17:33:11 #startmeeting Networking Advanced Services 17:33:12 Meeting started Wed Jul 23 17:33:11 2014 UTC and is due to finish in 60 minutes. The chair is SumitNaiksatam. Information about MeetBot at http://wiki.debian.org/MeetBot. 17:33:13 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 17:33:15 The meeting name has been set to 'networking_advanced_services' 17:33:18 hi! 17:33:36 #info Spec approval deadline has passed 17:33:42 SAD 17:33:58 indeed, especially for thos specs which got left out 17:34:06 and definitely not funny! 17:34:31 so if you feel strongly that you would still like your spec to be considered for Juno 17:34:32 hi 17:34:41 please petition for a SFE 17:34:48 spec freeze exception 17:35:02 SumitNaiksatam: out of interest, when are those expected until (is there a deadline) 17:35:03 that said the likelihood of it going through are pretty slim 17:35:04 to whom should we address it to 17:35:16 marios: honestly i am not aware of it 17:35:22 vinay_yadhav: see the mailing list, there are lots already 17:35:27 hi 17:35:31 vinay_yadhav: you can send to -dev mailer, there are a few 17:35:34 thanx marios 17:35:47 sumit: thnx 17:35:48 our team has alread been give one for flavors 17:35:49 s3wong: +1 for SAD 17:36:08 I mean, SAD as in sad upper-case :-) 17:36:13 cgoncalves, vinay_yadhav: i definitely feel your frustration 17:36:18 i was wondering what was happening/gonna happen with flavors and the deadline 17:36:21 been there several times before! 17:36:31 salvortore said that at current rate (and volume), he advises not accepting any more exception other than some --- well - exception cases 17:36:43 marios: lets discuss that in the agenda item 17:36:57 marios: flavor has requested SFE, and most likely will be accepted 17:37:00 SumitNaiksatam: yes, but I kind of would like to stress out here today the unexpected approval of the service chain spec 17:37:04 anything anyone wanted to discuss here in terms of the process? 17:37:10 SumitNaiksatam: yeah thx, i was mostly responding to your update (missed the sfe for that) 17:37:14 SumitNaiksatam: nothing against you or mandeep, though 17:37:36 s3wong: thx 17:37:36 cgoncalves: any reason you say “unexpected”? 17:37:49 SumitNaiksatam: I feel like it was approved without a broad discussion from the community and very few +1's 17:37:50 cgoncalves: last i check there were no negative votes on that 17:38:37 cgoncalves: and i personally was happy with what was mentioned in there since this is what we have been saying for the past three summits 17:38:48 cgoncalves: hence my +2 17:38:48 SumitNaiksatam: although I can't complain much because I had no time to review it 17:39:30 i cant speak for the other reviewers though 17:39:39 Can I ask a question regarding the review process? 17:39:50 anil_rao: sure 17:40:05 SumitNaiksatam: I know 17:40:10 cgoncalves: we can discuss service chain spec in the agenda item if you have concerns 17:40:33 I find that several +1s can be wiped out by a single -1, even if most folks don't agree with the reasons behind the -1. How does that work? 17:40:47 SumitNaiksatam: ok 17:40:48 Anil: +1 17:40:48 anil_rao: yeah these things are subjective 17:41:00 anil_rao: +1 17:41:10 anil_rao: its not necessarily the case that the -1s are “wiped” out 17:41:48 i should point out that anil_rao's point applies to neutron or even openstack more generally, its not an advanced services specs issue. 17:41:51 anil_rao: but that shows some level of disagreement and hence the possibility of more discussion 17:42:00 marios: yes definitely 17:42:15 the reason I ask is I would like to know how to avoid such a scenario going forward. 17:42:42 anil_rao: sure 17:43:14 anil_rao: though i would like to point out that this is not a novel experience and unique to you 17:43:19 how do we make sure we have address all concerns when things are commented on the very last week or day :) 17:43:25 anil_rao: as marios pointed out 17:43:33 its across the project 17:43:42 vinay_yadhav: absolutely 17:43:54 vinay_yadhav: that happens very often :-) 17:43:59 We need to have some system where the collective +1s from several well meaning reviewers hold some weight. 17:44:07 vinay_yadhav, anil_rao: to be honest, the amount of attention that the tap as a service spec got as a part of this team is unprecedented for a new feature 17:44:27 it typically takes longer for a new feature to incubate and get through 17:44:48 We are very thankful for that, which is why I was hoping that the support we got here counts. :-) 17:45:04 vinay_yadhav: anil_rao: I didn't submit a spec so I won't pretend to understand how p****d off you guys must be right now. i think this isn't something SumitNaiksatam can really address... IMO an email to the mailing list to provide feedback on the specs review process (and these last minute drive-by's) would probably be better targetted 17:45:09 my 2c 17:45:11 sumit: we are happy that advanced services group commented on the spec extensively and help improve it 17:45:34 vinay_yadhav: +1 17:45:40 if you approach other members of the community, they will politely tell you, please contribute by reviewing other blueprints as well and participating in the Neutron priority activities like Nova network parity :-) 17:46:04 marios: absolutely great suggestion 17:46:27 agree 17:46:35 marios: thanx will try that 17:46:46 :( sorry 17:46:58 and again, i can uenquivocally say, that i feel the pain of the folks whose spec did not get approved (i have been throught that before!) 17:47:10 and i am not being fatalistic here 17:47:34 and i think we as a team owned these specs 17:47:45 so its “sad” for the entire team 17:47:50 i guess we can all try to make the system better for the future 17:48:32 that said, like i mentioned privately to cgoncalves, vinay_yadhav, anil_rao before, it is very difficult to argue against the accepted priorities of the project 17:49:10 and that priority in the J release has been pretty much on nova network parity (and DVR such that it supports the mutli-host feature) 17:49:58 I would point out the following ... any new patch wipes out all +1 and -1s 17:49:59 but does that mean that we close our shop and twiddle thumbs 17:50:14 regXboi: true 17:50:29 and -1s mean that something should be addressed in the comments 17:50:36 regXboi: yes 17:50:51 I would argue that collective +1s shouldn't outweight a -1 17:51:02 because the -1 may be uncovering a case not thought of yet 17:51:15 regXboi: that might be true in cases 17:51:35 and I can say that I've pushed back on at least one -1 successfully 17:51:36 regXboi: but in this case the -1 was from cores 17:51:36 regXboi: true, but the +1 should not be wiped off either imho 17:52:08 so while there is reason to be frustrated, hopefully if we keep marching in terms of the discussion, i think we have a head start for K 17:52:16 regXboi: while that's true, some specs got -1 from core reviewer(s) just because j3 was already swamped with approved specs 17:52:30 so... in order.... 17:52:40 as a parallel activity, definitely do provide your feedback on the mailing list on the process, if you have concerns 17:52:42 +1s being wiped from new revisions actually makes sense 17:53:09 second order - I can't speak to the why of -1s (I'm not a core, so don't ask :) ) 17:54:00 regXboi: I believe, any solution is going to have holes (removing +1s or -1s), I would just like better reporting that shows all +1/-1s across versions so that you do not have to go re-assert them again. 17:54:18 regXboi: it makes sense when the reviewer review the new patch and +1 or -1 it again :) 17:54:28 mandeep: that *would* be nice 17:54:40 but I'm not sure it's practical from gerrit's perspective 17:54:54 mandeep: +1 17:55:28 I'm just agreeing with SumitNaiksatam that expressing that on the ML is the way to go 17:55:31 i think we have heard everyone, and been on this for about 25 mins now 17:55:39 mandeep: i think that’s what happens for workflow votes, but only cores have those 17:55:51 so, lets move on for now 17:56:02 mandeep: although that might just be the -2’s… 17:56:14 and feel free to reach out to me as well if you feel the need to continue this conversaton 17:56:31 kevinbenton: Yes, I think that -2 form cores is sticky. 17:56:32 i have already preemptly reached out to the owners of the specs which did not get through 17:56:45 enikanorov_: there? 17:56:56 yes 17:57:09 #topic Flavors 17:57:19 enikanorov_: i believe we got the FFE for this 17:57:26 enikanorov_: and you have posted a WIP patch 17:57:49 right, the patch is actually ready for review 17:57:57 and i've got some comments from stephen already 17:58:01 which i'm going to resolve 17:58:01 i am not sure what the plan is on the bp spec, since markmcclain was away on vacation last week 17:58:19 enikanorov_: dont we need to get the spec approved first? 17:58:27 i'm working on cli also, hope to post it this week 17:58:32 SumitNaiksatam: yes, sure... :) 17:58:44 I asked markmcclain to folloup on spec 17:58:48 enikanorov_: i am one of the assigned cores, so i am waiting on activity on the spec review in gerrit 17:58:51 enikanorov_: thanks 17:58:55 or i can do that if he don't have enough time 17:59:08 so basically i can update the spec if he agrees 17:59:09 I'll rev the spec 17:59:47 great! 18:00:03 any questions for enikanorov_ or markmcclain? 18:00:18 oops 18:01:36 enikanorov_ markmcclain: thanks 18:02:28 #topic Service base and insertion implementation update 18:02:43 s3wong, kevinbenton: ? 18:02:52 and marios 18:02:58 hi 18:03:09 marios: sorry i did not get a chance to respond to your email 18:03:32 SumitNaiksatam: haha, i was about to apologise for not checking my email 18:03:41 marios: no worries 18:04:07 SumitNaiksatam: did you need me to describe the issue? 18:04:10 s3wong: i believe you are repurposing kanzhe’s earlier implementation on the db and api 18:05:31 kevinbenton: i believe you are referring to the discussion on where the service interface is implemented 18:05:51 kevinbenton: go ahead 18:06:01 SumitNaiksatam: first off, thanks for all your last minute efforts on this last week! 18:06:16 marios: np 18:06:26 yes. if we have the service interface API as a top level object, there won’t be an easy way to tell what type of service is being referenced by the creation of the service interface 18:06:42 because it will just be a UUID 18:07:20 kevinbenton: even before we reach that point 18:07:35 SumitNaiksatam: sorry, talking to rkukura in office now 18:07:37 SumitNaiksatam: go ahead. I’m not sure what context is necessary 18:08:01 kevinbenton: the neutron manager needs to decide where to dispatch the create service interface call to 18:08:08 i thought it was the backwards compat issue for the clients (though what kevinbenton describes sounds like another issue) 18:08:11 SumitNaiksatam: and yes, I am working on moving kanzhe's code to the latest model 18:08:25 marios: we will come to that next 18:08:34 s3wong: is the code in gerrit? 18:08:40 marios: not yet 18:08:53 s3wong: i also have wip for vpn (and also needs conversion over to serviceinterface etc) 18:09:00 s3wong: k thx 18:09:00 so we are proposing to implement a separate “service plugin” to implement the service interface 18:09:15 (very early wip) 18:09:47 this “service plugin” will then make a call on the appropriate fwaas/vpnaas/lbaas service plugin 18:10:22 this is where we face the second issue of deciding which sevice instance object is associated with the uuid (this is what kevinbenton was referring to) 18:10:28 kevinbenton: i have some thoughts on that 18:11:01 kevinbenton: we could potentially leverage notifications (say when a firewall is created) and have the new “service plugin” listen to that 18:11:30 kevinbenton: when it gets the notification, it keeps a reference to in its own db as a firewall object 18:11:56 SumitNaiksatam: then it won’t work with services created before the plugin was activated. is that okay? 18:12:14 hopefully we can ensure the order 18:12:31 kevinbenton: but good point, and something to think about it 18:12:48 SumitNaiksatam: I mean way before, like during an Icehouse deployment :-) 18:12:48 i think for the benefit for everyone else, this will probably be cleared with some WIP code 18:12:49 SumitNaiksatam: during Monday's conversation, I think we say that the service object (i.e. FWaaS object) DB has a attribute pointing back to ServiceBase entry? 18:13:18 kevinbenton: ah, backward compatibility 18:13:21 s3wong: that's how i understand it (to a serviceinterface) 18:13:41 kevinbenton: there would be no service insertion feature for icehouse 18:13:45 marios: actually to a serviceBase, then from the ServiceBase, we get the list of ServiceInterfaces 18:13:57 (that's the DB model) 18:14:06 kevinbenton: i mean, the default insertion performed by the service happens in that case 18:14:15 s3wong: yeah, i assumed when it said 'servicebaseentry' it meant to one of the interfaces 18:14:18 kevinbenton: so for example, firewall is inserted on all routers 18:14:36 SumitNaiksatam: oh, it’s not possible to change the insertion for an existing service? 18:15:05 kevinbenton: at least in my mind we did not set out to provide that level of backward compatibility 18:15:25 kevinbenton: that will be a hard problem to solve and i am not sure its worth the effort 18:15:39 fwaas and vpnaas still have experimental APIs 18:15:46 and LBaaS is going through a change 18:16:03 so on the backward compatiblity 18:16:05 marios: servicebase maps one to one to each service instance; and servicebase holds the list of serviceinterfaces associated with that service instance 18:16:48 i proposed a solution to marios (vpnaas) and sridaK (fwaas) 18:17:04 marios: you are comfortable with that? 18:17:08 s3wong: right 18:17:26 SumitNaiksatam: i think it sounds sane right now, but we need to retain the router id for example (for vpn) 18:17:35 marios: yes, we retain that 18:17:56 SumitNaiksatam: i think we can try stuff out and come back to it next week 18:18:01 marios: i think we should strive to be as less intrusive as possible 18:18:05 sorry, as my connection dropped a bit. Is there a BP for this? 18:18:06 marios: sure 18:18:27 apologies, have to put my 2year old to bed... hopefully brb 18:18:31 pcm___: we are discussing the service base and insertion bp 18:18:42 marios: no worires, thanks for joining 18:18:45 thanks 18:19:01 pcm___: that includes the implementation for vpnaas, fwaas and lbaas 18:19:18 s3wong: are the new apis implemented in the new plugin or servicebase? 18:19:27 sumitnaiksatam: can you post the link here, it would be useful. 18:19:32 goal being to have a common service? 18:19:42 #link https://review.openstack.org/#/c/93128 18:19:45 hemanthravi: with SumitNaiksatam 's suggestion, the APIs would be on the new plugin 18:20:08 can't these be done in servicebase? 18:20:41 hemanthravi s3wong: the REST APIs are handled in the new “service plugin” 18:20:56 hemanthravi: I don't think we have plugin for servicebase per se, though 18:21:00 it is abstract 18:21:02 however, the service base will stil need to have these methods as well 18:21:23 SumitNaiksatam: Do the service's APIs come into the service base and then get forwarded to the respective service? 18:21:35 SumitNaiksatam: for other services to implement their own inherited methods? 18:21:58 so the flow would be: REST call for creating service interface -> new “service plugin” -> fwaas service plugin 18:22:33 pcm___: so the service base as defined in the spec stays the way it is (or may be a close variant of that) 18:22:46 Do we have a WIP patch about new "service plugin"? 18:22:47 SumitNaiksatam: so the point of the plugin is to maintain the association between fwaas_UUID and the interface, until that fwaas instance is inserted 18:22:51 however, the service interface resource gets implemented in a new service plugin 18:23:13 garyduan: perhaps you missed activity over the weekend, we just got the spec approved :-) 18:23:36 marios: the main point of the new service plugin is to be able to honor the CRUD for the service interface 18:23:41 yes. I saw that, I wanted to +1, but it's already approved 18:24:11 marios: since the existing plugins cannot be used to implement the service interface resource 18:24:18 garyduan: np 18:25:02 marios: otherwise you will have each of fwaas/vpnaas/lbaas implementing the same resource/extension 18:25:30 marios: and the neutron manager (api layer) will not know which service plugin to send the call to 18:25:37 SumitNaiksatam: i see the implementation issue now 18:26:01 SumitNaiksatam: I should say, I understand the issue now 18:26:06 garyduan: yeah, its a little difficult to explain in text here, hence i was saying it will be clearer with a WIP patch 18:26:15 SumitNaiksatam: thanks, a lot of this is still new to me 18:26:41 SumitNaiksatam: right. Look at the code is easier. 18:26:56 marios: the side effect of the above is that we need to still dispatch to the fwaas plugin, and hence we need to know that a particular uuid in the service interface create call is a firewall object 18:27:12 so we went much deeper into this discussion than planned 18:27:20 #topic Service Chains 18:27:23 SumitNaiksatam: so then would 'create_service_interface' still need to be implemented in each service, or is that what you're saying here. that this will be implemente3d in the service plugin only 18:27:29 (as an example) 18:27:39 SumitNaiksatam: nm 18:27:42 marios: we would (the service base will change) 18:27:42 SumitNaiksatam: next tinme, sorry 18:27:46 marios: thanks 18:27:59 songole mandeep: ? 18:28:03 quick update? 18:28:12 i know cgoncalves you had questions on the spec? 18:28:16 if we can keep it short 18:28:27 SumitNaiksatam: Sorry, I was pulled in a different discussion ... 18:28:30 for this time, and we can continue the conversation later 18:28:36 mandeep: no worries 18:28:58 songole: my understanding is that you are on track for the implementation? 18:29:07 implementation/WIP patch 18:29:23 SumitNaiksatam: yes. We are finalyzing on the plan 18:29:38 songole: ok good, perhaps you can report next week 18:29:45 ok 18:29:48 #topic Open Discussion 18:29:57 Yes, no new status update. There was a request from LouisF to allow for different forward and reverse paths, and we can look into that for a later versiion 18:30:08 mandeep songole: thanks 18:30:12 SumitNaiksatam: sorry, lagged connection 18:30:20 sorry, we did not get a chance to discuss traffic steering and Tap 18:30:34 SumitNaiksatam: what's the plan for implementing a PoC for SC? 18:30:35 although my proposal is to still keep these on the agenda for this meeting leading into K 18:30:45 mandeep: i think the bp is incomplete as is 18:30:57 mandeep: maybe you can better answer to my question 18:31:03 so next time onwards we wil try to give at least some time to these specs such that we dont have to restart the discussion later 18:31:34 cgoncalves: What was the question? I missed earlier part of the meeting. 18:31:34 we are a little over time, so lets keep the discussion short, and we can continue over the mailer or next week 18:31:42 SumitNaiksatam: OK 18:31:49 mandeep: cgoncalves is asking what is the plan for a PoC? 18:31:52 mandeep: plans on PoC for service chain 18:31:57 mandeep: is there a time frame planned 18:32:06 cgoncalves: i believe songole is also working on this 18:32:12 cgoncalves: Plan was to work on that (plan) this week 18:32:23 mandeep: ah! ok :) 18:32:29 SumitNaiksatam: nice, thanks 18:32:33 mandeep: can we get something by next meeting? 18:32:57 SumitNaiksatam: Sure 18:32:59 have a plan ready, say by tomorrow, and socialize in the next meeting (or earlier if you chose to use the mailer) 18:33:02 mandeep: thanks! 18:33:11 anything else? 18:33:11 LouisF: Can you email me the concern that you had? 18:33:22 mandeep: ok 18:33:23 thanks all for reviewing the blueprints over the weekend 18:33:45 hopefully it wont be the same rush with the reviews for J3 18:34:10 \o g'night all 18:34:23 alright thanks all, and if you have any concerns please feel free to send me an email 18:34:26 thanks all! 18:34:28 bye 18:34:31 bye 18:34:31 #endmeeting