Re: Is anyone using SRX Integration?

to see configuration differences. Thanks, Jayapal On Fri, 7 Jun 2019 at 08:20, Jayapal Uradi mailto:jayapal.ur...@accelerite.com>> wrote: Hi, The mentioned functionalities works with JunOs 10.x. Not used JunOs 15.x. May be backward compatibility issues. Thanks, Jayapal On 07-Jun-2019,

Re: Is anyone using SRX Integration?

Hi, The mentioned functionalities works with JunOs 10.x. Not used JunOs 15.x. May be backward compatibility issues. Thanks, Jayapal On 07-Jun-2019, at 12:45 PM, Richard Lawley mailto:rich...@richardlawley.com>> wrote: Hi, We've recently added a couple of Juniper SRXs, but are finding that

Re: Switching backup VR to master manually

Hi Rakesh, When backup upgraded to newer version and master is destroying backup suppose to become master and pickup the connections automatically. RVR is there to avoid downtime. Changing the state of backup is time critical and practically it is difficult. In your case it seems there is

Re: SSL offload in the VR

What I remember is ssl offload feature added for netscaler and assignCertToLoadBalancer API added during that time. -Jayapal > On 21-Nov-2018, at 5:06 AM, Pierre-Luc Dion wrote: > > Hey Paul, I'm not aware the vr support ssl offload. What you are trying to > achieve, there might be a work

Re: [ANNOUNCE] New committer: Andrija Panić

Congratulations Andrija Panić -Jayapal On 19-Nov-2018, at 9:57 AM, Tutkowski, Mike mailto:mike.tutkow...@netapp.com>> wrote: Hi everyone, The Project Management Committee (PMC) for Apache CloudStack has invited Andrija Panić to become a committer and I am pleased to announce that he has

Re: [DISCUSS] Why we MARK packets?

Rohit, My comments inline. On Apr 19, 2018, at 1:52 AM, Rohit Yadav > wrote: Nevermind, found the use of custom routing tables. In case someone want to refer, hints are here:

Re: [DISCUSS] Why we MARK packets?

Hi, Below are the uses of marking packets. 1. Marking is required to route the packets into correct interface in case additional public interfaces in VR. 2. Packets with VPN marking are accepted in first place of NAT POSTROUTING. Without marking these packets source ip will be replaced with

Re: ConfigDrive status

erdata provider should seem like the lowest common > denominator, right? > > -- > Sent from the Delta quadrant using Borg technology! > > Nux! > www.nux.ro > > - Original Message - >> From: "Jayapal Uradi" <jayapal.ur...@accelerite.com> >&g

Re: ConfigDrive status

Hi Nux, It is developed only for advanced zone shared network (offering without any services). This feature is developed on xenserver, kvm and vmware hypervisor. It can be extended to other networks. -Jayapal > On Mar 26, 2018, at 9:56 PM, Nux! wrote: > > Thanks for all the

Re: Welcoming Mike as the new Apache CloudStack VP

Congratulations, Milke! -Jayapal > On Mar 27, 2018, at 2:38 AM, Nitin Kumar Maharana > wrote: > > Congratulations, Mike!! > > - > Nitin > On 26-Mar-2018, at 7:41 PM, Wido den Hollander > > wrote: > > Hi all, > >

Re: [PROPOSE] RM for 4.11

+1 Thanks Rohit! > On Nov 30, 2017, at 4:43 AM, Nicolas Vazquez > wrote: > > +1 > > > Thanks Rohit! > > > From: Rohit Yadav > Sent: Wednesday, November 29, 2017 7:14:54 AM > To: dev@cloudstack.apache.org >

Re: egress fw problems in 4.10?

Please review the PR. https://github.com/apache/cloudstack/pull/2334 -Jayapal On Nov 21, 2017, at 5:37 PM, Rohit Yadav <rohit.ya...@shapeblue.com<mailto:rohit.ya...@shapeblue.com>> wrote: Jayapal - nice, can you send a PR please? - Rohit ____ From: J

Re: Fail with vpn customer gateway creation through terraform

Hi Lucian, Try the the following in config, ‘-‘ instead of ‘;’ after the aes256 in the config. New: "sha1-aes256-modp3072” Old: "sha1-aes256;modp3072” Thanks, Jayapal On Nov 22, 2017, at 5:44 AM, Pierre-Luc Dion > wrote: Hi Nux, Could it be your

Re: egress fw problems in 4.10?

t destCidrIpset-4 > Name: destCidrIpset-4 > Type: hash:net > Revision: 6 > Header: family inet hashsize 1024 maxelem 65536 > Size in memory: 480 > References: 1 > Members: > 0.0.0.0/1 > 128.0.0.0/1 > > > - Rohit > > >

Re: egress fw problems in 4.10?

technology! Nux! www.nux.ro<http://www.nux.ro> rohit.ya...@shapeblue.com www.shapeblue.com<http://www.shapeblue.com/><http://www.shapeblue.com<http://www.shapeblue.com/>> 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue - Original Message - F

Re: egress fw problems in 4.10?

Hi Nux, I think the the ipset for destination cidr is not configured with 0.0.0.0/0 due this you might see this issue. Please check the ipset and iptables rules once. iptables -L -nv ipset -L Thanks, Jayapal > On Nov 17, 2017, a t 6:55 AM, Nux! wrote: > > Hi, > > Just

Re: POLL: ACL default egress policy rule in VPC

Hi Rene, Please look at my inline comments. Let me add some context for the VPC egress/ingress rules behavior. Pre 4.5 (subject to correction) the behavior of VPC acl is as follows. 1. Default egress is ALLOW and ingress is DROP. a. When a rule is added to egress then that particular rule

Re: DHCP Cleanup after VM destroy

Hi Syed, Reminding you the cases so that do don’t miss 2 and 3. 1. Deleting vm corresponding entry from the VR when VM is deleted 2. When VR is stopped, deleted a VM and started VR. 3. When VR is stopped, the last VM is deleted. Thanks, Jayapal > On Oct 20, 2017, at 8:41 PM, Syed Ahmed

Re: Marvin Install Issue

Hi Mike, Long back I got issue related to mysql-connector. I followed the below steps, see if this helps for installing mysql-connector. #mysql-connector-python http://stackoverflow.com/questions/31748278/how-do-you-install-mysql-connector-python-development-version-through-pip $ git clone

Re: [DISCUSS] Move to Debian9 systemvmtemplate

y Marvin and what all will require > manual testing ? > I guess without this list we can never be sure is all the features got tested > or not. > > Thanks, > Satki > >> On 24-Jul-2017, at 9:48 AM, Jayapal Uradi <jayapal.ur...@accelerite.com> >> wrote: >>

Re: [DISCUSS] Move to Debian9 systemvmtemplate

Hi, We should throughly check all the VR features to see feature breakage because of Debian9. Thanks, Jayapal > On Jul 23, 2017, at 9:38 PM, Rohit Yadav wrote: > > All, > > > Just want to kick an initial discussion around migration to Debian9 based >

Re: Private Gateway on REDUNDANT VPC

Did you check iptables, Is it blocking on the VR ? > On Jun 20, 2017, at 1:30 PM, Paul Angus wrote: > > Hi All, > > I've been looking at the failing Marvin tests for Private Gateways.It > passes on std VPC and fails on rVPC. > The test tries to ping a VM on a

tier network interface ip in VR is assigned to additional public interface

Hi, I have observed the below issue in my VR where tier network ip is added to additional public network interface. This is an inconsistent issue. Did any one observed similar issue ? Please see the below logs. root@r-135-QA:~# ip a 1: lo: mtu 16436 qdisc noqueue state

Re: PR#1866 egress destination has template change merged

Yes Rohit. Thanks, Jayapal > On Jun 7, 2017, at 12:17 PM, Rohit Yadav <rohit.ya...@shapeblue.com> wrote: > > I believe - we'll need to build/publish a new 4.10/master systemvmtemplate? > > > Regards. > > ________ > From: Jayapal Uradi <

PR#1866 egress destination has template change merged

Hi, For testing please generate new systemvm template on master/4.10 . PR#1866 has template change (ipset package installation) Without new template egress firewall test cases will be impacted. https://github.com/apache/cloudstack/pull/1866 Thanks, Jayapal DISCLAIMER == This

Re: [VOTE] Apache Cloudstack 4.10.0.0 - RC2

<williamstev...@gmail.com<mailto:williamstev...@gmail.com>> wrote: Is 1866 ready? It looks like CI is failing on a lot of relevant network tests. On May 11, 2017 12:48 AM, "Jayapal Uradi" <jayapal.ur...@accelerite.com<mailto:jayapal.ur...@accelerite.com>> wrote

Re: [VOTE] Apache Cloudstack 4.10.0.0 - RC2

Hi Rajani, Also please include the PR#1866. Thanks, Jayapal > On May 11, 2017, at 10:10 AM, Rajani Karuturi wrote: > > Thanks for testing Mike. > > RC3=RC2+PR#2089+Mike'sPR > > Any other additions? > > ~ Rajani > > http://cloudplatform.accelerite.com/ > > On May 10, 2017 at

Re: Very slow Virtual Router provisioning with 4.9.2.0

Another reason of slow can be VR configuration(persistent VR configuration design). When one component config apply, whole VR configuration apply is executed. Due to this the VR boot up time will increase. Thanks, Jayapal > On May 3, 2017, at 1:55 PM, Marc-Aurèle Brothier

Re: Alternative Cloudstack UI for KVM and Basic Zones (with SG)

New UI pages looks good. Thanks, Jayapal > On Apr 25, 2017, at 1:55 PM, Rajani Karuturi wrote: > > Looks very good. Thanks for open sourcing it :) > > ~ Rajani > > http://cloudplatform.accelerite.com/ > > On April 25, 2017 at 12:42 PM, Ivan Kudryavtsev >

Travis CI failures in PR#1996

Hi All, In PR# 1996 travis CI is failing for the 9 tests always. I tried force pushing many times but still the issues are failing. I have gone through the logs[1] for the travis CI. I have observed the below. 1. It seems the deploy datacenter is not up correctly. Connection to localhost 8096

Re: VR Question

Hi Mike, Can you please check the following 1. In kvm host logs once to see any security group rules got failed. 2. Check the VR /etc/dhcphosts.txt entry for the vm is configured 3. tcpdump on VR interface to see whether the dhcp request reached to VR. Thanks, Jayapal > On Apr 2, 2017, at

Re: :[VOTE] Apache Cloudstack 4.10.0.0

Created the PR. https://github.com/apache/cloudstack/pull/1991 Thanks, Jayapal On Mar 6, 2017, at 3:58 PM, Rajani Karuturi > wrote: Thanks Wei Zhow. Will ping Jayapal. ~ Rajani http://cloudplatform.accelerite.com/ On March 6, 2017 at 3:25 PM, Wei

Re: Removed IPs with add = true in /etc/cloudstack/ips.json on router

;, "first_i_p": true, "gateway": "10.147.46.1", "netmask": "255.255.255.0", "network": "10.147.46.0/24", "new_nic": false, "nic_dev_id": 2,

Re: Removed IPs with add = true in /etc/cloudstack/ips.json on router

as I can tell in my testing, it's not > happening. > > Jeff > > *Jeff Hair* > Technical Lead and Software Developer > > Tel: (+354) 415 0200 > j...@greenqloud.com > www.greenqloud.com > > On Thu, Mar 2, 2017 at 4:52 AM, Jayapal Uradi <jayapal.ur...@accel

Re: Removed IPs with add = true in /etc/cloudstack/ips.json on router

Because of removed ips get configured again on VR, it is giving the perception that PR #1908 is not removing the static nat ips in VR. Thanks, Jayapal > On Mar 1, 2017, at 10:12 PM, Will Stevens wrote: > > Hey Jeff, > We were having this issue as well before we

Travis CI test cases failure in PR 1908

Hi, In PR 1908 few of the test cases are failing which are not related to the this. vgpu test case is failing. I think this test is not required to run on simulator. Is this the same case for all or I am only getting these error. https://github.com/apache/cloudstack/pull/1908 Thanks, Jayapal

Re: re-introduction

Welcome back Daan! -Jayapal > On Feb 1, 2017, at 1:56 PM, Daan Hoogland wrote: > > Hello, > > > My name is Daan Hoogland. I've been mostly out of the community since May > last year. I am now back through the generous sponsorship of my new employer > and will be

Re: [ANNOUNCE] New committer: Syed Ahmed

Congrats Syed! -Jayapal > On Oct 6, 2016, at 9:45 AM, Rajani Karuturi wrote: > > Congratulations Syed! > > ~ Rajani > http://cloudplatform.accelerite.com/ > > On October 6, 2016 at 1:37 AM, Will Stevens > (williamstev...@gmail.com) wrote: > The Project Management Committee

Re: [DISCUSS] Replacing the VR

Hi, Instead of replacing the VR in first place we should add VyOS/cloudrouter as provider. Once it is stable, network offerings (on upgrade) can be updated to use it and we can drop the VR if we want at that release onwards. VR is stabilized over a period of time and some of them are running

Re: JuniperSRX firewall configure plugin source bug

Hi Gust, The changes look good please go head and raise a PR for it. Thanks, Jayapal > On Aug 24, 2016, at 8:14 AM, Gust wrote: > > Hi , all > > There is a bug in com.cloud.network.resource.JuniperSrxResource > > It will report syntax error when configure outgress rule to

Re: Working Site-to-Site VPN gets disconnected and VPC seems to forgets ACL’s

Hi Jonas, It seems the connection is going down because the dead period detection. In router run the command 'ipsec auto —status’ to vpn connection status. When the connection is down initiate traffic from the guest vm to other end of vpn and go to router check the ipsec vpn status (ipsec

Re: 4.7 - VPC Network ACL rules

Hi Patrick, Can you please send the DB entries of ACL rules and iptables rules output (iptables -L -nv) These will helps to understand the issue better. -Jayapal > On Jun 1, 2016, at 7:24 PM, Patrick Dube wrote: > > Hello > > I have been hitting problems with Network

Re: [ANNOUNCE] Will Stevens as new Apache CloudStack VP

Congrats Will. Thanks, Jayapal > On 19-May-2016, at 1:54 pm, Rohit Yadav wrote: > > Congrats Will. > > Regards, > Rohit Yadav > > > rohit.ya...@shapeblue.com > www.shapeblue.com > 53 Chandos Place, Covent Garden, London WC2N 4HSUK > @shapeblue > > > On May 19 2016, at

Re: [ANNOUNCE] New committer: Simon Weller

Congrats Simon! Thanks, Jayapal > On 04-May-2016, at 7:19 pm, Suresh Sadhu wrote: > > Congrats Simon. > > -Original Message- > From: Ahmad Emneina [mailto:aemne...@gmail.com] > Sent: Wednesday, May 4, 2016 8:11 AM > To: dev@cloudstack.apache.org > Subject:

Re: Hooking into the SecurityGroups

Hi Nux, I think ipset ‘myipset’ changes might be there in other commits. If you do not have special requirement then you can use the existing ipset which is with the vmname ex: i-2-3-VM. Except this it looks good to me. Thanks, Jayapal > On 04-Apr-2016, at 10:17 pm, Nux!

Re: Hooking into the SecurityGroups

Hi Nux, You need to look at the vmops file for xenserver and security_group.py for the kvm. Look at the below methods in these file. destroy_network_rules_for_vm, default_network_rules. Thanks, jayapal On 01-Apr-2016, at 4:12 pm, Nux! > wrote: Hi, I

Re: introduction

Welcome back Murali. -Jayapal > On 23-Mar-2016, at 8:24 pm, Will Stevens wrote: > > Great to have you back Murali. Looking forward to working with you. :) > On Mar 23, 2016 10:49 AM, "Ahmad Emneina" wrote: > >> Great to see you back working on