[openstack-dev] [Neutron] [DVR] easyOVS -- Smart tool to use/debug Neutron/DVR

2015-08-31 Thread Vikas Choudhary
Hi, One suggestion from my side is checking nova security groups against iptable rules for each vm.Doing this will ensure that there are no unwanted holes in security (for example, accidental messing up of iptable rules). Thanks -Vikas Choudhary __

Re: [openstack-dev] [Neutron] [DVR] easyOVS -- Smart tool to use/debug Neutron/DVR

2015-08-30 Thread Germy Lure
Hi, It's Interesting! I have three points for you here. a.Support packet tracking which show the path of a packet traveled on the host, even on the source/destination host. b.Given a communication type and packet characteristic to find out the fault point. For example, if you want VM1 talk with VM

[openstack-dev] [Neutron] [DVR] easyOVS -- Smart tool to use/debug Neutron/DVR

2015-08-28 Thread Baohua Yang
Hi , all When using neutron (especially with DVR), I find it difficult to debug problems with lots of ovs rules, complicated iptables rules, network namespaces, routing tables, ... So I create easyOVS