This is feature patch (3 of 3) that introduces support for
transitioning existing NSX-based deployments from the agent
based model of providing dhcp and metadata proxy services
to the new agentless based mode. In 'combined' mode, existing
networks will still be served by the existing infrastructure,
whereas new networks will be served by the new infrastructure.
Networks may be migrated to the model using a new CLI tool
provided, called 'neutron-nsx-manage'. Currently the tool
provides two admin-only commands:
neutron-nsx-manage net-report <net-id-or-name>
This will check that the network can be migrated and returns
the resources currently in use. And:
neutron-nsx-manage net-migrate <net-id-or-name>
This will move the network over the new model and deallocate
resources from the agent. Once a network has been migrated
there is no turning back.
Completes-blueprint nsx-integrated-services
Change-Id: I37c9aa0e76124e1023899106406de7be6714c24d
Universal is used to identify pure-Python module(by bdist_wheel). For
these, it is sufficient to build a wheel with _any_ Python ABI version
and publish that to PyPI (by whatever means).
Change-Id: Ibca65044d61d4b9b248013e4fe316f3c1a05f764
Changes the ML2 plugin bulk support flag to
be based on the bulk support of the underlying
drivers.
Closes-Bug: #1272490
Change-Id: I28281c9ecc1696b929c7e0125d02a37946948744
Currently non-admin user cannot create a network with
shared=True. But the user can create the network and then
change the shared attribute to True.
This patch will no longer allow non-admin user to update a
network's shared value to True.
Change-Id: Id596ee399c56b9882efab97a89dbf7d14c5cf7f4
Closes-Bug: 1268823
To configure core plugin or service plugins, instead of using class names,
simpler names can also be used, ex:
service_plugins = router, firewall, lbaas
For compatibility with previous versions, the class name of a plugin can be
specified instead of its entrypoint name, ex:
service_plugins = router, neutron.services.firewall.fwaas_plugin.FirewallPlugin, lbaas
DocImpact
Implements: blueprint config-plugin-by-name
Change-Id: Ia4aaa1d305b160a4d6dab9e227c744727a4c78c2
- Every config item prefixed with nvp is prefixed with nsx
- deprecation qualifiers are added to preserve bw compatibility
- nicira/nvp.ini is renamed to vmware/nsx.ini
- symlink nicira/nvp.ini is created to point to vmware/nsx.ini
- UT added to verify that nvp.ini and old config items can still
parsed correctly; bw-compat will be dropped in Juno
Partial-implements blueprint nicira-plugin-renaming
Change-Id: I676b868e61064cc5ff17e2246e83ba5c5e4a3449
Add new entry point whilst preserving the old ones
for backward compatibility.
Partial-implements blueprint nicira-plugin-renaming
Change-Id: I3c5b5dcd316df3867f434bbc35483a2636b715d8
This should be accepted/merged once all the RC1 bugfixes are in.
This bumps the target version to 2014.1, effectively opening the master
branch to Icehouse development, ending the feature freeze.
The Havana release branch is cut from the previous commit in master.
Change-Id: I32a2ef85a8dff2b3a681fe7b33fc5dc983b7ab81
Updated policy for firewall_policy and firewall_rule to allow sharing
among tenants. Added a new firewall sharing rule to enable this.
Change-Id: I5d4d9f94fb3abffe4d1b03c46fd5b13a8a4a4f09
Fixes: bug #1217103
This patch initiates the blueprint l2-population
Implemented as a ml2 Mechanism driver.
OVS & LinuxBridge drivers will be added as dependencies.
Rebased on ML2 Portbinding.
Change-Id: Ia2345aa262ec791c9f38b6e41e1e4b46f69cadac
Port of the quantum/plugin/cisco/nexus plugin to run under the Modular
Layer 2 (ML2) infrastructure as defined in
https://blueprints.launchpad.net/quantum/+spec/ml2-mechanism-drivers
Implements blueprint ml2-md-cisco-nexus
Change-Id: Ifdd03bec554a08266de859387f1901858a3be4a1
Implements blueprint ipsec-vpn-reference
This patch implements reference driver implementation for VPNaaS.
The driver uses openswan to manage vpn connections.
Future work: Support ikepolicy and ipsec update
Support service type framework
Intelligent updating of resources
This commit adds jinja2 for requirements.txt for
generating cofig file.
Change-Id: I8c5ed800a71ca014dc7bdbb6a57c4f8d18fa82e0
The ml2 plugin uses mechanism drivers to determine which network
segment and what VIF driver to use for a port. Mechanism drivers
supporting the openvswitch, linuxbridge, and hyperv agents are
added. The binding:host attribute is set on ports belonging to the
dhcp and l3 agents so that they can be bound.
To use with devstack until it is updated, set
"Q_ML2_PLUGIN_MECHANISM_DRIVERS=openvswitch,linuxbridge" in localrc.
The hyperv L2 agent does not currently implement the agents_db RPC,
and will therefore not work with its ml2 mechanism driver. This issue
will be tracked as a bug to be fixed in a separate merge.
implements blueprint: ml2-portbinding
Change-Id: Icb9c70d8b0d7fcb34b57adc760bb713b740e5dad
This patch implements Arista's modular L2 mechanism driver to
automate the management of virtual networks along with physical networks
using Arista hardware devices (Spine and Leaf switches)
This driver uses ML2 Mechanism Driver-API to interface with Neutron ML2 Plugin.
implements: blueprint arista-ml2-mechanism-driver
Change-Id: I1c4ca36cf3d7af013b7b3353e7b7d89fe39f91bf
Define a new ML2 Mechanism Driver that replicates Neutron network/port
configuration changes to NCS: http://www.tail-f.com/network-control-system/
Configuration is sent using a HTTP/JSON interface.
Implements blueprint tailf-ncs
Change-Id: I1f73fa3f2e4eec8e5a0f2865aec2d934e25c76d1
This is the agent side of :
blueprint bandwidth-router-measurement
blueprint bandwidth-router-label
This patch initiates agent side by adding a new
l3 metering agent and a Noop Driver.
DocImpact
Change-Id: Ib34721209c282b2669ff5488a33293d9f86467ef
The following commit adds the ability to associate multiple
different provider networks on a single network.
Implements blueprint map-networks-to-multiple-provider-networks
Change-Id: I3c70fb2426899f728a401566debab7f66e7246bc
bp: remove-bin-directory
There are some binaries which are expected to run in branch, so
we have to keep them there now.
Change-Id: I5134d975cbd69f929a325ab80a6d19ce1f122656
This a part of the blueprint bandwidth-router-label
This patch initiates the blueprint by adding base class
to associate labels and metering rules to tenant's routers.
Change-Id: Ia93b49d881e79c3291730cff7b80f26c56fedb48
Previously neutron was keeping track of dhcp lease time in order
to ensure it didn't hand out an ip address that was already leased.
This patch removes that logic and instead leverages the dhcp_release
utility. This allows us to reuse ip addresses immediately after a port
is deleted. This patch also bumps the lease time to 24 hours instead
of 2 minutes with reduces the amount of dhcp traffic.
DocImpact
There is a DocImpact for this bug related to the upgrade path. One should
first upgrade their dhcp-agents. Then wait till the dhcp_lease time has
expired. Lastly, update neutron-server in order to avoid the case where
an instance is deleted and the dnsmasq process has not released the lease
and neturon allocates that ip to a new port.
Fixes bug: 1202392
Implements blueprint: remove-dhcp-lease
Change-Id: Ifcb4f093c92904ceb896438987d53e692eb7fb26
This will enable the Cisco Nexus 1000V to integrate with the Cisco plugin
and be used to drive the realization of Neutron constructs.
Network profile and Policy profile are introduced as extended neutron
resources, while n1kv:profile_id is introduced as an extended attribute
for network and port objects. Necessary changes to the Cisco plugin are
made to accomodate Nexus 1000V as a configurable vswitch plugin.
Implements: blueprint cisco-plugin-n1k-support
Change-Id: I951e10c57d74c935fca8754c0e21e1ac9df35704
Implements: blueprint quantum-fwaas
blueprint: quantum-fwaas-plugin
This is the first iteration of the FWaaS implementation and
is geared towards implementing the model that will be
required to at least address the reference implementation.
This iteration will not include implementation of the following
features:
* grouping or dynamic objects
* application/service objects
Change-Id: I57a62d6e9d3f1e6c4dd44cd5c745710a3d9e488e
armando-migliaccio
Jenkins
Sascha Peilicke
Kevin Benton
Stephen Ma
Zang MingJie
armando-migliaccio
Terry Wilson
Thierry Carrez
Eugene Nikanorov
Dan Florea
Sylvain Afchain
Sascha Peilicke
Rich Curran
Nachi Ueno
Bob Kukura
sukhdev
Luke Gorrie
Akihiro MOTOKI
Aaron Rosen
Yong Sheng Gong
Abhishek Raut
snaiksat