VPN does not allow debug to be turned on

[Louis Watta]

Currently there is no way to enable advanced debugging of Openswan when using it with VPNaaS.
It really helps in VPN troubleshooting to be able to enable debug of the Openswan Pluto process.

Would be nice if we could somehow hook neutron debug to enable openswan debug or allow debug to be turned on some other way.

[Nachi Ueno (nati-ueno)]

This one needs bp

[Tobias (tobik)]

Would be great if debug logs are shown in neutron/Horizon like the instance console log.

[Paul Michali (pcm)]

Strongswan logs to syslog, AFAICT. It is possible to change the template to increase logging level. Is the desire to make this selectable by user?

Openswan seems to write to several files. Not sure if there is a logging level that can be specified.

Probably need to talk with Horizon folks, about how to examine log information.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/240177
Committed: https://git.openstack.org/cgit/openstack/neutron-vpnaas/commit/?id=ff49617ff7ac8f0d7268c862cc0cc4628cff9991
Submitter: Jenkins
Branch: master

commit ff49617ff7ac8f0d7268c862cc0cc4628cff9991
Author: Elena Ezhova <email address hidden>
Date: Wed Oct 28 17:05:00 2015 +0300

    Fix options for pluto per-peer logging

    --perpeerlogbase option has no effect without --perpeerlog. [1]
    Moreover there is no need to create 'logs' dir as there is a 'log'
    dir that can be reused.

    Also fixed indentation issue for enable_detailed_logging option
    declaration.

    [1] http://linux.die.net/man/8/ipsec_pluto

    DocImpact
    Related-Bug: #1308730
    Change-Id: Ie5ef72c2abd83b9b1114d90a6c7294cc34174018

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: stable/liberty
Review: https://review.openstack.org/250818

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/250818
Committed: https://git.openstack.org/cgit/openstack/neutron-vpnaas/commit/?id=8bd6c43e69b5285226c70f7b3cc0319b1c6c6bdc
Submitter: Jenkins
Branch: stable/liberty

commit 8bd6c43e69b5285226c70f7b3cc0319b1c6c6bdc
Author: Elena Ezhova <email address hidden>
Date: Wed Oct 28 17:05:00 2015 +0300

    Fix options for pluto per-peer logging

    --perpeerlogbase option has no effect without --perpeerlog. [1]
    Moreover there is no need to create 'logs' dir as there is a 'log'
    dir that can be reused.

    Also fixed indentation issue for enable_detailed_logging option
    declaration.

    [1] http://linux.die.net/man/8/ipsec_pluto

    DocImpact
    Related-Bug: #1308730
    Change-Id: Ie5ef72c2abd83b9b1114d90a6c7294cc34174018
    (cherry picked from commit ff49617ff7ac8f0d7268c862cc0cc4628cff9991)

[Launchpad Janitor (janitor)]

[Expired for neutron because there has been no activity for 60 days.]