[Openstack] [Neutron]Installing openstack on a machine with single interface

2014-06-10 Thread Ageeleshwar Kandavelu
Hi All, I have seen several people asking how to set up openstack on a machine with a single nic card. I have created a blog page for the same. The blog includes aome information about openstack networking also.

Re: [Openstack] [Neutron]Installing openstack on a machine with single interface

2014-06-10 Thread Ageeleshwar Kandavelu
To: Ageeleshwar Kandavelu Cc: openstack@lists.openstack.org Subject: Re: [Openstack] [Neutron]Installing openstack on a machine with single interface Ageeleshwar, Do you happen to have a devstack local.conf for this specific setup? That would be of great help to everyone i believe. thanks, dims On Tue, Jun

Re: [Openstack] Neutron GRE + Flat question

2014-06-10 Thread Ageeleshwar Kandavelu
I have gre tenant networks and one single flat network that I use as my external network. I created a router and connected to the tenant networks and to the flat external network and every thing is working fine. Have you attached a router to your flat network and to your gre network?

Re: [Openstack] Openstack with Ubuntu 14.04

2014-06-09 Thread Ageeleshwar Kandavelu
Icehouse works perfect on 14.04. Please follow the official install guide. Thank you, Ageeleshwar K From: Mahardhika Gilang [mahardika.gil...@andalabs.com] Sent: Monday, June 09, 2014 11:18 AM To: Openstack Milis Subject: [Openstack] Openstack with Ubuntu

Re: [Openstack] help with neutron

2014-06-03 Thread Ageeleshwar Kandavelu
Logs are too general. let me give you a few leads. 1. Check the mysql connection string inside /etc/neutron/neutron.conf and see if it is valid. 2. Check the keystone_authtoken section inside the same file and verify if they are correct and if the specified user/tenant(neutron/service) is

Re: [Openstack] _member_ role after keystone installation

2014-06-02 Thread Ageeleshwar Kandavelu
have you already added admin user to admin role. I think _member_ will already be there but you will not be able to view it until you use a user with admin role. Hope it makes sense Ageeleshwar K From: Ricardo Carrillo Cruz [ricardo.carrillo.c...@gmail.com]

Re: [Openstack] _member_ role after keystone installation

2014-06-02 Thread Ageeleshwar Kandavelu
: Ricardo Carrillo Cruz [ricardo.carrillo.c...@gmail.com] Sent: Monday, June 02, 2014 2:27 PM To: Ageeleshwar Kandavelu Cc: openstack@lists.openstack.org Subject: Re: [Openstack] _member_ role after keystone installation Hi Ageeleshwar Yep, I linked together user 'admin' on tenant 'admin' with role

Re: [Openstack] Network Architecture - Separate Layer 2 and Layer 3 - neutron/network node only l2

2014-05-28 Thread Ageeleshwar Kandavelu
I think you are looking for multiple neutron-l3-agent. It is possible and has been discussed many times before in mailing lists. Just do a google search 'multiple l3 agent in openstack' you should be able to find some link to start with. From: Benoit ML

Re: [Openstack] vm without floatingip can't be ping by private net

2014-05-21 Thread Ageeleshwar Kandavelu
See how you create an external network if you haven't already. Once an external network is created in openstack, instances launched in that network can be accessed directly. Thank you, Ageeleshwar K From: zengshan2008 [zengshan2...@gmail.com] Sent:

Re: [Openstack] Need help! Stderr: 'ovs-ofctl: -1: negative values not supported for in_port\n'

2014-05-15 Thread Ageeleshwar Kandavelu
I have faced this issue before. The openvswitch-plugin tries to create gre interfaces and add them to your br-tun but fails in the process. As a result of this failure the in_port value is sent as -1 and not the actual port number as port creation failed. The error that you are seeing is only

[Openstack] [neutron] GRE network with 5 nodes

2014-05-14 Thread Ageeleshwar Kandavelu
Hi, I recently tried to install Openstack with one controller/network node and 5 compute nodes. I tried to use GRE for neutron network mode. I finished the installation successfully but the network performance was terribly slow. This was partly due to the fact that I was using a low

Re: [Openstack] Cinder volume deleting issue

2014-05-14 Thread Ageeleshwar Kandavelu
Was the instance terminated or directly deleted from the database? From: anand ts [anandts...@gmail.com] Sent: Wednesday, May 14, 2014 4:09 PM To: openstack@lists.openstack.org Subject: [Openstack] Cinder volume deleting issue Hi all, I have multinode setup on

Re: [Openstack] [Neutron] Changing subnet tenant_id

2014-05-13 Thread Ageeleshwar Kandavelu
I can not see anywhere in that page that tenant_id can be updated and it is also not possible. You only have to delete the subnet and recreate for another tenant. From: André Aranha [andre.f.ara...@gmail.com] Sent: Monday, May 12, 2014 10:01 PM To:

Re: [Openstack] Controller and network services in same node

2014-05-13 Thread Ageeleshwar Kandavelu
Perfectly possible. In fact that is what I have done too. In openstack the network node is nothing but a machine which has the below three installed. 1. neutron-l3-agent 2. neutron-dhcp-agent 3. neutron-openvswitch-agent The compute node is what which contains 1. nova-compute 2.

Re: [Openstack] Network node (neutron) , I have only two interface in my machine. How will i configure External interface?

2014-05-12 Thread Ageeleshwar Kandavelu
option 1 bridge all traffic from br-ex and br-eth1 to one physical interface eth1 eth0 -- Internal network br-eth1 -- Data network(physnet1 may be) br-ex -- External network in addition to the above add br-proxy ovs-vsctl add-br br-proxy ovs-vsctl add-port br-proxy eth1 ip link set eth1 up

Re: [Openstack] error while launching instance

2014-05-12 Thread Ageeleshwar Kandavelu
This is not very informative. I'll give you a suggestion. Open up the log file(tail -f /var/log/nova/nova-compute.log) . Then launch an instance. Send only the errors that show up during the launch. Also I would like to see error in scheduler and nova-api . thank you, Ageeleshwar K

Re: [Openstack] How to implement: Role based access control using XACML and SAML over rest for cloud

2014-05-09 Thread Ageeleshwar Kandavelu
Hi, Your first hop is keystone project. It is the openstack identity management system. Try to get a picture of how the various other parts of openstack interact with keystone for providing their service. Second you should look into policy.json file. There is a policy.json for every service

Re: [Openstack] [Neutron] Scan IPs belongin to private networks

2014-04-17 Thread Ageeleshwar Kandavelu
The private networks in openstack will not be accessible from outside openstack. Based on the kind of setup you have there are certain places from where you could launch a scan. You have give the below information. Are you using neutron-openvswitch-plugin? How do you access the instances in the

Re: [Openstack] [Neutron] Scan IPs belongin to private networks

2014-04-17 Thread Ageeleshwar Kandavelu
question and also if you are able to find an alternative please share. Thank you, Ageeleshwar K From: ZIBA Romain [romain.z...@eurogiciel.fr] Sent: Thursday, April 17, 2014 2:59 PM To: Ageeleshwar Kandavelu; openstack@lists.openstack.org Subject: RE: [Openstack] [Neutron

Re: [Openstack] quantum openvswitch agent on compute nodes stops working.

2014-04-10 Thread Ageeleshwar Kandavelu
Steps to debug. 1. Understand where exactly the problem lies * Are you not able to reach the floating ip of instances? * First start a continuous ping from an machine outside openstack to the floating ip * Go to network node. Find the interface of the router that

Re: [Openstack] Multiple Flat Networks same physical net

2014-04-10 Thread Ageeleshwar Kandavelu
How about this in plugin.ini set like this bridge_mappings = Physnet1:br-ex1,Physnet2:br-ex2 then go on and create a proxy bridge to emulate two network on same nic ovs-vsctl add-br br-proxy ovs-vsctl add-port br-proxy ethx ovs-vsctl add-br br-ex1 ip link add name ex1-br-proxy type veth

Re: [Openstack] Devstack Neutron Error

2014-04-09 Thread Ageeleshwar Kandavelu
What is stack.sh doing at that time. Is it trying to delete a network before deleting the routers attached to its subnets? Thank you, Ageeleshwar K From: trinath.soman...@freescale.com [trinath.soman...@freescale.com] Sent: Wednesday, April 09, 2014 1:58 PM To:

Re: [Openstack] Equivalent component for VPC

2014-04-04 Thread Ageeleshwar Kandavelu
The answer is a bit complicated. Multiple users can belong to a tenant in openstack however a user can have multiple vpc in aws. However In aws most of the resources(security groups, routing table, access list are aligned to a vpc) Similarly in openstack all such resources are aligned to the

Re: [Openstack] [RFC] Routed private networks per tenant

2014-04-04 Thread Ageeleshwar Kandavelu
How do you route every tenant network to the corporate network? From: Diego Woitasen [di...@woitasen.com.ar] Sent: Friday, April 04, 2014 1:32 AM To: openstack@lists.openstack.org Subject: [Openstack] [RFC] Routed private networks per tenant Hi, I need

Re: [Openstack] Neutron network node setup

2014-04-03 Thread Ageeleshwar Kandavelu
network(ext-net) would be overlaid on top of Extnet, bridged to br-ex, then traffic flows outside through eth2. Thank you, Ageeleshwar K From: Md. Maruful Hassan [mrf@gmail.com] Sent: Thursday, April 03, 2014 9:29 AM To: Erich Weiler Cc: Ageeleshwar Kandavelu

Re: [Openstack] [Neutron] QoS API and DB model

2014-04-03 Thread Ageeleshwar Kandavelu
Just In case someone who could help me failed to see my previous mail, I am resending the below one. From: Ageeleshwar Kandavelu Sent: Monday, March 31, 2014 1:25 PM To: openstack@lists.openstack.org Subject: [Neutron] QoS API and DB model Hi, I saw the below

Re: [Openstack] Neutron network node setup

2014-04-02 Thread Ageeleshwar Kandavelu
Make your external network flat. If you do so there wont be any vlan tag on packets reaching your external network. in you plugin.ini you put something like this network_vlan_ranges = Intnet1:100:200,Extnet bridge_mappings = Intnet1:br-eth1,Extnet:br-ex This means you would use vlan id 100 to

[Openstack] [Neutron] QoS API and DB model

2014-03-31 Thread Ageeleshwar Kandavelu
Hi, I saw the below blueprint and spec. https://blueprints.launchpad.net/neutron/+spec/quantum-qos-api-db This one appears to be incomplete. Is a more complete document hosted elsewhere? or When can I expect one. I have several doubts regarding its implementation like below. 1. Is the QoS as a

[Openstack] [Neutron] Flaw in flow rules

2014-03-27 Thread Ageeleshwar Kandavelu
Hi, I am using vlan mode networking. There appears to be a flaw in my flow rules. To the best of my knowledge the in_port in the below output should have been 3(according to ovs-dpctl show). But it is 33. To my surprise however, my setup is working. Can any one explain to me how this can

Re: [Openstack] [Neutron] Flaw in flow rules

2014-03-27 Thread Ageeleshwar Kandavelu
Sure that helps. Any Idea whats the difference between this one and the one in dpctl show. Thank you, Ageeleshwar K From: Damon Wang [damon.dev...@gmail.com] Sent: Thursday, March 27, 2014 4:55 PM To: Ageeleshwar Kandavelu Cc: openstack@lists.openstack.org

[Openstack] [Neutron] General dev queries regarding neutron ovs agent

2014-03-25 Thread Ageeleshwar Kandavelu
Hi, I have two queries regarding neutron ovs agent. 1. Correct me if I am wrong the ovs agent polls the neutron database for changes before creating resources. Why does the agent have to register with neutron-server. When I give 'neutron agent-list' I can see all the agents (l3, dhcp,

Re: [Openstack] [Neutron] General dev queries regarding neutron ovs agent

2014-03-25 Thread Ageeleshwar Kandavelu
, Ageeleshwar K From: Salvatore Orlando [sorla...@nicira.com] Sent: Tuesday, March 25, 2014 3:31 PM To: Ageeleshwar Kandavelu Cc: openstack@lists.openstack.org Subject: Re: [Openstack] [Neutron] General dev queries regarding neutron ovs agent Comments inline. Salvatore

[Openstack] (no subject)

2014-03-25 Thread Ageeleshwar Kandavelu
Hi, That is right. Thishttps://review.openstack.org/#/c/45232/ however is more convincing. @skywalker.nick Thank you --- Message: 20

[Openstack] floatting ip are not created

2014-03-25 Thread Ageeleshwar Kandavelu
If you are using gre mode. you have to create br-tun and restart your neutron-ovs agent. If you are using vlan you have to create all bridges mentioned in bridge_mappings inside '/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini' You can not expect your floating ip to work untill you can

Re: [Openstack] floatting ip are not created

2014-03-25 Thread Ageeleshwar Kandavelu
To: Ageeleshwar Kandavelu Subject: Re: [Openstack] floatting ip are not created Hi Ageeleshwar, I want to thank you first for your answer. I am using gre mode. As i know br-tun are using for management And br-int are used for data forwarding beteween the VMs. As documented in the openstack docs, I have

[Openstack] Openstack Services SNMP Intergration

2014-03-20 Thread Ageeleshwar Kandavelu
Hi, Please reply with your suggestions on building support for all Openstack services to send SNMP traps rather than only logging to files. Wouldn't it make debugging and monitoring easier. Is there any project working on this as of now? What would be the best strategy to integrate with

Re: [Openstack] Openstack Services SNMP Intergration

2014-03-20 Thread Ageeleshwar Kandavelu
: Eric Brown [bro...@vmware.com] Sent: Thursday, March 20, 2014 7:17 PM To: Ageeleshwar Kandavelu Cc: openstack@lists.openstack.org; Syedhabib Siddikali Subject: Re: [Openstack] Openstack Services SNMP Intergration I don't think SNMP would be appropriate. For one thing SNMPv1/v2c are highly

[Openstack] provider network with 3 nics

2014-03-06 Thread Ageeleshwar Kandavelu
Hi, I am assuming that eth2 is attached to br-eth2 and eth2 is connected to the 192.168.1.x network. 1. make sure eth2 has promiscous enabled(ip link show eth2) and the link is up(mii-tool eth2) ip link set eth2 promisc on ip link set eth2 up Thank you, Ageeleshwar K

Re: [Openstack] unable to ping google.com

2014-03-05 Thread Ageeleshwar Kandavelu
Reasons for lack of connectivity to google 1. You do not have connectivity to your default gateway Symptoms: you will be unable to ping your default gateway. By default the first ip in your subnet is the ip address of your gateway. Solution: Make sure you have a router that connects your

[Openstack] [openstack] [neutron] how to config one l3 agent for each l3 router?

2014-03-05 Thread Ageeleshwar Kandavelu
Hi, This was interesting so lets work it out this way. Lets do it for vlan mode first and then apply the logic for gre. Lets have two hosts that run l3-agent (nethost1, nethost2) nethost1 configurations In '/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini' network_vlan_ranges =

Re: [Openstack] [neutron] neutron api

2014-02-04 Thread Ageeleshwar Kandavelu
...@da.jp.nec.commailto:mot...@da.jp.nec.com wrote: Hi Ageeleshwar, Have you solved this topic already? Please see Networking API v2.0 reference [1] at docs.openstack.org. This is the official document maintained by neutron team. (2014/02/03 21:33), Ageeleshwar Kandavelu wrote: I was trying to use the python

[Openstack] [neutron] neutron api

2014-02-03 Thread Ageeleshwar Kandavelu
I was trying to use the python-neutronclient for creating security groups and it throws the weird (NeutronClientException: Unable to find 'security_group' in request body ) exception. Why is it trying to find a security group when I am trying to create a new one. the list and get method of the

[Openstack] How to enable jumbo frames for instances

2014-01-27 Thread Ageeleshwar Kandavelu
Hi, Is it possible to have a higher MTU when your ethernet is limited to 1500? Thank you, Ageeleshwar K http://www.csscorp.com/common/email-disclaimer.php ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to :

Re: [Openstack] multiple network nodes

2014-01-22 Thread Ageeleshwar Kandavelu
Hi, I would like to add here. The original question was actually about distributing the load on a network node. Although it is possible to distribute the network services like neutron-server, l3-agent, dhcp-agent etc we have to understand that this does not distribute the load. Consider the

Re: [Openstack] multiple network nodes

2014-01-22 Thread Ageeleshwar Kandavelu
Copying all participants ... Hi, I would like to add here. The original question was actually about distributing the load on a network node. Although it is possible to distribute the network services like neutron-server, l3-agent, dhcp-agent etc we have to understand that this does not

[Openstack] [openstack]No option to specify subnet to launch an instance

2014-01-15 Thread Ageeleshwar Kandavelu
Hi, In openstack dashboard while launching instances only networks are listed. If a Network has multiple subnets how do I specify which subnet a instance should attach to. Also while creating port on a network one can not specify the subnet. Is this a bug or is there some purpose to it. Thank

[Openstack] need configration for Vm network should communicate with seconf NIC

2014-01-10 Thread Ageeleshwar Kandavelu
Do you intend to use this one host as compute or controller or network? If you want to use it as all in one host see https://github.com/mseknibilel/OpenStack-Grizzly-Install-Guide/blob/OVS_SingleNode/OpenStack_Grizzly_Install_Guide.rst http://www.csscorp.com/common/email-disclaimer.php

Re: [Openstack] Neutron port-create command

2014-01-08 Thread Ageeleshwar Kandavelu
Thank you all for that was helpful. I also got some more information(to use agent/linux/interface.py) from neutron mailing list. From: Salvatore Orlando [sorla...@nicira.com] Sent: Thursday, January 09, 2014 3:16 AM To: Jonathan Proulx Cc: Ageeleshwar Kandavelu

Re: [Openstack] Neutron port-create command

2014-01-07 Thread Ageeleshwar Kandavelu
] on behalf of Jonathan Proulx [j...@jonproulx.com] Sent: Tuesday, January 07, 2014 8:33 PM To: Ageeleshwar Kandavelu Cc: openstack@lists.openstack.org Subject: Re: [Openstack] Neutron port-create command On Tue, Jan 7, 2014 at 12:22 AM, Ageeleshwar Kandavelu ageeleshwar.kandav...@csscorp.com wrote: I am

Re: [Openstack] Deploying OpenStack on multiple nodes

2013-12-25 Thread Ageeleshwar Kandavelu
Hi, If you intend to deploy on multiple servers this might be useful. With this the deployment is more like configuration. http://csscorp.github.io/openstack-automation/ Thank you, Akilesh http://www.csscorp.com/common/email-disclaimer.php ___

[Openstack] Openstack Deployment Using Saltstack

2013-12-18 Thread Ageeleshwar Kandavelu
Deployment of Openstack cluster is made easy using salt formulae. We have made a set of salt formulae that look more like configuration files. All that you need to do is define your cluster in a JSON file and the system will configure itself, while you can concentrate on something more