4.3 System VM Templates

2013-11-14 Thread Will Stevens
Where are these located? The path shown in the docs does not resolve for me. Doc: https://cwiki.apache.org/confluence/display/CLOUDSTACK/How+to+build+CloudStack Path: http://

Re: Coverage Analysis: Few Issues

2013-11-14 Thread Will Stevens
Yes, I will look into the naming of the API commands in the Palo Alto plugin. When you say 'they are supposed to be merged as one command', what do you mean? These were the commands that I exposed. Palo Alto firewall commands addExternalFirewall=1 deleteExternalFirewall=1

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-07 Thread Will Stevens
/palo-alto/src/com/cloud/network/utils/HttpClientWrapper.java -Original Message- From: williamstev...@gmail.com [mailto:williamstev...@gmail.com] On Behalf Of Will Stevens Sent: Wednesday, November 06, 2013 10:15 AM To: dev@cloudstack.apache.org Subject: Re: [Merge] Palo

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-07 Thread Will Stevens
Perfect. Thank you for the details. On Thu, Nov 7, 2013 at 1:59 PM, Sheng Yang sh...@yasker.org wrote: Oh, that means something wrong with the license header of the file(header missing in this case). http://creadur.apache.org/rat/ --Sheng On Thu, Nov 7, 2013 at 10:50 AM, Will Stevens

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-06 Thread Will Stevens
Great! Thank you Sheng... On Wed, Nov 6, 2013 at 1:10 PM, Sheng Yang sh...@yasker.org wrote: Looks good to me. Applied to MASTER branch. Thanks! --Sheng On Tue, Nov 5, 2013 at 7:51 PM, Will Stevens wstev...@cloudops.com wrote: @Sheng: This should be ready to go now. I built

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-05 Thread Will Stevens
, 2013 at 7:32 PM, Will Stevens wstev...@cloudops.comjavascript:; wrote: Sheng, I will rebuild the patch for the latest master. The latest master has depreciated the 'nonoss' flag in favour of 'noredist'. I was building in nonoss previously. I am guessing I should use the noredist flag now

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-05 Thread Will Stevens
dependency? If so what is the license for that third party code? (My really fast perusal didn't catch anything that was immediately troubling) --David On Tue, Nov 5, 2013 at 7:08 AM, Will Stevens wstev...@cloudops.com wrote: Its dependence on a third party API and appliance, similar

Re: [DISCUSS] rename nonoss to noredist

2013-11-05 Thread Will Stevens
Did this get documented anywhere? It seems that the core build as well as the nonoss build got changed. I am having trouble locating the beans now... Thanks, Will On Tue, Sep 3, 2013 at 11:15 PM, Rajesh Battala rajesh.batt...@citrix.comwrote: +1. Sounds great and logical. On mvn cmd

Re: Marvin deploy failed on master

2013-11-05 Thread Will Stevens
I also ran into this issue on a clean install. #2 fixed my issue... Thanks, Will On Mon, Nov 4, 2013 at 5:14 PM, Min Chen min.c...@citrix.com wrote: Thanks Santhosh. Using #2 fixed the issue. -min On 11/2/13 5:48 AM, Santhosh Edukulla santhosh.eduku...@citrix.com wrote: Hi Min, 1/

Re: [DISCUSS] rename nonoss to noredist

2013-11-05 Thread Will Stevens
-Dnoredist But then deploying a vmware zone failed with the following error: 2013-11-05 16:25:36,056 WARN [c.c.a.ApiServer] (1039076426@qtp-184764793-9:ctx-de0a2b48 ctx-4f586e61) Unknown API command: addVmwareDc What did I miss here? Thanks -min On 11/5/13 9:03 AM, Will Stevens wstev

Re: Review Request 15050: Add Palo Alto Networks Firewall Integration

2013-11-05 Thread Will Stevens
of the functionality listed under 'supported features'. Unit tests are in file 24 and 25 of this patch. The details of the tests can be found in the functional spec. Thanks, Will Stevens

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-05 Thread Will Stevens
with the depreciated 'nonoss' flag to core since it does not depend on any 3rd party libraries at build or runtime. Cheers, Will [1] http://markmail.org/message/fxphjkba7bonlesd?q=list:org%2Eapache%2Eincubator%2Ecloudstack-%2A+Palo+Alto On Tue, Nov 5, 2013 at 11:42 AM, Will Stevens wstev

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-04 Thread Will Stevens
to generate the patch. It would includes author and description information automatically, which is easier for applying. +1! --Sheng On Thu, Oct 31, 2013 at 1:50 PM, Will Stevens wstev...@cloudops.com wrote: Hi, I would like to merge support for Palo Alto Network's firewall appliances

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-04 Thread Will Stevens
Well its not in master yet. That is the intent of this thread... I can definitely do some testing for the 4.3 test cycle. Will On Mon, Nov 4, 2013 at 10:56 AM, Chip Childers chipchild...@apache.orgwrote: On Mon, Nov 04, 2013 at 10:49:29AM -0500, Will Stevens wrote: Anything I can do

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-04 Thread Will Stevens
be glad to commit it for 4.3 release. --Sheng On Mon, Nov 4, 2013 at 8:19 AM, Chip Childers chipchild...@apache.orgjavascript:; wrote: On Mon, Nov 04, 2013 at 10:59:30AM -0500, Will Stevens wrote: Well its not in master yet. That is the intent of this thread... I can definitely

Re: Review Request 15050: Add Palo Alto Networks Firewall Integration

2013-11-01 Thread Will Stevens
. The details of the tests can be found in the functional spec. Thanks, Will Stevens

Re: [Merge] Palo Alto Networks firewall integration to master

2013-11-01 Thread Will Stevens
git-format-patch to generate the patch. It would includes author and description information automatically, which is easier for applying. +1! --Sheng On Thu, Oct 31, 2013 at 1:50 PM, Will Stevens wstev...@cloudops.com wrote: Hi, I would like to merge support for Palo Alto Network's

Re: Review Request 15050: Add Palo Alto Networks Firewall Integration

2013-10-31 Thread Will Stevens
4fda3b1 ui/dictionary.jsp 80aab6f ui/scripts/docs.js 3a4f8ca ui/scripts/system.js 0af3952 Diff: https://reviews.apache.org/r/15050/diff/ Testing --- I have tested all of the functionality listed under 'supported features'. Thanks, Will Stevens

Re: Review Request 15050: Add Palo Alto Networks Firewall Integration

2013-10-31 Thread Will Stevens
? Thanks! Will Stevens wrote: Yes, no problem... What type of information would you like to be included in this notice? Thx... Sheng Yang wrote: It would looks like e.g. http://www.mail-archive.com/dev@cloudstack.apache.org/msg17259.html , and the history of patch

[Merge] Palo Alto Networks firewall integration to master

2013-10-31 Thread Will Stevens
Hi, I would like to merge support for Palo Alto Network's firewall appliances to the master branch. Development for this has been done by Will Stevens at CloudOps on branch [1]. There was an introduction [2], a proposal [3], and a discussion [4] on the mailing list regarding this feature

Re: Review Request 15050: Add Palo Alto Networks Firewall Integration

2013-10-31 Thread Will Stevens
? Thanks! Will Stevens wrote: Yes, no problem... What type of information would you like to be included in this notice? Thx... Sheng Yang wrote: It would looks like e.g. http://www.mail-archive.com/dev@cloudstack.apache.org/msg17259.html , and the history of patch

Re: Issues deploying with marvin

2013-10-30 Thread Will Stevens
, Will Stevens wstev...@cloudops.comjavascript:; mailto:wstev...@cloudops.com javascript:; wrote: I believe the issues I am running into stem from the fact that the CS code is in a shared directory from my Mac to VMware Fusion. Because of this the 'ln' command is failing when building

Re: Issues deploying with marvin

2013-10-30 Thread Will Stevens
profile: export MAVEN_OPTS= mvn -P developer -pl tools/devcloud -Ddeploysvr (this now finds everything it needs and completes) I hope this helps others get past this if they have similar problems... Cheers... On Wed, Oct 30, 2013 at 8:56 AM, Will Stevens williamstev...@gmail.comwrote: Yes. I

Re: Review Request 15050: Add Palo Alto Networks Firewall Integration

2013-10-30 Thread Will Stevens
--- On Oct. 29, 2013, 8:52 p.m., Will Stevens wrote: --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/15050

Re: Issues deploying with marvin

2013-10-29 Thread Will Stevens
json response endpoint url http://ip:8096/client/api?command=listApis;, default to localhost. Thanks! Santhosh -Original Message- From: williamstev...@gmail.com [mailto:williamstev...@gmail.com] On Behalf Of Will Stevens Sent: Friday, October 18, 2013 2:05 AM To: dev

Re: Issues deploying with marvin

2013-10-29 Thread Will Stevens
I know that I will have to change the 'nonoss' flag when I pull in the latest master from this weekend... On Tue, Oct 29, 2013 at 11:27 AM, Will Stevens wstev...@cloudops.comwrote: When I build with: mvn -P developer,systemvm -Dnonoss clean install -X I get the error below. I have

Re: Issues deploying with marvin

2013-10-29 Thread Will Stevens
I will pull and make this change because apparently this has been in for a little while... I will update this if with more news when I have it. On Tue, Oct 29, 2013 at 11:57 AM, Will Stevens wstev...@cloudops.comwrote: I know that I will have to change the 'nonoss' flag when I pull

Re: Issues deploying with marvin

2013-10-29 Thread Will Stevens
. Will On Tue, Oct 29, 2013 at 11:59 AM, Will Stevens wstev...@cloudops.comwrote: I will pull and make this change because apparently this has been in for a little while... I will update this if with more news when I have it. On Tue, Oct 29, 2013 at 11:57 AM, Will Stevens wstev

Review Request 15047: Add support for multiple networks in the 'per account' source nat type setting

2013-10-29 Thread Will Stevens
/29/Supported_Source_NAT_Type.pdf Thanks, Will Stevens

Re: Review Request 15047: Add support for multiple networks in the 'per account' source nat type setting

2013-10-29 Thread Will Stevens
://reviews.apache.org/media/uploaded/files/2013/10/29/Supported_Source_NAT_Type.pdf Thanks, Will Stevens

Re: Wiki access

2013-10-29 Thread Will Stevens
I also need access. un: wstevens email: wstev...@cloudops.com On Tue, Oct 29, 2013 at 5:02 AM, Damoder Reddy damoder.re...@citrix.comwrote: Please grant me edit access.. Email : damoder.re...@citrix.com Username: Damoder.reddy -Original Message- From: Nitin Mehta

Review Request 15050: Add Palo Alto Networks Firewall Integration

2013-10-29 Thread Will Stevens
of the functionality listed under 'supported features'. Thanks, Will Stevens

Issues deploying with marvin

2013-10-17 Thread Will Stevens
When I run: I am getting the following error: [DEBUG] Executing command line: python ../marvin/marvin/deployDataCenter.py -i devcloud.cfg 5Traceback (most recent call last): File ../marvin/marvin/deployDataCenter.py, line 612, in module deploy.deploy() File

Re: Issues deploying with marvin

2013-10-17 Thread Will Stevens
Note: I pulled from master yesterday... On Thu, Oct 17, 2013 at 4:28 PM, Will Stevens wstev...@cloudops.com wrote: When I run: I am getting the following error: [DEBUG] Executing command line: python ../marvin/marvin/deployDataCenter.py -i devcloud.cfg 5Traceback (most recent call last

4.3 Code Freeze

2013-08-26 Thread Will Stevens
Can someone please let me know what the code freeze date for 4.3 is? Thanks, Will

Re: 4.3 Code Freeze

2013-08-26 Thread Will Stevens
Thank you. :) ws On Mon, Aug 26, 2013 at 4:03 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Last week of october -Original Message- From: williamstev...@gmail.com [mailto:williamstev...@gmail.com] On Behalf Of Will Stevens Sent: Monday, August 26, 2013 12:28

Bugs on Master

2013-06-14 Thread Will Stevens
11 days ago I pulled the master code into my branch. Master was at: 48913679e80e50228b1bd4b3d17fe5245461626a When I pulled, I had Egress firewall rules working perfectly. After the pull I now get the following error when trying to create Egress firewall rules: ERROR [cloud.api.ApiServer]

Re: Bugs on Master

2013-06-14 Thread Will Stevens
of not being able to select capability dropdowns in multiple browsers on master. Thanks, Will On Fri, Jun 14, 2013 at 1:56 PM, Will Stevens wstev...@cloudops.com wrote: I will try that. I am doing some testing right now. I am compiling and running just master now to validate everything. I

Re: Bugs on Master

2013-06-14 Thread Will Stevens
BTW, I am using cloudmonkey 4.1.0... Thx On Fri, Jun 14, 2013 at 3:04 PM, Will Stevens wstev...@cloudops.com wrote: Chiradeep, can you send me the format of the cloudmonkey call for the api request 'createNetworkOffering' with 'supportedservices' of 'dhcp:virtualrouter', 'dns:virtualrouter

Re: Bugs on Master

2013-06-14 Thread Will Stevens
to add the SRX provider using addNetworkServiceProvider api, enable it and then the drop down for network offering should work. On 6/14/13 12:09 PM, Will Stevens wstev...@cloudops.com wrote: BTW, I am using cloudmonkey 4.1.0... Thx On Fri, Jun 14, 2013 at 3:04 PM, Will Stevens wstev

Re: Bugs on Master

2013-06-14 Thread Will Stevens
Thanks Sheng, that fixed the problem with the UI. On Fri, Jun 14, 2013 at 8:06 PM, Will Stevens wstev...@cloudops.com wrote: Yes, I am building nonoss. I actually have written my own network service provider plugin, so I was just using junipersrx as an example. I will actually be using my

Re: Bugs on Master

2013-06-14 Thread Will Stevens
for the said bug :)) On 6/14/13 5:43 PM, Will Stevens wstev...@cloudops.com wrote: Thanks Sheng, that fixed the problem with the UI. On Fri, Jun 14, 2013 at 8:06 PM, Will Stevens wstev...@cloudops.com wrote: Yes, I am building nonoss. I actually have written my own network service

Re: Handling Self Signed Certs

2013-06-10 Thread Will Stevens
into the Certificate Store. I would call to AuthScope(host, 443) to limit access to only the specific host and port. -Soheil From: williamstev...@gmail.com [williamstev...@gmail.com] on behalf of Will Stevens [wstev...@cloudops.com] Sent: Thursday

Handling Self Signed Certs

2013-06-06 Thread Will Stevens
Hey All, I am building integration between CS and an external Palo Alto Firewall device. The API calls to the PA device are done over HTTPS. In some cases (like testing or a POC), it makes sense to use a self signed cert for this connection. Currently I have a little http client wrapper which

Re: Handling Self Signed Certs

2013-06-06 Thread Will Stevens
or POC. To help testing/POC process to be smooth, we may allow self-signed certificate by default(which is the current behave), security sensitive customers should disallow self-signed certificates in their production environment. Kelven On 6/6/13 9:08 AM, Will Stevens wstev...@cloudops.com

Re: Trouble with deployDataCenter.py

2013-06-03 Thread Will Stevens
, Jun 3, 2013 at 10:09 AM, Will Stevens wstev...@cloudops.com wrote: Has anyone else experience this? I just pulled in the master code into my branch and now I am getting this in my dev environment. [DEBUG] Executing command line: python ../marvin/marvin/deployDataCenter.py -i

Re: External Network Usage

2013-06-03 Thread Will Stevens
if the traffic does not go through the public? So if two VMs on the same network send traffic between them selves on their vlan without it being routed through the public ip, will that traffic show up in the bytes_in and bytes_out data? Thanks... On Fri, May 31, 2013 at 3:08 PM, Will Stevens wstev

External Network Usage

2013-05-31 Thread Will Stevens
Hey All, I am trying to get my head around this. From what I understand, if I am implementing an external firewall I am forced to implement the 'ExternalNetworkResourceUsageCommand'. I have not found a way to not support the collection of usage data. Is that possible? If so, how? My current

Palo Alto Firewall Integration - Review Process

2013-05-28 Thread Will Stevens
Hey All, I am getting close to finishing up this integration, so I want to make sure I understand the process and what is required for submitting my code for review. I have read this and am comfortable with its content: http://cloudstack.apache.org/develop/non-committer.html You can check out

Re: Palo Alto Firewall Integration - Review Process

2013-05-28 Thread Will Stevens
Thanks for the reply Chip. Are there any docs / guides for the test functionality? On Tue, May 28, 2013 at 2:07 PM, Chip Childers chip.child...@sungard.comwrote: On Tue, May 28, 2013 at 01:32:48PM -0400, Will Stevens wrote: Hey All, I am getting close to finishing up this integration, so

Re: Palo Alto Firewall Integration - Review Process

2013-05-28 Thread Will Stevens
Thank you... On Tue, May 28, 2013 at 4:33 PM, Chip Childers chip.child...@sungard.comwrote: On Tue, May 28, 2013 at 04:31:27PM -0400, Will Stevens wrote: Thanks for the reply Chip. Are there any docs / guides for the test functionality? Yup: https://cwiki.apache.org/confluence/display

Firewall rule question

2013-05-14 Thread Will Stevens
This applies to both Egress firewall rules as well as IP specific firewall rules. If you specify TCP but do not specify any port details, it saves fine. I am wondering what this config implies. Does this mean that all TCP traffic is allowed? Thanks, Will

Re: Firewall rule question

2013-05-14 Thread Will Stevens
, and nothing happens on the firewall. I guess the fact that empty values entered returns success is a bug? On Tue, May 14, 2013 at 8:00 AM, Will Stevens wstev...@cloudops.com wrote: This applies to both Egress firewall rules as well as IP specific firewall rules. If you specify TCP

Re: External Network Usage

2013-05-10 Thread Will Stevens
-wip-us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=plugins/network-elements/juniper-srx/src/com/cloud/network/resource/JuniperSrxResource.java;hb=HEAD Usage answer should contain bytes sent/received for each Public IP. On 08-May-2013, at 9:26 PM, Will Stevens wstev

External Network Usage

2013-05-08 Thread Will Stevens
Hey All, In my Palo Alto Firewall integration, I have not yet implemented usage tracking. I am getting messages in the console as follows: (ExternalNetworkMonitor-1:) Didn't get an external network usage answer for guest VLAN 3037 I believe this is implemented through the

Re: Supported Source NAT Type?

2013-05-08 Thread Will Stevens
... Thanks, Will On Thu, Apr 18, 2013 at 6:28 PM, Will Stevens wstev...@cloudops.com wrote: Great. Thanks again, this is very helpful. So the way I am doing it is good for now. If IP space becomes an issue (when people are actually using it), I could implement the 'per zone' approach

Re: Supported Source NAT Type?

2013-05-08 Thread Will Stevens
support for per account is broken anyway, so you can modify it according to your requirement. Multiple networks per account for external devices is really nice to have, I think you can go ahead and implement it. Thanks. --Sheng On Wed, May 8, 2013 at 1:25 PM, Will Stevens wstev...@cloudops.com

Error running Ddeploysvr

2013-04-23 Thread Will Stevens
I pulled from the apache master ( https://git-wip-us.apache.org/repos/asf/cloudstack.git) yesterday and the latest commit that I have is: bdd5634924db84144c05887c6552c89aa4e78051 I have the code compiling correctly and I am able to start the server. When I try to do: mvn -P developer -pl

Re: Error running Ddeploysvr

2013-04-23 Thread Will Stevens
Thanks for responding Prasanna. Because I am working on CentOs, python2.6 is the default python install. I have python2.7 installed, but I have to access it with python2.7 instead of python. I believe there are actually problems with CentOs if I change the 'python' command to point to python2.7

Re: Error running Ddeploysvr

2013-04-23 Thread Will Stevens
/confluence/display/MAVEN/MojoExecutionException On Tue, Apr 23, 2013 at 1:39 PM, Will Stevens wstev...@cloudops.com wrote: Thanks for responding Prasanna. Because I am working on CentOs, python2.6 is the default python install. I have python2.7 installed, but I have to access it with python2.7

Re: Error running Ddeploysvr

2013-04-23 Thread Will Stevens
is certainly a problem. What you could do is install python2.7 and alias python to python2.7. That way when you run it from mvn you call python2.7 and things like yum don't break. Thanks, -- Prasanna., On Tue, Apr 23, 2013 at 01:39:15PM -0400, Will Stevens wrote: Thanks for responding Prasanna

Re: Error running Ddeploysvr

2013-04-23 Thread Will Stevens
successfully, so I am not entirely sure what was going on, but my dev environment is back up and running. Thank you both for your help on this. Cheers, Will On Tue, Apr 23, 2013 at 2:10 PM, Chip Childers chip.child...@sungard.comwrote: On Tue, Apr 23, 2013 at 02:05:03PM -0400, Will Stevens wrote

Re: Problem creating primary storage

2013-04-22 Thread Will Stevens
I just ran into this after pulling master. I have everything compiling and I can deploy the db and then startup CS using jetty. I reverted my Xen server host back to my 'clean' snapshot and try to do deploy server (using devcloud) and I get this... Will --- WARN

Re: Problem creating primary storage

2013-04-22 Thread Will Stevens
that went in later. Talk to you later! On Mon, Apr 22, 2013 at 2:09 PM, Will Stevens wstev...@cloudops.com wrote: This may be related to the other problem we are seeing. Mike, can you verify if you get this same error on server startup as well? On server startup, I get this error

Re: Supported Source NAT Type?

2013-04-18 Thread Will Stevens
, Will On Thu, Apr 18, 2013 at 4:09 PM, Chip Childers chip.child...@sungard.comwrote: Will, Images and other attachments are stripped on this list (text only please!) Can you post the image somewhere or describe the list? On Thu, Apr 18, 2013 at 04:05:36PM -0400, Will Stevens wrote

Re: Supported Source NAT Type?

2013-04-18 Thread Will Stevens
name than them... --Sheng On Thu, Apr 18, 2013 at 2:07 PM, Will Stevens wstev...@cloudops.com wrote: Oh, my bad. I forgot about that. On the 'create network service offering' overlay, if you select 'SourceNat' in Supported Services, there is a drop down which get added. The drop

Re: Supported Source NAT Type?

2013-04-18 Thread Will Stevens
) to untrust zone(public network), using source nat. --Sheng On Thu, Apr 18, 2013 at 2:50 PM, Will Stevens wstev...@cloudops.com wrote: Thanks for the answer Sheng. I currently have the Palo Alto firewall using the 'per account' method and when 'IpAssocCommand' is run (when the first VM

Re: [DISCUSS] Palo Alto Integration

2013-04-02 Thread Will Stevens
is allocated? 10.1.1.0/24 you see is the default CIDR network gets after design phase which will be replaced once network is implemented. From: Will Stevens wstev...@cloudops.commailto:wstev...@cloudops.com Reply-To: dev@cloudstack.apache.orgmailto:dev@cloudstack.apache.org dev

Re: [DISCUSS] Palo Alto Integration

2013-04-01 Thread Will Stevens
is added to the network and the same placeholder cidr is used until then? Thanks, Will On Mon, Apr 1, 2013 at 11:22 AM, Will Stevens wstev...@cloudops.com wrote: Thank you for all your help Murali... So my Provider has been setup with isExternal = true this whole time. public static final

<    4   5   6   7   8   9