atom feed22 messages in net.launchpad.lists.openstackRe: [Openstack] [openstack-dev] Quant...
FromSent OnAttachments
Dan WendlandtAug 24, 2012 3:39 pm 
Rob_...@Dell.comAug 26, 2012 12:39 pm 
Chris WrightAug 27, 2012 9:21 am 
Dan WendlandtAug 27, 2012 10:56 am 
Rob_...@Dell.comSep 3, 2012 10:47 am 
Gary KottonSep 3, 2012 11:15 pm 
Trey MorrisSep 4, 2012 1:16 pm 
andi abesSep 5, 2012 5:23 am 
Salvatore OrlandoSep 5, 2012 5:42 am 
Dan WendlandtSep 5, 2012 9:55 am 
Dan WendlandtSep 5, 2012 10:01 am 
Chris WrightSep 5, 2012 12:25 pm 
Kyle Mestery (kmestery)Sep 5, 2012 1:14 pm 
Syd (Sydney) LoganSep 5, 2012 1:59 pm 
andi abesSep 5, 2012 2:50 pm 
rohon mathieuSep 6, 2012 12:50 am 
Dan WendlandtSep 6, 2012 9:29 am 
rohon mathieuSep 7, 2012 8:36 am 
Dan WendlandtSep 7, 2012 9:56 am 
Syd (Sydney) LoganSep 7, 2012 10:34 am 
Dan WendlandtSep 7, 2012 11:11 am 
Syd (Sydney) LoganSep 7, 2012 12:02 pm 
Subject:Re: [Openstack] [openstack-dev] Quantum vs. Nova-network in Folsom
From:Dan Wendlandt (
Date:Sep 7, 2012 11:11:26 am

Hi Syd,

On Fri, Sep 7, 2012 at 10:34 AM, Syd (Sydney) Logan <> wrote:

I'm I correct in believing that the Quantum L3 Abstractions and API Framework
( is the current
plan of record for bringing L2toL3 functionality (e.g., VXLAN/NVGRE) into

Several Quantum plugins already have L3-over-L3 "overlay" tunneling capability to provide private L2 tenant networks without VLANs. These plugins include the Open vSwitch plugin (completely free/open source) and the Nicira NVP plugin (commercial). I suspect others will add this capability as well in the future, and in general its a great example of the new network technologies that Quantum enables.

The blueprint above is actually complete and merged, but is actually about letting tenants define "routers" that connect multiple L2 Quantum networks (e.g., to make multi-tier web applications). These routers can also provide access to external networks and implement floating IPs. We're still wrapping up the Folsom Quantum docs, but hopefully this capability will be more clear soon. Thanks,


Is anyone signed up to do this or has this blueprint been deprecated in favor of
some other approach?



-----Original Message----- From:
[] On Behalf Of
Dan Wendlandt Sent: Friday, September 07, 2012 9:57 AM To: OpenStack Development Mailing List Cc:; andi abes; Subject: Re: [Openstack] [openstack-dev] Quantum vs. Nova-network in Folsom

On Fri, Sep 7, 2012 at 8:36 AM, rohon mathieu <> wrote:

great work thanks;

As you said the main missing feature of quantum is the multi-host L3-agent. So I wonder if we can combine nova-network and quantum in a way that nova-network is only used for L3 features?

I agree that it would be great if there was a simple work around like that, but I think the core of the problem is the multi_host logic in nova-network is closely tied to the IP Address Management (IPAM) logic in nova. Quantum has its own IPAM logic, as it supports more advanced scenarios like overlapping IP addresses on different networks. As a result, I think trying to get the nova-network multi_host logic working with Quantum would be on the same order of difficultly has getting a multi_host equivalent working in Quantum. I don't think its fundamentally hard, we just need to be spending our current Quantum cycles on testing, bug fixing, and documentation and so had to drop this feature for the Folsom release.

On Thu, Sep 6, 2012 at 6:29 PM, Dan Wendlandt <> wrote:

On Thu, Sep 6, 2012 at 12:50 AM, rohon mathieu <> wrote:

There is still the security filtering issue ( which prevent some cloud operator from using OVS.

Do you have a workaround to use security group with OVS in folsom?

Yes, it merged into Nova yesterday.

We're still working on the new Quantum docs for Folsom, but if you're already familiar with using Quantum + Nova, the key difference is that you use should a libvirt vif-plugging config of LibvirtHybridOVSBridgeDriver, rather than just LibvirtOpenVswitchDriver .

On Wed, Sep 5, 2012 at 7:01 PM, Dan Wendlandt <> wrote:

On Wed, Sep 5, 2012 at 5:23 AM, andi abes <> wrote:

late to the party... but I'll dabble.

On Mon, Aug 27, 2012 at 12:21 PM, Chris Wright <> wrote:

* ( wrote:

We've been discussing using Open vSwitch as the basis for non-Quantum Nova Networking deployments in Folsom. While not Quantum, it feels like we're bringing Nova Networking a step closer to some of the core technologies that Quantum uses.

To what end?

OVS provides much more robust monitoring and operational facilities (e.g sFlow monitoring, better switch table visibility etc).

You won't find any disagreement from me about OVS having more advanced capabilities :)

It also provides a linux-bridge compatibility layer (ovs-brcompatd [1]), which should work out-of-box with the linux-bridge. As such, switching to using OVS rather than the linux bridge could be done without any code changes to nova, just deployment changes (e.g. ensure that ovs-brcompatd is running to intercept brctl ioctl's - [2]).

Using ovs-brcompatd would be possible, though some distros do not package and run it by default and in general it is not the "preferred" way to run things according to email on the OVS mailing list.

For the more adventurous, there could be any number of interesting scenarios enabled by having access to ovs capabilities (e.g. tunneling)

Tunneling is definitely a huge benefit of OVS, but you still need someone to setup the tunnels and direct packets into them correctly. That's is exactly what the Quantum OVS plugin does and it is completely open source and freely available, so if people want to experiment with OVS tunneling, using Quantum would seem like the obvious way to do this.