[Openstack-operators] VPNaaS and FWaaS

Matt Jarvis matt.jarvis at datacentred.co.uk
Mon May 2 17:03:52 UTC 2016


Thanks for the clarification Kyle.

On 2 May 2016 at 14:33, Kyle Mestery <mestery at mestery.com> wrote:

> On Fri, Apr 29, 2016 at 8:01 AM, Matt Jarvis
> <matt.jarvis at datacentred.co.uk> wrote:
> > As some of you on this list may already know, there are issues in the
> > Neutron team with development resources on VPNaas and FWaaS, and there
> have
> > been discussions in Austin about deprecating the code from the main
> Neutron
> > codebase. The decision is currently that the code will remain for
> another 6
> > months, after which time if no dev resource has emerged, then they will
> be
> > deprecated.
> >
> To be clear here, these will remain in-tree for the next 6 months.
> Removal (not deprecation) would happen if no progress has been made on
> actually getting contributors for these projects. The code would live
> on, they would just be removed from the governance repository meaning
> they would not be Neutron's anymore.
>
> > I know there are operators relying on these functions, particularly in
> the
> > public cloud space in Europe, so this would impact those people. I also
> know
> > this list doesn't necessarily reach all of them either, so I will try and
> > reach out by other means as well, but it would be very useful to try and
> get
> > a clearer picture of how many people are using VPNaaS and FWaaS. If you
> are,
> > could you please respond to this thread ?
> >
> I'm actually really surprised that people are *using* FWaaS. It's been
> marked experimental for over 3 years now, and it only recently in
> Liberty received work which made it somewhat useful, which was the
> ability to apply a firewall on a specific Neutron router rather than
> all tenant routers. FWaaS in production sounds pretty risky to me, but
> I supposed that our fault for not being clear on it's readiness.
>
> > If we have metrics that a constituent part of the user community need
> these
> > functions, then we can try and find a way to help the Neutron team to
> cover
> > the resourcing gaps.
> >
> If people are using these, IMHO that's another reason to keep them
> around. I've already said that we have at least one large user of VPN,
> so that project will continue to be worked on even if it's removed
> from Neutron.
>
> Thanks,
> Kyle
>
> > Matt
> >
> > DataCentred Limited registered in England and Wales no. 05611763
> > _______________________________________________
> > OpenStack-operators mailing list
> > OpenStack-operators at lists.openstack.org
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
> >
>

-- 
DataCentred Limited registered in England and Wales no. 05611763
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160502/4c69feac/attachment.html>


More information about the OpenStack-operators mailing list