09:00:20 #startmeeting dragonflow 09:00:21 Meeting started Mon Jan 25 09:00:20 2016 UTC and is due to finish in 60 minutes. The chair is gsagie. Information about MeetBot at http://wiki.debian.org/MeetBot. 09:00:22 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 09:00:24 The meeting name has been set to 'dragonflow' 09:00:31 Hello ! 09:00:53 #info gampel, Shlomo_N, yuli_s, oanson, gsagie in meeting 09:01:09 Even that oanson is not talking ;) 09:01:36 #topic security groups 09:01:45 o/ 09:01:52 hi dingboopt 09:01:57 hi 09:01:59 #info dingboopt in meeting as well :) 09:02:07 I have some discussion with beijing guy 09:02:18 dingboopt: I havent seen Raofei works on security groups ? 09:02:19 and we improve the flow design 09:02:25 dingboopt: just reviewed your patch take a look 09:02:32 he is listed to work on this and DNAT.. 09:02:48 dingboopt: you mean the design with the conjunction? 09:02:53 yes 09:03:10 some improvements 09:03:12 dingboopt: can you please post a document describing the new design? 09:03:19 and reach agreents 09:03:22 not a new desing 09:03:25 design 09:03:48 dingboopt: yes, just we need something that cover and has all the details about it 09:03:51 ok, we will send you all a letter describing the final desing 09:04:01 desgin 09:04:10 I will 09:04:10 dingboopt: its better to just upload it to the specs in Dragonflow and we can iterate it in the review board 09:04:16 its much easier to comment 09:04:21 Is that ok? 09:04:21 ok 09:04:26 ye 09:04:39 #action dingboopt update design for security groups with improvments and conjunction 09:05:04 dingboopt: you in contact with the guy with beijing, is he going to work on it as well? (contributing code) 09:05:17 duankebo will join in a minute 09:05:18 Hello DuanKebo :) 09:05:22 he is now get familiar with the code 09:05:31 #info DuanKebo in meeting as well :) 09:05:47 yes, we discuss the security group solution together with Beijing team. 09:06:01 raofei: are you going to help them implement this? 09:06:08 Hi Gal! 09:06:51 this week, maybe tomorrow, we will commit the spec to review. sure, I will join the implemention. 09:07:15 okie great, so first step lets see the spec and agree, we will review it quickly and dingboopt already working on the plugin side 09:07:28 What is the guy name from beijing that works on it? 09:07:37 yuanwei 09:07:39 yuanwei right? 09:07:41 okie 09:08:05 #action dingboopt, raofei, yuanwei to start splitting work on security groups after spec is merged 09:08:36 Okie, you will need to split the work between you three, dingboopt, raofei keep in mind you guys also listed as working on port security and DNAT 09:08:55 okie, anything else on security groups? 09:08:59 hi kexiaodong :) 09:09:07 #info kexiaodong in meeting 09:09:11 we need to update the DNAT spec to refract the changes 09:09:34 gampel: yes i will do it but its very similar, lets talk about it when we reach that topic soon 09:10:07 DuanKebo: anything from your team regarding security groups? or things seems to be ok? 09:10:10 ok 09:10:47 no more, what we need to do is commit the spec patch ASAP for review 09:10:47 Yuanwei is working together with Raofei and Dingbo 09:10:55 Everything is OK 09:11:06 okie, we will review it fast for you so you can start working on it 09:11:10 #topic port security 09:11:29 dingboopt: i need to update the patch with your comments which were good, anything else we need here? 09:11:44 no 09:11:48 okie 09:12:02 #action gsagie update port security spec with latest comments 09:12:24 dinboopt: will need to work on this as well in addition to security groups, i will put everything we talked about in the spec ASAP 09:12:38 ok 09:12:46 #action dingboopt implement port security spec once merged 09:12:59 #topic DB consistency 09:13:06 ok, nick-ma isnt here 09:13:38 Hujie from DuanKebo team is working on this as well 09:13:48 Hujie is working on this feature 09:14:48 From the feedback i received, its possible to serialize write transactions to get consistency and most performance issues with SQL clusters (Galera) are for the reads (as Horizon/Nova) perform alot of reading from neutron 09:15:11 He will submit a spec for review this week 09:15:16 so implementing the distributed lock with a special table record 09:15:58 gsagie: so does Galera support looked write ? 09:16:18 gampel: yes, there is a different behaivor as the transaction is terminated 09:16:48 Hujie and me are not familiar with you solution about the distribution lock. 09:17:12 but we can still have serialized transactions, i talked with kevinbenton about it, they used a similar solution for Big Switch, he said they didnt notice problems on the writes at all in large setups 09:17:15 Will you please give us some more detailed info. 09:18:16 DuanKebo: the idea in general was to keep a "transaction id" in a special table in Neutron, have the same id in Dragonflow DB and lock our transactions on it, then if these id's differs at some point we do full sync 09:18:47 gsagie: so we serialized write transactions into a global lock and do write to the Cluster only from there ? 09:18:49 DuanKebo: this means we basically serialize all our write transactions, but from the feedback i recieved thats not a big problem 09:19:20 gampel: basically yes, most of the problems from the feedback i recieved are for reads, and usualy dont for HA as well (the Galera cluster) 09:19:42 I think that maybe we can keep this as first solution, as its not that hard to implement and improve if we find problems 09:19:58 The writer action from df local controllers will also be serialized? 09:20:01 But we can also view Hujie spec once he upload it 09:20:19 gsagie: Sound good 09:20:35 DuanKebo: no, but the local controllers only register the compute nodes and the port status 09:20:39 Will this introduce performance decrease? 09:20:53 DuanKebo: the publish/subscribe part, gampel will talk in a second 09:21:05 i am only talking about the Neutron Db - Dragonflow DB consistency 09:21:05 Ok 09:21:28 I will email both you and Hujie detail information about it 09:21:40 But he can submit his spec and we can review it anyway and decide the best solution 09:21:56 #action gsagie write email with the detailed transaction id solution for DB consistency 09:22:06 #action Hujie upload spec for DB consistency 09:22:25 Lets talk about the publish-subscribe part soon, but thats another different problem we need to sovle 09:22:26 gsagie: lets try to get nick-ma feedback as well on this 09:22:35 His spec is abut consistency about dragonflow db and local cache 09:22:36 gampel: of course.. :) 09:22:48 DuanKebo: ok good, so different topics :) 09:22:57 Add me please :) 09:23:08 email 09:23:12 #action gsagie add dinboopt/nick-ma to the conversation of course 09:23:18 dinboopt: sure, will send it to everyone 09:23:41 anything else on this topic ? 09:24:11 #topic publish-subscribe abstraction 09:24:19 gampel: would you like to update on this? 09:24:40 OK I will update the spec today or tomorrow 09:25:00 i mean update here the status :) 09:25:02 There is all ready a working version with ZMQ 09:25:03 https://review.openstack.org/#/c/263322/ 09:25:21 #info working pub-sub with zeromq https://review.openstack.org/#/c/263322/ 09:25:29 I will add the Pluggability today 09:25:52 gampel: any update on the topics registration? is it happening on server side or client side? 09:26:05 the last topic that is not in the spec yet is the reliability 09:26:20 No yet please add it to my action items 09:26:51 #action gampel verify if zeromq filters topics on server side or client side 09:27:15 The reliability we want to cover 09:27:16 gampel: you want to update the spec or i should do it? 09:27:29 I will do that add it to my action items 09:27:42 #info https://review.openstack.org/#/c/263733/ pub-sub spec 09:27:56 #action gampel update pub-sub spec and add reliability ideas 09:28:15 I think we can iterate on your patch and on Hujie spec for that and find the best solution, if both you and DuanKebo agree 09:28:25 lets review it there and discuss 09:29:13 #topic Redis DB driver 09:29:22 DuanKebo: any update on this? 09:29:39 feipeng is going to work on it right? 09:29:49 Feipeng has a draft spec 09:30:24 He is update it according our advice. 09:30:26 DuanKebo: for the pub-sub reliability is there anything you would like to ask/discuss now? or we should do it over the review? 09:30:46 He will submit it for you review this week too. 09:31:04 #action feipeng upload spec and start work on redis driver integration with dragonflow 09:31:22 ok great, we heard some good things about Redis, so maybe its going to be a good solution for us 09:31:32 not sure about the publish/subscribe part there 09:31:43 DuanKebo: I hope today to have an example how to plug pub/sub submitted 09:31:53 today 09:32:05 #topic testing 09:32:40 okie, dingboopt any update on the HW in Hangzhou? 09:32:44 about the lab 09:33:15 i havn't contact huangkun yet 09:33:26 he is in charge of the servers 09:33:42 dingboopt: ok, please update us for next meeting because i think we all need to know 09:33:43 I will contact him later 09:33:52 ok 09:33:56 #action dingboopt update for next meeting regarding lab in Hangzhou 09:34:07 Shlomo_N: has anything to update on your scale testing work? 09:34:54 I have finished the bandwidth performance tests with DF+Etcd on 4 different scenarios 09:35:16 I just ask hungkun about the server. They will arrive after chinese spring festival 09:35:33 dingboopt: ok thanks for the update 09:35:44 Shlomo_N: can you please share the scenarios 09:35:50 Shlomo_N: can you work on some document describing these 09:35:58 and maybe send the plan for review 09:36:30 Shlomo_N: i agree we need a performance testing spec 09:36:36 I think we will want to perform dataplane performance tests for 1 hosts on a regular basis, maybe even as a CI 09:37:05 Sure. I am still working on the testing spec. 09:37:24 #action Shlomo_N write spec about performance test scenarios and plan 09:37:43 DuanKebo: do you guys are also planning to do some testing in Beijing? 09:37:58 Yes 09:38:09 He is now evaluating gmdb. 09:38:37 Can work on performance test later. 09:38:48 DuanKebo: even regardless of the DB, i am talking about L3 tests with iperf or something like that, can you maybe share your scenarios/plan if you have any document 09:38:50 with Shlomo_N 09:38:59 anyone he can contact for more details? 09:39:55 Yuli: did you see my comment on the fullstack flow testing ? 09:39:58 No, he only do some control plane test 09:40:20 mostly for db r/w and sub/pub performance. 09:40:24 gampel: yes 09:40:36 yuli_s: anything to share regarding fullstack tests? 09:41:10 i need to review the comments 09:41:11 DuanKebo: okie, we would also like to have some setup to do these tests here if possible so we would love any document you have on how you conduct these tests 09:41:18 and send a new version 09:41:22 i think that the flow test should follow the application logic so when we update the app it will be very easy to update the test 09:41:25 of the test patch 09:41:26 Because we also need to be able to work and fix things while testing :) 09:41:39 https://review.openstack.org/265642/ 09:42:09 yes i agree with gampel, doing the diff is a bit problematic 09:42:11 OK, Zhu weiqiong will supply the doc about how these test are done. 09:42:16 the flow test should follow the application pipeline so the test will be clear 09:42:24 DuanKebo: thanks! that will be great for us 09:42:52 yuli_s: do you understand what i mean ? 09:42:55 #action Zhu weiqiong send documents regarding control plane testing plan and scenarios for DB and for pub/sub 09:43:23 gampel: yes, the test code is a bit messy 09:43:42 yuli_s: let take the use case of l2_app we will have VLAN app and Tunnel app 09:44:25 we want to test the pipeline for the application L2 L3 DHCP 09:45:26 the dhcp part is preaty covered. we have test for dhcp enable and disbaled 09:45:34 the pipeline will change and we want it to be easy for a developer to update the pipeline in the test 09:45:40 and we have tests to change dhcp status to enable / disable 09:45:48 gampel, yuli_s: lets discuss it in the #openstack-dragonflow, we are running out of time :) 09:45:57 Ok 09:46:04 and the system works ok 09:46:05 #action gampel, yuli_s work on improving the current OVS flows tests 09:46:06 great ! 09:46:14 #topic selective proactive 09:47:00 DuanKebo: you are listed as working on it with me and Omer Anson (new employee that joined us) 09:47:13 Would you like to write the spec? or i can do it as well 09:47:16 gsagie: u talk about L2 or L3 ? 09:47:23 I can do it 09:47:40 #action DuanKebo write spec about selective proactive 09:47:51 okie, we can iterate on it 09:48:07 Omer is right now doing some work at simplifying our applications so we have more control 09:48:10 based on tenant at the first stage? 09:48:21 DuanKebo: i think so, what the rest think? 09:48:25 gsagie: selective proactive L2 or L3 ? 09:48:33 yes i agree 09:48:49 yuli_s: its not related to L2 or L3, its about how we sync the DB with the local controller 09:49:04 I agree. But i also think it's not enough 09:49:06 ok 09:49:06 You will see in the spec that DuanKebo will upload 09:49:26 let's us just start from tenant grained selective proactive. 09:49:49 DuanKebo: ok, if you want you can also upload to the repository other ideas you had and we can start iterating on them in parallel 09:50:04 DuanKebo: very reasonable why to start 09:50:06 keep in mind we also need to cover cases of deletion 09:50:30 Yes. 09:50:43 okie, so we can continue iterating on the spec 09:50:46 we have resources that are cross tenant 09:51:01 btw DuanKebo, your team is familiar with how to upload and work with OpenStack Gerrit and the review board? 09:51:15 like shared networks define by admin we need to make sure we cover them as well 09:51:17 gampel, I can discuss with you after the meeting. 09:51:28 Ok 09:51:45 #topic distributed DNAT 09:52:12 sorry for moving fast but we have 2 more topics and no time, lets continue to iterate on the spec that DuanKebo will upload 09:52:24 DuanKebo: i think its big task so i will also work on this with you 09:52:41 we need to also work on the DB parts for this and on the pub/sub parts for this 09:52:43 Hi Gal, I will deal with the uploading and review processing 09:53:05 Raofei: you are listed as working on the distributed DNAT, is the spec clear? 09:53:12 DuanKebo: great :) 09:53:27 Great Gal, definitely I need your help! 09:53:50 Raofei: i will update it with the latests changes, but just need to make sure everything is understandable 09:53:59 there is one thing there that needs special care 09:54:09 Yes, I have read your spec of DNAT. 09:54:09 Just Please try to review all the dragonflow status open 09:54:19 and thats updating the GW MAC address in the flows 09:54:46 raofei: ok, please send any questions you might have, you have time to work on it? 09:55:02 its an important task for the overall picture 09:55:55 #action raofei working on distributed dnat implementation 09:55:57 yes, I think so. we need change the both dst ip and mac address to simulate gw sending. 09:56:28 raofei: yes, the problem is that the GW MAC of the external network can change and we might need to update flows 09:56:34 #topic controller reliability 09:56:48 heshan is working on this right? 09:56:52 Yes 09:57:04 #action heshan upload spec regarding controller reliability 09:57:04 Most part of the spec has been completed. 09:57:18 Soon you can review it 09:57:26 okie great work! thanks 09:57:34 #topic open discussion / bugs 09:57:37 we need to get more reviews from all the group Please try to review all the dragonflow status open even if you are not listed 09:57:54 #action everyone to review Dragonflow patches 09:58:03 But our guys are not good at english, we net to refine the expression 09:58:21 DuanKebo: its important everyone review the repository as we need everyone to be updated with all the code changes 09:58:32 so they keep track of things happening 09:58:54 But its understandable, dont worry about the english, we all understand 09:59:12 It is very impotent to get the feedback don't worry about the english 09:59:23 OK 09:59:27 thanks for joining everyone! 09:59:37 if anyone has anything to add, please do 09:59:41 and Welcome to Omer :) 09:59:43 bye! 09:59:46 we havent covered bugs 09:59:50 welcome 09:59:58 welcome Omer 09:59:59 Thanks! 09:59:59 yuli_s: this is a joint topic, any update? 10:00:10 just dont have time :( 10:00:17 i closed some duplicate bugs today 10:00:34 yuli_s: cool, good work, anything important is open ? 10:00:40 yes 10:00:43 we can put it as an action item 10:00:45 cloud-init 10:00:54 i want to work on it 10:00:56 yuli_s: good point 10:01:09 #action yuli_s working on cloud-init support for dragonflow 10:01:14 yuli_s: no problem 10:01:19 ok, great 10:01:23 There is a bug opened right? 10:01:33 yes, I opened it 10:01:54 okie, we are out of time, lets continue this in #openstack-dragonflow, thanks and good night for all our friends from China and talk to you later 10:01:57 #endmeeting