15:05:01 #startmeeting vpnaas 15:05:02 Meeting started Tue Feb 10 15:05:01 2015 UTC and is due to finish in 60 minutes. The chair is pc_m. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:05:03 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:05:06 The meeting name has been set to 'vpnaas' 15:05:18 #topic Announcements 15:06:31 Function checks of all VPN commits are enabled for check queue (but temporarily disabled) 15:07:05 Coverage testing shuld be enabled, as soon as review gets another core +2/+A 15:07:41 #action Anyone with functional tests, please push for review, or update existing reviews. 15:08:01 Please look at any open bugs and review... 15:08:13 Any other new announcements? 15:08:42 #topic Functional Testing 15:09:01 pc_m, is the strongswan driver going to be targeted at K-3? 15:09:38 xuhanp: It has been moved from K-2 to K-3, so that's the hope. 15:09:50 sounds great. thanks! 15:10:07 Especially since Ubuntu is not installing OpenSwan in 14.10. 15:10:51 yep 15:11:14 However, there are some issues with AppArmor interfering with StrongSwan operation, that we're trying to resolve (latest fix may work). 15:11:48 We should all try it and see if it works well (I plan to today and tomorrow), and comment on review. 15:11:52 pc_m, I noticed that. will give it a try. 15:12:28 #action all to try StrongSwan implementation and comment on review. 15:12:30 #link https://review.openstack.org/144391 15:12:45 On functional tests... 15:13:19 The check-neutron-vpnaas-dsvm-functional was added to check queue (non-voting). 15:13:50 However, due to a acccidental reversion, it is back to experimental. For now, one can do 'check experimental' to run. 15:14:24 good to know 15:14:27 Once 154487 is upstreamed the tests should run on all commits (non-voting) again. 15:14:35 Should be today, I hope. 15:14:59 Once the tests are working reliably, we'll make them voting. 15:15:38 If you have any functional tests, please push them up (or update them, if already out for review). 15:16:01 Any other questions on functional tests? 15:16:30 #topic Bugs 15:16:45 Here's the current list: https://review.openstack.org/#/q/status:open+project:openstack/neutron-vpnaas,n,z 15:17:39 Please sign up and review, especially the StrongSwan review. 15:17:56 Anyone have specific bugs they want to discuss? 15:19:16 xuhanp: Thanks for offering to try out the StrongSwan implementation (above). We can really use more eyes on this. 15:19:34 pc_m, sure thing 15:19:59 #topic Open Discussion 15:20:08 Anyone have anything to discuss. 15:20:19 ? 15:20:19 pc_m, I have a question to ask. 15:20:27 xuhanp: go ahead 15:20:51 Do we have any plan to support functions like GRE over IPSec or VTI over IPSec? 15:21:11 we have some requirement to connect two clouds by this kind of tunnels. 15:21:37 xuhanp: None that I know of. At least no one has proposed any blueprints. 15:22:04 do you think I can propose that if I have some idea? 15:22:15 maybe starting with discussing in mail list? 15:22:45 xuhanp: For some previous proposals, Neutron cores have suggested they be developed outside of OpenStack (e.g. StackForge), due to low community interest. 15:23:12 xuhanp: Yeah, you may want to start a discussion to gauge community interest. 15:23:49 If enough interest, you could do a blueprint, if not, you can decide to develop out of tree. 15:23:54 pc_m, do you have an example of previous discussion? I am not sure what kind of features should be developed outside. 15:24:55 I don't have a link handy, but the Edge VPN was discussed and decided to be developed outside. There is a stackforge repo set up for that feature. 15:25:27 I see. thanks for the information! 15:25:38 I will try the mail list discussion first then 15:26:22 Manif mentioned in last meeting. Spec is here: https://review.openstack.org/#/c/152377/ 15:26:49 You can look at some of the older logs for this team and there have been some links and discussions. 15:27:16 Yeah, may be good to gauge interest in the community. 15:27:33 cool. Will do! 15:28:29 If there is, then it can be worked on in-tree, if not, it can be worked as StackForge by those interested and tied into OpenStack. 15:28:41 That's the path Edge VPN is going. 15:29:10 got you. thanks for the advice! 15:29:25 np 15:29:42 Anything else to discuss? 15:30:50 OK, it's a wrap! 15:30:55 #endmeeting