15:01:27 <haleyb> #startmeeting neutron_dvr 15:01:28 <openstack> Meeting started Wed Jan 25 15:01:27 2017 UTC and is due to finish in 60 minutes. The chair is haleyb. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:01:29 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:01:32 <openstack> The meeting name has been set to 'neutron_dvr' 15:01:32 <Swami> haleyb: :) 15:01:43 <haleyb> #chair Swami 15:01:44 <openstack> Current chairs: Swami haleyb 15:02:29 <haleyb> #topic Announcements 15:03:26 <haleyb> we're just about at ocata-3, so re-spin quickly 15:03:36 <Swami> sure will do 15:03:37 <haleyb> although there's been some gate issues slowing things down 15:04:34 <haleyb> and if i've forgetten to add any bugs to https://launchpad.net/neutron/+milestone/ocata-3 just ping me 15:04:52 <haleyb> #topic Bugs 15:05:00 <Swami> haleyb: will take a look and will update the list 15:05:05 <Swami> haleyb: thanks 15:05:21 <Swami> This week there are no new bugs filed as far as I know 15:05:57 <haleyb> https://bugs.launchpad.net/neutron/+bug/1658060 ? 15:05:57 <openstack> Launchpad bug 1658060 in neutron "FirewallNotFound exceptions when deleting the firewall in FWaaS-DVR" [Undecided,In progress] - Assigned to Yaohua Yan (sleepdream) 15:06:10 <haleyb> maybe a fwaas issue 15:06:31 <Swami> haleyb: is this a new bug. May be I missed it. 15:06:34 <reedip_> someone posted a patch for this 15:06:37 <reedip_> :) 15:06:45 <haleyb> Swami: 5 days old 15:07:23 <reedip_> but isnt DVR and FWaaS non combinational ( can we use both DVR and FWaaS together ? ). I read somewhere that it is 15:07:29 <reedip_> btw hi 15:07:31 <Swami> reedip_: I don't see a patch in here. 15:07:57 <Swami> reedip_: DVR can work with FWaaS and provide FWaaS support for North-South but not for East-West 15:07:57 <reedip_> Swami : I got a notification for this, maybe it has just been assigned then 15:08:51 <Swami> reedip_: Also with the new firewall implementation on VM ports, even east-west can be covered with statefullness. The only issue is you should not apply the FWaaS rules to the router ports with DVR for East-West, in that case it would be stateless. 15:09:47 <Swami> haleyb: I will take a look at the bug and triage it. 15:09:50 <haleyb> Swami: so should the compute nodes be running in fwaas mode? 15:10:24 <Swami> haleyb: yes compute nodes should be running the Fwaas agent. 15:10:31 <reedip_> Swami : ok, thanks for the information . I am currently looking into FWaaS a bit so this information helps me in understanding its integration with other Neutron functionalities 15:10:49 <Swami> haleyb: We apply the firewall rules at the 'rfp' port for the north-south traffic in the router namespace. 15:11:02 <Swami> reedip_: you are welcome. 15:11:21 <Swami> The next in our high list is 15:11:23 <haleyb> Swami: ok, thanks, post questions in the bug and hopefully we can figure it out 15:11:26 <Swami> #link https://bugs.launchpad.net/neutron/+bug/1647432 15:11:26 <openstack> Launchpad bug 1647432 in neutron "Multiple SIGHUPs to keepalived might trigger re-election" [High,In progress] - Assigned to John Schwarz (jschwarz) 15:11:48 <jschwarz> patch is still up there and I'm yet to propose a new patchset 15:11:55 <Swami> #link https://review.openstack.org/#/c/407099/ ( under review) 15:12:02 <jschwarz> I've had a few other patches to work on and they have been given priority :< 15:12:16 <jschwarz> I'll push another revision tomorrow morning, though 15:12:22 <jschwarz> (hopefully) 15:12:29 <Swami> jschwarz: no worry. Is this targeted for ocata-3 15:13:41 <Swami> jschwarz: is there any other HA bugs that need to be discussed here 15:14:08 <jschwarz> Swami, I think it is, but since it's a bug fix we might be able to push it before RC-1 15:14:13 <jschwarz> Swami, not that I'm aware of 15:14:20 <Swami> jschwarz: thanks 15:14:57 <Swami> #link https://bugs.launchpad.net/neutron/+bug/1644231 15:14:57 <openstack> Launchpad bug 1644231 in neutron "fip router config is not created if the vm ports attached to FIPs have no device_owner" [Low,Triaged] 15:15:19 <Swami> I don't think there is much to discuss in this bug, since it is a doc update. 15:15:23 <haleyb> Swami: in the openstack-manuals repo, we can maybe just add a note to doc/cli-reference/source/neutron.rst 15:15:40 <Swami> haleyb: ok will do it 15:15:52 <haleyb> Swami: i'll take care of it, you fix the other bugs :) 15:16:09 <Swami> haleyb: thanks. 15:17:05 <Swami> #link https://bugs.launchpad.net/neutron/+bug/1571676 15:17:05 <openstack> Launchpad bug 1571676 in neutron "After binding a floating IP to VM, the static route can't work in DVR." [Undecided,In progress] - Assigned to Swaminathan Vasudevan (swaminathan-vasudevan) 15:17:20 <Swami> #link https://review.openstack.org/#/c/308068/ ( Patch needs review) 15:17:41 <Swami> I did see there were some UT failures in the gate, I just rebased it, let us see how it goes. 15:18:07 <haleyb> will check on it later 15:18:34 <Swami> #link https://bugs.launchpad.net/neutron/+bug/1541406 15:18:34 <openstack> Launchpad bug 1541406 in neutron "IPv6 prefix delegation does not work with DVR" [Medium,In progress] - Assigned to Brian Haley (brian-haley) 15:18:49 <Swami> #link https://review.openstack.org/#/c/277657/ ( patch for review) 15:18:56 <Swami> haleyb: thanks for the update on this patch. 15:19:22 <haleyb> Swami: yes, i figured we should fix that, need to check the errors this morning 15:19:45 <Swami> #link https://bugs.launchpad.net/neutron/+bug/1612804 15:19:45 <openstack> Launchpad bug 1612804 in neutron "test_shelve_instance fails with sshtimeout" [High,Confirmed] 15:19:46 <haleyb> think it was just a jenkins issue 15:20:05 <Swami> haleyb: ok no problem, otherwise the patch looked good. 15:20:27 <Swami> haleyb: are we still seeing this test_selve_instance failures in the gate. 15:21:17 <haleyb> i remember seeing them randomly, but haven't found a common issue yet 15:22:50 <Swami> haleyb: ok thanks 15:23:07 <Swami> #link https://bugs.launchpad.net/neutron/+bug/1577488 15:23:07 <openstack> Launchpad bug 1577488 in neutron "[RFE]"Fast exit" for compute node egress flows when using DVR" [Wishlist,In progress] - Assigned to Swaminathan Vasudevan (swaminathan-vasudevan) 15:23:19 <Swami> #link https://review.openstack.org/#/c/283757/ 15:23:32 <Swami> #link https://review.openstack.org/#/c/355062/ 15:24:11 <Swami> haleyb: I have been seeing some random failures in the gate for these two patches, let me recheck and then it should be ready for review. 15:24:36 <haleyb> Swami: ok, thanks. i see one has a pep8 issue 15:25:01 <Swami> haleyb: will check those 15:25:16 <haleyb> ./neutron/tests/functional/agent/l3/test_dvr_router.py:1260:5: F811 redefinition of unused '_assert_default_gateway' from line 744 15:26:12 <Swami> haleyb: Oh, may be the rebase was not proper and added twice. 15:26:17 <Swami> haleyb: I will fix it 15:27:03 <Swami> haleyb: I have restored the allowed_address_pair floatingip patch for reconsideration. 15:27:14 <Swami> #link https://bugs.launchpad.net/neutron/+bug/1583694 15:27:14 <openstack> Launchpad bug 1583694 in neutron "[RFE] DVR support for Allowed_address_pair port that are bound to multiple ACTIVE VM ports" [Wishlist,In progress] - Assigned to Swaminathan Vasudevan (swaminathan-vasudevan) 15:27:25 <Swami> #link https://review.openstack.org/#/c/320669/ 15:27:36 <Swami> #link https://review.openstack.org/#/c/323618/ 15:28:31 <Swami> let me see how it goes, since the alternate approach seems more complex and time consuming I went back to this same approach. 15:29:02 <haleyb> we would need to loop in armando, let me re-read the bug notes again 15:29:34 <Swami> haleyb: Yes I have requested armax to consider removing the -2 on these patches before proceeding. 15:30:40 <Swami> haleyb: this idea also aligned with kevinbenton idea of moving all the unbound ports to the network node. 15:31:11 <Swami> haleyb: May be I should have a face to face discussion during the PTG meeting. 15:31:16 <haleyb> ok, good to know 15:31:49 <kevinbenton> i have lots of things i want to move to the ntwork node :) 15:31:56 <kevinbenton> so we definitely need a slot for this at PTG 15:32:03 <Swami> kevinbenton: :) 15:32:16 <Swami> kevinbenton: will be there and I can schedule a chat on this. 15:32:45 <haleyb> i should have mentioned https://etherpad.openstack.org/p/neutron-ptg-pike in the announcements 15:34:04 <Swami> haleyb: yes kevinbenton has already a slot for DVR enhancements, may be we can use that slot or I can add a specific topic in there. 15:35:27 <kevinbenton> Swami: yeah, that's one of hte use cases i want to address 15:35:44 <kevinbenton> everything generally under making the network node do translations when compute nodes can't 15:36:29 <Swami> kevinbenton: thanks that would work. 15:38:08 <Swami> haleyb: the floor is yours 15:38:41 * haleyb sweeps the floor 15:39:03 <haleyb> #topic Gate 15:39:42 <haleyb> Still need to find time to update infra review to make dvr-multinode job voting, https://review.openstack.org/410973 15:40:28 <Swami> haleyb: thanks 15:40:32 <haleyb> i'm just refreshing my grafana window to see if dvr has been a problem 15:41:35 <haleyb> no, gate seems happier 15:41:43 <Swami> haleyb: that is great 15:42:24 <haleyb> it's been broken the past day or so with non-neutron issues 15:42:43 <haleyb> #topic Stable backports 15:43:23 <haleyb> There were a lot of cherry-picks recently, let me see if any dvr-specific ones are in need of attention 15:43:49 <Swami> haleyb: there is one patch that you might have missed. 15:44:05 <Swami> #link https://review.openstack.org/#/c/424276/ 15:44:49 <Swami> I might still need to go over all the HA related patches and backport those. 15:44:51 <haleyb> yes, i didn't see that one, thanks, will look 15:45:58 <haleyb> anything other related to stable branches? 15:46:29 <haleyb> #topic Open discussion 15:46:52 <haleyb> any HA items to discuss? 15:47:16 <Swami_> I am back, got disconnected for a while 15:47:56 <haleyb> Swami_: open discussion time, got anything? agenda was empty 15:48:24 <Swami_> haleyb: I don't have any topic at this moment 15:48:53 <haleyb> jschwarz: ^^ 15:49:18 <jschwarz> nope 15:49:20 <jschwarz> :) 15:50:11 <haleyb> anyone else? going once... 15:51:09 <haleyb> alright, everyone will get 10 minutes back 15:51:21 <haleyb> good job keeping things moving forward 15:51:23 <Swami_> haleyb: bye 15:51:25 <haleyb> #endmeeting