)]}'
{"specs/train/approved/vm-boot-with-unaddressed-port.rst":[{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"7c133f244077375140bbfc23d61d9aaae78620c7","unresolved":false,"context_lines":[{"line_number":44,"context_line":"Proposed change"},{"line_number":45,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"This spec proposes to allow to spawn a VM with a manually created port without"},{"line_number":48,"context_line":"IP address assignation."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"When a port in Neutron is created with the option \"--no-fixed-ip\", the port"},{"line_number":51,"context_line":"parameter `ip_allocation`_ will be `populated with \"none\"`_. This way Neutron"},{"line_number":52,"context_line":"marks a port not to have an IP address. Nova, during the instance creation,"},{"line_number":53,"context_line":"validates the build options; in particular the ports provided to be bound to"},{"line_number":54,"context_line":"this new VM. To be able to use an unaddressed port, Nova needs to modify the"},{"line_number":55,"context_line":"logic where `IP assignation is tested`_."},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Alternatives"},{"line_number":58,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"5fc1f717_28464925","line":55,"range":{"start_line":47,"start_character":0,"end_line":55,"end_character":40},"updated":"2019-03-07 14:16:15.000000000","message":"so this was previously rejected for security conserns mainly in relateion to using nova secruity groups.\n\nthere is an existing patch form over a year ago\nhttps://review.openstack.org/#/c/533249/\nrelated to this bug\nhttps://bugs.launchpad.net/nova/+bug/1741575\n\nhowever before we can proceed with this feature i think we need a change to the neutorn api which i need to write up.\n\neffectivly to do this safely we need to start recoreind info about what driver bound the port.\n\nspecifically i want to add 3 items to the vif binding details.\n1 the name of the ml2 driver that bound the port.\n2 the when the ml2 driver sends Network-chagned event and vif-plugged events\n3 the connectivity proved by the driver e.g. l2 or l3.\n\n1 or 3 are required for this feature to be added safely.\n\nl3 backends should always have an ip.\nwe can defer the allocation of the ip until the port is bound but it should always have one.\n\nl2 backend could resonably be used with out an ip.\n\nfinally we will also need to check that neutron is the network backend.\n\nwe have not killed nova-net yet but it is frozen so\nwe should only support this when neutron is  used.","commit_id":"a3374e2202f4e8c3aa0d741c811a4e3404e09aae"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"9f3573236b46ec1e058bda85a8b7bddcf785b20f","unresolved":false,"context_lines":[{"line_number":44,"context_line":"Proposed change"},{"line_number":45,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"This spec proposes to allow to spawn a VM with a manually created port without"},{"line_number":48,"context_line":"IP address assignation."},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"When a port in Neutron is created with the option \"--no-fixed-ip\", the port"},{"line_number":51,"context_line":"parameter `ip_allocation`_ will be `populated with \"none\"`_. This way Neutron"},{"line_number":52,"context_line":"marks a port not to have an IP address. Nova, during the instance creation,"},{"line_number":53,"context_line":"validates the build options; in particular the ports provided to be bound to"},{"line_number":54,"context_line":"this new VM. To be able to use an unaddressed port, Nova needs to modify the"},{"line_number":55,"context_line":"logic where `IP assignation is tested`_."},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"Alternatives"},{"line_number":58,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"dfbec78f_ed3c3830","line":55,"range":{"start_line":47,"start_character":0,"end_line":55,"end_character":40},"in_reply_to":"5fc1f717_28464925","updated":"2019-05-15 14:53:14.000000000","message":"I need to refer this spec to https://review.opendev.org/#/c/641670/. Once we have this \"network-connectivity\" parameter in the VIF object, we can easily implement this feature.","commit_id":"a3374e2202f4e8c3aa0d741c811a4e3404e09aae"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"7c133f244077375140bbfc23d61d9aaae78620c7","unresolved":false,"context_lines":[{"line_number":82,"context_line":"Security impact"},{"line_number":83,"context_line":"---------------"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"Those ports without an assigned IP doesn\u0027t work with the Neutron in-tree"},{"line_number":86,"context_line":"firewalls (iptables and OVS Open Flows based). Both firewall will filter the"},{"line_number":87,"context_line":"egress and the ingress traffic depending on several parameters, including the"},{"line_number":88,"context_line":"IP address. To let the traffic come into the virtual interface, the firewall"},{"line_number":89,"context_line":"should be disabled in the compute node hosting the VM."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"Notifications impact"},{"line_number":92,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"5fc1f717_68bd31b6","line":89,"range":{"start_line":85,"start_character":0,"end_line":89,"end_character":54},"updated":"2019-03-07 14:16:15.000000000","message":"that is not entirely true.\nthe security group api allows you to filter on ethernet type\nalso you can still resonable use securtiy groups to filter on  other non ip fileds like droping all icmp packets.\n\nyou may not want to use security groups with this feature but\nit shoudl be supported. if its not then this should be an admin only feature as it presents a signifcat risk.","commit_id":"a3374e2202f4e8c3aa0d741c811a4e3404e09aae"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"9f3573236b46ec1e058bda85a8b7bddcf785b20f","unresolved":false,"context_lines":[{"line_number":82,"context_line":"Security impact"},{"line_number":83,"context_line":"---------------"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"Those ports without an assigned IP doesn\u0027t work with the Neutron in-tree"},{"line_number":86,"context_line":"firewalls (iptables and OVS Open Flows based). Both firewall will filter the"},{"line_number":87,"context_line":"egress and the ingress traffic depending on several parameters, including the"},{"line_number":88,"context_line":"IP address. To let the traffic come into the virtual interface, the firewall"},{"line_number":89,"context_line":"should be disabled in the compute node hosting the VM."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"Notifications impact"},{"line_number":92,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"dfbec78f_cdfcd471","line":89,"range":{"start_line":85,"start_character":0,"end_line":89,"end_character":54},"in_reply_to":"5fc1f717_68bd31b6","updated":"2019-05-15 14:53:14.000000000","message":"At least what I need is to remove the IP address retrieval from the port. Those rules referred to the port IP address should be skipped in this particular case. In general, a part from the examples you have described, any other traffic will be filtered first by the L1 port ID (for example, the OVS port), then the L2 address and then the L3 address.","commit_id":"a3374e2202f4e8c3aa0d741c811a4e3404e09aae"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Problem description"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_739e62b9","line":20,"range":{"start_line":20,"start_character":71,"end_line":20,"end_character":74},"updated":"2019-05-08 14:18:41.000000000","message":"d/","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Problem description"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_b35e1a10","line":20,"range":{"start_line":20,"start_character":42,"end_line":20,"end_character":43},"updated":"2019-05-08 14:18:41.000000000","message":"d/","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Problem description"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_f36492e7","line":20,"range":{"start_line":20,"start_character":26,"end_line":20,"end_character":28},"updated":"2019-05-08 14:18:41.000000000","message":"s/users to","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Problem description"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_1a4adf26","line":20,"range":{"start_line":20,"start_character":71,"end_line":20,"end_character":74},"in_reply_to":"dfbec78f_739e62b9","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Problem description"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_3a479b20","line":20,"range":{"start_line":20,"start_character":42,"end_line":20,"end_character":43},"in_reply_to":"dfbec78f_b35e1a10","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Problem description"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_da53e7e1","line":20,"range":{"start_line":20,"start_character":26,"end_line":20,"end_character":28},"in_reply_to":"dfbec78f_f36492e7","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"},{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_33a8ead9","line":21,"range":{"start_line":21,"start_character":14,"end_line":21,"end_character":25},"updated":"2019-05-08 14:18:41.000000000","message":"s/subnets","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"},{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"},{"line_number":25,"context_line":"will be bound is populated."}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_b3b37a4d","line":22,"range":{"start_line":22,"start_character":17,"end_line":22,"end_character":19},"updated":"2019-05-08 14:18:41.000000000","message":"s/users to","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":19,"context_line":""},{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"},{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"},{"line_number":25,"context_line":"will be bound is populated."}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_da6c479e","line":22,"range":{"start_line":22,"start_character":17,"end_line":22,"end_character":19},"in_reply_to":"dfbec78f_b3b37a4d","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"},{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"},{"line_number":25,"context_line":"will be bound is populated."},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_53847e5e","line":23,"range":{"start_line":23,"start_character":0,"end_line":23,"end_character":11},"updated":"2019-05-08 14:18:41.000000000","message":"/assignment ?","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":20,"context_line":"Currently Neutron permits to create a port, assigned to a network with the"},{"line_number":21,"context_line":"corresponding subnetworks and IP pools, without an IP address assigned. However"},{"line_number":22,"context_line":"Nova only allows to create a VM with a port without an IP only if this address"},{"line_number":23,"context_line":"assignation is deferred; that means that the port is expected to have an IP"},{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"},{"line_number":25,"context_line":"will be bound is populated."},{"line_number":26,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_7a13d30e","line":23,"range":{"start_line":23,"start_character":0,"end_line":23,"end_character":11},"in_reply_to":"dfbec78f_53847e5e","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"},{"line_number":25,"context_line":"will be bound is populated."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_3381ca4b","line":27,"range":{"start_line":27,"start_character":57,"end_line":27,"end_character":62},"updated":"2019-05-08 14:18:41.000000000","message":"/that often","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"},{"line_number":25,"context_line":"will be bound is populated."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_137e066b","line":27,"range":{"start_line":27,"start_character":15,"end_line":27,"end_character":19},"updated":"2019-05-08 14:18:41.000000000","message":"s/are some","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"},{"line_number":25,"context_line":"will be bound is populated."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_fafee3ac","line":27,"range":{"start_line":27,"start_character":15,"end_line":27,"end_character":19},"in_reply_to":"dfbec78f_137e066b","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":24,"context_line":"address but Neutron deferred the IP allocation until the host to which the port"},{"line_number":25,"context_line":"will be bound is populated."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_9a2d6f48","line":27,"range":{"start_line":27,"start_character":57,"end_line":27,"end_character":62},"in_reply_to":"dfbec78f_3381ca4b","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":25,"context_line":"will be bound is populated."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."},{"line_number":31,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_734f4292","line":28,"updated":"2019-05-08 14:18:41.000000000","message":"Routers are typically going to have an IP though right?  Even though they are mainly forwarding packets.  How else can they be described in a host routing table without an IP?  Maybe there is a better example?","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":25,"context_line":"will be bound is populated."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."},{"line_number":31,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_9abb2fe4","line":28,"in_reply_to":"dfbec78f_734f4292","updated":"2019-07-04 12:54:00.000000000","message":"Well, you are right. But maybe the use case presented in the next section is a better (and real) example.","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":26,"context_line":""},{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"Use Cases"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_9391969c","line":29,"range":{"start_line":29,"start_character":72,"end_line":29,"end_character":79},"updated":"2019-05-08 14:18:41.000000000","message":"s/addresses","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":26,"context_line":""},{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"Use Cases"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_7ae193fe","line":29,"range":{"start_line":29,"start_character":72,"end_line":29,"end_character":79},"in_reply_to":"dfbec78f_9391969c","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":27,"context_line":"However, there some network applications (e.g.: routers) often forward traffic"},{"line_number":28,"context_line":"that is not intended for them. Those applications have an interface without a"},{"line_number":29,"context_line":"primary L3 address which may be receiving traffic for so many disparate address"},{"line_number":30,"context_line":"that configuring all of them in Neutron is a point less burden."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"Use Cases"},{"line_number":33,"context_line":"---------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_b38cda7f","line":30,"range":{"start_line":30,"start_character":45,"end_line":30,"end_character":55},"updated":"2019-05-08 14:18:41.000000000","message":"d/\n\nI\u0027m also a little confused by the wording here, but the next section shows a better use case (CMTS)","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":57,"context_line":"Alternatives"},{"line_number":58,"context_line":"------------"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"As commented in the use cases, some applications will accepts traffic that is"},{"line_number":61,"context_line":"neither IPv4 nor IPv6. Having an IP address in irrelevant on those ports but"},{"line_number":62,"context_line":"doesn\u0027t affect the application."},{"line_number":63,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_73d50243","line":60,"range":{"start_line":60,"start_character":54,"end_line":60,"end_character":61},"updated":"2019-05-08 14:18:41.000000000","message":"s/accept","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":57,"context_line":"Alternatives"},{"line_number":58,"context_line":"------------"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"As commented in the use cases, some applications will accepts traffic that is"},{"line_number":61,"context_line":"neither IPv4 nor IPv6. Having an IP address in irrelevant on those ports but"},{"line_number":62,"context_line":"doesn\u0027t affect the application."},{"line_number":63,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_5ab5b7ed","line":60,"range":{"start_line":60,"start_character":54,"end_line":60,"end_character":61},"in_reply_to":"dfbec78f_73d50243","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":82,"context_line":"Security impact"},{"line_number":83,"context_line":"---------------"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"Those ports without an assigned IP doesn\u0027t work with the Neutron in-tree"},{"line_number":86,"context_line":"firewalls (iptables and OVS Open Flows based). Both firewall will filter the"},{"line_number":87,"context_line":"egress and the ingress traffic depending on several parameters, including the"},{"line_number":88,"context_line":"IP address. To let the traffic come into the virtual interface, the firewall"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_33cf8ab1","line":85,"range":{"start_line":85,"start_character":35,"end_line":85,"end_character":42},"updated":"2019-05-08 14:18:41.000000000","message":"s/don\u0027t","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":82,"context_line":"Security impact"},{"line_number":83,"context_line":"---------------"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"Those ports without an assigned IP doesn\u0027t work with the Neutron in-tree"},{"line_number":86,"context_line":"firewalls (iptables and OVS Open Flows based). Both firewall will filter the"},{"line_number":87,"context_line":"egress and the ingress traffic depending on several parameters, including the"},{"line_number":88,"context_line":"IP address. To let the traffic come into the virtual interface, the firewall"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_7abaf3de","line":85,"range":{"start_line":85,"start_character":35,"end_line":85,"end_character":42},"in_reply_to":"dfbec78f_33cf8ab1","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":83,"context_line":"---------------"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"Those ports without an assigned IP doesn\u0027t work with the Neutron in-tree"},{"line_number":86,"context_line":"firewalls (iptables and OVS Open Flows based). Both firewall will filter the"},{"line_number":87,"context_line":"egress and the ingress traffic depending on several parameters, including the"},{"line_number":88,"context_line":"IP address. To let the traffic come into the virtual interface, the firewall"},{"line_number":89,"context_line":"should be disabled in the compute node hosting the VM."}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_93bf56fa","line":86,"range":{"start_line":86,"start_character":52,"end_line":86,"end_character":60},"updated":"2019-05-08 14:18:41.000000000","message":"s/firewalls","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":83,"context_line":"---------------"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"Those ports without an assigned IP doesn\u0027t work with the Neutron in-tree"},{"line_number":86,"context_line":"firewalls (iptables and OVS Open Flows based). Both firewall will filter the"},{"line_number":87,"context_line":"egress and the ingress traffic depending on several parameters, including the"},{"line_number":88,"context_line":"IP address. To let the traffic come into the virtual interface, the firewall"},{"line_number":89,"context_line":"should be disabled in the compute node hosting the VM."}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_1acf3f80","line":86,"range":{"start_line":86,"start_character":52,"end_line":86,"end_character":60},"in_reply_to":"dfbec78f_93bf56fa","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":96,"context_line":"Other end user impact"},{"line_number":97,"context_line":"---------------------"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"To be able to access remotely to the created VM, the user needs to add an"},{"line_number":100,"context_line":"addressed port to the VM. This \"management\" port must have an IP address."},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"Performance Impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_733ae298","line":99,"range":{"start_line":99,"start_character":14,"end_line":99,"end_character":32},"updated":"2019-05-08 14:18:41.000000000","message":"s/remotely access","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":96,"context_line":"Other end user impact"},{"line_number":97,"context_line":"---------------------"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"To be able to access remotely to the created VM, the user needs to add an"},{"line_number":100,"context_line":"addressed port to the VM. This \"management\" port must have an IP address."},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"Performance Impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_9aa00fa8","line":99,"range":{"start_line":99,"start_character":14,"end_line":99,"end_character":32},"in_reply_to":"dfbec78f_733ae298","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":107,"context_line":"Other deployer impact"},{"line_number":108,"context_line":"---------------------"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_935436cc","line":110,"range":{"start_line":110,"start_character":31,"end_line":110,"end_character":59},"updated":"2019-05-08 14:18:41.000000000","message":"s/may have problems when dealing","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":107,"context_line":"Other deployer impact"},{"line_number":108,"context_line":"---------------------"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_7aaf5394","line":110,"range":{"start_line":110,"start_character":31,"end_line":110,"end_character":59},"in_reply_to":"dfbec78f_935436cc","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":108,"context_line":"---------------------"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"},{"line_number":114,"context_line":"recommended to create a VM with at least one management port, with an assigned"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_5360fea5","line":111,"range":{"start_line":111,"start_character":40,"end_line":111,"end_character":48},"updated":"2019-05-08 14:18:41.000000000","message":"s/ARP requests for","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":108,"context_line":"---------------------"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"},{"line_number":114,"context_line":"recommended to create a VM with at least one management port, with an assigned"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_7363c2b2","line":111,"range":{"start_line":111,"start_character":55,"end_line":111,"end_character":57},"updated":"2019-05-08 14:18:41.000000000","message":"s/IP","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":108,"context_line":"---------------------"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"},{"line_number":114,"context_line":"recommended to create a VM with at least one management port, with an assigned"}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_b34ffa32","line":111,"range":{"start_line":111,"start_character":20,"end_line":111,"end_character":29},"updated":"2019-05-08 14:18:41.000000000","message":"s/proxy ARP","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":108,"context_line":"---------------------"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"},{"line_number":114,"context_line":"recommended to create a VM with at least one management port, with an assigned"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_ba8e2b2c","line":111,"range":{"start_line":111,"start_character":40,"end_line":111,"end_character":48},"in_reply_to":"dfbec78f_5360fea5","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":108,"context_line":"---------------------"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"},{"line_number":114,"context_line":"recommended to create a VM with at least one management port, with an assigned"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_9a89ef27","line":111,"range":{"start_line":111,"start_character":55,"end_line":111,"end_character":57},"in_reply_to":"dfbec78f_7363c2b2","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":108,"context_line":"---------------------"},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"},{"line_number":114,"context_line":"recommended to create a VM with at least one management port, with an assigned"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_fa9a636c","line":111,"range":{"start_line":111,"start_character":20,"end_line":111,"end_character":29},"in_reply_to":"dfbec78f_b34ffa32","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"6972b20fe05ce3c30df87aa1e08af44390e4d6b2","unresolved":false,"context_lines":[{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"},{"line_number":114,"context_line":"recommended to create a VM with at least one management port, with an assigned"},{"line_number":115,"context_line":"IP address."},{"line_number":116,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"dfbec78f_d3886ec7","line":113,"range":{"start_line":113,"start_character":27,"end_line":113,"end_character":30},"updated":"2019-05-08 14:18:41.000000000","message":"s/with","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":110,"context_line":"Some L2 driver, like \"l2-pop\", maybe have problem when deal with this kind of"},{"line_number":111,"context_line":"port because it use arp proxy to answer arp from known ip address."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"\"novnc\" service won\u0027t work for a port without an IP address. This is why it\u0027s"},{"line_number":114,"context_line":"recommended to create a VM with at least one management port, with an assigned"},{"line_number":115,"context_line":"IP address."},{"line_number":116,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_5a837705","line":113,"range":{"start_line":113,"start_character":27,"end_line":113,"end_character":30},"in_reply_to":"dfbec78f_d3886ec7","updated":"2019-07-04 12:54:00.000000000","message":"Done","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"72020f8db821e082fa746ff58505d1b2b7740c2a","unresolved":false,"context_lines":[{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Testing"},{"line_number":156,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"None in the Nova side."},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"In Neutron a fullstack test will be implemented in order to check that is"},{"line_number":161,"context_line":"possible to spawn a VM with an unaddressed port. This VM should have another"},{"line_number":162,"context_line":"port (with an IP address) for management."},{"line_number":163,"context_line":""},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"Documentation Impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"5fc1f717_e83b6135","line":162,"range":{"start_line":157,"start_character":0,"end_line":162,"end_character":41},"updated":"2019-03-07 14:18:34.000000000","message":"in addtion to my previous comment i think we need more testing then this.\nthere will at a minium need to be unit tests but\ni think we shoudl proably have at least 1 tempest scenario test.","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"69c2dd0e5edf6937e6e160735ca8b166742d2af2","unresolved":false,"context_lines":[{"line_number":154,"context_line":""},{"line_number":155,"context_line":"Testing"},{"line_number":156,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"None in the Nova side."},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"In Neutron a fullstack test will be implemented in order to check that is"},{"line_number":161,"context_line":"possible to spawn a VM with an unaddressed port. This VM should have another"},{"line_number":162,"context_line":"port (with an IP address) for management."},{"line_number":163,"context_line":""},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"Documentation Impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7faddb67_1a7dff1b","line":162,"range":{"start_line":157,"start_character":0,"end_line":162,"end_character":41},"in_reply_to":"5fc1f717_e83b6135","updated":"2019-07-04 12:54:00.000000000","message":"Let me push another PS with this section changed.","commit_id":"63c0f3f0e3dad7657d37e93b65bd228f2af64390"},{"author":{"_account_id":25733,"name":"Jan Gutter","email":"github@jangutter.com","username":"jangutter"},"change_message_id":"5997d249bdb0123793658f7b4a93e8a8ebc8edf3","unresolved":false,"context_lines":[{"line_number":59,"context_line":"------------"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"As commented in the use cases, some applications will accept traffic that is"},{"line_number":62,"context_line":"neither IPv4 nor IPv6. Having an IP address in irrelevant on those ports but"},{"line_number":63,"context_line":"doesn\u0027t affect the application."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"In other cases, like in the routing application, there is no alternative. It\u0027s"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_5db131e1","line":62,"range":{"start_line":62,"start_character":44,"end_line":62,"end_character":46},"updated":"2019-07-04 14:02:48.000000000","message":"is","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"13e5f1c33afe64e5dbcc5c98b1290d96a20d9240","unresolved":false,"context_lines":[{"line_number":59,"context_line":"------------"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"As commented in the use cases, some applications will accept traffic that is"},{"line_number":62,"context_line":"neither IPv4 nor IPv6. Having an IP address in irrelevant on those ports but"},{"line_number":63,"context_line":"doesn\u0027t affect the application."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"In other cases, like in the routing application, there is no alternative. It\u0027s"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_ed9a9dc3","line":62,"range":{"start_line":62,"start_character":44,"end_line":62,"end_character":46},"in_reply_to":"7faddb67_5db131e1","updated":"2019-07-05 14:26:35.000000000","message":"Done","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":25733,"name":"Jan Gutter","email":"github@jangutter.com","username":"jangutter"},"change_message_id":"5997d249bdb0123793658f7b4a93e8a8ebc8edf3","unresolved":false,"context_lines":[{"line_number":62,"context_line":"neither IPv4 nor IPv6. Having an IP address in irrelevant on those ports but"},{"line_number":63,"context_line":"doesn\u0027t affect the application."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"In other cases, like in the routing application, there is no alternative. It\u0027s"},{"line_number":66,"context_line":"not possible to define in Neutron all the possible IP addresses."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"Data model impact"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_fdc1fd2f","line":65,"range":{"start_line":65,"start_character":24,"end_line":65,"end_character":27},"updated":"2019-07-04 14:02:48.000000000","message":"a","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"13e5f1c33afe64e5dbcc5c98b1290d96a20d9240","unresolved":false,"context_lines":[{"line_number":62,"context_line":"neither IPv4 nor IPv6. Having an IP address in irrelevant on those ports but"},{"line_number":63,"context_line":"doesn\u0027t affect the application."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"In other cases, like in the routing application, there is no alternative. It\u0027s"},{"line_number":66,"context_line":"not possible to define in Neutron all the possible IP addresses."},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"Data model impact"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_6daeade8","line":65,"range":{"start_line":65,"start_character":24,"end_line":65,"end_character":27},"in_reply_to":"7faddb67_fdc1fd2f","updated":"2019-07-05 14:26:35.000000000","message":"Done","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":25733,"name":"Jan Gutter","email":"github@jangutter.com","username":"jangutter"},"change_message_id":"5997d249bdb0123793658f7b4a93e8a8ebc8edf3","unresolved":false,"context_lines":[{"line_number":114,"context_line":"Other deployer impact"},{"line_number":115,"context_line":"---------------------"},{"line_number":116,"context_line":""},{"line_number":117,"context_line":"Some L2 driver, like \"l2-pop\", may have problem when dealing with this kind of"},{"line_number":118,"context_line":"port because it use proxy ARP to answer ARP requests from known IP address."},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"\"novnc\" service won\u0027t work with a port without an IP address. This is why it\u0027s"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_9d05697d","line":117,"range":{"start_line":117,"start_character":40,"end_line":117,"end_character":52},"updated":"2019-07-04 14:02:48.000000000","message":"problems","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"13e5f1c33afe64e5dbcc5c98b1290d96a20d9240","unresolved":false,"context_lines":[{"line_number":114,"context_line":"Other deployer impact"},{"line_number":115,"context_line":"---------------------"},{"line_number":116,"context_line":""},{"line_number":117,"context_line":"Some L2 driver, like \"l2-pop\", may have problem when dealing with this kind of"},{"line_number":118,"context_line":"port because it use proxy ARP to answer ARP requests from known IP address."},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"\"novnc\" service won\u0027t work with a port without an IP address. This is why it\u0027s"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_8dabe9d4","line":117,"range":{"start_line":117,"start_character":40,"end_line":117,"end_character":52},"in_reply_to":"7faddb67_9d05697d","updated":"2019-07-05 14:26:35.000000000","message":"Done","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":25733,"name":"Jan Gutter","email":"github@jangutter.com","username":"jangutter"},"change_message_id":"5997d249bdb0123793658f7b4a93e8a8ebc8edf3","unresolved":false,"context_lines":[{"line_number":115,"context_line":"---------------------"},{"line_number":116,"context_line":""},{"line_number":117,"context_line":"Some L2 driver, like \"l2-pop\", may have problem when dealing with this kind of"},{"line_number":118,"context_line":"port because it use proxy ARP to answer ARP requests from known IP address."},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"\"novnc\" service won\u0027t work with a port without an IP address. This is why it\u0027s"},{"line_number":121,"context_line":"recommended to create a VM with at least one management port, with an assigned"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_5dfff166","line":118,"range":{"start_line":118,"start_character":13,"end_line":118,"end_character":15},"updated":"2019-07-04 14:02:48.000000000","message":"they","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"13e5f1c33afe64e5dbcc5c98b1290d96a20d9240","unresolved":false,"context_lines":[{"line_number":115,"context_line":"---------------------"},{"line_number":116,"context_line":""},{"line_number":117,"context_line":"Some L2 driver, like \"l2-pop\", may have problem when dealing with this kind of"},{"line_number":118,"context_line":"port because it use proxy ARP to answer ARP requests from known IP address."},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"\"novnc\" service won\u0027t work with a port without an IP address. This is why it\u0027s"},{"line_number":121,"context_line":"recommended to create a VM with at least one management port, with an assigned"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_2db8b528","line":118,"range":{"start_line":118,"start_character":13,"end_line":118,"end_character":15},"in_reply_to":"7faddb67_5dfff166","updated":"2019-07-05 14:26:35.000000000","message":"Done","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":25733,"name":"Jan Gutter","email":"github@jangutter.com","username":"jangutter"},"change_message_id":"5997d249bdb0123793658f7b4a93e8a8ebc8edf3","unresolved":false,"context_lines":[{"line_number":117,"context_line":"Some L2 driver, like \"l2-pop\", may have problem when dealing with this kind of"},{"line_number":118,"context_line":"port because it use proxy ARP to answer ARP requests from known IP address."},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"\"novnc\" service won\u0027t work with a port without an IP address. This is why it\u0027s"},{"line_number":121,"context_line":"recommended to create a VM with at least one management port, with an assigned"},{"line_number":122,"context_line":"IP address."},{"line_number":123,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_bd2f05f5","line":120,"updated":"2019-07-04 14:02:48.000000000","message":"The [\"novnc\"]","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"13e5f1c33afe64e5dbcc5c98b1290d96a20d9240","unresolved":false,"context_lines":[{"line_number":117,"context_line":"Some L2 driver, like \"l2-pop\", may have problem when dealing with this kind of"},{"line_number":118,"context_line":"port because it use proxy ARP to answer ARP requests from known IP address."},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"\"novnc\" service won\u0027t work with a port without an IP address. This is why it\u0027s"},{"line_number":121,"context_line":"recommended to create a VM with at least one management port, with an assigned"},{"line_number":122,"context_line":"IP address."},{"line_number":123,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_4db5f130","line":120,"in_reply_to":"7faddb67_bd2f05f5","updated":"2019-07-05 14:26:35.000000000","message":"Done","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":25733,"name":"Jan Gutter","email":"github@jangutter.com","username":"jangutter"},"change_message_id":"5997d249bdb0123793658f7b4a93e8a8ebc8edf3","unresolved":false,"context_lines":[{"line_number":144,"context_line":"Work Items"},{"line_number":145,"context_line":"----------"},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"Works items:"},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"- Change the logic of how thew `IP assignation is tested`_."},{"line_number":150,"context_line":"- Implement the tempest test described."}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_9d1329b9","line":147,"range":{"start_line":147,"start_character":0,"end_line":147,"end_character":5},"updated":"2019-07-04 14:02:48.000000000","message":"Work","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"13e5f1c33afe64e5dbcc5c98b1290d96a20d9240","unresolved":false,"context_lines":[{"line_number":144,"context_line":"Work Items"},{"line_number":145,"context_line":"----------"},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"Works items:"},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"- Change the logic of how thew `IP assignation is tested`_."},{"line_number":150,"context_line":"- Implement the tempest test described."}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_cd824150","line":147,"range":{"start_line":147,"start_character":0,"end_line":147,"end_character":5},"in_reply_to":"7faddb67_9d1329b9","updated":"2019-07-05 14:26:35.000000000","message":"Done","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":25733,"name":"Jan Gutter","email":"github@jangutter.com","username":"jangutter"},"change_message_id":"5997d249bdb0123793658f7b4a93e8a8ebc8edf3","unresolved":false,"context_lines":[{"line_number":179,"context_line":"The third machine will have a port, with an IP assigned, connected to net2."},{"line_number":180,"context_line":"And finally, the second machine, in the middle of the first and the third one,"},{"line_number":181,"context_line":"with be connected to net1 and net2 with two ports without an IP address."},{"line_number":182,"context_line":"The second machine will have the needed iptables rules to nat the traffic"},{"line_number":183,"context_line":"between the first VM and the third VM port."},{"line_number":184,"context_line":""},{"line_number":185,"context_line":"Both the first and the third machine will need a manual entry in the ARP table"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_fd1d7dbd","line":182,"range":{"start_line":182,"start_character":58,"end_line":182,"end_character":61},"updated":"2019-07-04 14:02:48.000000000","message":"NAT","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"13e5f1c33afe64e5dbcc5c98b1290d96a20d9240","unresolved":false,"context_lines":[{"line_number":179,"context_line":"The third machine will have a port, with an IP assigned, connected to net2."},{"line_number":180,"context_line":"And finally, the second machine, in the middle of the first and the third one,"},{"line_number":181,"context_line":"with be connected to net1 and net2 with two ports without an IP address."},{"line_number":182,"context_line":"The second machine will have the needed iptables rules to nat the traffic"},{"line_number":183,"context_line":"between the first VM and the third VM port."},{"line_number":184,"context_line":""},{"line_number":185,"context_line":"Both the first and the third machine will need a manual entry in the ARP table"}],"source_content_type":"text/x-rst","patch_set":3,"id":"7faddb67_8dc20985","line":182,"range":{"start_line":182,"start_character":58,"end_line":182,"end_character":61},"in_reply_to":"7faddb67_fd1d7dbd","updated":"2019-07-05 14:26:35.000000000","message":"Done","commit_id":"dd2a9b9f325733dc0059bd3b3045f7672e543722"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"42a41ff56a993fa1645d626bf05eb73f250c5c71","unresolved":false,"context_lines":[{"line_number":104,"context_line":"---------------------"},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"To be able to remotely access to the created VM, the user needs to add an"},{"line_number":107,"context_line":"addressed port to the VM. This \"management\" port must have an IP address."},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"Performance Impact"},{"line_number":110,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_ba280734","line":107,"updated":"2019-07-11 12:11:43.000000000","message":"Do we want to enforce it in nova to each server has at least one addressed port?","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"600ab15b41816522f76962d94543522464ef647e","unresolved":false,"context_lines":[{"line_number":104,"context_line":"---------------------"},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"To be able to remotely access to the created VM, the user needs to add an"},{"line_number":107,"context_line":"addressed port to the VM. This \"management\" port must have an IP address."},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"Performance Impact"},{"line_number":110,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_fb8150c4","line":107,"in_reply_to":"7faddb67_ba280734","updated":"2019-07-17 13:43:40.000000000","message":"I don\u0027t think this is needed but should be documented here and in the user docs, just as a NOTE.","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"dabc24188aad9fbf89752283f14ea4749ba80485","unresolved":false,"context_lines":[{"line_number":104,"context_line":"---------------------"},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"To be able to remotely access to the created VM, the user needs to add an"},{"line_number":107,"context_line":"addressed port to the VM. This \"management\" port must have an IP address."},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"Performance Impact"},{"line_number":110,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_b584980d","line":107,"in_reply_to":"7faddb67_ba280734","updated":"2019-07-11 13:07:36.000000000","message":"we allow you to boot vms with no ports so i would say no.","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"e6343d64766726e408002fa7c44e066e780e0d89","unresolved":false,"context_lines":[{"line_number":104,"context_line":"---------------------"},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"To be able to remotely access to the created VM, the user needs to add an"},{"line_number":107,"context_line":"addressed port to the VM. This \"management\" port must have an IP address."},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"Performance Impact"},{"line_number":110,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_53338462","line":107,"in_reply_to":"7faddb67_fb8150c4","updated":"2019-07-19 13:17:13.000000000","message":"OK","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"42a41ff56a993fa1645d626bf05eb73f250c5c71","unresolved":false,"context_lines":[{"line_number":158,"context_line":"Implement the approved spec"},{"line_number":159,"context_line":"`Port binding event extended information for Nova`_. This feature will provide"},{"line_number":160,"context_line":"to Nova the type of back-end the port is bound, with the parameter"},{"line_number":161,"context_line":"``connectivity``, included now in ``binding:vif_details``. If the driver"},{"line_number":162,"context_line":"back-end has \"l2\" connectivity, the a port without an IP address can be"},{"line_number":163,"context_line":"assigned to a virtual machine."},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"Neutron has the ability to create an unaddressed port and mark it, by"},{"line_number":166,"context_line":"populating the \"ip_allocation\" parameter with \"none\". This feature was"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_fad3df36","line":163,"range":{"start_line":161,"start_character":59,"end_line":163,"end_character":30},"updated":"2019-07-11 12:11:43.000000000","message":"So nova still need to reject ports without ip address where the connectivity is not l2?","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"600ab15b41816522f76962d94543522464ef647e","unresolved":false,"context_lines":[{"line_number":158,"context_line":"Implement the approved spec"},{"line_number":159,"context_line":"`Port binding event extended information for Nova`_. This feature will provide"},{"line_number":160,"context_line":"to Nova the type of back-end the port is bound, with the parameter"},{"line_number":161,"context_line":"``connectivity``, included now in ``binding:vif_details``. If the driver"},{"line_number":162,"context_line":"back-end has \"l2\" connectivity, the a port without an IP address can be"},{"line_number":163,"context_line":"assigned to a virtual machine."},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"Neutron has the ability to create an unaddressed port and mark it, by"},{"line_number":166,"context_line":"populating the \"ip_allocation\" parameter with \"none\". This feature was"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_1b5eac75","line":163,"range":{"start_line":161,"start_character":59,"end_line":163,"end_character":30},"in_reply_to":"7faddb67_b599f86e","updated":"2019-07-17 13:43:40.000000000","message":"As Sean commented, this feature can be used in a port if \"connectivity\" \u003d\u003d \"l2\".","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"dabc24188aad9fbf89752283f14ea4749ba80485","unresolved":false,"context_lines":[{"line_number":158,"context_line":"Implement the approved spec"},{"line_number":159,"context_line":"`Port binding event extended information for Nova`_. This feature will provide"},{"line_number":160,"context_line":"to Nova the type of back-end the port is bound, with the parameter"},{"line_number":161,"context_line":"``connectivity``, included now in ``binding:vif_details``. If the driver"},{"line_number":162,"context_line":"back-end has \"l2\" connectivity, the a port without an IP address can be"},{"line_number":163,"context_line":"assigned to a virtual machine."},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"Neutron has the ability to create an unaddressed port and mark it, by"},{"line_number":166,"context_line":"populating the \"ip_allocation\" parameter with \"none\". This feature was"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_b599f86e","line":163,"range":{"start_line":161,"start_character":59,"end_line":163,"end_character":30},"in_reply_to":"7faddb67_fad3df36","updated":"2019-07-11 13:07:36.000000000","message":"yes. if the neutron backend is calico for example you cant have an adressles port.\n\ncalico only provides l3 connectivity.\nit makes no gauartee that you will be able to comunicate over l2 directly between any to instances.","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"42a41ff56a993fa1645d626bf05eb73f250c5c71","unresolved":false,"context_lines":[{"line_number":184,"context_line":""},{"line_number":185,"context_line":"Both the first and the third machine will need a manual entry in the ARP table"},{"line_number":186,"context_line":"to force the traffic going out trough the traffic port."},{"line_number":187,"context_line":""},{"line_number":188,"context_line":""},{"line_number":189,"context_line":"Documentation Impact"},{"line_number":190,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_9af50b86","line":187,"updated":"2019-07-11 12:11:43.000000000","message":"Can we make this tempest scenario to run on the gate as well? E.g. I don\u0027t know how many servers we can boot on the gate or how we will handle the fact that the in-tree firewall drivers will not support these ports from the start.","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":9708,"name":"Balazs Gibizer","display_name":"gibi","email":"gibizer@gmail.com","username":"gibi"},"change_message_id":"e6343d64766726e408002fa7c44e066e780e0d89","unresolved":false,"context_lines":[{"line_number":184,"context_line":""},{"line_number":185,"context_line":"Both the first and the third machine will need a manual entry in the ARP table"},{"line_number":186,"context_line":"to force the traffic going out trough the traffic port."},{"line_number":187,"context_line":""},{"line_number":188,"context_line":""},{"line_number":189,"context_line":"Documentation Impact"},{"line_number":190,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_f34150a7","line":187,"in_reply_to":"7faddb67_5e3df28c","updated":"2019-07-19 13:17:13.000000000","message":"cool","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"600ab15b41816522f76962d94543522464ef647e","unresolved":false,"context_lines":[{"line_number":184,"context_line":""},{"line_number":185,"context_line":"Both the first and the third machine will need a manual entry in the ARP table"},{"line_number":186,"context_line":"to force the traffic going out trough the traffic port."},{"line_number":187,"context_line":""},{"line_number":188,"context_line":""},{"line_number":189,"context_line":"Documentation Impact"},{"line_number":190,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_5e3df28c","line":187,"in_reply_to":"7faddb67_9af50b86","updated":"2019-07-17 13:43:40.000000000","message":"Yes, this test will run in tempest-full, e.g.: http://logs.openstack.org/11/669111/8/gate/tempest-full-py3/9b5bd5f/testr_results.html.gz","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":15334,"name":"Stephen Finucane","display_name":"stephenfin","email":"stephenfin@redhat.com","username":"sfinucan"},"change_message_id":"f0fdd56f4d31c5daea6c764ae7294de865949a7f","unresolved":false,"context_lines":[{"line_number":195,"context_line":"References"},{"line_number":196,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":197,"context_line":""},{"line_number":198,"context_line":".. _`ip_allocation`: https://github.com/openstack/neutron/blob/stable/rocky/releasenotes/notes/add-port-ip-allocation-attr-294a580641998240.yaml"},{"line_number":199,"context_line":".. _`populated with \"none\"`: https://github.com/openstack/neutron/blob/stable/rocky/neutron/db/db_base_plugin_v2.py#L1323"},{"line_number":200,"context_line":".. _`IP assignation is tested`: https://github.com/openstack/nova/blob/stable/rocky/nova/network/neutronv2/api.py#L2078-L2086"},{"line_number":201,"context_line":".. _`Allow vm to boot without l3 address(subnet)`: https://blueprints.launchpad.net/neutron/+spec/vm-without-l3-address"},{"line_number":202,"context_line":".. _`Launch instances`: https://github.com/openstack/nova/blob/stable/rocky/doc/source/user/launch-instances.rst"},{"line_number":203,"context_line":".. _`Port binding event extended information for Nova`: https://review.opendev.org/#/c/645173/"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_3dec0ef2","line":203,"range":{"start_line":198,"start_character":0,"end_line":203,"end_character":94},"updated":"2019-07-11 15:23:26.000000000","message":"nit: These won\u0027t render, fwiw, so perhaps the References section should be dropped (or None added). Also, missing the version information here (though that\u0027s optional, I think)","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"600ab15b41816522f76962d94543522464ef647e","unresolved":false,"context_lines":[{"line_number":195,"context_line":"References"},{"line_number":196,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":197,"context_line":""},{"line_number":198,"context_line":".. _`ip_allocation`: https://github.com/openstack/neutron/blob/stable/rocky/releasenotes/notes/add-port-ip-allocation-attr-294a580641998240.yaml"},{"line_number":199,"context_line":".. _`populated with \"none\"`: https://github.com/openstack/neutron/blob/stable/rocky/neutron/db/db_base_plugin_v2.py#L1323"},{"line_number":200,"context_line":".. _`IP assignation is tested`: https://github.com/openstack/nova/blob/stable/rocky/nova/network/neutronv2/api.py#L2078-L2086"},{"line_number":201,"context_line":".. _`Allow vm to boot without l3 address(subnet)`: https://blueprints.launchpad.net/neutron/+spec/vm-without-l3-address"},{"line_number":202,"context_line":".. _`Launch instances`: https://github.com/openstack/nova/blob/stable/rocky/doc/source/user/launch-instances.rst"},{"line_number":203,"context_line":".. _`Port binding event extended information for Nova`: https://review.opendev.org/#/c/645173/"}],"source_content_type":"text/x-rst","patch_set":4,"id":"7faddb67_5e8ad269","line":203,"range":{"start_line":198,"start_character":0,"end_line":203,"end_character":94},"in_reply_to":"7faddb67_3dec0ef2","updated":"2019-07-17 13:43:40.000000000","message":"Understood. Thanks for the examples:\n- https://bit.ly/2XN4D7f\n- https://bit.ly/2Y5AjUR","commit_id":"cc2e415a6afa01ae83312555e5e443dc1991a4f3"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":8,"context_line":"Boot a VM with an unaddressed port"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"https://blueprints.launchpad.net/nova/+spec/boot-vm-with-unaddressed-port"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"This blueprint aims to allow a VM to boot with an attached port without any IP"},{"line_number":14,"context_line":"assigned."}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_a0610d14","line":11,"range":{"start_line":11,"start_character":44,"end_line":11,"end_character":73},"updated":"2019-07-23 15:01:56.000000000","message":"The spec filename needs to match this, so you should do a follow up to fix this filename to match the blueprint.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"93ef877e4836b6602d2c1c8f4e64766ca8121df5","unresolved":false,"context_lines":[{"line_number":8,"context_line":"Boot a VM with an unaddressed port"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"https://blueprints.launchpad.net/nova/+spec/boot-vm-with-unaddressed-port"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"This blueprint aims to allow a VM to boot with an attached port without any IP"},{"line_number":14,"context_line":"assigned."}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_e31a8815","line":11,"range":{"start_line":11,"start_character":44,"end_line":11,"end_character":73},"in_reply_to":"7faddb67_a0610d14","updated":"2019-07-25 17:09:47.000000000","message":"My bad, I\u0027ll change it","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":53,"context_line":"Neutron marks a port not to have an IP address. Nova, during the instance"},{"line_number":54,"context_line":"creation, validates the build options; in particular the ports provided to be"},{"line_number":55,"context_line":"bound to this new VM. To be able to use an unaddressed port, Nova needs to"},{"line_number":56,"context_line":"modify the logic where IP assignation is tested [3]_."},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"Alternatives"},{"line_number":59,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_2a341bde","line":56,"updated":"2019-07-23 15:01:56.000000000","message":"How about this as well?\n\nhttps://github.com/openstack/nova/blob/stable/rocky/nova/network/security_group/neutron_driver.py#L424\n\nI also remember this change related to the deferred allocation series:\n\nhttps://review.opendev.org/#/c/346278/\n\nWill we need similar error handling for ip_allocation\u003dnone? I realize these are implementation details but I don\u0027t want this spec to make it sound like this is a one line change during the API validation / quota check stuff.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"93ef877e4836b6602d2c1c8f4e64766ca8121df5","unresolved":false,"context_lines":[{"line_number":53,"context_line":"Neutron marks a port not to have an IP address. Nova, during the instance"},{"line_number":54,"context_line":"creation, validates the build options; in particular the ports provided to be"},{"line_number":55,"context_line":"bound to this new VM. To be able to use an unaddressed port, Nova needs to"},{"line_number":56,"context_line":"modify the logic where IP assignation is tested [3]_."},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"Alternatives"},{"line_number":59,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_a39490e9","line":56,"in_reply_to":"7faddb67_2a341bde","updated":"2019-07-25 17:09:47.000000000","message":"1) About [1], you are right. I\u0027ll implement the needed changes in the patch submitted and I\u0027ll add this information to the spec.\n\n2) We won\u0027t need a new exception here. If ip_allocation\u003dNone and the backend is not compatible, the existing exception \"PortRequiresFixedIP\" will be rised.\n\n\n\n[1] https://github.com/openstack/nova/blob/stable/rocky/nova/network/security_group/neutron_driver.py#L424","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":71,"context_line":"None"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"The Neutron port contains the information needed in the ``ip_allocation``"},{"line_number":74,"context_line":"parameter and the ``connectivity`` parameter inside the"},{"line_number":75,"context_line":"``binding:vif_details``."},{"line_number":76,"context_line":""},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"REST API impact"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_ca5a2729","line":75,"range":{"start_line":74,"start_character":10,"end_line":75,"end_character":24},"updated":"2019-07-23 15:01:56.000000000","message":"How does this get used? [3] below is called from the API before the port is bound so binding:vif_details wouldn\u0027t be set yet would it? Or is that expected to be set when the port is created?","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":11604,"name":"sean mooney","email":"smooney@redhat.com","username":"sean-k-mooney"},"change_message_id":"e1790d59754a856c30eb39bccc973d651254e27c","unresolved":false,"context_lines":[{"line_number":71,"context_line":"None"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"The Neutron port contains the information needed in the ``ip_allocation``"},{"line_number":74,"context_line":"parameter and the ``connectivity`` parameter inside the"},{"line_number":75,"context_line":"``binding:vif_details``."},{"line_number":76,"context_line":""},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"REST API impact"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_d58ce336","line":75,"range":{"start_line":74,"start_character":10,"end_line":75,"end_character":24},"in_reply_to":"7faddb67_ca5a2729","updated":"2019-07-25 14:49:17.000000000","message":"This will need to be checked when we deserialse the response form neutron when we bind the port.\n\nSince we do not currenlty model network backend in placment we cant rely on placement to prefilter.\n\nIn the future if we start modelling network backbends in\nplacement then we can use traits to limit the late failures.\n\nFor live migration due to multiple port bindings in that case we will fail fast if the dest host does not have the right connectivity. this will also be true for cross cell migration.\n\nThe long term, non placment fix for boot will be to move creating and binding ports to the conductor before we call spawn which will allow us to fail fast without needing to go to the compute node. that is out of scope of this spec however.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":87,"context_line":"Those ports without an assigned IP don\u0027t work with the Neutron in-tree"},{"line_number":88,"context_line":"firewalls (iptables and OVS Open Flows based). Both firewalls will filter the"},{"line_number":89,"context_line":"egress and the ingress traffic depending on several parameters, including the"},{"line_number":90,"context_line":"IP address. To let the traffic come into the virtual interface, the firewall"},{"line_number":91,"context_line":"should be disabled in the compute node hosting the VM. This mandatory"},{"line_number":92,"context_line":"configuration will be documented."},{"line_number":93,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_ea9923d0","line":90,"updated":"2019-07-23 15:01:56.000000000","message":"Will that require changes here then?\n\nhttps://github.com/openstack/nova/blob/stable/rocky/nova/network/security_group/neutron_driver.py#L424\n\nIf so, we should document it so we don\u0027t forget.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"93ef877e4836b6602d2c1c8f4e64766ca8121df5","unresolved":false,"context_lines":[{"line_number":87,"context_line":"Those ports without an assigned IP don\u0027t work with the Neutron in-tree"},{"line_number":88,"context_line":"firewalls (iptables and OVS Open Flows based). Both firewalls will filter the"},{"line_number":89,"context_line":"egress and the ingress traffic depending on several parameters, including the"},{"line_number":90,"context_line":"IP address. To let the traffic come into the virtual interface, the firewall"},{"line_number":91,"context_line":"should be disabled in the compute node hosting the VM. This mandatory"},{"line_number":92,"context_line":"configuration will be documented."},{"line_number":93,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_95374b4e","line":90,"in_reply_to":"7faddb67_ea9923d0","updated":"2019-07-25 17:09:47.000000000","message":"I\u0027ll add this information to the spec.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":129,"context_line":"Upgrade impact"},{"line_number":130,"context_line":"--------------"},{"line_number":131,"context_line":""},{"line_number":132,"context_line":"None"},{"line_number":133,"context_line":""},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"Implementation"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_6a969397","line":132,"updated":"2019-07-23 15:01:56.000000000","message":"If there are changes needed in the nova-compute service code for handling errors (like the patch mentioned above) then there would be an upgrade impact for older computes not knowing how to handle these types of ports. For example, are there changes in the neutron agent needed for this to work on the compute agent side? Or is that code already in neutron by now (already in Stein or older)?","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"93ef877e4836b6602d2c1c8f4e64766ca8121df5","unresolved":false,"context_lines":[{"line_number":129,"context_line":"Upgrade impact"},{"line_number":130,"context_line":"--------------"},{"line_number":131,"context_line":""},{"line_number":132,"context_line":"None"},{"line_number":133,"context_line":""},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"Implementation"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_ae05547c","line":132,"in_reply_to":"7faddb67_6a969397","updated":"2019-07-25 17:09:47.000000000","message":"I\u0027ll add information about this in the next PS (actually a new patch).","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":156,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"Implement the approved spec \"Port binding event extended information for"},{"line_number":159,"context_line":"Nova\" [4]_. This feature will provide to Nova the type of back-end the port"},{"line_number":160,"context_line":"is bound, with the parameter ``connectivity``, included now in"},{"line_number":161,"context_line":"``binding:vif_details``. If the driver back-end has \"l2\" connectivity, the a"},{"line_number":162,"context_line":"port without an IP address can be assigned to a virtual machine."},{"line_number":163,"context_line":""},{"line_number":164,"context_line":"Neutron has the ability to create an unaddressed port and mark it, by"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_6adbf37c","line":161,"range":{"start_line":159,"start_character":12,"end_line":161,"end_character":24},"updated":"2019-07-23 15:01:56.000000000","message":"OK this goes back to my earlier question I guess - we won\u0027t have this information until the port is bound on the compute so it won\u0027t be in the call to [3] from the API.\n\nAlso, doesn\u0027t this imply an upgrade impact? If the compute service needs to wait for a specific event from neutron with specific details that aren\u0027t available (or the compute side logic isn\u0027t in Stein computes), then this would only work for landing these types of VMs with these types of ports on Train computes, right? Which implies some sort of scheduler filtering is necessary so we don\u0027t land these instances on older computes that don\u0027t understand these types of ports.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"93ef877e4836b6602d2c1c8f4e64766ca8121df5","unresolved":false,"context_lines":[{"line_number":156,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"Implement the approved spec \"Port binding event extended information for"},{"line_number":159,"context_line":"Nova\" [4]_. This feature will provide to Nova the type of back-end the port"},{"line_number":160,"context_line":"is bound, with the parameter ``connectivity``, included now in"},{"line_number":161,"context_line":"``binding:vif_details``. If the driver back-end has \"l2\" connectivity, the a"},{"line_number":162,"context_line":"port without an IP address can be assigned to a virtual machine."},{"line_number":163,"context_line":""},{"line_number":164,"context_line":"Neutron has the ability to create an unaddressed port and mark it, by"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_0ea7c8a9","line":161,"range":{"start_line":159,"start_character":12,"end_line":161,"end_character":24},"in_reply_to":"7faddb67_6adbf37c","updated":"2019-07-25 17:09:47.000000000","message":"We have two situations:\n- New nova, new neutron: neutron will handle the port with ip_allocation\u003dNone correctly\n- New nova, old neutron: the port will be bound correctly (regardless of the L2 connectivity). Once in Nova, if the port doesn\u0027t have this information (``connectivity``), that means this is an old Neutron version --\u003e Nova will raise an exception.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":183,"context_line":""},{"line_number":184,"context_line":"Both the first and the third machine will need a manual entry in the ARP table"},{"line_number":185,"context_line":"to force the traffic going out trough the traffic port."},{"line_number":186,"context_line":""},{"line_number":187,"context_line":""},{"line_number":188,"context_line":"Documentation Impact"},{"line_number":189,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_aa580bfa","line":186,"updated":"2019-07-23 15:01:56.000000000","message":"It\u0027s good that we can do integration testing of this, but this definitely sounds like a slow scenario test so it would go in at least the tempest-slow* job if not some neutron tempest plugin job (although nova wouldn\u0027t have test coverage for the feature then since we don\u0027t run neutron tempest plugin tests I don\u0027t think).","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"93ef877e4836b6602d2c1c8f4e64766ca8121df5","unresolved":false,"context_lines":[{"line_number":183,"context_line":""},{"line_number":184,"context_line":"Both the first and the third machine will need a manual entry in the ARP table"},{"line_number":185,"context_line":"to force the traffic going out trough the traffic port."},{"line_number":186,"context_line":""},{"line_number":187,"context_line":""},{"line_number":188,"context_line":"Documentation Impact"},{"line_number":189,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_eed90c22","line":186,"in_reply_to":"7faddb67_aa580bfa","updated":"2019-07-25 17:09:47.000000000","message":"Yes, that will be part of neutron tempest-slow tests.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":188,"context_line":"Documentation Impact"},{"line_number":189,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":190,"context_line":""},{"line_number":191,"context_line":"- Make a reference of this feature in the user document \"Launch instances\""},{"line_number":192,"context_line":"  [6]_."},{"line_number":193,"context_line":""},{"line_number":194,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_ea828352","line":191,"updated":"2019-07-23 15:01:56.000000000","message":"What about mentioning the novnc console restriction in https://docs.openstack.org/nova/latest/admin/remote-console-access.html#novnc-based-vnc-console ?","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"93ef877e4836b6602d2c1c8f4e64766ca8121df5","unresolved":false,"context_lines":[{"line_number":188,"context_line":"Documentation Impact"},{"line_number":189,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":190,"context_line":""},{"line_number":191,"context_line":"- Make a reference of this feature in the user document \"Launch instances\""},{"line_number":192,"context_line":"  [6]_."},{"line_number":193,"context_line":""},{"line_number":194,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_6ee67ceb","line":191,"in_reply_to":"7faddb67_ea828352","updated":"2019-07-25 17:09:47.000000000","message":"Sorry, I don\u0027t understand your point here","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"ebf3442ed0c916e375ba3cb7975b43ecd12c2ca6","unresolved":false,"context_lines":[{"line_number":197,"context_line":""},{"line_number":198,"context_line":".. [1] https://github.com/openstack/neutron/blob/stable/rocky/releasenotes/notes/add-port-ip-allocation-attr-294a580641998240.yaml"},{"line_number":199,"context_line":".. [2] https://github.com/openstack/neutron/blob/stable/rocky/neutron/db/db_base_plugin_v2.py#L1323"},{"line_number":200,"context_line":".. [3] https://github.com/openstack/nova/blob/stable/rocky/nova/network/neutronv2/api.py#L2078-L2086"},{"line_number":201,"context_line":".. [4] https://review.opendev.org/#/c/645173/"},{"line_number":202,"context_line":".. [5] https://blueprints.launchpad.net/neutron/+spec/vm-without-l3-address"},{"line_number":203,"context_line":".. [6] https://github.com/openstack/nova/blob/stable/rocky/doc/source/user/launch-instances.rst"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_a04a6d80","line":200,"range":{"start_line":200,"start_character":46,"end_line":200,"end_character":58},"updated":"2019-07-23 15:01:56.000000000","message":"nit: a git hash or tag would have been better than a branch since this line number could change","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"93ef877e4836b6602d2c1c8f4e64766ca8121df5","unresolved":false,"context_lines":[{"line_number":197,"context_line":""},{"line_number":198,"context_line":".. [1] https://github.com/openstack/neutron/blob/stable/rocky/releasenotes/notes/add-port-ip-allocation-attr-294a580641998240.yaml"},{"line_number":199,"context_line":".. [2] https://github.com/openstack/neutron/blob/stable/rocky/neutron/db/db_base_plugin_v2.py#L1323"},{"line_number":200,"context_line":".. [3] https://github.com/openstack/nova/blob/stable/rocky/nova/network/neutronv2/api.py#L2078-L2086"},{"line_number":201,"context_line":".. [4] https://review.opendev.org/#/c/645173/"},{"line_number":202,"context_line":".. [5] https://blueprints.launchpad.net/neutron/+spec/vm-without-l3-address"},{"line_number":203,"context_line":".. [6] https://github.com/openstack/nova/blob/stable/rocky/doc/source/user/launch-instances.rst"}],"source_content_type":"text/x-rst","patch_set":5,"id":"7faddb67_cedf700a","line":200,"range":{"start_line":200,"start_character":46,"end_line":200,"end_character":58},"in_reply_to":"7faddb67_a04a6d80","updated":"2019-07-25 17:09:47.000000000","message":"You are right. I always think stable versions are immutable, but that\u0027s not correct.","commit_id":"8c4ba3b53d35833fa2c93df23b112ed73a97725a"}]}