oVirt 4 and Neutron

This is a cryptographically signed message in MIME format. --------------ms020104090401090603070301 Content-Type: multipart/alternative; boundary="------------000204000805040205010909" This is a multi-part message in MIME format. --------------000204000805040205010909 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit oVirt Users: My work is currently deploying oVirt 4.0.5 into our Development environment. I see there use to be a maintained Openstack Neutron image that could be used with oVirt to provide SDN functionality. I'm suspecting that the reason for the image no longer being maintained is because it became a hassle to keep updated and patched. From what I understand the current idea is to just point your oVirt installation to an already installed Openstack setup. I can easily install an image and install the latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want to understand if that is the proper way to move forward. Is there a general consensus with the way oVirt is moving in regards to Software Defined Networking and Neutron in general? Just want to ensure I understand it clearly before just installing my own Neutron if there is going to be another method. Any feedback is appreciated. Devin Acosta RHCA --------------000204000805040205010909 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <html><head> <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DISO-885= 9-1"></head><body style=3D"font-family: Larabiefont; font-size: 11pt;" text=3D"#000000"=20 bgcolor=3D"#FFFFFF"> <div style=3D"font-size: 11pt;font-family: Larabiefont;"><span=20 style=3D"font-family: Larabiefont;">oVirt Users:<br><br>My work is=20 currently deploying oVirt 4.0.5 into our Development environment. I see=20 there use to be a maintained Openstack Neutron image that could be used=20 with oVirt to provide SDN functionality. I'm suspecting that the reason=20 for the image no longer being maintained is because it became a hassle=20 to keep updated and patched. From what I understand the current idea is=20 to just point your oVirt installation to an already installed Openstack=20 setup. I can easily install an image and install the latest Openstack=20 (Keystone/Neutron) and then point oVirt to it, but I want to understand=20 if that is the proper way to move forward. Is there a general consensus=20 with the way oVirt is moving in regards to Software Defined Networking=20 and Neutron in general? Just want to ensure I understand it clearly=20 before just installing my own Neutron if there is going to be another=20 method.<br><br>Any feedback is appreciated.<br><br>Devin Acosta RHCA<br>=A0= <br></span></div> </body> </html> --------------000204000805040205010909-- --------------ms020104090401090603070301 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKjDCC BLEwggOZoAMCAQICEHcKxsK6UaQcHV0vmbJrDBowDQYJKoZIhvcNAQEFBQAwPjELMAkGA1UE BhMCUEwxGzAZBgNVBAoTElVuaXpldG8gU3AuIHogby5vLjESMBAGA1UEAxMJQ2VydHVtIENB MCIYDzIwMDkwMzAzMTI1MzE4WhgPMjAyNDAzMDMxMjUzMThaMHcxCzAJBgNVBAYTAlBMMSIw IAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkxGzAZBgNVBAMTEkNlcnR1bSBMZXZlbCBJSSBDQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOCxNCMcPIeS6Xq/bR1bWZFiLo8WLD1YFGQA XmWYELCk3SY2hlT+uAf6IhFeR3dwMUamme3UUbH+D4Pz0kv9ph0UEP0h91wAm6wx5rnA72IL VP1qGcqfXej11T2OI+yebf+drPhG2Q+bMErkCxo2fYsIPbF19yXSfU8vgd8/NKImo6StAcKg Ma3F9w3pBDpJ4+y5ADiuorkCiPOURI+CFW/ZA+yiiFnSEhm3y+BM4f0z+dXtC/1oUye5R2x2 0cxXz1P6It0MrebRHsazynvujfia3o3W+WGuzXt7Srow1OypWzvnZ6cxR+1R5ATyXECe0FK6 az2qlbFYNySdT106lZ8CAwEAAaOCAWwwggFoMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYE FIBiEd7Aa6cQ4QjwVbQwg7/6jwhgMFIGA1UdIwRLMEmhQqRAMD4xCzAJBgNVBAYTAlBMMRsw GQYDVQQKExJVbml6ZXRvIFNwLiB6IG8uby4xEjAQBgNVBAMTCUNlcnR1bSBDQYIDAQAgMA4G A1UdDwEB/wQEAwIBBjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vY3JsLmNlcnR1bS5wbC9j YS5jcmwwaAYIKwYBBQUHAQEEXDBaMCgGCCsGAQUFBzABhhxodHRwOi8vc3ViY2Eub2NzcC1j ZXJ0dW0uY29tMC4GCCsGAQUFBzAChiJodHRwOi8vcmVwb3NpdG9yeS5jZXJ0dW0ucGwvY2Eu Y2VyMDoGA1UdIAQzMDEwLwYEVR0gADAnMCUGCCsGAQUFBwIBFhlodHRwczovL3d3dy5jZXJ0 dW0ucGwvQ1BTMA0GCSqGSIb3DQEBBQUAA4IBAQCP40gwFv8Pai8xeuKEIiEQe3RiqdjZY9u8 WRWAwUSDZ+AysmRMZKWpwEhdqH/XhM760vqqA2NvZoVwojJIhq9LwrFYZ9EXlKY4OGeUrIkI WdgRko14jiYGgyOw8NTB+0buo3X0my8nfexBYxEdBERna3ANpC8Oyn0Ju/CJApVxBCoypwFE 59Xf+WOFLgVgwhC9BS4DvQKjVxMyMq5V1RiLO95HXnwCvmdU+nZvN71KwzMs3pljUQSNrVQb o5Des5Gherj4xOIX6CJBEGeN9e28hZBuJsYwE1PrUCxtQbPPB1ADq8bSTqP1qHgjbBSWsW2D 7eKEBsSFWHc9vTlF/QkAMIIF0zCCBLugAwIBAgIQFGWG8QKDjBKWV88T0eUTaDANBgkqhkiG 9w0BAQUFADB3MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMg Uy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRswGQYDVQQD ExJDZXJ0dW0gTGV2ZWwgSUkgQ0EwHhcNMTYwNDE4MDQ0NjIxWhcNMTkwNDE4MDQ0NjIxWjBH MQswCQYDVQQGEwJVUzERMA8GA1UEAwwIQmFzaWMgSUQxJTAjBgkqhkiG9w0BCQEWFmRldmlu QGxpbnV4c3RhY2suY2xvdWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1/nd0 FXC31VHiGHN+opuHMZJr26nFJxGzPlqwxctSDcE9eztduNDPpwJoBtHxQ4AeVsEUWqX+vLgp CuBE53u+j8pj6jlBgND50nXBqc1qMrvgKUKq8QkCuymH7lpT59e9oWdOaIkSakH01RnFt8aK G93C9FzUOLLS8OkzQAjW0HOCGW+bDoUepNHburqquyP8Qz5CHckMP8SHNSmhpQRqgObmE70T 2RvmmxGpDJ6UDSmnp8yUE3EObAb7l7ET7PzAh8Rxgjo8IbegPTALuMW9pAnjtRgo+X/LaE5z TnSW4PoJE0TcZoJlMbIOtWg66APVS9csTF160GhKEy47e9q3AgMBAAGjggKJMIIChTAMBgNV HRMBAf8EAjAAMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly9jcmwuY2VydHVtLnBsL2wyLmNy bDBhBggrBgEFBQcBAQRVMFMwIQYIKwYBBQUHMAGGFWh0dHA6Ly9vY3NwLmNlcnR1bS5wbDAu BggrBgEFBQcwAoYiaHR0cDovL3JlcG9zaXRvcnkuY2VydHVtLnBsL2wyLmNlcjAfBgNVHSME GDAWgBSAYhHewGunEOEI8FW0MIO/+o8IYDAdBgNVHQ4EFgQU7cbDjB48++89TQXbcf3q+j8P +uwwDgYDVR0PAQH/BAQDAgSwMIIBPQYDVR0gBIIBNDCCATAwggEsBgoqhGgBhvZ3AgICMIIB HDAlBggrBgEFBQcCARYZaHR0cHM6Ly93d3cuY2VydHVtLnBsL0NQUzCB8gYIKwYBBQUHAgIw geUwIBYZVW5pemV0byBUZWNobm9sb2dpZXMgUy5BLjADAgEBGoHAVXNhZ2Ugb2YgdGhpcyBj ZXJ0aWZpY2F0ZSBpcyBzdHJpY3RseSBzdWJqZWN0ZWQgdG8gdGhlIENFUlRVTSBDZXJ0aWZp Y2F0aW9uIFByYWN0aWNlIFN0YXRlbWVudCAoQ1BTKSBpbmNvcnBvcmF0ZWQgYnkgcmVmZXJl bmNlIGhlcmVpbiBhbmQgaW4gdGhlIHJlcG9zaXRvcnkgYXQgaHR0cHM6Ly93d3cuY2VydHVt LnBsL3JlcG9zaXRvcnkuMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDARBglghkgB hvhCAQEEBAMCBaAwIQYDVR0RBBowGIEWZGV2aW5AbGludXhzdGFjay5jbG91ZDANBgkqhkiG 9w0BAQUFAAOCAQEAENnJ9XKEQ8wG8Fv4MvQAHgzkuiXckLer2NJ8Vxm9mc0iEzK/a8AhiwFF puf2aU3uSn4m3IY3g5aq1YNfc/lFo7zPl/MBBMuDGPPy3OuoZeGR7nldngSk+H8u/P9Bseui JKFfUGwWGyQ40loE4JcfBM/uftar3dCdZRzMD1V58ijETRY8HTBL0H9j4erTymPzVkDaLbZ0 WJHndlNXuTJktp1A88+GclizfhdaYKCTIKyjO9PhTf2RxAEwOI3F/OkVPYgnFAoXXJtSwrlx rGL3HYlPEdJUKKD9feovSIPlaAf5eS0dY4fBJ1HM0Of69phawZYUhFy+hYM934h1Hegd3TGC A7UwggOxAgEBMIGLMHcxCzAJBgNVBAYTAlBMMSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xv Z2llcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGzAZ BgNVBAMTEkNlcnR1bSBMZXZlbCBJSSBDQQIQFGWG8QKDjBKWV88T0eUTaDAJBgUrDgMCGgUA oIIB/jAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjExMjIw MzA5MTBaMCMGCSqGSIb3DQEJBDEWBBSMn83fqxaRliHxKdzfZ7c0fz++pTBfBgkqhkiG9w0B CQ8xUjBQMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZI hvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgZwGCSsGAQQBgjcQBDGBjjCBizB3 MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMgUy5BLjEnMCUG A1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRswGQYDVQQDExJDZXJ0dW0g TGV2ZWwgSUkgQ0ECEBRlhvECg4wSllfPE9HlE2gwgZ4GCyqGSIb3DQEJEAILMYGOoIGLMHcx CzAJBgNVBAYTAlBMMSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYD VQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGzAZBgNVBAMTEkNlcnR1bSBM ZXZlbCBJSSBDQQIQFGWG8QKDjBKWV88T0eUTaDANBgkqhkiG9w0BAQEFAASCAQAO9fuYaFHR zqk/IBhE87/7LQ9MarB859pp5gQFAVu2nkiuu/egQrVkycXOeKV2eK46ZM3hldjw8Esab4ml vFXYCzWCpGVfUbT7+w7gCwqLLEFDXKiM9vSnKfSnPY3kuAnaMEuIjQ+VyWlZGKB1YukdixUf fS2e9/k3UolMXv+R78HiINTFjsLWggmS6O2HIsJNYS9XRbxqq303mBU6zw0l4OZhCxWPoR4X vxrPxRn+iBh6rT0uxuKYrOGQp6GYYK/fWnzC5/Ti9vdHnIgBVSMtI+5mMYpPOPnAEK/un/oE HQu5BY7jvTbVb4lSKXdWN1IY7GPLeA0SvJDBu6jv/ifHAAAAAAAA --------------ms020104090401090603070301--

We are working on a native path to SDN via OVN (experimental at this point): https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/ Using Neutron is an option, but at some point the native option might be easier to use (we want to add a UI for it and tighter integration). Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109 Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin@pabstatencio.com> wrote:
oVirt Users:
My work is currently deploying oVirt 4.0.5 into our Development environment. I see there use to be a maintained Openstack Neutron image that could be used with oVirt to provide SDN functionality. I'm suspecting that the reason for the image no longer being maintained is because it became a hassle to keep updated and patched. From what I understand the current idea is to just point your oVirt installation to an already installed Openstack setup. I can easily install an image and install the latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want to understand if that is the proper way to move forward. Is there a general consensus with the way oVirt is moving in regards to Software Defined Networking and Neutron in general? Just want to ensure I understand it clearly before just installing my own Neutron if there is going to be another method.
Any feedback is appreciated.
Devin Acosta RHCA
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Yaniv, I am looking at the page that talks about ovirt-provider-ovn, and it sounds like something I want to try. However the document seems to be not complete, and I'm not sure i fully understand how it should be deployed. When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and try to install on the oVIRT nodes it complains about needing other packages such as: - openvswitch-ovn-central - python-openvswitch - firewalld-system - openvswitch-ovn-host I don't see anywhere where it talks about getting access to the RPMS for openvswitch-ovn-central. Also I presume like Neutron I would install OVN on a Master node and then install some clients on the nodes? Can you provide me additional information on this? On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote:
We are working on a native path to SDN via OVN (experimental at this point): https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
Using Neutron is an option, but at some point the native option might be easier to use (we want to add a UI for it and tighter integration).
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin@pabstatencio.com> wrote:
oVirt Users:
My work is currently deploying oVirt 4.0.5 into our Development environment. I see there use to be a maintained Openstack Neutron image that could be used with oVirt to provide SDN functionality. I'm suspecting that the reason for the image no longer being maintained is because it became a hassle to keep updated and patched. From what I understand the current idea is to just point your oVirt installation to an already installed Openstack setup. I can easily install an image and install the latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want to understand if that is the proper way to move forward. Is there a general consensus with the way oVirt is moving in regards to Software Defined Networking and Neutron in general? Just want to ensure I understand it clearly before just installing my own Neutron if there is going to be another method.
Any feedback is appreciated.
Devin Acosta RHCA
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

Adding Marcin to help with this. Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109 Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin@pabstatencio.com> wrote:
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and it sounds like something I want to try. However the document seems to be not complete, and I'm not sure i fully understand how it should be deployed. When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and try to install on the oVIRT nodes it complains about needing other packages such as:
- openvswitch-ovn-central - python-openvswitch - firewalld-system - openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the RPMS for openvswitch-ovn-central. Also I presume like Neutron I would install OVN on a Master node and then install some clients on the nodes? Can you provide me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote:
We are working on a native path to SDN via OVN (experimental at this point): https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
Using Neutron is an option, but at some point the native option might be easier to use (we want to add a UI for it and tighter integration).
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin@pabstatencio.com> wrote:
oVirt Users:
My work is currently deploying oVirt 4.0.5 into our Development environment. I see there use to be a maintained Openstack Neutron image that could be used with oVirt to provide SDN functionality. I'm suspecting that the reason for the image no longer being maintained is because it became a hassle to keep updated and patched. From what I understand the current idea is to just point your oVirt installation to an already installed Openstack setup. I can easily install an image and install the latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want to understand if that is the proper way to move forward. Is there a general consensus with the way oVirt is moving in regards to Software Defined Networking and Neutron in general? Just want to ensure I understand it clearly before just installing my own Neutron if there is going to be another method.
Any feedback is appreciated.
Devin Acosta RHCA
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

Devin, The openvswitch OVN packages must be build manually at the moment. It is still not available either in the repos, nor as a download. For now please use the procedure attached below to build the OVN rpm's. I am not sure where 'firewalld-system' comes from. Is it not 'firewalld-filesystem'? This should be available from the standard repo. The ovirt-provider-ovn is being developed quite actively, and the blogpost is already somewhat outdated (even though it's not even a month old). I will try to update it asap. Thanks, Marcin BUILDING PROVIDER RPMS: ---------------------- git clone https://gerrit.ovirt.org/ovirt-provider-ovn make rpm BUILDING OVN RPMS: ------------------ Clone the repository: git clone https://github.com/openvswitch/ovs Install the following packages, as they are need to build ovn: yum -y install gcc make python-devel openssl-devel kernel-devel graphviz kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build rpmdevtools bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core python-zope-interface graphviz openssl-devel selinux-policy-devel Build the ovn rpms: cd ovs ./boot.sh ./configure make dist cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES cd $HOME/rpmbuild/SOURCES tar xzf openvswitch-<version>.tar.gz cd openvswitch-<version> rpmbuild -bb rhel/openvswitch-fedora.spec The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/ -------------------- ----- Original Message -----
From: "Yaniv Dary" <ydary@redhat.com> To: "Devin Acosta" <devin@pabstatencio.com>, "Marcin Mirecki" <mmirecki@redhat.com> Cc: "users" <Users@ovirt.org> Sent: Thursday, December 1, 2016 11:15:00 AM Subject: Re: [ovirt-users] oVirt 4 and Neutron
Adding Marcin to help with this.
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin@pabstatencio.com> wrote:
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and it sounds like something I want to try. However the document seems to be not complete, and I'm not sure i fully understand how it should be deployed. When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and try to install on the oVIRT nodes it complains about needing other packages such as:
- openvswitch-ovn-central - python-openvswitch - firewalld-system - openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the RPMS for openvswitch-ovn-central. Also I presume like Neutron I would install OVN on a Master node and then install some clients on the nodes? Can you provide me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote:
We are working on a native path to SDN via OVN (experimental at this point): https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
Using Neutron is an option, but at some point the native option might be easier to use (we want to add a UI for it and tighter integration).
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin@pabstatencio.com> wrote:
oVirt Users:
My work is currently deploying oVirt 4.0.5 into our Development environment. I see there use to be a maintained Openstack Neutron image that could be used with oVirt to provide SDN functionality. I'm suspecting that the reason for the image no longer being maintained is because it became a hassle to keep updated and patched. From what I understand the current idea is to just point your oVirt installation to an already installed Openstack setup. I can easily install an image and install the latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want to understand if that is the proper way to move forward. Is there a general consensus with the way oVirt is moving in regards to Software Defined Networking and Neutron in general? Just want to ensure I understand it clearly before just installing my own Neutron if there is going to be another method.
Any feedback is appreciated.
Devin Acosta RHCA
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

I have manually created the RPM's successfully, I just want to clarify a few items so I make sure I'm deploying this according to best practice. I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software? I then also assume I install the OVN agents onto all the oVirt Nodes. My take on this is that this OVN replaces the more complex Neutron/OVS installation, and makes for a more simple deployment. I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider? Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works? Your assistance is appreciated. On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
The openvswitch OVN packages must be build manually at the moment. It is still not available either in the repos, nor as a download. For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not 'firewalld-filesystem'? This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the blogpost is already somewhat outdated (even though it's not even a month old). I will try to update it asap.
Thanks, Marcin
BUILDING PROVIDER RPMS: ---------------------- git clone https://gerrit.ovirt.org/ovirt-provider-ovn make rpm
BUILDING OVN RPMS: ------------------
Clone the repository:
git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn:
yum -y install gcc make python-devel openssl-devel kernel-devel graphviz kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build rpmdevtools bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core python-zope-interface graphviz openssl-devel selinux-policy-devel
Build the ovn rpms:
cd ovs ./boot.sh ./configure make dist cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES cd $HOME/rpmbuild/SOURCES tar xzf openvswitch-<version>.tar.gz cd openvswitch-<version> rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
From: "Yaniv Dary" <ydary@redhat.com> To: "Devin Acosta" <devin@pabstatencio.com>, "Marcin Mirecki" < mmirecki@redhat.com> Cc: "users" <Users@ovirt.org> Sent: Thursday, December 1, 2016 11:15:00 AM Subject: Re: [ovirt-users] oVirt 4 and Neutron
Adding Marcin to help with this.
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin@pabstatencio.com> wrote:
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and it sounds like something I want to try. However the document seems to be
not
complete, and I'm not sure i fully understand how it should be deployed. When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and
to install on the oVIRT nodes it complains about needing other packages such as:
- openvswitch-ovn-central - python-openvswitch - firewalld-system - openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the RPMS for openvswitch-ovn-central. Also I presume like Neutron I would install OVN on a Master node and then install some clients on the nodes? Can you
me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote:
We are working on a native path to SDN via OVN (experimental at this point): https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
Using Neutron is an option, but at some point the native option might be easier to use (we want to add a UI for it and tighter integration).
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin@pabstatencio.com
wrote:
oVirt Users:
My work is currently deploying oVirt 4.0.5 into our Development environment. I see there use to be a maintained Openstack Neutron image that could be used with oVirt to provide SDN functionality. I'm suspecting that the reason for the image no longer being maintained is because it became a hassle to keep updated and patched. From what I understand
current idea is to just point your oVirt installation to an already installed Openstack setup. I can easily install an image and install
----- Original Message ----- try provide the the
latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want to understand if that is the proper way to move forward. Is there a general consensus with the way oVirt is moving in regards to Software Defined Networking and Neutron in general? Just want to ensure I understand it clearly before just installing my own Neutron if there is going to be another method.
Any feedback is appreciated.
Devin Acosta RHCA
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
-- Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

Devin,
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software?
Please note the difference between OVN-Central and OVN-Controller: OVN-Central is the central part of OVN, storing the logical configuration and controlling the many OVN-Controllers OVN-Controller is the piece of software which resides on the ovirt-hosts, and manages the local OVS setup on the host. OVN-Central / | \ / | \ / | \ / | \ OVN-Controller OVN-Controller OVN-Controller OVN-central can be installed anywhere , as long as it can communicate with the engine and all the hosts. During development we install it along the ovirt engine for convinience. OVN-Controller must be installed on every ovirt host.
I then also assume I install the OVN agents onto all the oVirt Nodes.
Short answer: Yes Longe answer: If you plan not to use external networks on some clusters, you can skip its hosts. You can choose the clusters which support the external network by assigning the network to clusters.
I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider?
For now it is only the url of the provider. The provider is still under development, authentication is still just an empty mock.
Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
We are using the default 'br-int' bridge which OVN is using. All should be configured when OVS/OVN is installed. Let me know if I can help with anything else. Marcin ----- Original Message -----
From: "Devin Acosta" <devin@pabstatencio.com> To: "Marcin Mirecki" <mmirecki@redhat.com> Cc: "users" <Users@ovirt.org>, "Yaniv Dary" <ydary@redhat.com> Sent: Thursday, December 1, 2016 6:19:07 PM Subject: Re: [ovirt-users] oVirt 4 and Neutron
I have manually created the RPM's successfully, I just want to clarify a few items so I make sure I'm deploying this according to best practice.
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software? I then also assume I install the OVN agents onto all the oVirt Nodes. My take on this is that this OVN replaces the more complex Neutron/OVS installation, and makes for a more simple deployment. I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider? Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
Your assistance is appreciated.
On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
The openvswitch OVN packages must be build manually at the moment. It is still not available either in the repos, nor as a download. For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not 'firewalld-filesystem'? This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the blogpost is already somewhat outdated (even though it's not even a month old). I will try to update it asap.
Thanks, Marcin
BUILDING PROVIDER RPMS: ---------------------- git clone https://gerrit.ovirt.org/ovirt-provider-ovn make rpm
BUILDING OVN RPMS: ------------------
Clone the repository:
git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn:
yum -y install gcc make python-devel openssl-devel kernel-devel graphviz kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build rpmdevtools bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core python-zope-interface graphviz openssl-devel selinux-policy-devel
Build the ovn rpms:
cd ovs ./boot.sh ./configure make dist cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES cd $HOME/rpmbuild/SOURCES tar xzf openvswitch-<version>.tar.gz cd openvswitch-<version> rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
From: "Yaniv Dary" <ydary@redhat.com> To: "Devin Acosta" <devin@pabstatencio.com>, "Marcin Mirecki" < mmirecki@redhat.com> Cc: "users" <Users@ovirt.org> Sent: Thursday, December 1, 2016 11:15:00 AM Subject: Re: [ovirt-users] oVirt 4 and Neutron
Adding Marcin to help with this.
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin@pabstatencio.com> wrote:
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and it sounds like something I want to try. However the document seems to be
not
complete, and I'm not sure i fully understand how it should be deployed. When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and
to install on the oVIRT nodes it complains about needing other packages such as:
- openvswitch-ovn-central - python-openvswitch - firewalld-system - openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the RPMS for openvswitch-ovn-central. Also I presume like Neutron I would install OVN on a Master node and then install some clients on the nodes? Can you
me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote:
We are working on a native path to SDN via OVN (experimental at this point): https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
Using Neutron is an option, but at some point the native option might be easier to use (we want to add a UI for it and tighter integration).
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin@pabstatencio.com
wrote:
oVirt Users:
My work is currently deploying oVirt 4.0.5 into our Development environment. I see there use to be a maintained Openstack Neutron image that could be used with oVirt to provide SDN functionality. I'm suspecting that the reason for the image no longer being maintained is because it became a hassle to keep updated and patched. From what I understand
current idea is to just point your oVirt installation to an already installed Openstack setup. I can easily install an image and install
----- Original Message ----- try provide the the
latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want to understand if that is the proper way to move forward. Is there a general consensus with the way oVirt is moving in regards to Software Defined Networking and Neutron in general? Just want to ensure I understand it clearly before just installing my own Neutron if there is going to be another method.
Any feedback is appreciated.
Devin Acosta RHCA
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

Marcin, I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt network, I also installed the OVN-Provider on this same instance. I then installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN provider driver, and configured the vdsm ovn-controller {central-ip} {ovirt-node-ip} on each of the boxes. It appears to be running but what I am noticing is that the ovs-vswitchd process is pegged at 100% on all the oVirt nodes. So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for the other 2 nodes in it's configuration. It seems to be that way across all 3 nodes, they know about the other nodes in the cluster. I was able to create a network inside of oVIRT using the external provider. After i create a subnet inside oVirt I do get an error at the top but seems to be ok? [image: Inline image 2] (Output from Node3 IP 75, of: ovs-vsctl show) 61af799c-a621-445e-8183-23dcb38ea3cc Bridge br-int fail_mode: secure Port "ovn-c0dc09-0" Interface "ovn-c0dc09-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.73"} Port "ovn-456949-0" Interface "ovn-456949-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.74"} Port br-int Interface br-int type: internal ovs_version: "2.6.90" Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes. PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85 ovs-vswitchd [root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log 2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (99% CPU usage) One other thing that I notice is that when I got to Provision a Virtual Machine from the Main Data Center, my Networks don't show under the NIC where I could select them? Am I missing something on this? Thanks very much for your help. Devin Acosta On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software?
Please note the difference between OVN-Central and OVN-Controller: OVN-Central is the central part of OVN, storing the logical configuration and controlling the many OVN-Controllers OVN-Controller is the piece of software which resides on the ovirt-hosts, and manages the local OVS setup on the host.
OVN-Central / | \ / | \ / | \ / | \ OVN-Controller OVN-Controller OVN-Controller
OVN-central can be installed anywhere , as long as it can communicate with the engine and all the hosts. During development we install it along the ovirt engine for convinience.
OVN-Controller must be installed on every ovirt host.
I then also assume I install the OVN agents onto all the oVirt Nodes.
Short answer: Yes
Longe answer: If you plan not to use external networks on some clusters, you can skip its hosts. You can choose the clusters which support the external network by assigning the network to clusters.
I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider?
For now it is only the url of the provider. The provider is still under development, authentication is still just an empty mock.
Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
We are using the default 'br-int' bridge which OVN is using. All should be configured when OVS/OVN is installed.
Let me know if I can help with anything else. Marcin
From: "Devin Acosta" <devin@pabstatencio.com> To: "Marcin Mirecki" <mmirecki@redhat.com> Cc: "users" <Users@ovirt.org>, "Yaniv Dary" <ydary@redhat.com> Sent: Thursday, December 1, 2016 6:19:07 PM Subject: Re: [ovirt-users] oVirt 4 and Neutron
I have manually created the RPM's successfully, I just want to clarify a few items so I make sure I'm deploying this according to best practice.
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software? I then also assume I install the OVN agents onto all the oVirt Nodes. My take on this is that this OVN replaces the more complex Neutron/OVS installation, and makes for a more simple deployment. I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider? Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
Your assistance is appreciated.
On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
The openvswitch OVN packages must be build manually at the moment. It is still not available either in the repos, nor as a download. For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not 'firewalld-filesystem'? This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the blogpost is already somewhat outdated (even though it's not even a month old). I will try to update it asap.
Thanks, Marcin
BUILDING PROVIDER RPMS: ---------------------- git clone https://gerrit.ovirt.org/ovirt-provider-ovn make rpm
BUILDING OVN RPMS: ------------------
Clone the repository:
git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn:
yum -y install gcc make python-devel openssl-devel kernel-devel graphviz kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build rpmdevtools bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core python-zope-interface graphviz openssl-devel selinux-policy-devel
Build the ovn rpms:
cd ovs ./boot.sh ./configure make dist cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES cd $HOME/rpmbuild/SOURCES tar xzf openvswitch-<version>.tar.gz cd openvswitch-<version> rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
----- Original Message -----
From: "Yaniv Dary" <ydary@redhat.com> To: "Devin Acosta" <devin@pabstatencio.com>, "Marcin Mirecki" < mmirecki@redhat.com> Cc: "users" <Users@ovirt.org> Sent: Thursday, December 1, 2016 11:15:00 AM Subject: Re: [ovirt-users] oVirt 4 and Neutron
Adding Marcin to help with this.
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin@pabstatencio.com
wrote:
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and
sounds like something I want to try. However the document seems to be not complete, and I'm not sure i fully understand how it should be deployed. When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and
it try
to install on the oVIRT nodes it complains about needing other
such as:
- openvswitch-ovn-central - python-openvswitch - firewalld-system - openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the RPMS for openvswitch-ovn-central. Also I presume like Neutron I would install OVN on a Master node and then install some clients on the nodes? Can you provide me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote:
We are working on a native path to SDN via OVN (experimental at
point): https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
Using Neutron is an option, but at some point the native option might be easier to use (we want to add a UI for it and tighter integration).
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta < devin@pabstatencio.com
wrote:
> oVirt Users: > > My work is currently deploying oVirt 4.0.5 into our Development > environment. I see there use to be a maintained Openstack Neutron image > that could be used with oVirt to provide SDN functionality. I'm > suspecting > that the reason for the image no longer being maintained is because it > became a hassle to keep updated and patched. From what I understand the > current idea is to just point your oVirt installation to an already > installed Openstack setup. I can easily install an image and install the > latest Openstack (Keystone/Neutron) and then point oVirt to it, but I > want > to understand if that is the proper way to move forward. Is
----- Original Message ----- packages this there a
> general > consensus with the way oVirt is moving in regards to Software Defined > Networking and Neutron in general? Just want to ensure I understand it > clearly before just installing my own Neutron if there is going to be > another method. > > Any feedback is appreciated. > > Devin Acosta RHCA > > > _______________________________________________ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > >
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
-- Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

On Friday, December 2, 2016 11:44:48 AM EST Devin Acosta wrote:
Marcin,
I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt network, I also installed the OVN-Provider on this same instance. I then installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN provider driver, and configured the vdsm ovn-controller {central-ip} {ovirt-node-ip} on each of the boxes. It appears to be running but what I am noticing is that the ovs-vswitchd process is pegged at 100% on all the oVirt nodes.
So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for the other 2 nodes in it's configuration. It seems to be that way across all 3 nodes, they know about the other nodes in the cluster. I was able to create a network inside of oVIRT using the external provider. After i create a subnet inside oVirt I do get an error at the top but seems to be ok?
I can't help you with the OVN stuff, but the error at the top indicates some kind of bug in the UI code. If you haven't done so already can you install the web admin symbol maps and restart your engine yum install ovirt-engine-webadmin-portal-debuginfo Then recreate the issues. Then the UI.log on the engine machine will contain a deobfuscated stack trace that can help us in determining the cause of the UI issue.
[image: Inline image 2]
(Output from Node3 IP 75, of: ovs-vsctl show)
61af799c-a621-445e-8183-23dcb38ea3cc Bridge br-int fail_mode: secure Port "ovn-c0dc09-0" Interface "ovn-c0dc09-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.73"} Port "ovn-456949-0" Interface "ovn-456949-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.74"} Port br-int Interface br-int type: internal ovs_version: "2.6.90"
Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85 ovs-vswitchd
[root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log 2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (99% CPU usage)
One other thing that I notice is that when I got to Provision a Virtual Machine from the Main Data Center, my Networks don't show under the NIC where I could select them? Am I missing something on this?
Thanks very much for your help.
Devin Acosta
On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software?
Please note the difference between OVN-Central and OVN-Controller: OVN-Central is the central part of OVN, storing the logical configuration and controlling the many OVN-Controllers OVN-Controller is the piece of software which resides on the ovirt-hosts, and manages the local OVS setup on the host.
OVN-Central
/ | \
/ | \
/ | \
/ | \
OVN-Controller OVN-Controller OVN-Controller
OVN-central can be installed anywhere , as long as it can communicate with the engine and all the hosts. During development we install it along the ovirt engine for convinience.
OVN-Controller must be installed on every ovirt host.
I then also assume I install the OVN agents onto all
the oVirt Nodes.
Short answer: Yes
Longe answer: If you plan not to use external networks on some clusters, you can skip its hosts. You can choose the clusters which support the external network by assigning the network to clusters.
I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider?
For now it is only the url of the provider. The provider is still under development, authentication is still just an empty mock.
Would I
need to have any bridges or OVS configured on the nodes for this to work
or
just install the services and get them configured and it just works?
We are using the default 'br-int' bridge which OVN is using. All should be configured when OVS/OVN is installed.
Let me know if I can help with anything else. Marcin
----- Original Message -----
From: "Devin Acosta" <devin@pabstatencio.com> To: "Marcin Mirecki" <mmirecki@redhat.com> Cc: "users" <Users@ovirt.org>, "Yaniv Dary" <ydary@redhat.com> Sent: Thursday, December 1, 2016 6:19:07 PM Subject: Re: [ovirt-users] oVirt 4 and Neutron
I have manually created the RPM's successfully, I just want to clarify a few items so I make sure I'm deploying this according to best practice.
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software? I then also assume I install the OVN agents onto all the oVirt Nodes. My take on this is that this OVN replaces the more
complex
Neutron/OVS installation, and makes for a more simple deployment. I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider?
Would I
need to have any bridges or OVS configured on the nodes for this to work
or
just install the services and get them configured and it just works?
Your assistance is appreciated.
On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki@redhat.com>
wrote:
Devin,
The openvswitch OVN packages must be build manually at the moment. It
is
still not available either in the repos, nor as a download. For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not 'firewalld-filesystem'? This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the
blogpost
is already somewhat outdated (even though it's not even a month old). I will try to update it asap.
Thanks, Marcin
BUILDING PROVIDER RPMS: ----------------------
git clone https://gerrit.ovirt.org/ovirt-provider-ovn make rpm
BUILDING OVN RPMS: ------------------
Clone the repository: git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn: yum -y install gcc make python-devel openssl-devel kernel-devel
graphviz
kernel-debug-devel autoconf automake rpm-build redhat-rpm-config
rpm-build
rpmdevtools bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core python-zope-interface graphviz openssl-devel selinux-policy-devel
Build the ovn rpms: cd ovs ./boot.sh ./configure make dist cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES cd $HOME/rpmbuild/SOURCES tar xzf openvswitch-<version>.tar.gz cd openvswitch-<version> rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
----- Original Message -----
From: "Yaniv Dary" <ydary@redhat.com> To: "Devin Acosta" <devin@pabstatencio.com>, "Marcin Mirecki" <
mmirecki@redhat.com>
Cc: "users" <Users@ovirt.org> Sent: Thursday, December 1, 2016 11:15:00 AM Subject: Re: [ovirt-users] oVirt 4 and Neutron
Adding Marcin to help with this.
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306
8272306
Email: ydary@redhat.com IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin@pabstatencio.com
wrote:
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and
it
sounds like something I want to try. However the document seems to
be
not
complete, and I'm not sure i fully understand how it should be
deployed.
When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm"
and
try
to install on the oVIRT nodes it complains about needing other
packages
such as:
- openvswitch-ovn-central - python-openvswitch - firewalld-system - openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the
RPMS
for
openvswitch-ovn-central. Also I presume like Neutron I would
install
OVN on
a Master node and then install some clients on the nodes? Can you
provide
me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com>
wrote:
> We are working on a native path to SDN via OVN (experimental at
this
> point): > https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/ > > Using Neutron is an option, but at some point the native option
might
be
> easier to use (we want to add a UI for it and tighter
integration).
> Yaniv Dary > Technical Product Manager > Red Hat Israel Ltd. > 34 Jerusalem Road > Building A, 4th floor > Ra'anana, Israel 4350109 > > Tel : +972 (9) 7692306 > > 8272306 > > Email: ydary@redhat.com > IRC : ydary > > > On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <
devin@pabstatencio.com
> wrote: >> oVirt Users: >> >> My work is currently deploying oVirt 4.0.5 into our Development >> environment. I see there use to be a maintained Openstack >> Neutron
image
>> that could be used with oVirt to provide SDN functionality. I'm >> suspecting >> that the reason for the image no longer being maintained is
because
it
>> became a hassle to keep updated and patched. From what I
understand
the
>> current idea is to just point your oVirt installation to an
already
>> installed Openstack setup. I can easily install an image and
install
the
>> latest Openstack (Keystone/Neutron) and then point oVirt to it,
but I
>> want >> to understand if that is the proper way to move forward. Is
there a
>> general >> consensus with the way oVirt is moving in regards to Software
Defined
>> Networking and Neutron in general? Just want to ensure I
understand
it
>> clearly before just installing my own Neutron if there is going
to be
>> another method. >> >> Any feedback is appreciated. >> >> Devin Acosta RHCA >> >> >> _______________________________________________ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

Marcin, So an update on my situation, I restarted all OpenVSwitch processes on all boxes and was able to get the CPU issue with ovs-vswitchd to return to normal. So I believe all those issues are resolved. I can create networks/subnets, minus that one strange UI issue which I'll work with Alexander Wels to resolve. When I still go to launch a Virtual Machine, should I be seeing the subnets that I created? Am I missing something? It seems like i'm about 95% there and I am just missing something. On Fri, Dec 2, 2016 at 11:44 AM, Devin Acosta <devin@pabstatencio.com> wrote:
Marcin,
I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt network, I also installed the OVN-Provider on this same instance. I then installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN provider driver, and configured the vdsm ovn-controller {central-ip} {ovirt-node-ip} on each of the boxes. It appears to be running but what I am noticing is that the ovs-vswitchd process is pegged at 100% on all the oVirt nodes.
So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for the other 2 nodes in it's configuration. It seems to be that way across all 3 nodes, they know about the other nodes in the cluster. I was able to create a network inside of oVIRT using the external provider. After i create a subnet inside oVirt I do get an error at the top but seems to be ok?
[image: Inline image 2]
(Output from Node3 IP 75, of: ovs-vsctl show)
61af799c-a621-445e-8183-23dcb38ea3cc Bridge br-int fail_mode: secure Port "ovn-c0dc09-0" Interface "ovn-c0dc09-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.73"} Port "ovn-456949-0" Interface "ovn-456949-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.74"} Port br-int Interface br-int type: internal ovs_version: "2.6.90"
Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85 ovs-vswitchd
[root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log 2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (99% CPU usage)
One other thing that I notice is that when I got to Provision a Virtual Machine from the Main Data Center, my Networks don't show under the NIC where I could select them? Am I missing something on this?
Thanks very much for your help.
Devin Acosta
On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software?
Please note the difference between OVN-Central and OVN-Controller: OVN-Central is the central part of OVN, storing the logical configuration and controlling the many OVN-Controllers OVN-Controller is the piece of software which resides on the ovirt-hosts, and manages the local OVS setup on the host.
OVN-Central / | \ / | \ / | \ / | \ OVN-Controller OVN-Controller OVN-Controller
OVN-central can be installed anywhere , as long as it can communicate with the engine and all the hosts. During development we install it along the ovirt engine for convinience.
OVN-Controller must be installed on every ovirt host.
I then also assume I install the OVN agents onto all the oVirt Nodes.
Short answer: Yes
Longe answer: If you plan not to use external networks on some clusters, you can skip its hosts. You can choose the clusters which support the external network by assigning the network to clusters.
I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider?
For now it is only the url of the provider. The provider is still under development, authentication is still just an empty mock.
Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
We are using the default 'br-int' bridge which OVN is using. All should be configured when OVS/OVN is installed.
Let me know if I can help with anything else. Marcin
From: "Devin Acosta" <devin@pabstatencio.com> To: "Marcin Mirecki" <mmirecki@redhat.com> Cc: "users" <Users@ovirt.org>, "Yaniv Dary" <ydary@redhat.com> Sent: Thursday, December 1, 2016 6:19:07 PM Subject: Re: [ovirt-users] oVirt 4 and Neutron
I have manually created the RPM's successfully, I just want to clarify a few items so I make sure I'm deploying this according to best practice.
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software? I then also assume I install the OVN agents onto all the oVirt Nodes. My take on this is that this OVN replaces the more complex Neutron/OVS installation, and makes for a more simple deployment. I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider? Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
Your assistance is appreciated.
On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
The openvswitch OVN packages must be build manually at the moment. It is still not available either in the repos, nor as a download. For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not 'firewalld-filesystem'? This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the blogpost is already somewhat outdated (even though it's not even a month old). I will try to update it asap.
Thanks, Marcin
BUILDING PROVIDER RPMS: ---------------------- git clone https://gerrit.ovirt.org/ovirt-provider-ovn make rpm
BUILDING OVN RPMS: ------------------
Clone the repository:
git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn:
yum -y install gcc make python-devel openssl-devel kernel-devel graphviz kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build rpmdevtools bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core python-zope-interface graphviz openssl-devel selinux-policy-devel
Build the ovn rpms:
cd ovs ./boot.sh ./configure make dist cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES cd $HOME/rpmbuild/SOURCES tar xzf openvswitch-<version>.tar.gz cd openvswitch-<version> rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
From: "Yaniv Dary" <ydary@redhat.com> To: "Devin Acosta" <devin@pabstatencio.com>, "Marcin Mirecki" < mmirecki@redhat.com> Cc: "users" <Users@ovirt.org> Sent: Thursday, December 1, 2016 11:15:00 AM Subject: Re: [ovirt-users] oVirt 4 and Neutron
Adding Marcin to help with this.
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta < devin@pabstatencio.com> wrote:
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and
it
sounds like something I want to try. However the document seems to be not complete, and I'm not sure i fully understand how it should be deployed. When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and
----- Original Message ----- try
to install on the oVIRT nodes it complains about needing other
such as:
- openvswitch-ovn-central - python-openvswitch - firewalld-system - openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the RPMS for openvswitch-ovn-central. Also I presume like Neutron I would install OVN on a Master node and then install some clients on the nodes? Can you provide me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote:
> We are working on a native path to SDN via OVN (experimental at
> point): > https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/ > > Using Neutron is an option, but at some point the native option might be > easier to use (we want to add a UI for it and tighter integration). > > Yaniv Dary > Technical Product Manager > Red Hat Israel Ltd. > 34 Jerusalem Road > Building A, 4th floor > Ra'anana, Israel 4350109 > > Tel : +972 (9) 7692306 > 8272306 > Email: ydary@redhat.com > IRC : ydary > > > On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta < devin@pabstatencio.com
> wrote: > >> oVirt Users: >> >> My work is currently deploying oVirt 4.0.5 into our Development >> environment. I see there use to be a maintained Openstack Neutron image >> that could be used with oVirt to provide SDN functionality. I'm >> suspecting >> that the reason for the image no longer being maintained is because it >> became a hassle to keep updated and patched. From what I understand the >> current idea is to just point your oVirt installation to an already >> installed Openstack setup. I can easily install an image and install the >> latest Openstack (Keystone/Neutron) and then point oVirt to it, but I >> want >> to understand if that is the proper way to move forward. Is
----- Original Message ----- packages this there a
>> general >> consensus with the way oVirt is moving in regards to Software Defined >> Networking and Neutron in general? Just want to ensure I understand it >> clearly before just installing my own Neutron if there is going to be >> another method. >> >> Any feedback is appreciated. >> >> Devin Acosta RHCA >> >> >> _______________________________________________ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> >> >
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
-- Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

Ok i figured out my issue, the network wasn't configured under the Cluster section to be allowed to see, I have now been able to spin up my own network/subnet and then spin up 2 instances both getting DHCP addresses and able to talk to each other. The ONLY issue i'm seeing is that random UI error that i have e-mailed over to Alexander about. I'll let you know if i have any other questions. I think for now I'm golden. On Fri, Dec 2, 2016 at 1:23 PM, Devin Acosta <devin@pabstatencio.com> wrote:
Marcin,
So an update on my situation, I restarted all OpenVSwitch processes on all boxes and was able to get the CPU issue with ovs-vswitchd to return to normal. So I believe all those issues are resolved. I can create networks/subnets, minus that one strange UI issue which I'll work with Alexander Wels to resolve. When I still go to launch a Virtual Machine, should I be seeing the subnets that I created? Am I missing something? It seems like i'm about 95% there and I am just missing something.
On Fri, Dec 2, 2016 at 11:44 AM, Devin Acosta <devin@pabstatencio.com> wrote:
Marcin,
I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt network, I also installed the OVN-Provider on this same instance. I then installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN provider driver, and configured the vdsm ovn-controller {central-ip} {ovirt-node-ip} on each of the boxes. It appears to be running but what I am noticing is that the ovs-vswitchd process is pegged at 100% on all the oVirt nodes.
So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for the other 2 nodes in it's configuration. It seems to be that way across all 3 nodes, they know about the other nodes in the cluster. I was able to create a network inside of oVIRT using the external provider. After i create a subnet inside oVirt I do get an error at the top but seems to be ok?
[image: Inline image 2]
(Output from Node3 IP 75, of: ovs-vsctl show)
61af799c-a621-445e-8183-23dcb38ea3cc Bridge br-int fail_mode: secure Port "ovn-c0dc09-0" Interface "ovn-c0dc09-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.73"} Port "ovn-456949-0" Interface "ovn-456949-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.74"} Port br-int Interface br-int type: internal ovs_version: "2.6.90"
Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85 ovs-vswitchd
[root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log 2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (99% CPU usage)
One other thing that I notice is that when I got to Provision a Virtual Machine from the Main Data Center, my Networks don't show under the NIC where I could select them? Am I missing something on this?
Thanks very much for your help.
Devin Acosta
On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software?
Please note the difference between OVN-Central and OVN-Controller: OVN-Central is the central part of OVN, storing the logical configuration and controlling the many OVN-Controllers OVN-Controller is the piece of software which resides on the ovirt-hosts, and manages the local OVS setup on the host.
OVN-Central / | \ / | \ / | \ / | \ OVN-Controller OVN-Controller OVN-Controller
OVN-central can be installed anywhere , as long as it can communicate with the engine and all the hosts. During development we install it along the ovirt engine for convinience.
OVN-Controller must be installed on every ovirt host.
I then also assume I install the OVN agents onto all the oVirt Nodes.
Short answer: Yes
Longe answer: If you plan not to use external networks on some clusters, you can skip its hosts. You can choose the clusters which support the external network by assigning the network to clusters.
I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider?
For now it is only the url of the provider. The provider is still under development, authentication is still just an empty mock.
Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
We are using the default 'br-int' bridge which OVN is using. All should be configured when OVS/OVN is installed.
Let me know if I can help with anything else. Marcin
From: "Devin Acosta" <devin@pabstatencio.com> To: "Marcin Mirecki" <mmirecki@redhat.com> Cc: "users" <Users@ovirt.org>, "Yaniv Dary" <ydary@redhat.com> Sent: Thursday, December 1, 2016 6:19:07 PM Subject: Re: [ovirt-users] oVirt 4 and Neutron
I have manually created the RPM's successfully, I just want to clarify a few items so I make sure I'm deploying this according to best practice.
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software? I then also assume I install the OVN agents onto all the oVirt Nodes. My take on this is that this OVN replaces the more complex Neutron/OVS installation, and makes for a more simple deployment. I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider? Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
Your assistance is appreciated.
On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
The openvswitch OVN packages must be build manually at the moment. It is still not available either in the repos, nor as a download. For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not 'firewalld-filesystem'? This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the blogpost is already somewhat outdated (even though it's not even a month
will try to update it asap.
Thanks, Marcin
BUILDING PROVIDER RPMS: ---------------------- git clone https://gerrit.ovirt.org/ovirt-provider-ovn make rpm
BUILDING OVN RPMS: ------------------
Clone the repository:
git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn:
yum -y install gcc make python-devel openssl-devel kernel-devel graphviz kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build rpmdevtools bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core python-zope-interface graphviz openssl-devel selinux-policy-devel
Build the ovn rpms:
cd ovs ./boot.sh ./configure make dist cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES cd $HOME/rpmbuild/SOURCES tar xzf openvswitch-<version>.tar.gz cd openvswitch-<version> rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
From: "Yaniv Dary" <ydary@redhat.com> To: "Devin Acosta" <devin@pabstatencio.com>, "Marcin Mirecki" < mmirecki@redhat.com> Cc: "users" <Users@ovirt.org> Sent: Thursday, December 1, 2016 11:15:00 AM Subject: Re: [ovirt-users] oVirt 4 and Neutron
Adding Marcin to help with this.
Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109
Tel : +972 (9) 7692306 8272306 Email: ydary@redhat.com IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta < devin@pabstatencio.com> wrote:
> > Yaniv, > > I am looking at the page that talks about ovirt-provider-ovn, and it > sounds like something I want to try. However the document seems to be not > complete, and I'm not sure i fully understand how it should be deployed. > When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and
----- Original Message ----- try
> to install on the oVIRT nodes it complains about needing other
> such as: > > - openvswitch-ovn-central > - python-openvswitch > - firewalld-system > - openvswitch-ovn-host > > I don't see anywhere where it talks about getting access to the RPMS for > openvswitch-ovn-central. Also I presume like Neutron I would install OVN on > a Master node and then install some clients on the nodes? Can you provide > me additional information on this? > > > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote: > >> We are working on a native path to SDN via OVN (experimental at
>> point): >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/ >> >> Using Neutron is an option, but at some point the native option might be >> easier to use (we want to add a UI for it and tighter integration). >> >> Yaniv Dary >> Technical Product Manager >> Red Hat Israel Ltd. >> 34 Jerusalem Road >> Building A, 4th floor >> Ra'anana, Israel 4350109 >> >> Tel : +972 (9) 7692306 >> 8272306 >> Email: ydary@redhat.com >> IRC : ydary >> >> >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta < devin@pabstatencio.com
>> wrote: >> >>> oVirt Users: >>> >>> My work is currently deploying oVirt 4.0.5 into our Development >>> environment. I see there use to be a maintained Openstack Neutron image >>> that could be used with oVirt to provide SDN functionality. I'm >>> suspecting >>> that the reason for the image no longer being maintained is because it >>> became a hassle to keep updated and patched. From what I understand the >>> current idea is to just point your oVirt installation to an already >>> installed Openstack setup. I can easily install an image and install the >>> latest Openstack (Keystone/Neutron) and then point oVirt to it, but I >>> want >>> to understand if that is the proper way to move forward. Is
----- Original Message ----- old). I packages this there a
>>> general >>> consensus with the way oVirt is moving in regards to Software Defined >>> Networking and Neutron in general? Just want to ensure I understand it >>> clearly before just installing my own Neutron if there is going to be >>> another method. >>> >>> Any feedback is appreciated. >>> >>> Devin Acosta RHCA >>> >>> >>> _______________________________________________ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >> > > > -- > > Devin Acosta > Red Hat Certified Architect, LinuxStack > 602-354-1220 || devin@linuxguru.co >
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
-- Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co

Devin, The ovs-vswitchd process pegged at 100% is a known OVS problem. It is interesting however that you see it on all the hosts at the same time. Can you please report this against OVS? I assume the OVS team should take interest in this (they will also know what additional info to ask about). Could you please send me the ui.log and engine.log (/var/log/ovirt-engine) and /var/log/ovirt-provider-ovn.log (from the host where the provider is located) when you see the UI error again?
One other thing that I notice is that when I got to Provision a Virtual Machine from the Main Data Center, my Networks don't show under the NIC where I could select them? Am I missing something on this? Could you please elaborate on this? I am not quite sure I understand this. Could it be that the network is not assigned to the cluster?
Marcin ----- Original Message -----
Sent: Friday, December 2, 2016 11:15:22 PM Subject: Re: [ovirt-users] oVirt 4 and Neutron
Ok i figured out my issue, the network wasn't configured under the Cluster section to be allowed to see, I have now been able to spin up my own network/subnet and then spin up 2 instances both getting DHCP addresses and able to talk to each other. The ONLY issue i'm seeing is that random UI error that i have e-mailed over to Alexander about. I'll let you know if i have any other questions. I think for now I'm golden.
On Fri, Dec 2, 2016 at 1:23 PM, Devin Acosta <devin@pabstatencio.com> wrote:
Marcin,
So an update on my situation, I restarted all OpenVSwitch processes on all boxes and was able to get the CPU issue with ovs-vswitchd to return to normal. So I believe all those issues are resolved. I can create networks/subnets, minus that one strange UI issue which I'll work with Alexander Wels to resolve. When I still go to launch a Virtual Machine, should I be seeing the subnets that I created? Am I missing something? It seems like i'm about 95% there and I am just missing something.
On Fri, Dec 2, 2016 at 11:44 AM, Devin Acosta <devin@pabstatencio.com> wrote:
Marcin,
I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt network, I also installed the OVN-Provider on this same instance. I then installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN provider driver, and configured the vdsm ovn-controller {central-ip} {ovirt-node-ip} on each of the boxes. It appears to be running but what I am noticing is that the ovs-vswitchd process is pegged at 100% on all the oVirt nodes.
So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for the other 2 nodes in it's configuration. It seems to be that way across all 3 nodes, they know about the other nodes in the cluster. I was able to create a network inside of oVIRT using the external provider. After i create a subnet inside oVirt I do get an error at the top but seems to be ok?
[image: Inline image 2]
(Output from Node3 IP 75, of: ovs-vsctl show)
61af799c-a621-445e-8183-23dcb38ea3cc Bridge br-int fail_mode: secure Port "ovn-c0dc09-0" Interface "ovn-c0dc09-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.73"} Port "ovn-456949-0" Interface "ovn-456949-0" type: geneve options: {csum="true", key=flow, remote_ip="172.10.10.74"} Port br-int Interface br-int type: internal ovs_version: "2.6.90"
Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85 ovs-vswitchd
[root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log 2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout at vswitchd/bridge.c:3031 (100% CPU usage) 2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log messages in last 6 seconds (most recently, 0 seconds ago) due to excessive rate 2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout at vswitchd/bridge.c:3031 (99% CPU usage)
One other thing that I notice is that when I got to Provision a Virtual Machine from the Main Data Center, my Networks don't show under the NIC where I could select them? Am I missing something on this?
Thanks very much for your help.
Devin Acosta
On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software?
Please note the difference between OVN-Central and OVN-Controller: OVN-Central is the central part of OVN, storing the logical configuration and controlling the many OVN-Controllers OVN-Controller is the piece of software which resides on the ovirt-hosts, and manages the local OVS setup on the host.
OVN-Central / | \ / | \ / | \ / | \ OVN-Controller OVN-Controller OVN-Controller
OVN-central can be installed anywhere , as long as it can communicate with the engine and all the hosts. During development we install it along the ovirt engine for convinience.
OVN-Controller must be installed on every ovirt host.
I then also assume I install the OVN agents onto all the oVirt Nodes.
Short answer: Yes
Longe answer: If you plan not to use external networks on some clusters, you can skip its hosts. You can choose the clusters which support the external network by assigning the network to clusters.
I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider?
For now it is only the url of the provider. The provider is still under development, authentication is still just an empty mock.
Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
We are using the default 'br-int' bridge which OVN is using. All should be configured when OVS/OVN is installed.
Let me know if I can help with anything else. Marcin
From: "Devin Acosta" <devin@pabstatencio.com> To: "Marcin Mirecki" <mmirecki@redhat.com> Cc: "users" <Users@ovirt.org>, "Yaniv Dary" <ydary@redhat.com> Sent: Thursday, December 1, 2016 6:19:07 PM Subject: Re: [ovirt-users] oVirt 4 and Neutron
I have manually created the RPM's successfully, I just want to clarify a few items so I make sure I'm deploying this according to best practice.
I presume the OVN Controller should just be some VM that is on the ovirtmgmt network, or is there a preferred place to install the OVN controller software? I then also assume I install the OVN agents onto all the oVirt Nodes. My take on this is that this OVN replaces the more complex Neutron/OVS installation, and makes for a more simple deployment. I see that when you go to add the External Provider, does OVN Controller use authentication, is there any information I would need to have besides knowing which node it's on in order to add it to external provider? Would I need to have any bridges or OVS configured on the nodes for this to work or just install the services and get them configured and it just works?
Your assistance is appreciated.
On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki@redhat.com> wrote:
Devin,
The openvswitch OVN packages must be build manually at the moment. It is still not available either in the repos, nor as a download. For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not 'firewalld-filesystem'? This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the blogpost is already somewhat outdated (even though it's not even a month
will try to update it asap.
Thanks, Marcin
BUILDING PROVIDER RPMS: ---------------------- git clone https://gerrit.ovirt.org/ovirt-provider-ovn make rpm
BUILDING OVN RPMS: ------------------
Clone the repository:
git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn:
yum -y install gcc make python-devel openssl-devel kernel-devel graphviz kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build rpmdevtools bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core python-zope-interface graphviz openssl-devel selinux-policy-devel
Build the ovn rpms:
cd ovs ./boot.sh ./configure make dist cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES cd $HOME/rpmbuild/SOURCES tar xzf openvswitch-<version>.tar.gz cd openvswitch-<version> rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
----- Original Message ----- > From: "Yaniv Dary" <ydary@redhat.com> > To: "Devin Acosta" <devin@pabstatencio.com>, "Marcin Mirecki" < mmirecki@redhat.com> > Cc: "users" <Users@ovirt.org> > Sent: Thursday, December 1, 2016 11:15:00 AM > Subject: Re: [ovirt-users] oVirt 4 and Neutron > > Adding Marcin to help with this. > > Yaniv Dary > Technical Product Manager > Red Hat Israel Ltd. > 34 Jerusalem Road > Building A, 4th floor > Ra'anana, Israel 4350109 > > Tel : +972 (9) 7692306 > 8272306 > Email: ydary@redhat.com > IRC : ydary > > > On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta < devin@pabstatencio.com> wrote: > > > > > Yaniv, > > > > I am looking at the page that talks about ovirt-provider-ovn, and it > > sounds like something I want to try. However the document seems to be not > > complete, and I'm not sure i fully understand how it should be deployed. > > When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and try > > to install on the oVIRT nodes it complains about needing other
> > such as: > > > > - openvswitch-ovn-central > > - python-openvswitch > > - firewalld-system > > - openvswitch-ovn-host > > > > I don't see anywhere where it talks about getting access to the RPMS for > > openvswitch-ovn-central. Also I presume like Neutron I would install OVN on > > a Master node and then install some clients on the nodes? Can you provide > > me additional information on this? > > > > > > > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary@redhat.com> wrote: > > > >> We are working on a native path to SDN via OVN (experimental at
> >> point): > >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/ > >> > >> Using Neutron is an option, but at some point the native option might be > >> easier to use (we want to add a UI for it and tighter integration). > >> > >> Yaniv Dary > >> Technical Product Manager > >> Red Hat Israel Ltd. > >> 34 Jerusalem Road > >> Building A, 4th floor > >> Ra'anana, Israel 4350109 > >> > >> Tel : +972 (9) 7692306 > >> 8272306 > >> Email: ydary@redhat.com > >> IRC : ydary > >> > >> > >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta < devin@pabstatencio.com > > >> wrote: > >> > >>> oVirt Users: > >>> > >>> My work is currently deploying oVirt 4.0.5 into our Development > >>> environment. I see there use to be a maintained Openstack Neutron image > >>> that could be used with oVirt to provide SDN functionality. I'm > >>> suspecting > >>> that the reason for the image no longer being maintained is because it > >>> became a hassle to keep updated and patched. From what I understand the > >>> current idea is to just point your oVirt installation to an already > >>> installed Openstack setup. I can easily install an image and install the > >>> latest Openstack (Keystone/Neutron) and then point oVirt to it, but I > >>> want > >>> to understand if that is the proper way to move forward. Is
----- Original Message ----- old). I packages this there a
> >>> general > >>> consensus with the way oVirt is moving in regards to Software Defined > >>> Networking and Neutron in general? Just want to ensure I understand it > >>> clearly before just installing my own Neutron if there is going to be > >>> another method. > >>> > >>> Any feedback is appreciated. > >>> > >>> Devin Acosta RHCA > >>> > >>> > >>> _______________________________________________ > >>> Users mailing list > >>> Users@ovirt.org > >>> http://lists.ovirt.org/mailman/listinfo/users > >>> > >>> > >> > > > > > > -- > > > > Devin Acosta > > Red Hat Certified Architect, LinuxStack > > 602-354-1220 || devin@linuxguru.co > > >
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
--
Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || devin@linuxguru.co
participants (4)
-
Alexander Wels
-
Devin Acosta
-
Marcin Mirecki
-
Yaniv Dary