#opnfv-fds: FDS synch

Meeting summary

1. 1. Frank Brockners (frankbrockners, 16:00:28)
   2. Juraj Linkes (jlinkes, 16:00:42)
   3. Andrej Vanko (andy_vanko_, 16:01:27)
   4. Maros Marsalek (mmarsale, 16:01:33)
   5. agenda for today: quick check in on key open issues: (a) QEMU / vhost-user reconnect issue (b) HA setup & testing (c) security groups implementation (GBP/HC/VPP) (frankbrockners, 16:01:52)
   6. Tim Rozet (trozet, 16:03:45)
   7. (d) status of nosdn-fdio-noha scenario (is the bug that requires neutron restart resolved)? (frankbrockners, 16:04:13)
   8. we tried a bunch of different things for (a), but so far, none worked (jlinkes, 16:04:16)
   9. we tried vpp 16.12 with Damjan's patch, but that didn't work with HC - mmarsale already solved the issue and we'll try that again tomorrow (jlinkes, 16:05:28)
   10. we also tried to build 16.09 vpp with the same code changes, but that didn't work, even when we built qemu 2.7.50 (jlinkes, 16:06:10)
   11. marcel deployed nosdn-fdio with HA successfully (though not sure whether any testing was done) and is now trying odl_l2-fdio-ha (with OS HA only - i.e. no ODL clustering) (frankbrockners, 16:07:15)
   12. Tomas Cechvala, sorry for later notice (tomas_c, 16:08:01)
   13. trozet advised to try nofeature scenario to check that have the correct setup - if that deploys correctly we'll investigate what's causing issues in the fdio scenario; if it doesn't deploy correctly, there's most likely an issue with our setup (jlinkes, 16:09:47)
   14. the deployment on Cisco UCSB ends with a false positive with improperly setup openstack and database on controllers (frankbrockners, 16:13:07)
   15. frankbrockners - ref "odl_l2-fdio-ha (with OS HA only - i.e. no ODL clustering)" - no update on this (andy_vanko_, 16:16:31)
   16. Andrew will provide details on how VPP can be configured to do basic stateless filtering later today on https://wiki.fd.io/view/VPP/SecurityGroups (frankbrockners, 16:17:41)
   17. those examples will cover basic security groups settings as are used in Functest today (i.e. rules like "allow icmp and ssh for v4 and v6 and block anything else - both on ingress and egress" (frankbrockners, 16:18:35)
   18. examples will also highlight the associated java APIs. (frankbrockners, 16:18:56)
   19. HC SecGroups phase0: Outstanding issues: (mmarsale, 16:20:10)
   20. 1. Port ranges - InReview/InTest (mmarsale, 16:20:10)
   21. 2. Egress ACLs implementation (based on APIs by Ole, no impl though) - ETA: tomorrow, but APIs are already provided by HC. (mmarsale, 16:20:10)
   22. The rest (mix permit/deny, mix L2/L3) is already done (mmarsale, 16:20:10)
   23. so Monday looks promising (mmarsale, 16:20:30)
   24. nosdn-fdio scenario: there is effort upstream in networking-vpp to resolve the key issue which blocks successful testing in OPNFV, patches in review and testing now (frankbrockners, 16:23:58)

Action items

1. (none)

People present (lines said)

1. frankbrockners (41)
2. jlinkes (10)
3. tomas_c (7)
4. mmarsale (6)
5. andy_vanko_ (4)
6. collabot (3)
7. trozet (2)
8. fpan (1)