Re: [openstack-dev] [neutron][vpnaas] VPNaaS Subteam meetings
Hi all, I would also vote for (A) with 1500 UTC which is 23:00 in Beijing time -:) On Fri, Mar 6, 2015 at 1:22 PM, Mohammad Hanif mha...@brocade.com wrote: Hi all, I would also vote for (C) with 1600 UTC or later. This will hopefully increase more participation from the Pacific time zone. Thanks, —Hanif. From: Mathieu Rohon Reply-To: OpenStack Development Mailing List (not for usage questions) Date: Thursday, March 5, 2015 at 1:52 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [neutron][vpnaas] VPNaaS Subteam meetings Hi, I'm fine with C) and 1600 UTC would be more adapted for EU time Zone :) However, I Agree that neutron-vpnaas meetings was mainly focus on maintaining the current IPSec implementation, by managing the slip out, adding StrongSwan support and adding functional tests. Maybe we will get a broader audience once we will speak about adding new use cases such as edge-vpn. Edge-vpn use cases overlap with the Telco WG VPN use case [1]. May be those edge-vpn discussions should occur during the Telco WG meeting? [1] https://wiki.openstack.org/wiki/TelcoWorkingGroup/UseCases#VPN_Instantiation On Thu, Mar 5, 2015 at 3:02 AM, Sridhar Ramaswamy sric...@gmail.com wrote: Hi Paul. I'd vote for (C) and a slightly later time-slot on Tuesdays - 1630 UTC (or later). The meetings so far was indeed quite useful. I guess the current busy Kilo cycle is also contributing to the low turnout. As we pick up things going forward this forum will be quite useful to discuss edge-vpn and, perhaps, other vpn variants. - Sridhar On Tue, Mar 3, 2015 at 3:38 AM, Paul Michali p...@michali.net wrote: Hi all! The email, that I sent on 2/24 didn't make it to the mailing list (no wonder I didn't get responses!). I think I had an issue with my email address used - sorry for the confusion! So, I'll hold the meeting today (1500 UTC meeting-4, if it is still available), and we can discuss this... We've been having very low turnout for meetings for the past several weeks, so I'd like to ask those in the community interested in VPNaaS, what the preference would be regarding meetings... A) hold at the same day/time, but only on-demand. B) hold at a different day/time. C) hold at a different day/time, but only on-demand. D) hold as a on-demand topic in main Neutron meeting. Please vote your interest, and provide desired day/time, if you pick B or C. The fallback will be (D), if there's not much interest anymore for meeting, or we can't seem to come to a consensus (or super-majority :) Regards, PCM Twitter: @pmichali TEXT: 6032894458 PCM (Paul Michali) IRC pc_m (irc.freenode.com) Twitter... @pmichali __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Best Regards Zhang Hua(张华） Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] A question about strange behavior of oslo.config in eclipse
Hi Doug,
I can't find above error when using the latest codes (2015-02-22), but
new error occur ( see [1] ). I feel it has no concern with the
code(ConfigOpts.import_opt), the same code can be run in both bash and
pycharm, it just didn't work in eclipse+pydev. It looks like there are some
conflicts between oslo/monkey patch and pydev. You are python expert, could
you give me some input by the following traceback ?
Another question, 'Gevent compatible debugging' feature both in
eclipse and pycharm doesn't work, changing 'thread=False' for monkey patch
may cause the error [2], so now I have to get back to use pdb to debug
openstack. Could you have some idea to make oslo/monkey patch is more
friendly for IDE ? many thanks.
*[1]*, traceback when running 'neutron-server --config-file
/etc/neutron/neutron.conf --config-file
/etc/neutron/plugins/ml2/ml2_conf.ini' in eclipse+pydev env. while we can
run this command well in bash and pycharm.
Traceback (most recent call last):
File /usr/local/bin/neutron-server, line 9, in module
load_entry_point('neutron==2015.1.dev202', 'console_scripts',
'neutron-server')()
File /usr/local/lib/python2.7/dist-packages/pkg_resources/__init__.py,
line 521, in load_entry_point
return get_distribution(dist).load_entry_point(group, name)
File /usr/local/lib/python2.7/dist-packages/pkg_resources/__init__.py,
line 2632, in load_entry_point
return ep.load()
File /usr/local/lib/python2.7/dist-packages/pkg_resources/__init__.py,
line 2312, in load
return self.resolve()
File /usr/local/lib/python2.7/dist-packages/pkg_resources/__init__.py,
line 2318, in resolve
module = __import__(self.module_name, fromlist=['__name__'], level=0)
File /bak/openstack/neutron/neutron/cmd/eventlet/server/__init__.py,
line 13, in module
from neutron import server
File /bak/openstack/neutron/neutron/server/__init__.py, line 26, in
module
from neutron.common import config
File /bak/openstack/neutron/neutron/common/config.py, line 25, in
module
import oslo_messaging
File /usr/local/lib/python2.7/dist-packages/oslo_messaging/__init__.py,
line 18, in module
from .notify import *
File
/usr/local/lib/python2.7/dist-packages/oslo_messaging/notify/__init__.py,
line 23, in module
from .notifier import *
File
/usr/local/lib/python2.7/dist-packages/oslo_messaging/notify/notifier.py,
line 32, in module
help='Driver or drivers to handle sending notifications.'),
File /usr/local/lib/python2.7/dist-packages/oslo_config/cfg.py, line
1108, in __init__
item_type=types.MultiString(),
AttributeError: 'module' object has no attribute 'MultiString'
*[2] *
2015-02-22 14:56:24.117 ERROR oslo_messaging.rpc.dispatcher
[req-65501748-3db5-43b6-b00e-732565d2192a TestNetworkVPNaaS-1393357785
TestNetworkVPNaaS-1147259963] Exception during message handling:
_oslo_messaging_localcontext_9bb7d928d1a042e085f354eb118e98a0
2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher Traceback
(most recent call last):
2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher File
/usr/local/lib/python2.7/dist-packages/oslo_messaging/rpc/dispatcher.py,
line 142, in _dispatch_and_reply
2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher
executor_callback))
2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher File
/usr/local/lib/python2.7/dist-packages/oslo_messaging/rpc/dispatcher.py,
line 188, in _dispatch
2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher
localcontext.clear_local_context()
2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher File
/usr/local/lib/python2.7/dist-packages/oslo_messaging/localcontext.py,
line 55, in clear_local_context
2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher
delattr(_STORE, _KEY)
2015-02-22 14:56:24.117 28042 TRACE oslo_messaging.rpc.dispatcher
AttributeError:
_oslo_messaging_localcontext_9bb7d928d1a042e085f354eb118e98a0
On Sat, Feb 14, 2015 at 7:05 AM, Doug Hellmann d...@doughellmann.com
wrote:
On Thu, Feb 12, 2015, at 07:19 AM, Joshua Zhang wrote:
Hi Doug,
Thank you very much for your reply. I don't have any codes, so no any
special codes as well.
Only thing I did is that:
1, use devstack to install a fresh openstack env, all are ok.
2, import neutron-vpnaas directory (no any my own codes) into eclipse
as
pydev project, for example, run unit test
(neutron_vpnaas.tests.unit.services.vpn.test_vpn_service ) in eclipse, it
throws the following exception.
3, but this unit test can be run well in bash, see
http://paste.openstack.org/show/172016/
4, this unit test can also be run well in eclipse as long as I edit
neutron/openstack/common/policy.py file to change oslo.config into
oslo_config.
==
ERROR: test_add_nat_rule
Re: [openstack-dev] A question about strange behavior of oslo.config in eclipse
Hi Doug,
Thank you very much for your reply. I don't have any codes, so no any
special codes as well.
Only thing I did is that:
1, use devstack to install a fresh openstack env, all are ok.
2, import neutron-vpnaas directory (no any my own codes) into eclipse as
pydev project, for example, run unit test
(neutron_vpnaas.tests.unit.services.vpn.test_vpn_service ) in eclipse, it
throws the following exception.
3, but this unit test can be run well in bash, see
http://paste.openstack.org/show/172016/
4, this unit test can also be run well in eclipse as long as I edit
neutron/openstack/common/policy.py file to change oslo.config into
oslo_config.
==
ERROR: test_add_nat_rule
(neutron_vpnaas.tests.unit.services.vpn.test_vpn_service.TestVPNDeviceDriverCallsToService)
neutron_vpnaas.tests.unit.services.vpn.test_vpn_service.TestVPNDeviceDriverCallsToService.test_add_nat_rule
--
_StringException: Traceback (most recent call last):
File
/bak/openstack/neutron-vpnaas/neutron_vpnaas/tests/unit/services/vpn/test_vpn_service.py,
line 98, in setUp
super(TestVPNDeviceDriverCallsToService, self).setUp()
File
/bak/openstack/neutron-vpnaas/neutron_vpnaas/tests/unit/services/vpn/test_vpn_service.py,
line 53, in setUp
super(VPNBaseTestCase, self).setUp()
File /bak/openstack/neutron-vpnaas/neutron_vpnaas/tests/base.py, line
36, in setUp
override_nvalues()
File /bak/openstack/neutron-vpnaas/neutron_vpnaas/tests/base.py, line
30, in override_nvalues
cfg.CONF.set_override('policy_file', neutron_policy)
File /usr/local/lib/python2.7/dist-packages/oslo_config/cfg.py, line
1679, in __inner
result = f(self, *args, **kwargs)
File /usr/local/lib/python2.7/dist-packages/oslo_config/cfg.py, line
1949, in set_override
opt_info = self._get_opt_info(name, group)
File /usr/local/lib/python2.7/dist-packages/oslo_config/cfg.py, line
2262, in _get_opt_info
raise NoSuchOptError(opt_name, group)
NoSuchOptError: no such option: policy_file
On Tue, Feb 10, 2015 at 10:38 PM, Doug Hellmann d...@doughellmann.com
wrote:
On Tue, Feb 10, 2015, at 04:29 AM, Joshua Zhang wrote:
Hi Stacker,
A question about oslo.config, maybe a very silly question. but pls
tell
me if you know, thanks in advance.
I know oslo has removed 'olso' namespace, oslo.config has been changed
to oslo_config, it also retains backwards compat.
I found I can run openstack successfully, but as long as I run
something
in eclipse/pydev it always said like 'NoSuchOptError: no such option:
policy_file'. I can change 'oslo.config' to 'oslo_config' in
neutron/openstack/common/policy.py temporarily to bypass this problem
when
I want to debug something in eclipse. But I want to know why? who can
help
me to explain ? thanks.
It sounds like you have code in one module using an option defined
somewhere else and relying on import ordering to cause that option to be
defined. The import_opt() method of the ConfigOpts class is meant to
help make these cross-module option dependencies explicit [1]. If you
provide a more detailed traceback I may be able to give more specific
advice about where changes are needed.
Doug
[1]
http://docs.openstack.org/developer/oslo.config/configopts.html?highlight=import_opt#oslo_config.cfg.ConfigOpts.import_opt
--
Best Regards
Zhang Hua(张华）
Software Engineer | Canonical
IRC: zhhuabj
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
--
Best Regards
Zhang Hua(张华）
Software Engineer | Canonical
IRC: zhhuabj
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] A question about strange behavior of oslo.config in eclipse
Hi Stacker, A question about oslo.config, maybe a very silly question. but pls tell me if you know, thanks in advance. I know oslo has removed 'olso' namespace, oslo.config has been changed to oslo_config, it also retains backwards compat. I found I can run openstack successfully, but as long as I run something in eclipse/pydev it always said like 'NoSuchOptError: no such option: policy_file'. I can change 'oslo.config' to 'oslo_config' in neutron/openstack/common/policy.py temporarily to bypass this problem when I want to debug something in eclipse. But I want to know why? who can help me to explain ? thanks. -- Best Regards Zhang Hua(张华） Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [nova] Do we need new nova configuration option to show compute nodes with shared_storage or not ?
长波， 你对oslo比较熟，能帮我看看这个问题吗， https://answers.launchpad.net/oslo.config/+question/261550 On Tue, Jan 27, 2015 at 12:13 PM, ChangBo Guo glongw...@gmail.com wrote: Hi ALL, I have been working on bug 1414432 [1] recently, I would like do more discussion before further work. I'm talking about libvirt driver( maybe fit for other hypervisor), there are two kinds of storages which are used for instance's root_disk. 1) non-shared storage on each compute nodes 2) shared storage between compute nodes 2.1 shared instance_path and root_disk (shared everything ike NFS) 2.2 shared root_disk without shared instance_path (shared volume backend like ceph) Current we check if shared storage or not in concrete actions like live-migration, evacuate, these need pass instance as argument, I think the value of hared storage or not should base on compute node, should not base on instance. So do we need new nova configuration option to show compute nodes with shared_storage or not ? benefits: 1) Don't need check for each instance while taking action 2) Can handle similar bug easily like [1] from API level. If yes, some thing like, compute-node-storage-type= [ non-shared | shared-all | shared-volume ] or part-shared In order to support some compute nodes with shared_storage, and others doesn't in one OpenStack development, another configuration shared_storage_compute_nodes =[node3, node5] Any thoughts ? [1]https://bugs.launchpad.net/nova/+bug/1414432 -- ChangBo Guo(gcb) __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Best Regards Zhang Hua(张华） Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [nova] Do we need new nova configuration option to show compute nodes with shared_storage or not ?
I'm sorry, my mistake due to my negligence, pls ignore my above reply. sorry. On Mon, Feb 2, 2015 at 4:04 PM, Joshua Zhang joshua.zh...@canonical.com wrote: 长波， 你对oslo比较熟，能帮我看看这个问题吗， https://answers.launchpad.net/oslo.config/+question/261550 On Tue, Jan 27, 2015 at 12:13 PM, ChangBo Guo glongw...@gmail.com wrote: Hi ALL, I have been working on bug 1414432 [1] recently, I would like do more discussion before further work. I'm talking about libvirt driver( maybe fit for other hypervisor), there are two kinds of storages which are used for instance's root_disk. 1) non-shared storage on each compute nodes 2) shared storage between compute nodes 2.1 shared instance_path and root_disk (shared everything ike NFS) 2.2 shared root_disk without shared instance_path (shared volume backend like ceph) Current we check if shared storage or not in concrete actions like live-migration, evacuate, these need pass instance as argument, I think the value of hared storage or not should base on compute node, should not base on instance. So do we need new nova configuration option to show compute nodes with shared_storage or not ? benefits: 1) Don't need check for each instance while taking action 2) Can handle similar bug easily like [1] from API level. If yes, some thing like, compute-node-storage-type= [ non-shared | shared-all | shared-volume ] or part-shared In order to support some compute nodes with shared_storage, and others doesn't in one OpenStack development, another configuration shared_storage_compute_nodes =[node3, node5] Any thoughts ? [1]https://bugs.launchpad.net/nova/+bug/1414432 -- ChangBo Guo(gcb) __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Best Regards Zhang Hua(张华） Software Engineer | Canonical IRC: zhhuabj -- Best Regards Zhang Hua(张华） Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron][vpnaas] Can we require kernel 3.8+ for use with StrongSwan IPSec VPN for Kilo?
pls note that actually this patch doesn't have minumum kernel requirement
because it only uses 'mount --bind' and 'net namespace', not use 'mount
namespace'. ('mount --bind' is since linux 2.4, 'net namespace' is since
Linux 3.0, 'mount namespace' is since Linux 3.8).
so I think sanity checks for 3.8 is not need, any thoughts ?
thanks.
On Fri, Jan 23, 2015 at 2:12 PM, Kevin Benton blak...@gmail.com wrote:
If we can consolidate that and use a single tool from the master neutron
repository, that would be my vote.
+1 with a hook mechanism so the sanity checks stay in the *aas repos and
they are only run if installed.
On Thu, Jan 22, 2015 at 7:30 AM, Kyle Mestery mest...@mestery.com wrote:
On Wed, Jan 21, 2015 at 10:27 AM, Ihar Hrachyshka ihrac...@redhat.com
wrote:
On 01/20/2015 05:40 PM, Paul Michali wrote:
Review https://review.openstack.org/#/c/146508/ is adding support for
StrongSwan VPN, which needs mount bind to be able to specify different
paths for config files.
The code, which used some older patch, does a test for /proc/1/ns/net,
instead of /proc/1/ns/mnt, because it stated that the latter is only
supported in kernel 3.8+. That was a while ago, and I'm wondering if the
condition is still true. If we know that for Kilo and on, we'll be dealing
with 3.8+ kernels, we could use the more accurate test.
Can we require 3.8+ kernel for this?
I think we can but it's better to check with distributions. Red Hat
wise, we ship a kernel that is newer than 3.8.
If so, how and where do we ensure that is true?
Ideally, you would implement a sanity check for the feature you need
from the kernel. Though it opens a question of whether we want to ship
multiple sanity check tools for each of repos (neutron + 3 *aas repos).
If we can consolidate that and use a single tool from the master neutron
repository, that would be my vote.
Also, if you can kindly review the code here:
https://review.openstack.org/#/c/146508/5/neutron_vpnaas/services/vpn/common/netns_wrapper.py,
I'd really appreciate it, as I'm not versed in the Linux proc files at all.
Thanks!
PCM (Paul Michali)
IRC pc_m (irc.freenode.com)
Twitter... @pmichali
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribehttp://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
--
Kevin Benton
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
--
Best Regards
Zhang Hua(张华）
Software Engineer | Canonical
IRC: zhhuabj
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron] Changes to the core team
+1 On Tue, Jan 20, 2015 at 12:59 PM, Aaron Rosen aaronoro...@gmail.com wrote: +1 On Fri, Jan 16, 2015 at 12:03 PM, Carl Baldwin c...@ecbaldwin.net wrote: +1 On Thu, Jan 15, 2015 at 3:31 PM, Kyle Mestery mest...@mestery.com wrote: The last time we looked at core reviewer stats was in December [1]. In looking at the current stats, I'm going to propose some changes to the core team. Reviews are the most important part of being a core reviewer, so we need to ensure cores are doing reviews. The stats for the 90 day period [2] indicate some changes are needed for core reviewers who are no longer reviewing on pace with the other core reviewers. First of all, I'm removing Sumit Naiksatam from neutron-core. Sumit has been a core reviewer for a long time, and his past contributions are very much thanked by the entire OpenStack Neutron team. If Sumit jumps back in with thoughtful reviews in the future, we can look at getting him back as a Neutron core reviewer. But for now, his stats indicate he's not reviewing at a level consistent with the rest of the Neutron core reviewers. As part of the change, I'd like to propose Doug Wiegley as a new Neutron core reviewer. Doug has been actively reviewing code across not only all the Neutron projects, but also other projects such as infra. His help and work in the services split in December were the reason we were so successful in making that happen. Doug has also been instrumental in the Neutron LBaaS V2 rollout, as well as helping to merge code in the other neutron service repositories. I'd also like to take this time to remind everyone that reviewing code is a responsibility, in Neutron the same as other projects. And core reviewers are especially beholden to this responsibility. I'd also like to point out that +1/-1 reviews are very useful, and I encourage everyone to continue reviewing code even if you are not a core reviewer. Existing neutron cores, please vote +1/-1 for the addition of Doug to the core team. Thanks! Kyle [1] http://lists.openstack.org/pipermail/openstack-dev/2014-December/051986.html [2] http://russellbryant.net/openstack-stats/neutron-reviewers-90.txt __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Best Regards Zhang Hua(张华） Software Engineer | Canonical IRC: zhhuabj __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron] Can Neutron VPNaaS work with strongswan? (Openswan removed from Debian)
Hi Thomas, I worked out a patch https://review.openstack.org/#/c/100791/ based on the latest strongSwan configurations, it can work. but the neutron-spec is still on review, see https://review.openstack.org/#/c/101457/ Can someone help review and approve that spec, thanks. On Mon, Oct 13, 2014 at 12:50 PM, trinath.soman...@freescale.com trinath.soman...@freescale.com wrote: Hi- Yes, VPNaaS works with Strong Swan too. I have tried and was successful. Take the cherry-pick of 67 patchset from https://review.openstack.org/#/c/33148 Work on the conflicts and run neutron. It works perfect. Hope this helps. -- Trinath Somanchi - B39208 trinath.soman...@freescale.com | extn: 4048 -Original Message- From: Thomas Goirand [mailto:z...@debian.org] Sent: Sunday, October 12, 2014 9:54 AM To: OpenStack Development Mailing List (not for usage questions) Subject: [openstack-dev] [neutron] Can Neutron VPNaaS work with strongswan? (Openswan removed from Debian) Hi, As you may know, OpenSwan has been largely unmaintained in Debian, and then was removed from Testing, and then Sid last summer. OpenSwan had some unaddressed security issues, and removing it from Debian was IMO the correct thing to do. Ubuntu followed, and Utopic doesn't have OpenSwan anymore either. Though there's StrongSwan, which is apparently an alternative. But can Neutron work with it? If not, how much work would it be to make Neutron use StrongSwan instead of OpenSwan, and could the maintainers of the VPNaaS people do this be worked on for Kilo? BTW, why not using something as popular as OpenVPN, which has more chances to be well maintained? Cheers, Thomas Goirand (zigo) ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Best Regards Zhang Hua(张华） Software Engineer | Canonical IRC: zhhuabj ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
