[Neutron] Tap as a service
Hello, Can anyone help me with the setup of Tap as a Service on Openstack with Juju and Maas? I've seen tutorials for installing it on DevStack but nothing for large scale setups. So far I've tried doing a similar process to this: https://zhuanlan.zhihu.com/p/101599786 basically install the apt on the neutron_api lxd and on the compute nodes, with configurations that are done in the above tutorial. Sounds simple enough. But the tap_services and tap_flows stay in Down state. Any ideas??? Also I'm open to another way to do port mirroring if this doesn't work. JB
Hi, If you have technical questions I can help (I hope), but sadly I don't know if deployment tool integration is ready for tap-as-a-service. Lajos Katona (lajoskatona) altidor JB <atidor12@gmail.com> ezt írta (időpont: 2023. jún. 29., Cs, 19:31):
Hello, Can anyone help me with the setup of Tap as a Service on Openstack with Juju and Maas? I've seen tutorials for installing it on DevStack but nothing for large scale setups. So far I've tried doing a similar process to this: https://zhuanlan.zhihu.com/p/101599786 basically install the apt on the neutron_api lxd and on the compute nodes, with configurations that are done in the above tutorial. Sounds simple enough. But the tap_services and tap_flows stay in Down state. Any ideas??? Also I'm open to another way to do port mirroring if this doesn't work.
JB
Thanks! Basically I need to port mirror traffic to an IDS instance. TaaaS seemed the most promising option. I couldn't find a documentated way of installing it on openstack with juju and maas and tried to do something similar than the devstack multi-node (link). But my tap flows and ports stay down. do you know of a better option to port mirror? My logic was : install taas on the neutron lxd and all the nodes + necessary configurations. Is there something I'm missing? JB On Fri, Jun 30, 2023, 03:28 Lajos Katona <katonalala@gmail.com> wrote:
Hi, If you have technical questions I can help (I hope), but sadly I don't know if deployment tool integration is ready for tap-as-a-service.
Lajos Katona (lajoskatona)
altidor JB <atidor12@gmail.com> ezt írta (időpont: 2023. jún. 29., Cs, 19:31):
Hello, Can anyone help me with the setup of Tap as a Service on Openstack with Juju and Maas? I've seen tutorials for installing it on DevStack but nothing for large scale setups. So far I've tried doing a similar process to this: https://zhuanlan.zhihu.com/p/101599786 basically install the apt on the neutron_api lxd and on the compute nodes, with configurations that are done in the above tutorial. Sounds simple enough. But the tap_services and tap_flows stay in Down state. Any ideas??? Also I'm open to another way to do port mirroring if this doesn't work.
JB
Hi, I suppose you would like to use taas with ovs, am I right? For that be sure that agent_extension taa is loaded, in the ovs-agent log: INFO neutron.agent.agent_extensions_manager [-] Loaded agent extensions: ['taas'] If that is ok, when you create tap-services or tap-mirrors (and for the start of the agent) you can check the ovs flows if everything is as expected. For some help please check my doc under review: https://review.opendev.org/c/openstack/tap-as-a-service/+/828382 Hope you can move forward. Lajos altidor JB <atidor12@gmail.com> ezt írta (időpont: 2023. jún. 30., P, 14:10):
Thanks! Basically I need to port mirror traffic to an IDS instance. TaaaS seemed the most promising option. I couldn't find a documentated way of installing it on openstack with juju and maas and tried to do something similar than the devstack multi-node (link). But my tap flows and ports stay down. do you know of a better option to port mirror? My logic was : install taas on the neutron lxd and all the nodes + necessary configurations. Is there something I'm missing? JB
On Fri, Jun 30, 2023, 03:28 Lajos Katona <katonalala@gmail.com> wrote:
Hi, If you have technical questions I can help (I hope), but sadly I don't know if deployment tool integration is ready for tap-as-a-service.
Lajos Katona (lajoskatona)
altidor JB <atidor12@gmail.com> ezt írta (időpont: 2023. jún. 29., Cs, 19:31):
Hello, Can anyone help me with the setup of Tap as a Service on Openstack with Juju and Maas? I've seen tutorials for installing it on DevStack but nothing for large scale setups. So far I've tried doing a similar process to this: https://zhuanlan.zhihu.com/p/101599786 basically install the apt on the neutron_api lxd and on the compute nodes, with configurations that are done in the above tutorial. Sounds simple enough. But the tap_services and tap_flows stay in Down state. Any ideas??? Also I'm open to another way to do port mirroring if this doesn't work.
JB
participants (2)
-
altidor JB
-
Lajos Katona