[openstack-dev] [neutron] only one subnet_id is allowed behind a router for vpnservice object

Yongsheng Gong gongysh at unitedstack.com
Fri Dec 6 06:28:07 UTC 2013


ok, My pleasure to help,
I created a bp for it:
https://blueprints.launchpad.net/neutron/+spec/vpn-multiple-subnet


On Fri, Dec 6, 2013 at 2:11 PM, Nachi Ueno <nachi at ntti3.com> wrote:

> Hi Yong
>
> Yes, to support multiple subnet is on the roadmap.
> I'll definitely welcome your help :P
>
> 2013/12/5 Yongsheng Gong <gongysh at unitedstack.com>:
> > I think we should allow more than subnet_id in one vpnservice object.
> > but the model below limits only one subnet_id is used.
> >
> https://github.com/openstack/neutron/blob/master/neutron/extensions/vpnaas.py
> > RESOURCE_ATTRIBUTE_MAP = {
> >
> >     'vpnservices': {
> >         'id': {'allow_post': False, 'allow_put': False,
> >                'validate': {'type:uuid': None},
> >                'is_visible': True,
> >                'primary_key': True},
> >         'tenant_id': {'allow_post': True, 'allow_put': False,
> >                       'validate': {'type:string': None},
> >                       'required_by_policy': True,
> >                       'is_visible': True},
> >         'name': {'allow_post': True, 'allow_put': True,
> >                  'validate': {'type:string': None},
> >                  'is_visible': True, 'default': ''},
> >         'description': {'allow_post': True, 'allow_put': True,
> >                         'validate': {'type:string': None},
> >                         'is_visible': True, 'default': ''},
> >         'subnet_id': {'allow_post': True, 'allow_put': False,
> >                       'validate': {'type:uuid': None},
> >                       'is_visible': True},
> >         'router_id': {'allow_post': True, 'allow_put': False,
> >                       'validate': {'type:uuid': None},
> >                       'is_visible': True},
> >         'admin_state_up': {'allow_post': True, 'allow_put': True,
> >                            'default': True,
> >                            'convert_to': attr.convert_to_boolean,
> >                            'is_visible': True},
> >         'status': {'allow_post': False, 'allow_put': False,
> >                    'is_visible': True}
> >     },
> >
> > with such limit, I don't think there is a way to allow other subnets
> behind
> > the router be vpn exposed!
> >
> > thoughts?
> >
> > Thanks
> > Yong Sheng Gong
> >
> > _______________________________________________
> > OpenStack-dev mailing list
> > OpenStack-dev at lists.openstack.org
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20131206/47dc8e14/attachment.html>


More information about the OpenStack-dev mailing list