<div dir="ltr">Hi Marios, thanks for raising this.<div><br></div><div>There is in progress blueprint that should address some issues with neutron ha deployment - <a href="https://blueprints.launchpad.net/neutron/+spec/l3-high-availability">https://blueprints.launchpad.net/neutron/+spec/l3-high-availability</a>.</div>
<div><br></div><div>Right now neutron-dhcp agent can be configured as active/active.</div><div><br></div><div>But l3-agent and metadata-agent still should be active/passive, </div><div>afaik the best approach would be to use corosync+pacemaker, that is also stated in official documentation <a href="http://docs.openstack.org/high-availability-guide/content/ch-network.html">http://docs.openstack.org/high-availability-guide/content/ch-network.html</a>.</div>
<div><br></div><div>What other choices, except corosync+pacemaker, do we have for neutron ha?</div><div><br></div><div>Thanks</div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Apr 7, 2014 at 11:18 AM, <a href="mailto:marios@redhat.com">marios@redhat.com</a> <span dir="ltr"><<a href="mailto:mandreou@redhat.com" target="_blank">mandreou@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Tripleo/Neutron:<br>
<br>
I've recently found some cycles to look into Neutron. Mostly because<br>
networking rocks, but also so we can perhaps better address Neutron<br>
related issues/needs down the line. I thought it may be good to ask the<br>
wider team if there are others that are also interested in<br>
Neutron&Tripleo. We could form a loose focus group to discuss blueprints<br>
and review each other's code/chase up with cores. My search may have<br>
missed earlier discussions in openstack-dev[Tripleo][Neutron] and<br>
Tripleo bluprints so my apologies if this has already been started<br>
somewhere. If any of the above is of interest then:<br>
<br>
*is the following list sane - does it make sense to pick these off or<br>
are these 'nice to haves' but not of immediate concern? Even just<br>
validating, prioritizing and recording concerns could be worthwhile for<br>
example?<br>
* are you interested in discussing any of the following further and<br>
perhaps investigating and/or helping with blueprints where/if necessary?<br>
<br>
Right now I have:<br>
<br>
[Undercloud]:<br>
<br>
1. Define a neutron node (tripleo-image-elements/disk-image-builder) and<br>
make sure it deploys and scales ok (tripleo-heat-templates/tuskar). This<br>
comes under by lifeless blueprint at<br>
<a href="https://blueprints.launchpad.net/tripleo/+spec/tripleo-tuskar-deployment-scaling-topologies" target="_blank">https://blueprints.launchpad.net/tripleo/+spec/tripleo-tuskar-deployment-scaling-topologies</a><br>
<br>
2. HA the neutron node. For each neutron services/agents of interest<br>
(neutron-dhcp-agent, neutron-l3-agent, neutron-lbaas-agent ... ) fix any<br>
issues with running these in HA - perhaps there are none \o/? Useful<br>
whether using a dedicated Neutron node or just for HA the<br>
undercloud-control node<br>
<br>
3. Does it play with Ironic OK? I know there were some issues with<br>
Ironic and Neutron DHCP, though I think this has now been addressed.<br>
Other known/unkown bugs/issues with Ironic/Neutron - the baremetal<br>
driver will be deprecated at some point...<br>
<br>
4. Subnetting. Right now the undercloud uses a single subnet. Does it<br>
make sense to have multiple subnets here - one point I've heard is for<br>
segregation of your undercloud nodes (i.e. <1 broadcast domain).<br>
<br>
5. Security. Are we at least using Neutron as we should be in the<br>
Undercloud, security-groups, firewall rules etc?<br>
<br>
[Overcloud]:<br>
<br>
1. Configuration. In the overcloud "it's just Neutron". So one concern<br>
is which and how to expose neutron configuration options via Tuskar-UI.<br>
We would pass these through the deployment heat-template for definition<br>
of Neutron plugin-specific .conf files (like dnsmasq-neutron.conf) for<br>
example or initial definition of tenant subnets and router(s) for access<br>
to external networks.<br>
<br>
2. 3. ???<br>
<br>
<br>
thanks! marios<br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</blockquote></div><br></div>