[openstack-dev] [neutron] only one subnet_id is allowed behind a router for vpnservice object

Nachi Ueno nachi at ntti3.com
Fri Dec 6 17:57:22 UTC 2013


Thanks!
Commented on bp whiteboard.

2013/12/5 Yongsheng Gong <gongysh at unitedstack.com>:
> ok, My pleasure to help,
> I created a bp for it:
> https://blueprints.launchpad.net/neutron/+spec/vpn-multiple-subnet
>
>
> On Fri, Dec 6, 2013 at 2:11 PM, Nachi Ueno <nachi at ntti3.com> wrote:
>>
>> Hi Yong
>>
>> Yes, to support multiple subnet is on the roadmap.
>> I'll definitely welcome your help :P
>>
>> 2013/12/5 Yongsheng Gong <gongysh at unitedstack.com>:
>> > I think we should allow more than subnet_id in one vpnservice object.
>> > but the model below limits only one subnet_id is used.
>> >
>> > https://github.com/openstack/neutron/blob/master/neutron/extensions/vpnaas.py
>> > RESOURCE_ATTRIBUTE_MAP = {
>> >
>> >     'vpnservices': {
>> >         'id': {'allow_post': False, 'allow_put': False,
>> >                'validate': {'type:uuid': None},
>> >                'is_visible': True,
>> >                'primary_key': True},
>> >         'tenant_id': {'allow_post': True, 'allow_put': False,
>> >                       'validate': {'type:string': None},
>> >                       'required_by_policy': True,
>> >                       'is_visible': True},
>> >         'name': {'allow_post': True, 'allow_put': True,
>> >                  'validate': {'type:string': None},
>> >                  'is_visible': True, 'default': ''},
>> >         'description': {'allow_post': True, 'allow_put': True,
>> >                         'validate': {'type:string': None},
>> >                         'is_visible': True, 'default': ''},
>> >         'subnet_id': {'allow_post': True, 'allow_put': False,
>> >                       'validate': {'type:uuid': None},
>> >                       'is_visible': True},
>> >         'router_id': {'allow_post': True, 'allow_put': False,
>> >                       'validate': {'type:uuid': None},
>> >                       'is_visible': True},
>> >         'admin_state_up': {'allow_post': True, 'allow_put': True,
>> >                            'default': True,
>> >                            'convert_to': attr.convert_to_boolean,
>> >                            'is_visible': True},
>> >         'status': {'allow_post': False, 'allow_put': False,
>> >                    'is_visible': True}
>> >     },
>> >
>> > with such limit, I don't think there is a way to allow other subnets
>> > behind
>> > the router be vpn exposed!
>> >
>> > thoughts?
>> >
>> > Thanks
>> > Yong Sheng Gong
>> >
>> > _______________________________________________
>> > OpenStack-dev mailing list
>> > OpenStack-dev at lists.openstack.org
>> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>> >
>>
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



More information about the OpenStack-dev mailing list