Re: [openstack-dev] [Neutron] Is network ordering of vNICs guaranteed?

2014-08-09 Thread shihanzhang
Hi Paul, as I know, nova can guarante the ordering of vNICS, can you provide the reproduceable test script for this, I am glad to test it At 2014-08-10 01:16:16, "Jay Pipes" wrote: >Paul, does this friend of a friend have a reproduceable test script for >this? > >Thanks! >-jay > >On 08/0

Re: [openstack-dev] [neutron]Performance of security group

2014-08-20 Thread shihanzhang
hi neutroner! my patch about BP:https://blueprints.launchpad.net/openstack/?searchtext=add-ipset-to-security need install ipset in devstack, I have commit the patch:https://review.openstack.org/#/c/113453/, who can help me review it, thanks very much! Best regards, shihanzhang

Re: [openstack-dev] [neutron][security-groups] Neutron default security groups

2014-09-16 Thread shihanzhang
As I know there is no a way to disable default security groups, but I think this BP can solve this problem: https://blueprints.launchpad.net/neutron/+spec/default-rules-for-default-security-group 在 2014-09-17 07:44:42,"Aaron Rosen" 写道: Hi, Inline: On Tue, Sep 16, 2014 at 1:00 AM, Fawad

Re: [openstack-dev] [OSSN 0020] Disassociating floating IPs does not terminate NAT connections with Neutron L3 agent

2014-09-16 Thread shihanzhang
Now there is already a bug:https://bugs.launchpad.net/neutron/+bug/1334926 for this problem, meanwhile the security group also has same problem, I have report a bug: https://bugs.launchpad.net/neutron/+bug/1335375 在 2014-09-16 01:46:11,"Martinx - ジェームズ" 写道: Hey stackers, Let me ask so

[openstack-dev] [neutron] Implement NAPT in neutron (https://blueprints.launchpad.net/neutron/+spec/neutron-napt-api)

2014-01-09 Thread shihanzhang
I think that these two BP is to achieve same function,it is very necessary to implement this function! https://blueprints.launchpad.net/neutron/+spec/router-port-forwarding https://blueprints.launchpad.net/neutron/+spec/neutron-napt-api At 2014-01-09 16:56:20,"Nir Yechiel" wrote: From: "

Re: [openstack-dev] [Neutron] About ports backing floating IPs

2014-01-15 Thread shihanzhang
I am also perplexed about the ports backing floating ips. when plugin is selected OVS or LB, the ip address belonging to a port backing that floating ip is really set on VIF of 'qg-' , what is the port real action? At 2014-01-15 07:50:36,"Salvatore Orlando" wrote: TL;DR; I have been loo

[openstack-dev] [nova]Why not allow to create a vm directly with two VIF in the same network

2014-01-23 Thread shihanzhang
I am a beginer of nova, there is a problem which has confused me, in the latest version, it not allowed to create a vm directly with two VIF in the same network, but allowed to add a VIF that it network is same with a existed VIF'network, there is the use case that a vm with two VIF in the same

Re: [openstack-dev] [nova]Why not allow to create a vm directly with two VIF in the same network

2014-01-27 Thread shihanzhang
d it makes perfect sense, LACP, MLT, Etherchannel/Portchannel, etc. In the virtual world I need to see a detailed description of one or more use cases. Shihanzhang, why don’t you start up an Etherpad or something and start putting together a list of one or more practical use cases in which t

[openstack-dev] [Neutron]A problem produced by accidentally deleting DHCP port

2014-02-13 Thread shihanzhang
Howdy folks! I am a beginer of neutron, there is a problem which has confused me. In my environment using openvswich plugin, I delete the dhcp port by mistack, then I found the VM in the subnet whose dhcp port is deleted by my mistack can not get IP, I found the reason is when a dhcp port is de

Re: [openstack-dev] [Neutron] Interest in discussing vendor plugins for L3 services?

2014-02-14 Thread shihanzhang
I'm interested in it. UTC8. At 2014-02-15 00:31:47,"punal patel" wrote: I am interested. UTC - 8. On Fri, Feb 14, 2014 at 1:48 AM, Nick Ma wrote: I'm also interested in it. UTC8. -- cheers, Li Ma ___ OpenStack-dev mailing list OpenStack-dev@li

Re: [openstack-dev] [neutron][sriov] PciDeviceRequestFailed error

2014-12-07 Thread shihanzhang
I think the problem is in nova, can you show your "pci_passthrough_whitelist" in nova.conf? At 2014-12-04 18:26:21, "Akilesh K" wrote: Hi, I am using neutron-plugin-sriov-agent. I have configured pci_whitelist in nova.conf I have configured ml2_conf_sriov.ini. But when I launch inst

Re: [openstack-dev] [Openstack-dev][Neutron] Port Mirroring Extension in Neutron

2014-05-15 Thread shihanzhang
Hi Vinay, I am very happy to participate in this discussion! 在 2014-05-16 00:03:35,"Kanzhe Jiang" 写道: Hi Vinay, I am interested. You could sign up a slot for a Network POD discussion. Thanks, Kanzhe On Thu, May 15, 2014 at 7:13 AM, Vinay Yadhav wrote: Hi, I am Vinay, working with

[openstack-dev] [Neutron] the question of security group rule

2014-04-08 Thread shihanzhang
Howdy Stackers! There is a security group problem has been bothering me, but I do not know whether is appropriate to consult in there! For a security group rule, it will convert to iptable rules in compute node, but a iptable rule '-m state --state RELATED,ESTABLISHED -j RETURN' confuse me, ac

Re: [openstack-dev] [Neutron] Killing connection after security group rule deletion

2014-10-24 Thread shihanzhang
Hi, Elena Ezhova, thanks for your work to this problem! I agree with your analysis, this why I commit this bug but don't submit patch for it. I have want to use conntrack to solve this bug, but I also thought the problem you have said: The problem here is that it is sometimes imp

Re: [openstack-dev] [Neutron] FWaaS/Security groups Not blocking ongoing traffic

2014-10-27 Thread shihanzhang
I also agree file a new bug for FWaaS At 2014-10-28 00:09:29, "Carl Baldwin" wrote: >I think I'd suggest opening a new bug for FWaaS since it is a >different component with different code. It doesn't seem natural to >extend the scope of this bug to include it. > >Carl > >On Mon, Oct 27, 2

[openstack-dev] [neutron]Performance of security group

2014-06-18 Thread shihanzhang
Hello all, Now in neutron, it use iptable implementing security group, but the performance of this implementation is very poor, there is a bug:https://bugs.launchpad.net/neutron/+bug/1302272 to reflect this problem. In his test, with default security groups(which has remote security group), b

Re: [openstack-dev] [neutron]Performance of security group

2014-06-18 Thread shihanzhang
formance issues until the ovs firewall can be implemented down the the line. Do you have any performance comparisons? On Jun 18, 2014 7:46 PM, "shihanzhang" wrote: Hello all, Now in neutron, it use iptable implementing security group, but the performance of this implementation

Re: [openstack-dev] [neutron]Performance of security group

2014-06-19 Thread shihanzhang
my BP specs? At 2014-06-19 10:11:34, "Miguel Angel Ajo Pelayo" wrote: > > Hi it's a very interesting topic, I was getting ready to raise >the same concerns about our security groups implementation, shihanzhang >thank you for starting this topic. > >

Re: [openstack-dev] [Neutron] default security group rules in neutron

2014-06-22 Thread shihanzhang
Hi, Lingxian I think it indeed backport this feature to neutron, it will be very convenient for operators to use default security group! At 2014-06-23 10:23:39, "Lingxian Kong" wrote: >Greetings > >We use neutron as network functionality implementation in nova, and as >you know, there i

Re: [openstack-dev] [Neutron]One security issue about floating ip

2014-06-27 Thread shihanzhang
I think this problem also exist in security group! At 2014-06-27 11:20:31, "stanzgy" wrote: I have filed this bug on nova https://bugs.launchpad.net/nova/+bug/1334938 On Fri, Jun 27, 2014 at 10:19 AM, Yongsheng Gong wrote: I have reported it on neutron project https://bugs.launchpad.

Re: [openstack-dev] [neutron]Performance of security group

2014-07-01 Thread shihanzhang
nstances on a certain security group get > the updates as they happen. > >@shihanzhang do you find it reasonable? > > > >- Original Message - >> - Original Message - >> > @Nachi: Yes that could a good improvement to factorize the RPC mechanism. >> >

Re: [openstack-dev] [neutron]Performance of security group

2014-07-02 Thread shihanzhang
just using ipset to optimize security group agent codes does not bring the best results! Best regards, shihanzhang. At 2014-07-02 04:43:24, "Ihar Hrachyshka" wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA512 > >On 02/07/14 10:12, Miguel Angel Ajo wr

Re: [openstack-dev] [neutron][SFC]

2016-06-07 Thread shihanzhang
Hi Alioune and Cathy, For devstack on ubuntu14.04, the default ovs version is 2.0.2, so there was the error as Alioune said. Do we need to install speical ovs version in networking-sfc devstack plugin.sh? 在 2016-06-07 07:48:26,"Cathy Zhang" 写道: Hi Alioune, Which OVS ver

Re: [openstack-dev] [Neutron] [Dragonflow] Support configuration of DB clusters

2015-12-27 Thread shihanzhang
good suggestion! At 2015-12-25 19:07:10, "Li Ma" wrote: >Hi all, currently, we only support db_ip and db_port in the >configuration file. Some DB SDK supports clustering, like Zookeeper. >You can specify a list of nodes when client application starts to >connect to servers. > >I'd like to impl

Re: [openstack-dev] [Neutron] VPNaaS and DVR compatibility

2015-08-06 Thread shihanzhang
I have same question, I have filed a bug on launchpad: https://bugs.launchpad.net/neutron/+bug/1476469, who can help to clarify it? Thanks, Hanzhang, shi At 2015-08-05 00:33:05, "Sergey Kolekonov" wrote: Hi, I'd like to clarify a situation around VPNaaS and DVR compatibility in Neutron

Re: [openstack-dev] [neutron] Expected cli behavior when ovs-agent is down

2015-08-22 Thread shihanzhang
hi Vikas Choudhary, when ovs-agent service recover(ovs-agent process restart), the dhcp port will not re-binding successfully? At 2015-08-22 14:26:08, "Vikas Choudhary" wrote: Hi Everybody, I want to discuss on https://bugs.launchpad.net/neutron/+bug/1348589.This is there for more than a

Re: [openstack-dev] [Neutron] netaddr and abbreviated CIDR format

2015-08-22 Thread shihanzhang
there was another patch [1] fix the invalid CIDR for subnet. thanks, hanzhang, shi [1] https://review.openstack.org/#/c/201942/ At 2015-08-22 03:33:26, "Jay Pipes" wrote: >On 08/21/2015 02:34 PM, Sean M. Collins wrote: >> So - the tl;dr is that I don't think that we should accept inputs l

Re: [openstack-dev] [neutron][L3][QA] DVR job failure rate and maintainability

2015-09-15 Thread shihanzhang
Sean, Thank you very much for writing this, DVR indeed need to get more attention, it's a very cool and usefull feature, especially in large-scale. In Juno, it firstly lands to Neutron, through the development of Kilo and Liberty, it's getting better and better, we have used it in our productio

Re: [openstack-dev] [Neutron] Port Forwarding API

2015-09-20 Thread shihanzhang
2) The same FIP address can be used for different mappings, for example FIP with IP X can be used with different ports to map to different VM's X:4001 -> VM1 IP X:4002 -> VM2 IP (This is the essence of port forwarding). So we also need the port mapping

Re: [openstack-dev] KILO: neutron port-update --allowed-address-pairs action=clear throws an exception

2015-09-27 Thread shihanzhang
which branch do you use? there is not this problem in master branch. At 2015-09-28 13:43:05, "masoom alam" wrote: Can anybody highlight why the following command is throwing an exception: Command# neutron port-update db3113df-14a3-4d6d-a3c5-d0517a134fc3 --allowed-address-pairs action=cle

Re: [openstack-dev] KILO: neutron port-update --allowed-address-pairs action=clear throws an exception

2015-09-27 Thread shihanzhang
I checkout the latest code are you saying this...Also can you please confirm if you have tested this thing at your endand there was no problem... Thanks On Sun, Sep 27, 2015 at 11:29 PM, shihanzhang wrote: which branch do you use? there is not this problem in master branch. At 2

Re: [openstack-dev] [Neutron] Issue with neutron-dhcp-agent not recovering known ports cache after restart

2015-06-30 Thread shihanzhang
hi Shraddha Pandhe, I think your analysis is right, I also encountered the same problem, I have filed a bug[1] and commit a patch [2] for this bug. thanks, hanzhang shi [1] https://launchpad.net/bugs/1469615 [2] https://review.openstack.org/#/c/196927/ 在 2015-07-01 08:25:48,"Shraddha Pa

Re: [openstack-dev] [Neutron]Subnet's dns nameserver doesn't orderby input

2015-07-06 Thread shihanzhang
hi, Zhi Chang, this link: #https://bugs.launchpad.net/neutron/+bug/1218629 is ok. At 2015-07-06 17:13:12, "Zhi Chang" wrote: Thanks for your reply. Could you send the html link again? This does maybe doesn't exist. Thx Zhi Chang -- Original -- From:

[openstack-dev] [neutron] Question about VPNaas

2015-01-27 Thread shihanzhang
elp me to explain? Thanks. -shihanzhang __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [Neutron] Deprecating the use_namespaces option - Now's the time to speak up!

2015-03-22 Thread shihanzhang
+1 to deprecate this option At 2015-03-21 02:57:09, "Assaf Muller" wrote: >Hello everyone, > >The use_namespaces option in the L3 and DHCP Neutron agents controls if you >can create multiple routers and DHCP networks managed by a single L3/DHCP >agent, >or if the agent manages only a single res

Re: [openstack-dev] [neutron]Anyone looking at support for VLAN-aware VMs in Liberty?

2015-05-11 Thread shihanzhang
Hi Eric, Huawei is also interested in this BP, Hope it can be discussed during the design summit. Thanks, shihanzhang 在 2015-05-12 08:23:07,"Karthik Natarajan" 写道: Hi Eric, Brocade is also interested in the VLAN aware VM’s BP. Let’s discuss it during the design summit.

Re: [openstack-dev] 回复: [neutron]dragonflow deployment incorrectness

2016-07-27 Thread shihanzhang
As I know, now dragonflow still use neutron l3-agent for snat, so the l3-agent is enabled and router namespace be created. 在 2016-07-28 08:53:20,kangjingt...@sina.com 写道: Hi The reason why a namepspace be created while creating router is just because l3-agent is enabled. You can disable

Re: [openstack-dev] [neutron][routed-network] Host doesn't connected any segments when creating port

2016-10-31 Thread shihanzhang
hi Zhi chang, Could you provide your ml2_conf.ini for ovs agent, I guess the reason is that your ovs-agent on host devstack can't handle the related segment id. Thanks, shihanzhang 在 2016-10-31 18:43:36,"zhi" 写道: Hi, all. Recently, I watch the OpenStack Summit video nam

Re: [openstack-dev] [neutron][routed-network] Host doesn't connected any segments when creating port

2016-10-31 Thread shihanzhang
Hi Zhi Chang, Maybe you should add a config option in [ovs] section: bridge_mappings = public:br-ex, physnet1:br-physnet1 to handle the provider network 'physnet1'. Thanks, shihanzhang At 2016-11-01 11:56:33, "zhi" wrote: hi shihanzhang. Below is configuration in

Re: [openstack-dev] [neutron][routed-network] Host doesn't connected any segments when creating port

2016-11-01 Thread shihanzhang
Hi Zhi Chang, You also need to connect these two subnets to a router. Thanks, shihanzhang 在 2016-11-01 15:47:57,"zhi" 写道: Hi, shihanzhang. I still have a question about routed network. I have two subnets. One is 10.1.0.0/24 and the other is 10.1.1.0/24. I create two instances in

Re: [openstack-dev] [neutron][routed-network] Host doesn't connected any segments when creating port

2016-11-01 Thread shihanzhang
agree with Neil. thanks shihanzhang 在 2016-11-01 17:13:54,"Neil Jerram" 写道: Hi Zhi Chang, I believe the answer is that the physical network (aka fabric) should provide routing between those two subnets. This routing between segments is implicit in the idea of a multi-segme