)]}'
{"specs/train/custom_ethertypes.rst":[{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"4f84e40877685ce1cff21a7c830ad27d2e126ab6","unresolved":false,"context_lines":[{"line_number":18,"context_line":""},{"line_number":19,"context_line":"This specification proposes adding to the Security Group API the capability to"},{"line_number":20,"context_line":"specify standard security group behaviors (allow, deny) for custom ethertypes,"},{"line_number":21,"context_line":"with the aim of implementing these controls in the OVS firewall."},{"line_number":22,"context_line":""},{"line_number":23,"context_line":""},{"line_number":24,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_f0faa8b7","line":21,"range":{"start_line":21,"start_character":51,"end_line":21,"end_character":54},"updated":"2019-07-01 17:31:30.000000000","message":"and OVN?  you mention it below","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"c02535484bc97a55c0aa6053450812aa3df448df","unresolved":false,"context_lines":[{"line_number":18,"context_line":""},{"line_number":19,"context_line":"This specification proposes adding to the Security Group API the capability to"},{"line_number":20,"context_line":"specify standard security group behaviors (allow, deny) for custom ethertypes,"},{"line_number":21,"context_line":"with the aim of implementing these controls in the OVS firewall."},{"line_number":22,"context_line":""},{"line_number":23,"context_line":""},{"line_number":24,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_732242a5","line":21,"range":{"start_line":21,"start_character":51,"end_line":21,"end_character":54},"in_reply_to":"9fb8cfa7_f0faa8b7","updated":"2019-07-01 18:28:39.000000000","message":"Done","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"4f84e40877685ce1cff21a7c830ad27d2e126ab6","unresolved":false,"context_lines":[{"line_number":38,"context_line":"deployment time tools like TripleO or Ansible are unable to handle it. "},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"Use case: Customer is running an application using InfiniBand (ethertype 0x4008)"},{"line_number":41,"context_line":"in OpenStack, and that OpenStack transitions from iptables_hybrid to ovs"},{"line_number":42,"context_line":"firewall. The Infiniband traffic is blocked by the ovs firewall, and at present"},{"line_number":43,"context_line":"the Neutron API offers no methodology to unblock it."},{"line_number":44,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_d0bc4407","line":41,"range":{"start_line":41,"start_character":69,"end_line":41,"end_character":72},"updated":"2019-07-01 17:31:30.000000000","message":"s/OVS","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"c02535484bc97a55c0aa6053450812aa3df448df","unresolved":false,"context_lines":[{"line_number":38,"context_line":"deployment time tools like TripleO or Ansible are unable to handle it. "},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"Use case: Customer is running an application using InfiniBand (ethertype 0x4008)"},{"line_number":41,"context_line":"in OpenStack, and that OpenStack transitions from iptables_hybrid to ovs"},{"line_number":42,"context_line":"firewall. The Infiniband traffic is blocked by the ovs firewall, and at present"},{"line_number":43,"context_line":"the Neutron API offers no methodology to unblock it."},{"line_number":44,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_133d06c3","line":41,"range":{"start_line":41,"start_character":69,"end_line":41,"end_character":72},"in_reply_to":"9fb8cfa7_d0bc4407","updated":"2019-07-01 18:28:39.000000000","message":"Done","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"4f84e40877685ce1cff21a7c830ad27d2e126ab6","unresolved":false,"context_lines":[{"line_number":39,"context_line":""},{"line_number":40,"context_line":"Use case: Customer is running an application using InfiniBand (ethertype 0x4008)"},{"line_number":41,"context_line":"in OpenStack, and that OpenStack transitions from iptables_hybrid to ovs"},{"line_number":42,"context_line":"firewall. The Infiniband traffic is blocked by the ovs firewall, and at present"},{"line_number":43,"context_line":"the Neutron API offers no methodology to unblock it."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_90380ca0","line":42,"range":{"start_line":42,"start_character":51,"end_line":42,"end_character":54},"updated":"2019-07-01 17:31:30.000000000","message":"s/OVS","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"c02535484bc97a55c0aa6053450812aa3df448df","unresolved":false,"context_lines":[{"line_number":39,"context_line":""},{"line_number":40,"context_line":"Use case: Customer is running an application using InfiniBand (ethertype 0x4008)"},{"line_number":41,"context_line":"in OpenStack, and that OpenStack transitions from iptables_hybrid to ovs"},{"line_number":42,"context_line":"firewall. The Infiniband traffic is blocked by the ovs firewall, and at present"},{"line_number":43,"context_line":"the Neutron API offers no methodology to unblock it."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_33384ad1","line":42,"range":{"start_line":42,"start_character":51,"end_line":42,"end_character":54},"in_reply_to":"9fb8cfa7_90380ca0","updated":"2019-07-01 18:28:39.000000000","message":"Done","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"4f84e40877685ce1cff21a7c830ad27d2e126ab6","unresolved":false,"context_lines":[{"line_number":53,"context_line":"implementing this spec will lift that restriction, so that additional security"},{"line_number":54,"context_line":"types can be specified by hexadecimal number.  If a non-IP ethertype is"},{"line_number":55,"context_line":"specified then the following arguments are ignored: protocol, port_range_max,"},{"line_number":56,"context_line":"port_range_min, remote_group_id, remote_ip_prefix."},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"This change will also require minor modifications to the database schema and"},{"line_number":59,"context_line":"corresponding OVO object to ensure custom ethertypes are conveyed properly.  The"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_9006cccd","line":56,"updated":"2019-07-01 17:31:30.000000000","message":"I don\u0027t know much about non-IP protocols, but I\u0027m fine with making this all-or-nothing for an ethertype, we shouldn\u0027t be in the business of seeing what is supported in the firewalls wrt flow matching some additional bit of info.","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"c02535484bc97a55c0aa6053450812aa3df448df","unresolved":false,"context_lines":[{"line_number":53,"context_line":"implementing this spec will lift that restriction, so that additional security"},{"line_number":54,"context_line":"types can be specified by hexadecimal number.  If a non-IP ethertype is"},{"line_number":55,"context_line":"specified then the following arguments are ignored: protocol, port_range_max,"},{"line_number":56,"context_line":"port_range_min, remote_group_id, remote_ip_prefix."},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"This change will also require minor modifications to the database schema and"},{"line_number":59,"context_line":"corresponding OVO object to ensure custom ethertypes are conveyed properly.  The"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_53f05efd","line":56,"in_reply_to":"9fb8cfa7_9006cccd","updated":"2019-07-01 18:28:39.000000000","message":"I agree; the fact that there is likely no commonality to the conventions of various ethertypes any more than there is between those ethertypes and IP means any attempt to impose IP semantics on them will end in madness.  FCoE, for example, uses Fiber Channel addressing within an Ethernet frame (IIUC).  IPoIB is different; that has layer 2 \u003d IP but layer 1 is InfiniBand, not Ethernet.","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"4f84e40877685ce1cff21a7c830ad27d2e126ab6","unresolved":false,"context_lines":[{"line_number":61,"context_line":"OVS firewall."},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"Control for traffic with a custom ethertype will be all or nothing, a given"},{"line_number":64,"context_line":"protocol will be etiehr entirely blocked or entirely allowed.  "},{"line_number":65,"context_line":""},{"line_number":66,"context_line":""},{"line_number":67,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_10c73c98","line":64,"range":{"start_line":64,"start_character":17,"end_line":64,"end_character":23},"updated":"2019-07-01 17:31:30.000000000","message":"s/either","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"c02535484bc97a55c0aa6053450812aa3df448df","unresolved":false,"context_lines":[{"line_number":61,"context_line":"OVS firewall."},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"Control for traffic with a custom ethertype will be all or nothing, a given"},{"line_number":64,"context_line":"protocol will be etiehr entirely blocked or entirely allowed.  "},{"line_number":65,"context_line":""},{"line_number":66,"context_line":""},{"line_number":67,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9fb8cfa7_d3320ef2","line":64,"range":{"start_line":64,"start_character":17,"end_line":64,"end_character":23},"in_reply_to":"9fb8cfa7_10c73c98","updated":"2019-07-01 18:28:39.000000000","message":"Done","commit_id":"01bac6aedad02edb3b466f534474935c14400835"},{"author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"change_message_id":"9df8a8ff41c297567eaeaed2a65c407012b4cfef","unresolved":false,"context_lines":[{"line_number":61,"context_line":"OVS firewall."},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"Control for traffic with a custom ethertype will be all or nothing, a given"},{"line_number":64,"context_line":"protocol will be either entirely blocked or entirely allowed."},{"line_number":65,"context_line":""},{"line_number":66,"context_line":""},{"line_number":67,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9fb8cfa7_aa6034d0","line":64,"updated":"2019-07-02 10:31:17.000000000","message":"Do You have plan to update this section and specify exactly what db and ovo changes will be required or is it final version?","commit_id":"3db1a9f464cd7882d30b101a9775f17d9ed9bd4c"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"cc40dd1bb42a324224bbd9ad8ff496b98c1e39a4","unresolved":false,"context_lines":[{"line_number":61,"context_line":"OVS firewall."},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"Control for traffic with a custom ethertype will be all or nothing, a given"},{"line_number":64,"context_line":"protocol will be either entirely blocked or entirely allowed."},{"line_number":65,"context_line":""},{"line_number":66,"context_line":""},{"line_number":67,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_d1c65717","line":64,"in_reply_to":"9fb8cfa7_aa6034d0","updated":"2019-07-05 21:04:14.000000000","message":"I added some detail; I feel that more may be uncovered as the implentation progresses, particularly for OVN.","commit_id":"3db1a9f464cd7882d30b101a9775f17d9ed9bd4c"},{"author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"change_message_id":"9df8a8ff41c297567eaeaed2a65c407012b4cfef","unresolved":false,"context_lines":[{"line_number":68,"context_line":"References"},{"line_number":69,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"Please add any useful references here. You are not required to have any"},{"line_number":72,"context_line":"reference. Moreover, this specification should still make sense when your"},{"line_number":73,"context_line":"references are unavailable."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9fb8cfa7_2a6d24cb","line":73,"range":{"start_line":71,"start_character":0,"end_line":73,"end_character":27},"updated":"2019-07-02 10:31:17.000000000","message":"this should be removed or changed :)","commit_id":"3db1a9f464cd7882d30b101a9775f17d9ed9bd4c"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"cc40dd1bb42a324224bbd9ad8ff496b98c1e39a4","unresolved":false,"context_lines":[{"line_number":68,"context_line":"References"},{"line_number":69,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"Please add any useful references here. You are not required to have any"},{"line_number":72,"context_line":"reference. Moreover, this specification should still make sense when your"},{"line_number":73,"context_line":"references are unavailable."}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_116dcf97","line":73,"range":{"start_line":71,"start_character":0,"end_line":73,"end_character":27},"in_reply_to":"9fb8cfa7_2a6d24cb","updated":"2019-07-05 21:04:14.000000000","message":"Done","commit_id":"3db1a9f464cd7882d30b101a9775f17d9ed9bd4c"},{"author":{"_account_id":9531,"name":"liuyulong","display_name":"LIU Yulong","email":"i@liuyulong.me","username":"LIU-Yulong"},"change_message_id":"34eb46440859e5b44db4a359d5246f7bb935b82c","unresolved":false,"context_lines":[{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":8,"context_line":"API Support for Managing Custom Ethertypes"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Some operators need to allow/deny custom Ethertypes for applications which use"},{"line_number":12,"context_line":"their own non-IP traffic (such as for clustering applications). The Security"},{"line_number":13,"context_line":"Group API only handles specifying behavior within the IP protocol. With the"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_3c2bdb30","line":10,"updated":"2019-07-09 16:06:49.000000000","message":"The original RFE link should be added here.\nhttps://bugs.launchpad.net/neutron/+bug/1832758","commit_id":"59c572e13fe8cc388ea4e375cb314bdb5a08e208"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"cd139e328963c9f552bd2600d850cc3647bde603","unresolved":false,"context_lines":[{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":8,"context_line":"API Support for Managing Custom Ethertypes"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Some operators need to allow/deny custom Ethertypes for applications which use"},{"line_number":12,"context_line":"their own non-IP traffic (such as for clustering applications). The Security"},{"line_number":13,"context_line":"Group API only handles specifying behavior within the IP protocol. With the"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_a8b20893","line":10,"in_reply_to":"7faddb67_3c2bdb30","updated":"2019-07-10 22:05:46.000000000","message":"Added in the References section below.","commit_id":"59c572e13fe8cc388ea4e375cb314bdb5a08e208"},{"author":{"_account_id":9531,"name":"liuyulong","display_name":"LIU Yulong","email":"i@liuyulong.me","username":"LIU-Yulong"},"change_message_id":"34eb46440859e5b44db4a359d5246f7bb935b82c","unresolved":false,"context_lines":[{"line_number":65,"context_line":"needed.  A validator validate_ethertype is suggested, which would also replace"},{"line_number":66,"context_line":"use of sg_supported_ethertypes in the security group extension."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"References"},{"line_number":69,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":70,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_fc6ea394","line":69,"range":{"start_line":68,"start_character":0,"end_line":69,"end_character":10},"updated":"2019-07-09 16:06:49.000000000","message":"why don\u0027t remove this?","commit_id":"59c572e13fe8cc388ea4e375cb314bdb5a08e208"},{"author":{"_account_id":13995,"name":"Nate Johnston","email":"nate.johnston@redhat.com","username":"natejohnston"},"change_message_id":"cd139e328963c9f552bd2600d850cc3647bde603","unresolved":false,"context_lines":[{"line_number":65,"context_line":"needed.  A validator validate_ethertype is suggested, which would also replace"},{"line_number":66,"context_line":"use of sg_supported_ethertypes in the security group extension."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"References"},{"line_number":69,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":70,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_88a70c50","line":69,"range":{"start_line":68,"start_character":0,"end_line":69,"end_character":10},"in_reply_to":"7faddb67_fc6ea394","updated":"2019-07-10 22:05:46.000000000","message":"When I do I get an error with the py36 validation:\n\n    b\"AssertionError: While checking \u0027specs/train/custom_ethertypes.rst\u0027:\"\n    b\"  Missing sections: [\u0027References\u0027]\"","commit_id":"59c572e13fe8cc388ea4e375cb314bdb5a08e208"}]}