15:01:34 #startmeeting distributed-virtual-router 15:01:35 Meeting started Wed Nov 26 15:01:34 2014 UTC and is due to finish in 60 minutes. The chair is Swami. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:01:36 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:01:38 The meeting name has been set to 'distributed_virtual_router' 15:01:53 #topic Agenda 15:02:05 DVR technical debts 15:02:19 1. VLAN Support for DVR 15:02:35 2. VPNaaS support for DVR 15:02:50 3. Migration of Legacy routers to DVR 15:03:02 4. HA for Service Node 15:03:23 5. DVR to work with IPv6 in neutron 15:03:37 6. L3 Agent Refactor 15:03:46 7. Agent Restart 15:04:01 8. Distributed DHCP 15:04:15 9. Functional and Scenario Tests 15:04:31 10. Firewall as a Service East-West 15:04:44 11. Performance tuning. 15:05:24 There are more items in the list that can be achieved in the Kilo time frame. 15:06:02 But based on the Kilo design summit and the items prioritized we will choose the high priority items and try to finish it by Kilo. 15:06:29 #topic Legacy to DVR Migration 15:06:43 mrsmith: are you here 15:07:20 This patch to migrate from Legacy to DVR routers got merged couple of days back. 15:08:11 Rajeev: hi 15:08:34 Hi Swami 15:09:15 #link https://review.openstack.org/#/c/105855/ 15:09:39 This is the link to the migration patch that got merged. 15:10:30 There is an additional patch to go along with the migration that will validate the services before migration. That patch is up for review. 15:11:01 #link https://review.openstack.org/#/c/123273/ 15:11:47 that's all from the migration of legacy to dvr routers. 15:12:07 So one of the item from our backlog list can be marked as done. 15:12:25 mrsmith: great job for working on this migration patch. 15:12:51 Swami: mrsmith: Great work 15:13:01 #topic DVR to work with IPv6 15:13:05 Rajeev: any update on this 15:13:49 we have couple of patches up for review 15:13:58 https://review.openstack.org/#/c/134676/ 15:14:10 and https://review.openstack.org/#/c/136947/ 15:14:32 haleyb: hi 15:14:33 These enable IPv6 with DVR 15:14:37 hi swami 15:14:38 for devstack 15:14:52 haleyb: HI and thanks 15:15:08 I will file another bug for the duplicate ip rule issue, since this happens before this is well 15:15:31 haleyb: is this related to IPv6? 15:15:47 no, just a bug rajeev noticed 15:16:07 i was trying to fold it into my patch, but time is short this week 15:16:17 ok, then go ahead and file the bug in launchpad and we can take it from there. 15:16:35 haleyb: sounds good. 15:17:10 So with these two patches up, will this solve turning on IPv6 with DVR. 15:17:57 I think we still might need a plan for optimizing IPv6 w/DVR in Kilo. There was a blueprint filed by robert, but it needs a little work. 15:18:10 Swami: there are quite a few things being worked out in Ipv6 group 15:18:33 This patch enables initial deployment with devstack 15:18:43 But then we do have some dependencies on the IPv6 team. 15:18:43 so that further dev can be done 15:18:48 Swami: it should get it working, but as rajeev said, there are some other IPv6 things to get working before we claim victory 15:19:02 Are these patches a candidate for backport to Juno Stable. 15:19:32 Rajeev: if you haven't read roberts spec, please do, or maybe we have to create another 15:19:56 haleyb: do you have the link, can you post it here for us to track. 15:20:00 haleyb: will take a look at it 15:20:30 after the holidays 15:20:43 Swami: https://review.openstack.org/#/c/136878/ is the IPv6/DVR spec 15:22:06 haleyb: thanks for the link 15:22:13 Swami: as far as backport, they are pretty contained so could be done 15:22:29 haleyb: Rajeev : thanks for the update 15:22:40 Moving on to the next agenda topic 15:23:24 #topic VLAN support for DVR 15:23:32 I don't see vivek in here. 15:23:47 vivek is currently working on the VLAN support for DVR. 15:24:45 He posted wip patch 15:24:49 #link https://review.openstack.org/#/c/129884/ 15:25:11 I need to check with vivek on the progress. 15:26:10 he also had a spec for VLAN support 15:26:13 #link https://review.openstack.org/#/c/131800/ 15:26:49 Ok I can collect the status from him later and will update next week. 15:26:57 Moving on to the next topic. 15:27:16 #topic VPNaaS support for DVR 15:27:39 I worked on a wip patch for VPNaaS support for DVR. 15:28:06 #link https://review.openstack.org/#/c/127133/ 15:28:40 This patch had some issues and i have fixed it and the VPN is working along with DVR in the service node. 15:29:03 I will push another wip today with the changes and I am also working on the UT for this patch. 15:29:32 So this should be all done by next week. 15:29:54 #topic L3 Agent Refactor 15:30:29 carl_baldwin has posted a spec for the L3 agent refactoring 15:30:36 #link https://review.openstack.org/#/c/131535/ 15:31:34 The team to work on the L3 agent refactoring will be amuller, mrsmith, carl_baldwin and probably rajeev 15:32:10 This is work in progress and carl_baldwin has some patches out there for the L3 agent refactoring. 15:32:46 Moving on to the next topic 15:33:01 #topic Functional test and Scenario test 15:33:24 I brought in this topic now is because it is related to the l3 agent refactor. 15:33:54 Before we handle any major change in L3 agent refactor we have to complete the functional tests for the DVR. 15:34:33 Yesterday we had a meeting with marun, amuller, adolfo, rajeev, mrsmith and carl_baldwin regarding the testing approach. 15:35:03 The plan is the first work on the functional test. Adolfo will be working on it and will push the patch upstream for review. 15:35:44 Then once the functional tests are completed, then we will move on to the scenarion test in tempest. This has some dependencies, so we will help the community to speed up the process. 15:36:43 Also we want to review the test plan based on either scenario or functional and move it to the right modules. 15:37:30 The team mentioned above will keep track and review it until a proper process is in place in the community for reviewing the test plan. 15:38:19 #topic L3 HA and DVR 15:38:47 Rajeev: do you want to give an update on this 15:39:37 mrsmith and I are looking into HA for DVR 15:40:19 this would address the SNAT HA because rest of the functionality is distributed already 15:40:59 #link https://wiki.openstack.org/wiki/Neutron/DVR/ServiceNode-HA 15:41:08 Currently, L3-HA is not working with L2POP, this will be a blocker for us 15:41:52 #link https://bugs.launchpad.net/neutron/+bug/1365476 15:41:54 Launchpad bug 1365476 in neutron "HA routers interact badly with l2pop" [High,In progress] 15:42:15 Rajeev, Swami Hi 15:42:18 yes working it 15:42:46 safchain: Thanks 15:43:07 safchain: Yes saw your activity in the launchpad. 15:43:21 Rajeev, the main issue here is to have port/multiple host binding 15:43:47 safchain: thanks, it would be great if have fix for it, while we will be working on the other aspects of the Service node HA. 15:43:48 so more a work around ml2 15:43:58 safchain: ok, anything you can draw from how DVR handles L2POP 15:44:34 Rajeev, not for now but I'll ping you if needed 15:44:35 safchain: do you have a wip patch that we can use for our testing or are you still working on it. 15:44:47 Swami, still working on it 15:44:58 it seems DVR has a similar situation of same port on multiple nodes 15:45:19 Rajeev, yes you added a special table for that 15:45:22 Rajeev, ? 15:45:30 safchain: Ok we will wait for your response then. 15:46:11 safchain: Yes vivek added a port binding table in the ml2 that handles a single port being used in multiple hosts. 15:46:51 Swami, yes so there will be a kind of overlap here, so i'll check how to address that 15:47:03 safchain: the router ports appear on multiple nodes with the same MAC address. From your prev. comment it looks like you have seen into it 15:47:34 Rajeev, yes 15:47:54 safchain: if you need any help ping vivek for it. 15:48:02 Swami, ok thx 15:48:07 safchain: sounds good. drop an email if you need more info 15:48:43 sure, i'll do 15:49:53 ok, sounds good. 15:49:55 Swami: that is all on HA that I know of 15:50:39 Here is the link to the wiki that we maintain to share the ideas on knowledge with the HA team. 15:50:42 #link https://wiki.openstack.org/wiki/Neutron/DVR/ServiceNode-HA 15:51:03 moving on to the next topic 15:51:15 #topic Firewall as a Service East West with DVR 15:51:33 We had some preliminary talk with the FWaaS team in Paris. 15:51:58 there were two ideas that we had to implement the East-West routing for DVR. 15:52:21 The first one would be to route the return traffic back into the qr and the forward it to the VMs. 15:52:54 The second one will be like a bump in the wire, to add another bridge in between the br-int and the br-tun and apply the firewall rules in there. 15:53:27 I have an action item to send a high level picture on our proposal to the FWaaS team. 15:53:38 I will talk to them today in their FWaaS IRC meeting. 15:54:01 #topic Documentation 15:54:27 We will be working with the documentation team to review the DVR documentation. 15:54:59 The DVR documentation will be included in the networking guide and we will be in the reviewers list to review the document. 15:56:12 I am currently working with Matt Kassawara, Phil Hopkins, Edgar Magana and Elke Vorheis to provide our feedback on the DVR documentation. 15:56:40 So we are almost at the end of the hour. 15:56:47 #topic Open Discussions 15:57:03 Any other topics 15:58:03 If no other topics, we can end the session. 15:58:14 Thanks everyone for joining the meeting. 15:58:34 We did not have enough time to do the bug scrum, probably we will do it next week. 15:58:43 See you all next week. Bye 15:58:47 #endmeeting