Hi! After managed to inject sslcerts, I'm facing the Problem that my Network says: "Ssl termination not supported by the loadbalancer"
Is there any Capability I could add via NetworkOfferings to get SSL Offloading
working?
"accountid": "4b14365a-5c6f-11e5-a590-3400a30d0aba",
"cmd":
"org.apache.cloudstack.api.command.user.loadbalancer.AssignCertToLoadBalancerCmd",
"created": "2018-04-10T13:47:22+0200",
"jobid": "0f1ba348-bab2-481f-8839-b0d9f6aa916e",
"jobprocstatus": 0,
"jobresult": {
"errorcode": 431,
"errortext": "Ssl termination not supported by the loadbalancer"
},
"jobresultcode": 530,
"jobresulttype": "object",
"jobstatus": 2,
"userid": "4b143f31-5c6f-11e5-a590-3400a30d0aba"
... looks like kind of obvious. But Ild like to know if it's really not
supported in VR at all?
Here's the network:
{
"count": 1,
"network": [
{
"acltype": "Account",
"broadcastdomaintype": "Vlan",
"broadcasturi": "vlan://3124",
"canusefordeploy": true,
"cidr": "172.17.0.0/22",
"displaynetwork": true,
"displaytext": "ms.mailbox.org",
"dns1": "REDACTED",
"dns2": "REDACTED",
"domain": "Intern",
"domainid": "819b01fd-b7bc-464d-9c43-59578eafcafe",
"gateway": "172.17.0.1",
"id": "d59d9e2a-be25-4918-b930-30e5eb0b4b71",
"ispersistent": true,
"issystem": false,
"name": "REDACTED",
"netmask": "255.255.252.0",
"networkdomain": "REDACTED",
"networkofferingavailability": "Optional",
"networkofferingconservemode": true,
"networkofferingdisplaytext": "Isolated-Net-Redundant-Router",
"networkofferingid": "a19677cb-424e-4d09-bdb8-dfb14c2c5a1e",
"networkofferingname": "Isolated-Net-Redundant-Router",
"physicalnetworkid": "9d52c064-0749-4f53-8879-05f7b7d3ae3b",
"project": "REDACTED-Microservices",
"projectid": "c7fbc416-ce30-4e97-8401-e1da1db24f33",
"related": "d59d9e2a-be25-4918-b930-30e5eb0b4b71",
"restartrequired": false,
"service": [
{
"capability": [
{
"canchooseservicecapability": false,
"name": "VpnTypes",
"value": "removeaccessvpn"
},
{
"canchooseservicecapability": false,
"name": "SupportedVpnTypes",
"value": "pptp,l2tp,ipsec"
}
],
"name": "Vpn"
},
{
"capability": [
{
"canchooseservicecapability": false,
"name": "SupportedTrafficDirection",
"value": "ingress, egress"
},
{
"canchooseservicecapability": false,
"name": "TrafficStatistics",
"value": "per public ip"
},
{
"canchooseservicecapability": false,
"name": "SupportedEgressProtocols",
"value": "tcp,udp,icmp, all"
},
{
"canchooseservicecapability": false,
"name": "MultipleIps",
"value": "true"
},
{
"canchooseservicecapability": false,
"name": "SupportedProtocols",
"value": "tcp,udp,icmp"
}
],
"name": "Firewall"
},
{
"capability": [
{
"canchooseservicecapability": false,
"name": "SupportedProtocols",
"value": "tcp,udp"
}
],
"name": "PortForwarding"
},
{
"name": "StaticNat"
},
{
"capability": [
{
"canchooseservicecapability": false,
"name": "SupportedSourceNatTypes",
"value": "peraccount"
},
{
"canchooseservicecapability": false,
"name": "RedundantRouter",
"value": "true"
}
],
"name": "SourceNat"
},
{
"capability": [
{
"canchooseservicecapability": false,
"name": "AllowDnsSuffixModification",
"value": "true"
}
],
"name": "Dns"
},
{
"capability": [
{
"canchooseservicecapability": false,
"name": "DhcpAccrossMultipleSubnets",
"value": "true"
}
],
"name": "Dhcp"
},
{
"capability": [
{
"canchooseservicecapability": false,
"name": "SupportedLbAlgorithms",
"value": "roundrobin,leastconn,source"
},
{
"canchooseservicecapability": false,
"name": "SupportedLBIsolation",
"value": "dedicated"
},
{
"canchooseservicecapability": false,
"name": "SupportedStickinessMethods",
"value":
"[{\"methodname\":\"LbCookie\",\"paramlist\":[{\"paramname\":\"cookie-name\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"mode\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"nocache\",\"required\":false,\"isflag\":true,\"description\":\"
\"},{\"paramname\":\"indirect\",\"required\":false,\"isflag\":true,\"description\":\"
\"},{\"paramname\":\"postonly\",\"required\":false,\"isflag\":true,\"description\":\"
\"},{\"paramname\":\"domain\",\"required\":false,\"isflag\":false,\"description\":\"
\"}],\"description\":\"This is loadbalancer cookie based stickiness
method.\"},{\"methodname\":\"AppCookie\",\"paramlist\":[{\"paramname\":\"cookie-name\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"length\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"holdtime\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"request-learn\",\"required\":false,\"isflag\":true,\"description\":\"
\"},{\"paramname\":\"prefix\",\"required\":false,\"isflag\":true,\"description\":\"
\"},{\"paramname\":\"mode\",\"required\":false,\"isflag\":false,\"description\":\"
\"}],\"description\":\"This is App session based sticky method. Define session
stickiness on an existing application
cookie. It can be used only for a specific http
traffic\"},{\"methodname\":\"SourceBased\",\"paramlist\":[{\"paramname\":\"tablesize\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"expire\",\"required\":false,\"isflag\":false,\"description\":\"
\"}],\"description\":\"This is source based Stickiness method, it can be used
for any type of protocol.\"}]"
},
{
"canchooseservicecapability": false,
"name": "LbSchemes",
"value": "Public"
},
{
"canchooseservicecapability": false,
"name": "AutoScaleCounters",
"value":
"[{\"methodname\":\"cpu\",\"paramlist\":[]},{\"methodname\":\"memory\",\"paramlist\":[]}]"
},
{
"canchooseservicecapability": false,
"name": "SupportedProtocols",
"value": "tcp, udp, tcp-proxy"
}
],
"name": "Lb"
},
{
"name": "UserData"
}
],
"specifyipranges": false,
"state": "Implemented",
"strechedl2subnet": false,
"tags": [],
"traffictype": "Guest",
"type": "Isolated",
"vlan": "3124",
"zoneid": "25488fa3-cd04-4e4f-bf61-a79800d2540c",
"zonename": "Berlin-1"
}
]
}
cheers,
- Stephan
signature.asc
Description: This is a digitally signed message part
