Commit Graph

54 Commits

Author SHA1 Message Date
Bodo Petermann 256464aea6 VPNaaS support for OVN
Adds VPNaaS support for OVN.
Add a new stand-alone VPN agent to support OVN+VPN. Add OVN-specific
service and device drivers that support this new VPN agent. This will
have no impact on the existing VPN solution for ML2/OVS, the existing
L3 agent and its VPN extension will still work.

Add a new VPN agent scheduler that will schedule VPN services to VPN
agents on a per-router basis.

Add two new database tables: vpn_ext_gws (to store extra port IDs)
and routervpnagentbindings (to store VPN agent ID per router).

More details see spec (neutron-specs/specs/xena/vpnaas-ovn.rst).

This work is based on work of MingShuan Xian (xianms@cn.ibm.com),
see https://bugs.launchpad.net/networking-ovn/+bug/1586253

Depends-On: https://review.opendev.org/c/openstack/neutron/+/847005
Depends-On: https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/847007

Closes-Bug: #1905391
Change-Id: I632f86762d63edbfe225727db11ea21bbb1ffc25
2023-11-16 21:08:50 +01:00
LiZekun 780d88ea11 remove unicode literal from code
All strings are considered as unicode string from Python 3.

This patch drops the explicit unicode literal (u'...')
appearances from the unicode strings.

Change-Id: I5c990388bff3f65bfd5e6367a4e17a9292c533ad
2022-03-08 00:52:14 +00:00
Ghanshyam Mann bd75769c8e Moving IRC network reference to OFTC
Change-Id: Iec2522b4ee83c68674e26ecd71d896c75cf4fa34
2021-07-08 18:57:00 -05:00
Akihiro Motoki 7c8262cf50 Fix inconsistency in requirements
The latest pip resolver started to check requirements strictly
and it detects many inconsistencies in neutron-vpnaas requirements.
Also applies the practices discussed in the mailing list [1][2].

* Drop pyflakes from requirements.txt as it is not used.
* Move document dependencies to doc/requirements.txt [1]
  and drop them from lower-constriants.txt.
* Bump MarkupSafe lower-constraint to 1.1.1
  to make it work with newer setuptools.
* Bump the minimum neutron requirement to 17.0.0 (victoria release)
  as the previous min version 13.0.0.0b2 is too old.
  Wallaby and Victoria neutron are not different much, so I think
  it is no problem to use the latest released version here.
* Dependenicy related to neutron min version bump are updated
  in requirements and lower-constraints.
  Note that eventlet 0.22.0 is used as lower-constraints as 0.21.0
  (the min requirement in neutron 17.0.0) is blocked in several libs.
* Move linter dependencies to tox.ini and drop them from
  lower-constraints.txt (pylint, pyflakes, astroid, isort)
* Drop psutil from neutron_vpnaas/tests/functional/requirements.txt
  as the specified version of psutil is too old and psutil is a dependency
  of neutron so we don't need to install it explicitly here.

In addition, hacking version is updated as hacking 0.12.0 is not compatible
with python 3.8. W504 and I202 are ignored as we do in the neutron repo.
Other new flake8 violations are fixed.

[1] http://lists.openstack.org/pipermail/openstack-discuss/2021-January/019611.html
[2] http://lists.openstack.org/pipermail/openstack-discuss/2020-December/019362.html

Change-Id: I47f6d39379b68c4d71fc4d85ebb06d97cb5a6ce2
2021-01-07 05:13:34 +09:00
Andreas Jaeger d18958bf72 Switch to newer openstackdocstheme and reno versions
Switch to openstackdocstheme 2.2.1 and reno 3.1.0 versions. Using
these versions will allow especially:
* Linking from HTML to PDF document
* Allow parallel building of documents
* Fix some rendering problems

Update Sphinx version as well.

Set openstackdocs_pdf_link to link to PDF file. Note that
the link to the published document only works on docs.openstack.org
where the PDF file is placed in the top-level html directory. The
site-preview places the PDF in a pdf directory.

Disable openstackdocs_auto_name to use 'project' variable as name.

Change pygments_style to 'native' since old theme version always used
'native' and the theme now respects the setting and using 'sphinx' can
lead to some strange rendering.

openstackdocstheme renames some variables, so follow the renames
before the next release removes them. A couple of variables are also
not needed anymore, remove them.

See also
http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html

Change-Id: Ibeec55164eaa9985b3e9281bc23ecdad232e4fff
2020-05-21 20:43:36 +02:00
Dongcan Ye b30acb02bb Volunteer as driver maintainers
Thanks slaweq and Neutron team's attention for neutron-vpnaas.[1]
As an user, we use neutron-vpnaas in our product as many other companies.
Over the past couple of cycles, I had fixed bugs from our users and
CI failure, reviewed some patches.[2]

I would like to add myself as a maintainer, with the help from Neutron team
and neutron-vpnaas cores, I will take attention for the bugs, project CI and
review patches.

Hunt Xu is my former colleague, I can confirm that he will not
maintained LibreSwanDriver anymore, so I change it to myself.

[1] http://lists.openstack.org/pipermail/openstack-discuss/2020-January/011834.html
[2] https://www.stackalytics.com/?release=all&company=awcloud&metric=commits&module=neutron-vpnaas&user_id=hellochosen

Change-Id: I139cfae3e64eb066f428534f94642cdeb5cd07d7
2020-01-08 04:38:28 +00:00
Zuul 06605a2282 Merge "PDF documentation build" 2019-09-30 04:39:17 +00:00
Akihiro Motoki 811602c374 PDF documentation build
Change-Id: I72ae5388b5f51d0072cd1b529562965433d1a139
Story: 2006099
Task: 35135
2019-09-26 15:24:59 +09:00
Andreas Jaeger 66dfa3f57c Update api-ref location
The api documentation is now published on docs.openstack.org instead
of developer.openstack.org. Update all links that are changed to the
new location.

Note that redirects will be set up as well but let's point now to the
new location.

For details, see:
http://lists.openstack.org/pipermail/openstack-discuss/2019-July/007828.html

Change-Id: If5ecd53888b339701ee162b66ae988c9cd9efd36
2019-07-30 19:55:11 +02:00
Zuul 58813f5306 Merge "Replace git.openstack.org URLs with opendev.org URLs" 2019-05-11 12:24:04 +00:00
caoyuan e69c508770 Replace git.openstack.org URLs with opendev.org URLs
Change-Id: Idf2aeff4939079743dfae567ea15193b971af464
2019-05-11 12:49:37 +08:00
Hunt Xu 0585b53530 Replace neutron CLI with openstack CLI
neutron CLI is deprecated and will be removed in the future. Use
openstack CLI instead.

Highlighted texts are now emphasized by "emphasize-lines" option
of the code-block directive.

Co-Authored-By: Akihiro Motoki <amotoki@gmail.com>
Change-Id: I552171fe3e22290580e2cdff20adccf655573d03
2019-02-27 04:24:25 +00:00
Akihiro Motoki c561e8940a doc: Add policy reference
Partially Implements: blueprint neutron-policy-in-code

Change-Id: Ie0d1293d9352b29627801ed6103aa1e9ce8915dd
2019-01-07 16:38:45 +00:00
Dao Cong Tien da4fff7e7a Function argument name not used correctly
This will cause an error when generating docs
with python3.

Change-Id: I613f7670f10c0a176757907181dd687d18632edd
2018-07-31 07:54:43 +00:00
Cao Xuan Hoang eadee693a9 Remove unmaintained drivers
After the announcement on mailing list [1] but there is no response.
This patch intends to remove the following drivers that are unmaintained:
- CiscoCsrIPsecDriver
- FedoraStrongSwanDriver
- VyattaIPsecDriver

[1] http://lists.openstack.org/pipermail/openstack-dev/2017-July/120264.html

Change-Id: I984a41b9a9b5c154c4be7f5bcef621fe8c5677ac
2018-04-20 15:00:19 +07:00
Brian Haley 8d5433fe8f Change back to using vpn_agent.ini
After https://review.openstack.org/#/c/555167/ merged
downstream packaging jobs broke due to the filename
change to l3_agent.ini.  Change it back to vpn_agent.ini
since it could cause an upgrade issue.

Also, since l3_agent.ini is already used in the neutron
tree, having a file with the same name could cause some
confusion, so it's better to use something unique.

Change-Id: I39cf2c0d1c54e7c292dcdf71831c1a3cbc67284a
2018-04-04 11:03:29 -04:00
Akihiro Motoki 38d53da188 Improve docs to follow the standard structure
neutron-vpnaas documentation needed to be updated to the document
structure recommended by the docs team.
This commits add several sections and reorganizes the existing docs.

Change-Id: Iae2704f3d0653e00c18cf1fccdbcb8b926a5b15c
2018-04-02 02:19:04 +00:00
Akihiro Motoki 27b2222a3d Rearrange doc structure to standard layout
* The document is no longer only for developers, so the title of
  the top page is updated.
* In the current document standard, docs for contributors are
  placed under contributor/.
* Title levels are rearranged to be shown appropriately
  with openstackdocsthems.
* Fixes many sphinx code-block for better rendering.

Change-Id: I36fc80d1c1e5382597099b86df3bbf009ce06902
2018-02-28 20:49:23 +09:00
Cao Xuan Hoang 14f0ebb882 Add Hunt Xu to list of driver maintainers
I would like to add Hunt Xu as a maintainer for libreswan driver
as He is currently focusing and active on it.

Change-Id: I6f6ae79a79f8f426226af900027c8038ca537213
2018-02-12 09:49:49 +07:00
Chandan Kumar bc7b1bf795 Switch to neutron-tempest-plugin for tempest tests
* https://review.openstack.org/519310 syncs the code from neutron
  project to neutron-tempest-plugin repo and it is better to depend
  on new one inorder to avoid the breakage.

Change-Id: Icf3ec7c186f45e86d602d5bc8754b91ddab47732
2018-01-23 11:36:34 +05:30
Zuul 5c97c2bc2e Merge "[doc] Add testing VPNaaS with devstack" 2018-01-12 08:02:35 +00:00
Zuul d4cc4c914a Merge "[doc] add more info to contributor guide" 2018-01-11 13:49:28 +00:00
Cao Xuan Hoang 5ec634a3f6 [doc] Add testing VPNaaS with devstack
This patch adds doc for how to test VPNaaS with devstack
in order to help developers, operators and users easy to
understand VPNaaS as fast as possible.

This patch addresses the gap and improves docs as
discussed in Boston summit.

The content of this patch is basic inheritted from wiki page [1]
[1] https://wiki.openstack.org/wiki/Neutron/VPNaaS/HowToInstall

Change-Id: I8465cb90645af0fc3ea8cda554b0477b15f01fbe
Related-bug: 1692131
2018-01-11 15:32:06 +07:00
Cao Xuan Hoang 0ac5f7fb99 [doc] add more info to contributor guide
This patch adds more info to contributor guide to let
new contributors know how to contribute to vpnaas actively.

Change-Id: I62baaa077393009d8fa23d36413a3059bc2c4a0c
Related-bug: 1692131
2018-01-05 11:20:15 +07:00
Zuul 138e5f5800 Merge "[doc] Update for devstack configuration" 2017-12-25 06:41:56 +00:00
Cao Xuan Hoang d494c34a91 [doc] Add more info about vpnaas team
This patch add more info about vpnaas team in order to let
new contributor know how to reach out relevent members.

Change-Id: I2a442973e7a4bf8498835d5ddf161bf635fc8bcb
Related-bug: 1692131
2017-12-21 15:00:02 +07:00
Cao Xuan Hoang ba18f8a9f8 [doc] Update for devstack configuration
Now that VPNaaS is running under L3 agent extension.
There is no need extra steps.

Change-Id: I0f6a6dfe83f81da9d98b7ba1bd1b594eed4152e8
Related-bug: 1692131
2017-12-21 09:01:32 +07:00
Monty Taylor 374420b53c
Remove vestigate HUDSON_PUBLISH_DOCS reference
This isn't actually used and is a leftover from a thing we did
seven years ago that survives today through copy-pasta.

Change-Id: Ifadab85df01e1c0e81177354b47be03f354ec4d3
2017-09-02 08:54:39 -05:00
Zhenmei 797c046669 Devref for VMWare NSX-v IPsec VPN driver
Depends-On: Id3fd4da7e4dd4cac4eb2e32024c0d8242b85a0bb
Change-Id: Iecd22b4c33287b05ac9b14e8c1f1a8435d87f8df
Co-Authored-By: Roey Chen <roeyc@vmware.com>
2017-07-23 02:05:54 -07:00
Jenkins 4b923bca84 Merge "Fix doc rendering for more easy to read" 2017-07-21 01:56:26 +00:00
Cao Xuan Hoang 7280530329 Fix doc rendering for more easy to read
TrivialFix

Change-Id: Ifbd95e182b8d462751481dda8bdd559b928f5f63
2017-07-17 09:32:31 +07:00
melissaml 76583c56ec Update URLs in documents according to document migration
Change-Id: I3fd980bc5dfb24adb73ac46270b1296e26c65eac
2017-07-14 13:09:47 +08:00
Jenkins dddb73ccb4 Merge "Optimize the link address" 2017-06-30 11:50:15 +00:00
Jenkins 96fa8c5f5e Merge "Add myself to list of driver maintainers" 2017-06-30 11:20:21 +00:00
Van Hung Pham 0cd6ff32a9 Optimize the link address
Update link address to ensure safety and preciseness

Change-Id: I96b27a0d8a7a0d48b4301392ea9490ef5a6b82b1
2017-06-30 10:20:12 +00:00
Van Hung Pham 0c1ac4badb Switch from oslosphinx to openstackdocstheme
As part of the docs migration work[0] for Pike we need to switch to use
the openstackdocstheme.

[0]https://review.openstack.org/#/c/472275/

Change-Id: Icb985379c263d7d06544d69bae11282a18a7fc52
2017-06-30 02:50:37 +00:00
Cao Xuan Hoang a8439aebbc Add myself to list of driver maintainers
I would like to add myself as a maintainer for strongswan driver
as I am currently using and focusing on it. In order to share
workload with Kong as he is in-charging for 2 drivers.

Change-Id: I6ff26ef34520e9f8711503b7589c37bdbc32ca39
2017-06-09 10:47:03 +07:00
Jenkins 966921aeca Merge "doc: Add a list of driver maintainers" 2017-04-17 05:44:53 +00:00
YAMAMOTO Takashi f431850cf2 doc: Add a list of driver maintainers
Change-Id: I81a9001124cd806353b7c4ea8750a077016877e4
2017-03-15 10:35:43 +09:00
Cao Xuan Hoang 8915bdcac7 devref/devstack: Switch the default to strongswan
This patch is follow up of
I955546e4c63daacf0c8b4e979917eacb3a4e29d7
to close the bug completely in devref.

Change-Id: I92746c3451577db026672842ec229b395b3e2ccf
2017-03-06 07:58:13 +07:00
YAMAMOTO Takashi cdd940f11d doc: Fix a warning
Closes-Bug: #1666252
Change-Id: I99c347eeb040a1a35ffd8fe9498f08d4d9a39b3d
2017-02-20 10:43:57 -05:00
Jenkins f6903524e0 Merge "Fix API Tests" 2016-07-29 16:03:20 +00:00
chen-li 113c39a75d Fix API Tests
Currently, when we run api tests with command: "tox -e api",
tests are failing with errors.

This change first fixes errors, make api tests pass. Then refactor
the neutron-vpnaas api tests tree to fit the tempest plugin.

As a tempest plugin, the steps to run tests by hands are:

1. Setup a local working environment for running tempest
    tempest init ${your_tempest_dir}

2. Enter ${your_tempest_dir}
    cd ${your_tempest_dir}

3. Check neutron_vpnaas_tests exist in tempest plugins:
    tempest list-plugins
    +----------------------+------------------------------------------------------+
    |         Name         |                      EntryPoint                      |
    +----------------------+------------------------------------------------------+
    |    neutron_tests     |  neutron.tests.tempest.plugin:NeutronTempestPlugin   |
    | neutron_vpnaas_tests | neutron_vpnaas.tests.tempest.plugin:VPNTempestPlugin |
    +----------------------+------------------------------------------------------+

4. Run neutron_vpnaas tests:
    tempest run --regex "^neutron_vpnaas.tests.tempest.api\."

In the jenkins gate,  devstack-gate/devstack-vm-gate-wrap.sh will invoke tempest
with proper configurations, such as:
    DEVSTACK_GATE_TEMPEST=1
    DEVSTACK_GATE_TEMPEST_ALL_PLUGINS=1
    DEVSTACK_GATE_TEMPEST_REGEX="^neutron_vpnaas.tests.tempest.api\."
The actual raw command in gate running under the tempest code directory is:
    tox -eall-plugin -- "^neutron_vpnaas.tests.tempest.api\."

This is a part of activate the API job:
https://review.openstack.org/#/c/337011/

Change-Id: Icdc946bccb77b4c78d161a590de1aa15e0a57139
2016-07-28 20:23:28 -05:00
Dongcan Ye ea91ff89fa Add Libreswan installation guide in devstack.rst
Libreswan device driver had already supported from
Liberty, so we can install VPNaaS in CentOS7 or RHEL7.
Default DevStack setting for IPSEC package is openswan.

This patch give some example for the manually IPsec
package installation in devstack docs.

Change-Id: I156ba72baeb8c540bdf0ed23669ed2255f270184
2016-07-27 21:05:54 +08:00
Thomas Bechtold 6c38daffe5 Fix doc build if git is absent
When building packages if git is absent, then we should not set
html_last_updated_fmt. It can still be set via the -D switch
when building with sphinx-build.

Change-Id: I9f833ed6c9881803702466775895c1ad63d0d21d
Closes-Bug: #1552251
2016-04-13 09:57:09 +02:00
Andreas Jaeger 8cae057314 Remove unused pngmath Sphinx extension
There's no RST file that uses ".. math" and thus
the pngmath Sphinx extension is not used and can
get removed.

Change-Id: I3ea4b529025c8ac3c4092f3720124647861e6668
2016-02-29 19:56:27 +01:00
Aishwarya Thangappa 22205d681e Single/Multinode VPNaaS Scenario Tests using Rally
(a) Refactored the code to work with the following cases
    1. Single node with DVR
    2. Single node without DVR
    3. Multinode with DVR
    4. Multinode without DVR
|-------------|-------------------------------------------------------|
|             |                Single Node/ Multinode Tests           |
| Scenarios   |-------------------------------------------------------|
|             | DVR | DVR+Concurrency | Non DVR | Non DVR+Concurrency |
|-------------|-----|-----------------|---------|---------------------|
| Vpn Basic   |  x  |      x          |    x    |         x           |
| Multi Tenant|  x  |      x          |    x    |         x           |
| Vpn Status  |  x  |      x          |    x    |         x           |
|-------------|-----|-----------------|---------|---------------------|

(b) Used the paramiko package to execute commands over ssh.

(c) Moved the README to devref

Depends-On: Id3f199d688d648f4618a6850d094e26ca6bb9a7f
Change-Id: I24d5a8435f06014fa9164bef518cac62bbb70ef9
2016-02-12 12:44:16 -08:00
Ryan Moats e544a4f669 Add multi-node devstack support to VPNaaS
Modify devstack plugin to support multi-node confgurations
(i.e. where the network node is split from the controller node).

DocImpact: Migrate HowTo wiki page to additional devref text

Change-Id: Iac5756ffe75b2125faace54b74b296036905a9b0
Signed-off-by: Ryan Moats <rmoats@us.ibm.com>
2016-01-12 07:53:59 -06:00
Yatin Kumbhare 19c1773906 Fix for the deprecated library function
os.popen() is deprecated since version 2.6. Resolved with use of
subprocess module.

Change-Id: I1f5ca0666d818e052b088fa62b48a8d651b66711
2016-01-04 19:50:40 +05:30
Ihar Hrachyshka ef4476a992 Added constraints tox targets
These are eventually going to be used in gate instead of unconstrained
jobs. There is some code duplication in commands definitions, but tox
does not allow to inherit definitions with {posargs} substitution.

Made tox_install.sh use constraints file to install both the project and
neutron dependency, if the first argument is 'constrained'.

Note: To test the docs targets, needed to fix a formatting issue in
multiple-local-subnets.rst document.

Change-Id: I699022b285594edf3c5db10fbdac2f904dc42928
Partial-Bug: #1522503
Depends-On: Icfc50a0a9330dbc2a59f9bb27f09944bdf0e00d1
2015-12-08 17:37:23 +00:00