[Openstack-operators] [neutron][connection tracking] OVS connection tracking for a DNS VNF

2018-02-11 Thread Ajay Kalambur (akalambu)
Hi Has anyone had any experience running a DNS VNF on Openstack. Typically for these VNFs there is a really huge volume of DNS lookups and this translates to entries for udp in the conntrack table Sometimes under load this can lead to nf_conntrack table being FULL The default max on most systems

Re: [Openstack-operators] [publiccloud-wg][keystone][Horizon] Multi-Factor Auth in OpenStack

2018-02-11 Thread Adrian Turjak
On 09/02/18 15:50, Lance Bragstad wrote: > On 02/08/2018 03:36 PM, Adrian Turjak wrote: >> My plan for the Rocky cycle is to work in Keystone and address the missing >> pieces I need to get MFA working properly throughout OpenStack in an >> actually useful way, and I'll provide updates for that o

[Openstack-operators] [nova] Regression bug for boot from volume with IsolatedHostsFilter

2018-02-11 Thread Matt Riedemann
I triaged this bug a couple of weeks ago: https://bugs.launchpad.net/nova/+bug/1746483 It looks like it's been regressed since Mitaka when that filter started using the RequestSpec object rather than legacy filter_properties dict. Looking a bit deeper though, it looks like this filter never w