Re: [Openstack] Share your localrc file for devstack

2013-07-29 Thread Salvatore Orlando
Hi Jake, here's the localrc I tipycally use when I develop for Neutron with the OVS plugin: ENABLED_SERVICES=horizon,g-api,g-reg,key,n-api,n-sch,mysql,rabbit,quantum,q-svc,n-cpu,n-cond,cinder,n-crt,q-agt,q-l3,q-dhcp,q-meta ADMIN_PASSWORD=password MYSQL_PASSWORD=password RABBIT_PASSWORD=password S

Re: [Openstack] Summit Sessions

2013-07-29 Thread Salvatore Orlando
On 29 July 2013 18:48, Jarret Raim wrote: > Two quick questions. > > > When you sign up to present presentations at the summit, you enter your > name and email address. You never enter a password, but to log back in to a > pre-existing account, you need a password. Attempting a password reset j

Re: [Openstack] Explaintion needed for localrc file

2013-07-31 Thread Salvatore Orlando
Hi Jake, most of the info here have been shamelessly copied from http://devstack.org/guides/single-machine.html In general devstack.org has plenty of information to understand how it deploys openstack and troubleshoot issues. Salvatore On 31 July 2013 08:59, Jake G. wrote: > Could someone ple

Re: [Openstack] NAT ports from external networks to internal networks

2013-08-04 Thread Salvatore Orlando
Hi Ben, The closest the thing to what you want to achieve is the Floating IP, but, as you say, this will not allow for fine-grained control over ports; so you won't be able, for instance, to expose only port 443 of an internal IP. However, this is not in the Havana roadmap at the moment - but thi

Re: [Openstack] A IPv6-Only OpenStack version, when?!

2013-08-05 Thread Salvatore Orlando
While I'm not in a position to comment for nova-network, at the moment I can just confirm that Neutron does not support IPv6 L3 forwarding. However, from what I read from the admin guide (and the code) it should be ok to specify IPv6 addresses in security group rules. IPv6 address management, and

Re: [Openstack] Manually freeing an IP address

2013-08-07 Thread Salvatore Orlando
As Ashok said, Aaron is working on a patch for removing the need for holding an IP. This will make IP addresses immediately reusable, thus removing the 'hold' process. This is however not likely to be backported to grizzly; it will be an havana feature. Salvatore On 7 August 2013 17:44, Ashok K

Re: [Openstack] quantum/neturon and openvswitch cannot delete a namespace. emer-reset?

2013-08-16 Thread Salvatore Orlando
It sounds like you're having an issue with namespaces, I am not sure how the emer-reset command can help. Have you tried it and solved your issue for you? Have you also tried cleaning up your ns state with neutron-netns-cleanup, which you can run also with the --force option? Regards, Salvatore

Re: [Openstack] Floating ip to VMs

2013-08-19 Thread Salvatore Orlando
That is correct - the blueprint that would add this feature is the one linked by Cristian. however, please note that now this blueprint has been untargeted from Havana and it has no assignee. Salvatore On 19 August 2013 14:46, Cristian Falcas wrote: > Can't be done yet with quantum, from what

Re: [Openstack] Openstack HongKong Summit Speakers

2013-09-04 Thread Salvatore Orlando
Hi Alan, Design session proposal has opened today at summit.openstack.org; on the other hand conference session proposal closed on July 31st. I believe voting closed at some point last week (possibly August 29th). Accepted talks should be announced in a few days. The voting system was available at

Re: [Openstack] [neutron] Connection to neutron failed: Maximum attempts reached

2013-10-14 Thread Salvatore Orlando
Please add your logs under bug1211915. It will also helpful to provide client-side debug output: neutron -v agent-list Regards, Salvatore On 12 October 2013 18:23, Sushma Korati wrote: > Hi Li, > > I am not sure how to clear connection pool but even we faced a similar > issued because rabiitm

Re: [Openstack] Call for help: Havana Install testing

2013-10-16 Thread Salvatore Orlando
What about your l3 agents? Please check if you're being hit by this upgrade bug: https://bugs.launchpad.net/neutron/+bug/1236439 The bug mentions the l3 agents but applies to all agents. Regards, Salvatore On 16 October 2013 20:27, Martinx - ジェームズ wrote: > Aaron, > > I hit that problem again,

Re: [Openstack] Neutron-server error

2013-10-20 Thread Salvatore Orlando
>From this traceback the only thing I can think of is that this behaviour is related to https://bugs.launchpad.net/neutron/+bug/1236439 Can you please check the status of your agents? Regards, Salvatore On 20 October 2013 08:31, Chu Duc Minh wrote: > I'm upgrading from Grizzly to Havana. > Aft

Re: [Openstack] [openstack][neutron] problems accesing metadata on OVS VLAN mode (havana)

2013-11-15 Thread Salvatore Orlando
Hi Alejandro, As we've already discussed the topic over IRC, let me add something else on your setup: - no dhcp agent, no l3 agent - IP configuration injected into instances (I'm disclosing this information since it's already been disclosed on IRC whose logs are publicly accessible anyway) Commen

Re: [Openstack] guidance needed for neutron setup

2013-11-20 Thread Salvatore Orlando
Hi Andre, Some replies inline, hopefully they might be helpful. >From my perspective your setup is not that different from the 'classical' in which controller and network node are separated. Salvatore On 18 November 2013 20:17, Andre Charbonneau < andre.charbonn...@ssc-spc.gc.ca> wrote: > Hi, >

Re: [Openstack] the definistion of X-aaS in neutron

2013-11-25 Thread Salvatore Orlando
Hi Lorin, I think yours is a very good question; I am afraid I am not able to provide a straight answer regarding in which cases one service should be preferred to the other. Technically the difference would be that a firewall rule is enforced only at the edge of your network, and is therefore not

Re: [Openstack] Auto assign Floating IP

2013-12-11 Thread Salvatore Orlando
This feature will be available in neutron for the Icehouse release, and will cause a floating IP to be created everytime a VM is booted. However, it is unlikely that feature will be backported. For Havana users, the best workaround so far, in my opinion, is: 1) create a port on a subnet connected

Re: [Openstack] Neutron port-create command

2014-01-08 Thread Salvatore Orlando
Hi and apologies for the delay in the reply. The neutron API operations define "logical entries", which pretty much means they just exist in the database. The database provides agents information concerning how to wire these port. If you look at the OVS/ML2 plugins, what does the 'magic' for nova

Re: [Openstack] Neutron l3 hardware router integration

2014-01-11 Thread Salvatore Orlando
Hi Robert, I can only confirm that no plugin beyond the one you mentioned is currently available for Neutron. There is perhaps a proposal from vArmour for a l3 plugin implementation, but nothing merged so far. For your question on effort, it is impossible to say whether it's a matter of days or m

Re: [Openstack] How to get the MAC Address in Openstack

2014-01-21 Thread Salvatore Orlando
Hi Varun, When Neutron is enabled, the last 3 octects of the MAC address are randomly generated. This is for avoiding clashes when instances are created concurrently and for preventing potentially malicious users from guessing other users' MAC addresses. Any change to this logic will need code ch

Re: [Openstack] Are multiple neutron plugins on a server supported?

2014-02-17 Thread Salvatore Orlando
Hi Nishant, unfortunately Neutron at the moment supports only a single plugin for each service. This means you can only specify a single core_plugin. If your goal is to support multiple backend technologies in your deployment, you should perhaps have a look at the ML2 where deployment of multiple

Re: [Openstack] neutron extension warnings

2014-02-25 Thread Salvatore Orlando
It seems to me that those extensions (the one you list in the first post on this thread) are not supported by the ML2 plugin. Some of them like port-security are supported only by some core plugins (in that case Nicira). Other extensions, such as metering, are enabled through service plugins, which

Re: [Openstack] [Neutron] General dev queries regarding neutron ovs agent

2014-03-25 Thread Salvatore Orlando
Comments inline. Salvatore On 25 March 2014 07:03, Ageeleshwar Kandavelu < ageeleshwar.kandav...@csscorp.com> wrote: > Hi, > > I have two queries regarding neutron ovs agent. > > 1. Correct me if I am wrong the ovs agent polls the neutron database for > changes before creating resources. Why do

Re: [Openstack] IPAM

2014-06-23 Thread Salvatore Orlando
Hi Jeff, in a nutshell, Neutron has its IPAM logic baked into the main 'db class'. However, Neutron's IPAM does not manage at all the underlay - it manages exclusively devices in the 'logical' realm. There are been discussions in the past concerning Physical appliance management in Neutron, not j

Re: [Openstack] Clean ovs ports

2014-08-28 Thread Salvatore Orlando
Hi, it would be good if you can confirm whether this behaviour affects icehouse or trunk as well. Several bugs concerning nova/neutron communication as well as ovs agent handling of ports have been fixed during the last two release cycle. While the stable team did a great job in back-porting those

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Salvatore Orlando
Some (hopefully) helpful answer inline. Salvatore On 6 October 2014 22:45, Mike Spreitzer wrote: > Is it possible to use DevStack to install OpenStack, including Neutron, so > that OpenStack can make a VM that can communicate with the world beyond > OpenStack? I am looking for a simple localr

Re: [Openstack] (Juno) Neutron router-create 404 error

2014-11-18 Thread Salvatore Orlando
I think you do not have a l3 plugin configured in your neutron.conf - therefore the l3 extension is not being loaded and the router resource does not exist. If the l3 plugin is not there just add it to service_plugins. If the diagnosis is correct, can you post this question to ask.openstack.org (i

Re: [Openstack] [neutron] Fine grained access control on external networks

2014-11-21 Thread Salvatore Orlando
On 21 November 2014 10:35, Antonio Messina wrote: > Hi all, > > I'm running a Juno testbed with Neutron, ml2 and ovs. We have use > cases where we would like to create a shared vlan network and directly > attach a VM on this network. This is not hard to do, and I've > described how I did at this

Re: [Openstack] Opentack and DNS / DHCP / IPAM

2014-11-25 Thread Salvatore Orlando
Afaict infoblox integration cannot work with "stock" openstack components. I think you'll need a service plugin and additional logic to bypass Neutron's "baked" IPAM logic, and a modified DHCP agent to support relay. The community is working on solution for integrating neutron with 3rd party IPAM

Re: [Openstack] Latency of Neutron's floatingip-associate operation?

2015-04-03 Thread Salvatore Orlando
6 minutes is surely the symptom of something wrong. The RPC is asynchronous. A router_updated notification is sent from the server side as soon as the floating IP is associated. The l3 agent apparently is either missing or processing this notification with a huge delay. Indeed the floating IP might

Re: [Openstack] Neutron-legacy error

2015-05-06 Thread Salvatore Orlando
Silvia, Unfortunately this log snippet just tells us that Neutron failed at startup. There might be more information in the Neutron log. As the service failed to start you should see a traceback in q-svc.log (or whatever name you have for neutron's screen log). Regards, Salvatore On 6 May 2015 a

Re: [Openstack] modify policy for security group on neutron

2015-05-16 Thread Salvatore Orlando
Perhaps you can achieve this by editing policy.json (located by default in /etc/neutron). For instance you can allow only admin users to add security group rules to any security group by specifying the following: "create_security_group_rule": "admin_only" Similar rules for update and deletion of

Re: [Openstack] Error: Failed to launch instance "inst": Please try again later [Error: No valid host was found. Exceeded max scheduling attempts 3 for instance ....

2015-06-19 Thread Salvatore Orlando
I would check for errors in the nova compute logs. In some cases I had the same error, but the actual root cause was that the nova compute log was failing to setup networking for an instance. The request went back to the scheduler, which selected another compute node, but failed in the same way wh

Re: [Openstack] Error: Failed to launch instance "inst": Please try again later [Error: No valid host was found. Exceeded max scheduling attempts 3 for instance ....

2015-06-22 Thread Salvatore Orlando
y sounded quite dumb and irritating. Salvatore On 22 June 2015 at 09:14, Silvia Fichera wrote: > Good morning. > As I told I can't find the folder /var/log/nova. > So which log should I check? > Thanks > > 2015-06-19 16:23 GMT+02:00 Salvatore Orlando : > >&g

Re: [Openstack] vm isolation in same tenant network

2015-07-07 Thread Salvatore Orlando
If I understand correctly your use case security groups can be probably used to satisfy your goal with Neutron. Groups of isolated VMs in the same network can be assigned to different security groups. Traffic among different groups will be dropped unless unable by a specific security group rule.

Re: [Openstack] vm isolation in same tenant network

2015-07-07 Thread Salvatore Orlando
Hello Marco, more comments inline. Salvatore On 7 July 2015 at 22:09, Marco Mariani wrote: > 2015-07-07 20:52 GMT+02:00 Salvatore Orlando : > > If I understand correctly your use case security groups can be probably >> used to satisfy your goal with Neutron. >> >>