Tacker/neutron-and-other-project-items
ServiceVM/Device manager https://wiki.openstack.org/wiki/ServiceVM
Items for other projects(Neutron, nova, oslo.messaging)
| Items | contents | requested by | BP/assignee | patch | comment |
|---|---|---|---|---|---|
| Disabling security group/anti-spoofing | Fix Security Groups to disable anti-spoofing mechanism to allow non VM IP/mac addresses in traffic from the Service VMs.
security group should be more flexible that allows the service VMs to spoof ip or MAC Ability to disable security groups on service VM port, at least ML2 OVS mechanism driver (e.g., by implementing the "port-security" extension |
hemanth.ravi, masters, yisun, natarajk, bmelande | |||
| VM trunk port/l2-gateway support | Rick Masters, yisun, bmelande, hemanth.ravi | https://blueprints.launchpad.net/neutron/+spec/vlan-aware-vms, https://blueprints.launchpad.net/neutron/+spec/l2-gateway | https://review.openstack.org/#/c/92541/ | ||
| mulitple VIFs | multiple nova VM interface/VIFs on the same network with virtual MAC and VIP | hemanth.ravi, yisun, bmelande | |||
| decouple vif creation/plugging | Capability to decouple the following 2 operations: a. creation of interface on a VM and b. plugging of the interface into a neutron network | hemanth.ravi, bmelande | |||
| VM connecting to mulitple tenant | allows same service VM instances to connect to the networks in different tenants | yisun, natarajk | |||
| mgmt network interface on service vm | Mgmt Network interface on Service VM to manage the VM. The mgmt network needs to be visible to both Agents running on the OS mgmt network as well as potentially be exposed to tenant networks. | hemanth.rav | The assumed deployment is not clear. Can VMs/services be trusted? If yes, provider network that is connected to OpenStack mgmt network can be used. If no, oslo.messaging proxy approach is needed | ||
| service insertion | service insertion with vm port, external port/traffic steering | bmelande | |||
| sharing mac/IP address | share a (virtual) mac/IP address by multiple service VM instances or even the two ports on the same VM | bmelande | |||
| plugging driver | bmelande | ||||
| oslo.messaging proxy | implement oslo.messaging RPC proxy over Marconi with http proxy like instance metadata proxy | yamahata | https://blueprints.launchpad.net/oslo.messaging/+spec/message-proxy-server | discussed in Atlanta. |
