Re: POLL: ACL default egress policy rule in VPC

2017-11-13 Thread Jayapal Uradi
Hi Rene, Please look at my inline comments. Let me add some context for the VPC egress/ingress rules behavior. Pre 4.5 (subject to correction) the behavior of VPC acl is as follows. 1. Default egress is ALLOW and ingress is DROP. a. When a rule is added to egress then that particular rule tr

Re: Adoption Survey seems to be abandoned

2017-11-13 Thread Ivan Kudryavtsev
Hello, Eric, all. I would like to follow up the topic. The question is not about an addition of our entity to the list but the state in general. Eric, May be you can create the instruction, so we (or other party) maintains the routine? 2017-10-30 17:07 GMT+07:00 Erik Weber : > On Mon, Oct 30, 20

Re: jetty simulator problem

2017-11-13 Thread Rafael Weingärtner
I removed some spring configurations that were not making sense to me. After that, everything started working. I committed these changes at https://github.com/rafaelweingartner/cloudstack/tree/daanTestSimulator Could you test it? If it works I can open a PR. On Mon, Nov 13, 2017 at 5:33 PM, Daan

Re: jetty simulator problem

2017-11-13 Thread Daan Hoogland
trying with only the depends-on lines removed now On Mon, Nov 13, 2017 at 8:30 PM, Daan Hoogland wrote: > from maven: > mvn -pl client jetty:run -Dsimulator > > On Mon, Nov 13, 2017 at 8:16 PM, Rafael Weingärtner < > rafaelweingart...@gmail.com> wrote: > >> The error changed! That is good... It

Re: jetty simulator problem

2017-11-13 Thread Daan Hoogland
from maven: mvn -pl client jetty:run -Dsimulator On Mon, Nov 13, 2017 at 8:16 PM, Rafael Weingärtner < rafaelweingart...@gmail.com> wrote: > The error changed! That is good... It is a misconfiguration with > dependencies between modules. > How are you running the simulator? > > On Mon, Nov 13, 20

Re: jetty simulator problem

2017-11-13 Thread Rafael Weingärtner
The error changed! That is good... It is a misconfiguration with dependencies between modules. How are you running the simulator? On Mon, Nov 13, 2017 at 5:13 PM, Daan Hoogland wrote: > didn't work:( trying with only some parts removed now > > Caused by: org.springframework.beans.factory. > NoSu

Re: jetty simulator problem

2017-11-13 Thread Daan Hoogland
didn't work:( trying with only some parts removed now Caused by: org.springframework.beans.factory.NoSuchBeanDefinitionException: No qualifying bean of type 'org.apache.cloudstack.engine.subsystem.api.storage.SnapshotService' available: expected at least 1 bean which qualifies as autowire candidat

Re: POLL: ACL default egress policy rule in VPC

2017-11-13 Thread Wei ZHOU
I agree with (3). To achieve backward compatibility, we need to add an egress rule to allow ALL on existing ACLs which do not contain any egress rule. For now almost every one uses integrated network offerings for VPC networks: DefaultIsolatedNetworkOfferingForVpcNetworks DefaultIsolatedNetworkOf

Re: jetty simulator problem

2017-11-13 Thread Rafael Weingärtner
These beans declarations do not make much sense. They are declared twice, once in the XML (spring-engine-storage-snapshot-core-context.xml), and the second declaration is executed through the use of annotations (@Component) in those classes. This exception is happening because there is a configurat

Re: POLL: ACL default egress policy rule in VPC

2017-11-13 Thread Simon Weller
3 definitely seems to make the most sense. From: Rafael Weingärtner Sent: Monday, November 13, 2017 12:02 PM To: dev@cloudstack.apache.org Cc: u...@cloudstack.apache.org Subject: Re: POLL: ACL default egress policy rule in VPC 3 On Mon, Nov 13, 2017 at 3:51 PM,

Re: POLL: ACL default egress policy rule in VPC

2017-11-13 Thread Rafael Weingärtner
3 On Mon, Nov 13, 2017 at 3:51 PM, Daan Hoogland wrote: > 3 of course ;) > > On Mon, Nov 13, 2017 at 6:47 PM, Rene Moser wrote: > > > Hi Devs > > > > The last days I fought with the ACL egress rule behaviour and I would > > like to make a poll in which direction the fix should go. > > > > Short

Re: POLL: ACL default egress policy rule in VPC

2017-11-13 Thread Rene Moser
Note the typo in the user mailing list email address, don't use reply all... sry

Re: POLL: ACL default egress policy rule in VPC

2017-11-13 Thread Daan Hoogland
3 of course ;) On Mon, Nov 13, 2017 at 6:47 PM, Rene Moser wrote: > Hi Devs > > The last days I fought with the ACL egress rule behaviour and I would > like to make a poll in which direction the fix should go. > > Short Version: > > We need to define a better default behaviour for acl default eg

jetty simulator problem

2017-11-13 Thread Daan Hoogland
I'm looking at a problem, any one recognises this on master? simulator does not start cleanly. [WARNING] Failed startup of context o.e.j.m.p.JettyWebAppContext@51de5efa {/client,file:/Users/dahn/apache/cloudstack/client/target/classes/META-INF/webapp/,STARTING}{file:/Users/dahn/apache/cloudstack/c

POLL: ACL default egress policy rule in VPC

2017-11-13 Thread Rene Moser
Hi Devs The last days I fought with the ACL egress rule behaviour and I would like to make a poll in which direction the fix should go. Short Version: We need to define a better default behaviour for acl default egress rule. I see 3 different options: 1. always add a default deny all egress rul

Re: Remote debugging not working anymore

2017-11-13 Thread Marc-Aurèle Brothier - Exoscale
@rhtyd - the java-opts file content (+ read in the startup script) should be put back to allow startup customization. On Mon, 2017-11-13 at 15:18 +0100, Sigert GOEMINNE wrote: > Hi all, > > Starting from the changes in PR2226 > , what do i need to

Re: HTTPS LB and x-forwarded-for

2017-11-13 Thread Wido den Hollander
> Op 13 november 2017 om 15:14 schreef Pierre-Luc Dion : > > > Hi, > > This is looking quite promising, I have a colleague that tested that last > Friday, look like the proxy proto v1 work out of the box with Nginx, but > would need an extra package for Apache 2.4 ? It depends. You need HTTPd

Remote debugging not working anymore

2017-11-13 Thread Sigert GOEMINNE
Hi all, Starting from the changes in PR2226 , what do i need to specify to enable remote debugging on a system? Before I added -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=5005 in /etc/default/cloudstack-management and restarted the

Re: HTTPS LB and x-forwarded-for

2017-11-13 Thread Pierre-Luc Dion
Hi, This is looking quite promising, I have a colleague that tested that last Friday, look like the proxy proto v1 work out of the box with Nginx, but would need an extra package for Apache 2.4 ? Otherwise, it seems to be a good way to do https LB without complicated configuration and huge change

Re: Strange size of template from snapshot on XenServer

2017-11-13 Thread Rafael Weingärtner
Yes, that is what is happening. Thanks for pointing that out. On Mon, Nov 13, 2017 at 3:14 AM, Anshul Gangwar < anshul.gang...@accelerite.com> wrote: > Rafael, you seem to combine two things. Optimization and my fix are two > different commits. I mentioned about optimization (done in commit “8ca

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Özhan Rüzgar Karaman
Hi Ivan, i know that 4.9.x is lts release and 4.10 and 4.11 are not lts releases. What will happen when new lts release comes, does this release fork from 4.9.x branch and apply fixes on 4.10 and 4.1x over that or new lts release will forward fork from 4.11 or 4.1x releases? I am curious about thi

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Ivan Kudryavtsev
I don't know if 4.10 will be improved centrally. AFAIK 4.11 WIP right now... 13 нояб. 2017 г. 16:37 пользователь "Özhan Rüzgar Karaman" < oruzgarkara...@gmail.com> написал: > Hi Ivan; > I like to try virtio-scsi, i like to use its benefits like enlarging data > disks without rebooting vm and gett

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Özhan Rüzgar Karaman
Hi Ivan; I like to try virtio-scsi, i like to use its benefits like enlarging data disks without rebooting vm and getting unused space in vm back to my central storage, we also waited for long time, lets wait some more for 4.10 to become more stable :) Thanks for all replies Özhan On Mon, Nov 13,

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Ivan Kudryavtsev
Ozhan, I suggest 4.10 only if you need KVM VM snapshots, virtio-scsi and ipv6. Don't see other reasons to go from 4.9 (at least for kvm). But I waited for 4.10 for a long time... 13 нояб. 2017 г. 16:21 пользователь "Özhan Rüzgar Karaman" < oruzgarkara...@gmail.com> написал: > ok we will try to co

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Ivan Kudryavtsev
Hi, I did separate Jira issues and PRs to master, but everything in one related to to 4.10, because 4.10 is already out and I don't want to do duplicate PRs to different branches. 13 нояб. 2017 г. 16:18 пользователь "Wei ZHOU" написал: > Hi Ivan, > > I would suggest you to create jira tickets fo

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Özhan Rüzgar Karaman
ok we will try to compile 4.10 from source and try it on our test environment. We currently use 4.9.x on production, i make this test for deciding if 4.10 is suitable & stable for us, we also use very simple and generic setup for this test no ipv6 just simple environment . So for production it loo

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Wei ZHOU
Hi Ivan, I would suggest you to create jira tickets for each problem you found in your testing, and create a github pull request for a jira ticket. It is convenient for reviewers. Kind regards, Wei 2017-11-13 10:01 GMT+01:00 Ivan Kudryavtsev : > Hello, Ozhan > > https://github.com/apache/clouds

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Ivan Kudryavtsev
Hello, Ozhan https://github.com/apache/cloudstack/pull/2320 fixes everything I found right now. It enables functioning of everything correctly even if no IPv6 CIDR specified for network (at least for Ubuntu 14.04). For IPv6 configuration instruction please take a look at: https://github.com/apach

Re: Apache CloudStack 4.10 VR/BasicZone/KVM Problem

2017-11-13 Thread Özhan Rüzgar Karaman
Hi Ivan; Does this hotfixes also solve qoutes and shell script interprets problem? We have no ipv6 setup and today we made similar test with fresh install 4.10. We noticed that we receive similar error on security groups stage while br_netfilter module is already active on our environment. We made

Apache CloudStack 4.9.3 Simulator with Kafka Logging Integrated

2017-11-13 Thread Ivan Kudryavtsev
Hello, comunity. We recently developed simulator image for ACS 4.9.3 integrated with Apache Kafka event bus logging system. This is for development purposes. We use Kafka as integration point, so we need it. It's published in: GitHub: https://github.com/bwsw/cs-simulator-kafka DockerHub: https://h