Re: [Openstack] [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-07-15 Thread Mike Spreitzer
. BTW, when using packet tracing I find it troublesome to do the filtering and/or the pretty-printing online; I simply capture all the packets at a given interface and them examine them later with Wireshark. Regards, Mike From: Gustavo Randich To: Mike Spreitzer/Watson/IBM@IBMUS Cc

Re: [Openstack] Stop external network to reach instances (Was: Reaching VXLAN tenant networks from outside (without floating IPs))

2016-07-06 Thread Mike Spreitzer
Turbo Fredriksson wrote on 07/06/2016 07:29:48 AM: > Ok, I managed to get this working as well. Was quite > simple actually. > > But how do I _STOP_ this from happening?? If there's a root > user on the [local] network, they can simply add that route. > But in some cases I'd like to make sure th

Re: [Openstack] [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-06-30 Thread Mike Spreitzer
is to not forward traffic to the RFC 1918 addresses. I do not recall how the Neutron routers handle packets addressed to those addresses from sources on the "outside". Regards, Mike From: Gustavo Randich To: Mike Spreitzer/Watson/IBM@IBMUS Cc: "openstack@lists.openstack.

Re: [Openstack] [Openstack-operators] Reaching VXLAN tenant networks from outside (without floating IPs)

2016-06-29 Thread Mike Spreitzer
Gustavo Randich wrote on 06/29/2016 03:17:54 PM: > Hi operators... > > Transitioning from nova-network to Neutron (Mitaka), one of the key > issues we are facing is how to reach VMs in VXLAN tenant networks > without using precious floating IPs. > > Things that are outside Neutron in our cas

Re: [Openstack] Control network access between tenant networks in same neutron L3 router?

2016-05-10 Thread Mike Spreitzer
"Hong Hui Xiao" wrote on 05/09/2016 10:55:17 PM: > ... > I think the neutron fwaas can meet your requirement. Try "neutron help | > grep firewall" and [1] to see more. > > > [1] https://wiki.openstack.org/wiki/Neutron/FWaaS > > > HongHui Xiao(肖宏辉) > > > > From: "Rui Mao" > To: >

Re: [Openstack] Openstack powered Public cloud

2016-04-26 Thread Mike Spreitzer
There's no shortage of public IPv6 addresses. Regards, Mike ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/ope

Re: [Openstack] [neutron] User documentation for Neutron's Firewall-as-a-Service (FWaaS)?

2016-01-12 Thread Mike Spreitzer
> From: Matt Kassawara > To: Mike Spreitzer/Watson/IBM@IBMUS > Cc: "openstack@lists.openstack.org" > Date: 01/12/2016 12:16 PM > Subject: Re: [Openstack] [neutron] User documentation for Neutron's > Firewall-as-a-Service (FWaaS)? > > Not really... :/ >

[Openstack] [neutron] User documentation for Neutron's Firewall-as-a-Service (FWaaS)?

2016-01-12 Thread Mike Spreitzer
Is there any user documentation for FWaaS besides http://docs.openstack.org/admin-guide-cloud/networking_introduction.html#firewall-as-a-service-fwaas-overview ? That one is a bit skimpy and, I suspect, a little outdated. For example, `neutron help firewall-create` mentions an option, `--rout

Re: [Openstack] Data transmission failure between VM and outsidemachines

2015-09-27 Thread Mike Spreitzer
> From: "applyhhj" > To: "openstack" > Date: 09/27/2015 11:16 AM > Subject: [Openstack] Data transmission failure between VM and outside machines > > Hi, I have setup the openstack cloud and launched VMs in the cloud. > At first everything went very well. But yesterday evening, due to > some

Re: [Openstack] veth pair disappear after hardware reboot

2015-08-30 Thread Mike Spreitzer
You know that veths do not survive reboot, right? It is up to Neutron or whatever needs them to create them after each boot. Have you checked that all the right Neutron services came up and are healthy after your reboot? ___ Mailing list: http://lis

Re: [Openstack] Clean shutdown

2015-05-04 Thread Mike Spreitzer
Binan AL Halabi wrote on 05/05/2015 01:15:51 AM: > I have this question: > When the autoscaling policy (scale down policy) is triggered and one > of the server is going to be killed. > Nova select the oldest to kill. > The question is there a way to make the termination clean (give the > instanc

Re: [Openstack] [neutron] how to use multiple external networks?

2015-04-08 Thread Mike Spreitzer
Scott Lowe wrote on 04/08/2015 09:56:40 PM: > Please see my responses inline, prefixed by [SL]. > > Mike Spreitzer wrote: > > > Oops, my original email did not contain all of the constraints. Each > > compute instance gets only one network interface, only one IP addres

Re: [Openstack] [neutron] how to use multiple external networks?

2015-04-08 Thread Mike Spreitzer
Oops, my original email did not contain all of the constraints. Each compute instance gets only one network interface, only one IP address. Does Juno Neutron have a way to solve this problem? Thanks, Mike From: James Denton To: Mike Spreitzer/Watson/IBM@IBMUS, openstack Date: 04

[Openstack] [neutron] how to use multiple external networks?

2015-04-08 Thread Mike Spreitzer
Supposing there are two external provider networks, and a tenant wants (a) some of his Compute Instances to have floating IP addresses on one of those external networks, (b) some other of his Compute Instances to have floating IP addresses on the other external network, and (c) all of his Compu

Re: [Openstack] Latency of Neutron's floatingip-associate operation?

2015-04-02 Thread Mike Spreitzer
> I think I am seeing a latency on the order of 10 seconds between (a) > the time Neutron returns success from that operation and (b) the > time when the association is actually functioning. Is this sort of > latency to be expected? I am using Juno, ML2, OVS, and GRE, if it matters. Sorry, I

[Openstack] Latency of Neutron's floatingip-associate operation?

2015-04-01 Thread Mike Spreitzer
I think I am seeing a latency on the order of 10 seconds between (a) the time Neutron returns success from that operation and (b) the time when the association is actually functioning. Is this sort of latency to be expected? I am using Juno, ML2, OVS, and GRE, if it matters. Thanks, Mike ___

[Openstack] [neutron] questions about IPv6 playing nice together with IPv4

2015-03-31 Thread Mike Spreitzer
Can Neutron do NAT between IPv4 and IPv6? For example, if there is a Neutron router between an external network having only IPv6 subnets and a tenant network having only IPv4 subnets, can there be a floating IP address in v6 bound to a private IP address in v4? If I have a tenant network with

Re: [Openstack] [openstack][ceilometer][icehouse]

2015-03-13 Thread Mike Spreitzer
Chinasubbareddy M wrote on 03/13/2015 12:56:33 AM: > need to write a code in python to Implement a new custom meter data > in ceilometer, could you please help me out with your suggestion ? > > my intention is to collect the application sample data through that > new meter and implement auto

Re: [Openstack] Fn::FindInMap gives error in Heat HOT Template

2015-02-11 Thread Mike Spreitzer
That doc also says that Ref is not supported in template heat_template_version: 2014-10-16. Qiming Teng wrote on 02/12/2015 05:35:45 AM: > From: Qiming Teng > To: openstack@lists.openstack.org > Date: 02/11/2015 09:47 PM > Subject: Re: [Openstack] Fn::FindInMap gives error in Heat HOT Template

[Openstack] Control over gateway subnet?

2014-11-21 Thread Mike Spreitzer
For a certain Neutron installation I plan to have one external network with several subnets. I was given a vague warning that there are problems with multiple subnets in an external network, but no details. Do you know of any? I have done a little testing and found no nasty surprise. However

Re: [Openstack] How to run the HEAT autoscaling YAML

2014-11-10 Thread Mike Spreitzer
Venu Murthy wrote on 11/06/2014 08:34:37 PM: > In terms of the architecture for OpenStack setup, if we have a > controller node, Compute Node A and Compute Node B. > In the same availability zone. > > I do understand that this autoscaling is more for the instances. But > how can we load balan

Re: [Openstack] How to run the HEAT autoscaling YAML

2014-11-03 Thread Mike Spreitzer
Mridhul Pax wrote on 11/03/2014 02:17:23 AM: > From: Mridhul Pax > To: "openstack@lists.openstack.org" > Date: 11/03/2014 02:26 AM > Subject: [Openstack] How to run the HEAT autoscaling YAML > > Hello All, > > I'm trying to run the autoscaling heat template under : https:// > github.com/opens

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-08 Thread Mike Spreitzer
Mark Kirkwood wrote on 10/07/2014 02:50:01 AM: > On 07/10/14 19:44, Mike Spreitzer wrote: > > Mark Kirkwood wrote on 10/07/2014 > > 02:23:36 AM: > > > > > I think why this is not documented is the usual use-case for devstack is > > > development setups

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-07 Thread Mike Spreitzer
Mark Kirkwood wrote on 10/07/2014 02:23:36 AM: > I think why this is not documented is the usual use-case for devstack is > development setups where real external ips for the VMs is usually not a > point of interest. > > For instance I never need this...I do sometimes want the VMs to be able

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
Mark Kirkwood wrote on 10/07/2014 01:16:44 AM: > On 07/10/14 09:45, Mike Spreitzer wrote: > > Is it possible to use DevStack to install OpenStack, including Neutron, > > so that OpenStack can make a VM that can communicate with the world > > beyond OpenStack? I am looking

Re: [Openstack] Fwd: Re: How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
> From: "Ian Y. Choi" > To: openstack@lists.openstack.org > Cc: Mike Spreitzer/Watson/IBM@IBMUS > Date: 10/06/2014 10:50 PM > Subject: Fwd: Re: [Openstack] How to make DevStack install OpenStack > with Neutron? > Hello, > > I'm not sure which Linux dis

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
> From: Salvatore Orlando > To: Mike Spreitzer/Watson/IBM@IBMUS > Cc: OpenStack > Date: 10/06/2014 05:40 PM > Subject: Re: [Openstack] How to make DevStack install OpenStack with Neutron? > > ... > > This is a localrc I have been using for ages for launching neu

Re: [Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
> From: Salvatore Orlando > To: Mike Spreitzer/Watson/IBM@IBMUS > Cc: OpenStack > Date: 10/06/2014 05:40 PM > Subject: Re: [Openstack] How to make DevStack install OpenStack with Neutron? > > Some (hopefully) helpful answer inline. > > Salvatore > > On 6 O

[Openstack] How to make DevStack install OpenStack with Neutron?

2014-10-06 Thread Mike Spreitzer
Is it possible to use DevStack to install OpenStack, including Neutron, so that OpenStack can make a VM that can communicate with the world beyond OpenStack? I am looking for a simple localrc or local.conf that will do this. Let us take a concrete example. Suppose I have a machine with one NI

Re: [Openstack] Heat template works in command line but fails at dashboard

2014-09-02 Thread Mike Spreitzer
ZHOU TAO A wrote on 09/02/2014 10:23:34 PM: > I can launch a template from CLI by running 'heat stack-create -f > mytemplate.yaml', but I cannot launch it from dashboard because it get > the wrong security group. > > I have a security group parameter defined like this: > >my_security_gro

Re: [Openstack] [Ceilometer/Heat] correct format of webhook for alarm-action

2014-08-27 Thread Mike Spreitzer
://review.openstack.org/#/c/116490/ Regards, Mike From: "Duan, Li-Gong (Gary@HPServers-Core-OE-PSC)" To: Mike Spreitzer/Watson/IBM@IBMUS, Cc: "openstack@lists.openstack.org" Date: 08/27/2014 06:09 AM Subject:RE: [Openstack] [Ceilometer/Heat] correct format of webhook for

Re: [Openstack] [Ceilometer/Heat] correct format of webhook for alarm-action

2014-08-22 Thread Mike Spreitzer
"Duan, Li-Gong (Gary@HPServers-Core-OE-PSC)" wrote on 08/21/2014 05:37:57 AM: > For the “ceilometer alarm-threshold-create” cmd, what is the correct > format of the webhook URL for alarm action, if I want to trigger a > template in Heat to be executed once this alarm is notified? Are > there a

[Openstack] Where are Keystone trusts documented?

2014-07-25 Thread Mike Spreitzer
I looked in http://developer.openstack.org/api-ref-identity-v2.html and http://developer.openstack.org/api-ref-identity-v3.html but did not notice trusts. Thanks, Mike___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post

Re: [Openstack] Deploying to a specific host using scheduler_hints

2014-07-23 Thread Mike Spreitzer
"Joe D'Andrea" wrote on 07/23/2014 04:23:21 PM: > I have a need to deploy a given VM on a specific host in my > OpenStack Icehouse cluster, bypassing availability zones entirely. Can you be a little more explicit about your issue with availability zones? Did you know that you can specify the

[Openstack] FIXED_RANGE and FLOATING_RANGE for simple localrc for DevStack

2014-06-20 Thread Mike Spreitzer
Suppose I want a simple localrc to use with DevStack on a machine that has a single NIC and is using IPv4 address 10.10.0.42 and netmask 255.255.0.0, and I know addresses 10.10.1.0--10.10.255.254 are unused. What would be reasonable working choices for FIXED_RANGE and FLOATING_RANGE? Thanks, M

Re: [Openstack] How to hit a fast case of nested virtualization

2014-06-16 Thread Mike Spreitzer
laclasse wrote on 06/16/2014 01:24:40 PM: > See Rhys post on that: http://www.rdoxenham.com/?p=275 That post is about how to do nested virtualization at all; that part I have covered (my undercloud hosts have Y in /sys/module/kvm_intel/parameters/nested and can create Linux VMs in which /proc

Re: [Openstack] _member_ role after keystone installation

2014-06-14 Thread Mike Spreitzer
Steve Gordon wrote on 06/14/2014 03:22:51 PM: > > From: "Mike Spreitzer" > > To: "Steve Gordon" > > > > Steve Gordon wrote on 06/14/2014 12:43:48 PM: > > ... > > > Yes, it's supposed to be created by the db creation/migr

Re: [Openstack] Problems with Neutron

2014-06-14 Thread Mike Spreitzer
OK, it looks like you are not suffering the bad route problems I have seen. Beyond that I can not help, but I suppose the details you gave might enable someone else to help. Regards, Mike___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/lis

Re: [Openstack] _member_ role after keystone installation

2014-06-14 Thread Mike Spreitzer
Steve Gordon wrote on 06/14/2014 12:43:48 PM: ... > Yes, it's supposed to be created by the db creation/migration > scripts if it's not there (since Grizzly if I recall correctly). But there is also the role spelled "Member". Why both? Thanks, Mike__

Re: [Openstack] Problems with Neutron

2014-06-14 Thread Mike Spreitzer
Sergey Motovilovets wrote on 06/14/2014 11:00:09 AM: ... > Another problem is metadata service. I've tried like everything I > found regarding neutron<->metadata configuration, without any > success. I just can't connect to 169.254.169.254 from virtual > machines, though they get configured by

[Openstack] How to hit a fast case of nested virtualization

2014-06-14 Thread Mike Spreitzer
Suppose I have an OpenStack undercloud, deployed on some Intel Xeon E5-2670 boxes running Ubuntu 12.04. In /proc/cpuinfo I see the following flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp

Re: [Openstack] [devstack]How to restart all services without unstack ?

2014-06-10 Thread Mike Spreitzer
Mark Kirkwood wrote on 06/11/2014 12:08:55 AM: > On 11/06/14 14:51, Li, Chen wrote: > > Hi list, > > ... > > So, here is my question: > > how can I restart all services without unstack ?? > ... > I've been using: > > $ cd ~/devstack > $ screen -dR > ctrl-a > :quit > > $ ./rejoin-stack.sh > ctr

Re: [Openstack] heat autoscaling group/instance relationships

2014-06-10 Thread Mike Spreitzer
Aaron Knister wrote on 06/10/2014 09:45:49 PM: > ... Is there any way to programmatically > determine if a given stack resource contains nested stacks? I guess > the simplest thing to do is to query a given stack resource as it's > own stack and see what comes back. I know of no other way.

Re: [Openstack] heat autoscaling group/instance relationships

2014-06-10 Thread Mike Spreitzer
Aaron Knister wrote on 06/10/2014 02:40:09 PM: > I'm trying to figure out how to determine all instances that were > created as part of a given autoscaling group. I want to take a given > autoscaling group and list all of its instances. So far I can't > figure out how to do this. The instances

Re: [Openstack] How to reference one template from another

2014-06-02 Thread Mike Spreitzer
Steven Hardy wrote on 06/02/2014 04:19:45 PM: > From: Steven Hardy > To: Mike Spreitzer/Watson/IBM@IBMUS, > Cc: "openstack@lists.openstack.org" > Date: 06/02/2014 04:19 PM > Subject: Re: [Openstack] How to reference one template from another > > Hi Mike, >

[Openstack] How to reference one template from another

2014-06-02 Thread Mike Spreitzer
In a file directory I have Heat Orchestration Template A.yaml, which includes a resource named N of type AWS::CloudFormation::Stack, for which I want to use the Heat Orchestration Template in file B.yaml (in the same directory). What do I write in the properties of N, and in the `heat stack-cr

Re: [Openstack] git review failed

2014-04-19 Thread Mike Spreitzer
Zhengguang Ou wrote on 04/19/2014 11:01:19 PM: > Hi all > I used the "git review" to submit a commit, but I got a error as follow: > You have more than one commit that you are about to submit. > The outstanding commits are: > 5dc6eeb (HEAD, Bug1309986) Add unit test for keypair's api > d10e307 (r

Re: [Openstack] Autoscaling : heat stack failed

2014-03-21 Thread Mike Spreitzer
Are you using Neutron? Is this your first time with Neutron? When I switched from nova networking to Neutron I was initially surprised by errors with the same text. For me it was when creating VM instances. Can you make a load balancer using the CLI? Note that the log excerpt you show is te

Re: [Openstack] Ceilometer: alarm not generating

2014-03-19 Thread Mike Spreitzer
wrote on 03/19/2014 01:56:07 AM: > @Mike: as you can see from the below output that I am able to > create alarms, but I would like to know where these logs are getting > generated after alarm triggered ? I have mentioned ‘log://’. > > But there is nothing in my logfile: Sorry, I am not famili

Re: [Openstack] Ceilometer: alarm not generating

2014-03-18 Thread Mike Spreitzer
Also try selecting for CPU<95% and apply no load; this will tell you whether the problem is about getting any data/evaluations/notifications at all or something else. Regards, Mike From: Bill Arnold/Watson/IBM@IBMUS To: , Date: 03/18/2014 12:17 PM Subject:Re: [Openstack] Ceil

[Openstack] Limited external access from VM created by DevStack

2014-02-11 Thread Mike Spreitzer
I am consistently suffering a network problem in simple DevStack installations. Am I doing something wrong, or is this a bug, or is it to be expected? I install DevStack, using a pretty basic local.conf; the only thing it says that is relevant to networking is setting HOST_IP to the address of

[Openstack] Freenode.net down?

2014-01-23 Thread Mike Spreitzer
I haven't gotten any chat content from Freenode.net since about 15:20 EST today. Is it only me? Thanks, Mike___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http:/

Re: [Openstack] multiple network nodes

2014-01-21 Thread Mike Spreitzer
> From: Jeff Cai > To: "openstack@lists.openstack.org" , > Date: 01/21/2014 02:42 AM > Subject: [Openstack] multiple network nodes > > Hi, > > Does openstack support multiple network nodes deployment? Which > services should be running on each of the network nodes? Yes, OpenStack definitely s

Re: [Openstack] Force volume on same host as VM

2014-01-15 Thread Mike Spreitzer
> From: Thomas Thrainer > To: openstack@lists.openstack.org, > Date: 01/09/2014 04:51 AM > Subject: [Openstack] Force volume on same host as VM > > Hi, > > I try to figure out how to force cinder volumes on the same host as > the VM it is attached to (or will be attached to). OTOH, I would >

Re: [Openstack] [nova] Problem building nova docs

2014-01-06 Thread Mike Spreitzer
Matt Riedemann wrote on 01/06/2014 03:14:45 PM: > Try "sudo pip install oslo.sphinx" and then rebuild. If you're missing > a package, check to see if it's listed in the nova requirements.txt or > test-requirements.txt files. That solved the problem. oslo.sphinx is absent from nova/requireme

[Openstack] [nova] Problem building nova docs

2014-01-06 Thread Mike Spreitzer
I am a newbie to OpenStack, and installed DevStack on Jan 2nd. DevStack installs olso.config and oslo.messaging, but not oslo.sphinx. I am trying for the first time to build the nova docs. It fails with an ExtensionException. Here is a typescript of my second attempt: ubuntu@raring-mjs-5:/