17:01:24 #startmeeting service_chaining 17:01:24 Meeting started Thu Jun 16 17:01:24 2016 UTC and is due to finish in 60 minutes. The chair is LouisF. Information about MeetBot at http://wiki.debian.org/MeetBot. 17:01:25 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 17:01:27 The meeting name has been set to 'service_chaining' 17:01:36 hello all 17:01:41 Hi 17:01:41 Hi Louis 17:01:43 hello 17:02:04 cathy cannot make it today 17:02:05 hi 17:02:13 hi 17:02:47 #topic action status 17:03:20 flow classifier priority progress 17:03:24 LouisF: is the agenda exactly the same as last meeting? 17:03:43 igordcard: yes 17:04:03 LouisF , pavel need to add agent support 17:04:32 mohankumar: thanks it pavel on the call? 17:04:41 is 17:04:50 LouisF , can't find him 17:05:04 i have not seen a patch set for that work 17:05:45 LouisF , let me discuss with pavel and update on this progress 17:05:52 mohankumar: thx 17:06:03 ok, path id generation 17:06:26 LouisF: nothing yet, I'm working on it together with the nsh correlation support 17:06:37 i think igor and george wang were working on this 17:06:54 igordcard: ok thx 17:07:16 doonhammer: ovn driver work? 17:07:20 hello 17:08:04 LouisF: Need to submit WIF patches - I got a lot of help from Na Zhu this this week 17:08:34 doonhammer: looks like good progress is being made 17:08:58 I think we will need to iterate on the ovs/ovn schema some more and it would help to have some more eyes on it and try and implemetn some use cases 17:09:18 doonhammer: ok 17:10:38 PPG parameter for insert-mode 17:11:07 pavel was going to start work on this 17:12:04 ok moving on 17:12:19 nsh encap work 17:12:46 pavel was looking at that also 17:13:11 LouisF: yes,I've been in contact with him 17:13:42 igordcard: what is the status regarding transport encap? 17:13:53 we've agreed I'll continue the work for now 17:14:26 igordcard: ok thanks 17:14:57 still in the beginning, api and docs ave been updated but not much more so far 17:15:21 api,as in correlation=nsh 17:15:29 igordcard: do you have links 17:15:35 no, not yet 17:15:37 igordcard: yes 17:15:53 actually I've pushed a part to my github 17:16:01 branch ietf 17:16:13 igordcard: ok 17:16:37 igordcard: please share when they are ready 17:16:48 in the end this will be 3 patches to gerrit: nsh correlation; path id generation at the plugin; full sfc encappsulation in the api 17:17:06 LouisF: sure 17:17:16 igordcard: great 17:17:48 ok on to functional test work 17:18:00 there is a patch https://review.openstack.org/#/c/321870/ 17:18:10 needs review 17:19:39 there is also this patch https://review.openstack.org/#/c/324135/ 17:19:50 need another +2 to proceed 17:20:17 from a member of the infra team 17:21:34 ok moving on 17:21:51 #topic driver capability discovery 17:22:22 i posted the patch https://review.openstack.org/#/c/317635 17:23:33 there have been many comments on this 17:24:12 LouisF ,yes 17:24:24 generally the view is that it should get input from other projects 17:24:50 pcarver: what is your view on how to proceed? 17:26:19 I still think it's going to be necessary but I understand there are some concerns. 17:26:48 It might help if we agreed on a policy on when/how to add new capabilities 17:27:09 We don't want to fragment by having a lot of features that are each implemented only by one driver 17:27:27 pcarver: agree on that 17:27:41 but I don't know if it's reasonable to say that a feature can't be added to the API unless the L2 agent based OvS driver can do it 17:28:05 There will likely be things that are difficult to support without an active SDN controller 17:28:43 And I'm not sure if the current "reference" implementation is going to be able to be a superset of all the SFC capabilities of all SDN controllers 17:29:08 how is that handled in other projects? 17:29:17 I'm not sure it really has been 17:29:26 The anti-example is networking-bgpvpn 17:29:51 Contrail supports a network VPN attachment and Nuage supports a router VPN attachment 17:30:12 How about we also define a baseline of capabilities that all drivers must support.. E.g. L3 service function, SFC in same network, etc. 17:30:15 pcarver: what about the reference implementation? 17:30:19 If you try to create the opposite type of attachment that your SDN backend supports you get a not implemented exception 17:30:49 fsunaval: A baseline makes sense 17:31:15 but as we add features there's likely to be a first driver to support it before others 17:31:27 fsunaval: +1 17:31:58 So we probably need some sort of planning guideline that in order to add a new feature we need a reasonable expectation that at least N drivers will support it. I'm not sure what number N should be. 17:32:20 pcarver: so does bgpvpn have a reference implemantation that supports all features? 17:32:24 It would be nice if the reference implementation could support everything, but that seems like a high bar to set 17:32:59 bgpvpn does have a reference implementation but I don't remember whether it supports both attachment types 17:34:19 pcarver: it would be worthwhile finding that out 17:34:57 too many features (big baseline) just can't live together if there are so many possible heterogeneous backends, so either one or the other in order to have a consistent, predictable API 17:35:21 they can't live together with the many possible backends, I mean 17:36:31 it's simply something where we will never tick all of the 3 columns in the trade-offs, unless sudenly by magic ovs, ovn, onos, odl, and others become very similar 17:37:03 I think openstack process mandates that there is a reference implementation support all features 17:37:31 to be able to test all features 17:39:08 i will check on this 17:39:31 #action Louis to check on reference implementation 17:39:39 LouisF: I don't know if it's mandated, but it is expected that if an API is live, its operations will not fail due to backend-disparity reasons 17:40:24 and will yield the same effect/(intent?) 17:40:44 LouisF: nice, thanks 17:40:44 igordcard: does "expected" mean we can document an exception? 17:41:47 LouisF: like calling method X with Y parameter will always give Z exception? or does the exception depend on the backend? 17:42:22 #topic dynamic chain update without service interruption 17:42:36 we had some discussion on this last week 17:44:16 i think depends on the implementation on the backend driver 17:44:41 LouisF: I think it depends on the definition of interruption - if a flow is in process through a chain and a new chain is inserted what happens to the in-process flows? 17:45:43 the addtion of a new chain must have no impact on traffic on any existing chains 17:46:29 what I am refering to is where a new PPG is inserted into an existing port-chain 17:47:04 using a port-chain-update to add/remove a PPG 17:47:30 LouisF: so existing flows still follow old paths, new flows go through new path ? 17:47:41 I tested this recently and saw that all flows of the port-chain get deleted, and new ones are created 17:48:05 yes , i too noticed the same 17:48:17 doonhammer: yes 17:48:18 and it takes something like 1 second in a simple 1-node deployment, so I suppose some packets will be dropped during that time 17:49:17 haven't checked if the old datapath flows stay there until the new flows are installed, though 17:49:39 igordcard: correct the current design removes the current list of PPGs and then adds the new list 17:50:02 this of course can be improved on 17:50:52 by stitching in only the new PPG at the correct point 17:51:47 LouisF , still new folw rules has to populate , to forward traffic to new SF 17:51:53 LouisF/doonhammer: I am not sure we want existing flows to follow old path. After all the whole purpose of inserting/deleting a new VNF might be to avoid that in the first place. 17:51:54 LouisF: and modifying the previous hop 17:52:11 igordcard: correct 17:53:15 fsunaval: the flows will be steered to the new PPG from the upstream PPG 17:53:24 fsunaval: might depend on the use case - if I insert a video compression VNF the stream will be corrupted. If I insert an inspection VNF everything should work fine yes? 17:56:13 doonhammer: it really depends on the implementation 17:56:58 state/context can be copied from one vnf to the other, but that is out of scope in networking-sfc 17:57:34 igordcard: yes depends on the low level networking driver 17:57:35 if done carefully it in when a ovs rule in installed/removed at the upstream to steer to the new PPG 17:58:25 but that is not how the current driver design works 17:59:21 other backends eg ONOS, ODL may have different approaches 18:00:00 interested parties are welcome to add enhanced functionality 18:00:15 ok all for today 18:00:17 bye all 18:00:24 Thanks LouisF. Bye all. 18:00:25 bye 18:00:27 bye 18:00:29 #endmeeting