<div dir="ltr">One way to look at the VLANs is that it identifies a security zone that meets some regulatory compliance standards. The VLANs on each rack are separated from other VLANs by using VRF. Tenants in our case map to applications. So each application is served by a VIP with a pool of VMs. So all applications needing regulatory compliance would map to this VLAN. Make sense? <div>
<br></div><div>As far your question about keeping mac_addresses unique, isn't that achieved by the fact that each VM will have a unique mac since it is the same control plane allocating the mac address? Or did I miss something??</div>
<div><br></div><div>Vinay</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Feb 11, 2014 at 12:32 PM, Aaron Rosen <span dir="ltr"><<a href="mailto:aaronorosen@gmail.com" target="_blank">aaronorosen@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I believe it would need to be like: <br><div><br></div><div> <span style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:12px;line-height:15.600000381469727px;white-space:pre-wrap">network_vlan_ranges = </span><span style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:12px;line-height:15.600000381469727px;white-space:pre-wrap">physnet1:100:300, </span><span style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:12px;line-height:15.600000381469727px;white-space:pre-wrap"> phynet2:100:300, </span><span style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:12px;line-height:15.600000381469727px;white-space:pre-wrap">phynet3:100:300 </span></div>
<div class="gmail_extra"><br></div><div class="gmail_extra">Additional comments inline: <br><br><div class="gmail_quote"><div><div class="h5">On Mon, Feb 10, 2014 at 8:49 PM, Vinay Bannai <span dir="ltr"><<a href="mailto:vbannai@gmail.com" target="_blank">vbannai@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Bob and Kyle, <div><br></div><div>Thanks for your review. </div><div>We looked at this option and it seems it might meet our needs. Here is what we intend to do:</div>
<div><br></div><div>Let's say we have three racks (each rack supports three VLANs - 100, 200 and 300). </div>
<div>We create the following config file for the neutron server</div><div><br></div><div><table border="0" cellpadding="0" cellspacing="0" style="width:1100px;border-top-left-radius:0px!important;margin-bottom:20px;min-height:inherit!important;padding:0px!important;outline:0px!important;float:none!important;vertical-align:baseline!important;margin-right:0px!important;line-height:1.3em!important;border-collapse:collapse;border-top-right-radius:0px!important;height:auto!important;overflow:visible!important;font-size:12px;border-bottom-right-radius:0px!important;margin-left:0px!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;margin-top:0px!important;border:1px solid black;border-bottom-left-radius:0px!important;background-image:none!important">
<tbody style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important"><tr style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important">
<td style="border:1px solid black;padding:5px;font-size:1em!important;line-height:1.3em!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;float:none!important;height:auto!important;outline:0px!important;overflow:visible!important;vertical-align:baseline!important;width:auto!important;min-height:inherit!important;color:rgb(175,175,175)!important">
<br><br></td><td style="border:1px solid black;padding:5px;width:1072px;font-size:1em!important;line-height:1.3em!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;float:none!important;height:auto!important;outline:0px!important;overflow:visible!important;vertical-align:baseline!important;min-height:inherit!important">
<div style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important">
<div style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px 1em!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important;white-space:pre!important">
<br></div><div style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px 1em!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important;white-space:pre!important">
<code style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;font-size:1em!important;min-height:inherit!important">tenant_network_type = vlan</code></div>
<div style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px 1em!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important;white-space:pre!important">
<code style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;font-size:1em!important;min-height:inherit!important">network_vlan_ranges = physnet1:100:300</code></div>
<div style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px 1em!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important;white-space:pre!important">
<code style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;font-size:1em!important;min-height:inherit!important">network_vlan_ranges = phynet2:100:300</code></div>
<div style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px 1em!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important;white-space:pre!important">
<code style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;font-size:1em!important;min-height:inherit!important">network_vlan_ranges = phynet3:100:300</code></div>
<div style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px 1em!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important;white-space:pre!important">
<code style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;font-size:1em!important;min-height:inherit!important">integration_bridge = br</code><code style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;font-weight:bold!important;font-size:1em!important;min-height:inherit!important;color:rgb(255,20,147)!important">-int</code></div>
<div style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px 1em!important;vertical-align:baseline!important;width:auto!important;font-size:1em!important;min-height:inherit!important;white-space:pre!important">
<code style="border-top-left-radius:0px!important;border-top-right-radius:0px!important;border-bottom-right-radius:0px!important;border-bottom-left-radius:0px!important;background-image:none!important;border:0px!important;float:none!important;min-height:auto!important;line-height:1.3em!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;font-size:1em!important;min-height:inherit!important">bridge_mappings = physnet1:br-eth1, physnet2:br-eth1, physnet3:br-eth1</code></div>
</div></td></tr></tbody></table></div><div class="gmail_extra">Is this what you meant?</div><span><font color="#888888"><div class="gmail_extra"><br></div><div class="gmail_extra">Vinay</div></font></span><div>
<div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Sun, Feb 9, 2014 at 6:03 PM, Robert Kukura <span dir="ltr"><<a href="mailto:rkukura@redhat.com" target="_blank">rkukura@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>On 02/09/2014 12:56 PM, Kyle Mestery wrote:<br>
> On Feb 6, 2014, at 5:24 PM, Vinay Bannai <<a href="mailto:vbannai@gmail.com" target="_blank">vbannai@gmail.com</a>> wrote:<br>
><br>
>> Hello Folks,<br>
>><br>
>> We are running into a situation where we are not able to create multiple provider networks with the same VLAN id. We would like to propose a solution to remove this restriction through a configuration option. This approach would not conflict with the present behavior where it is not possible to create multiple provider networks with the same VLAN id.<br>
>><br>
>> The changes should be minimal and would like to propose it for the next summit. The use case for this need is documented in the blueprint specification.<br>
>> Any feedback or comments are welcome.<br>
>><br>
>> <a href="https://blueprints.launchpad.net/neutron/+spec/duplicate-providernet-vlans" target="_blank">https://blueprints.launchpad.net/neutron/+spec/duplicate-providernet-vlans</a><br>
>><br>
> Hi Vinay:<br>
><br>
> This problem seems straightforward enough, though currently you are right<br>
> in that we don’t allow multiple Neutron networks to have the same segmentation<br>
> ID. I’ve added myself as approver for this BP and look forward to further<br>
> discussions of this before and during the upcoming Summit!<br>
<br></div></blockquote></div></div></div></div></div></blockquote><div><br></div></div></div><div>I kind of feel like allowing a vlan to span multiple networks is kind of wonky. I feel like a better abstraction would be if we had better access control over shared networks between tenants. This way we could explicitly allow two tenants to share a network. Is this the problem you are trying to solve though doing it with the same vlan? How do you plan on enforcing that mac_addresses are unique on the same physical network? </div>
<div class="">
<div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
</div>Multiple networks with network_type of 'vlan' are already allowed to<br>
have the same segmentation ID with the ml2, openvswitch, or linuxbridge<br>
plugins - the networks just need to have different physical_network<br>
names.</blockquote></div></div></div></div></div></blockquote><div><br></div></div><div>This is the same for the NSX plugin as well. </div><div><div class="h5"><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> If they have the same network_type, physical_network, and<br>
segmentation_id, they are the same network. What else would distinguish<br>
them from each other?<br>
<br>
Could your use case be addressed by simply using different<br>
physical_network names for each rack? This would provide independent<br>
spaces of segmentation_ids for each.<br>
<br>
-Bob<br>
<div><div><br>
><br>
> Thanks!<br>
> Kyle<br>
><br>
>> Thanks<br>
>> --<br>
>> Vinay Bannai<br>
>> Email: <a href="mailto:vbannai@gmail.com" target="_blank">vbannai@gmail.com</a><br>
>> Google Voice: <a href="tel:415%20938%207576" value="+14159387576" target="_blank">415 938 7576</a><br>
>> _______________________________________________<br>
>> OpenStack-dev mailing list<br>
>> <a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
><br>
> _______________________________________________<br>
> OpenStack-dev mailing list<br>
> <a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
<br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Vinay Bannai<br>Email: <a href="mailto:vbannai@gmail.com" target="_blank">vbannai@gmail.com</a><br><span>Google Voice: <span title="Call with Google Voice"><a href="tel:415%20938%207576" value="+14159387576" target="_blank">415 938 7576</a></span></span><br>
</div></div></div></div>
<br>_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div></div></div><br></div></div>
<br>_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Vinay Bannai<br>Email: <a href="mailto:vbannai@gmail.com">vbannai@gmail.com</a><br>Google Voice: 415 938 7576<br>
</div>