<div dir="ltr">Hi,<div><br></div><div><div>In the examples, the IPsec tunnel is set up between the namespaces moon and sun, they are linked by the veth pair. It may be more representative (and easier to set-up) than multiple VMs, as in turn we'll have to be able to support several IPsec instances in the same l3-agent (one for each netns/q-router handling VPN service)<br>
</div>


<div><br></div><div>Regarding openswan features, well, good question... On the one hand, it seems to be actively supported, integrated in most distros, and have all the required features regarding VPNaaS requirements (it may lack some extra features like smartcard/HSM support but that shouldn't be a big deal). On the other hand, it provides less documentation and may be less popular, thus less tested and debugged... (personnally, I never played with it before)<br>



</div><div><br></div><div>One option to use strongswan "as is" may be to use containers, as chroot or lxc with mount-bind, aufs or unionfs. It would provide extra security but the driver woud be more complex...</div>


<div><br></div><div>We could also try to upstream changes to Strongswan (actually it looks like only small changes are needed in charon.c). I'll at least ask on their mailing list, I may have missed something, they may have some options to fire-up several charon daemons on the same host (for developpement/testing purposes?)<br>


</div><div><br></div><div>Last option would be to have netns aware usespace daemons, as discussed <a href="http://www.spinics.net/lists/netdev/msg219734.html" target="_blank">here</a>, but it's another story...<br></div>


<div><br></div><div>Francois.</div>
<div><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">2013/5/22 Paul Michali <span dir="ltr"><<a href="mailto:pcm@cisco.com" target="_blank">pcm@cisco.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<div style="word-wrap:break-word">Do we know if openswan supports all the features we require (I'm just starting to look at docs)?  Do we know if there are any bugs/issues that will concern OS use?<div><br></div><div>

Regards,</div><div><br><div>
<span style="text-indent:0px;letter-spacing:normal;font-variant:normal;text-align:-webkit-auto;font-style:normal;font-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Helvetica;word-spacing:0px">PCM (Paul Michali)<br>

<br></span></div><div><div><div><div>On May 21, 2013, at 4:40 PM, Nachi Ueno wrote:</div><br><blockquote type="cite"><div>Hi Folks<br><br><blockquote type="cite">Francois<br></blockquote>Thank you for your investigation!<br>

<br>I would like to got with openswan because for cmd line config support.<br><blockquote type="cite">Paul, Swami<br></blockquote>Is this OK for you guys?<br><br>Nachi<br><br><br><br>2013/5/21 Eleouet Francois <<a href="mailto:f.eleouet@gmail.com" target="_blank">f.eleouet@gmail.com</a>>:<br>

<blockquote type="cite">In Openswan, both protocol versions are implemented in the same daemon, by<br></blockquote><blockquote type="cite">default, both versions are enabled, IKEv2 parameter must be added to conn<br></blockquote>

<blockquote type="cite">section to choose between versions:<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">ikev2=never #will prevent responding to IKEv2<br></blockquote><blockquote type="cite">

ikev2=insist #will force the use of IKEv2<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">2013/5/20 Paul Michali <<a href="mailto:pcm@cisco.com" target="_blank">pcm@cisco.com</a>><br>

</blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Very cool information Francois<br></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">The example you have is with pluto. That's for IKEv1, right?<br></blockquote></blockquote><blockquote type="cite">
<blockquote type="cite">
<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Is there an equivalent for charon (IKEv2)?<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite">Regards,<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite">PCM (Paul Michali)<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

On May 20, 2013, at 7:22 AM, Eleouet Francois wrote:<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Yes, but It may take some time to land in distros...<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">In the meantime, we could also consider using openswan that hasn't the<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">same caveats: it can be launched with router-specific conf, pid & control<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

socket files, as shown in the following sample:<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">ip netns exec moon ipsec pluto --ctlbase /var/lib/quantum/ipsec/moon/pluto<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">--ipsecdir  /var/lib/quantum/ipsec/moon/ --use-auto --uniqueids<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">--nat_traversal --secretsfile /var/lib/quantum/ipsec/moon/ipsec.secrets<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">ip netns exec moon ipsec addconn --ctlbase<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">/var/lib/quantum/ipsec/moon/pluto.ctl --config<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">/var/lib/quantum/ipsec/moon/ipsec.conf moon-sun<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">ip netns exec moon ipsec whack --ctlbase /var/lib/quantum/ipsec/moon/pluto<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">--listen<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

ip netns exec sun ipsec pluto --ctlbase /var/lib/quantum/ipsec/sun/pluto<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">--ipsecdir  /var/lib/quantum/ipsec/sun/ --use-auto --uniqueids<br></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite">--nat_traversal --secretsfile /var/lib/quantum/ipsec/sun/ipsec.secrets<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">ip netns exec sun ipsec addconn --ctlbase<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">/var/lib/quantum/ipsec/sun/pluto.ctl --config<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">/var/lib/quantum/ipsec/sun/ipsec.conf sun-moon<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">ip netns exec sun ipsec whack --ctlbase /var/lib/quantum/ipsec/sun/pluto<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

--listen<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">ip netns exec sun ipsec whack --ctlbase /var/lib/quantum/ipsec/sun/pluto<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

--name sun-moon --initiate<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">/var/lib/quantum/ipsec/moon/ipsec.conf:<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">config setup<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">        nat_traversal=yes<br></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite">        protostack=auto<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">conn moon-sun<br>
</blockquote>
</blockquote><blockquote type="cite"><blockquote type="cite">        authby=secret<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">        left=192.168.1.1<br></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite">        leftsubnet=<a href="http://10.1.0.0/16" target="_blank">10.1.0.0/16</a><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">        <a href="mailto:leftid=@moon.openstack.org" target="_blank">leftid=@moon.openstack.org</a><br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">        right=192.168.1.2<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">        rightsubnet=<a href="http://10.2.0.0/16" target="_blank">10.2.0.0/16</a><br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">        <a href="mailto:rightid=@sun.openstack.org" target="_blank">rightid=@sun.openstack.org</a><br></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite">        auto=add<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">/var/lib/quantum/ipsec/moon/ipsec.secrets:<br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite">@<a href="http://moon.openstack.org" target="_blank">moon.openstack.org</a> %any : PSK "very secret psk"<br></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">(sun confs are symetrical)<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">2013/5/20 Clark, Robert Graham <<a href="mailto:robert.clark@hp.com" target="_blank">robert.clark@hp.com</a>><br>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Should be easy enough to change the ugly bit upstream.<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<a href="http://wiki.strongswan.org/projects/strongswan/wiki/Contributions" target="_blank">http://wiki.strongswan.org/projects/strongswan/wiki/Contributions</a><br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">From: Eleouet Francois <<a href="mailto:f.eleouet@gmail.com" target="_blank">f.eleouet@gmail.com</a><<a href="mailto:f.eleouet@gmail.com" target="_blank">mailto:f.eleouet@gmail.com</a>>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Reply-To: OpenStack List<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a><<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">mailto:openstack-dev@lists.openstack.org</a>>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Date: Friday, 17 May 2013 19:44<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">To: OpenStack List<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a><<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">mailto:openstack-dev@lists.openstack.org</a>>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Subject: Re: [openstack-dev] VPNaaS<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi,<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">I was curious to know how strongswan was playing with namespaces, so I<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">made some test to figure out how it would work in a quantum router.<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Great news is that Strongswann seems to work well when started in a<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">namespace: daemons open socket in the netns, and IPsec SAs & SPDs are set up<br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">in the router netns and non visible in root namespace.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Bad one is that pid files location are hard coded in strongswan, as a<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">result, it's not trivial to start multiple daemons (like charon and pluto)<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">in different namespaces, here is the only (ugly) workaround I found so far:<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">#set up IPsec connection between two router namespaces on the same host:<br></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns add moon<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns add sun<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

ip link add veth-sun type veth peer name veth-moon<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip link set veth-sun netns sun<br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip link set veth-moon netns moon<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns exec moon ip addr add <a href="http://192.168.1.1/24" target="_blank">192.168.1.1/24</a><<a href="http://192.168.1.1/24" target="_blank">http://192.168.1.1/24</a>> dev<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">veth-moon<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

ip netns exec moon ip addr add <a href="http://10.1.0.1/8" target="_blank">10.1.0.1/8</a><<a href="http://10.1.0.1/8" target="_blank">http://10.1.0.1/8</a>> dev<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">veth-moon<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns exec moon ip link set veth-moon up<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns exec moon ip link set lo up<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns exec sun ip addr add <a href="http://192.168.1.2/24" target="_blank">192.168.1.2/24</a><<a href="http://192.168.1.2/24" target="_blank">http://192.168.1.2/24</a>> dev<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">veth-sun<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

ip netns exec sun ip addr add <a href="http://10.2.0.1/8" target="_blank">10.2.0.1/8</a><<a href="http://10.2.0.1/8" target="_blank">http://10.2.0.1/8</a>> dev veth-sun<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">ip netns exec sun ip link set veth-sun up<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns exec sun ip link set lo up<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

ip netns exec moon ipsec start<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns exec moon ipsec up moon-sun &<br></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">#here comes the uggly part:<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">rm /var/run/charon.pid<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

rm /var/run/pluto.pid<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">rm /var/run/starter.pid<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns exec sun ipsec start<br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ip netns exec sun ipsec up sun-moon &<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">The correponding ipsec.conf<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">config setup<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">        charonstart=yes<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        plutostart=yes<br></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">conn %default<br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        ikelifetime=60m<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

        keylife=20m<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        rekeymargin=3m<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">        keyingtries=1<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        authby=secret<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        keyexchange=ikev2<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

        mobike=no<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">conn moon-sun<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        left=192.168.1.1<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">        leftsubnet=<a href="http://10.1.0.0/16" target="_blank">10.1.0.0/16</a><<a href="http://10.1.0.0/16" target="_blank">http://10.1.0.0/16</a>><br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        <a href="mailto:leftid=@moon.strongswan.org" target="_blank">leftid=@moon.strongswan.org</a><<a href="http://moon.strongswan.org/" target="_blank">http://moon.strongswan.org/</a>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        leftfirewall=yes<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">        right=192.168.1.2<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        rightsubnet=<a href="http://10.2.0.0/16" target="_blank">10.2.0.0/16</a><<a href="http://10.2.0.0/16" target="_blank">http://10.2.0.0/16</a>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        <a href="mailto:rightid=@sun.strongswan.org" target="_blank">rightid=@sun.strongswan.org</a><<a href="http://sun.strongswan.org/" target="_blank">http://sun.strongswan.org/</a>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        auto=add<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">conn sun-moon<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

        left=192.168.1.2<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        leftsubnet=<a href="http://10.2.0.0/16" target="_blank">10.2.0.0/16</a><<a href="http://10.2.0.0/16" target="_blank">http://10.2.0.0/16</a>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        <a href="mailto:leftid=@moon.strongswan.org" target="_blank">leftid=@moon.strongswan.org</a><<a href="http://moon.strongswan.org/" target="_blank">http://moon.strongswan.org/</a>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        leftfirewall=yes<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">        right=192.168.1.1<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        rightsubnet=<a href="http://10.1.0.0/16" target="_blank">10.1.0.0/16</a><<a href="http://10.1.0.0/16" target="_blank">http://10.1.0.0/16</a>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        <a href="mailto:rightid=@sun.strongswan.org" target="_blank">rightid=@sun.strongswan.org</a><<a href="http://sun.strongswan.org/" target="_blank">http://sun.strongswan.org/</a>><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">        auto=add<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Any thoughts on that?<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Francois.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">2013/5/17 Qin Li <<a href="mailto:qili@vmware.com" target="_blank">qili@vmware.com</a><<a href="mailto:qili@vmware.com" target="_blank">mailto:qili@vmware.com</a>>><br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">+ one more comment for 3. Local_cidrs<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

If there are there subnets got from "subnet_id" and user only wish to<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">provide VPN tunnel access to two of them from remote, we need to keep<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">local_cidrs.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Thanks<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

Qin<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

-----Original Message-----<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">From: Qin Li [mailto:<a href="mailto:qili@vmware.com" target="_blank">qili@vmware.com</a><<a href="mailto:qili@vmware.com" target="_blank">mailto:qili@vmware.com</a>>]<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Sent: 2013年5月17日 9:55<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">To: OpenStack Development Mailing List<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Subject: RE: [openstack-dev] VPNaaS<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">For design on <a href="https://wiki.openstack.org/wiki/Quantum/VPNaaS" target="_blank">https://wiki.openstack.org/wiki/Quantum/VPNaaS</a> , I'd like<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">to<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

share some of my comments.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">1. Table IKEPolicy<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">a. encryption_algorithm,  please include more information about algorithm<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">such as cipher mode. The value could be 3des-192-cbc, aes-128-cbc,<br></blockquote></blockquote></blockquote>
<blockquote type="cite">
<blockquote type="cite"><blockquote type="cite">aes-192-cbc, aes-256-cbc, aes-128-gcm-a, aes-256-gcm-a, aes-128-ccm etc.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

So as to support more kinds of cipher modes.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">b. phase1_negotiation_mode, suggest to rename it as phrase1_mode or mode,<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">phrase 1 already contains the meaning "negotiation".<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">c. pfs, since there is no pfs_enable flag, null value of pfs means<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

disabled.  What does it mean if user does not specify it in inputs?<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">d. A minor adjustment suggestion for encryption_algorithm and<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">auth_algorithm, we could combine them into a phrase1 algorithm list named<br></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">phrase1_algs including like 3des-192-cbc-sha1, aes-128-cbc-sha1 etc. So<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">as<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">to support multiple algorithm proposals in one IKE negotiation. This<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">could<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">be considered in next release.<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

2. Table IPSecPolicy<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">a. encryption_algorithm, the same as IKEPolicy b. transform_protocol,<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">encapsulation_mode.  Suggest to remove them to make object and<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">configuration simpler. We can focus on ESP and tunnel mode only for<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

IPSec.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">This is typical site-to-site mode for Cloud user scenario. AH and<br></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">transform mode are rarely used.  The alternative solution is allowed that<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">user can configure IPSecPolicy without specifying them(DB will store them<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">as default value).<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">c. pfs, the same as IKEPolicy<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">d. A minor adjustment suggestion for encryption_algorithm and<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">auth_algorithm, we can combine them into a phrase2 algorithm list named<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">phrase2_algs like 3des-192-cbc-sha1, aes-128-cbc-sha1. So as to support<br></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">multiple algorithm proposals in one IKE negotiation. This could be<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">considered in next release.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">3. local_cidrs<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">If we remove local_cidrs, where can we get local subnets parameter, from<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">subnet id?  Does "subnet_id" contain all the private subnets need to be<br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">protected over VPN tunnel? How to support two local private subnets over<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">the same VPN tunnel(connection)?<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Thanks<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Qin<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">-----Original Message-----<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">From: Nachi Ueno [mailto:<a href="mailto:nachi@ntti3.com" target="_blank">nachi@ntti3.com</a><<a href="mailto:nachi@ntti3.com" target="_blank">mailto:nachi@ntti3.com</a>>]<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Sent: 2013年5月17日 7:10<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">Cc: OpenStack Development Mailing List<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Subject: Re: [openstack-dev] VPNaaS<br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi folks<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

We have meeting today.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">On IRC #openstack-meetings  (It looks like free)<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Agenda :<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">1.Driver archtecture<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<br>
</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><a href="https://docs.google.com/presentation/d/1uoYMl2fAEHTpogAe27xtGpPcbhm7Y3tlHI" target="_blank">https://docs.google.com/presentation/d/1uoYMl2fAEHTpogAe27xtGpPcbhm7Y3tlHI</a><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">w_G1Dy5aQ/edit<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

    [Conclution] keep reviewing<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">    Renamed driver name<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">2. Agent archtecutre<br></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><a href="https://docs.google.com/presentation/d/1e85n2IE38XoYwlsqNvqhKFLox6O01SbguZ" target="_blank">https://docs.google.com/presentation/d/1e85n2IE38XoYwlsqNvqhKFLox6O01SbguZ</a><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Xq7SnSSGo/edit<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">[Conclution]<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

    At first, take Option1 (implement it as sub-class of l3-agent)<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">    VPN-agent will be subclass of subclass of the l3 agent<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

3.local_subnet vs local_cidr<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">    remove local_cidr until BGP is implemented and keep discussion<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">    keep peer_cidr<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">    keep discussions on mailing list<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">4. Next meeting is not scheudled.<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">We are continue discussion on gerrit.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Munites.<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><a href="http://eavesdrop.openstack.org/meetings/openstack_networking__vpn_/2013/op" target="_blank">http://eavesdrop.openstack.org/meetings/openstack_networking__vpn_/2013/op</a><br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">enstack_networking__vpn_.2013-05-16-22.03.html<br></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">2013/5/15 Nachi Ueno <<a href="mailto:nachi@ntti3.com" target="_blank">nachi@ntti3.com</a><<a href="mailto:nachi@ntti3.com" target="_blank">mailto:nachi@ntti3.com</a>>>:<br>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi Llya<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

Wow. Sounds Great!<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Thank you for your contribution.<br></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">Best<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Nachi<br></blockquote>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">2013/5/15 Ilya Shakhat<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><<a href="mailto:ishakhat@mirantis.com" target="_blank">ishakhat@mirantis.com</a><<a href="mailto:ishakhat@mirantis.com" target="_blank">mailto:ishakhat@mirantis.com</a>>>:<br>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi Nachi,<br></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Tatyana and me volunteer for work on UI for VPNaaS. The corresponding<br></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">bp is <a href="https://blueprints.launchpad.net/horizon/+spec/vpnaas-ui" target="_blank">https://blueprints.launchpad.net/horizon/+spec/vpnaas-ui</a>. We<br>

</blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">will start filling the specification soon.<br>

</blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Thanks,<br></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Ilya<br></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">2013/5/15 Nachi Ueno <<a href="mailto:nachi@ntti3.com" target="_blank">nachi@ntti3.com</a><<a href="mailto:nachi@ntti3.com" target="_blank">mailto:nachi@ntti3.com</a>>><br>

</blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi Folks<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

We had VPN meetings yesterday.<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">Agenda :<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite">1.  local_subnet vs local_cidr  --> Keep discussion 2.  Use cidr<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">value or subnet_id?  --> Keep discussion 3.  Task assignment<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">  -  move doc to wiki (Swami) Done<br></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><a href="https://wiki.openstack.org/wiki/Quantum/VPNaaS" target="_blank">https://wiki.openstack.org/wiki/Quantum/VPNaaS</a><br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

  -  Register BP and get approval by Mark (Swami) Done -> H2<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">  -  check default value for lifetime value (Swami) Done<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">  -  Implement Data Model (Swami will push code to the gerrit) by<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">5/20<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">  -  CLI (python-quantum client) work (Swami will push code to the<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

gerrit) by 5/20<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

  -  Implement Driver (Nachi & PCM ) by 5/31<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">     - Investigate strongswan<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">     -  rpc (spec needed)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">     - Design driver archtecutre (spec needed)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">     - Write driver code<br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">  - Instation instructions on Wiki 5/31<br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">  -  Devstack support (nati) late June?<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

  -  Write openstack network api document wiki (Sachin)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">  -  Horizon work (needs contributer)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">  -  Tempest (needs contributer)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Next meeting is 5/16 Thursday at 3pm (PST) . On IRC<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">#openstack-meetings<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Meeting ended Tue May 14 01:00:58 2013 UTC.  Information about<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

MeetBot at <a href="http://wiki.debian.org/MeetBot" target="_blank">http://wiki.debian.org/MeetBot</a> . (v 0.1.4)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Minutes:<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><a href="http://eavesdrop.openstack.org/meetings/openstack_networking_vpn/201" target="_blank">http://eavesdrop.openstack.org/meetings/openstack_networking_vpn/201</a><br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

3/openstack_networking_vpn.2013-05-14-00.06.html<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">Minutes (text):<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><a href="http://eavesdrop.openstack.org/meetings/openstack_networking_vpn/201" target="_blank">http://eavesdrop.openstack.org/meetings/openstack_networking_vpn/201</a><br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">3/openstack_networking_vpn.2013-05-14-00.06.txt<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

Log:<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<a href="http://eavesdrop.openstack.org/meetings/openstack_networking_vpn/201" target="_blank">http://eavesdrop.openstack.org/meetings/openstack_networking_vpn/201</a><br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">3/openstack_networking_vpn.2013-05-14-00.06.log.htm<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

Thanks!<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

Nachi Ueno<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

2013/5/10 Nachi Ueno <<a href="mailto:nachi@ntti3.com" target="_blank">nachi@ntti3.com</a><<a href="mailto:nachi@ntti3.com" target="_blank">mailto:nachi@ntti3.com</a>>>:<br></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi Paul<br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">Thanks for your contributions! :)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Nachi<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
2013/5/10 Paul Michali <<a href="mailto:pcm@cisco.com" target="_blank">pcm@cisco.com</a><<a href="mailto:pcm@cisco.com" target="_blank">mailto:pcm@cisco.com</a>>>:<br>
</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">Sure! Glad to work with you Nachi. Anything I can do to help out<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>
<blockquote type="cite">
<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">on the project!<br></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">I'll start looking at strongswan and how to configure.<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Regards,<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">PCM (Paul Michali)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">On May 10, 2013, at 12:35 PM, Nachi Ueno wrote:<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">Hi Paul<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Sounds Great.<br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">The first driver will be strong-swan based.<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<a href="http://www.strongswan.org/" target="_blank">http://www.strongswan.org/</a><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">How about work with me to implement strong-swan vpn driver?<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Honestly, i'm new to strong-swan, so I'm very appreciate if you<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">could try strong-swan on ubuntu and share how to configure it<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">based on current API model.<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
Thanks<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Nachi<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">2013/5/10 Paul Michali <<a href="mailto:pcm@cisco.com" target="_blank">pcm@cisco.com</a><<a href="mailto:pcm@cisco.com" target="_blank">mailto:pcm@cisco.com</a>>>:<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Naci, Mark, Swami, Sachin, et al,<br></blockquote></blockquote></blockquote>
</blockquote>
</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Any suggestions on where/how I can help on this? I'm new to OS<br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">(just working<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">it for a few months), so no specific expertise area, but have<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">bandwidth to<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">contribute.<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Also, any pointers to information that will help me get up to<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">speed on this<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">would be appreciated (Mark gave me link to Amazon URL for info on<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">what they<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">provide for VPNaaS). I was going to look at LBaaS code next week<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">and have<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">been monitoring those discussions, as there seem to be some<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">parallels there.<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">If there are companion info that you think would help, let me<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">know.<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Regards,<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">PCM (Paul Michali)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">On May 9, 2013, at 9:12 PM, Nachi Ueno wrote:<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi Folks<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">We have meeting about VPN today.<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">#Conclusions<br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">1. We agreed ipsec api<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
<a href="https://blueprints.launchpad.net/quantum/+spec/vpnaas-python-apis" target="_blank">https://blueprints.launchpad.net/quantum/+spec/vpnaas-python-apis</a><br></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">2. Swami will push api CRUD code to review (continue discussion<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">on<br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">code)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><a href="https://blueprints.launchpad.net/quantum/+spec/vpnaas-python-apis" target="_blank">https://blueprints.launchpad.net/quantum/+spec/vpnaas-python-apis</a><br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">3. We agreed first implementation vpn architecture<br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">4. Next meeting is 5/13 PST 5:00 PM on #openstack-meetings<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">#Questions for IPSec API<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">1 psk_key -> psk (agreed)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
2 For ipsecpolicy table, suggest to split lifetime into two parts<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">lifetime_s(per seconds) and lifetime_b(per kilobytes)   -><br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">updated<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">table (agreed)<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">3 change back "cidrs" from subnet (or network)  -> check marks's<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">thought<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">4 For APIs, can we shorten the naming such as change  -> keep<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">current<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">longer style for reability<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">#Project Management (Task)<br>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">-  move doc to wiki (Swami)<br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite">-  Register BP and get approval by Mark (Swami)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote>

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite">-  check default value for lifetime value (Swami)<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote>

</blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">
<blockquote type="cite">
-  Discuss Archtecture<br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote><blockquote type="cite">

<blockquote type="cite"><blockquote type="cite"></blockquote></blockquote></blockquote></div></blockquote></div></div></div></div></div>...<br><br>[Message tronqué]  <br>_______________________________________________<br>


OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div></div></div>