<div dir="ltr">Hi Felix,<br><br>Thanks for your feedback.<br><br>The ovn-bgp-agent is a very powerful application to interconnect multi-tenancy networks using BGP evpn type 5. This application integrates the br-ext with FRR and provides the interconnect using the BGP session. That would be one way to do it, but the problem is that bgpvpn service plugin is only integrated with Neutron. Imagine in the future that we need to integrate the tenant network between different cloud solutions (e.g using OpenStack, Kubernetes, LXD, etc.)... this could be possible if everyone uses OVN as a network backend and ovn-ic to interconnect the LRPs between AZs.<br><br>Maybe I'm missing some point and there's no community interest in something like that. But back to the OpenStack/Neutron case, it might be interesting to continue the work on Neutron interconnect (or something like that), but maybe this time with the service plugin for ovn-ic.<br><br>Regards,<div>Roberto</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Em qui., 9 de mar. de 2023 às 05:24, Felix Hüttner <felix.huettner@mail.schwarz> escreveu:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-4422666856872553347">
<div lang="DE" style="overflow-wrap: break-word;">
<div class="m_-1709667418282356426WordSection1">
<p class="MsoNormal"><span>Hi Roberto,<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">We will face a similar issue in the future and have also looked at ovn-interconnect (but not yet tested it).<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">There is also ovn-bgp-agent [1] which has an evpn mode that might be relevant.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Whatever you find I would definitely be interested in your results<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">[1] <a href="https://opendev.org/x/ovn-bgp-agent" target="_blank">
https://opendev.org/x/ovn-bgp-agent</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Felix Huettner<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<div style="border-top:none;border-right:none;border-bottom:none;border-left:1.5pt solid blue;padding:0cm 0cm 0cm 4pt">
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b>From:</b> Roberto Bartzen Acosta <<a href="mailto:roberto.acosta@luizalabs.com" target="_blank">roberto.acosta@luizalabs.com</a>>
<br>
<b>Sent:</b> Wednesday, March 8, 2023 9:49 PM<br>
<b>To:</b> <a href="mailto:openstack-discuss@lists.openstack.org" target="_blank">openstack-discuss@lists.openstack.org</a><br>
<b>Cc:</b> Tiago Pires <<a href="mailto:tiago.pires@luizalabs.com" target="_blank">tiago.pires@luizalabs.com</a>><br>
<b>Subject:</b> [neutron] Openstack Network Interconnection<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Hey folks.<br>
<br>
Does anyone have ideas on how to interconnect different Openstack deployments?<br>
Consider that we have multiple Datacenters and need to interconnect tenant networks. How could this be done in the context of OpenStack (without using VPN) ?
<br>
<br>
We have some ideas about the usage of OVN-IC (OVN Interconnect). It looks like a great solution to create a network layer between DCs/AZs with the help of the OVN driver. However, Neutron does not support the Transit Switches (OVN-IC design) that are required
for this application.<br>
<br>
We've seen references to abandoned projects like [1] [2] [3].<br>
<br>
Does anyone use something similar in production or have an idea about how to do it? Imagine that we need to put workloads on two different AZs that run different Openstack installations, and we want to communicate with the local networks without using a FIP.<u></u><u></u></p>
<div>
<p class="MsoNormal">I believe that the most coherent way to maintain databases consistent in each Openstack would be an integration with Neutron, but I haven't seen any movement on that.<br>
<br>
Regards,<br>
Roberto<br>
<br>
[1] <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DGizLmSiH1Q0&data=05%7C01%7C%7C7c899166e1ec438b1f7908db20182331%7Cd04f47175a6e4b98b3f96918e0385f4c%7C0%7C0%7C638139060268571269%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=NdmjPTTQd9HisMRNF8yim%2BjOeXZrlqVY6Q4tKTpb%2FPo%3D&reserved=0" target="_blank">
https://www.youtube.com/watch?v=GizLmSiH1Q0</a><br>
[2] <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fspecs.openstack.org%2Fopenstack%2Fneutron-specs%2Fspecs%2Fstein%2Fneutron-interconnection.html&data=05%7C01%7C%7C7c899166e1ec438b1f7908db20182331%7Cd04f47175a6e4b98b3f96918e0385f4c%7C0%7C0%7C638139060268571269%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=MSh%2BPpWY6L1UoA5kE21cn5khtFWgq%2F8J00kWdOLmHCI%3D&reserved=0" target="_blank">
https://specs.openstack.org/openstack/neutron-specs/specs/stein/neutron-interconnection.html</a><br>
[3] <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fopendev.org%2Fx%2Fneutron-interconnection&data=05%7C01%7C%7C7c899166e1ec438b1f7908db20182331%7Cd04f47175a6e4b98b3f96918e0385f4c%7C0%7C0%7C638139060268571269%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=pb%2B85Y2eobtcu7HbcZpdN68qNjmd2WuedSLteQ3cli8%3D&reserved=0" target="_blank">
https://opendev.org/x/neutron-interconnection</a><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.5pt;font-family:Arial,sans-serif;color:rgb(34,34,34)"><u></u> <u></u></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal" style="background:white"><i><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(34,34,34)">‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes
no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’.</span></i><span style="font-size:12.5pt;font-family:Arial,sans-serif;color:rgb(34,34,34)"><u></u><u></u></span></p>
</div>
<div>
<p style="text-align:justify;background:white"><i><span style="font-size:7.5pt;font-family:Arial,sans-serif;color:rgb(34,34,34)"> ‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa
não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.</span></i><span style="font-size:12.5pt;font-family:Arial,sans-serif;color:rgb(34,34,34)"><u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<p style="font-family:Calibri;font-size:11pt">Diese E Mail enthält möglicherweise vertrauliche Inhalte und ist nur für die Verwertung durch den vorgesehenen Empfänger bestimmt. Sollten Sie nicht der vorgesehene Empfänger sein, setzen Sie den Absender bitte
unverzüglich in Kenntnis und löschen diese E Mail. Hinweise zum Datenschutz finden Sie
<a href="https://www.datenschutz.schwarz" target="_blank">hier</a>.</p>
</div>
</div></blockquote></div>
<br>
<div style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em"><div style="color:rgb(97,97,97);font-family:'Open Sans';font-size:14px;line-height:21px;background-color:rgb(255,255,255)"><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8000001907349px;line-height:normal"><div style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em"><div style="color:rgb(97,97,97);font-family:'Open Sans';font-size:14px;line-height:21px"><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8000001907349px;line-height:normal"><br></div></div></div><div style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em"><i style="font-family:arial,sans-serif;font-size:x-small">‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’.</i></div><div style="font-family:Arial,Helvetica,sans-serif;font-size:1.3em"><p style="font-family:arial,sans-serif;text-align:justify"><i><font size="1"> </font></i><i><font size="1">‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.</font></i></p></div></div></div></div>