Re: CloudStack LTS EOL date?

2017-11-21 Thread Milamber
Sound good for me too On 21/11/2017 11:04, Rene Moser wrote: Hi all The current LTS release is 4.9 which is EOL in June 2018 according to https://cwiki.apache.org/confluence/display/CLOUDSTACK/LTS AFAIK there are no works planed for a new LTS. The release pace has slown down (the high pace an

Re: egress fw problems in 4.10?

2017-11-21 Thread Jayapal Uradi
Please review the PR. https://github.com/apache/cloudstack/pull/2334 -Jayapal On Nov 21, 2017, at 5:37 PM, Rohit Yadav mailto:rohit.ya...@shapeblue.com>> wrote: Jayapal - nice, can you send a PR please? - Rohit From: Jayapal Uradi mailto:jayapal.ur...@accele

Re: Fail with vpn customer gateway creation through terraform

2017-11-21 Thread Jayapal Uradi
Hi Lucian, Try the the following in config, ‘-‘ instead of ‘;’ after the aes256 in the config. New: "sha1-aes256-modp3072” Old: "sha1-aes256;modp3072” Thanks, Jayapal On Nov 22, 2017, at 5:44 AM, Pierre-Luc Dion mailto:pd...@cloudops.com>> wrote: Hi Nux, Could it be your cloudstack version ?

Re: Fail with vpn customer gateway creation through terraform

2017-11-21 Thread Pierre-Luc Dion
Hi Nux, Could it be your cloudstack version ? modp3072 is recent I think in CloudStack so if you run a older version maybe it's not there? On Tue, Nov 21, 2017 at 6:55 PM, Nux! wrote: > Thanks Chiradeep, > > Checked but brain says no. What should I have learned from there? > > AFAIK this is

Re: Fail with vpn customer gateway creation through terraform

2017-11-21 Thread Nux!
Thanks Chiradeep, Checked but brain says no. What should I have learned from there? AFAIK this is a terraform fail. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Chiradeep Vittal" > To: "dev" > Sent: Tuesday, 21 November,

Re: Fail with vpn customer gateway creation through terraform

2017-11-21 Thread Chiradeep Vittal
Check https://github.com/apache/cloudstack/blob/77864992fe8f80dbabd1240f6373d2ba3e98713c/utils/src/main/java/com/cloud/utils/net/NetUtils.java#L1221 On Tue, Nov 21, 2017 at 10:11 AM, Nux! wrote: > Hi, > > I'm trying out terraform and had success so far, except for the vpn > customer gateway feat

Fail with vpn customer gateway creation through terraform

2017-11-21 Thread Nux!
Hi, I'm trying out terraform and had success so far, except for the vpn customer gateway feature. For some reason, terraform fails to create it, though I use the same options as in UI/cloudmonkey where it works just fine. The snippet for it is: resource "cloudstack_vpn_customer_gateway" "defau

Re: [DISCUSS] Move to Debian9 systemvmtemplate

2017-11-21 Thread Rene Moser
Hi Rohit First, thank you very much for the effort! On 11/21/2017 01:07 PM, Rohit Yadav wrote: > Please advise if you can collaborate with me on this, especially around > testing. Thanks! I have some 2 "nice to have"s, AFAICS these haven't been addressed yet: - SNMP readonly listen on "linklo

Re: CloudStack LTS EOL date?

2017-11-21 Thread Ivan Kudryavtsev
Hello, it sounds very reasonable. The more lifecycle information the better for adopters. 21 нояб. 2017 г. 8:56 ПП пользователь "Marc-Aurèle Brothier - Exoscale" < ma...@exoscale.ch> написал: > It makes more sense to me too. > > > On Tue, 2017-11-21 at 12:04 +0100, Rene Moser wrote: > > Hi all >

Re: CloudStack LTS EOL date?

2017-11-21 Thread Marc-Aurèle Brothier - Exoscale
It makes more sense to me too. On Tue, 2017-11-21 at 12:04 +0100, Rene Moser wrote: > Hi all > > The current LTS release is 4.9 which is EOL in June 2018 according to > https://cwiki.apache.org/confluence/display/CLOUDSTACK/LTS > > AFAIK there are no works planed for a new LTS. The release pace

Re: egress fw problems in 4.10?

2017-11-21 Thread Rohit Yadav
Jayapal - nice, can you send a PR please? - Rohit From: Jayapal Uradi Sent: Tuesday, November 21, 2017 5:33:19 PM To: dev@cloudstack.apache.org Subject: Re: egress fw problems in 4.10? Hi, When there is 0.0.0.0/0 for dest cidr, while adding iptables do not inc

Re: [DISCUSS] Move to Debian9 systemvmtemplate

2017-11-21 Thread Rohit Yadav
All, I wanted to revive this thread and bring recent progress to your attention: - We're now able to build debian9 based systemvmtemplates successfully that work okay-ish as CPVM/SSVM host and some initial networking support (dns, dhcp, basic zone, advanced zone: firewall, pf, snat etc.) for

Re: egress fw problems in 4.10?

2017-11-21 Thread Jayapal Uradi
Hi, When there is 0.0.0.0/0 for dest cidr, while adding iptables do not include ' -m set --match-set destCidrIpset-4 dst’ . For 0.0.0.0/0 no need to add this in ipset. This should be fixed in VR code. Thanks, Jayapal > On Nov 21, 2017, at 5:22 PM, Rohit Yadav wrote: > > Jayapal - I tried

Re: egress fw problems in 4.10?

2017-11-21 Thread Rohit Yadav
Jayapal - I tried that, that leaves the ipset empty and egress traffic does not work for guest VMs. This is seen in iptables (filter): [..snipped..] -A FW_EGRESS_RULES -m set --match-set destCidrIpset-4 dst -j ACCEPT -A FW_EGRESS_RULES -j DROP [..snipped..] And no members are seen: root@r-4

Re: egress fw problems in 4.10?

2017-11-21 Thread Jayapal Uradi
When there is 0.0.0.0/0 for dest cidr do not add/skip the ipset match option in iptables. This will fix the issue. -Jayapal On Nov 21, 2017, at 5:07 PM, Rohit Yadav mailto:rohit.ya...@shapeblue.com>> wrote: Hi Lucian, It looks like a legit bug: https://bugzilla.redhat.com/show_bug.cgi?id=12

Re: egress fw problems in 4.10?

2017-11-21 Thread Rohit Yadav
Hi Lucian, It looks like a legit bug: https://bugzilla.redhat.com/show_bug.cgi?id=1297092 When you add 0.0.0.0/0 as destination cidr, this execute on VR and fails: # ipset add destCidrIpset-4 1.0.0.0/0 ipset v6.30: The value of the CIDR parameter of the IP address is invalid The workaround a

CloudStack LTS EOL date?

2017-11-21 Thread Rene Moser
Hi all The current LTS release is 4.9 which is EOL in June 2018 according to https://cwiki.apache.org/confluence/display/CLOUDSTACK/LTS AFAIK there are no works planed for a new LTS. The release pace has slown down (the high pace and leaving users behind fixes was the reason for the LTS). I am s

Re: No database selected for the transaction

2017-11-21 Thread Alireza Eskandari
I should say that I'm using a cluster of MariaDB on Galera with 3 nodes. All of them are master but I'm using one node at a time by assign a virtual IP to it. Here is db.properties on node1: # management server clustering parameters, change cluster.node.IP to the machine IP address # in which the

Re: egress fw problems in 4.10?

2017-11-21 Thread Nux!
Rohit, I see it accepts 0.0.0.0/0 on the source CIDR, but then transforms that into 10.1.1.0/24 (or whatever), I'd imagine it could do the same with the destination CIDR and just "rename" 0.0.0.0/0 into 0.0.0.0/1. However this is not a Cloudstack problem as I see it, it's an ipset bug/feature,

Re: egress fw problems in 4.10?

2017-11-21 Thread Rohit Yadav
I hit the same issue with the debian9-systemvmtemplate PR. Earlier, the egress traffic option used to accept 0.0.0.0/0. - Rohit From: Nux! Sent: Friday, November 17, 2017 11:09:26 PM To: dev Subject: Re: egress fw problems in 4.10? Thanks Jayapal, Indeed, I c

Re: No database selected for the transaction

2017-11-21 Thread Rohit Yadav
Alireza, Can you share your db.properties file (you may replace password/ips with dummy ones)? - Rohit From: Ivan Kudryavtsev Sent: Tuesday, November 21, 2017 2:32:50 PM To: dev@cloudstack.apache.org Subject: Re: No database selected for the transaction Also

Re: No database selected for the transaction

2017-11-21 Thread Ivan Kudryavtsev
Also, have seen that with 4.10 with two management servers on one of them. 21 нояб. 2017 г. 3:36 ПП пользователь "Alireza Eskandari" < astro.alir...@gmail.com> написал: > Hi all, > I'm using a cluster of CS 4.9.3 with 2 nodes. > After couple of weeks, I get "No database selected for the > transac

No database selected for the transaction

2017-11-21 Thread Alireza Eskandari
Hi all, I'm using a cluster of CS 4.9.3 with 2 nodes. After couple of weeks, I get "No database selected for the transaction" error in logs and I have to restart the CS services to resolve the issue. Could you help me about it? Here is the logs: 2017-11-21 10:37:35,641 WARN [c.c.c.d.ManagementSe