Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

On 10/28/2015 04:14, Giuseppe (Pino) de Candia wrote: On Wed, Oct 28, 2015 at 4:20 PM, Russell Bryant > wrote: I read through the proposed SFC API here: http://docs.openstack.org/developer/networking-sfc/api.html We have similarly

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

31, 2015 10:08 PM To: Cathy Zhang Cc: Henry Fourie; OpenStack Development Mailing List (not for usage questions); Irena Berezovsky Subject: RE: [openstack-dev] [neutron][networking-sfc] API clarification questions > > Cathy> No restriction as long as the ports are routable. Originally we thi

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

nt Mailing List (not for usage > questions); Irena Berezovsky > *Subject:* RE: [openstack-dev] [neutron][networking-sfc] API > clarification questions > > > > > Cathy> No restriction as long as the ports are routable. Originally we > think we need to specify L2 and L3 s

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

From: Giuseppe (Pino) de Candia [mailto:gdecan...@midokura.com] Sent: Saturday, October 31, 2015 10:08 PM To: Cathy Zhang Cc: Henry Fourie; OpenStack Development Mailing List (not for usage questions); Irena Berezovsky Subject: RE: [openstack-dev] [neutron][networking-sfc] API clarification

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

On Oct 28, 2015 19:17, "Russell Bryant" wrote: > > On 10/28/2015 05:14 PM, Giuseppe (Pino) de Candia wrote: > > On Wed, Oct 28, 2015 at 4:20 PM, Russell Bryant > > wrote: > > > > I read through the proposed SFC API here: > >

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

, October 28, 2015 5:15 PM > To: OpenStack Development Mailing List (not for usage questions) > Cc: Cathy Zhang; Henry Fourie; Irena Berezovsky > Subject: Re: [openstack-dev] [neutron][networking-sfc] API clarification questions > > > > On Wed, Oct 28, 2015 at 4:20 PM, Russell B

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

Hi Gal, Sorry for the slow reply. Actually, thinking about it now, I'm not sure. First, I assume that the pipeline must be in reverse order for ingress/egress. Do you agree? For a generic VM, it might be best to have chaining between the network and the port-level FW. This would allow a

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

Hi Russell, Please see my replies inline. Thanks, Cathy -Original Message- From: Russell Bryant [mailto:rbry...@redhat.com] Sent: Wednesday, October 28, 2015 4:21 PM To: OpenStack Development Mailing List; Cathy Zhang; Henry Fourie Subject: [neutron][networking-sfc] API clarification

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

- Original Message - > Hi Russell, > > Please see my replies inline. > > Thanks, > Cathy > > -Original Message- > From: Russell Bryant [mailto:rbry...@redhat.com] > Sent: Wednesday, October 28, 2015 4:21 PM > To: OpenStack Development Mailing List; Cathy Zhang; Henry Fourie >

[openstack-dev] [neutron][networking-sfc] API clarification questions

I read through the proposed SFC API here: http://docs.openstack.org/developer/networking-sfc/api.html I'm looking at implementing what would be required to support this API in OVN. I have a prototype, but I had to make some pretty big assumptions, so I wanted to clarify the intent of the API.

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

On Wed, Oct 28, 2015 at 4:20 PM, Russell Bryant wrote: > I read through the proposed SFC API here: > > http://docs.openstack.org/developer/networking-sfc/api.html > > I'm looking at implementing what would be required to support this API > in OVN. I have a prototype, but I

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

On 10/28/2015 05:14 PM, Giuseppe (Pino) de Candia wrote: > On Wed, Oct 28, 2015 at 4:20 PM, Russell Bryant > wrote: > > I read through the proposed SFC API here: > > http://docs.openstack.org/developer/networking-sfc/api.html > > I'm

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

] [neutron][networking-sfc] API clarification questions On Wed, Oct 28, 2015 at 4:20 PM, Russell Bryant <rbry...@redhat.com<mailto:rbry...@redhat.com>> wrote: I read through the proposed SFC API here: http://docs.openstack.org/developer/networking-sfc/api.html I'm looking at imple

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

Hi Russell, Please see inline. Regards, Cathy -Original Message- From: Russell Bryant [mailto:rbry...@redhat.com] Sent: Wednesday, October 28, 2015 5:27 PM To: Cathy Zhang Cc: OpenStack Development Mailing List; Henry Fourie Subject: Re: [neutron][networking-sfc] API clarification

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

Hi Pino, Just one note on the order of the pipeline, shouldnt the security part be before the service chaining (and also after)? (Unless you only meant egress security and you still do the ingress before) Gal. On Wed, Oct 28, 2015 at 10:14 AM, Giuseppe (Pino) de Candia < gdecan...@midokura.com>