15:01:38 #startmeeting neutron_ipv6 15:01:39 Meeting started Tue Nov 25 15:01:38 2014 UTC and is due to finish in 60 minutes. The chair is sc68cal. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:01:40 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:01:43 The meeting name has been set to 'neutron_ipv6' 15:01:56 #topic Blueprints & Specs 15:03:08 hi 15:03:12 sc68cal: I submitted a review last night: https://review.openstack.org/#/c/136878/ 15:03:19 If you haven't seen on the ML yet, HenryG and I had some good comments on a spec about Kilo priorities, and we now have an IPv6 Impact section for all specs, for the kilo cycle 15:03:28 Opnfv 15:03:36 baoli: awesome 15:03:50 #link https://review.openstack.org/#/c/136878/ Support IPv6 routers and DVRs 15:04:21 #link https://review.openstack.org/#/c/136514/ Kilo Priorities for Neutron 15:04:53 sc68cal: I will be updating the IPAM spec either today or tomorrow. I'd like to get this team's input 15:04:57 #link https://blueprints.launchpad.net/neutron/+spec/neutron-ipam 15:05:36 in particular, we are trying to put in a framework that will allow future support for DUID-EN - right now I think we can only support DUID-LL 15:06:01 so, last time i showed you my fixed-ip-version bp 15:06:06 #link https://review.openstack.org/#/c/129910 15:06:07 johnbelamaric: are you coordinating your work with Carl Baldwin? 15:06:37 sc68cal: yes, we had a long IRC meeting yesterday and are working closely on this 15:07:21 johnbelamaric: perfect, we'll keep an eye on IPAM, thanks for keeping us in the loop :) 15:07:51 sc68cal: no problem, expect an update tomorrow - just looked at my calendar today and probably won't be able to finish it today 15:08:50 johnbelamaric, is https://review.openstack.org/#/c/97967/ the link for the spec review? 15:08:53 johnbelamaric: ok, no problem 15:08:57 raorn: I still have your spec on my radar. I hope it is small and innocuous enough to not meet any resistance. 15:09:27 ^ +1 15:09:34 well, i need your wisdom 15:09:47 xuhanp: yes, but major updates will be submitted. if you follow that comment chain, Carl has posted a much newer WIP interface 15:09:47 i've updated the "alternative" section today 15:10:18 johnbelamaric: is it this? https://review.openstack.org/#/c/135771/ 15:10:18 johnbelamaric, great to know that. Thanks 15:10:40 #link https://review.openstack.org/#/c/134339/ 15:10:41 current described approach was logical at the time it was implemened, but now SLAAC networks messed the whole thing (in a good way) 15:10:50 raorn: I did not see that. I'll look at it and give it some thought. 15:12:33 raorn: What is meant by "top-level" attribute? 15:13:35 the thing near "network_id", "name", etc... 15:15:06 sc68cal: no, that is a different spec, but also a good one for htis team to review 15:16:11 johnbelamaric: thanks 15:16:23 So..... we have a lot of specs to review ! :) 15:16:34 HenryG: "ip allocation policy" spec is not written yet, i just want to be sure that this idea worth the effort 15:17:26 raorn: I understand. I am having a hard time keeping up with all the specs. 15:18:07 I am not familiar with "ip allocation policy", this may overlap with the IPAM spec 15:18:41 johnbelamaric: I hope they are the same. 15:19:11 HenryG: me too, i am looking for the BP 15:19:17 johnbelamaric: currently neutron tries to allocate one IPv4 address and one (well, not one) IPv6 address. if something fails - port is not created 15:19:34 raorn: yeah I'm trying to find the patch proposed to fix that 15:19:49 i'm really interested in it since I have a /28 and a /64 for my lab :) 15:19:53 sc68cal: https://review.openstack.org/125061 15:20:00 raorn: thx :) 15:20:32 raorn: ok, so that is directly in the code that will be refactored so we just need to make sure it gets handled properly during refactor 15:21:04 so idea is to have per-network property, that will control allocation of fixed ips 15:22:07 default allocation, when fixed_ips was not set 15:22:18 raorn: ok, but this is about the policy of whether an exception is thrown when not all IPs can be allocated. reading the comments now 15:23:10 there are also comments and "alternative" section in https://review.openstack.org/129910 15:25:13 OK, in the interest of time I'm going to move on to bugs - overall I think we have a ton of specs that we need to review 15:25:40 raorn: welcome to the subteam, you're doing good stuff! :) 15:25:45 raorn: ok, just looks like this needs to be coordinated but makes sense 15:26:18 #info We have a ton of specs that need reviewing 15:26:22 #topic bugs 15:26:31 ok! i am making the "ip allocation policy" bp then 15:26:34 thanks! 15:26:38 #link https://bugs.launchpad.net/neutron/+bugs?field.tag=ipv6 15:26:41 spec 129910 is good for me once ipv6 impact flag is added 15:27:00 I’ve looked at the alternative and with the tools we have so far this is probably the best we can achieve 15:27:14 salv-orlando: excellent - thank you! 15:27:42 salv-orlando: looking at current code, i think "alternative" approach is more logical... 15:28:20 salv-orlando: Did you see the latest update in the "Alternative" section in 129910? 15:28:31 jinx 15:29:16 HenryG knows I don’t actually review specs but I shake the 8-ball to give a vote 15:29:26 * sc68cal rolls a d20 15:29:29 anyway, we’re in the bugs section now. I will comment on the spec. 15:30:12 So I think the biggest bug on my radar is https://bugs.launchpad.net/neutron/+bug/1376325 15:30:14 Launchpad bug 1376325 in neutron "Cannot enable DVR and IPv6 simultaneously" [Medium,In progress] 15:30:34 I'd probably bump it to High, if I were able to 15:30:48 I have a review in progress for part of the fix 15:30:49 I think haleyb is working on that? 15:30:51 it may not be high for the overall neutron effort, but it's probably high on the subteam list 15:31:01 Ah, thanks Rajeev 15:31:09 https://review.openstack.org/#/c/134676/ 15:31:19 Rajeev: excellent, thanks! 15:31:23 I used to own the ARP part of it. But I am still struggling with how to send Neighbor advertisement. 15:32:17 (And then there is baoli's spec for big picture) 15:32:21 xuhanp: Agreed. We need a way to send ND packets, to mimic what ARP does on v4 side 15:32:56 I think the more arp stuff that gets utilized on v4 side the deeper the hole gets on the v6 side 15:33:30 I can get rid of using library like ryu now. But I need to write a python script which can be called in namespace. 15:33:40 xuhanp: I'll try and sync with you on a more china friendly time to help with that 15:34:01 sc68cal, that will be great. Thanks! 15:34:27 #action sc68cal sync with xuhanp about ND packet sending from a namespace 15:34:36 I would like to get some feedback for the following patch - https://review.openstack.org/#/c/136733/3/neutron/db/l3_db.py 15:34:43 Would also like to discuss bug https://launchpad.net/bugs/1393527 15:34:44 Launchpad bug 1393527 in neutron "IPv6 Subnets configured to use external router should not be allowed to associate to Neutron Router." [Undecided,In progress] 15:35:12 SridharG: I'll comment on that review 15:35:25 sc68cal: thanks :-) 15:35:35 basically with the ipv6 address attrs unset, we go back to the way Neutron behaved before we introduced 15:35:42 which may or may not be broken in some plugins :) 15:36:07 Yes, the question is do we want to allow such a subnet on a neutron router? 15:36:38 HenryG: hard question.... 15:36:57 my first though is probably not 15:37:04 mine too 15:37:15 ah! 15:37:32 Hopefully its only tempest that is attempting that, not any real user 15:37:37 We can throw an error, if ipv6_ra_mode is not set and they try to associate a router? 15:38:02 hmmmm - no that'd introduce new behavior when the v6 attrs are not set :( 15:38:08 HenryG: sc68cal: I have seen failures in some of the Neutron unit tests and in tempest aswell. 15:38:35 sc68cal: I understand 15:38:59 but still, maybe we should fix things that are broken? 15:39:43 Anyway, let's discuss in the review 15:39:51 HenryG: agreed 15:39:56 Sure HenryG.. 15:40:12 i also have somewhat related bug https://bugs.launchpad.net/neutron/+bug/1372882 15:40:14 Launchpad bug 1372882 in neutron "Neutron should drop certain outbound ICMPv6 packets" [Undecided,Incomplete] 15:41:48 So - regarding that bug 15:41:56 we allow it out of the vm 15:42:12 but if I remember correctly we block it when the RA packet goes into other vm interfaces 15:42:19 we allow anything aout of vm 15:42:33 xuhanp did the patch that blocks any RA that isn't from the gateway IP 15:42:43 if I remember correctly 15:42:51 yes, but it can be "provider" network, that have non-virtual hosts 15:44:20 right - and you'd put the LLA of the non-virtual router in the subnet's gateway IP 15:44:28 to allow RA's through 15:44:46 trying to find the bug that ian wells reported back during icehouse dev cycle 15:45:10 but i don't want a vm to affect metal host 15:45:18 in the same network 15:45:50 sc68cal: i know what are you talking about, but it protects only vms 15:45:59 raorn: ahhh, now I see what you're talking about. Yes, good point 15:46:10 can you update the bug with that? 15:46:20 yes 15:48:25 done 15:48:46 raorn: perfect 15:51:25 any other bugs, otherwise I'll do open discussion 15:51:44 #topic open discussion 15:53:17 review https://review.openstack.org/#/c/136947/ from haleyb is also related to lp https://bugs.launchpad.net/neutron/+bug/1376325 15:53:21 Launchpad bug 1376325 in neutron "Cannot enable DVR and IPv6 simultaneously" [Medium,In progress] 15:53:35 that we briefly talked about earlier 15:54:00 Rajeev: thanks! 15:54:04 so if you are reviewing one please take a look at the other too 15:54:28 sc68cal: welcome 15:54:49 oh, one more thing I just thought of 15:55:19 #action sc68cal talk to -infra about an experimental job that uses the "4+6" feature of DevStack to do dual stack, for testing at the gate 15:55:39 now that has landed 15:56:20 sc68cal: +1 15:57:47 If there isn't anything else, I'll give everyone back 3 minutes :) 15:57:53 xuhhanp: sc68cal: is baoli (Robert) also in China timezone ? 15:58:07 Rajeev: no I think he's US PST 15:58:15 I'm in ET 15:58:18 Rajeev: US EST 15:58:30 ah, I stand corrected :) 15:58:32 sc68cal: HenryG: thanks 15:59:04 One other thing to chew on, in the last couple of minutes, since we mentioned TZ, is the possibility of having a asia/pacific friendly meeting time 15:59:39 basically have two chairs for the subteam, one for US/Euro and one for Asia/Pacific 16:00:16 anyway, thanks everyone! 16:00:31 see everyone next week! 16:00:33 #endmeeting