Re: [openstack-dev] EXT: [octavia] scheduling webex to discuss flavor spec (https://review.openstack.org/#/c/392485/)

2017-06-26 Thread Samuel Bercovici
Carlos, We are in Israel and would like the meeting to happen at a more favorable time to us, for example 9:00AM CDT. -Sam. From: Carlos Puga [mailto:carlos.p...@walmart.com] Sent: Monday, June 26, 2017 7:04 PM To: OpenStack Development Mailing List (not for usage questions) Subject: [openst

Re: [openstack-dev] [Neutron][LBaaS]Removing LBaaS v1 - are weready?

2016-03-08 Thread Samuel Bercovici
]Removing LBaaS v1 - are weready? Ok, for what it’s worth we have contributed our migration script: https://review.openstack.org/#/c/289595/ — please look at this as a starting point and feel free to fix potential problems… Thanks, German On 3/7/16, 11:00 AM, "Samuel Bercovici" wrote: &g

Re: [openstack-dev] [Neutron][LBaaS]Removing LBaaS v1 - are weready?

2016-03-08 Thread Samuel Bercovici
o change their IPs… Thanks, German On 3/6/16, 5:35 AM, "Samuel Bercovici" wrote: >As for a migration tool. >Due to model changes and deployment changes between LBaaS v1 and LBaaS v2, I >am in favor for the following process: > >1. Download LBaaS v1 information (Tenan

Re: [openstack-dev] [Neutron][LBaaS]Removing LBaaS v1 - are weready?

2016-03-07 Thread Samuel Bercovici
different VIPs so the end user would need to change their IPs… Thanks, German On 3/6/16, 5:35 AM, "Samuel Bercovici" wrote: >As for a migration tool. >Due to model changes and deployment changes between LBaaS v1 and LBaaS v2, I >am in favor for the following process: >

Re: [openstack-dev] [Neutron][LBaaS]Removing LBaaS v1 - are weready?

2016-03-06 Thread Samuel Bercovici
> [sbaluk...@bluebox.net<mailto:sbaluk...@bluebox.net>] > Sent: Wednesday, March 02, 2016 4:49 PM > To: OpenStack Development Mailing List (not for usage questions) > Subject: Re: [openstack-dev] [Neutron][LBaaS]Removing LBaaS v1 - are weready? > > I am also on-board with remo

Re: [openstack-dev] [Neutron][LBaaS]Removing LBaaS v1 - are weready?

2016-03-02 Thread Samuel Bercovici
anywhere. Thanks, doug On Mar 2, 2016, at 7:06 AM, Samuel Bercovici mailto:samu...@radware.com>> wrote: Hi, I have just notices the following change: https://review.openstack.org/#/c/286381 which aims to remove LBaaS v1. Is this planned for Mitaka or for Newton? While LBaaS v2 is becom

[openstack-dev] [Neutron][LBaaS]Removing LBaaS v1 - are we ready?

2016-03-02 Thread Samuel Bercovici
Hi, I have just notices the following change: https://review.openstack.org/#/c/286381 which aims to remove LBaaS v1. Is this planned for Mitaka or for Newton? While LBaaS v2 is becoming the default, I think that we should have the following before we replace LBaaS v1: 1. Horizon Support -

Re: [openstack-dev] Octavia (LBaaS) license question

2016-02-15 Thread Samuel Bercovici
OpenStack is using KVM and Linux as reference implementation, both are GPL. From: Gal Sagie [mailto:gal.sa...@gmail.com] Sent: Sunday, February 14, 2016 8:47 AM To: OpenStack Development Mailing List (not for usage questions) Subject: [openstack-dev] Octavia (LBaaS) license question Hello All, I

Re: [openstack-dev] [Neutron][LBaaS][Octavia] Should subnet be optional on member create?

2016-01-27 Thread Samuel Bercovici
he subnet parameter for all members to > > determine which > > > >> back-end networks the load balancing software needs a > > port on. > > > >> > > > >> I think the original use case for making subne

Re: [openstack-dev] [Neutron][LBaaS][Octavia] Should subnet be optional on member create?

2016-01-17 Thread Samuel Bercovici
Btw. I am still in favor on associating the subnets to the LB and then not specify them per node at all. -Sam. -Original Message- From: Samuel Bercovici [mailto:samu...@radware.com] Sent: Sunday, January 17, 2016 10:14 AM To: OpenStack Development Mailing List (not for usage

Re: [openstack-dev] [Neutron][LBaaS][Octavia] Should subnet be optional on member create?

2016-01-17 Thread Samuel Bercovici
+1 Subnet should be mandatory The only thing this makes supporting load balancing servers which are not running in the cloud more challenging to support. But I do not see this as a huge user story (lb in cloud load balancing IPs outside the cloud) -Sam. -Original Message- From: Brandon

Re: [openstack-dev] [neutron][heat] LBaaS of Neutron

2015-11-15 Thread Samuel Bercovici
Another option is to implement health monitor that will fail on P nodes and will succeed on A nodes. From: Sergey Kraynev [mailto:skray...@mirantis.com] Sent: Monday, November 16, 2015 9:15 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [neutron][

Re: [openstack-dev] [neutron][lbaas] Proposing Michael Johnson for neutron-lbaas core team

2015-09-16 Thread Samuel Bercovici
And then they were 6 =D> -Sam. -Original Message- From: Doug Wiegley [mailto:doug...@parksidesoftware.com] Sent: Thursday, September 17, 2015 1:34 AM To: OpenStack Development Mailing List (not for usage questions) Subject: [openstack-dev] [neutron][lbaas] Proposing Michael Johnson for

Re: [openstack-dev] [neutron][lbaas] L7 - Tasks

2015-08-26 Thread Samuel Bercovici
Hi, I think that Evgeny is trying to complete everything bedsides the reference implementation (API, CLI, Tempest, etc.). Evgeny will join the Octavia IRC meeting so it could be a good opportunity to get status and sync activities. As far as I know 8/31 is feature freeze and not code complete. P

Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas v2

2015-07-29 Thread Samuel Bercovici
Hi, How do I sign in to this? I am asked for credentials. -Sam. From: Jain, Vivek [mailto:vivekj...@ebay.com] Sent: Wednesday, July 29, 2015 5:54 AM To: OpenStack Development Mailing List (not for usage questions) Cc: Tonse, Milan Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for

Re: [openstack-dev] [designate] and [lbaas] - GSLB API and backend support

2015-06-24 Thread Samuel Bercovici
=sharing Regards Kunal On Jun 24, 2015, at 12:35 AM, Samuel Bercovici mailto:samu...@radware.com>> wrote: Hi Kunal, Did you also include use cases per our last discussion on IRC? I prefer to start with use cases before we dive into APIs. Thanks, -Sam. -Original Message

Re: [openstack-dev] [designate] and [lbaas] - GSLB API and backend support

2015-06-24 Thread Samuel Bercovici
logs can be found at >> http://eavesdrop.openstack.org/meetings/gslb/2015/ , and we will be having >> another meeting next week, same time, same channel. >> >> Thanks, >> doug >> >> >>> On May 31, 2015, at 1:27 AM, Samuel Bercovici

Re: [openstack-dev] [designate] and [lbaas] - GSLB API and backend support

2015-05-31 Thread Samuel Bercovici
or me. >> >>Thanks, >>Rakesh Saha >> >>On Tue, May 26, 2015 at 8:45 PM, Vijay Venkatachalam >>><mailto:vijay.venkatacha...@citrix.com>> wrote: >> >>We would like to participate as well. >> &g

Re: [openstack-dev] [lbaas] [octavia] [barbican] Relationship between Octavia and Barbican and Octavia 1.0 questions

2015-05-26 Thread Samuel Bercovici
Hi Dani, Can you please explain further the 3rd use case (Multiple FIPs….)? Regards, -Sam. From: Daniel Comnea [mailto:comnea.d...@gmail.com] Sent: Friday, May 22, 2015 10:09 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [lbaas]

Re: [openstack-dev] [designate] and [lbaas] - GSLB API and backend support

2015-05-26 Thread Samuel Bercovici
Hi, I would also like to participate. Friday is a non-working day in Israel (same as Saturday for most of you). So Monday- Thursday works best for me. -Sam. From: Doug Wiegley [mailto:doug...@parksidesoftware.com] Sent: Saturday, May 23, 2015 8:45 AM To: OpenStack Development Mailing List (not

Re: [openstack-dev] [lbaas] [octavia] [barbican] Relationship between Octavia and Barbican and Octavia 1.0 questions

2015-05-26 Thread Samuel Bercovici
We are considering adding network classes “rules” to LBaaS. In this case, such network classes could als be used to white/black list traffic. From: Brandon Logan [mailto:brandon.lo...@rackspace.com] Sent: Friday, May 22, 2015 12:46 AM To: openstack-dev@lists.openstack.org; maishsk+openst...@maish

Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-15 Thread Samuel Bercovici
Bad link. Here is the correct one: https://filepile.radware.com/files/2cd-953-809 From: Samuel Bercovici [mailto:samu...@radware.com] Sent: Friday, May 15, 2015 7:48 PM To: OpenStack Development Mailing List (not for usage questions); Vijay Venkatachalam; Evgeny Fedoruk; Adam Harwell; Kyle

Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-15 Thread Samuel Bercovici
Here is an example: https://filepile.radware.com/files/5ba-e02-c39 From: Samuel Bercovici [mailto:samu...@radware.com] Sent: Friday, May 15, 2015 7:06 PM To: Vijay Venkatachalam; OpenStack Development Mailing List (not for usage questions); Evgeny Fedoruk; Adam Harwell; Kyle Mestery; Brandon

Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-15 Thread Samuel Bercovici
Cloud - Corvallis); Doug Wiegley; Samuel Bercovici Subject: Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links Hi Sam, Thanks for probing. How many seconds/mins you have thought per vendor? By when do you need this? Will tomorrow work fine? Thanks, Vijay V. Sent from Surface From

[openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-14 Thread Samuel Bercovici
Hi Everyone, As you may be aware, we have a speaking slot on the Vancouver summit to discuss "LBaaS v2, Kilo and beyond" on Monday https://openstacksummitmay2015vancouver.sched.org/event/3f1e9e24f36238152749afea9c21a264#.VVTwCPmqqko We are considering to show vendors demos or list/link such mov

Re: [openstack-dev] [neutron][lbaas] adding lbaas core

2015-04-22 Thread Samuel Bercovici
Congratulations Phil! Thank you for your work so far. -Sam. -Original Message- From: Doug Wiegley [mailto:doug...@parksidesoftware.com] Sent: Tuesday, April 21, 2015 7:55 PM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [neutron][lbaas] add

[openstack-dev] [neutron][lbaas]Topics and possible fomats for LBaaS in OpenStack/Vancouver

2015-02-18 Thread Samuel Bercovici
Hi Everyone, Based on the last IRC, I thought we could start a discussion on ML on topics and then maybe on how we want to discuss durin the summit. Follows some items we may wish to discuss: 1. LBaaS API additions (assuming TLS and L7 will be there): a. L3 based traffic routing - L

Re: [openstack-dev] [neutron][lbaas] Object statuses

2015-01-26 Thread Samuel Bercovici
+1 I also prefer option 2 in general with slight inclination to 2-B -Original Message- From: Brandon Logan [mailto:brandon.lo...@rackspace.com] Sent: Friday, January 23, 2015 9:21 AM To: openstack-dev@lists.openstack.org Subject: [openstack-dev] [neutron][lbaas] Object statuses So I am

Re: [openstack-dev] [neutron][lbaas] Shared Objects in LBaaS - Use Cases that led us to adopt this.

2014-12-08 Thread Samuel Bercovici
t response, allowing too many many to many relationships feels like a solution to a problem that doesn't really exist, and introduces a lot of unnecessary complexity. Stephen On Sun, Dec 7, 2014 at 11:43 PM, Samuel Bercovici mailto:samu...@radware.com>> wrote: +1 From: Stephen Bal

Re: [openstack-dev] [neutron][lbaas] Shared Objects in LBaaS - Use Cases that led us to adopt this.

2014-12-07 Thread Samuel Bercovici
el for statuses. Showing these in the body of load balancer details can get quite large. I hope this makes sense because my brain is ready to explode. Thanks, Brandon On Thu, 2014-11-27 at 08:52 +, Samuel Bercovici wrote: > Brandon, can you please explain further (1) bellow? >

Re: [openstack-dev] [neutron][lbaas] Shared Objects in LBaaS - Use Cases that led us to adopt this.

2014-11-27 Thread Samuel Bercovici
lly isn't a problem. That is to say, having the same > L7Policy pointing at the same pool is OK, so I personally don't have a > problem allowing sharing of objects within the scope of parent > objects. What do the rest of y'all think? > > > Stephen > > >

Re: [openstack-dev] [neutron][lbaas] Shared Objects in LBaaS - Use Cases that led us to adopt this.

2014-11-27 Thread Samuel Bercovici
ght be too general to, for > example, represent the UP/DOWN status of members of a given pool.) > > > Also, from an haproxy perspective, sharing pools within a single > listener actually isn't a problem. That is to say, having the same > L7Policy pointing at the same pool is OK, s

Re: [openstack-dev] [neutron][lbaas] Shared Objects in LBaaS - Use Cases that led us to adopt this.

2014-11-22 Thread Samuel Bercovici
ugh, I feel like we should walk before we run: Implementing 1:1 initially is a good idea to get us rolling. Whether we then implement 1:N or M:N after that is another question entirely. But in any case, it seems like a bad idea to try to start with M:N. Stephen On Thu, Nov 20, 2014 at 4:52 AM, Samuel

[openstack-dev] [neutron][lbaas] Shared Objects in LBaaS - Use Cases that led us to adopt this.

2014-11-20 Thread Samuel Bercovici
Hi, Per discussion I had at OpenStack Summit/Paris with Brandon and Doug, I would like to remind everyone why we choose to follow a model where pools and listeners are shared (many to many relationships). Use Cases: 1. The same application is being exposed via different LB objects. For example

Re: [openstack-dev] [neutron][lbaas] rescheduling meeting

2014-11-05 Thread Samuel Bercovici
For us in Israel, the earlier the better. The current meeting time is very good for us, although I understand it too early for some. -Sam. From: Gregory Lebovitz [mailto:gregory.i...@gmail.com] Sent: Wednesday, November 05, 2014 1:10 PM To: OpenStack Development Mailing List (not for usage quest

Re: [openstack-dev] [Neutron][LBaaS] Continuing on "Calling driver interface on every API request"

2014-08-11 Thread Samuel Bercovici
m, at some future date, without an interface change. If my bias is showing that I¹m not a fan of adding this complexity for that, I¹m not surprised. Thanks, doug On 8/11/14, 7:57 AM, "Samuel Bercovici" wrote: >Hi, > >Validations such as ³timeout > delay² should be perfor

Re: [openstack-dev] [Neutron][LBaaS] Continuing on "Calling driver interface on every API request"

2014-08-11 Thread Samuel Bercovici
Hi, Validations such as "timeout > delay" should be performed on the API level before it reaches the driver. For a configuration tree (lb, listeners, pools, etc.), there should be one provider. Having provider defined in multiple places does not make sense. -San. From: Vijay Venkatachalam [

Re: [openstack-dev] [Neutron][LBaaS] TLS capability - certificates data persistency

2014-07-22 Thread Samuel Bercovici
Stephen, This will increase the complexity of the code since it will add managing the cache lifecycle in tandem with the barbican back end and the fact that containers may be shared by multiple listeners. At this stage, I think that it serves us all to keep the code at this stage as small and s

Re: [openstack-dev] [Neutron][LBaaS] Milestone and Due Dates

2014-07-20 Thread Samuel Bercovici
Hi, Please note that if the following will not get approved this week they will not be done in Juno which is a pity considering their almost final state. https://review.openstack.org/#/c/98640/ - TLS termination https://review.openstack.org/#/c/99709/ - L7 Content Switching Please see if there i

Re: [openstack-dev] [Neutron][LBaaS] TLS capability - SNI - Extracting SubjectCommonName and/or SubjectAlternativeNames from X509

2014-07-15 Thread Samuel Bercovici
reated, and if we were to treat SANs differently then we're both breaking the standard and setting a bad precedent. Stephen On Tue, Jul 15, 2014 at 9:35 AM, Carlos Garza mailto:carlos.ga...@rackspace.com>> wrote: On Jul 15, 2014, at 10:55 AM, Samuel Bercovici mailto:samu...@radware.

Re: [openstack-dev] [Neutron][LBaaS] TLS capability - SNI - Extracting SubjectCommonName and/or SubjectAlternativeNames from X509

2014-07-15 Thread Samuel Bercovici
Hi, I think that the discussion have asked that obtaining information out of the x509 via the SAN field will not be defined as mandatory. For example Radware's backend extracts this information from the x509 in the (virtual) device itself, specifying dns values different than what exists in th

Re: [openstack-dev] [Neutron][LBaaS] Shim vs Agent Refactor

2014-07-10 Thread Samuel Bercovici
used without the agent, if so could you explain how? Thanks, Dustin Lundquist On Thursday, July 10, 2014, Samuel Bercovici mailto:samu...@radware.com>> wrote: New/updated v2 driver could be done without an agent (same as was possible in v1). From: Doug Wiegley [mailto:do...@a10network

Re: [openstack-dev] [Neutron][LBaaS] Shim vs Agent Refactor

2014-07-10 Thread Samuel Bercovici
parallel if we had extra resources. This shim will have odd corner cases (a second listener on a vip, e.g.), which will chuck errors. The ref haproxy driver is highest priority, and thus the v2 agent, as lbaas v2 goes nowhere without it. Doug From: Samuel Bercovici mailto:samu...@radware.com

Re: [openstack-dev] [Neutron][LBaaS] Shim vs Agent Refactor

2014-07-10 Thread Samuel Bercovici
This is also my understanding. From: Stephen Balukoff [mailto:sbaluk...@bluebox.net] Sent: Thursday, July 10, 2014 6:30 PM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Neutron][LBaaS] Shim vs Agent Refactor Per the IRC discussion this morning, I

Re: [openstack-dev] [Neutron][LBaaS] Wednesday meeting agenda topics

2014-07-10 Thread Samuel Bercovici
I prefer IRC only. As I am located in Israel and so are other Radware people, it is easier for us to use IRC which is also more available from more devices and locations. OpenStack has chosen IRC as a way to allow different people from different places and different speaking capabilities to work

Re: [openstack-dev] [Neutron][LBaaS] Status of entities that do not exist in a driver backend

2014-07-07 Thread Samuel Bercovici
Hi, For logical objects that were deleted but the backend did not execute on, there is a PENDING_DELETE state. So currently there is PENDING_CREATE --> CREATE, PENDING_UPDATE-->UPDATE and PENDING_DELETE-->object is removed from the database. If an error occurred that the object is in ERROR state

[openstack-dev] [Neutron][LBaaS] Analyzing the critical path

2014-07-02 Thread Samuel Bercovici
To reiterate the Juno release plan from: https://wiki.openstack.org/wiki/Juno_Release_Schedule Feature freeze is at: 21st August. I am listing tasks which we should consider to be done for Juno and who should handle them. The following might be considered as critical path to get anything for Ju

Re: [openstack-dev] [Neutron][LBaaS] TLS support RST document on Gerrit

2014-06-18 Thread Samuel Bercovici
to:carlos.ga...@rackspace.com<mailto:carlos.ga...@rackspace.com>] >>> Sent: Tuesday, June 10, 2014 12:18 PM >>> To: OpenStack Development Mailing List (not for usage questions) >>> Subject: Re: [openstack-dev] [Neutron][LBaaS] TLS support RST >>> document on Gerr

Re: [openstack-dev] [Neutron][LBaaS] Weekly Standup Trial

2014-06-12 Thread Samuel Bercovici
Thank you for this. I think it can stream line the meeting! From: Jorge Miramontes [mailto:jorge.miramon...@rackspace.com] Sent: Thursday, June 12, 2014 1:57 AM To: OpenStack Development Mailing List (not for usage questions) Subject: [openstack-dev] [Neutron][LBaaS] Weekly Standup Trial Hey Neut

Re: [openstack-dev] [Neutron][LBaaS] TLS support RST document on Gerrit

2014-06-10 Thread Samuel Bercovici
To elaborate on the case where containers get deleted while LBaaS still references it. We think that the following approach will do: * The end user can delete a container and leave a "dangling" reference in LBaaS. * It would be nice to allow adding meta data on the container so

Re: [openstack-dev] [Neutron][LBaaS] Barbican Neutron LBaaS Integration Ideas

2014-06-09 Thread Samuel Bercovici
: Re: [openstack-dev] [Neutron][LBaaS] Barbican Neutron LBaaS Integration Ideas +1 for the idea of making certificate immutable. However, if Barbican allows updating certs/containers then versioning is a must. Thanks, Vivek On 6/8/14, 11:48 PM, "Samuel Bercovici" wrote: >Hi, &g

Re: [openstack-dev] [Neutron][LBaaS] Barbican Neutron LBaaS Integration Ideas

2014-06-08 Thread Samuel Bercovici
Hi, I think that option 2 should be preferred at this stage. I also think that certificate should be immutable, if you want a new one, create a new one and update the listener to use it. This removes any chance of mistakes, need for versioning etc. -Sam. -Original Message- From: Jorge

[openstack-dev] [Neutron][LBaaS] object model & migration discussion

2014-06-01 Thread Samuel Bercovici
-Original Message- From: Samuel Bercovici Sent: Sunday, June 01, 2014 10:19 AM To: 'Brandon Logan'; OpenStack Development Mailing List (not for usage questions); Eugene Nikanorov (enikano...@mirantis.com) Subject: RE: Your suggestions in the BP Hi Brandon Eugene and Everyon

Re: [openstack-dev] Your suggestions in the BP

2014-06-01 Thread Samuel Bercovici
lbaas" extension that has the "old API" but redirect to the "new API" Doing 2, can allow "co-existence" of old code with old drivers until new code with new drivers can take its place. Regards, -Sam. -Original Message- From: Brandon Logan [m

[openstack-dev] [Neutron][LBaaS] dealing with M:N relashionships for Pools and Listeners

2014-05-29 Thread Samuel Bercovici
Before solving everything, I would like first to itemize the things we should solve/consider. So pleas focus first on what is it that we need to pay attention for and less on how to solve such issues. Follows the list of items: · Provisioning status/state o Should it only be on the l

Re: [openstack-dev] [Neutron][LBaaS]TLS API support for authentication

2014-05-29 Thread Samuel Bercovici
+1 to Carlos. In addition, there should be possible for LBaaS (It might only be just the LBaaS drivers) to get the information including the private key back so that the backend can use it. This means that a "trusted" communication channel between the driver and Barbican needs to be established

Re: [openstack-dev] [Neutron][LBaaS]TLS API support for authentication

2014-05-28 Thread Samuel Bercovici
This very good news. Please point to the code review in gerrit. -Sam. -Original Message- From: Eichberger, German [mailto:german.eichber...@hp.com] Sent: Saturday, May 24, 2014 12:54 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Neutro

[openstack-dev] [Neutron][LBaaS]TLS API support for authentication

2014-05-22 Thread Samuel Bercovici
Hi Everone, I would like to defer addressing client authentication and back-end-server authentication for a 2nd phase - after Juno. This means that from looking on https://etherpad.openstack.org/p/neutron-lbaas-ssl-l7 , under the "SSL/TLS Termination capabilities", not addressing 2.2 and 3. I t

Re: [openstack-dev] [Neutron][LBaaS]LBaaS 2nd Session etherpad

2014-05-15 Thread Samuel Bercovici
Hi Everyone, https://etherpad.openstack.org/p/neutron-lbaas-ssl-l7 Feel free to modify and update, please make sure you use your name so we will know who have added the modification. Regards, -Sam. ___ OpenStack-dev mailing list OpenS

Re: [openstack-dev] [Neutron][LBaaS]LBaaS 1st Session etherpad

2014-05-14 Thread Samuel Bercovici
usage questions) Subject: Re: [openstack-dev] [Neutron][LBaaS]LBaaS 1st Session etherpad Hi, I see the following statement in the doc. >>multiple loadbalancers may referenece the same listener Does this mean listeners are independent of loadbalancer? Thanks, Vijay V. From: Samuel Ber

Re: [openstack-dev] [Neutron][LBaaS]LBaaS 1st Session etherpad

2014-05-14 Thread Samuel Bercovici
Hi Everyone, https://etherpad.openstack.org/p/juno-lbaas-design-session Feel free to modify and update, please make sure you use your name so we will know who have added the modification. Regards, -Sam. ___ OpenStack-dev mailing list

Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey

2014-05-14 Thread Samuel Bercovici
ote: Sam, That deadline seems reasonable to me. I should have time later today or later this weekend to fill it out. Thanks, Stephen On Fri, May 9, 2014 at 9:21 AM, Samuel Bercovici mailto:samu...@radware.com>> wrote: Hi, 9 people have filled the survey so far. See attached pdf. Regards

Re: [openstack-dev] [Neutron][LBaaS] Meetup?

2014-05-12 Thread Samuel Bercovici
During our brief meeting today, we tentatively scheduled to meet today at 5:30 PM. Is this still on? Where should we meet? Regards, -Sam. On May 12, 2014, at 1:10 PM, "Adam Harwell" mailto:adam.harw...@rackspace.com>> wrote: Some of us are at a table towards the back by the B3b d

Re: [openstack-dev] [Neutron][LBaaS] API proposal review thoughts

2014-05-09 Thread Samuel Bercovici
It boils down to two aspects: 1. How common is it for tenant to care about affinity or have more than a single VIP used in a way that adding an additional (mandatory) construct makes sense for them to handle? For example if 99% of users do not care about affinity or will only use a singl

Re: [openstack-dev] [Neutron][LBaaS] Multiple VIPs per loadbalancer

2014-05-09 Thread Samuel Bercovici
Brandon, Can you please provide statistics on the distribution between the relationships between load balancer and VIPs in your environment? -Sam. -Original Message- From: Brandon Logan [mailto:brandon.lo...@rackspace.com] Sent: Friday, May 09, 2014 6:40 PM To: openstack-dev@lists.ope

Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey

2014-05-08 Thread Samuel Bercovici
e by which we should have filled out the survey to get our voices heard? Thanks, Stephen On Wed, May 7, 2014 at 2:16 PM, Samuel Bercovici mailto:samu...@radware.com>> wrote: 6 people have completed the survey so far. From: Samuel Bercovici Sent: Tuesday, May 06, 2014 10:56 AM To: OpenS

Re: [openstack-dev] [Neutron] [LBaaS][VPN][Barbican] SSL cert implementation for LBaaS and VPN

2014-05-08 Thread Samuel Bercovici
List (not for usage questions) Subject: Re: [openstack-dev] [Neutron] [LBaaS][VPN][Barbican] SSL cert implementation for LBaaS and VPN On May 7, 2014, at 10:53 AM, Samuel Bercovici mailto:samu...@radware.com>> wrote: Hi John, If the user already has an SSL certificate that was acquir

Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey

2014-05-07 Thread Samuel Bercovici
6 people have completed the survey so far. From: Samuel Bercovici Sent: Tuesday, May 06, 2014 10:56 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey Hi Everyone, The survey is now live via: http://eSurv.org

Re: [openstack-dev] [Neutron] [LBaaS][VPN][Barbican] SSL cert implementation for LBaaS and VPN

2014-05-07 Thread Samuel Bercovici
coding in earnest for Juno. The Container resource is intended to capture/store the final certificate details. Thanks, John From: Samuel Bercovici [samu...@radware.com] Sent: Thursday, May 01, 2014 12:50 PM To: OpenStack Development Mailing List (not for usage

Re: [openstack-dev] [Neutron][LBaaS][FWaaS][VPNaaS] Advanced Services (particularly LBaaS) and Neutron

2014-05-07 Thread Samuel Bercovici
Hi, I have added to https://etherpad.openstack.org/p/AdvancedServices_and_Neutron a note recalling two technical challenges that do not exists when LBaaS runs as a Neutron extension. -Sam. From: Susanne Balle [mailto:sleipnir...@gmail.com] Sent: Wednesday, May 07, 2014 2:45 PM To: OpenStack De

Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey

2014-05-06 Thread Samuel Bercovici
least I'd hope! Cheers, --Jorge From: Samuel Bercovici mailto:samu...@radware.com>> Reply-To: "OpenStack Development Mailing List (not for usage questions)" mailto:openstack-dev@lists.openstack.org>> Date: Tuesday, May 6, 2014 2:56 AM To: "OpenStack De

Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey

2014-05-06 Thread Samuel Bercovici
The survey is not anonymous and I plan to publish it with its raw data we can then discuss how to interpret. Each use case has an accompanying text field so that you can add any comments you wish. At least I did add comments to most use cases when I responded :-) -Sam. -Original Message--

Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey

2014-05-06 Thread Samuel Bercovici
week so we can have enough information to base decisions next week. Regards, -Sam. From: Samuel Bercovici Sent: Monday, May 05, 2014 4:52 PM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey Hi, I

Re: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey

2014-05-05 Thread Samuel Bercovici
facing use cases and hope to send it to ML ASAP. Regards, -Sam. From: Samuel Bercovici Sent: Thursday, May 01, 2014 8:40 PM To: OpenStack Development Mailing List (not for usage questions) Cc: Samuel Bercovici Subject: [openstack-dev] [Neutron][LBaaS]User Stories and sruvey Hi

Re: [openstack-dev] [Neutron][LBaaS]L7 conent switching APIs

2014-05-05 Thread Samuel Bercovici
crazy jumps of logic, and that's not how you intended it? That said, even if that wasn't your intention, could it work that way? It seems like that allows a decent amount of options… :) --Adam On Fri, May 2, 2014 at 4:59 AM, Samuel Bercovici mailto:samu...@radware.com>

Re: [openstack-dev] [Neutron][LBaaS]L7 conent switching APIs

2014-05-02 Thread Samuel Bercovici
ions)" mailto:openstack-dev@lists.openstack.org>> Subject: Re: [openstack-dev] [Neutron][LBaaS]L7 conent switching APIs Hi Samuel, We talked a bit in chat about this, but I wanted to reiterate a few things here for the rest of the group. Comments in-line: On Wed, Apr 30, 2014 at 6:10 A

Re: [openstack-dev] [Neutron][LBaaS] Use Case Question

2014-05-02 Thread Samuel Bercovici
s or do anything else that has to do with L7). Stephen On Wed, Apr 30, 2014 at 9:39 AM, Samuel Bercovici mailto:samu...@radware.com>> wrote: Hi, As stated, this could either be handled by SSL session ID persistency or by SSL termination and using cookie based persistency options. If there

Re: [openstack-dev] [Neutron][LBaaS] Use-Cases with VPNs Distinction

2014-05-02 Thread Samuel Bercovici
I think that associating a VIP subnet and list of member subnets is a good choice. This is declaratively saying to where is the configuration expecting layer 2 proximity. The minimal would be the VIP subnet which in essence means the VIP and members are expected on the same subnet. Any member o

Re: [openstack-dev] [Neutron] [LBaaS][VPN][Barbican] SSL cert implementation for LBaaS and VPN

2014-05-01 Thread Samuel Bercovici
Hi Vijay, I have looked at the Barbican APIs – https://github.com/cloudkeep/barbican/wiki/Application-Programming-Interface I was no able to see a “native” API that will accept an SSL certificate (private key, public key, CSR, etc.) and will store it. We can either store the whole certificate as

[openstack-dev] [Neutron][LBaaS]User Stories and sruvey

2014-05-01 Thread Samuel Bercovici
Hi Everyone! To assist in evaluating the use cases that matter and since we now have ~45 use cases, I would like to propose to conduct a survey using something like surveymonkey. The idea is to have a non-anonymous survey listing the use cases and ask you identify and vote. Then we will publish

[openstack-dev] [Neutron][LBaaS]Conforming to Open Stack API style in LBaaS

2014-04-30 Thread Samuel Bercovici
Hi Everyone, During the last few days I have looked into the different LBaaS API proposals. I have also looked on the API style used in Neutron. I wanted to see how Neutron APIs addressed "tree" like object models. Follows my observation: 1. Security groups - http://docs.openstack.org/ap

Re: [openstack-dev] [Neutron][LBaaS] Use Case Question

2014-04-30 Thread Samuel Bercovici
Hi, As stated, this could either be handled by SSL session ID persistency or by SSL termination and using cookie based persistency options. If there is no need to inspect the content hence to terminate the SSL connection on the load balancer for this sake, than using SSL session ID based persis

Re: [openstack-dev] [Neutron][LBaaS] BBG edit of new API proposal

2014-04-30 Thread Samuel Bercovici
ready for the summit. German -Original Message- From: Samuel Bercovici [mailto:samu...@radware.com] Sent: Monday, April 28, 2014 11:44 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Neutron][LBaaS] BBG edit of new API proposal Hi, I was

Re: [openstack-dev] [Neutron][LBaaS]L7 conent switching APIs

2014-04-30 Thread Samuel Bercovici
tion between them. L7 Policies have an ordered list of L7 Rules, L7 Rules are processed by this order and also form an ‘or’ condition. Regards, -Avishay, Evgeny and Sam From: Samuel Bercovici [mailto:samu...@radware.com] Sent: Sunday, April 27, 2014 1:53 PM To: OpenStack Dev

Re: [openstack-dev] [Neutron][LBaaS] BBG edit of new API proposal

2014-04-29 Thread Samuel Bercovici
t; Getting the admin/operator use cases in there would be good as well Stephen. Thanks, Kyle > Thanks, > Stephen > > > > > On Mon, Apr 28, 2014 at 2:12 PM, Eichberger, German > wrote: >> >> Sam, >> >> The use cases where pretty complete the last

Re: [openstack-dev] [Neutron][LBaaS] BBG edit of new API proposal

2014-04-28 Thread Samuel Bercovici
Hi, I was just working to push the use cases into the new format .rst but I agree that using google doc would be more intuitive. Let me know what you prefer to do with the use cases document: 1. leave it at google docs at - https://docs.google.com/document/d/1Ewl95yxAMq2fO0Z6Dz6fL-w2FScERQXQR1-m

Re: [openstack-dev] [Neutron][LBaaS]SSL and L7 conent switching APIs

2014-04-27 Thread Samuel Bercovici
Hi, The work to design the APIs concerning L7 content switching and SSL termination has started a bit before the Icehouse summit, it involved the ML in a very active fashion. The ML was silent on this because we have completed the discussion and moved to implementation. We got to a very advance

Re: [openstack-dev] [Neutron][LBaaS] Use cases document

2014-04-24 Thread Samuel Bercovici
s all week as I've been working on the API revision proposal, and I'd like to get them recorded and / or discussed.) Stephen On Tue, Apr 22, 2014 at 1:26 AM, Samuel Bercovici mailto:samu...@radware.com>> wrote: Hi, I have seen a few addition to https://docs.google.com/document/

Re: [openstack-dev] [Neutron][LBaaS] SSL re-encryption scenario question

2014-04-22 Thread Samuel Bercovici
Hi, The work on SSL termination has started and is very near completion. the blue print is in https://blueprints.launchpad.net/neutron/+spec/lbaas-ssl-termination and wiki is in https://wiki.openstack.org/wiki/Neutron/LBaaS/SSL Do you see anything missing there? Regards, -Sam.

[openstack-dev] [Neutron][LBaaS] Use cases document

2014-04-22 Thread Samuel Bercovici
Hi, I have seen a few addition to https://docs.google.com/document/d/1Ewl95yxAMq2fO0Z6Dz6fL-w2FScERQXQR1-mXuSINis/edit?pli=1 I think that it would make sense to keep this document with uses cases that were discussed in ML. A use case that I have seen and is missing is related to availability zon

[openstack-dev] [Neutron][LBaaS]Clarification in regards to https://docs.google.com/a/mirantis.com/spreadsheet/ccc?key=0Ar1FuMFYRhgadDVXZ25NM2NfbGtLTkR0TDFNUWJQUWc#gid=1

2014-04-09 Thread Samuel Bercovici
Hi, I have looked at https://docs.google.com/a/mirantis.com/spreadsheet/ccc?key=0Ar1FuMFYRhgadDVXZ25NM2NfbGtLTkR0TDFNUWJQUWc#gid=1 and have a few questions: 1. Monitoring Tab: a. Are there users that use load balancing who do not monitor members? Can you share the use cases where

Re: [openstack-dev] [Neutron][LBaaS] Load balancing use cases and web ui screen captures

2014-04-09 Thread Samuel Bercovici
f the above, is this something being considered? On 7 April 2014 05:27, Samuel Bercovici mailto:samu...@radware.com>> wrote: > Please elaborate, do you mean that the nodes could be on different > zones/cells or something else? > > > -Original Message- > From:

Re: [openstack-dev] [Neutron][LBaaS] Load balancing use cases and web ui screen captures

2014-04-07 Thread Samuel Bercovici
scalability. On 6 April 2014 07:51, Samuel Bercovici wrote: > Per the last LBaaS meeting. > > > > 1. Please find a list of use cases. > > https://docs.google.com/document/d/1Ewl95yxAMq2fO0Z6Dz6fL-w2FScERQXQR1 > -mXuSINis/edit?usp=sharing > > > > a) Please r

[openstack-dev] [Neutron][LBaaS] Load balancing use cases and web ui screen captures

2014-04-06 Thread Samuel Bercovici
Per the last LBaaS meeting. 1. Please find a list of use cases. https://docs.google.com/document/d/1Ewl95yxAMq2fO0Z6Dz6fL-w2FScERQXQR1-mXuSINis/edit?usp=sharing a) Please review and see if you have additional ones for the project-user b) We can then chose 2-3 use cases to play

Re: [openstack-dev] [Neutron][LBaaS] Requirements Wiki

2014-03-19 Thread Samuel Bercovici
+1 -Original Message- From: Ryan O'Hara [mailto:roh...@redhat.com] Sent: Wednesday, March 19, 2014 2:37 PM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Neutron][LBaaS] Requirements Wiki On Tue, Mar 18, 2014 at 10:57:15PM +, Jorge Mira

Re: [openstack-dev] [Neutron][LBaaS][FWaaS][VPN] Admin status vs operational status

2014-03-18 Thread Samuel Bercovici
Discussing some "radical" concepts... I also agree that there should be different attribute to reflect the administrator state, operation state and the "provisioning" state. This is already reflected in https://docs.google.com/document/d/1D-1n8nCEFurYzvEBxIRfXfffnImcIPwWSctAG-NXonY/edit?usp=shar

Re: [openstack-dev] [Neutron][LBaaS] Subteam meeting Thursday, 14-00 UTC

2014-03-12 Thread Samuel Bercovici
Hi Eugene, I am with Evgeny on a business trip so we will not be able to join this time. I have not seen any progress on the model side. Did I miss anything? Will look for the meeting summary Regards, -Sam. From: Eugene Nikanorov [mailto:enikano...@mirantis.com] Sent: Wednesday,

Re: [openstack-dev] [Neutron][LBaaS] Health monitoring and statistics for complex LB configurations.

2014-03-06 Thread Samuel Bercovici
Hi, As an example you can look at https://docs.google.com/document/d/1D-1n8nCEFurYzvEBxIRfXfffnImcIPwWSctAG-NXonY/edit?usp=sharing Under the “Logical Model + Provisioning Status + Operation Status + Statistics” there are some details on thoughts on how to implement this. Regards,

Re: [openstack-dev] [LBaaS] API spec for SSL Support

2014-03-06 Thread Samuel Bercovici
Hi, The wiki is updated to reflect the APIs. Regards, -Sam. From: Palanisamy, Anand [mailto:apalanis...@paypal.com] Sent: Thursday, March 06, 2014 3:26 AM To: OpenStack Development Mailing List Subject: [openstack-dev] [LBaaS] API spec for SSL Support Hi All, Please let us kn

Re: [openstack-dev] [Neutron][LBaaS] Object Model discussion

2014-03-05 Thread Samuel Bercovici
Hi, In https://docs.google.com/document/d/1D-1n8nCEFurYzvEBxIRfXfffnImcIPwWSctAG-NXonY/edit?usp=sharing referenced by the Wiki, I have added the section that address the items raised on the last irc meeting. Regards, -Sam. From: Samuel Bercovici Sent: Wednesday, February 26

  1   2   >