<div dir="ltr">I really want to caution people about throwing around the term VPNaaS as if it is a monolithic thing. I've spoken to people on this "single topic", only to learn that they are talking about one of several very different things: SSLVPN for individual hosts to connect to a Quantum network, site-to-site IPsec VPNs, MPLS VPNs between different quantum networks running sites, etc. <div>
<br></div><div>In my past experience of using OpenStack summits to work through complex topics with many interested parties (L3 APIs, LBaaS, etc.) often I've found that the most important first step is to at least temporarily stop using the catch-all phrase like VPNaaS and instead to use detailed use cases of what we're trying to accomplish to agree on a set of more concrete teams for discussion. </div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Apr 4, 2013 at 10:49 AM, Alan Kavanagh <span dir="ltr"><<a href="mailto:alan.kavanagh@ericsson.com" target="_blank">alan.kavanagh@ericsson.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi All<br>
<br>
A suggestion.<br>
<br>
I believe one important element to touch on so that the discussions go in the right direction and we get maximum output is where is the boundary of where we want to see Quantum for VPNaaS. In otherwords is it for connecting the tenant network to an external network such as Enterprise Network or we also want to use this for other scenarios of which some are listed.<br>
<br>
>From this we can touch on what we want to have exposed in the VPNaaS Core API etc and so on so forth.<br>
<span class="HOEnZb"><font color="#888888"><br>
Alan<br>
</font></span><div class="im HOEnZb"><br>
-----Original Message-----<br>
From: Vasudevan, Swaminathan (PNB Roseville) [mailto:<a href="mailto:swaminathan.vasudevan@hp.com">swaminathan.vasudevan@hp.com</a>]<br>
Sent: April-04-13 1:18 PM<br>
To: OpenStack Development Mailing List<br>
</div><div class="HOEnZb"><div class="h5">Subject: Re: [openstack-dev] [Quantum] Summit Sessions - VPNaaS discussion - Agenda for tomorrow's meeting.<br>
<br>
Hi ,<br>
+1,<br>
Works for me.<br>
Let us have an agenda.<br>
Here is my Agenda for the discussion<br>
<br>
I would prefer to go over the Site-to-Site VPN as a starting point.<br>
1. VPNaaS service for Site-to-Site.<br>
i) IKE Proposals. ( IKEv1/IKEv2)<br>
ii) IPsec Policy<br>
iii) Use of Certificates versus PSK<br>
iv) Multiple Branch connections<br>
v) Static versus Dynamic routing ( Using BGP)<br>
vi) HA ( High availability).<br>
vii) Data Model<br>
viii) REST API.<br>
ix) Device Registration<br>
x) Agent<br>
xi) Drivers ( Supporting Hardwar router, Virtual routers )<br>
xii) Generate hardware router configuration ( Similar to Amazon)<br>
xiii) Virtual Router image installation.<br>
<br>
Thanks.<br>
Swaminathan Vasudevan<br>
Systems Software Engineer (TC)<br>
<br>
<br>
HP ProCurve<br>
Hewlett-Packard<br>
8000 Foothills Blvd<br>
M/S 5541<br>
Roseville, CA - 95747<br>
tel: <a href="tel:916.785.0937" value="+19167850937">916.785.0937</a><br>
fax: <a href="tel:916.785.1815" value="+19167851815">916.785.1815</a><br>
email: <a href="mailto:swaminathan.vasudevan@hp.com">swaminathan.vasudevan@hp.com</a><br>
<br>
-----Original Message-----<br>
From: Nachi Ueno [mailto:<a href="mailto:nachi@ntti3.com">nachi@ntti3.com</a>]<br>
Sent: Thursday, April 04, 2013 12:27 AM<br>
To: OpenStack Development Mailing List<br>
Subject: Re: [openstack-dev] [Quantum] Summit Sessions<br>
<br>
Hi Sachin<br>
<br>
OK I would like to change it to 12PM<br>
(Is that OK > for the other guys? )<br>
<br>
Time updated<br>
<a href="https://etherpad.openstack.org/HavanaVPNaaS" target="_blank">https://etherpad.openstack.org/HavanaVPNaaS</a><br>
<br>
<br>
<br>
<br>
<br>
2013/4/4 Sachin Thakkar <<a href="mailto:sthakkar@vmware.com">sthakkar@vmware.com</a>>:<br>
> I'd like to join as well. Can we do 12PM PST instead?<br>
><br>
> I think the initial kickoff will need to distinguish the various<br>
> facets of VPN that we want to cover. Reading through the proposals it<br>
> appears that many of the use cases are across the board. I'd recommend<br>
> we consolidate where appropriate and prioritize accordingly.<br>
><br>
> Cheers,<br>
> Sachin<br>
><br>
> ________________________________<br>
> From: "Alan Kavanagh" <<a href="mailto:alan.kavanagh@ericsson.com">alan.kavanagh@ericsson.com</a>><br>
> To: "OpenStack Development Mailing List"<br>
> <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
> Sent: Wednesday, April 3, 2013 8:17:10 PM<br>
><br>
> Subject: Re: [openstack-dev] [Quantum] Summit Sessions<br>
><br>
> +1<br>
><br>
> Would like to join too, 1PM PST sounds good. I guess Mark is also<br>
> hoping that we can structure the several contributions in a good flow<br>
> and where possible combine them etc, guess we can cover that also.<br>
><br>
> BR<br>
> Alan<br>
><br>
> -----Original Message-----<br>
> From: Nachi Ueno [mailto:<a href="mailto:nachi@ntti3.com">nachi@ntti3.com</a>]<br>
> Sent: April-03-13 8:59 PM<br>
> To: OpenStack Development Mailing List<br>
> Subject: Re: [openstack-dev] [Quantum] Summit Sessions<br>
><br>
> Hi Vasudevan<br>
><br>
> +1<br>
> I would like to join<br>
> How about 4/5 1pm (PST) on the IRC?<br>
><br>
> I created etherpad page for this discussion<br>
> <a href="https://etherpad.openstack.org/HavanaVPNaaS" target="_blank">https://etherpad.openstack.org/HavanaVPNaaS</a><br>
><br>
> Thanks<br>
> Nachi<br>
><br>
> 2013/4/3 Vasudevan, Swaminathan (PNB Roseville)<br>
> <<a href="mailto:swaminathan.vasudevan@hp.com">swaminathan.vasudevan@hp.com</a>>:<br>
>> Hi Mark McClain,<br>
>><br>
>> I would like to have a discussion on the VPNaaS for the quantum prior<br>
>> to the Havana summit.<br>
>><br>
>> Is there a discussion group for the VPNaaS, if so could you please<br>
>> forward me the details.<br>
>><br>
>> If not can we start a discussion group to discuss the VPNaaS<br>
>> blueprint before the summit.<br>
>><br>
>><br>
>><br>
>> Thanks.<br>
>><br>
>><br>
>><br>
>> Swaminathan Vasudevan<br>
>> Systems Software Engineer (TC)<br>
>><br>
>><br>
>> HP ProCurve<br>
>> Hewlett-Packard<br>
>> 8000 Foothills Blvd<br>
>> M/S 5541<br>
>> Roseville, CA - 95747<br>
>> tel: <a href="tel:916.785.0937" value="+19167850937">916.785.0937</a><br>
>> fax: <a href="tel:916.785.1815" value="+19167851815">916.785.1815</a><br>
>> email: <a href="mailto:swaminathan.vasudevan@hp.com">swaminathan.vasudevan@hp.com</a><br>
>><br>
>> From: Mark McClain [mailto:<a href="mailto:mark.mcclain@dreamhost.com">mark.mcclain@dreamhost.com</a>]<br>
>> Sent: Tuesday, March 26, 2013 9:37 AM<br>
>><br>
>><br>
>> To: OpenStack Development Mailing List<br>
>> Subject: [openstack-dev] [Quantum] Summit Sessions<br>
>><br>
>><br>
>><br>
>> All-<br>
>><br>
>> I know we're busy working on the final push to get the docs ready for<br>
>> the Grizzly release. I wanted to remind the team that summit session<br>
>> proposals are due by the end of March.<br>
>><br>
>> You can submit your proposals here:<br>
>><br>
>> <a href="http://summit.openstack.org" target="_blank">http://summit.openstack.org</a>.<br>
>><br>
>> A couple of reminders:<br>
>> * It is not about who proposed first. If we have multiple proposals<br>
>> for the same topic, the sessions most likely will be merged.<br>
>> * We want to have a good balance of community projects vs shiny features.<br>
>> Community projects are projects that benefit the community as a whole<br>
>> (i.e.<br>
>> metadata service, db migration, L3 multi host).<br>
>> * Design sessions are a good way to discuss, build consensus and<br>
>> recruit others to help with implementation.<br>
>> * If you have a mini-topic make a note in your proposal. Mini-topics<br>
>> are something we'll spend around 15mins discussing.<br>
>><br>
>> Here are a few of the topics that would be good candidates to discuss<br>
>> in<br>
>> Portland:<br>
>><br>
>> * How can we make Quantum Simpler ((tm)) For deployers? For developers?<br>
>> * How do we make it easier to deploy Quantum in common cases?<br>
>> * Improved Unit Testing<br>
>> * Improved Tempest Testing<br>
>> * Improved Quantum API Testing in Nova<br>
>> * Improving Quantum Documentation<br>
>> * L3<br>
>> * IPv6 Support<br>
>> * Pluggable IPAM<br>
>> * ACLs<br>
>> * richer NAT API (tcp/udp port forwarding)<br>
>> * Modular L2 and L3<br>
>> * Database Improvements (how to handle trunk chasers, model<br>
>> extensions)<br>
>> * Full Multi-Host L3<br>
>> * Device management and scheduling for services<br>
>> * DNS and Quantum<br>
>> * Bare-metal<br>
>> * Physical Switch Interactions<br>
>> * SR-IOV<br>
>> * VPNaaS (important to separate use cases: site-to-site, sslvpn,<br>
>> mpls-vpn)<br>
>> * LBaaS (how do we extend upon the foundation created in Grizzly)<br>
>><br>
>> Have something that's not in the list? This list does not cover<br>
>> everything, so feel free to propose it on the summit website.<br>
>><br>
>> I hope you're excited as I am for the Grizzly release, and I'm<br>
>> looking forward discussing Havana Portland,<br>
>><br>
>> mark<br>
>><br>
>><br>
>> _______________________________________________<br>
>> OpenStack-dev mailing list<br>
>> <a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
>><br>
><br>
> _______________________________________________<br>
> OpenStack-dev mailing list<br>
> <a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
> _______________________________________________<br>
> OpenStack-dev mailing list<br>
> <a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
><br>
> _______________________________________________<br>
> OpenStack-dev mailing list<br>
> <a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>Dan Wendlandt <div>Nicira, Inc: <a href="http://www.nicira.com" target="_blank">www.nicira.com</a><br><div>twitter: danwendlandt<br>
~~~~~~~~~~~~~~~~~~~~~~~~~~~<br></div></div>
</div>