*** bobh has joined #tacker | 00:02 | |
*** bobh has quit IRC | 00:07 | |
*** bobh has joined #tacker | 00:11 | |
*** bobh has quit IRC | 00:16 | |
*** bobh has joined #tacker | 00:23 | |
*** bobh has quit IRC | 00:28 | |
*** bobh has joined #tacker | 00:30 | |
*** Dinesh__Bhor has joined #tacker | 00:35 | |
*** bobh has quit IRC | 00:35 | |
*** Dinesh__Bhor has quit IRC | 00:36 | |
*** bobh has joined #tacker | 00:46 | |
*** bobh has quit IRC | 00:50 | |
*** bobh has joined #tacker | 00:52 | |
*** bobh has quit IRC | 00:55 | |
*** bobh has joined #tacker | 00:55 | |
*** longkb1 has joined #tacker | 01:03 | |
*** longkb has quit IRC | 01:08 | |
*** gongysh has joined #tacker | 02:06 | |
dangtrinhnt | Hi gongysh, what do you think about this path? https://review.openstack.org/#/c/560934/ | 02:14 |
---|---|---|
*** janki has joined #tacker | 02:45 | |
*** bobh has quit IRC | 03:10 | |
*** bobh has joined #tacker | 03:11 | |
*** bobh has quit IRC | 03:15 | |
*** bobh has joined #tacker | 03:22 | |
*** bobh has quit IRC | 03:27 | |
*** bobh has joined #tacker | 03:30 | |
*** bobh has quit IRC | 03:34 | |
*** bobh has joined #tacker | 03:42 | |
*** bobh has quit IRC | 03:46 | |
*** bobh has joined #tacker | 03:52 | |
*** bobh has quit IRC | 03:57 | |
*** bobh has joined #tacker | 04:03 | |
*** bobh has quit IRC | 04:08 | |
*** bobh has joined #tacker | 04:18 | |
*** bobh has quit IRC | 04:23 | |
*** bobh has joined #tacker | 04:30 | |
*** bobh has quit IRC | 04:35 | |
*** bobh has joined #tacker | 04:44 | |
*** bobh has quit IRC | 04:49 | |
*** bobh has joined #tacker | 04:55 | |
*** bobh has quit IRC | 04:59 | |
*** bobh has joined #tacker | 05:02 | |
*** bobh has quit IRC | 05:07 | |
*** gongysh has quit IRC | 05:09 | |
*** gongysh has joined #tacker | 05:12 | |
*** bobh has joined #tacker | 05:14 | |
*** bobh has quit IRC | 05:19 | |
*** gongysh has quit IRC | 05:24 | |
*** bobh has joined #tacker | 05:24 | |
*** bobh has quit IRC | 05:29 | |
*** bobh has joined #tacker | 05:35 | |
*** bobh has quit IRC | 05:38 | |
*** bobh has joined #tacker | 05:44 | |
*** gongysh has joined #tacker | 05:45 | |
*** bobh has quit IRC | 05:49 | |
*** bobh has joined #tacker | 06:11 | |
*** egonzalez has joined #tacker | 06:14 | |
*** bobh has quit IRC | 06:16 | |
*** bobh has joined #tacker | 06:21 | |
*** bobh has quit IRC | 06:25 | |
*** jchhatbar has joined #tacker | 06:29 | |
*** bobh has joined #tacker | 06:30 | |
*** janki has quit IRC | 06:32 | |
*** bobh has quit IRC | 06:35 | |
*** mardim has joined #tacker | 06:47 | |
*** bobh has joined #tacker | 06:52 | |
*** bobh has quit IRC | 06:57 | |
*** bobh has joined #tacker | 07:02 | |
*** bobh has quit IRC | 07:07 | |
*** bobh has joined #tacker | 07:13 | |
*** bobh has quit IRC | 07:18 | |
*** Dinesh_Bhor has joined #tacker | 07:27 | |
*** bobh has joined #tacker | 07:54 | |
*** gongysh has quit IRC | 08:22 | |
*** gongysh has joined #tacker | 08:25 | |
*** gongysh has quit IRC | 08:40 | |
*** gongysh has joined #tacker | 08:43 | |
*** trinaths has joined #tacker | 09:26 | |
*** Dinesh_Bhor has quit IRC | 09:35 | |
*** gongysh has quit IRC | 09:51 | |
*** trinaths has quit IRC | 11:23 | |
*** bobh has quit IRC | 12:09 | |
mardim | phuoc_, hello | 12:29 |
mardim | phuoc_, Any news from zabbix ? | 12:30 |
mardim | did you tried anything ? | 12:30 |
mardim | try* | 12:30 |
mardim | so far ? | 12:30 |
phuoc_ | hi mardim, | 12:31 |
phuoc_ | I have just read about Zabbix | 12:32 |
phuoc_ | I try to install Zabbix server with docker | 12:32 |
mardim | a ok cool | 12:32 |
phuoc_ | Zabbix gives us to type of monitoring, resource and application monitoring | 12:33 |
mardim | I have already tried networking sfc with queens | 12:33 |
mardim | and worked !! | 12:33 |
mardim | in my devstack | 12:33 |
phuoc_ | I think we can use application monitoring with Zabbix | 12:33 |
phuoc_ | that's good | 12:33 |
phuoc_ | I think devstack and docker will be good to deploy testing environment xD | 12:34 |
mardim | I thought to cut off somehow the ssh traffic | 12:34 |
mardim | can zabbix monitor application for ssh ? | 12:34 |
mardim | I thought somehow zabbix will monitor for ssh traffix | 12:35 |
mardim | and when find any ssh | 12:35 |
mardim | will trigger the cahin creation | 12:35 |
mardim | chain | 12:35 |
phuoc_ | it can monitor state of application, such as stop or start | 12:35 |
phuoc_ | I think it can not find any ssh connection to the vnf | 12:36 |
phuoc_ | I suggest we can run an application on vnf, such as firewall | 12:37 |
phuoc_ | if firewall is inactived, zabbix will trigger creating vnffg | 12:38 |
phuoc_ | that goes through another firewall vnf ^ | 12:38 |
mardim | phuoc_, can we set traffic threshold in zabbix ? | 12:43 |
phuoc_ | I think we can do it | 12:43 |
mardim | and when the traffic will pass that threshold we can trigger the creation of the chain | 12:43 |
mardim | so the topology will be | 12:43 |
phuoc_ | I will check about it, and send feedback to you later | 12:44 |
mardim | we have one client one server | 12:44 |
mardim | and when the traffic towards the server passes a threshold | 12:44 |
phuoc_ | that makes sense to me | 12:44 |
mardim | then we trigger the chain | 12:44 |
mardim | ok ok keep up the good work :) | 12:44 |
openstackgerrit | Nguyen Hai proposed openstack/tacker-horizon master: Add docs to local test tox https://review.openstack.org/559337 | 13:43 |
*** gongysh has joined #tacker | 13:53 | |
mardim | gongysh, Hello | 13:54 |
mardim | gongysh, I tested the networking sfc | 13:55 |
gongysh | mardim, hi | 13:55 |
mardim | in queens | 13:55 |
mardim | and works | 13:55 |
mardim | :) | 13:55 |
mardim | I managed to create a chain with one IDS nad one firewall | 13:55 |
gongysh | good news. | 13:55 |
mardim | those two SFs where dtetecting and blocking ssh to a server | 13:55 |
mardim | and worked :) | 13:55 |
mardim | we can manipulate this somehow to make it work with zabbix | 13:56 |
mardim | we will see | 13:56 |
gongysh | My idea is: we have two VMs: src vm and dst vm, with a zabbix monitoring the traffic of dst vm. two vnfs: one is IDS, other is firewall, a vnffg with empty classifiers. | 13:59 |
gongysh | when zabbix got a alarm, it will trigger a modification of the vnffg to steer the traffic from src vm to throught the vnffg. | 14:00 |
mardim | gongysh, YEs exactly I am thinking the same | 14:01 |
mardim | the problem that we have is how to tell yardstick to update vnffg | 14:01 |
mardim | which will be the cause for the trigger | 14:02 |
mardim | yardstick -> zabbix | 14:02 |
mardim | what will be the trigger ? | 14:02 |
mardim | http traffic ? | 14:02 |
mardim | ssh ? | 14:02 |
mardim | some threshold ? | 14:03 |
mardim | what ? | 14:03 |
mardim | this is what me and phuoc_ troubles | 14:03 |
gongysh | mardim, how about pps (packets per second)? you can set up a zabbix to see what it can monitor on a linux machine. | 14:04 |
mardim | gongysh, zabbix is investigated by phuoc_ ^ | 14:05 |
gongysh | or write a zabbix agent script on linux machine to collect what you want to. | 14:05 |
mardim | gongysh, lets see what he has to tell | 14:05 |
mardim | when he will finish investigation | 14:05 |
mardim | but pps is fine by me | 14:05 |
phuoc_ | I investigate about it | 14:06 |
gongysh | phuoc_, xingan will not go to summit, will you join us for that topic? | 14:09 |
phuoc_ | gongysh, thanks | 14:11 |
gongysh | mardim, phuoc_ , dangtrinhnt nguyenhai , here in china, there is a SDN &NFV meeting my company is joining in, so I think I will be absent again for tomorrow's project meeting. | 14:11 |
phuoc_ | but I can not join | 14:11 |
gongysh | phuoc_, you will not go to summit either? | 14:12 |
mardim | I will join | 14:14 |
gongysh | mardim, thanks | 14:17 |
mardim | gongysh, no pro | 14:18 |
nguyenhai | so, do we have meeting tomorrow? gongysh | 14:19 |
*** bobh has joined #tacker | 14:19 | |
gongysh | nguyenhai, I will be absent. if you guys want, you can set up a meeting. | 14:19 |
phuoc_ | I may attend summit, but it is better if dkushwaha can do it | 14:19 |
gongysh | what do you want to fix, we can have a talk now? | 14:21 |
openstackgerrit | Merged openstack/tacker master: Fix create_vnffgd cannot get description from TOSCA file https://review.openstack.org/557728 | 14:39 |
*** geb_ has quit IRC | 14:43 | |
*** geb has joined #tacker | 14:48 | |
*** egonzalez has quit IRC | 15:03 | |
*** jchhatbar has quit IRC | 15:32 | |
*** gongysh has quit IRC | 16:03 | |
openstackgerrit | Trinh Nguyen proposed openstack/tacker-specs master: Prometheus plugin for container-based VNFs monitoring specs https://review.openstack.org/540416 | 16:19 |
*** bobh has quit IRC | 17:00 | |
*** bobh has joined #tacker | 17:13 | |
geb | hi folks | 17:16 |
geb | Thanks for investigating about sfc. I did not took the time to test with devstack. Meanwhile i can confirm https://github.com/openstack/kolla-ansible/blob/master/contrib/demos/tacker/deploy-tacker-demo-sfc works in pike (had to fetch previous commit because of the format change) while it doesn't in queens, both installed with kolla | 17:18 |
*** bobh has quit IRC | 18:37 | |
*** bobh has joined #tacker | 18:37 | |
*** bobh has quit IRC | 18:42 | |
*** openstackgerrit has quit IRC | 19:05 | |
*** bobh has joined #tacker | 19:13 | |
*** bobh has quit IRC | 23:14 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!