Re: I think I've fixed SecGrps and SecGrpRules

Suryanarayanan, Aswin <aswin.suryanarayanan@...>

Hi Ed,


We checked with break points in  NeutronSecurityRulesNorthbound and NeutronSecurityGroupsNorthbound in neutron ODL. We will analyze with wireshark and get back.




From: Edward Warnicke [mailto:hagbard@...]
Sent: Tuesday, June 16, 2015 11:40 PM
To: Suryanarayanan, Aswin
Cc: ovsdb-dev@...; Kenchappa, Ravindra; neutron-dev@...; groupbasedpolicy-dev@...
Subject: Re: [ovsdb-dev] I think I've fixed SecGrps and SecGrpRules


Looping in other interested parties.




Lets start debugging at the top :)


1)  When you create a VM, what call are you expecting to see to ODL, and how are you verifying you don't see it (wireshark, etc)


The reason I ask, is because the issue could be in any of the following components:


1) Neutron

2) ML2

3) ODL ML2 Driver (in Stackforge)

4) ODL Neutron Northbound (in ODL)

5) The provider


Usually, the simplest way to start debugging for me is to answer the question:


On the wire, do I see the REST calls I expected.


Once we know the answer to that, we can drill further down :)






On Tue, Jun 16, 2015 at 11:44 AM, Suryanarayanan, Aswin <aswin.suryanarayanan@...> wrote:

Hi Ed,


Me and Ravi  tired with the devstack kilo with latest code from networking-odl(few changes in neutron as well) along with latest ODL. We observed that when we created a network from horizon we received a call to NeutronSecurityRulesNorthbound  createSecurityRules with empty list. But when we created a vm call didn’t seem to reach Neutron northbound in ODL and no flows where inserted Table 40 or Table 90.  Shouldn’t we have the default rules to be added?  Could you please clarify?  Also when we tried to create SG from horizon UI, none of the call hit the Neutron Security Groups in ODL. Do that require any further changes in networking-odl/neutron?



ovsdb-dev mailing list


Join to automatically receive all group messages.