Re: SSL offload in the VR
It may have been Syed who added that API in order to add support for ssl offload on the netscaler years ago. I remember he had to add the ability to manage ssl certificates in ACS, so it is possible it was part of that. I am guessing though. On Wed, Nov 21, 2018, 3:27 AM Paul Angus Thanks @Pierre-Luc Dion and @jaya...@apache.org, > > My 'problem' is that being able to add an SSL cert to a VR loadbalancer > has appeared from nowhere in the 4.11 branch. (easiest explained with a > screen snip): > > https://imgur.com/a/r7zxA0b > > ... which led me to finding the assignCertToLoadBalancer API. > > I can't find a specific PR for it, or anything in the cwiki, and nothing > in our read-the-docs... > So I'm trying to find the author, so we can back fit some documentation, > rather than trying to reverse engineer it out of the code/trial and error. > > > > paul.an...@shapeblue.com > www.shapeblue.com > Amadeus House, Floral Street, London WC2E 9DPUK > @shapeblue > > > > > -Original Message- > From: Jayapal Uradi > Sent: 21 November 2018 04:31 > To: dev@cloudstack.apache.org > Subject: Re: SSL offload in the VR > > What I remember is ssl offload feature added for netscaler and > assignCertToLoadBalancer API added during that time. > > -Jayapal > > > On 21-Nov-2018, at 5:06 AM, Pierre-Luc Dion wrote: > > > > Hey Paul, I'm not aware the vr support ssl offload. What you are > > trying to achieve, there might be a work around. > > > > Le mar. 20 nov. 2018 07 h 08, Paul Angus a > > écrit : > > > >> Apologies if my GitHub foo has abandoned me (it wouldn’t me the first > >> time); > >> > >> I searched for files which contained the API command > >> ‘assignCertToLoadBalancer’ and found ‘AssignCertToLoadBalancerCmd.java’ > >> > >> According to the history it was first committed as part of PR #2283 > >> “CLOUDSTACK-10105: Use maven standard project structure in all > >> projects” [1] > >> > >> > >> https://github.com/apache/cloudstack/commits/1d05fead49f5c856257a741b > >> 07122f5633d2e359/api/src/main/java/org/apache/cloudstack/api/command/ > >> user/loadbalancer/AssignCertToLoadBalancerCmd.java > >> > >> again, sorry if I’ve misread or misinterpreted the history… > >> > >> Kind regards, > >> > >> Paul Angus > >> > >> From: Marc-Aurèle Brothier > >> Sent: 20 November 2018 11:23 > >> To: Paul Angus > >> Cc: dev@cloudstack.apache.org > >> Subject: Re: SSL offload in the VR > >> > >> Hi Paul, > >> > >> What made you think so? I haven’t pushed any change related to the > >> VR. At Exoscale, we removed the VR entirely instead and moved the > >> services down at the HV level. > >> > >> Kind regards, > >> Marc-Aurèle > >> > >> > >> paul.an...@shapeblue.com > >> www.shapeblue.com > >> Amadeus House, Floral Street, London WC2E 9DPUK @shapeblue > >> > >> > >> > >> On 20 Nov 2018, at 09:04, Paul Angus >> paul.an...@shapeblue.com>> wrote: > >> Hi Marc-Aurèle, > >> > >> As far as I can tell, I believe that you added the ability to upload > >> an SSL certificate to the VR in 4.11 I can’t find any user > >> documentation for it in our Wiki or the in read-the-docs. > >> I guess it’s something that you use at Exoscale, could you do a pull > >> request to cloudstack-documentation or forward me some documentation > >> which I can then add to the users documentation. > >> > >> > >> Kind regards, > >> > >> Paul Angus > >> > >> > >> paul.an...@shapeblue.com<mailto:paul.an...@shapeblue.com> > >> www.shapeblue.com<http://www.shapeblue.com> > >> @shapeblue > >> > >> > >> > >> > > DISCLAIMER > == > This e-mail may contain privileged and confidential information which is > the property of Accelerite, a Persistent Systems business. It is intended > only for the use of the individual or entity to which it is addressed. If > you are not the intended recipient, you are not authorized to read, retain, > copy, print, distribute or use this message. If you have received this > communication in error, please notify the sender and delete all copies of > this message. Accelerite, a Persistent Systems business does not accept any > liability for virus infected mails. >
Re: SSL offload in the VR
Hi Paul, ok I was not aware of that new feature. Is it wanted to support lb on sourceNAT IP has in your screenshot? Le mer. 21 nov. 2018 03 h 27, Paul Angus a écrit : > Thanks @Pierre-Luc Dion and @jaya...@apache.org, > > My 'problem' is that being able to add an SSL cert to a VR loadbalancer > has appeared from nowhere in the 4.11 branch. (easiest explained with a > screen snip): > > https://imgur.com/a/r7zxA0b > > ... which led me to finding the assignCertToLoadBalancer API. > > I can't find a specific PR for it, or anything in the cwiki, and nothing > in our read-the-docs... > So I'm trying to find the author, so we can back fit some documentation, > rather than trying to reverse engineer it out of the code/trial and error. > > > > paul.an...@shapeblue.com > www.shapeblue.com > Amadeus House, Floral Street, London WC2E 9DPUK > @shapeblue > > > > > -Original Message- > From: Jayapal Uradi > Sent: 21 November 2018 04:31 > To: dev@cloudstack.apache.org > Subject: Re: SSL offload in the VR > > What I remember is ssl offload feature added for netscaler and > assignCertToLoadBalancer API added during that time. > > -Jayapal > > > On 21-Nov-2018, at 5:06 AM, Pierre-Luc Dion wrote: > > > > Hey Paul, I'm not aware the vr support ssl offload. What you are > > trying to achieve, there might be a work around. > > > > Le mar. 20 nov. 2018 07 h 08, Paul Angus a > > écrit : > > > >> Apologies if my GitHub foo has abandoned me (it wouldn’t me the first > >> time); > >> > >> I searched for files which contained the API command > >> ‘assignCertToLoadBalancer’ and found ‘AssignCertToLoadBalancerCmd.java’ > >> > >> According to the history it was first committed as part of PR #2283 > >> “CLOUDSTACK-10105: Use maven standard project structure in all > >> projects” [1] > >> > >> > >> https://github.com/apache/cloudstack/commits/1d05fead49f5c856257a741b > >> 07122f5633d2e359/api/src/main/java/org/apache/cloudstack/api/command/ > >> user/loadbalancer/AssignCertToLoadBalancerCmd.java > >> > >> again, sorry if I’ve misread or misinterpreted the history… > >> > >> Kind regards, > >> > >> Paul Angus > >> > >> From: Marc-Aurèle Brothier > >> Sent: 20 November 2018 11:23 > >> To: Paul Angus > >> Cc: dev@cloudstack.apache.org > >> Subject: Re: SSL offload in the VR > >> > >> Hi Paul, > >> > >> What made you think so? I haven’t pushed any change related to the > >> VR. At Exoscale, we removed the VR entirely instead and moved the > >> services down at the HV level. > >> > >> Kind regards, > >> Marc-Aurèle > >> > >> > >> paul.an...@shapeblue.com > >> www.shapeblue.com > >> Amadeus House, Floral Street, London WC2E 9DPUK @shapeblue > >> > >> > >> > >> On 20 Nov 2018, at 09:04, Paul Angus >> paul.an...@shapeblue.com>> wrote: > >> Hi Marc-Aurèle, > >> > >> As far as I can tell, I believe that you added the ability to upload > >> an SSL certificate to the VR in 4.11 I can’t find any user > >> documentation for it in our Wiki or the in read-the-docs. > >> I guess it’s something that you use at Exoscale, could you do a pull > >> request to cloudstack-documentation or forward me some documentation > >> which I can then add to the users documentation. > >> > >> > >> Kind regards, > >> > >> Paul Angus > >> > >> > >> paul.an...@shapeblue.com<mailto:paul.an...@shapeblue.com> > >> www.shapeblue.com<http://www.shapeblue.com> > >> @shapeblue > >> > >> > >> > >> > > DISCLAIMER > == > This e-mail may contain privileged and confidential information which is > the property of Accelerite, a Persistent Systems business. It is intended > only for the use of the individual or entity to which it is addressed. If > you are not the intended recipient, you are not authorized to read, retain, > copy, print, distribute or use this message. If you have received this > communication in error, please notify the sender and delete all copies of > this message. Accelerite, a Persistent Systems business does not accept any > liability for virus infected mails. >
RE: SSL offload in the VR
Thanks @Pierre-Luc Dion and @jaya...@apache.org, My 'problem' is that being able to add an SSL cert to a VR loadbalancer has appeared from nowhere in the 4.11 branch. (easiest explained with a screen snip): https://imgur.com/a/r7zxA0b ... which led me to finding the assignCertToLoadBalancer API. I can't find a specific PR for it, or anything in the cwiki, and nothing in our read-the-docs... So I'm trying to find the author, so we can back fit some documentation, rather than trying to reverse engineer it out of the code/trial and error. paul.an...@shapeblue.com www.shapeblue.com Amadeus House, Floral Street, London WC2E 9DPUK @shapeblue -Original Message- From: Jayapal Uradi Sent: 21 November 2018 04:31 To: dev@cloudstack.apache.org Subject: Re: SSL offload in the VR What I remember is ssl offload feature added for netscaler and assignCertToLoadBalancer API added during that time. -Jayapal > On 21-Nov-2018, at 5:06 AM, Pierre-Luc Dion wrote: > > Hey Paul, I'm not aware the vr support ssl offload. What you are > trying to achieve, there might be a work around. > > Le mar. 20 nov. 2018 07 h 08, Paul Angus a > écrit : > >> Apologies if my GitHub foo has abandoned me (it wouldn’t me the first >> time); >> >> I searched for files which contained the API command >> ‘assignCertToLoadBalancer’ and found ‘AssignCertToLoadBalancerCmd.java’ >> >> According to the history it was first committed as part of PR #2283 >> “CLOUDSTACK-10105: Use maven standard project structure in all >> projects” [1] >> >> >> https://github.com/apache/cloudstack/commits/1d05fead49f5c856257a741b >> 07122f5633d2e359/api/src/main/java/org/apache/cloudstack/api/command/ >> user/loadbalancer/AssignCertToLoadBalancerCmd.java >> >> again, sorry if I’ve misread or misinterpreted the history… >> >> Kind regards, >> >> Paul Angus >> >> From: Marc-Aurèle Brothier >> Sent: 20 November 2018 11:23 >> To: Paul Angus >> Cc: dev@cloudstack.apache.org >> Subject: Re: SSL offload in the VR >> >> Hi Paul, >> >> What made you think so? I haven’t pushed any change related to the >> VR. At Exoscale, we removed the VR entirely instead and moved the >> services down at the HV level. >> >> Kind regards, >> Marc-Aurèle >> >> >> paul.an...@shapeblue.com >> www.shapeblue.com >> Amadeus House, Floral Street, London WC2E 9DPUK @shapeblue >> >> >> >> On 20 Nov 2018, at 09:04, Paul Angus > paul.an...@shapeblue.com>> wrote: >> Hi Marc-Aurèle, >> >> As far as I can tell, I believe that you added the ability to upload >> an SSL certificate to the VR in 4.11 I can’t find any user >> documentation for it in our Wiki or the in read-the-docs. >> I guess it’s something that you use at Exoscale, could you do a pull >> request to cloudstack-documentation or forward me some documentation >> which I can then add to the users documentation. >> >> >> Kind regards, >> >> Paul Angus >> >> >> paul.an...@shapeblue.com<mailto:paul.an...@shapeblue.com> >> www.shapeblue.com<http://www.shapeblue.com> >> @shapeblue >> >> >> >> DISCLAIMER == This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
Re: SSL offload in the VR
What I remember is ssl offload feature added for netscaler and assignCertToLoadBalancer API added during that time. -Jayapal > On 21-Nov-2018, at 5:06 AM, Pierre-Luc Dion wrote: > > Hey Paul, I'm not aware the vr support ssl offload. What you are trying to > achieve, there might be a work around. > > Le mar. 20 nov. 2018 07 h 08, Paul Angus a > écrit : > >> Apologies if my GitHub foo has abandoned me (it wouldn’t me the first >> time); >> >> I searched for files which contained the API command >> ‘assignCertToLoadBalancer’ and found ‘AssignCertToLoadBalancerCmd.java’ >> >> According to the history it was first committed as part of PR #2283 >> “CLOUDSTACK-10105: Use maven standard project structure in all projects” [1] >> >> >> https://github.com/apache/cloudstack/commits/1d05fead49f5c856257a741b07122f5633d2e359/api/src/main/java/org/apache/cloudstack/api/command/user/loadbalancer/AssignCertToLoadBalancerCmd.java >> >> again, sorry if I’ve misread or misinterpreted the history… >> >> Kind regards, >> >> Paul Angus >> >> From: Marc-Aurèle Brothier >> Sent: 20 November 2018 11:23 >> To: Paul Angus >> Cc: dev@cloudstack.apache.org >> Subject: Re: SSL offload in the VR >> >> Hi Paul, >> >> What made you think so? I haven’t pushed any change related to the VR. At >> Exoscale, we removed the VR entirely instead and moved the services down at >> the HV level. >> >> Kind regards, >> Marc-Aurèle >> >> >> paul.an...@shapeblue.com >> www.shapeblue.com >> Amadeus House, Floral Street, London WC2E 9DPUK >> @shapeblue >> >> >> >> On 20 Nov 2018, at 09:04, Paul Angus > paul.an...@shapeblue.com>> wrote: >> Hi Marc-Aurèle, >> >> As far as I can tell, I believe that you added the ability to upload an >> SSL certificate to the VR in 4.11 >> I can’t find any user documentation for it in our Wiki or the in >> read-the-docs. >> I guess it’s something that you use at Exoscale, could you do a pull >> request to cloudstack-documentation or forward me some documentation which >> I can then add to the users documentation. >> >> >> Kind regards, >> >> Paul Angus >> >> >> paul.an...@shapeblue.com<mailto:paul.an...@shapeblue.com> >> www.shapeblue.com<http://www.shapeblue.com> >> @shapeblue >> >> >> >> DISCLAIMER == This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
Re: SSL offload in the VR
Hey Paul, I'm not aware the vr support ssl offload. What you are trying to achieve, there might be a work around. Le mar. 20 nov. 2018 07 h 08, Paul Angus a écrit : > Apologies if my GitHub foo has abandoned me (it wouldn’t me the first > time); > > I searched for files which contained the API command > ‘assignCertToLoadBalancer’ and found ‘AssignCertToLoadBalancerCmd.java’ > > According to the history it was first committed as part of PR #2283 > “CLOUDSTACK-10105: Use maven standard project structure in all projects” [1] > > > https://github.com/apache/cloudstack/commits/1d05fead49f5c856257a741b07122f5633d2e359/api/src/main/java/org/apache/cloudstack/api/command/user/loadbalancer/AssignCertToLoadBalancerCmd.java > > again, sorry if I’ve misread or misinterpreted the history… > > Kind regards, > > Paul Angus > > From: Marc-Aurèle Brothier > Sent: 20 November 2018 11:23 > To: Paul Angus > Cc: dev@cloudstack.apache.org > Subject: Re: SSL offload in the VR > > Hi Paul, > > What made you think so? I haven’t pushed any change related to the VR. At > Exoscale, we removed the VR entirely instead and moved the services down at > the HV level. > > Kind regards, > Marc-Aurèle > > > paul.an...@shapeblue.com > www.shapeblue.com > Amadeus House, Floral Street, London WC2E 9DPUK > @shapeblue > > > > On 20 Nov 2018, at 09:04, Paul Angus paul.an...@shapeblue.com>> wrote: > Hi Marc-Aurèle, > > As far as I can tell, I believe that you added the ability to upload an > SSL certificate to the VR in 4.11 > I can’t find any user documentation for it in our Wiki or the in > read-the-docs. > I guess it’s something that you use at Exoscale, could you do a pull > request to cloudstack-documentation or forward me some documentation which > I can then add to the users documentation. > > > Kind regards, > > Paul Angus > > > paul.an...@shapeblue.com<mailto:paul.an...@shapeblue.com> > www.shapeblue.com<http://www.shapeblue.com> > @shapeblue > > > >
RE: SSL offload in the VR
Apologies if my GitHub foo has abandoned me (it wouldn’t me the first time); I searched for files which contained the API command ‘assignCertToLoadBalancer’ and found ‘AssignCertToLoadBalancerCmd.java’ According to the history it was first committed as part of PR #2283 “CLOUDSTACK-10105: Use maven standard project structure in all projects” [1] https://github.com/apache/cloudstack/commits/1d05fead49f5c856257a741b07122f5633d2e359/api/src/main/java/org/apache/cloudstack/api/command/user/loadbalancer/AssignCertToLoadBalancerCmd.java again, sorry if I’ve misread or misinterpreted the history… Kind regards, Paul Angus From: Marc-Aurèle Brothier Sent: 20 November 2018 11:23 To: Paul Angus Cc: dev@cloudstack.apache.org Subject: Re: SSL offload in the VR Hi Paul, What made you think so? I haven’t pushed any change related to the VR. At Exoscale, we removed the VR entirely instead and moved the services down at the HV level. Kind regards, Marc-Aurèle paul.an...@shapeblue.com www.shapeblue.com Amadeus House, Floral Street, London WC2E 9DPUK @shapeblue On 20 Nov 2018, at 09:04, Paul Angus mailto:paul.an...@shapeblue.com>> wrote: Hi Marc-Aurèle, As far as I can tell, I believe that you added the ability to upload an SSL certificate to the VR in 4.11 I can’t find any user documentation for it in our Wiki or the in read-the-docs. I guess it’s something that you use at Exoscale, could you do a pull request to cloudstack-documentation or forward me some documentation which I can then add to the users documentation. Kind regards, Paul Angus paul.an...@shapeblue.com<mailto:paul.an...@shapeblue.com> www.shapeblue.com<http://www.shapeblue.com> @shapeblue
Re: SSL offload in the VR
Hi Paul, What made you think so? I haven’t pushed any change related to the VR. At Exoscale, we removed the VR entirely instead and moved the services down at the HV level. Kind regards, Marc-Aurèle > On 20 Nov 2018, at 09:04, Paul Angus wrote: > > Hi Marc-Aurèle, > > As far as I can tell, I believe that you added the ability to upload an SSL > certificate to the VR in 4.11 > I can’t find any user documentation for it in our Wiki or the in > read-the-docs. > I guess it’s something that you use at Exoscale, could you do a pull request > to cloudstack-documentation or forward me some documentation which I can then > add to the users documentation. > > > Kind regards, > > Paul Angus > > paul.an...@shapeblue.com > www.shapeblue.com > @shapeblue > > >
SSL offload in the VR
Hi Marc-Aurèle, As far as I can tell, I believe that you added the ability to upload an SSL certificate to the VR in 4.11 I can't find any user documentation for it in our Wiki or the in read-the-docs. I guess it's something that you use at Exoscale, could you do a pull request to cloudstack-documentation or forward me some documentation which I can then add to the users documentation. Kind regards, Paul Angus paul.an...@shapeblue.com www.shapeblue.com Amadeus House, Floral Street, London WC2E 9DPUK @shapeblue
