Re: [ovirt-users] oVirt 4 and Neutron

Marcin, So an update on my situation, I restarted all OpenVSwitch processes on all boxes and was able to get the CPU issue with ovs-vswitchd to return to normal. So I believe all those issues are resolved. I can create networks/subnets, minus that one strange UI issue which I'll work with Alexander Wels to resolve. When I still go to launch a Virtual Machine, should I be seeing the subnets that I created? Am I missing something? It seems like i'm about 95% there and I am just missing something. On Fri, Dec 2, 2016 at 11:44 AM, Devin Acosta <devin(a)pabstatencio.com&gt; wrote: > Marcin, > > I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt > network, I also installed the OVN-Provider on this same instance. I then > installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN > provider driver, and configured the vdsm ovn-controller {central-ip} > {ovirt-node-ip} on each of the boxes. It appears to be running but what I > am noticing is that the ovs-vswitchd process is pegged at 100% on all the > oVirt nodes. > > So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for > the other 2 nodes in it's configuration. It seems to be that way across all > 3 nodes, they know about the other nodes in the cluster. I was able to > create a network inside of oVIRT using the external provider. After i > create a subnet inside oVirt I do get an error at the top but seems to be > ok? > > > [image: Inline image 2] > > (Output from Node3 IP 75, of: ovs-vsctl show) > > 61af799c-a621-445e-8183-23dcb38ea3cc > Bridge br-int > fail_mode: secure > Port "ovn-c0dc09-0" > Interface "ovn-c0dc09-0" > type: geneve > options: {csum="true", key=flow, remote_ip="172.10.10.73"} > Port "ovn-456949-0" > Interface "ovn-456949-0" > type: geneve > options: {csum="true", key=flow, remote_ip="172.10.10.74"} > Port br-int > Interface br-int > type: internal > ovs_version: "2.6.90" > > > > Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes. > > PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ > COMMAND > 1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85 > ovs-vswitchd > > > [root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log > 2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log > messages in last 6 seconds (most recently, 0 seconds ago) due to excessive > rate > 2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout > at vswitchd/bridge.c:3031 (100% CPU usage) > 2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log > messages in last 6 seconds (most recently, 0 seconds ago) due to excessive > rate > 2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout > at vswitchd/bridge.c:3031 (100% CPU usage) > 2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log > messages in last 6 seconds (most recently, 0 seconds ago) due to excessive > rate > 2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout > at vswitchd/bridge.c:3031 (100% CPU usage) > 2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log > messages in last 6 seconds (most recently, 0 seconds ago) due to excessive > rate > 2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout > at vswitchd/bridge.c:3031 (100% CPU usage) > 2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log > messages in last 6 seconds (most recently, 0 seconds ago) due to excessive > rate > 2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout > at vswitchd/bridge.c:3031 (99% CPU usage) > > > One other thing that I notice is that when I got to Provision a Virtual > Machine from the Main Data Center, my Networks don't show under the NIC > where I could select them? Am I missing something on this? > > Thanks very much for your help. > > Devin Acosta > > > On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki(a)redhat.com&gt; > wrote: > >> Devin, >> >> > I presume the OVN Controller should just be some VM that is on the >> > ovirtmgmt network, or is there a preferred place to install the OVN >> > controller software? >> >> Please note the difference between OVN-Central and OVN-Controller: >> OVN-Central is the central part of OVN, storing the logical >> configuration and controlling the many OVN-Controllers >> OVN-Controller is the piece of software which resides on the >> ovirt-hosts, and manages the local OVS setup on the host. >> >> OVN-Central >> / | \ >> / | \ >> / | \ >> / | \ >> OVN-Controller OVN-Controller OVN-Controller >> >> >> OVN-central can be installed anywhere , as long as it can communicate >> with the engine and all the hosts. >> During development we install it along the ovirt engine for convinience. >> >> OVN-Controller must be installed on every ovirt host. >> >> >> >I then also assume I install the OVN agents onto all >> > the oVirt Nodes. >> >> Short answer: Yes >> >> Longe answer: If you plan not to use external networks on some clusters, >> you >> can skip its hosts. >> You can choose the clusters which support the external network by >> assigning the >> network to clusters. >> >> > I see >> > that when you go to add the External Provider, does OVN Controller use >> > authentication, is there any information I would need to have besides >> > knowing which node it's on in order to add it to external provider? >> >> For now it is only the url of the provider. >> The provider is still under development, authentication is still just an >> empty mock. >> >> >Would I >> > need to have any bridges or OVS configured on the nodes for this to >> work or >> > just install the services and get them configured and it just works? >> >> We are using the default 'br-int' bridge which OVN is using. All should >> be configured >> when OVS/OVN is installed. >> >> Let me know if I can help with anything else. >> Marcin >> >> >> >> ----- Original Message ----- >> > From: "Devin Acosta" <devin(a)pabstatencio.com&gt; >> > To: "Marcin Mirecki" <mmirecki(a)redhat.com&gt; >> > Cc: "users" <Users(a)ovirt.org&gt;, "Yaniv Dary" <ydary(a)redhat.com&gt; >> > Sent: Thursday, December 1, 2016 6:19:07 PM >> > Subject: Re: [ovirt-users] oVirt 4 and Neutron >> > >> > I have manually created the RPM's successfully, I just want to clarify >> a >> > few items so I make sure I'm deploying this according to best practice. >> > >> > I presume the OVN Controller should just be some VM that is on the >> > ovirtmgmt network, or is there a preferred place to install the OVN >> > controller software? I then also assume I install the OVN agents onto >> all >> > the oVirt Nodes. My take on this is that this OVN replaces the more >> complex >> > Neutron/OVS installation, and makes for a more simple deployment. I >> see >> > that when you go to add the External Provider, does OVN Controller use >> > authentication, is there any information I would need to have besides >> > knowing which node it's on in order to add it to external provider? >> Would I >> > need to have any bridges or OVS configured on the nodes for this to >> work or >> > just install the services and get them configured and it just works? >> > >> > >> > Your assistance is appreciated. >> > >> > On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki(a)redhat.com&gt; >> wrote: >> > >> > > Devin, >> > > >> > > The openvswitch OVN packages must be build manually at the moment. >> It is >> > > still not available either in the repos, nor as a download. >> > > For now please use the procedure attached below to build the OVN >> rpm's. >> > > >> > > I am not sure where 'firewalld-system' comes from. Is it not >> > > 'firewalld-filesystem'? >> > > This should be available from the standard repo. >> > > >> > > The ovirt-provider-ovn is being developed quite actively, and the >> blogpost >> > > is already somewhat outdated (even though it's not even a month >> old). I >> > > will try to update it asap. >> > > >> > > Thanks, >> > > Marcin >> > > >> > > >> > > BUILDING PROVIDER RPMS: >> > > ---------------------- >> > > git clone https://gerrit.ovirt.org/ovirt-provider-ovn >> > > make rpm >> > > >> > > >> > > >> > > >> > > BUILDING OVN RPMS: >> > > ------------------ >> > > >> > > Clone the repository: >> > > >> > > git clone https://github.com/openvswitch/ovs >> > > >> > > Install the following packages, as they are need to build ovn: >> > > >> > > yum -y install gcc make python-devel openssl-devel kernel-devel >> graphviz >> > > kernel-debug-devel autoconf automake rpm-build redhat-rpm-config >> rpm-build >> > > rpmdevtools bash-completion autoconf automake libtool PyQt4 groff >> > > libcap-ng-devel python-twisted-core python-zope-interface graphviz >> > > openssl-devel selinux-policy-devel >> > > >> > > Build the ovn rpms: >> > > >> > > cd ovs >> > > ./boot.sh >> > > ./configure >> > > make dist >> > > cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES >> > > cd $HOME/rpmbuild/SOURCES >> > > tar xzf openvswitch-<version>.tar.gz >> > > cd openvswitch-<version> >> > > rpmbuild -bb rhel/openvswitch-fedora.spec >> > > >> > > The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/ >> > > >> > > -------------------- >> > > >> > > >> > > >> > > >> > > >> > > >> > > >> > > ----- Original Message ----- >> > > > From: "Yaniv Dary" <ydary(a)redhat.com&gt; >> > > > To: "Devin Acosta" <devin(a)pabstatencio.com&gt;, "Marcin Mirecki" < >> > > mmirecki(a)redhat.com&gt; >> > > > Cc: "users" <Users(a)ovirt.org&gt; >> > > > Sent: Thursday, December 1, 2016 11:15:00 AM >> > > > Subject: Re: [ovirt-users] oVirt 4 and Neutron >> > > > >> > > > Adding Marcin to help with this. >> > > > >> > > > Yaniv Dary >> > > > Technical Product Manager >> > > > Red Hat Israel Ltd. >> > > > 34 Jerusalem Road >> > > > Building A, 4th floor >> > > > Ra'anana, Israel 4350109 >> > > > >> > > > Tel : +972 (9) 7692306 >> > > > 8272306 >> > > > Email: ydary(a)redhat.com >> > > > IRC : ydary >> > > > >> > > > >> > > > On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta < >> devin(a)pabstatencio.com&gt; >> > > wrote: >> > > > >> > > > > >> > > > > Yaniv, >> > > > > >> > > > > I am looking at the page that talks about ovirt-provider-ovn, >> and it >> > > > > sounds like something I want to try. However the document seems >> to be >> > > not >> > > > > complete, and I'm not sure i fully understand how it should be >> > > deployed. >> > > > > When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" >> and >> > > try >> > > > > to install on the oVIRT nodes it complains about needing other >> packages >> > > > > such as: >> > > > > >> > > > > - openvswitch-ovn-central >> > > > > - python-openvswitch >> > > > > - firewalld-system >> > > > > - openvswitch-ovn-host >> > > > > >> > > > > I don't see anywhere where it talks about getting access to the >> RPMS >> > > for >> > > > > openvswitch-ovn-central. Also I presume like Neutron I would >> install >> > > OVN on >> > > > > a Master node and then install some clients on the nodes? Can you >> > > provide >> > > > > me additional information on this? >> > > > > >> > > > > >> > > > > >> > > > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary(a)redhat.com&gt; >> wrote: >> > > > > >> > > > >> We are working on a native path to SDN via OVN (experimental at >> this >> > > > >> point): >> > > > >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/ >> > > > >> >> > > > >> Using Neutron is an option, but at some point the native option >> might >> > > be >> > > > >> easier to use (we want to add a UI for it and tighter >> integration). >> > > > >> >> > > > >> Yaniv Dary >> > > > >> Technical Product Manager >> > > > >> Red Hat Israel Ltd. >> > > > >> 34 Jerusalem Road >> > > > >> Building A, 4th floor >> > > > >> Ra'anana, Israel 4350109 >> > > > >> >> > > > >> Tel : +972 (9) 7692306 >> > > > >> 8272306 >> > > > >> Email: ydary(a)redhat.com >> > > > >> IRC : ydary >> > > > >> >> > > > >> >> > > > >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta < >> devin(a)pabstatencio.com >> > > > >> > > > >> wrote: >> > > > >> >> > > > >>> oVirt Users: >> > > > >>> >> > > > >>> My work is currently deploying oVirt 4.0.5 into our Development >> > > > >>> environment. I see there use to be a maintained Openstack >> Neutron >> > > image >> > > > >>> that could be used with oVirt to provide SDN functionality. I'm >> > > > >>> suspecting >> > > > >>> that the reason for the image no longer being maintained is >> because >> > > it >> > > > >>> became a hassle to keep updated and patched. From what I >> understand >> > > the >> > > > >>> current idea is to just point your oVirt installation to an >> already >> > > > >>> installed Openstack setup. I can easily install an image and >> install >> > > the >> > > > >>> latest Openstack (Keystone/Neutron) and then point oVirt to >> it, but I >> > > > >>> want >> > > > >>> to understand if that is the proper way to move forward. Is >> there a >> > > > >>> general >> > > > >>> consensus with the way oVirt is moving in regards to Software >> Defined >> > > > >>> Networking and Neutron in general? Just want to ensure I >> understand >> > > it >> > > > >>> clearly before just installing my own Neutron if there is >> going to be >> > > > >>> another method. >> > > > >>> >> > > > >>> Any feedback is appreciated. >> > > > >>> >> > > > >>> Devin Acosta RHCA >> > > > >>> >> > > > >>> >> > > > >>> _______________________________________________ >> > > > >>> Users mailing list >> > > > >>> Users(a)ovirt.org >> > > > >>> http://lists.ovirt.org/mailman/listinfo/users >> > > > >>> >> > > > >>> >> > > > >> >> > > > > >> > > > > >> > > > > -- >> > > > > >> > > > > Devin Acosta >> > > > > Red Hat Certified Architect, LinuxStack >> > > > > 602-354-1220 || devin(a)linuxguru.co >> > > > > >> > > > >> > > >> > >> > >> > >> > -- >> > >> > Devin Acosta >> > Red Hat Certified Architect, LinuxStack >> > 602-354-1220 || devin(a)linuxguru.co >> > >> > > > > -- > > Devin Acosta > Red Hat Certified Architect, LinuxStack > 602-354-1220 || devin(a)linuxguru.co > -- Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin(a)linuxguru.co