17:31:24 #startmeeting Networking Advanced Services 17:31:25 Meeting started Wed Jul 16 17:31:24 2014 UTC and is due to finish in 60 minutes. The chair is SumitNaiksatam. Information about MeetBot at http://wiki.debian.org/MeetBot. 17:31:26 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 17:31:28 The meeting name has been set to 'networking_advanced_services' 17:31:34 #info agenda: https://wiki.openstack.org/wiki/Meetings/AdvancedServices 17:31:52 #info Juno specification submission deadline: July 10th, specification approval deadline: july 20th 17:32:08 i think i had earlier mentioned SAD to be july 17th 17:32:16 its actually july 20th! 17:32:25 so we have a little more time than we thought we had 17:33:03 that said, i think we are definitely starved on the reviewer attention from neutron cores 17:33:11 so its an uphill task 17:33:37 so a few people are not able to make it today for different reasons and provided their updates 17:33:51 #topic Flavors 17:34:07 enikanorov_ cannot make it, and i believe mark is on a vacation 17:34:17 #link https://review.openstack.org/102723 17:35:01 there is also on an ongoing mailing list thread on this: 17:35:04 #link http://lists.openstack.org/pipermail/openstack-dev/2014-July/040336.html 17:35:15 for the latest set of discussions 17:35:40 per enikanorov_ he has posted a WIP patch #link https://review.openstack.org/#/c/105982 17:36:02 the above is for the implementation, and makes certain assumptions on the spec 17:36:38 from enikanorov_’s point of view the main pending item is the exposing of extensions list 17:36:55 hi everybody (sorry for being late) 17:37:04 banix: np, welcome 17:37:33 i think enikanorov_ and mark are not in agreement on the extensions list 17:38:09 anything we want to discuss here in that regard? 17:38:29 i know we have beaten this horse to death, so i dont know what to say :-) 17:38:35 we could argue a bunch, just so it really feels like a flavors update. 17:38:43 on the topic of flavors that is 17:39:16 is there any way we can get those two to agree on something and go forward with it? 17:39:25 regXboi: :-) 17:39:33 thats what we have been trying 17:39:41 I was afraid that would be the answer 17:39:56 dougwig: you had a specific point that you wanted to discuss or you were making the point, that we should move ahead 17:40:03 not much to say from my end. personally I've been not following closely the ongoing discussion. enikanorov_ and mark should first agree on the flavor proposal and then we can continue reviewing it 17:40:08 i was just being snarky; no point. 17:41:15 all i can say is that if we have a strong preference in terms of one approach versus the other, please make it known on the review 17:41:32 that might help in getting two opinions to reconcile 17:41:52 SumitNaiksatam: good point 17:42:11 I think in the meeting dedicated to Flavor, we kind of make an agreement, right? 17:42:11 there was also the other discussion on the service type but i think there is a better chance of consensus on that 17:42:26 garyduan: apparently not on exposing the extensions’s list 17:42:52 right. I saw discussion on the spec review 17:43:09 alright, so can i request everyone to weigh on the review: #link https://review.openstack.org/102723 17:43:26 in the next day or so, more specifically in the context of the extensions discussion 17:43:42 perhaps looking at #link https://review.openstack.org/#/c/105982 17:43:51 might help you to understand better 17:44:48 per the neutron project goals, flavors has a priority among the adv services’ blueprints, so please prioritize accordingluy 17:44:57 ok moving on 17:45:14 since cgoncalves is here 17:45:26 #topic Traffic steering 17:45:34 #link https://review.openstack.org/#/c/92477 17:46:21 not much to report this week. there is no blockers 17:46:31 cgoncalves: ok good 17:46:43 SumitNaiksatam: i think salvatore is essentially suggesting posponing the flavor work to next cycle. 17:46:47 that said, salvatore has put a comment that he prefers that this be deferred to K 17:47:09 Salvatore -1'ed suggesting postponing it to K cycle 17:47:10 banix: you mean flavors or traffic steering? 17:47:25 SumitNaiksatam: i was referring to flavors 17:47:29 o/ sorry am late, am still on another call 17:47:43 banix: ah ok, i did not catch that comment 17:47:56 banix: so salvatore is suggesting deferring at least three BPs to K? mmm 17:48:16 TS, flavors and TAPaaS 17:48:29 cgoncalves: i think so 17:48:59 what does the team here feel about the TS spec, are there any major disagreeents? 17:49:43 cgoncalves actually has the implementation in place for a long time 17:49:50 service base & insertion still a possibility for J3 right? Or is that also k 17:49:55 No technical concerns that I have heard of. 17:49:56 regarding TS work, we should not be able to implement OVS support in time. we've internally a working ODL and ODL driver implementation. not sure we could open-source it as of now 17:50:04 he is saying even if this is implemented (wrt flavors) it wont be used in code in this cycle so postpone to next cycle 17:50:06 marios: thats next in the agenda 17:50:11 k thx sorry 17:50:27 cgoncalves: have you considered the case of using the classifiers to branch to different ports? 17:50:27 marios: np 17:50:36 SumitNaiksatam: yes. this week we integrated openstack+ODL. I've been testing it today 17:51:27 LouisF: I did not forget your suggestion, although I've been trying to keep on track internally with the implementation side 17:51:52 any other questions for cgoncalves? 17:51:53 LouisF: I *promise* I will not overlook your suggestion and will get back to you 17:52:04 cgoncalves: thx 17:52:11 LouisF: sorry for that 17:52:57 But the process is that if we do not approve it in this cycle, we have to go over the approval process all over again for K. That seems like a significant waste of resources. 17:53:41 cgoncalves: i would like to see that added to the bp 17:53:48 mandeep: i believe you are referring to: #link https://wiki.openstack.org/wiki/NeutronJunoProjectPlan 17:53:49 mandeep: i think even if we approve, if code doesnt merge we need to get spec approved again. my understanding. need to verify. 17:53:50 mandeep: if most non-core reviewers keep their +1 votes, it should be fast to get +2s 17:54:05 banix: i think that is correct 17:54:16 banix: yeah, my understanding as well 17:54:19 cgoncalves: if only! 17:54:30 cgoncalves: is the optimist today! 17:54:44 hehe :D 17:54:46 ok any other questions for cgoncalves? 17:54:52 cgoncalves: I am told that it is not how it has typically happened in past 17:54:58 cgoncalves: :-( 17:55:16 #topic Service base definition and Insertion 17:55:24 #link https://review.openstack.org/#/c/93128 17:55:37 both kanzhe and s3wong are not able to make it today 17:56:07 the latest update from s3wong was that he had posted a new patchset and there are no outstadanding comments 17:56:41 s3wong also has been working on the implementation based on what Kanzhe had done before with the API and DB code 17:57:25 there was an action item from last week for s3wong and marios to reachout to the VPNaaS team on the removal of the router_id attribute from the VPNaaS model (in the context of this spec) 17:57:38 i think the plan for now is to not remove it 17:57:41 marios: is that right? 17:57:57 at least not being suggested in the spec 17:58:18 and put it on the deprecation path if we make progress with this service insertion model 18:00:01 any other questions on this? 18:00:24 SumitNaiksatam: right, sorry, still on a call 18:00:31 SumitNaiksatam: its not a blocker but something to think about 18:00:32 marios: no worries 18:00:39 marios: yes definitely 18:00:58 #topic Service Chaining 18:01:08 #link https://review.openstack.org/#/c/93524 18:01:11 mandeep: there? 18:01:13 No significant updates this week. 18:01:27 mandeep: ok, i felt that this was pretty well speced out 18:01:39 mandeep: and the only -1 was from me for not having an example 18:01:53 There was a request for CLI example, and I will work with songle to add that 18:02:12 songle -< songole 18:02:28 SumitNaiksatam: Thanks@ 18:02:29 i believe he needs to be added to the spec as well? 18:02:45 any questions for mandeep on the service chaining spec? 18:02:49 Yes, the plan was to add both at the same time 18:03:08 mandeep: what is plan for horizon chnages? 18:03:14 I have a quesiton on the port, needs Mandeep to confirm 18:03:21 cathy_: go ahead 18:03:35 So from the replies, it seems the port is the ingress port of the service chain, right? 18:03:42 LouisF: No plan yet on horizon 18:04:15 cathy_: The port identifies the traffic to which the services apply, it does not require that be the ingress/egress port 18:04:23 cathy_: That is left to the implementation 18:05:01 mandeep: can we view the chain itself as a service, in which case it could 18:05:05 mandeep: but is does represent the start of the service chain - right? 18:05:13 have attachment ports (multiple) like a service 18:05:16 it 18:05:39 hemanthravi: YEs you could, but then it would have to inherit from serviceBase and that implies service ports etc. 18:05:39 mandeep: and those could be ingress/egress 18:05:45 This classifier will identify the traffic, what do you mean by the port identify the traffic? every service port along the service chain needs to identify the traffic 18:05:55 LouisF: It can be implemented that way 18:06:29 cathy_: There is no service port specified, or required, in the chaining API 18:07:06 mandeep: or the port can be ignored and a gbp redirect action to steer traffic to the service chain 18:07:06 cathy_: Also, no classifier is specified in the chaining spec 18:08:01 LouisF: That would depend on GBP's usage of service chain, that would be covered in GBP spec (still work in progress) 18:08:09 mandeep: so all traffic that hits the particular port is subject to the chain? 18:08:32 SumitNaiksatam: Correct. There is no other classifier or service port 18:08:55 I am saying that becasue you said the port is for idnetifying the traffic. I think the spec might need to explain more clearly about what that port refers to? Maybe in more concrete examples so people will not misunderstand it since "port" is used in many places and mean differently in different scenarios 18:09:21 cathy_: In the example, bullet #3 tries to do exactly that 18:09:23 mandeep: and you could potentially use a classifier and steering to direct traffic to that port (but thats independent of this spec)? 18:09:59 SumitNaiksatam: That is probably better handeled in the service spec (for example by TS) 18:10:13 SumitNaiksatam: And it does not help to recreate that functionality in chaining spec 18:10:28 mandeep: okay, yeah that is how i understood this 18:10:39 cathy_: does that answer your question? 18:11:00 cathy_: When we add CLI, perhaps that will be clearer? 18:11:13 cathy_: When we add CLI for the example, perhaps that will be clearer? 18:11:37 not really. There are so many ports involves in a service chain (I am not talking about the API), it is still not clear which port this "port" in the API refers to? 18:11:49 OK, let's see the CLI 18:11:52 Thanks 18:11:53 cathy_: if i understand what mandeep is saying, the use of classifier and steering is complementary to this service chaining spec 18:12:06 cathy_: The spec has only one type of port - neutron port. There is NO other port in the spec. 18:12:24 cathy_: Where did you see reference to any other port in the BP? 18:12:27 But there are multiple neutron ports involved in a service chain, right? 18:12:44 Each service funciton could have a attachment neutron port, right? 18:13:02 cathy_: No. Not in this spec. That is an impelentation choice (and one may choose not to implement any service ports) 18:13:29 mandeep: you mean item 2 on line 148 18:13:36 I am not talking about the port in BP. I am talking about in general, a service chain consists of a sequence of service function instances and each instance has a port. 18:13:38 odl gbp chaining (https://meetings.opendaylight.org/opendaylight-group-policy/2014/gbp_usecase/opendaylight-group-policy-gbp_usecase.2014-07-14-20.03.html) refers to a in/out terminal for a chain 18:13:49 cathy_: Do not confuse a specific provider's choice with the API intent 18:14:19 hemanthravi: This is not refering to ODL chain, that is a different project 18:14:46 mandeep: thought the disc could be useful for the model 18:14:53 LouisF: Let me check the line numbers 18:15:13 hemanthravi: ODL chain is closer to TS implementation of this spec 18:15:32 the ODL SFC is a whole new beast :-) 18:15:37 mandeep: yeah i believe cgoncalves has mapped that to ODL 18:15:53 mandeep: looks like people have confusion about the "port" in SC BP. I think more examples could help to make it clear, such as in the scenario that a chain is composed of multiple service instances, then which port does thi "SC BP port" refers to? 18:15:58 mandeep: got it 18:15:59 hemanthravi: This is a declarative spec (what I want), not a imperative spec (how to do it) - like TS or ODL are 18:16:21 SumitNaiksatam: yes. we've extended ODL and added Neutron TS API as well as its implementation 18:16:23 i believe the cloud abstraction is different from a network controller abstraction 18:16:44 which i believe is being reflected in mandeep’s spec (say as compared to the ODL spec) 18:17:04 As in the example, the port refers to a an existing neutron port. No new types of ports are specified 18:17:37 cathy_: (that was the example that I refered to in bullet #3 above) 18:17:47 okay, cathy perhaps you can put the comment on the spec, i believe mandeep is already planning a new rev to address that (i had a similar comment on the spec) 18:18:00 SumitNaiksatam: OK, sure, will do 18:18:06 cathy_: thanks 18:18:20 moving on 18:18:35 mandeep: I've not had time to review your latest SC bp patchset, but 'port' is an existing neutron port associated to a e.g. neutron service or a SC entry point for traffic? 18:18:35 #topic Tap as a Service spec 18:18:42 #undo 18:18:43 Removing item from minutes: 18:19:01 cgoncalves: Yes, that is exactly right. 18:19:19 We found some opposition form Salvatore Orlando 18:19:21 mandeep: which one of the two options? :-) 18:19:31 vinay_yadhav: one sec 18:19:36 sorry 18:19:39 vinay_yadhav: lets wrap this one 18:19:41 cgoncalves: And that was what I was trying to explain to cathy_, the port refers to an existing neutron port (as in the example) and not a service port 18:19:44 vinay_yadhav: no worries 18:20:30 cathy_: sound okay? 18:20:33 mandeep: ok. I will definitly need to to review it to get a better looking of it. thanks 18:20:47 SumitNaiksatam, vinay_yadhav: sorry for that. please continue 18:20:50 oh it was cgoncalves who had the question 18:20:54 ok moving on 18:20:55 #topic Tap as a Service spec 18:21:08 #link https://review.openstack.org/#/c/96149 18:21:16 vinay_yadhav: sorry, go ahead 18:21:35 Armando and Salvatore had some objections to the spec 18:21:39 SumitNaiksatam: I have the same question as cgoncalves , looks like the "port" in SC is the entry point for traffic? 18:22:01 anyway I will post the comment again 18:22:06 cathy_: thanks :-) 18:22:06 they basically do not want 'tap' aas but as a port mirror extension 18:22:39 but i guess we have discussed this in the last summit and decided to have it as a service 18:22:42 vinay_yadhav: i dont have any strong feelings on that 18:23:04 is anil_rao here? 18:23:20 i guess so 18:23:28 Tap-aaS is more generic in my opinion because other possible implementations can be done in the future 18:23:53 for the first version we are planning to rely on port-mirorring but this doesn't have to be the case for other situations. 18:24:47 anil_rao: yes, i believe port mirroring in this case is one/first feature 18:24:57 anil_rao: if i understand your comment correctly 18:25:03 IMO, When you start extending TaaS with de-dup or time-stamps, it really becomes more of a service and less of a port "feature" 18:25:17 that is correct. 18:25:17 vinay_yadhav: in cloud, everything is (or should be) *aaS so I see not much reason in suffixing it with "as a service". 'port mirroring' though potentially be more self-explanatory 18:25:23 correct 18:25:59 i dont see what the big issue is with the name though 18:26:05 vinay_yadhav: having said that, expect no -1 vote just because of that 18:26:19 the point is whether this is being offere as a service abstraction or not 18:26:39 cgoncalves: IMO *aaS is cosmetic matter, I guess we could have called FWaaS as FW and VPNaaS as VPN ... 18:26:40 you can call it tap as a service or just a tap 18:26:53 mandeep: ah, just the point i was trying to make 18:26:53 mandeep: agreed 18:27:12 mandeep: in the end, it's all about fancy names 18:27:31 cgoncalves: The real question is, is it a "service" with a distinct resource API or "feature" that extends an existing resource 18:27:41 also i want to know the opinion of other reviewers on whether we should have it as service or a extension API 18:28:01 mandeep: exactly, and i believe what is being proposed is a service, right? 18:28:14 vinay_yadhav: Is that "new resource" vs. "extending existing resources" question? 18:28:22 that was not meant for mandeep specifically, that was a question for vinay_yadhav and anil_rao 18:28:34 yes 18:28:51 we are proposing Tap as a resource 18:28:58 changing the name does not change the fact that this is a service interface, if that is the approach we want to take 18:29:07 yes 18:29:08 The service abstraction allows more room for growth, so I will recommend that we stay with it. 18:29:22 anil_rao: i tend to agree 18:29:27 anil: agreed, that was the idea 18:29:43 anil_rao vinay_yadhav: can you please provide a response on the review to that effect 18:29:49 Sure will do 18:29:52 and we can hopefully move on from there 18:29:56 yes we will 18:30:00 vinay_yadhav anil_rao: thanks 18:30:07 ok we have hit our time 18:30:15 #topic open discussion 18:30:19 anil_rao: Specifically handling something like (distributed) de-dup is probably not representable as an extension to existing resources 18:30:28 if there is nothing else, we can wrap up here 18:30:37 mandeep: agree 18:30:40 mandeep: exactly. 18:30:51 ok lets wrap it up 18:30:59 thanks for all your reviews and work on the patches 18:31:09 thanks 18:31:16 lets keep up the momentum and hopefully we can get the specs approved in time 18:31:24 thanks all, bye! 18:31:29 cya! 18:31:34 Bye! 18:31:35 bye 18:31:39 #endmeeting