[openstack-dev] [Policy][Group-based-policy] ODL Policy Driver Specs

Sumit Naiksatam sumitnaiksatam at gmail.com
Fri Jan 23 19:04:12 UTC 2015


Hi Sachi,

This refers to a Neutron Network UUID. This option is available with
the Neutron Resource Mapping Driver. I do not believe it is currently
functional with the ODL driver.

Thanks,
~Sumit.

On Fri, Jan 23, 2015 at 1:04 AM, Sachi Gupta <sachi.gupta at tcs.com> wrote:
> Hi Yapeng, Sumit,
>
> In Openstack GBP command line, for l2policy help, there is an argument
> --network that can be passed. Can you please elaborate on which network do
> we need to pass here and what is the use of the same.
>
> gbp l2policy-create --help
> usage: gbp l2policy-create [-h] [-f {html,json,shell,table,value,yaml}]
>                            [-c COLUMN] [--max-width <integer>]
>                            [--prefix PREFIX] [--request-format {json,xml}]
>                            [--tenant-id TENANT_ID] [--description
> DESCRIPTION]
>                            [--network NETWORK] [--l3-policy L3_POLICY]
>                            NAME
>
> Create a L2 Policy for a given tenant.
>
> positional arguments:
>   NAME                  Name of L2 Policy to create
>
> optional arguments:
>   -h, --help            show this help message and exit
>   --request-format {json,xml}
>                         The XML or JSON request format.
>   --tenant-id TENANT_ID
>                         The owner tenant ID.
>   --description DESCRIPTION
>                         Description of the L2 Policy
>   --network NETWORK     Network to map the L2 Policy
>   --l3-policy L3_POLICY
>                         L3 Policy uuid
>
>
> Also, the PTG help includes an additional subnet parameter. Please also
> provide inputs on it.
>
> stack at tcs-ThinkCentre-M58p:/home/tcs/JUNIPER/gbp_openstack_odl/devstack$ gbp
> policy-target-group-create --help
> usage: gbp policy-target-group-create [-h]
>                                       [-f
> {html,json,shell,table,value,yaml}]
>                                       [-c COLUMN] [--max-width <integer>]
>                                       [--prefix PREFIX]
>                                       [--request-format {json,xml}]
>                                       [--tenant-id TENANT_ID]
>                                       [--description DESCRIPTION]
>                                       [--l2-policy L2_POLICY]
>                                       [--provided-policy-rule-sets
> PROVIDED_POLICY_RULE_SETS]
>                                       [--consumed-policy-rule-sets
> CONSUMED_POLICY_RULE_SETS]
>                                       [--network-service-policy
> NETWORK_SERVICE_POLICY]
>                                       [--subnets SUBNETS]
>                                       NAME
> Create a Policy Target Group for a given tenant.
> positional arguments:
>   NAME                  Name of Policy Target Group to create
>
> optional arguments:
>   -h, --help            show this help message and exit
>   --request-format {json,xml}
>                         The XML or JSON request format.
>   --tenant-id TENANT_ID
>                         The owner tenant ID.
>   --description DESCRIPTION
>                         Description of the Policy Target Group
>   --l2-policy L2_POLICY
>                         L2 policy uuid
>
>   --provided-policy-rule-sets PROVIDED_POLICY_RULE_SETS
>                         Dictionary of provided policy rule set uuids
>   --consumed-policy-rule-sets CONSUMED_POLICY_RULE_SETS
>                         Dictionary of consumed policy rule set uuids
>   --network-service-policy NETWORK_SERVICE_POLICY
>                         Network service policy uuid
>   --subnets SUBNETS     List of neutron subnet uuids
>
> output formatters:
>   output formatter options
>
>   -f {html,json,shell,table,value,yaml}, --format
> {html,json,shell,table,value,yaml}
>                         the output format, defaults to table
>   -c COLUMN, --column COLUMN
>                         specify the column(s) to include, can be repeated
>
> table formatter:
>   --max-width <integer>
>                         Maximum display width, 0 to disable
>
> shell formatter:
>   a format a UNIX shell can parse (variable="value")
>
>   --prefix PREFIX       add a prefix to all variable names
>
>
>
>
> Thanks & Regards
> Sachi Gupta
>
>
>
> From:        Yapeng Wu <Yapeng.Wu at huawei.com>
> To:        Sachi Gupta <sachi.gupta at tcs.com>, "OpenStack Development Mailing
> List (not for usage questions)" <openstack-dev at lists.openstack.org>,
> "groupbasedpolicy-dev at lists.opendaylight.org"
> <groupbasedpolicy-dev at lists.opendaylight.org>
> Cc:        "burns at noironetworks.com" <burns at noironetworks.com>
> Date:        01/13/2015 11:48 PM
> Subject:        RE: [openstack-dev] [Policy][Group-based-policy] ODL
> Policy        Driver        Specs
> ________________________________
>
>
>
> Hi, Sachi,
>
> Please see my inlined replies.
>
> Also, please refer to this link when you try to integrate OpenStack GBP and
> ODL GBP:
> https://wiki.openstack.org/wiki/GroupBasedPolicy/InstallODLIntegrationDevstack
>
>
> Yapeng
>
> From: Sachi Gupta [mailto:sachi.gupta at tcs.com]
> Sent: Tuesday, January 13, 2015 4:02 AM
> To: OpenStack Development Mailing List (not for usage questions);
> groupbasedpolicy-dev at lists.opendaylight.org; Yapeng Wu
> Cc: burns at noironetworks.com
> Subject: Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy Driver
> Specs
>
> Hi,
>
> While working on the integration of Openstack With ODL GBP, I have the below
> queries:
> 1.        Endpoint-group Create: When I create a new policy-target-group
> from Openstack say "gbp target-policy-group-create group1", it internally
> creates a l2.policy which includes the creation of the network and subnet.
> Meaning creation of EPG will create Network and subnet implicitly in
> Openstack and also the corresponding EPG, subnet, l3-context,
> l2-flood-domain, l2-bridge-domain will be created in the ODL GBP. So during
> the above EPG creation, neutron network and subnet call will come to the
> neutron northbound of ODL or only to ODL GBP??
> [Yapeng] First, when creating policy-target-group, you need to give
> “provided-policy-rule-sets” or “consumed-policy-rule-sets” parameter.
> Currently we don’t support policy-target-group update. Second, neutron
> network and subnet call won’t go to ODL.
> 2.
> 2.        In ODL, there is no Endpoint create API, instead there is an API
> to register the endpoints. So what is the sync between the OS and ODL for
> Endpoint create and register.?
> [Yapeng] The current working scheme is as follow: ODL GBP has new APIs for
> openstack-endpoint register and unregister supports.[1][2] When Openstack
> GBP creates policy-target, a neutron port will be created by implicit
> driver, openstack-endpoint register API will be invoked and the OVS
> tap-port-id will be passed as parameter to ODL GBP. Later when VM is booted,
> the OVS tap-port-id will be populated on openvswitch, this will trigger ODL
> to update ovs flow tables.
>
> [1] https://git.opendaylight.org/gerrit/#/c/13554/
> [2] https://git.opendaylight.org/gerrit/#/c/13896/
>
>
> Thanks & Regards
> Sachi Gupta
>
>
>
> From:        Yapeng Wu <Yapeng.Wu at huawei.com>
> To:        "OpenStack Development Mailing List (not for usage questions)"
> <openstack-dev at lists.openstack.org>
> Date:        01/12/2015 09:01 PM
> Subject:        Re: [openstack-dev] [Policy][Group-based-policy] ODL
> Policy        Driver        Specs
> ________________________________
>
>
>
>
> Hello, Sachi,
>
> They both works. “End point group” has been renamed to “policy target
> group”. It is recommended to use “gbp policy-target-group-create”.
>
> Yapeng
>
>
> From: Sachi Gupta [mailto:sachi.gupta at tcs.com]
> Sent: Monday, January 12, 2015 7:03 AM
> To: OpenStack Development Mailing List (not for usage questions)
> Subject: Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy Driver
> Specs
>
> Hi,
>
> Can anyone explain the difference between gbp group-create and gbp
> policy-target-group-create??
>
> I think both these are working same.
>
> Thanks & Regards
> Sachi Gupta
>
>
>
>
> From:        Sumit Naiksatam <sumitnaiksatam at gmail.com>
> To:        "OpenStack Development Mailing List (not for usage questions)"
> <openstack-dev at lists.openstack.org>
> Date:        11/26/2014 01:35 PM
> Subject:        Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy
> Driver        Specs
> ________________________________
>
>
>
>
>
> Hi, This GBP spec is currently being worked on:
> https://review.openstack.org/#/c/134285/
>
> It will be helpful if you can add "[Policy][Group-based-policy]" in
> the subject of your emails, so that the email gets characterized
> correctly.
>
> Thanks,
> ~Sumit.
>
> On Tue, Nov 25, 2014 at 4:27 AM, Sachi Gupta <sachi.gupta at tcs.com> wrote:
>> Hey All,
>>
>> I need to understand the interaction between the Openstack GBP and the
>> Opendaylight GBP project which will be done by ODL Policy driver.
>>
>> Can someone provide me with specs of ODL Policy driver for making my
>> understanding on call flow.
>>
>>
>> Thanks & Regards
>> Sachi Gupta
>>
>> =====-----=====-----=====
>> Notice: The information contained in this e-mail
>> message and/or attachments to it may contain
>> confidential or privileged information. If you are
>> not the intended recipient, any dissemination, use,
>> review, distribution, printing or copying of the
>> information contained in this e-mail message
>> and/or attachments to it are strictly prohibited. If
>> you have received this communication in error,
>> please notify us by reply e-mail or telephone and
>> immediately and permanently delete the message
>> and any attachments. Thank you
>>
>>
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev__________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



More information about the OpenStack-dev mailing list