Minutes for TSC 2_1_2018

• Attendees:
  John McDowall - Palo Alto Networks
  Remi Vichery - Nuage
  Alana Post - LF
  Emanoel Xavier - Intel
  Sudhir Appaji - Intel
  Preeti Ganeshmohan - Intel
  Cindy Spear - Intel
  Mark Iskra - Nuage

• SDN VWire and L3 modes and use cases. Driver: Remi - Nuage

  • Scenario 1: Traffic redirection within the same subnet

    • Priority: This scenario has high priority and should work for the current PoC being built by David.
    • Issue: Traffic loop back when redirection is done with-in the subnet through a PAN VNF.
    • Proposed Solution: In order to avoid traffic loop back, the following changes in the plugin are needed:
      1. Create new forward policy while security group binding is done (creation of the inspection hook) along with creating the new policy group.
      2. The new policy group will contain the VNF ports.
      3. The above forward policy is created with higher priority, this breaks loop back issue.
      4. While unbinding (deleting the inspection hook), make sure to delete the new /additional forwarding policy group and forward policy created.
         It is expected that all of this work will be done within the plugin code, with no change either in the SDK or the OSC core is expected. AR: Remi will confirm ASAP and let the Intel OSC team know if additional changes in the OSC core or SDK are needed. For the changes in the plugin, Emanoel can help the Nuage team answering any questions. Remi/Mark to work on the plugin changes. These may also need to be backported the a stable plugin branch.

  • Scenario 2: Traffic redirection across different subnets.

    • Priority: This scenario has lower priority and is not critical for the current PoC being built by David.
    • Issue: Nuage will need to be configured with L3 mode. Other configuration changes on PAN and additional work on OSC might also be needed to automate the scenario.
    • Proposed Solution: A fully working solution will need further investigation.
    • Next Steps:
      1. Collect feedback from customer on this use case.
      2. David to try out the scenario with his setup and guidance from Nuage/PAN to better understand the configuration that works.
      3. Nuage/PAN and Intel to discuss this further in a future TSC meeting on how it can be automated on OSC once the setup and requirements are clear. The implementation for this can considered for the next release planning.