Hi Rohit,if this is by design, I think we really need to change it :) ASAP Thx for confirmation
Dont want to hijack thread - can you point me to some VR template building guide or something - where we could possibly alter VR template...or I guess this is possibly on MGMT code side...? On 7 May 2015 at 15:15, Rohit Yadav <rohit.ya...@shapeblue.com> wrote: > Hi Andrija, > > > On 07-May-2015, at 3:08 pm, Andrija Panic <andrija.pa...@gmail.com> > wrote: > > > > While not voting (do I have reputation to do that ?)… > > You and anyone in the community are welcome to vote and discuss issues. > > > ... we do have serious VPC bug, which I also encountered wth previous > > releases also (4.3.x): > > > > Just created: https://issues.apache.org/jira/browse/CLOUDSTACK-8451 > > The issue is by design and I imagine would haved existed in all 4.2+. But, > since it does not introduce any regression or breaking feature/design I > think we can try to address this as a design improvement in 4.5.2 or 4.6.0. > > Regards. > > > After you configure Port Forwarding or Static NAT on VPC, do "netstat" on > > VM that is behind VPC, and you don't see real client remote IP, you see > > Source NAT IP of the VPC VR ! > > > > We isolated 1 problematic VR iptables rule - please check the issue... > > > > Lot of software behind VPC become uselsess, firewall, > > fail2ban,SIP/Asterisk/web server logs etc.. - since all connections from > > internet through VPC seems to come from VR... > > > > Thanks > > > > On 7 May 2015 at 14:57, Geoff Higginbottom < > geoff.higginbot...@shapeblue.com > >> wrote: > > > >> +1 with the following testing > >> > >> Upgrade of 4.3.1 and 4.4 2 systems, both Adv Zones running XenServer 6.2 > >> Hypervisors > >> Manual Tests via UI included > >> Upgrade System VM as Root Admin > >> Restart Network with Clean Up as User to upgrade VR > >> Restart VPC as User to upgrade VPC VR > >> VM Lifecycle events (create, stop, start, destroy etc) > >> Create, Update, Destroy VPC ACLs > >> Deleting Domains, Accounts, Users, VMs, Networks, Volumes etc and > >> confirming storage clean-up > >> > >> API Scripted tests included > >> Creating Domains, Accounts, Users, Networks, Egress Rules, Firewall and > >> NAT Rules, VMs, VPCs, VPC ACLs > >> > >> > >> Upgrade of a previous 4.5.1 RC build, Basic Zone with EIP/ELB, GSLB and > >> AutoScaling, with mix of XenServer 6.2 and 6.5 Hypervisors. Dual Zone, > >> with multiple PODs and Clusters. > >> Manual Tests included > >> Upgrade System VM as Root Admin > >> Upgrade VRs as Root Admin > >> Updating Security Groups > >> Adding / Removing Static NAT > >> Adding / Removing Load Balancing > >> Adding / Removing Global Server Load Balancing > >> Adding / Removing AutoScaling > >> > >> > >> Regards > >> > >> Geoff Higginbottom > >> > >> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 > >> > >> geoff.higginbot...@shapeblue.com > >> > >> -----Original Message----- > >> From: Abhinandan Prateek [mailto:abhinandan.prat...@shapeblue.com] > >> Sent: 07 May 2015 08:56 > >> To: CloudStack Dev > >> Subject: Re: [VOTE] Apache Cloudstack 4.5.1 > >> > >> +1 with following testing: > >> > >> Manual Testing: > >> > >> Zone with a cluster of Xenserver 6.5 > >> VM lifecycle, Recovering a destroyed VM, Reinstall VM > >> VM Migration > >> Affinity groups - anti affinity > >> VM consoles > >> VM and volume snapshots > >> Template from volume snapshot, Download Template, Vm from template > >> created form snapshot, Volume creation from volume snapshot > >> Attach volume - throws an exception, preferably should give a proper > >> error on UI: https://issues.apache.org/jira/browse/CLOUDSTACK-8448 > >> Resize volum, Download volume > >> Snapshot policies > >> Change password > >> 2 Tier VPC creation, Change password for VPC VMs, Reachability of VMs > in > >> the same tier, VPC ACL > >> > >> Automated testing: Ran some 20 regression suites, found one issue: > >> https://issues.apache.org/jira/browse/CLOUDSTACK-8437 > >> > >> None of the issues are a blocker. > >> > >> -abhi > >> > >> > >>> On 06-May-2015, at 10:15 pm, Rohit Yadav <rohit.ya...@shapeblue.com> > >> wrote: > >>> > >>> Hi all, > >>> > >>> I tested upgrading XS 6.2 from 4.4.2 to 4.5.1 to try to reproduce and > >> test the issue Geoff reported. > >>> > >>> The issue Geoff found had to do with systemvmtemplate's requireshvm > >> flag. When we register template for the next ACS version we want to > >> upgrade, if done from UI would add requireshvm=true that sets the hvm > flag > >> to 1 (in the vm_instance table, as vms start). If the host is not HVM > >> capable, which in case of Geoff was VirtualBox, systemvm will fail to > >> start/deploy (due to no host found that is HVM). > >>> > >>> When we pre-seed systemvmtemplate on secondary storage the HVM tag is > >> set to 0 (false), so it breaks the convention to set it to 1 when > >> registering/upgrading systemvm template. The fix for this is to register > >> the next sytemvm template (systemvm-xenserver-4.5) using something like > >> cloudmonkey will hvm set to false for ACS 4.4.x or below. This UI issue > has > >> been fixed in ACS 4.5 so users can deselect the HVM option. > >>> > >>> I’ve asked Geoff to test and post his voting on a fresh environment, > >> possibly using VMWare fusion (if doing on laptop) as VBox does not > support > >> vmx/amd-v. > >>> > >>> Hope this helps and hoping 4.5.1 will be solid. > >>> > >>>> On 06-May-2015, at 2:38 pm, Wilder Rodrigues < > >> wrodrig...@schubergphilis.com> wrote: > >>>> > >>>> Thanks for the heads-up, Geoff. > >>>> > >>>> I will start testing an upgrade scenario now. > >>>> > >>>> Cheers, > >>>> Wilder > >>>> > >>>>> On 06 May 2015, at 14:28, Geoff Higginbottom < > >> geoff.higginbot...@shapeblue.com> wrote: > >>>>> > >>>>> For all those of you have voted +1 based on a clean install, if > >>>>> possible please test upgrade scenarios including deploying new > >>>>> Isolated networks and new VPCs as I have performed three upgrades > >>>>> and all pass the initial upgrade, but then fail to add new VRs or > >>>>> new SSVM/CPVMs post upgrade etc > >>>>> > >>>>> Regards > >>>>> > >>>>> Geoff Higginbottom > >>>>> > >>>>> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 > >>>>> > >>>>> geoff.higginbot...@shapeblue.com > >>>>> > >>>>> -----Original Message----- > >>>>> From: Daan Hoogland [mailto:daan.hoogl...@gmail.com] > >>>>> Sent: 06 May 2015 13:25 > >>>>> To: dev@cloudstack.apache.org > >>>>> Subject: Re: [VOTE] Apache Cloudstack 4.5.1 > >>>>> > >>>>> based on Wilder's testing and my own bringing up a 4.5.1 server in a > >>>>> test env i will +1(binding) > >>>>> > >>>>> Op wo 6 mei 2015 om 14:23 schreef Geoff Higginbottom < > >>>>> geoff.higginbot...@shapeblue.com>: > >>>>> > >>>>>> Sorry for confusing the voting thread, I was backing Eriks > >>>>>> statements with a '+1' but was not voting for the release - > >>>>>> highlights the problem of mixing the threads > >>>>>> > >>>>>> Regards > >>>>>> > >>>>>> Geoff Higginbottom > >>>>>> > >>>>>> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 > >>>>>> > >>>>>> geoff.higginbot...@shapeblue.com > >>>>>> > >>>>>> -----Original Message----- > >>>>>> From: Geoff Higginbottom [mailto:geoff.higginbot...@shapeblue.com] > >>>>>> Sent: 06 May 2015 10:59 > >>>>>> To: dev@cloudstack.apache.org > >>>>>> Subject: RE: [VOTE] Apache Cloudstack 4.5.1 > >>>>>> > >>>>>> +1 > >>>>>> > >>>>>> Regards > >>>>>> > >>>>>> Geoff Higginbottom > >>>>>> > >>>>>> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 > >>>>>> > >>>>>> geoff.higginbot...@shapeblue.com > >>>>>> > >>>>>> -----Original Message----- > >>>>>> From: Erik Weber [mailto:terbol...@gmail.com] > >>>>>> Sent: 06 May 2015 10:44 > >>>>>> To: dev > >>>>>> Subject: Re: [VOTE] Apache Cloudstack 4.5.1 > >>>>>> > >>>>>> On Wed, May 6, 2015 at 11:18 AM, Vadim Kimlaychuk < > >>>>>> vadim.kimlayc...@elion.ee > >>>>>>> wrote: > >>>>>> > >>>>>>> Geoff, > >>>>>>> > >>>>>>> Thank you for explaination. Basically the idea behind that was > >> to > >>>>>>> have (for instance) database tier and web-app tier. Web-apps-tier > >>>>>> servers > >>>>>>> have to communicate with databases, but databases are closed for > >>>>>>> outside world. > >>>>>>> > >>>>>> The easiest way is to have 2 NICs at web-tier VMs and route inside > >>>>>> VM > >>>>>>> without need to send all the requests to VPC router. > >>>>>> > >>>>>> > >>>>>> But you're also breaking the tiering. Your database server is now > >>>>>> fully accessible from the internet (or wherever you're connected > >>>>>> to) through the web servers, and not just the database. > >>>>>> > >>>>>> The proper way, imho, is to have a firewall between (ie. the VR), > >>>>>> and fix the scaling issues instead. That's what you do in the > >>>>>> non-cloud world as well, you create two tiers and put a firewall > >> between them. > >>>>>> > >>>>>> -- > >>>>>> > >>>>>> Erik > >>>>>> Find out more about ShapeBlue and our range of CloudStack related > >>>>>> services > >>>>>> > >>>>>> IaaS Cloud Design & Build< > >>>>>> http://shapeblue.com/iaas-cloud-design-and-build//> > >>>>>> CSForge – rapid IaaS deployment > >>>>>> framework<http://shapeblue.com/csforge/> > >>>>>> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > >>>>>> CloudStack Software Engineering< > >>>>>> http://shapeblue.com/cloudstack-software-engineering/> > >>>>>> CloudStack Infrastructure Support< > >>>>>> http://shapeblue.com/cloudstack-infrastructure-support/> > >>>>>> CloudStack Bootcamp Training Courses< > >>>>>> http://shapeblue.com/cloudstack-training/> > >>>>>> > >>>>>> This email and any attachments to it may be confidential and are > >>>>>> intended solely for the use of the individual to whom it is > addressed. > >>>>>> Any views or opinions expressed are solely those of the author and > >>>>>> do not necessarily represent those of Shape Blue Ltd or related > >>>>>> companies. If you are not the intended recipient of this email, you > >>>>>> must neither take any action based upon its contents, nor copy or > >>>>>> show it to anyone. Please contact the sender if you believe you > >>>>>> have received this email in error. Shape Blue Ltd is a company > >>>>>> incorporated in England & Wales. ShapeBlue Services India LLP is a > >>>>>> company incorporated in India and is operated under license from > >>>>>> Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company > >>>>>> incorporated in Brasil and is operated under license from Shape > >>>>>> Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The > >> Republic of South Africa and is traded under license from Shape Blue > Ltd. > >> ShapeBlue is a registered trademark. > >>>>>> Find out more about ShapeBlue and our range of CloudStack related > >>>>>> services > >>>>>> > >>>>>> IaaS Cloud Design & Build< > >>>>>> http://shapeblue.com/iaas-cloud-design-and-build//> > >>>>>> CSForge – rapid IaaS deployment > >>>>>> framework<http://shapeblue.com/csforge/> > >>>>>> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > >>>>>> CloudStack Software Engineering< > >>>>>> http://shapeblue.com/cloudstack-software-engineering/> > >>>>>> CloudStack Infrastructure Support< > >>>>>> http://shapeblue.com/cloudstack-infrastructure-support/> > >>>>>> CloudStack Bootcamp Training Courses< > >>>>>> http://shapeblue.com/cloudstack-training/> > >>>>>> > >>>>>> This email and any attachments to it may be confidential and are > >>>>>> intended solely for the use of the individual to whom it is > addressed. > >>>>>> Any views or opinions expressed are solely those of the author and > >>>>>> do not necessarily represent those of Shape Blue Ltd or related > >>>>>> companies. If you are not the intended recipient of this email, you > >>>>>> must neither take any action based upon its contents, nor copy or > >>>>>> show it to anyone. Please contact the sender if you believe you > >>>>>> have received this email in error. Shape Blue Ltd is a company > >>>>>> incorporated in England & Wales. ShapeBlue Services India LLP is a > >>>>>> company incorporated in India and is operated under license from > >>>>>> Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company > >>>>>> incorporated in Brasil and is operated under license from Shape > >>>>>> Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The > >> Republic of South Africa and is traded under license from Shape Blue > Ltd. > >> ShapeBlue is a registered trademark. > >>>>>> > >>>>> Find out more about ShapeBlue and our range of CloudStack related > >>>>> services > >>>>> > >>>>> IaaS Cloud Design & > >>>>> Build<http://shapeblue.com/iaas-cloud-design-and-build//> > >>>>> CSForge – rapid IaaS deployment > >>>>> framework<http://shapeblue.com/csforge/> > >>>>> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > >>>>> CloudStack Software > >>>>> Engineering<http://shapeblue.com/cloudstack-software-engineering/> > >>>>> CloudStack Infrastructure > >>>>> Support<http://shapeblue.com/cloudstack-infrastructure-support/> > >>>>> CloudStack Bootcamp Training > >>>>> Courses<http://shapeblue.com/cloudstack-training/> > >>>>> > >>>>> This email and any attachments to it may be confidential and are > >> intended solely for the use of the individual to whom it is addressed. > Any > >> views or opinions expressed are solely those of the author and do not > >> necessarily represent those of Shape Blue Ltd or related companies. If > you > >> are not the intended recipient of this email, you must neither take any > >> action based upon its contents, nor copy or show it to anyone. Please > >> contact the sender if you believe you have received this email in error. > >> Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue > >> Services India LLP is a company incorporated in India and is operated > under > >> license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a > >> company incorporated in Brasil and is operated under license from Shape > >> Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic > of > >> South Africa and is traded under license from Shape Blue Ltd. ShapeBlue > is > >> a registered trademark. > >>>> > >>> > >>> Regards, > >>> Rohit Yadav > >>> Software Architect, ShapeBlue > >>> M. +91 88 262 30892 | rohit.ya...@shapeblue.com > >>> Blog: bhaisaab.org | Twitter: @_bhaisaab > >>> > >>> > >>> > >>> Find out more about ShapeBlue and our range of CloudStack related > >>> services > >>> > >>> IaaS Cloud Design & > >>> Build<http://shapeblue.com/iaas-cloud-design-and-build//> > >>> CSForge – rapid IaaS deployment > >>> framework<http://shapeblue.com/csforge/> > >>> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > >>> CloudStack Software > >>> Engineering<http://shapeblue.com/cloudstack-software-engineering/> > >>> CloudStack Infrastructure > >>> Support<http://shapeblue.com/cloudstack-infrastructure-support/> > >>> CloudStack Bootcamp Training > >>> Courses<http://shapeblue.com/cloudstack-training/> > >>> > >>> This email and any attachments to it may be confidential and are > >> intended solely for the use of the individual to whom it is addressed. > Any > >> views or opinions expressed are solely those of the author and do not > >> necessarily represent those of Shape Blue Ltd or related companies. If > you > >> are not the intended recipient of this email, you must neither take any > >> action based upon its contents, nor copy or show it to anyone. Please > >> contact the sender if you believe you have received this email in error. > >> Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue > >> Services India LLP is a company incorporated in India and is operated > under > >> license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a > >> company incorporated in Brasil and is operated under license from Shape > >> Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic > of > >> South Africa and is traded under license from Shape Blue Ltd. ShapeBlue > is > >> a registered trademark. > >> > >> Find out more about ShapeBlue and our range of CloudStack related > services > >> > >> IaaS Cloud Design & Build< > >> http://shapeblue.com/iaas-cloud-design-and-build//> > >> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/ > > > >> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > >> CloudStack Software Engineering< > >> http://shapeblue.com/cloudstack-software-engineering/> > >> CloudStack Infrastructure Support< > >> http://shapeblue.com/cloudstack-infrastructure-support/> > >> CloudStack Bootcamp Training Courses< > >> http://shapeblue.com/cloudstack-training/> > >> > >> This email and any attachments to it may be confidential and are > intended > >> solely for the use of the individual to whom it is addressed. Any views > or > >> opinions expressed are solely those of the author and do not necessarily > >> represent those of Shape Blue Ltd or related companies. If you are not > the > >> intended recipient of this email, you must neither take any action based > >> upon its contents, nor copy or show it to anyone. Please contact the > sender > >> if you believe you have received this email in error. Shape Blue Ltd is > a > >> company incorporated in England & Wales. ShapeBlue Services India LLP > is a > >> company incorporated in India and is operated under license from Shape > Blue > >> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in > Brasil > >> and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd > is > >> a company registered by The Republic of South Africa and is traded under > >> license from Shape Blue Ltd. ShapeBlue is a registered trademark. > >> Find out more about ShapeBlue and our range of CloudStack related > services > >> > >> IaaS Cloud Design & Build< > >> http://shapeblue.com/iaas-cloud-design-and-build//> > >> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/ > > > >> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > >> CloudStack Software Engineering< > >> http://shapeblue.com/cloudstack-software-engineering/> > >> CloudStack Infrastructure Support< > >> http://shapeblue.com/cloudstack-infrastructure-support/> > >> CloudStack Bootcamp Training Courses< > >> http://shapeblue.com/cloudstack-training/> > >> > >> This email and any attachments to it may be confidential and are > intended > >> solely for the use of the individual to whom it is addressed. Any views > or > >> opinions expressed are solely those of the author and do not necessarily > >> represent those of Shape Blue Ltd or related companies. If you are not > the > >> intended recipient of this email, you must neither take any action based > >> upon its contents, nor copy or show it to anyone. Please contact the > sender > >> if you believe you have received this email in error. Shape Blue Ltd is > a > >> company incorporated in England & Wales. ShapeBlue Services India LLP > is a > >> company incorporated in India and is operated under license from Shape > Blue > >> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in > Brasil > >> and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd > is > >> a company registered by The Republic of South Africa and is traded under > >> license from Shape Blue Ltd. ShapeBlue is a registered trademark. > >> > > > > > > > > -- > > > > Andrija Panić > > Regards, > Rohit Yadav > Software Architect, ShapeBlue > M. +91 88 262 30892 | rohit.ya...@shapeblue.com > Blog: bhaisaab.org | Twitter: @_bhaisaab > > > > Find out more about ShapeBlue and our range of CloudStack related services > > IaaS Cloud Design & Build< > http://shapeblue.com/iaas-cloud-design-and-build//> > CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/> > CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > CloudStack Software Engineering< > http://shapeblue.com/cloudstack-software-engineering/> > CloudStack Infrastructure Support< > http://shapeblue.com/cloudstack-infrastructure-support/> > CloudStack Bootcamp Training Courses< > http://shapeblue.com/cloudstack-training/> > > This email and any attachments to it may be confidential and are intended > solely for the use of the individual to whom it is addressed. Any views or > opinions expressed are solely those of the author and do not necessarily > represent those of Shape Blue Ltd or related companies. If you are not the > intended recipient of this email, you must neither take any action based > upon its contents, nor copy or show it to anyone. Please contact the sender > if you believe you have received this email in error. Shape Blue Ltd is a > company incorporated in England & Wales. ShapeBlue Services India LLP is a > company incorporated in India and is operated under license from Shape Blue > Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil > and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is > a company registered by The Republic of South Africa and is traded under > license from Shape Blue Ltd. ShapeBlue is a registered trademark. > -- Andrija Panić
