<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>JC,</div>
<div><br>
</div>
<div>We have a complete implementation which I had submitted earlier. But since the code was too large the community decided to move forward in a phased approach. The plan is to provide close to complete compatibility in a multi-phase manner as mentioned in
the blueprint. Phase 4 (internet gateway, VPN, NAT etc) was not added to the blueprint as that was dependent on VPNaas, FWaaS, NATaas.</div>
<div><br>
</div>
Comments inline:
<div><br>
</div>
<div>
<div><br>
<div>
<div>On Feb 19, 2014, at 9:05 AM, Martin, JC <<a href="mailto:jch.martin@gmail.com">jch.martin@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div style="font-size: 16px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
Comments in line.<br>
<br>
JC<br>
On Feb 18, 2014, at 5:21 PM, Rudra Rugge <<a href="mailto:rrugge@juniper.net">rrugge@juniper.net</a>> wrote:<br>
<br>
<blockquote type="cite">Please see inline:<br>
<br>
On Feb 18, 2014, at 2:57 PM, Martin, JC <<a href="mailto:jch.martin@gmail.com">jch.martin@gmail.com</a>> wrote:<br>
<br>
<blockquote type="cite">Maybe I should explain this one a bit.<br>
<br>
Shared network: If a user has defined a shared network, and they used your API to create a VPC, the instances within the VPC will automatically get an interface on the shared network. I don't think that this is the expected behavior<br>
<br>
</blockquote>
<br>
When a user launches a VM in a VPC (AWS) the user needs to specify a subnet (network in openstack terminology) for each of the interfaces. Hence the instances will only get interfaces on the passed subnets/networks. The network being shared or not is not relevant
for the VM launch. AWS APIs need the subnet/network to be passed for a VM launch in VPC.<br>
</blockquote>
<br>
Thanks, this makes sense.<span class="Apple-converted-space"> </span><br>
<br>
<blockquote type="cite"><br>
<br>
<blockquote type="cite">FIP in scope of VPC: I was not talking about the EIP for Internet access, sorry if it was confusing. Since you are not really describing how you create the external networks, it's not clear how you implement the multiple gateways (public
and private) that AWS supports, and how you connects networks to routers and external networks. i.e. are the CIDRs used in the VPC, NAT'ED to be routed in the customer datacenter, in which case, there is a floating IP pool that is private to each private gateway
and VPC (not the 'public' one).<br>
</blockquote>
<br>
Gateways are built using Openstack neutron router resource. Networks are connected to the router interfaces. For internet access cloud administrator needs to provision a floating IP pool for the router to use. For CIDRs used in the VPC we need to implement
a route-table extension which holds the prefix list. The prefix-list or route-table is attached to a subnet(AWS)/network(Openstack). All internal(private) routing is managed by the Openstack router. NAT and VPN are used as next-hops to exit the VPC. In these
cases similar to AWS we need to launch NAT and VPN capable instances as supported by Openstack FWAAS and VPNAAS.<span class="Apple-converted-space"> </span><br>
</blockquote>
<br>
I looked in the code referenced but did not find any router attachment call. Did I miss something ?<span class="Apple-converted-space"> </span><br>
Also, what about these calls: CreateInternetGateway, AttachInternetGateway, CreateCustomerGateway, … don't you need that define how the VPC attach outside ?<br>
</div>
</blockquote>
<div><br>
</div>
<div>[Rudra] We are going with a phased approach as I noted above. The code submitted is only for phase 1 of the blueprint. </div>
<br>
<blockquote type="cite">
<div style="font-size: 16px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<br>
What about mapping the optional attributes too (e.g. InstanceTenancy) ? What's the point of providing only partial compatibility ?<br>
</div>
</blockquote>
<div><br>
</div>
<div>[Rudra] As mentioned above there is full compatibility available but we need to handle this in multiple phases.</div>
<div><br>
</div>
<div><br>
</div>
<div>Rudra</div>
<br>
<blockquote type="cite">
<div style="font-size: 16px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<br>
<blockquote type="cite"><br>
<blockquote type="cite"><br>
It would be useful for you to describe the pre-setup required to do make this works.<br>
</blockquote>
<br>
The only pre-setup needed by the cloud admin is to provide a public pool for floating IP.<span class="Apple-converted-space"> </span><br>
<br>
Rudra<br>
<br>
<blockquote type="cite"><br>
<br>
JC<br>
<br>
<br>
On Feb 18, 2014, at 1:09 PM, Harshad Nakil <<a href="mailto:hnakil@contrailsystems.com">hnakil@contrailsystems.com</a>> wrote:<br>
<br>
<blockquote type="cite">2. It does give full AWS compatibility (except for network ACL which was differed). Shared networks, FIP within scope of VPC is not some thing AWS provides. So it is not partial support.<br>
</blockquote>
<br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<br>
<br>
<br>
</blockquote>
<br>
<br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<br>
</blockquote>
<br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a></div>
</blockquote>
</div>
<br>
</div>
</div>
</body>
</html>