yahoo-eng-team team mailing list archive

[OpenStack Infra <1526138@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/251271
Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=bebc0a4b2ea915fa214518ea667cd25812cda058
Submitter: Jenkins
Branch:    master

commit bebc0a4b2ea915fa214518ea667cd25812cda058
Author: Huan Xie <huan.xie@xxxxxxxxxx>
Date:   Mon Nov 30 09:24:54 2015 +0000

    XenAPI: Support neutron security group
    
    This implementation is to give support on neutron security group with
    XenServer as compute driver. When using neutron+openvswitch, the ovs
    agent on compute node cannot run correctly due to lack of qbr linux
    bridge on compute node. This change will add qbr linux bridge when
    xenserver as hypervisor
    Xenserver driver now doesn't have linux bridge, the connection is:
    compute node: vm-vif -> br-int -> br-eth
    network node: br-eth -> br-int -> br-ex
    With this implemented, linux bridge(qbr) will be added in compute
    node. Thus the security group rules can be applied on qbr bridge.
    The connection will look like:
    compute node: vm-vif -> qbr(linux bridge) -> br-int -> br-eth
    network node: br-eth -> br-int -> br-ex
    
    Closes-Bug: #1526138
    
    Implements: blueprint support-neutron-security-group
    
    DocImpact: /etc/modprobe.d/blacklist-bridge file in dom0 should be
        deleted since it prevent loading linux bridge module in dom0
    
    Depends-On: I377f8ad51e1d2725c3e0153e64322055fcce7b54
    
    Change-Id: Id9b39aa86558a9f7099caedabd2d517bf8ad3d68


** Changed in: nova
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1526138

Title:
  xenserver driver lacks of linux bridge qbrXXX

Status in OpenStack Compute (nova):
  Fix Released

Bug description:
  1. Nova latest master branch, should be Mitaka with next release

  2. XenServer as compute driver in OpenStack lacks of linux bridge when
  using neutron networking and thus it cannot support neutron security
  group as well.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1526138/+subscriptions