=====================
#opnfv-fds: FDS synch
=====================


Meeting started by frankbrockners at 16:00:15 UTC.  The full logs are
available at
http://ircbot.wl.linuxfoundation.org/meetings/opnfv-fds/2016/opnfv-fds.2016-10-13-16.00.log.html
.



Meeting summary
---------------

* Frank Brockners  (frankbrockners, 16:00:28)
* Juraj Linkes  (jlinkes, 16:00:42)
* Andrej Vanko  (andy_vanko_, 16:01:27)
* Maros Marsalek  (mmarsale, 16:01:33)
* agenda for today: quick check in on key open issues: (a) QEMU /
  vhost-user reconnect issue (b) HA setup & testing (c) security groups
  implementation (GBP/HC/VPP)  (frankbrockners, 16:01:52)
* Tim Rozet  (trozet, 16:03:45)
* (d) status of nosdn-fdio-noha scenario (is the bug that requires
  neutron restart resolved)?  (frankbrockners, 16:04:13)
* we tried a bunch of different things for (a), but so far, none worked
  (jlinkes, 16:04:16)
* we tried vpp 16.12 with Damjan's patch, but that didn't work with HC -
  mmarsale already solved the issue and we'll try that again tomorrow
  (jlinkes, 16:05:28)
* we also tried to build 16.09 vpp with the same code changes, but that
  didn't work, even when we built qemu 2.7.50  (jlinkes, 16:06:10)
* marcel deployed nosdn-fdio with HA successfully (though not sure
  whether any testing was done) and is now trying odl_l2-fdio-ha (with
  OS HA only - i.e. no ODL clustering)  (frankbrockners, 16:07:15)
* Tomas Cechvala, sorry for later notice  (tomas_c, 16:08:01)
* trozet advised to try nofeature scenario to check that have the
  correct setup - if that deploys correctly we'll investigate what's
  causing issues in the fdio scenario; if it doesn't deploy correctly,
  there's most likely an issue with our setup  (jlinkes, 16:09:47)
* the deployment on Cisco UCSB ends with a false positive with
  improperly setup openstack and database on controllers
  (frankbrockners, 16:13:07)
* frankbrockners - ref "odl_l2-fdio-ha (with OS HA only - i.e. no ODL
  clustering)" - no update on this  (andy_vanko_, 16:16:31)
* Andrew will provide details on how VPP can be configured to do basic
  stateless filtering later today on
  https://wiki.fd.io/view/VPP/SecurityGroups  (frankbrockners, 16:17:41)
* those examples will cover basic security groups settings as are used
  in Functest today (i.e. rules like "allow icmp and ssh for v4 and v6
  and block anything else - both on ingress and egress"
  (frankbrockners, 16:18:35)
* examples will also highlight the associated java APIs.
  (frankbrockners, 16:18:56)
* HC SecGroups phase0: Outstanding issues:  (mmarsale, 16:20:10)
* 1. Port ranges - InReview/InTest  (mmarsale, 16:20:10)
* 2. Egress ACLs implementation (based on APIs by Ole, no impl though) -
  ETA: tomorrow, but APIs are already provided by HC.  (mmarsale,
  16:20:10)
* The rest (mix permit/deny, mix L2/L3) is already done  (mmarsale,
  16:20:10)
* so Monday looks promising  (mmarsale, 16:20:30)
* nosdn-fdio scenario: there is effort upstream in networking-vpp to
  resolve the key issue which blocks successful testing in OPNFV,
  patches in review and testing now  (frankbrockners, 16:23:58)



Meeting ended at 16:25:08 UTC.



People present (lines said)
---------------------------

* frankbrockners (41)
* jlinkes (10)
* tomas_c (7)
* mmarsale (6)
* andy_vanko_ (4)
* collabot (3)
* trozet (2)
* fpan (1)



Generated by `MeetBot`_ 0.1.4