Dhcp agent sync_state may block or delay
configuration of new networks.

Fixes Bug 1202722

Change-Id: I368cb064057d48be1491df6825cc67c265706b50
defer firewall updates to iptables data structures

One of two patches that fixes bug #1194438.

In the iptables firewall driver, each port method (update_port_filter,
prepare_port_filter, remove_port_filter) makes O(N) calls, where
N=len(firewall.ports), to IptablesManager methods that update dozens
of data structures. When the firewall methods are called in sequence,
e.g., by SecurityGroupAgentRpcMixin, the calls to IptablesManager's
methods start to add up.

This patch changes IptablesFirewallDriver to defer and coalesce calls
to IptablesManager. Now a sequence of M port method calls results in
O(N) calls to IptablesManager methods instead of O(N*M) as before.

Change-Id: If17eeaec197beae8b8aecffca1f19d4535a7226e
Make NEC Plugin keep error resources

NEC Plugin used to ignore OFC errors while deleting resources from OFC,
and it could leave some unused resources on OFC. If OFC generates id
which is in remained resources when creating new resource, it will fail.

This commit makes NEC Plugin keep logical resource when it failed to
delete resource from OFC not to leave orphan resource on OFC, and raise
exception to tell the user that the resouce status is Error.

NOTE: The user can retry deletion. If the resouce was successfully
deleted from OFC in retries, the logical resource will be deleted.

Fixes: bug #1206416
Change-Id: Ifea38dfe3fe8b18d7ae1cedf86a23008549250cc
VPN as a Service (VPNaaS) API and DataModel

implements:blueprint VPNaaS-Python-API

It provides the basic API and
DataModel for the "VPN As A
Service" feature that includes:
* VPNService
* IPsecSiteConnection
* IKEPolicy
* IPsecPolicy

Change-Id: I059d4db05118a4eecd388b8e8db0d714a8f9cb8f
Fix test fail in neutron.tests.unit.test_security_groups_rpc

If running:

tox -epy27 neutron.tests.unit.test_security_groups_rpc

Tests fail with: DuplicateOptError: duplicate option: root_helper
as this is already registered and can be removed.

Fixes bug: 1204700

Change-Id: I8b591357988c5546ae55b6531cf1786b7eb84e20
Remove last of assertEquals

Change-Id: I6411563df90235e1fea0760e1550b705d4fd7182
Merge "defer firewall updates to iptables data structures"
Merge "Remove last of assertEquals"
Prompted error message is not correct for PortNotFound

When deleting a non-existing port, the error message would be
"Port XXXX could not be found on network None" for some plugins.
"network None" is not correct enough here.

Fixes bug #1203631

Change-Id: Ie5d1ec99a2726ff3fec07f83f83a12d24613ae57
Merge "Make NEC Plugin keep error resources"
Create peer router port in appropriate port driver function

Bug 1204288

Removes peer port creation from add_router_interface.
Also fixes port_drivers dict which had a duplicate key.
In addition clears attachment on the NVP logical switch part
being paired with the logical router port before plugging
the patch attachment.

Change-Id: I336b29bdf017b2d34d97412fbe034845fe314fc7
Merge "VPN as a Service (VPNaaS) API and DataModel"
Merge "Fix test fail in neutron.tests.unit.test_security_groups_rpc"
Merge "Dhcp agent sync_state may block or delay configuration of new networks."
Merge "Create peer router port in appropriate port driver function"
Merge "Prompted error message is not correct for PortNotFound"
Imported Translations from Transifex

Change-Id: I68d49e5273b23f4564dc9b94967c22ef39abefbc