Difference between revisions of "Meetings/VPNaaS"
< Meetings
Paul Michali (talk | contribs) (→Agenda) |
Paul Michali (talk | contribs) (→Agenda) |
||
| Line 15: | Line 15: | ||
= Agenda = | = Agenda = | ||
| − | Updated May | + | Updated May 12th, 2015 |
* Discuss DMVPN spec for Liberty (https://review.openstack.org/#/c/181563/) | * Discuss DMVPN spec for Liberty (https://review.openstack.org/#/c/181563/) | ||
| + | * Discuss whether VPNaaS should be enhanced to support multiple local subnets | ||
== Announcements == | == Announcements == | ||
| Line 25: | Line 26: | ||
== Bugs under Review == | == Bugs under Review == | ||
Current bugs: [https://bugs.launchpad.net/neutron/+bugs?field.searchtext=vpnaas&search=Search&field.status%3Alist=NEW&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.status%3Alist=CONFIRMED&field.status%3Alist=TRIAGED&field.status%3Alist=INPROGRESS&field.status%3Alist=FIXCOMMITTED&field.assignee=&field.bug_reporter=&field.omit_dupes=on&field.has_patch=&field.has_no_package=&orderby=status&start=0 VPN bugs] | Current bugs: [https://bugs.launchpad.net/neutron/+bugs?field.searchtext=vpnaas&search=Search&field.status%3Alist=NEW&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.status%3Alist=CONFIRMED&field.status%3Alist=TRIAGED&field.status%3Alist=INPROGRESS&field.status%3Alist=FIXCOMMITTED&field.assignee=&field.bug_reporter=&field.omit_dupes=on&field.has_patch=&field.has_no_package=&orderby=status&start=0 VPN bugs] | ||
| + | |||
Current reviews: [https://review.openstack.org/#/q/status:open+project:openstack/neutron-vpnaas,n,z VPNaaS reviews] | Current reviews: [https://review.openstack.org/#/q/status:open+project:openstack/neutron-vpnaas,n,z VPNaaS reviews] | ||
| Line 36: | Line 38: | ||
* Remove /n from execute method in utils.py so that duplicate code can be removed in VPN drivers. | * Remove /n from execute method in utils.py so that duplicate code can be removed in VPN drivers. | ||
* Documentation on how to use StrongSwan | * Documentation on how to use StrongSwan | ||
| − | * Documentation on the differences between StrongSwan and OpenSwan | + | * Documentation on the differences between StrongSwan and OpenSwan (and any limitations/restrictions of each - e.g. mixing IPv4/v6) |
* StrongSwan execute_with_mount() to allow configurable rootwrap config file. | * StrongSwan execute_with_mount() to allow configurable rootwrap config file. | ||
| + | * Support for BGP/MPLS VPN, DM VPN, others? | ||
| + | * Certificate support (Barbican)? | ||
* Should enhance/add unit test cases for: | * Should enhance/add unit test cases for: | ||
** Checking various sync() cases: router w/o VPN running on it any more; router with VPN running, but no longer a service configured; process running VPN, but no longer VPN configured. | ** Checking various sync() cases: router w/o VPN running on it any more; router with VPN running, but no longer a service configured; process running VPN, but no longer VPN configured. | ||
Revision as of 12:32, 12 May 2015
Contents
Meetings
- Weekly on-demand on Tuesdays at 1600 UTC
- IRC channel: #openstack-meeting-3
- Chair: pc_m (Paul Michali)
If you want to hold a meeting. Update this wiki page with agenda modifications, date of meeting desired, date of update, and then post a notice on the openstack-dev mailing list, at least 24 hours prior to the meeting start time. We have reserved this (new) channel on the IRC for the time/day of week.
Next meeting: Tuesday, May 12th, 2015.
Logs and Minutes
Meetings, with their notes and logs, will be found under http://eavesdrop.openstack.org/meetings/vpnaas/
Agenda
Updated May 12th, 2015
- Discuss DMVPN spec for Liberty (https://review.openstack.org/#/c/181563/)
- Discuss whether VPNaaS should be enhanced to support multiple local subnets
Announcements
- Informal meeting on Friday, May 22nd, at summit.
Bugs under Review
Current bugs: VPN bugs
Current reviews: VPNaaS reviews
Bucket List
Here are some ideas for tasks that need to be done (feel free to work on them - put your name by any you choose)...
- The 'docs' target needs to be implemented for our repo (doc file was removed from Neutron).
- Coverage, especially in database and device driver modules, is lacking.
- Need functional tests for OpenSwan device driver (and StrongSwan driver)
- Refactor duplication out of device driver code (OpenSwan, StrongSwan, Cisco, Vyatta)
- The OpenSwan class should be separated from the ABC definition, and placed into a new module.
- Remove /n from execute method in utils.py so that duplicate code can be removed in VPN drivers.
- Documentation on how to use StrongSwan
- Documentation on the differences between StrongSwan and OpenSwan (and any limitations/restrictions of each - e.g. mixing IPv4/v6)
- StrongSwan execute_with_mount() to allow configurable rootwrap config file.
- Support for BGP/MPLS VPN, DM VPN, others?
- Certificate support (Barbican)?
- Should enhance/add unit test cases for:
- Checking various sync() cases: router w/o VPN running on it any more; router with VPN running, but no longer a service configured; process running VPN, but no longer VPN configured.
- Verification of contents of configuration files created for StrongSwan and OpenSwan.
- Verification of reported status for various cases: connections (active, down, pending create), service (created, deleted, admin down).
Open Discussion
Charter
Meeting Commands
/join #openstack-meeting-4
#startmeeting vpnaas
#topic Announcements
#undo
...
#endmeeting
