[Openstack-operators] VPNaaS and FWaaS

Kyle Mestery mestery at mestery.com
Mon May 2 13:33:10 UTC 2016

On Fri, Apr 29, 2016 at 8:01 AM, Matt Jarvis
<matt.jarvis at datacentred.co.uk> wrote:
> As some of you on this list may already know, there are issues in the
> Neutron team with development resources on VPNaas and FWaaS, and there have
> been discussions in Austin about deprecating the code from the main Neutron
> codebase. The decision is currently that the code will remain for another 6
> months, after which time if no dev resource has emerged, then they will be
> deprecated.
To be clear here, these will remain in-tree for the next 6 months.
Removal (not deprecation) would happen if no progress has been made on
actually getting contributors for these projects. The code would live
on, they would just be removed from the governance repository meaning
they would not be Neutron's anymore.

> I know there are operators relying on these functions, particularly in the
> public cloud space in Europe, so this would impact those people. I also know
> this list doesn't necessarily reach all of them either, so I will try and
> reach out by other means as well, but it would be very useful to try and get
> a clearer picture of how many people are using VPNaaS and FWaaS. If you are,
> could you please respond to this thread ?
I'm actually really surprised that people are *using* FWaaS. It's been
marked experimental for over 3 years now, and it only recently in
Liberty received work which made it somewhat useful, which was the
ability to apply a firewall on a specific Neutron router rather than
all tenant routers. FWaaS in production sounds pretty risky to me, but
I supposed that our fault for not being clear on it's readiness.

> If we have metrics that a constituent part of the user community need these
> functions, then we can try and find a way to help the Neutron team to cover
> the resourcing gaps.
If people are using these, IMHO that's another reason to keep them
around. I've already said that we have at least one large user of VPN,
so that project will continue to be worked on even if it's removed
from Neutron.


> Matt
> DataCentred Limited registered in England and Wales no. 05611763
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

More information about the OpenStack-operators mailing list