<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 10pt; color: #000000'>Hi,<br>I wanted to retrieve the gate's DNS server (or google's 8.8.8.8) in order to check external connectivity, but I've been told that I'm running the risk of getting the Jenkins gate blacklisted by either DNS server.<br>It was also brought to my attention, that testing actual external connectivity is not really helpful because my current test actually tests the external server's resolution ability and not the actual Openstack instance.<br><br>So Here's my question:<br>Infra - suppose that I can get devstack to configure it's own DNS server into tempest.conf (from resolve.conf), could I get the gate blacklisted for abusing the DNS (either local or google's)<br>Neutron/Tempest/Maru - What is there to gain from pinging an external address/url? Could pinging the public network's default GW be enough? Please take into account the fact that we now have CrossTenant test checking L3 routing<br><br>Yair<br><br><hr id="zwchr"><div style="color: rgb(0, 0, 0); font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>From: </b>"Yair Fried" <yfried@redhat.com><br><b>To: </b>openstack-infra@lists.openstack.org<br><b>Sent: </b>Monday, December 23, 2013 5:57:44 PM<br><b>Subject: </b>[OpenStack-Infra] Fwd: [openstack-dev] [Openstack][qa][Tempest][Network] [Infra]Test for external connectivity<br><br><br><br>----- Forwarded Message -----<br>From: "Yair Fried" <yfried@redhat.com><br>To: "OpenStack Development Mailing List (not for usage questions)" <openstack-dev@lists.openstack.org><br>Sent: Sunday, December 22, 2013 10:00:52 PM<br>Subject: Re: [openstack-dev] [Openstack][qa][Tempest][Network] [Infra]Test for external connectivity<br><br>Hi Guys,<br>So, I'm done with my patch:<br>https://review.openstack.org/#/c/55146<br>1. ping an external IP<br>2. ping a url to test the dns<br>3. check VM's resolve.conf<br>4. change the dns server and recheck resolve.conf<br><br>My issue now (same as before) is that this test cannot be executed (and therefore pass) on the gate unless the gate is configured for external connectivity.<br><br>A. How do I get the neutron gate to allow it's VM external connectivity (i.e. ping 8.8.8.8)?<br><br>Considering Jeremy's comment, I agree that depending on external ip/url introduces an unnecessary point of failure. However IMO, using multiple addresses is not the best way to proceed , I'd rather test against a local node. Therefore:<br><br>B. Can I get the neutron gate to enter it's own (local) DNS server? A local url?<br>C. I this a change I can push to some project by myself, or do I need someone to change this for me (infra?)?<br><br>I would really like your input in this matter, as I am in the final stretch of this patch and cannot move any farther by myself<br><br>Regards<br>Yair Fried<br><br><hr id="zwchr"><br>From: "Jeremy Stanley" <fungi@yuggoth.org><br>To: openstack-dev@lists.openstack.org<br>Sent: Thursday, November 21, 2013 12:17:52 AM<br>Subject: Re: [openstack-dev] [Openstack][qa][Tempest][Network] Test for external connectivity<br><br>On 2013-11-20 14:07:49 -0800 (-0800), Sean Dague wrote:<br>> On 11/18/2013 02:41 AM, Yair Fried wrote:<br>> [...]<br>> > 2. add fields in tempest.conf for<br>> > * external connectivity = False/True<br>> > * external ip to test against (ie 8.8.8.8)<br>> <br>> +1 for #2. In the gate we'll need to think about what that address<br>> can / should be. It may be different between different AZs. At this<br>> point I'd leave the rest of the options off the table until #2 is<br>> working reliably.<br>[...]<br><br>Having gone down this path in the past, I suggest the test check for<br>no fewer than three addresses, sending several probes to each, and<br>be considered successful if at least one gets a response.<br>-- <br>Jeremy Stanley<br><br>_______________________________________________<br>OpenStack-dev mailing list<br>OpenStack-dev@lists.openstack.org<br>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<br><br>_______________________________________________<br>OpenStack-dev mailing list<br>OpenStack-dev@lists.openstack.org<br>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<br><br>_______________________________________________<br>OpenStack-Infra mailing list<br>OpenStack-Infra@lists.openstack.org<br>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra<br></div><br></div></body></html>