 10:27 | |
squalluca | @admin0 maybe a combination of routed provided networks and neutron avaibility zones could do the trick? i was reading now about neutron azs, what i cannot grasp is, can i assign a neutron az to a Open vSwitch agent o metadata agent? | 10:28 |
*** shyam89 has quit IRC | 10:33 | |
*** jcapitao is now known as jcapitao_lunch | 10:37 | |
admin0 | i think this can be solved .. | 10:46 |
admin0 | you install openstack .. and create a-z based on which island the server is in .. | 10:47 |
admin0 | after that, add a provider network on that specific a-z | 10:47 |
admin0 | since the public is not shared across islands, you may not have to share your vxlan ( east-west) across a-z as well | 10:50 |
admin0 | the only thing you share is API and maybe storage | 10:51 |
*** squalluca has quit IRC | 10:51 | |
*** ttsiouts has quit IRC | 11:20 | |
*** tkajinam has quit IRC | 11:21 | |
*** ttsiouts has joined #openstack | 11:30 | |
*** dsneddon has quit IRC | 11:31 | |
*** this10nly has quit IRC | 11:31 | |
*** this10nly has joined #openstack | 11:33 | |
*** belmoreira has joined #openstack | 12:01 | |
*** rpittau|bbl is now known as rpittau | 12:03 | |
*** jcapitao_lunch is now known as jcapitao | 12:07 | |
*** ttsiouts has quit IRC | 12:10 | |
*** ttsiouts has joined #openstack | 12:12 | |
*** ttsiouts has quit IRC | 12:17 | |
*** jangutter has joined #openstack | 12:18 | |
*** nksegos has joined #openstack | 12:19 | |
*** ttsiouts has joined #openstack | 12:22 | |
*** servagem has joined #openstack | 12:22 | |
*** lucadelmonte90 has joined #openstack | 12:23 | |
*** lucadelmonte90 is now known as squalluca | 12:24 | |
*** Lucas_Gray has joined #openstack | 12:25 | |
*** ttsiouts has quit IRC | 12:27 | |
squalluca | @admin0 "since the public is not shared across islands, you may not have to share your vxlan ( east-west) across a-z as well" yeah that was my doubt with this solution, if sharing tenant network across azs could create some issues, or if it is even possible, btw we will probably segregate users per AZ/Cell in the first phase, but the having the | 12:28 |
squalluca | option to allow cross az tenant traffic is something we would like in the long run | 12:28 |
*** ttsiouts has joined #openstack | 12:32 | |
*** Goneri has joined #openstack | 12:42 | |
*** ttsiouts has quit IRC | 12:44 | |
*** ttsiouts has joined #openstack | 12:45 | |
*** __ministry has quit IRC | 12:45 | |
*** RickDeckard has joined #openstack | 12:55 | |
*** nksegos has quit IRC | 12:59 | |
*** nsegkos has joined #openstack | 12:59 | |
*** nsegkos is now known as nksegos | 13:01 | |
*** Lucas_Gray has quit IRC | 13:06 | |
*** irclogbot_3 has quit IRC | 13:06 | |
*** irclogbot_2 has joined #openstack | 13:08 | |
*** dayou_ has joined #openstack | 13:09 | |
*** dayou has quit IRC | 13:11 | |
*** kenperkins has joined #openstack | 13:21 | |
*** masticass has joined #openstack | 13:21 | |
*** ttsiouts has quit IRC | 13:22 | |
*** ttsiouts has joined #openstack | 13:32 | |
*** ttsiouts has quit IRC | 13:37 | |
*** hoonetorg has quit IRC | 13:40 | |
*** squalluca has quit IRC | 13:40 | |
*** ttsiouts has joined #openstack | 13:42 | |
*** ttsiouts has quit IRC | 13:45 | |
*** ttsiouts has joined #openstack | 13:45 | |
*** cr4y1 has joined #openstack | 13:50 | |
*** tkajinam has joined #openstack | 13:53 | |
*** miloa has quit IRC | 13:56 | |
-openstackstatus- NOTICE: Zuul is temporarily offline; service should be restored in about 15 minutes. | 13:57 | |
*** lucadelmonte90 has joined #openstack | 13:58 | |
*** hoonetorg has joined #openstack | 13:59 | |
*** dayou_ has quit IRC | 14:16 | |
*** dayou has joined #openstack | 14:17 | |
*** morazi has quit IRC | 14:21 | |
*** morazi has joined #openstack | 14:21 | |
*** cah_link has quit IRC | 14:27 | |
*** this10nly has quit IRC | 14:28 | |
*** dsneddon has joined #openstack | 14:29 | |
*** weaselkeeper has joined #openstack | 14:38 | |
*** tkajinam has quit IRC | 14:59 | |
*** sangeet has joined #openstack | 15:05 | |
*** Nafallo has quit IRC | 15:07 | |
*** Nafallo has joined #openstack | 15:08 | |
*** dswebb has joined #openstack | 15:09 | |
*** mmethot has quit IRC | 15:19 | |
sangeet | I am using Stein and ml2 plugin. I do not see Security Headers (X-Content-Type-Options and X-Frame-Options) in the response message. How can I get these headers in the responses from Neutron? Security Headers are defined and used for v2 api (neutron/api/v2/resources.py) but I did not see any such thing in neutron/pecan_wsgi/controllers/resource.py or neutron/plugins/ml2. Please help | 15:19 |
*** sangeet has quit IRC | 15:20 | |
*** Nafallo_ has joined #openstack | 15:22 | |
*** Nafallo has quit IRC | 15:23 | |
*** sangeet has joined #openstack | 15:29 | |
*** mmethot has joined #openstack | 15:34 | |
*** gyee has joined #openstack | 15:40 | |
*** ttsiouts has quit IRC | 15:43 | |
-openstackstatus- NOTICE: Gerrit will be restarted to correct a misconfiguration which caused some git mirrors to have outdated references. | 15:46 | |
*** chicocvenancio has quit IRC | 15:46 | |
*** hoonetorg has quit IRC | 15:46 | |
*** chicocvenancio has joined #openstack | 15:48 | |
*** ttsiouts has joined #openstack | 15:51 | |
*** ddstreet has quit IRC | 15:51 | |
*** ddstreet has joined #openstack | 15:52 | |
*** ianychoi_ is now known as ianychoi | 15:53 | |
sangeet | I am using Stein and ml2 plugin. I do not see Security Headers (X-Content-Type-Options and X-Frame-Options) in the response message. How can I get these headers in the responses from Neutron? Security Headers are defined and used for v2 api (neutron/api/v2/resources.py) but I did not see any such thing in neutron/pecan_wsgi/controllers/resource.py or neutron/plugins/ml2. Please help | 15:54 |
*** cah_link has joined #openstack | 15:56 | |
*** KeithMnemonic has joined #openstack | 16:00 | |
*** hoonetorg has joined #openstack | 16:00 | |
*** bengates has quit IRC | 16:02 | |
*** bengates has joined #openstack | 16:02 | |
*** morazi has quit IRC | 16:03 | |
*** morazi has joined #openstack | 16:05 | |
*** bengates has quit IRC | 16:07 | |
*** rpittau is now known as rpittau|afk | 16:07 | |
*** seco has quit IRC | 16:09 | |
*** lucadelmonte90 has quit IRC | 16:10 | |
*** jmasud has joined #openstack | 16:12 | |
*** morazi has quit IRC | 16:13 | |
*** morazi has joined #openstack | 16:13 | |
*** jcapitao has quit IRC | 16:14 | |
*** morazi has quit IRC | 16:20 | |
*** ttsiouts has quit IRC | 16:22 | |
*** yaawang has joined #openstack | 16:33 | |
*** yaawang_ has quit IRC | 16:33 | |
*** ttsiouts has joined #openstack | 16:38 | |
*** nksegos has quit IRC | 16:44 | |
*** nsegkos has joined #openstack | 16:44 | |
*** nsegkos is now known as nksegos | 16:44 | |
*** cah_link has quit IRC | 16:45 | |
*** jmasud has quit IRC | 16:46 | |
*** jmasud has joined #openstack | 16:47 | |
*** jmasud has quit IRC | 16:53 | |
*** preece has quit IRC | 16:54 | |
*** kklimonda has quit IRC | 16:54 | |
*** ttsiouts has quit IRC | 16:54 | |
*** jmasud has joined #openstack | 16:55 | |
*** preece has joined #openstack | 16:55 | |
*** kklimonda has joined #openstack | 16:55 | |
*** sshnaidm is now known as sshnaidm|afk | 16:59 | |
*** seco has joined #openstack | 17:06 | |
*** aconole has joined #openstack | 17:11 | |
*** seco has quit IRC | 17:12 | |
*** tesseract has quit IRC | 17:18 | |
*** S4ren has quit IRC | 17:33 | |
*** ttsiouts has joined #openstack | 17:34 | |
*** ttsiouts has quit IRC | 17:39 | |
*** seco has joined #openstack | 17:45 | |
*** seco has quit IRC | 17:50 | |
*** billkgr has joined #openstack | 17:52 | |
*** kenperkins has quit IRC | 17:57 | |
*** kenperkins has joined #openstack | 17:58 | |
*** ircuser-1 has joined #openstack | 18:00 | |
*** nightmare_unreal has quit IRC | 18:02 | |
*** billkgr has quit IRC | 18:07 | |
*** kenperkins has quit IRC | 18:07 | |
*** kenperkins has joined #openstack | 18:08 | |
*** jmasud has quit IRC | 18:10 | |
*** ttsiouts has joined #openstack | 18:11 | |
*** billkgr has joined #openstack | 18:12 | |
*** shibboleth has joined #openstack | 18:14 | |
*** shibboleth has joined #openstack | 18:15 | |
*** sauvin has quit IRC | 18:21 | |
*** seco has joined #openstack | 18:22 | |
*** ttsiouts has quit IRC | 18:26 | |
*** ttsiouts has joined #openstack | 18:26 | |
*** seco has quit IRC | 18:27 | |
*** vexorg has quit IRC | 18:30 | |
*** vexorg has joined #openstack | 18:31 | |
*** jrosser has quit IRC | 18:41 | |
*** jrosser has joined #openstack | 18:42 | |
*** cah_link has joined #openstack | 18:42 | |
*** jmasud has joined #openstack | 18:44 | |
*** slaweq has quit IRC | 18:50 | |
*** seco has joined #openstack | 18:54 | |
*** slaweq has joined #openstack | 18:56 | |
*** A-KO has quit IRC | 18:59 | |
*** slaweq_ has joined #openstack | 19:02 | |
*** slaweq has quit IRC | 19:05 | |
*** ttsiouts has quit IRC | 19:06 | |
*** KnownSyntax has quit IRC | 19:08 | |
*** KnownSyntax has joined #openstack | 19:09 | |
*** belmoreira has quit IRC | 19:10 | |
*** shibboleth has quit IRC | 19:15 | |
*** suuuper has quit IRC | 19:17 | |
*** Lucas_Gray has joined #openstack | 19:18 | |
*** nksegos has quit IRC | 19:20 | |
*** nsegkos has joined #openstack | 19:20 | |
*** Lucas_Gray has quit IRC | 19:21 | |
*** nsegkos is now known as nksegos | 19:22 | |
*** Lucas_Gray has joined #openstack | 19:24 | |
*** Lucas_Gray has quit IRC | 19:41 | |
*** ttsiouts has joined #openstack | 19:42 | |
*** ttsiouts has quit IRC | 19:44 | |
*** ttsiouts has joined #openstack | 19:44 | |
*** Lucas_Gray has joined #openstack | 19:45 | |
*** shibboleth has joined #openstack | 19:49 | |
*** ttsiouts has quit IRC | 19:49 | |
*** seco has quit IRC | 20:00 | |
*** brokencycle has joined #openstack | 20:04 | |
*** ttsiouts has joined #openstack | 20:18 | |
*** JD|cloud is now known as ZFC | 20:24 | |
*** ttsiouts has quit IRC | 20:28 | |
*** ttsiouts has joined #openstack | 20:28 | |
*** avivgt has quit IRC | 20:29 | |
*** billkgr has quit IRC | 20:31 | |
*** servagem has quit IRC | 20:34 | |
*** cah_link has quit IRC | 20:47 | |
*** jmasud has quit IRC | 20:54 | |
*** jmasud has joined #openstack | 20:56 | |
*** RickDeckard has quit IRC | 21:01 | |
*** jangutter has quit IRC | 21:16 | |
*** morazi has joined #openstack | 21:19 | |
*** avolkov has quit IRC | 21:31 | |
*** nksegos has quit IRC | 21:34 | |
*** nsegkos has joined #openstack | 21:35 | |
*** ymasson has quit IRC | 21:36 | |
*** nsegkos is now known as nksegos | 21:37 | |
*** ymasson has joined #openstack | 21:38 | |
*** dosaboy has quit IRC | 21:46 | |
*** phenom has quit IRC | 21:51 | |
*** phenom has joined #openstack | 21:58 | |
*** dosaboy has joined #openstack | 22:02 | |
*** rcernin has quit IRC | 22:05 | |
*** rcernin has joined #openstack | 22:06 | |
*** jmasud has quit IRC | 22:11 | |
*** nksegos has quit IRC | 22:12 | |
*** Lucas_Gray has quit IRC | 22:13 | |
*** nksegos has joined #openstack | 22:13 | |
*** fsimonce has quit IRC | 22:13 | |
*** nksegos has quit IRC | 22:20 | |
*** ttsiouts has quit IRC | 22:27 | |
*** spiral has quit IRC | 22:29 | |
*** tboerger has joined #openstack | 22:33 | |
tboerger | lo aspiers 8) | 22:34 |
*** skyraven has quit IRC | 22:36 | |
*** skyraven has joined #openstack | 22:37 | |
*** jangutter has joined #openstack | 22:39 | |
*** skyraven has quit IRC | 22:41 | |
*** tkajinam has joined #openstack | 22:43 | |
*** jtomasek has quit IRC | 22:43 | |
*** jangutter has quit IRC | 22:45 | |
*** jmasud has joined #openstack | 22:57 | |
*** ttsiouts has joined #openstack | 23:04 | |
*** Lucas_Gray has joined #openstack | 23:04 | |
*** ttsiouts has quit IRC | 23:09 | |
*** cr4y1 has quit IRC | 23:16 | |
*** threestrands has joined #openstack | 23:18 | |
*** slaweq_ has quit IRC | 23:21 | |
*** timClicks has joined #openstack | 23:22 | |
*** slaweq_ has joined #openstack | 23:24 | |
*** slaweq_ has quit IRC | 23:29 | |
*** skyraven has joined #openstack | 23:32 | |
*** Lucas_Gray has quit IRC | 23:34 | |
*** shibboleth has quit IRC | 23:35 | |
*** ttsiouts has joined #openstack | 23:39 | |
*** skyraven has quit IRC | 23:43 | |
*** jangutter has joined #openstack | 23:46 | |
*** timClicks has quit IRC | 23:51 | |
*** kenperkins has quit IRC | 23:51 | |
*** kenperkins has joined #openstack | 23:52 | |
*** jangutter has quit IRC | 23:52 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!