Re: [Openstack] Poll: What are the top 3 topics for new OpenStack users and developers?

2014-12-02 Thread Venu Murthy
Great Initiative Mark, In the beginning of my openstack journey, being able to ssh/connect to the VMs/Instances was the greatest challenge. After having spent several months to debug such issues, I've posted one of the solutions here. http://thenewstack.io/solving-a-common-beginners-problem-when-p

[Openstack] SSL Configuration

2014-12-02 Thread Georgios Dimitrakakis
Hi! Can someone point me to the right direction on how to secure publicly available services (e.g. nova,keystone,glance) with an SSL certificate? Best regards, George ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/opensta

Re: [Openstack] SSL Configuration

2014-12-02 Thread Robert van Leeuwen
> Can someone point me to the right direction on how to secure publicly > available services (e.g. nova,keystone,glance) with an SSL certificate? Hi, We offload this task to our load-balancer solution. (assuming you can live with unencrypted traffic between lb and the services) Makes management

[Openstack] Horizon + vncproxy: ports 443+6080, and restrictive firewalls: best practise?

2014-12-02 Thread Don Waterloo
So my setup is pretty vanilla. Horizon runs on port 443 front-ended by nginx (all services on my system are ssl). On the same host runs vncproxy on port 6080 (ssl). The problem I run into is, in some environments, the local firewall only allows port 443 out (e.g. some guest wifi locations). This m

Re: [Openstack] SSL Configuration

2014-12-02 Thread Muhammed Salehi
Hi. Do you want to serve https instead http ? Or you want to encrypt all of the communications between these components? For the first problem the solution is : Search about how to serve and https with apache or passenger. On Tue, Dec 2, 2014 at 5:22 PM, Georgios Dimitrakakis wrote: > Hi! > > Ca

Re: [Openstack] SSL Configuration

2014-12-02 Thread Georgios Dimitrakakis
@Robert: I don't have a load-balancer for this deployment. Just controller, cinder and compute nodes. What I would like to do is to secure the public endpoints for Keystone, Glance, Nova, Cinder with SSL and the EC2 API. That would be sufficient for the moment. Is it OK if I just change th

Re: [Openstack] SSL Configuration

2014-12-02 Thread Rob Crittenden
Georgios Dimitrakakis wrote: > @Robert: I don't have a load-balancer for this deployment. Just > controller, cinder and compute nodes. > > > > What I would like to do is to secure the public endpoints for Keystone, > Glance, Nova, Cinder with SSL and the EC2 API. > > That would be sufficient fo

Re: [Openstack] SSL Configuration

2014-12-02 Thread Georgios Dimitrakakis
Hi Rob! Thanks for you detailed explanation. Just a few more questions to clarify things So if I decide to go natively is it sufficient to follow the steps on the two blog posts? Do I have to do anything more than that? I am specifically interested in EC2 which is excluded.Can we fores

Re: [Openstack] SSL Configuration

2014-12-02 Thread Rob Crittenden
Georgios Dimitrakakis wrote: > Hi Rob! > > Thanks for you detailed explanation. > Just a few more questions to clarify things > > So if I decide to go natively is it sufficient to follow the steps on > the two blog posts? Do I have to do anything more than that? I am > specifically interested

[Openstack] Final Call for Participation: UCC 2014 London UK

2014-12-02 Thread Ashiq Anjum
Dear All, The final conference programme for UCC 2014, being held in London from December 8-11 2014, is available at: http://computing.derby.ac.uk/ucc2014/conference-programme/ http://computing.derby.ac.uk/ucc2014/wp-content/uploads/2014/12/UCC-2014-Conference-Foldout-Programme.pdf We have some

Re: [Openstack] (Juno) Swift Dashboard error

2014-12-02 Thread Don Waterloo
On 2 December 2014 at 11:50, Amit Anand wrote: > Hi all, > > Thank you all for your help earlier getting through my issues - it looks > like I have more or less a functioning environment! I do have one error > which Im getting and have no idea why as I do not see anything in > /var/log/messages o

[Openstack] nova missing network, neutron shows it ok

2014-12-02 Thread Don Waterloo
I have an issue where nova is 'missing' the networks that are on some instances (they are really there, they work, I can see them in horizon topology) $ nova list +--++++-+--+ | ID

Re: [Openstack] SSL Configuration

2014-12-02 Thread Ryan O'Hara
On Tue, Dec 02, 2014 at 01:31:39PM -0500, Rob Crittenden wrote: > Georgios Dimitrakakis wrote: > > Hi Rob! > > > > Thanks for you detailed explanation. > > Just a few more questions to clarify things > > > > So if I decide to go natively is it sufficient to follow the steps on > > the two blo

[Openstack] Flat provider_network with vlan tagged interface or vlan provider_network with untagged interface

2014-12-02 Thread Abhijeet Rastogi
Hi everyone, This is a very basic doubt and I'm trying to understand this fundamental thing about creating networks in neutron. My ultimate goal is to have all instances contain just one interface and a public IP on them. Now, this public IP can only exist in a specific VLAN, lets say, they'll onl

Re: [Openstack] Poll: What are the top 3 topics for new OpenStack users and developers?

2014-12-02 Thread Stefano Maffulli
On 12/02/2014 12:56 AM, Venu Murthy wrote: > Great Initiative Mark, > > In the beginning of my openstack journey, being able to ssh/connect to > the VMs/Instances was the greatest challenge. After having spent several > months to debug such issues, I've posted one of the solutions here. > http://

Re: [Openstack] Flat provider_network with vlan tagged interface or vlan provider_network with untagged interface

2014-12-02 Thread Kevin Benton
Setting up the interfaces manually and using a flat network doesn't scale well when you want to do it hundreds of times. Using ML2+linuxbridge will do the same thing in an automated fashion. On Tue, Dec 2, 2014 at 6:32 PM, Abhijeet Rastogi wrote: > Hi everyone, > > This is a very basic doubt and

Re: [Openstack] Flat provider_network with vlan tagged interface or vlan provider_network with untagged interface

2014-12-02 Thread Abhijeet Rastogi
Hey Kevin, Thanks for clearing that out. So, I essentially achieve the same thing. To summarize, if provider networks need vlan, it mostly makes sense to just use vlan and ditch trying to setup "flat" provider network. On Wed, Dec 3, 2014 at 9:33 AM, Kevin Benton wrote: > Setting up the interfac

[Openstack] nova compute service fail to start due to "Connection to the hypervisor is broken on host"

2014-12-02 Thread Du Jun
Hi all, I install devstack in ubuntu12.04 and upgrade libvirt 0.9.8 to 1.2.2. The libvirt version in my linux box is: dujun@dujun-OptiPlex-3020:~/devstack$ virsh -v 1.2.2 And the error message in nova-cpu.log is such like that: 2014-12-03 11:00:13.007 ERROR nova.openstack.common.threadgroup [-]

Re: [Openstack] nova compute service fail to start due to "Connection to the hypervisor is broken on host"

2014-12-02 Thread Du Jun
dujun@dujun-OptiPlex-3020:~$ nova hypervisor-list ++-+---++ | ID | Hypervisor hostname | State | Status | ++-+---++ ++-+---++ dujun@dujun-OptiPlex-3020:~$ nova service-list ++

[Openstack] [openstack][icehouse][monitoring]-open source monitoring tools

2014-12-02 Thread Chinasubbareddy M
Hi , We would like to enable monitoring for 15 node openstack production setup, want suggestions up on following open source monitoring tools. Please suggest, 1. Nagios and Cacti 2. AppDynamics 3. Zabbix and graphite 4. Ganglia It would be really helpful if you can s