17:00:51 #startmeeting service_chaining 17:00:52 Meeting started Thu May 26 17:00:51 2016 UTC and is due to finish in 60 minutes. The chair is LouisF. Information about MeetBot at http://wiki.debian.org/MeetBot. 17:00:53 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 17:00:56 The meeting name has been set to 'service_chaining' 17:01:07 hello all 17:01:10 hi 17:01:12 HI 17:01:28 hello 17:01:58 i'd like to start by going over action items from last meeting 17:02:17 #topic action item status 17:02:44 update of use cases to the wiki 17:02:58 i see that Igor has added a use case 17:03:24 hi John 17:03:33 Hi Louis 17:03:56 doonhammer: any success on adding your use case to the wiki? 17:04:42 pcarver: will you be able to add a use case to the wiki? 17:05:03 s3wong: hi 17:05:20 LouisF: hello 17:05:29 LouisF: Ubuntu said it is a bug in Openstack - opened case at support.openstack.org 17:05:40 s3wong: going over adding use cases to wiki 17:05:49 LouisF: I asked about use cases but I haven't been able to find any yet. I don't actually work with the VNFs, so I only have the abstract feature requirements, not concrete use cases for specific VNFs. 17:05:51 LouisF: I see, AI from last week 17:05:55 doonhammer: ok thanks 17:06:22 pcarver: ok thanks 17:06:54 LouisF: I have them done - perhaps someone else can post them until I can fix my wiki access problem 17:07:38 I can post them it you send them to me 17:07:52 LouisF: Will do 17:07:57 doonhammer: thx 17:08:04 next item I see is the flow classifier priority 17:08:26 mohankumar: i see there have been reviews 17:08:34 LouisF : I got little busy on other works 17:08:38 of your patch 17:08:56 mohankumar: what is the patch? 17:09:13 LouisF: i ve raised WIP progress patch , may be update and open it for review 17:09:26 mohankumar: ok thanks 17:09:44 pavel was also going to help with that 17:09:58 LouisF : yes 17:10:16 is he on the channel? 17:11:00 ok moving on 17:11:09 LouisF: By next week the patche will be in goos shape 17:11:14 *good shape 17:11:27 mohankumar: great will review then 17:12:30 regarding the path id generation - that work is under way 17:13:12 ok lets move on to agenda items we missed from last meeting 17:13:38 #topic SF insertion type/mode 17:14:00 we started discussing last week 17:16:03 we need to distinguish behavior of bump-in-the wire vs l2 insertion 17:16:17 LouisF: A question I had was who needs to be aware of the VNF mode , I think the SFF and/or the SFProxy. They need to have the awareness ? 17:17:06 doonhammer: agree the SFF or SF proxy 17:18:35 i think this can be handled by attaching a parameter to the VNF (SF) and using a service_function_parameters attribute 17:19:05 like 'insert-mode=bitw' for example 17:19:15 LouisF: So if we agree on that then we need to decide what needs to be done to support the various modes yes? 17:19:32 LouisF: Agree on mode 17:19:34 LouisF: do you considered what we do today bump-in-the-wire or L2? 17:20:10 s3wong: you mean in our sfc ovs driver? 17:20:11 LouisF: we are Neutron port based, so the VNFs all have Neutron port in some Neutron network 17:20:19 LouisF: yes 17:21:09 s3wong: currently the ovs driver uses l2 mode 17:21:27 LouisF: but OTOH, we set flow in higher precedent table such that the flow got forwarded to VNF via tunnel, so no need to enforce all SFs in SFC to be in same Neutron network 17:21:38 s3wong: bitw is fairly easy as it a passthrough, L2 and L3 get complicated as the VNF and SFF need to have an understanding 17:23:15 doonhammer: sure --- I just tried to picture if we switch to a different mode, how would the backend implementation (such as OVS) be different... 17:23:25 doonhammer: how the backend driver actually handles this is really implementation 17:23:51 LouisF: by backend driver you mean ovs or ovs/ovn? 17:23:55 we need to pass a hint to the driver as to the VNF behavior 17:23:59 doonhammer: yes 17:24:15 doonhammer: or some other driver 17:25:17 LouisF: sure, on API side it is just adding a parameter and pass it straight to driver 17:25:24 LouisF: Just thinking of how I would go about configuring a service chain implementation - especially at scale - how to comunicate all the info 17:25:36 LouisF: but at least you and I have to worry about the reference implementation :-) 17:25:48 s3wong: agree 17:26:29 s3wong: LOL 17:27:17 LouisF: also, for L3, there is a RFE on L3 agent extension: https://bugs.launchpad.net/neutron/+bug/1580239 17:27:19 Launchpad bug 1580239 in neutron "[RFE] Add agent extension framework for L3 agent" [Wishlist,In progress] - Assigned to Nate Johnston (nate-johnston) 17:27:41 if we pass 'insert-mode' to the driver is can then do the right thing 17:28:24 LouisF: Yes that is the first step 17:28:33 * njohnston lurks 17:29:09 doonhammer: if we have agreement we can move forward with that 17:30:00 LouisF +1 17:30:10 others? 17:30:18 +1 17:30:35 ok I will open a bug for this 17:30:35 +1 17:30:44 LouisF: it will be a port-pair parameter or port-pair-group 17:31:22 +1 17:31:24 doonhammer: presumably port-pair-group --- the entire group should have the same insertion mode, I would imagine 17:31:43 probably better on the PPG as I don't see a case for a mix of bitw/l2/l3 devices 17:32:01 LouisF +1 17:32:37 ok that meeans adding this to the PPG parameters 17:32:45 Not sure if it is possible be but would be nice to enforce the same VNF in a group 17:32:59 doonhammer: +1 17:33:03 but probably too much 17:33:34 need add PPG parameter - but that has been discussed before 17:34:31 #action Louis to add bud to add PPG parameter to specify insert-mode behavior for all PPs in a PPG 17:34:36 bug 17:34:38 LouisF: may also need some info for load-balancing there too 17:34:55 doonhammer: agree 17:36:01 ok moving on 17:36:43 that next item is adding 'nsh' encap to the chain parameter 17:37:05 LouisF: long email thread on that on openstack-dev... 17:37:15 #topic nsh encap specification in chain-parameter 17:37:21 s3wong: yes 17:37:25 LouisF , yes 17:38:40 from the api perspective this is simple - today the encap is mpls and we can easily add nsh 17:39:04 the issue is the reference implementation 17:39:11 Was Kyle not correct when he pointed Uri to the OVS mailing list 17:39:32 doonhammer: agree 17:40:18 Until there is some agreement there not much we can do apart from try and push - use cases and requirements? 17:40:32 not sure how else to push? 17:40:44 Kyle was definitely said the openstack CI did not want patches 17:40:55 LouisF: so Uri basically just wants us to define NSH parameters at our API level? 17:41:44 I have OVN working without NSH - I am not sure moving NSF into networking-sfc or networking-ovn is the right approach 17:42:11 there is a new carrier service-chaining IETF RFC that is BGP focused 17:42:34 s3wong: I think Uri just wants nsh encap to be added to networking-sfc 17:42:52 doonhammer: and I am sure in near future some other people would raise us not having support for BGP based SFC to be slowing down the industry... 17:42:56 if networking-sfc is a good abstraction it should support different approaches 17:43:09 s3wong: LOL 17:43:20 networking-sfc is an abstract API it does not deal with dataplane implementation 17:43:27 doonhammer: +1 17:43:37 LouisF +1 17:43:58 LouisF: our reference can't support it at this point... 17:44:26 if you are goijg to support nsh, it would be preferable to allow nsh to do what it was intended to 17:44:44 So I am with Kyle and we support what ever the drivers support 17:45:04 s3wong: we can add nsh to the ovs driver but depends on the nsh supported by ovs 17:45:12 We having ONOS +openstack reference implemention with OVS NSH , ONOS community supporting NSH 17:45:34 right now we use mpls encap as a proxy for nsh 17:45:58 LouisF: we can add NSH encap as optional parameters, one which would be implemented by ODL backend (once that is ready)... and the reference would return 'not implemented' exception --- doesn't look too clean though... 17:46:20 mohankumar: so ONOS also uses a forked version of OVS? 17:46:34 s3wong , yes 17:46:55 In real production deployments the encap is going to be different - e.g. carrier versus data center so we need to be agnostic 17:46:59 s3wong: are there other cases in neutron where some drivers do not provide complete functionality for an api? 17:47:19 doonhammer: +1 17:47:51 LouisF: for reference? Can't think of any. Because normally adding support in reference implementation is part of the job of extending APIs 17:48:46 s3wong: so the reference implementation always supports all options offered by the api? 17:49:45 LouisF: I believe so... can't think of any exception from top of my head... 17:50:22 It would be good if the reference implementation could support everything, but the problem is that it means that you have to bypass OpenStack for anything that's only supported by some backends. 17:50:50 LouisF: and it is a good rule of thumb anyway, as it is difficult for user to try out new APIs but the default keeps returning 'not implemented' exception 17:51:12 s3wong: ok if that is the case the ovs driver needs to support nsh 17:51:29 It's a high bar for the reference implementation to have a superset of all possible features, so what's more likely is that we would lack an API for some things that multiple SDN controllers each have their own API for 17:51:32 LouisF: correct... unfortunately... 17:51:33 the ovs driver is our reference implematation 17:52:33 LouisF: for analogy --- for a long time, OVS has no conntrack, and therefore security group's reference is iptables on Linux bridge hooking up with OVS 17:53:14 s3wong: good case in point 17:53:42 LouisF: our problem is we need to have the same network driver as core driver for SFC to work, so even using a non-core supported fork of OVS is not acceptable 17:54:13 s3wong: +1 17:54:28 ok we will monitor the email exhange between Kyle, Armando and Uri to see there is any compromise/resolution 17:54:35 Perhaps framing it as what use cases we can support with each driver - and then ask the driver team for support in solving the other issues? 17:55:01 helps to make it more specific 17:55:57 doonhammer: i think the ref implementation should support most if not all use cases 17:56:32 LouisF: Agree but we are between a rock and a driver place :-) 17:57:30 doonhammer: lets see what is decided 17:57:56 ok i don't want to start a new topic 17:58:12 I can't resolve the question about nsh in the API vs. ref arch, but I don't mind doing a PoC of NSH via networking-sfc (with the latest yi yang's patch) demonstrating how SFC Encapsulation can be achieved (which requires changes to the API) 17:58:16 doonhammer: yeah... as cores. TBH, we are willing to entertain adding this if the community feels very strongly about it --- I mean, ODL and ONOS are both OSS projects anyway; but we are Neutron stadium, and we are subjected to be governed by Neutron driver team also 17:59:20 igordcard: nsh can be supported by simply adding 'correlation-nsh' in the chain-parameters 17:59:33 LouisF: please see my use case at the wiki 17:59:43 igordcard: ok 18:00:09 ok thats it folks 18:00:14 bye 18:00:19 thanks, guys! 18:00:19 bye 18:00:20 bye 18:00:21 bye 18:00:22 bye 18:00:22 #endmeeting