Add default route to dhcp agent netns.

Remove code block "if self.conf.enable_metadata_network:". No need to treat it
differently. Default route will be set as any other network.

Change-Id: I71eaaf46bbd01f577988211b650fdbe3972d1fa0
Fixes: bug #1196889
Dhcp agent sync_state may block or delay
configuration of new networks.

Fixes Bug 1202722

Change-Id: I368cb064057d48be1491df6825cc67c265706b50
refactor port binding codes

Bug #1195047

This patch:
1. removes the iteration in get_ports to call extend_dict_binding
2. uses a unified way for plugins to do this kind of stuff

ml2 will enhance the binding so that it can have different binding
for port according to port's host.
mlnx and bigswitch are also exceptions due to the dynamic binding info.

Change-Id: I5a77eb7395e14482a856e033f536f72a1bf82e06
defer firewall updates to iptables data structures

One of two patches that fixes bug #1194438.

In the iptables firewall driver, each port method (update_port_filter,
prepare_port_filter, remove_port_filter) makes O(N) calls, where
N=len(firewall.ports), to IptablesManager methods that update dozens
of data structures. When the firewall methods are called in sequence,
e.g., by SecurityGroupAgentRpcMixin, the calls to IptablesManager's
methods start to add up.

This patch changes IptablesFirewallDriver to defer and coalesce calls
to IptablesManager. Now a sequence of M port method calls results in
O(N) calls to IptablesManager methods instead of O(N*M) as before.

Change-Id: If17eeaec197beae8b8aecffca1f19d4535a7226e
Update to latest oslo rootwrap

Update Neutron rootwrap to the latest from oslo-incubator. This allows
to get rid of the DnsMasqFilter (which was already replaced by
EnvFilter) in preparation for the havana release, as well as get a few
bugfixes.

All the changes are coming directly from the Oslo "rootwrap" module
sync.

Change-Id: Ic373710cce0716323f4349414bb5b231f48d9177
Firewall as a Service (FWaaS) APIs and DB Model

Implements: blueprint quantum-fwaas

blueprint: quantum-fwaas-plugin

This is the first iteration of the FWaaS implementation and
is geared towards implementing the model that will be
required to at least address the reference implementation.

This iteration will not include implementation of the following
features:
* grouping or dynamic objects
* application/service objects

Change-Id: I57a62d6e9d3f1e6c4dd44cd5c745710a3d9e488e
Fix logic for building field_list in update

Bug 1194520

Change-Id: Ie3ea7b77dc9a4f712e3e838c20c062db1b2d9faa
Separate NVP create lport operation and neutron db transaction

Bug 1200001

This patch removes the NVP call for creating a logical port from
the SQL transaction context used for creating the Neutron port.
It also ensures orphaned data are properly removed from both
the Neutron DB and the NVP backend.

Change-Id: I028a1493ecf732f2422e0eaa2020bac4ebdbb457
Fixing some typos found during translation

Change-Id: Ic0e9ea6aa84c30996b29dce3bfa06b443e9adcc4
Make NEC Plugin keep error resources

NEC Plugin used to ignore OFC errors while deleting resources from OFC,
and it could leave some unused resources on OFC. If OFC generates id
which is in remained resources when creating new resource, it will fail.

This commit makes NEC Plugin keep logical resource when it failed to
delete resource from OFC not to leave orphan resource on OFC, and raise
exception to tell the user that the resouce status is Error.

NOTE: The user can retry deletion. If the resouce was successfully
deleted from OFC in retries, the logical resource will be deleted.

Fixes: bug #1206416
Change-Id: Ifea38dfe3fe8b18d7ae1cedf86a23008549250cc
Merge "Update to latest oslo rootwrap"
Merge "Firewall as a Service (FWaaS) APIs and DB Model"
VPN as a Service (VPNaaS) API and DataModel

implements:blueprint VPNaaS-Python-API

It provides the basic API and
DataModel for the "VPN As A
Service" feature that includes:
* VPNService
* IPsecSiteConnection
* IKEPolicy
* IPsecPolicy

Change-Id: I059d4db05118a4eecd388b8e8db0d714a8f9cb8f
Fix ill-formed column definition in migration downgrade step.

fixes bug 1206612

Change-Id: I64a5850cfef28cc4c7f32bdbf50420dc92e4e6f5
Imported Translations from Transifex

Change-Id: I580ef2f72510fbc330cf5cffa1acf3248ad4a3e9
Merge "Imported Translations from Transifex"
Fix test fail in neutron.tests.unit.test_security_groups_rpc

If running:

tox -epy27 neutron.tests.unit.test_security_groups_rpc

Tests fail with: DuplicateOptError: duplicate option: root_helper
as this is already registered and can be removed.

Fixes bug: 1204700

Change-Id: I8b591357988c5546ae55b6531cf1786b7eb84e20
Merge "Add default route to dhcp agent netns."
Merge "Separate NVP create lport operation and neutron db transaction"
Remove last of assertEquals

Change-Id: I6411563df90235e1fea0760e1550b705d4fd7182