Re: Iptables Configuration

2013-09-22 Thread Jayapal Reddy Uradi
Hi, Did you install CSP in cloudstack properly ? please refer the below link to install CSP in xenserver. http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.2/html/Installation_Guide/citrix-xenserver-installation.html#xenserver-support-pkg-installation Please refer the example working

[PROPOSAL] adding [SOLVED] tag in mailing list subject

2013-09-23 Thread Jayapal Reddy Uradi
Hi, When the issues raised in dev/users mailing lists are solved by using suggestions/solutions as replies send by community members then the one who raised the issue please reply to the thread by adding [SOLVED] tag. Also please add the accumulated steps performed to solve it, this will help

Re: [ANNOUNCE] New committer: Rajesh Battala

2013-09-24 Thread Jayapal Reddy Uradi
Congrats Rajesh! On 25-Sep-2013, at 10:36 AM, Harikrishna Patnala wrote: > Congratulations Rajesh :) > > On 25-Sep-2013, at 10:26 AM, Venkata SwamyBabu Budumuru > > wrote: > >> Congrats Rajesh! >> >> On 25/09/13 10:00 AM, "Abhinav Roy" wrote: >> >>> Congrats Rajesh :) >>> >>> >>> ---

[PROPOSAL] Service monitoring tool in virtual router

2013-09-25 Thread Jayapal Reddy Uradi
Hi, Currently in virtual router there is no way to recover and notify if some service goes down unexpectedly. This feature is about monitoring all the services rendered by the virtual router, ensure that the services are running through the life time of the VR. On service failure: 1. Generate

Re: [ANNOUNCE] New Committer: Darren Shepherd

2013-09-29 Thread Jayapal Reddy Uradi
Congrats Darren! -Jayapal On 29-Sep-2013, at 10:12 AM, Alena Prokharchyk wrote: > Congrats, Darren! > > -Alena > > From: Chip Childers > mailto:chip.child...@sungard.com>> > Reply-To: "dev@cloudstack.apache.org" > mailto:dev@cloudstack.apache.org>> > Date:

Re: Virtual Router reachability

2013-09-29 Thread Jayapal Reddy Uradi
Girish, cloudstack shows router status as 'running' before the router booting completed. The router is accessible when the cloud-early-config starts the sshd in booting. +1 on santosh suggestion. Thanks, Jayapal On 30-Sep-2013, at 11:25 AM, Santhosh Edukulla wrote: > Girish, > > 1. Usin

Re: Virtual Router reachability

2013-09-30 Thread Jayapal Reddy Uradi
Hi Girish, While selecting the delay I suggest the following. In general check the time taken for the router boot up. Take the max interval as 10 times of boot up time. Repeat the ssh for each boot up interval. Thanks, Jayapal On 30-Sep-2013, at 1:38 PM, Girish Shilamkar wrote: > Marcus,

Re: [PROPOSAL] Service monitoring tool in virtual router

2013-09-30 Thread Jayapal Reddy Uradi
t;>> -Original Message- >>>>>>> From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] >>>>>>> Sent: Wednesday, September 25, 2013 10:28 PM >>>>>>> To: dev@cloudstack.apache.org >>>>>>> Subject:

Re: [PROPOSAL] Service monitoring tool in virtual router

2013-10-04 Thread Jayapal Reddy Uradi
Hi, I am planning to write script utility to monitor processes and restart on the event of failure. It will also logs the events. Thanks, Jayapal On 02-Oct-2013, at 3:25 AM, Simon Weller wrote: > supervisord maybe? > > - Original Message - > > From: "Chiradeep Vittal" > To: dev@c

Re: [PROPOSAL] Service monitoring tool in virtual router

2013-10-05 Thread Jayapal Reddy Uradi
own crashes as > well. > > On 10/4/13 1:59 AM, "Jayapal Reddy Uradi" > wrote: > >> Hi, >> >> I am planning to write script utility to monitor processes and restart on >> the event of failure. It will also logs the events. >> >> Th

Re: [ANNOUNCE] New PMC member: Animesh Chaturvedi

2013-10-21 Thread Jayapal Reddy Uradi
Congrats, Animesh! On 22-Oct-2013, at 8:55 AM, Go Chiba wrote: > Congrats, Animesh! > > > On Tue, Oct 22, 2013 at 4:01 AM, Chip Childers wrote: > >> The Project Management Committee (PMC) for Apache CloudStack has asked >> Animesh Chaturvedi to join the PMC and we are pleased to announce that

Re: [ANNOUNCE] New Committer: Shilamkar, Girish

2013-10-24 Thread Jayapal Reddy Uradi
Congrats Girish! On 24-Oct-2013, at 12:45 AM, Rayees Namathponnan wrote: > Congrats Girsih > > -Original Message- > From: Ahmad Emneina [mailto:aemne...@gmail.com] > Sent: Wednesday, October 23, 2013 10:34 AM > To: dev@cloudstack.apache.org > Subject: Re: [ANNOUNCE] New Committer: Sh

Re: [ANNOUNCE] New Committer: Nguyen Anh Tu

2013-11-04 Thread Jayapal Reddy Uradi
Congrats Nguyen! On 04-Nov-2013, at 5:42 PM, Hugo Trippaers mailto:h...@trippaers.nl>> wrote: Congrats Tuna :-) Cheers, Hugo On 4 nov. 2013, at 11:12, Daan Hoogland mailto:daan.hoogl...@gmail.com>> wrote: welcome Nguyen. On Mon, Nov 4, 2013 at 10:02 AM, Sebastien Goasguen mailto:run...@

Re: Exception Occurred adding host

2013-11-05 Thread Jayapal Reddy Uradi
Hi, >From the logs vmops, setIptables call failed. for cmd: setIptables with args due to There was a failure Can you check the xenserver agent log (SMlog) to know more info Thanks, Jayapal On 06-Nov-2013, at 9:56 AM, Aakash Kumar wrote: > Hello , > Following exception occurred on running

Re: [PROPOSAL] Service monitoring tool in virtual router

2013-11-06 Thread Jayapal Reddy Uradi
orts of those deamons to be > monitored. Again, this script can be added through cron\at to be scheduled to > run x units, if it gets killed the next x units after the monitor script is > up again. > > Also, there could be many other approaches as well. > > > Thanks!

Re: [PROPOSAL] Service monitoring tool in virtual router

2013-11-07 Thread Jayapal Reddy Uradi
l happily write the Opsview/Nagios > module (I'm thinking module is hosted outside ACS, but I guess it could be a > plugin - see earlier licensing points). > > Thoughts? > > Just my 2c. Happy to tweak wiki if folks lean towards this. > > John > 1: Aside - this

Re: New Committer: Sanjeev Neelarapu

2013-11-13 Thread Jayapal Reddy Uradi
Congrats Sanjeev! On 14-Nov-2013, at 11:42 AM, Bharat Kumar wrote: > Congratulations Sanjeev. > > On 14-Nov-2013, at 11:38 am, Sailaja Mada wrote: > >> Congratulations Sanjeev. >> >> Regards, >> Sailaja.M >> >> -Original Message- >> From: Prasanna Santhanam [mailto:t...@apache.org]

bug CLOUDSTACK-2371 after with nicira integration

2013-05-20 Thread Jayapal Reddy Uradi
Hi Hugo, Bug CLOUDSTACK-2371 NPE is introduced with commit 79c7da07abd4294f150851aa0c2d06a28564c5a9 while deleting private gateway. Can you please looking into the issue. commit 79c7da07abd4294f150851aa0c2d06a28564c5a9 Author: Hugo Trippaers Date: Wed Jul 11 16:14:28 2012 -0700 Phase 1

RE: Juniper SRX xml files copy logic

2013-05-22 Thread Jayapal Reddy Uradi
The files get copied when you add Junipre SRX device into CS. Thanks, Jayapal > -Original Message- > From: Rayees Namathponnan [mailto:rayees.namathpon...@citrix.com] > Sent: Thursday, 23 May 2013 4:58 AM > To: cloudstack-...@incubator.apache.org > Subject: Juniper SRX xml files copy log

Re: Juniper SRX xml files copy logic

2013-05-22 Thread Jayapal Reddy Uradi
Please ignore my last answer. Thanks, Jayapal On 23-May-2013, at 10:12 AM, Jayapal Reddy Uradi wrote: > The files get copied when you add Junipre SRX device into CS. > > Thanks, > Jayapal > > >> -Original Message- >> From: Rayees Namathponnan [mailto:

Re: [ANNOUNCE] New committer: Venkata Swamy

2013-05-23 Thread Jayapal Reddy Uradi
Congrats swamy ! On 24-May-2013, at 2:51 AM, Chip Childers wrote: > The Project Management Committee (PMC) for Apache CloudStack > has asked Venkata Swamy to become a committer and we are pleased to > announce that they have accepted. > > Being a committer allows many contributors to contribut

Re: [ANNOUNCE] New committer: Sailaja Mada

2013-05-23 Thread Jayapal Reddy Uradi
Congrats Sailaja!! On 24-May-2013, at 9:46 AM, Abhinav Roy wrote: > Congratulations Sailaja!! :) > > -Original Message- > From: Sowmya Krishnan [mailto:sowmya.krish...@citrix.com] > Sent: Friday, May 24, 2013 9:06 AM > To: dev@cloudstack.apache.org > Subject: RE: [ANNOUNCE] New commit

[Discuss][Proposal] Configurable option for egress firewall rules default policy

2013-06-12 Thread Jayapal Reddy Uradi
Hi, The current egress firewall rule feature by default BLOCK the all the outgoing traffic if there are no user configured rules. I am proposing configurable option for the egress firewall rules using the Network offering. In network offering for firewall service provider, user can select egres

Re: SRX Integration Issues.

2013-06-14 Thread Jayapal Reddy Uradi
Hi, I am not sure about the error but please see the below example configuration and correct your configuration. Example confirmation: > Public Interface: fe-0/0/4.52 > Private Interface: fe-0/0/1 fe-0/0/1 - private interface fe-0/0/4.52 - public interface where my public network vlan id is

Re: NonOSS build fails?

2013-06-20 Thread Jayapal Reddy Uradi
Hi, I am also getting the same error. Thanks, Jayapal On 20-Jun-2013, at 5:04 PM, Prasanna Santhanam wrote: > Does anyone have problem building non oss? The build is failing at: > > http://jenkins.buildacloud.org/view/master/job/build-master-nonoss/503/console > > Failed to execute goal > o

RE: Virtual Router: DHCP and 2-second DNS outages

2013-07-03 Thread Jayapal Reddy Uradi
Guest VM not able get ip address issue got reproduced (CLOUDSTACK-3312). This issue happened because the dnsmasq daemon still assuming the ip with the old mac. Jul 3 11:16:44 dnsmasq-dhcp[2648]: not using configured address 10.223.250.227 because it is leased to 6:00:0e:00:00:20 Jul 3 11:16:4

Re: Virtual Router: DHCP and 2-second DNS outages

2013-07-04 Thread Jayapal Reddy Uradi
Hi, The dhcp_release is sending release request on lo (loop back) interface updated it to eth0. It is suppose to send release request on the interface on which dhcp server is listening. Thanks, Jayapal On 03-Jul-2013, at 5:22 PM, Jayapal Reddy Uradi mailto:jayapalreddy.ur...@citrix.com

Re: Virtual Router: DHCP and 2-second DNS outages

2013-07-11 Thread Jayapal Reddy Uradi
equest on lo (loop back) interface updated it to eth0. It is suppose to send release request on the interface on which dhcp server is listening. Thanks, Jayapal On 03-Jul-2013, at 5:22 PM, Jayapal Reddy Uradi mailto:jayapalreddy.ur...@citrix.com>> wrote: Guest VM not able get ip addre

Re: Advanced Networking

2013-07-11 Thread Jayapal Reddy Uradi
Hi Maurice, Did you try adding multiple ips to nic ? API: addIpToNic, from UI you can acquire ips to nic at VM NIC tab. After acquiring ip, you need to manually configure that ip in the VM. Thanks, Jayapal On 11-Jul-2013, at 9:40 AM, Maurice Lawler wrote: > Greetings, > > I've been tryi

Re: [ACS42] Three weeks to code freeze

2013-07-16 Thread Jayapal Reddy Uradi
You are right Abhi. Enable RPS/RFS (CLOUDSTACK-2433) changes doesn't involve template changes. Thanks, jayapal On 16-Jul-2013, at 5:18 PM, Abhinandan Prateek wrote: >> Given the debate on system template changes in last few days of 4.1 > requiring big testing effort and potential >regression,

Re: New user - Introduction

2013-07-19 Thread Jayapal Reddy Uradi
Welcome Rene! On 19-Jul-2013, at 1:49 PM, René Diepstraten wrote: > Hi everyone. > > Since I have joined the mailing list, I'd like to say hello and introduce > myself. > My name is Rene Diepstraten, am a system administrator and the company I > work for ( PCextreme ) uses Apache CloudStack. >

Re: How to create Port Forwarding rule for VM through UI?

2013-08-01 Thread Jayapal Reddy Uradi
Hi Gaurav, Port forwarding to work you need to create firewall rule also. Thanks, Jayapal On 01-Aug-2013, at 5:38 PM, Daan Hoogland wrote: > network -> -> IP Adresses -> -> > configuration -> Port Forwarding > > On Mon, Jul 22, 2013 at 12:09 PM, Gaurav Aradhye > wrote: >> Hi all, >> >> Ca

Re: is jira down. ?

2013-08-05 Thread Jayapal Reddy Uradi
Jira is down again. Thanks, Jayapal On 05-Aug-2013, at 12:25 PM, Rajesh Battala mailto:rajesh.batt...@citrix.com>> wrote: Jira is up now. Looks like there was an issue with plugin and somebody Fixed it. Thanks Rajesh Battala -Original Message- From: Rajesh Battala [mailto:rajesh.ba

Re: anyone please: firewall rules application

2013-08-08 Thread Jayapal Reddy Uradi
Check the host logs (in xen /var/log/SMlog) to see which script is causing the failure. Thanks, jayapal On 08-Aug-2013, at 4:43 PM, Daan Hoogland wrote: > I feel I am on a ghost hunt. > > On Thu, Aug 8, 2013 at 10:32 AM, Daan Hoogland > wrote: >> H, >> >> I noted that in some of the 4.1

Re: [ANNOUNCE] New Committer: Toshiaki Hatano

2013-08-20 Thread Jayapal Reddy Uradi
Congratulations! On 20-Aug-2013, at 1:06 PM, Hugo Trippaers wrote: > Congratulations :-) > > Sent from my iPhone > > On 20 aug. 2013, at 02:55, Go Chiba wrote: > >> Congrats Hatano-san! >> >> >> On Tue, Aug 20, 2013 at 7:56 AM, Marcus Sorensen wrote: >> >>> The Project Management Committ

Re: Secondary IP (4.1.1)

2013-08-20 Thread Jayapal Reddy Uradi
you can add the below rules on the host. Also you need to update the iptables filter rules. You need to add rules on host in vm reboot, on VM reboot the old rules get added on host. Thanks, Jayapal On 21-Aug-2013, at 6:49 AM, Maurice Lawler wrote: > It would seem to be perhaps I can add somet

Re: IPTables Issues

2013-08-28 Thread Jayapal Reddy Uradi
Hi, Please send 'iptables -L -nv' output when you are sending the DNS/console traffic. So that we can find which rules are actually blocking the traffic. Thanks, Jayapal On 29-Aug-2013, at 12:28 AM, Maurice Lawler wrote: > Hello folks, > > I have a couple issues with the iptables showed belo

Re: New Committer: Daan Hoogland

2013-08-28 Thread Jayapal Reddy Uradi
Congrats Daan! On 29-Aug-2013, at 10:46 AM, Koushik Das wrote: > Congrats Daan! > > On 28-Aug-2013, at 7:28 PM, Chip Childers wrote: > >> The Project Management Committee (PMC) for Apache CloudStack >> has asked Daan Hoogland to become a committer and we are pleased to >> announce that he ha

Re: [Questions]: Basic Zone Securiy Group problem?

2013-08-29 Thread Jayapal Reddy Uradi
Hi, The rules are looking as expected. The ingress traffic to vm should block. Can you run 'iptables -L -nv' and see which rules are accepting the ingress traffic. Thanks, Jayapal On 30-Aug-2013, at 7:41 AM, Jijun wrote: > i clone branch 4.2 code, package and do a fresh installation. > > hy

Re: [ANNOUNCE] New PMC member: Ilya Musayev

2013-09-05 Thread Jayapal Reddy Uradi
Congratulations! On 05-Sep-2013, at 12:21 PM, sebgoa wrote: > The Project Management Committee (PMC) for Apache CloudStack has asked Ilya > Musayev to join the PMC and we are pleased to announce that they have > accepted. > > Join me in congratulating Ilya, > > -The CloudStack PMC

Re: Security Groups

2013-09-13 Thread Jayapal Reddy Uradi
Hi, Can you please share your security group rules 'iptables -L -nv' output in pastebin So that see why it is happening. Thanks, Jayapal On 13-Sep-2013, at 9:25 AM, Jijun wrote: > hi , i encounter the same problem, > > as i know, XenServer 6.2 need not the CSP. > > but the ingress not be b

[PROPOSAL][CLOUDSTACK-1828] NAT on private gateway

2013-03-27 Thread Jayapal Reddy Uradi
I would like to propose feature NAT on private gateway. This feature is sub feature of nTier2.0 apps. Using this feature we can enable/disable the source NAT on the vpc private gateway . Jira ticket: https://issues.apache.org/jira/browse/CLOUDSTACK-1828 FS : https://cwiki.apache.org/conflue

[PROPOSAL][CLOUDSTACK-768] ACL on private gateway

2013-03-27 Thread Jayapal Reddy Uradi
I would like to propose the new feature ACL on private gateway. This feature is sub feature of the nTier 2.0 apps. Currently we do not have way to control the traffic on the private gateway. Using this feature we can configure the ingress/egress ACL on the private gateway. Jira Id: https://issu

RE: Question pertaining to NAT on Private Gateway Feature of N-Tier

2013-03-27 Thread Jayapal Reddy Uradi
; Jayapal Reddy Uradi Subject: Question pertaining to NAT on Private Gateway Feature of N-Tier Hello Jayapal, I referred to the feature's FS at https://cwiki.apache.org/CLOUDSTACK/nat-on-private-gateway.html . May I know whether it is applicable for multiple Private Gateways in a single V

[PROPOSAL][CLOUDSTACK-779] Egress firewall rules for SRX

2013-03-28 Thread Jayapal Reddy Uradi
I would like to propose the egress firewall rules feature for the external firewall device SRX guest network. Currently egress firewall rules is supported in the VR isolated network. With this feature egress firewall rules is supported in the external device SRX guest networks. Jira Id: https:/

RE: [PROPOSAL][CLOUDSTACK-768] ACL on private gateway

2013-03-31 Thread Jayapal Reddy Uradi
Thanks for the commnets. I will consider the ACL deny rules and update the FS. Thanks, Jayapal > -Original Message- > From: Chiradeep Vittal > Sent: Saturday, March 30, 2013 3:49 AM > To: dev@cloudstack.apache.org > Cc: Jayapal Reddy Uradi; Abhinandan Prateek; Kishan Kaval

RE: [PROPOSAL][CLOUDSTACK-779] Egress firewall rules for SRX

2013-03-31 Thread Jayapal Reddy Uradi
ACK-779] Egress firewall rules for SRX > > LGTM. > Only thing I'd be careful of the length of the policy name. > Note that the networkid is long, so you could end up with a policy name > egress-trust-untrust-1234567890123. Perhaps e-t-u- > > > > On 3/28/13 8:38 AM

maven build failed for nonoss

2013-04-01 Thread Jayapal Reddy Uradi
Hi, master non-oss build got failed in netscaler. deps folder has cloud-netscaler-sdx.jar and cloud-netscaler.jar and ran the install-non-oss.sh Can any one suggest me how to build non-oss . Please find below fail build logs. [INFO] Apache CloudStack Plugin - F5 . SUCC

RE: [QA][PROPOSAL][ACS4.2] Test plan review: Source NAT on Private Gateway Feature in n-Tier

2013-04-08 Thread Jayapal Reddy Uradi
othama > Sent: Tuesday, April 09, 2013 12:02 AM > To: dev@cloudstack.apache.org; Jayapal Reddy Uradi > Subject: RE: [QA][PROPOSAL][ACS4.2] Test plan review: Source NAT on > Private Gateway Feature in n-Tier > > Hello Jayapal, > > Kindly let me know when is the best time for you

Re: [PROPOSAL][CLOUDSTACK-768] ACL on private gateway

2013-04-09 Thread Jayapal Reddy Uradi
Updated the FS for new implementation of ACL Deny rules. Thanks, Jayapal On 01-Apr-2013, at 9:57 AM, Jayapal Reddy Uradi wrote: > Thanks for the commnets. > I will consider the ACL deny rules and update the FS. > > Thanks, > Jayapal > >> -Original Message

Re: [PROPOSAL][CLOUDSTACK-1828] NAT on private gateway

2013-04-15 Thread Jayapal Reddy Uradi
ic network and the private gateway (or the > network behind the private gateway) is not much (if any). > > On 3/27/13 10:42 PM, "Jayapal Reddy Uradi" > wrote: > >> I would like to propose feature NAT on private gateway. >> This feature is sub feature of nTier2

RE: [Add/Remove Network to VM] Multiple NICs on same Guest Network

2013-04-15 Thread Jayapal Reddy Uradi
The reason to choose multiple ips is there is a limit (I think it is 7) on the hypervisor about number of nic can VM have. For a nic you can have more than 7 ip addresses. The multiple ips feature is supported in the basic zone also. I think multiple nics feature is more useful when user need a

Re: [PROPOSAL][CLOUDSTACK-1828] NAT on private gateway

2013-04-16 Thread Jayapal Reddy Uradi
oday we want to provide source nat, >> Tomorrow perhaps static NAT? >> The day after PF and LB ? >> >> The difference between the public network and the private gateway (or the >> network behind the private gateway) is not much (if any). >> >> On 3/27/13 10:42

Re: ebtables

2013-04-21 Thread Jayapal Reddy Uradi
Maurice, You need to change the below rule in eatables to work for secondary ips. ebtables -t nat -A + vmchain_in + -p ARP --arp-ip-src ! + vm_ip + -j DROP ebtables -t nat -A + vmchain_out + -p ARP --arp-ip-dst ! + vm_ip + -j DROP updated to: ebtables -t nat -A + vmchain_in + " -p

Re: New PMC Member: Prasanna Santhanam

2013-04-23 Thread Jayapal Reddy Uradi
Congrats Prasanna. -Jayapal On 23-Apr-2013, at 12:47 PM, Ram Ganesh wrote: > Congrats Prasanna. > > Regards, > RamG > >> -Original Message- >> From: L Radhakrishna Rao [mailto:satishsaga...@gmail.com] >> Sent: 23 April 2013 12:42 >> To: dev@cloudstack.apache.org >> Subject: Re: New PM

Re: The IPaddr parameter for vmcreate API

2013-04-26 Thread Jayapal Reddy Uradi
Hi Jiri, If you pass ip addr to API to create VM. - If IP addr is not in vm network cidd, or ip is not available in that network VM creation will fail. - If ip is not available then CS will not pick another ip. If your case is there any other dhcp server in guest network serving ip to the

Re: Ebtables

2013-04-27 Thread Jayapal Reddy Uradi
The below rules block the traffic from the secondary ips. > -A i-2-9-VM-in -p ARP --arp-ip-src ! 66.232.104.216 -j DROP > -A i-2-9-VM-out -p ARP --arp-ip-dst ! IPADDRESS.OF.INSTANCE -j DROP you can either delete above rules or flush the chains. Thanks, Jayapal On 27-Apr-2013, at 5:05 AM, Mauric

RE: Firewall rule question

2013-05-14 Thread Jayapal Reddy Uradi
For the createFirewallRule and createEgressFirewallRule APIs the port parameters are optional. If you don't specify the port range for the prototocol (TCP) it allows all the tcp traffic. Ingress: 1. First firewall rules filters traffic then PF/Static NAT will NAT to the specific VM. If you sp

Re: [ANNOUNCE] New committer: Devdeep Singh

2013-05-14 Thread Jayapal Reddy Uradi
Congrats Devdeep. On 14-May-2013, at 8:46 PM, Chip Childers wrote: > The Project Management Committee (PMC) for Apache CloudStack > has asked Devdeep Singh to become a committer and we are pleased to > announce that they have accepted. > > Being a committer allows many contributors to contribu

Re: SSH issue in SG enabled advanced zone

2014-01-20 Thread Jayapal Reddy Uradi
ctive of basic or advanced zone setup? > > 2) In what scenarios we will need it to be openvswitch / bridge? And why > exactly? I reckon openvswitch has more features than the basic bridge > networking mode. > > > Regards, > Gaurav > > > On Mon, Jan 20, 2014 at

Re: SSH issue in SG enabled advanced zone

2014-01-20 Thread Jayapal Reddy Uradi
It is ebtables in previous mail, ebtables is auto corrected by my mail client :) On 21-Jan-2014, at 11:37 AM, Jayapal Reddy Uradi wrote: > Hi Gaurav, > > Network mode should be bridge for SG rules work. > > Some of security group rules (iptables rules) are configured match

Re: DHCP entry fails to apply on the latest master

2014-01-21 Thread Jayapal Reddy Uradi
+users When ever we see the error 'Unable to contact resource', I suggest to check the host agent logs (for xen /var/log/SMlog). It will give you idea of what is going wrong from the router. Most of times there could be script execution failures. Adding command to clean up tags on xenserver xe

Re: Weird IP address allocation in 4.3

2014-01-22 Thread Jayapal Reddy Uradi
Hi Mike, Can you please check the db table user_ip_address to see what are the ips addresses are there. IP will be picked from this table. Thanks, Jayapal On 23-Jan-2014, at 10:35 AM, Mike Tutkowski wrote: > Slight correction (this may have been obvious from one of my screen shots): > The VM

Re: SSH to VM via default network failing

2014-01-23 Thread Jayapal Reddy Uradi
Hi Ashutosh, 1. Check the router public interface is configured with the acquired public ip 2. Check the rules specific to FW/PF are configured correctly on VR. 3. If 1,2 are correct try to debug the traffic by capturing the packets on router and vm 4. If the packets reached to router and then VM

Re:[SOLVED] Weird IP address allocation in 4.3

2014-01-23 Thread Jayapal Reddy Uradi
ote: >>>> >>>>> Hi Jayapal, >>>>> >>>>> That table has 8 rows and includes IP addresses from 192.168.128.23 to >>>>> 192.168.128.30 (which should be correct). >>>>> >>>>> Thanks >>>>>

Re: Useless egress in SG zone?

2014-01-27 Thread Jayapal Reddy Uradi
Hi Nux, 1. By default we are allowing egress in SG. 2. But when you configure any rule in egress, it allows ONLY configured rule traffic and other traffic will be BLOCKED. If admin wants allow to only specific ports/addresses this can be done by configuring SG egress rules. In my firewalls, t

Re: [Doc] [4.3] Service Monitoring Tool for Virtual Router for Review [CLOUDSTACK-5292]

2014-01-28 Thread Jayapal Reddy Uradi
Hi Radhika, The configuration is from the global settings. Thanks, Jayapal On 29-Jan-2014, at 9:56 AM, Radhika Puthiyetath wrote: > We have the UI item coming up for this feature: > https://issues.apache.org/jira/browse/CLOUDSTACK-5966 > > > > -Original Message- > From: Sanjeev Nee

4.3 commit cherry pick

2014-01-30 Thread Jayapal Reddy Uradi
Hi Animesh, Can you please cherry pick commit to 7255e50f2051aff1cb5e1991e2dde4ef48f57454 4.3 branch from 4.3-forward. Thanks, Jayapal

Re: 4.3 commit cherry pick

2014-01-30 Thread Jayapal Reddy Uradi
Hi Animesh, Please cherry pick the following commits from 4.3-forward to 4.3 branch. 7255e50f2051aff1cb5e1991e2dde4ef48f57454 888b90677623da745a01db0a5087272f0dabe42c Thanks, Jayapal On 30-Jan-2014, at 2:36 PM, Jayapal Reddy wrote: > Hi Animesh, > > Can you please cherry pick commit to 7255e5

Re: Port forwarding rule for secondary IP in Shared Network fails

2014-02-06 Thread Jayapal Reddy Uradi
Hi Gaurav, This issue is showing in share networks ip ranges like 192.168.x.x. To unblock with the issue try with ip range in 10.x.x.x. This is bug. Thanks, Jayapal On 06-Feb-2014, at 3:30 PM, Gaurav Aradhye wrote: > Hi all, > > I have a VM deployed in shared network and I have added a seco

cherry pick commit to 4.3

2014-02-06 Thread Jayapal Reddy Uradi
Hi Animesh, Please cherry pick the below commit from 4.3-forward to 4.3 branch. commit 7a71cf33ce103392914ac51cd4689a6f5a340d0a CLOUDSTACK-6040: Updated the ip addr validation in create port forwarding Thanks, Jayapal

[PROPOSAL] load balancing configuration for VM nic secondary ips

2014-02-06 Thread Jayapal Reddy Uradi
Hi, Multiple ips per nic feature allows user to acquire more ip address on vm nic. On these ip addresses user able to configure PF and static NAT. With this feature user can also configure the load balancing rules for vm secondary ips also. Please review the below and give your comments. https

Re: Missing cidrlist in 4.3 adv zone firewall

2014-02-10 Thread Jayapal Reddy Uradi
Hi, Cidr showing correctly in our setup. Is cidr stored in db table firewall_rules_cidrs ? Thanks, Jayapal On 10-Feb-2014, at 6:27 PM, Nux! wrote: > Hi, > > It's the first time I'm testing firewall in 4.3 Advanced zone (without SG) > so please let me know if I'm missing something obvious

Re: Missing cidrlist in 4.3 adv zone firewall

2014-02-12 Thread Jayapal Reddy Uradi
Hi Nux, I found this issue in upgraded setup with external firewall srx. I looking into this issue. Thanks, Jayapal On 10/02/14 7:28 PM, "Nux!" wrote: >On 10.02.2014 13:28, Jayapal Reddy Uradi wrote: >> Hi, >> >> Cidr showing correctly in our setup.

Re: [VOTE] Apache CloudStack 4.3.0 (fourth round) UPDATE

2014-02-12 Thread Jayapal Reddy Uradi
Hi Animesh, I am able to reproduce the cidr issue. I will commit the fix it in an hour. Thanks, Jayapal On 13-Feb-2014, at 10:58 AM, Animesh Chaturvedi wrote: > > While the official 72 hours or rather 3 weekdays for this VOTE has passed and > we have required +1 (binding) votes following is

cherry pick commit to 4.3

2014-02-13 Thread Jayapal Reddy Uradi
Hi Animesh, Please cherry pick the below commit to 4.3 from 4.3-forward. e8f93f28fc424c73156723d9b65b13c05dafc5a8 Bug-id: CLOUDSTACK-6083 Thanks, Jayapal

Re: Not able to ping to outside network from system VMs

2014-02-27 Thread Jayapal Reddy Uradi
Hi, Change the name server to your internal DNS server in systemvm (/etc/resolve.conf). I also observed that the google DNS server is pinging but not serving the dns requests. Thanks, Jayapal On 28-Feb-2014, at 11:02 AM, Jitendra Shelar wrote: > Hi Tejas, > > Thanks for your response. >

Re: Not able to ping to outside network from system VMs

2014-02-28 Thread Jayapal Reddy Uradi
> [network.router.VirtualNetworkApplianceManagerImpl] > (RouterStatusMonitor-1:null) Found 0 routers. > 2014-02-28 13:17:17,063 DEBUG [cloud.api.ApiServlet] (catalina-exec-20:null) > ===START=== 10.43.3.110 -- GET > command=listTemplates&response=json&sessionkey=Q%2FWjHAw

commit cherrypick to 4.3

2014-02-28 Thread Jayapal Reddy Uradi
Hi Animesh, Please cherry the pick the below commits from 4.3-forward to 4.3 37ce4e52c28081a0c718ca87fdbff79935074b75 7700a1b71622c1d45b2b54aa7444be5adc4fb8ab Thanks, Jayapal

Re: 4.4 Feature Freeze

2014-03-04 Thread Jayapal Reddy Uradi
Hi, The below feature is proposed in dev list but somehow the fix version is not set correctly, update it now. CLOUDSTACK-2692 Add load balancing support for multiple ips to nic Thanks, Jayapal On 04-Mar-2014, at 9:37 PM, Giles Sirett mai

Re: Windows Guest vm takes diff. IP

2014-03-05 Thread Jayapal Reddy Uradi
Hi Tejas, Is there any dhcp server running in your setup other than VR ? Is the ip really served by VR ? Thanks, Jayapal On 06-Mar-2014, at 9:35 AM, Tejas Gadaria wrote: > Hi, > > I have configured CS 4.0.2 with vmware in advance networking mode. > I am facing this problem with only Windows g

Re: [PROPOSAL][QUESTION] Map parameters in API Commands

2014-03-10 Thread Jayapal Reddy Uradi
Hi Antonio, I am working on the below feature for 4.4 as part it adding an extra MAP param vmidipmap to assignToLoadBalancerRule API. https://cwiki.apache.org/confluence/display/CLOUDSTACK/Configuring+load+balancing+rules+for+VM+nic+secondary+ips I am following the existing way for map access a

CLOUDSTACK-6240 patch

2014-03-18 Thread Jayapal Reddy Uradi
Hi Animesh, Uploaded the patch for CLOUDSTACK-6240 -ipset requires VM stop/start to get updated https://reviews.apache.org/r/19351/ Also updated the bug with the patch. Thanks, Jayapal

Re: Script executed when an instance is just deployed

2014-04-04 Thread Jayapal Reddy Uradi
Hi, You want to execute a script in VM after the vm is booted ? Can you please elaborate more Thanks, Jayapal On 04-Apr-2014, at 5:28 PM, mathieu herbert wrote: > Hi, > In my company, we would like to execute a script at the end of the > deployment process (Jar). > > How can we include this

Re: security_group.py closed unexpectedly

2014-04-07 Thread Jayapal Reddy Uradi
Hi, Can you please run the below script on the host and check for errors. > /usr/bin/pyton > /usr/share/cloudstack-common/scripts/vm/network/security_group.py > default_network_rules_systemvm --vmname s-5-VM --localbrname cloud iptables chain create should not cause issues. Thanks, Jayapal On

Re: security_group.py closed unexpectedly

2014-04-07 Thread Jayapal Reddy Uradi
The error is specific to running with sudo. But this error is not related to security_group.py failure. Thanks, Jayapal On 07-Apr-2014, at 4:06 PM, Giri Prasad wrote: > Hi, > > Thanks for your reply. > > /usr/bin/python > /usr/share/cloudstack-common/scripts/vm/network/security_group.py >

Re: [ACS4.4][TestPlanReview]Configuring load balancing rules for VM nic secondary ips

2014-04-08 Thread Jayapal Reddy Uradi
Hi Manasa, Here are few comments. 1. In API for vmidipmap pass the values as below. vmidipmap[0].vmid= , vmidipmap[0].vmip= 2. when you pass the virtualmachineids and vmidipmap then vm primary ip and secondary assigned to lb rule. 3.Add test cases to check the existing behaviour is not disturb

Re: Security Group bug impeding system VMs functionality

2014-04-15 Thread Jayapal Reddy Uradi
Hi Nux, The paste links are does not exist. Can you please upload the logs again. Also upload rules/logs specific to system rules are not set. Thanks, Jayapal On 11-Apr-2014, at 9:10 PM, Nux! wrote: > Hello, > > I'm on 4.3 right now, CentOS6.5 + KVM and SG ADV zone. > What happens is that a

Re: Security Group bug impeding system VMs functionality

2014-04-17 Thread Jayapal Reddy Uradi
Hi Nux, Can you please upload the logs. Please add steps to try for reproducing. Thanks, Jayapal On 16-Apr-2014, at 9:26 AM, Jayapal Reddy Uradi wrote: > Hi Nux, > > The paste links are does not exist. > Can you please upload the logs again. Also upload rules/logs specific

Re: [ANNOUNCE] New PMC Menber: Alena Prokharchyk

2014-04-22 Thread Jayapal Reddy Uradi
Congratulations Alena ! On 23-Apr-2014, at 1:20 AM, Daan Hoogland wrote: > The Project Management Committee (PMC) for Apache CloudStack has asked > Alena Prokharchyk to join the PMC and we are pleased to announce that > he has accepted. > > Join me in congratulating Alena! > > > -The CloudSta

Re: Is this a bug when creating VPN failed because UDP ports conflicts

2014-04-28 Thread Jayapal Reddy Uradi
HI Yitao, If you want to enable vpn on the ip, omit the udp 500,1701 and 4500 ports on public ip firewall rule and configure the vpn. You can file bug this, for the vpn enable ip cloudstack should ignore vpn ports for firewall rule ports conflict. Thanks, Jayapal On 21-Apr-2014, at 3:25 PM, Y

[ACS44] cherry pick

2014-05-06 Thread Jayapal Reddy Uradi
Hi Daan, Can you please cherry-pick the following commits from 4.4-forward. commit a708d5c4982595666cfe8fe03510517cfefe1326 Author: Jayapal Date: Mon May 5 13:45:51 2014 +0530 CLOUDSTACK-6577: Disable service monitoring in RVR commit 758f7f2f16d361c40bf61db1e7fd799efe9827db Author: Jaya

Re: [ACS44] 4.4.0 blokker issues

2014-05-06 Thread Jayapal Reddy Uradi
Hi Daan, While working on CLOUDSTACK-6084 fixed few issues for CLOUDSTACK-6582 and uploaded the patch in the bug. There are still few issues in network acl cidr changes. CLOUDSTACK-6582 and CLOUDSTACK-6485 fixes created regression for vpc c

Re: secondary ip

2014-05-12 Thread Jayapal Reddy Uradi
Hi Alena, listPortForwardingRules response shows vm ip addr, primary/secondary ip address. We are not showing primary/secondary ip info separately in the response. Thanks, Jayapal On 13-May-2014, at 4:18 AM, Alena Prokharchyk wrote: > Murali, > > I have a question about the secondary vm ip a

CLOUDSTACK-6485 regression

2014-05-15 Thread Jayapal Reddy Uradi
Hi Daan, CLOUDSTACK-6485 is fixed by you and caused the regression for CLOUDSTACK-6084 and CLOUDSTACK-6548. vpcId param changed to null causing the issue. After reverting this private gateway is working fine. https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=blobdiff;f=server/src/com/

[ACS44] cherry pick

2014-05-15 Thread Jayapal Reddy Uradi
Hi Daan, Can you please cherry pick the below commit to 4.4 commit 3ec8de9b85c03a79ac87ee0732c629ee621a8cbc CLOUDSTACK-6582 updated the table network_acl_item_cidrs name in Upgrade430to440 Thanks, Jayapal

[ACS44] cherry pick

2014-05-16 Thread Jayapal Reddy Uradi
Hi Daan, Can you please cheery pick the following commit to 4.4 99f75db1ebd35f5afa897e9d94ed176668e04cd5 Thanks, Jayapal

[ACS44] cherry pick

2014-05-19 Thread Jayapal Reddy Uradi
Hi Daan, Can you please cherry pick the following commit to 4.4 commit 45f6bac727bf6631153ac8e17dd7b074759052eb CLOUDSTACK-6714: monitor script echo service command is added with quotes Thanks, Jayapal

Re: closing issue

2014-05-20 Thread Jayapal Reddy Uradi
Hi Daan, I intended to close CLOUDSTACK-6084 because CLOUDSTACK-6485 is reverted, mistakenly resolved the CLOUDSTACK-6485 which is opened in other tab. Thanks, Jayapal On 20-May-2014, at 4:49 PM, Daan Hoogland wrote: > Jayapal, you closed issue CLOUDSTACK-6485 as "Can't reproduce". You > s

Re: Review Request 20123: Fix for cloudstack-6328 to Prevent console proxy support scripts from spawning multiple java processes

2014-05-26 Thread Jayapal Reddy Uradi
Hi Saurav, Can you please file bug describing the issue ? Also please update the bug-id in review request. Thanks, Jayapal On 24-May-2014, at 12:24 AM, Santhosh Edukulla wrote: > > >> On April 29, 2014, 12:29 p.m., Santhosh Edukulla wrote: >>> Ship It! > > If we don't have any review issue

  1   2   >