Re: [openstack-dev] [Openstack] [openstack] API to get tunnel port connect to other host

2017-04-28 Thread James Denton
Hi Vikash, The VXLAN tunnel endpoint address is listed in the output of a neutron agent-show : $ neutron agent-show cb45e3f8-4a28-475a-994d-83bc27806c38 +-++ | Field | Value | +

Re: [openstack-dev] [neutron][dvr]What does table 9 used for in br-tun?

2016-03-19 Thread James Denton
Each DVR router has a unique MAC address that can be found in the Neutron DB in the dvr_host_macs table. Those will MACs will likely match what’s in the flow rules there. This presentation from the Paris summit (Page 19-20) breaks it down in some detail. https://www.openstack.org/assets/presen

Re: [openstack-dev] [neutron][dvr]What does table 9 used for in br-tun?

2016-03-19 Thread James Denton
Err… correction. Each host has a unique MAC, not each router. Sorry! http://assafmuller.com/2015/04/15/distributed-virtual-routing-overview-and-eastwest-routing/ James From: James Denton mailto:james.den...@rackspace.com>> Reply-To: "OpenStack Development Mailing List (not for usag

Re: [openstack-dev] [neutron] - Changing the Neutron default security group rules

2016-03-02 Thread James Denton
My opinion is that the current stance of ‘deny all’ is probably the safest bet for all parties (including users) at this point. It’s been that way for years now, and is a substantial change that may result in little benefit. After all, you’re probably looking at most users removing the default r

Re: [openstack-dev] [neutron][fwaas] how a disabled firewall should behave

2016-01-26 Thread James Denton
Hi Takashi, At least in Liberty, with the reference iptables firewall, it looks like setting the admin state of the firewall to DOWN results in traffic hitting only the neutron-l3-agent-fwaas-defau chain. The action there is to DROP all traffic. James On 1/26/16, 4:15 AM, "Takashi Yamamo

[openstack-dev] [Heat] Add extraroutes support to neutron routers

2015-02-05 Thread James Denton
, we are routing to another instance off the router. Thanks! — James Denton __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http