Re: Streamlining TC management and operations sequences

ed (at the cost of missing the final few remap stats > numbers). This is probably unacceptable. > > I’m sure there are other variants on this, but my main goal is for TR to > directly learn from the caches which delivery services they actually have > available. Rather than the TR

Re: TO - Queue server updates on delivery service servers only?

Hi Jeremy, As I see it, we need to distinguish delivery-service changes that require a cr-config update, from those who doesn't. The simple case, where the changes does not effect on the cr-config, a "queue-update" of a delivery-service may be simple. Just going over the list of servers assigned

Re: Streamlining TC management and operations sequences

y from Traffic Ops and only > when ORT is run? > > Or maybe the generation count is just an abstraction to conceptualize the > problem space and not a literal approach? > > —Eric > > > On Feb 1, 2017, at 4:14 AM, Nir Sopher <n...@qwilt.com> wrote: > > > > Hi Eric, &

Re: Server's sarameters - adding some logic

doesn't support multiple > profiles per server. > > > Thanks, > > > Dewayne > > On Mon, Jan 30, 2017 at 3:11 PM, Nir Sopher <n...@qwilt.com> wrote: > > > Thanks Mark, > > Can you please provide an example to explain how "parameters to &

Traffic Ops - Running Test Cases

Hi, I am trying to run "prove t/" in order to test my branch after a minor change I did. However, the command keeps on failing due to missing Perl modules (not brought a part of the "carton" command). For example: Mojo::Base, NetAddr::IP, File::Slurp, String::CamelCase, Is there somewhere a

Re: Traffic Ops Dev environment - postgresql installation

bin/start.pl`) is that > it monitors the Perl libraries and automatically restarts the server > when it detects any changes to them. > > I hope that's helpful -- do let us know how you're progressing.. > > -dan > > On Tue, Jan 24, 2017 at 2:04 PM, Nir Sopher <n...@qwilt.com&g

Re: Server's sarameters - adding some logic

ttps://www.google.co.il/webhp?sourceid=chrome-instant; > rlz=1C1LENP_enIL506IL506=1=2=UTF-8#q=calling+lua+from+go> > . > > > > On Thu, Jan 26, 2017 at 12:51 PM, Nir Sopher <n...@qwilt.com> wrote: > > > Hi, > > > > Working on TC-121 <https://is

Re: Issues with using Traffic-Vault

g> wrote: > So, is ORT getting the certs from traffic vault like it should now? > > On Thu, Jan 19, 2017 at 3:16 PM, Nir Sopher <n...@qwilt.com> wrote: > > > Yes, the parameter is set correctly. > > The ssl_multicert.config file is on the server in the specified &

Re: Issues with using Traffic-Vault

ave > > On Tue, Jan 17, 2017 at 9:44 AM, Nir Sopher <n...@qwilt.com> wrote: > > > Hi, > > > > I am trying to launch a traffic vault and connect it to my traffic-ops > > server. > > I followed the instructions in the admin guide > > <htt

Re: Issues with using Traffic-Vault

Keys screen? Or are you > hitting an API? > > You should be able to see if the keys exist by running `curl -k > "https://admin:password@riakURL:8088/buckets/ssl/keys?keys=true"` and > looking for XMLID-latest in the list of keys; you could also run `curl -k > &

Re: Issues with using Traffic-Vault

rks from your traffic_ops host then it should also work when you > go into the paste keys screen. > > Turning on Debug logging might also help. You can set log4perl.rootLogger = > ERROR, SCREEN, FILE in traffic_ops/app/conf/production/log4perl.conf > > Try that out and send me what,

Re: Issues with using Traffic-Vault

et me know how it goes. > > Thanks, > Dave > ​ > > On Thu, Jan 19, 2017 at 7:46 AM, Steve Malenfant <smalenf...@gmail.com> > wrote: > > > In not probably the one that can explain that to you, but I believe there > > is additional settings in riak for T

Re: Question regarding TC integration

erface speed and actual used bandwidth in the > astats (rather than available bandwidth in Kbps). I can’t remember if the > availableBandwidth is computed in astats or in TM. > > —Eric > > > > On Jan 12, 2017, at 4:20 AM, Nir Sopher <n...@qwilt.com> wrote: > >

Traffic-Control Official PostgreSQL Version

Hi, Is there an official required PostgreSQL version? One reason it may be important is that supported syntax is added in newer versions. For example, recently one of the DB migrations scripts was added with "ADD COLUMN IF NOT EXISTS" statement, which is considered a syntax error (and breaks

Re: Proposal for CDN definition file based configuration management

Hi, In the below discussion, I'm leaving aside the "server's profile" scope of the servers configuration, and focus on Delivery Services. Personally I believe that a clear decoupling should be made between the 2 scopes (and if I understand correctly from another thread there are already steps in

Re: Proposal for CDN definition file based configuration management

Thanks Derek for the clarification. So the definition file is a global file for the CDN. Does it contain the information of which server has which DS? Does it hold all CDN's DSs configuration together? On a single DS change, will all servers in the CDN download the entire file for every DS

Re: Traffic-Control Official PostgreSQL Version

Thanks, Nir On Tue, Apr 4, 2017 at 11:27 PM, Dewayne Richardson <dewr...@gmail.com> wrote: > We have started with 9.6.x, so I'd say we should assume > 9.6.x at the > moment. > > On Tue, Apr 4, 2017 at 2:09 PM, Nir Sopher <n...@qwilt.com> wrote: > > > Hi, &

Re: Proposal for CDN definition file based configuration management

ut over time do we really need to keep the last 1000 revisions of a > delivery service? > > Its more of an implementation detail, but I think it would be useful to > give some control over version retention policies (i.e. keep last n based > on quantity or dates, mark some as “never

Re: Proposal for CDN definition file based configuration management

at is the main concern. Rather, people tend > to > > > have strong reactions to “its permanent, it will be there forever”. As > > long > > > as we give some way to delete and preferably with a batch mode we > should > > be > > > all set. > >

Re: Traffic Ops Golang Rewrite

ic Control like Tenancy and Capabilities. > > -Dew > > On Mon, Aug 14, 2017 at 5:22 AM, Nir Sopher <n...@qwilt.com> wrote: > > > +1! > > > > As far as tenancy is concerned, the main logic is held in the > > "Utils::Tenant" class.

Re: Traffic Ops Golang Rewrite

+1! As far as tenancy is concerned, the main logic is held in the "Utils::Tenant" class. I would be happy to use this class as an entry point to the Golang TO development. BTW, the UT coverage of the tenancy checks is quite extensive. Are we going to migrate the UTs as well, write new UTs in

Re: Delivery Service based config generation and Cache Manager

Hi Derek, As discussed in the summit, we also see significant value in 1. DS Deployment Granularity - using DS individual config files. 2. Delivery Service Configuration Versioning (DSCV) - separating the "provisioning" from the "deployment". 3. Improving the roll-out procedure,

Re: Traffic Ops: Tenancy - User Access to Multiple Tenants

1 is complete, you will now have the ability to (or > not to) lock down delivery services as you please. > > Once that is done, I propose we talks about what the next phases are and > the next set of resources (servers? cachegroups?) we attempt to lock down > via tenancy. > >

Re: Starting the 2.1 Branch for Next Release of TC

on cutting a release sometime this week? > >> I have a few PRs that I was planning on merging and wanted to see if I > >> have > >> some time. > >> > >> Thanks, > >> Dave > >> > >> On Tue, Jul 18, 2017 at 2:46 PM, Nir Sophe

Re: [VOTE] Move Traffic Control to full GitHub

+1 As I believe it may improve collaboration and PR workflows. On May 19, 2017 2:58 AM, "Jeremy Mitchell" wrote: > +1 > > On Thu, May 18, 2017 at 3:35 PM, Dave Neuman wrote: > > > +1, thanks for putting the vote up Jan > > > > On Thu, May 18, 2017 at

Re: Removing headers from some traffic ops config files

;derek_geli...@comcast.com> wrote: > So you're suggesting we create boolean parameters as part of this? It's > an interesting notion and I can think of several places in the code where > that would be simpler. > > > > > On Jun 15, 2017, at 2:02 PM, Nir So

Re: VPN / DNS issues?

Wrong "dev" mailing list :) Please ignore. Nir On Mon, May 1, 2017 at 8:26 AM, Nir Sopher <n...@qwilt.com> wrote: > Hi, > I'm connected via VPN, but not able to ping P4 / NX server / rd. > Anyone else with similar issues? > Nir >

VPN / DNS issues?

Hi, I'm connected via VPN, but not able to ping P4 / NX server / rd. Anyone else with similar issues? Nir

Delivery-Service Configuration Versioning

Dear all, Planning the efforts toward "self-service", we are considering "delivery-service configuration versioning" (DSCV) as one of our next steps. In a very high level, by DSCV we refer to the ability to hold multiple configuration versions/revisions per delivery-service, and actively choose

Re: Configuration Management - Future State Design for Self Service

Hi all, First of all +1 for the described efforts. The delivery service deployment time is an issue that bothers us as well. I personally believe that the decoupling of servers config and individual service configs is an important step towards "self-service", where ultimately the flow of

Re: Access Control - Limiting Roles / Capabilities Tenant Admins can Assign to Users

Hi, Maybe I'm mis-understanding something here, but in the long term, when tenancy is fully implemented on all items in the system, I do not see any real issue with handling the capability to assign a role to user like any other capability. As I see it, there is a guy in the organization that

Re: Delivery-Service Configuration Versioning

Thanks Ryan & Eric for the feedback. Answers inline. Thanks again, Nir On Thu, May 4, 2017 at 3:59 PM, Eric Friedrich (efriedri) < efrie...@cisco.com> wrote: > Thanks Nir- > Comments inline > > On May 1, 2017, at 1:12 PM, Nir Sopher <n...@qwilt.com> wrote: > &

Re: Building Traffic-Router - Failed to bring jdnssec-tools

t 11:56 PM, David Neuman <david.neuma...@gmail.com> wrote: > I have not seen this issue. It's interesting that it is trying ipv6 for > that. > > On Tue, Oct 3, 2017 at 2:33 PM, Nir Sopher <n...@qwilt.com> wrote: > > > Hi, > > > > Yesterday I t

Building Traffic-Router - Failed to bring jdnssec-tools

Hi, Yesterday I tried to build the latest 2.1.x traffic-control, calling the ./pkg command. The command failed on traffic-router build, and according to the below log, it is related to bringing the JDNSSEC tools library, not sure from which repository. Does anybody else encountered a similar

Re: Building Traffic-Router - Failed to bring jdnssec-tools

structure/docker/build/Dockerfile-traffic_router > context: ../../.. > volumes: > - ../../..:/trafficcontrol > network_mode: bridge > > Let me know if that works for you. > > Steve > > On Thu, Oct 5, 2017 at 5:55 PM, Nir Sopher <n...@qwilt.com> wrote: > > &g

Re: Preventing routing to individual caches

t; Subject: Re: Preventing routing to individual caches > > The use case is fairly specific. Suffice it to say we have reverse > proxies that need configuration without being treated as potential > destinations by traffic router. > > DG > > On Aug 22, 2017, at 3:19 PM, Nir

Re: Building Traffic-Router - Failed to bring jdnssec-tools

the container doing the build probably only routes IPv4 by > >> default in some environments. Checking in my build environment, none > >> of the Docker networks have IPv6 enabled. > >> > >> Should we pass `-4` to the curl command here [1] to force it to

Re: Promote Golang Traffic Monitor to Default

Hi, What would be the content of 2.2? If we want to have very limited content as suggested in the summit, I would suggest to leave Java TM, removing it only on TC 2.3. If the 2.2 version has substantial content, I would see leaving the old TM as part of the release as a liability. Old TM should

Re: [VOTE] Release Apache Traffic Control (incubating) 2.1.0-RC1

Hi, Trying to build 2.1.x latest on my centos7 VM, I get the below error during traffic-portal build (due to the recent RedHat openssl issues). npm: relocation error: npm: symbol SSL_set_cert_cb, version libssl.so.10 not defined in file libssl.so.10 with link time reference I overcame the issue

Re: [VOTE] Release Apache Traffic Control (incubating) 2.1.0-RC3

+1 On Thu, Dec 21, 2017 at 5:18 AM, Jeremy Mitchell wrote: > +1 > > On Wed, Dec 20, 2017 at 5:34 PM, Steve Malenfant > wrote: > > > +1 > > > > On Wed, Dec 20, 2017 at 5:14 PM, Dave Neuman wrote: > > > > > +1 > > > > > > On Wed,

Traffic Router Fail - Too Many Open Sockets

Hi, One of my routers got stuck today, not being able to answer http requests (routing and API). When trying to investigate the issue, I found catalina.log with a lot of messages complaining on failure to open a socket due to too many open files. See example below. No issues were found in the log

Re: Connection leaks traffic stats -> influxdb

some setups with Traffic Stats and > InfluxDB on the same server. > A couple of questions: > - What version of Traffic Stats are you running? > - What version of InfluxDB are you running? > - What version of OS are you running? > > Thanks, > Dave > > > On Sun, Feb 11,

Connection leaks traffic stats -> influxdb

Hi, On my setup, traffic-stats is installed on the same server as the influxdb server. We have noticed that the number of open sockets, from stats to influx, is constantly increasing, All connections are at state "ESTABLISHED". Did anyone encounter a similar issue? I'm familiar with

Re: Immutable DS CDN - resolving Riak/Postgres data coherency

he certificates for a DS. For now I am +1 on > > deleting the certificates when a DS is deleted. > > > > Thanks, > > Dave > > > > On Tue, Feb 13, 2018 at 12:14 PM, Nir Sopher <n...@qwilt.com> wrote: > > > > > Hi, > > > > > > I

Re: Traffic Router Fail - Too Many Open Sockets

2:04:49 PM com.comcast.cdn.traffic_control.traffic_router.secure.CertificateRegistry importCertificateDataList Can it be that in some rare, probably failing, situations, the monitor does not close the connection? Nir On Thu, Feb 1, 2018 at 11:27 PM, Nir Sopher <n...@qwilt.com> wrote: > Gre

Re: Traffic Router Enhancement - Default Maxmind Geolocation Override

? > > -Rawlin > > On Tue, Feb 13, 2018 at 1:27 PM, Rivas, Jesse <jesse_ri...@comcast.com> > wrote: > > Nir, > > > > This solution does not support that level of granularity. > > > > Jesse > > > > On 2/13/18, 11:43 AM, "Nir Sopher&q

Re: Delivery Service Self-Service

Hi Jeremy and all, Jeremy, thanks for putting it all together! I'll be short, as I mostly agree with most of point the Jeremy's pointed out. Regarding the "DS regex", like Ryan IIUC, I believe, the operator needs to be able to configure it and control it. First of all as it defines a resource

Fwd: Delivery Service Origin Refactor

Hi Rawlin, Can you please add a few word for the motivation behind basing the steering target selection on the location of the client? As the content goes through the caches, isn't it the job of the cache to select the best origin for the cache? Why the client should be the one to take the origin

Re: Traffic Server Secondary Streaming IPs Design

7 AM, Eric Friedrich (efriedri) < > efrie...@cisco.com> wrote: > > > Hey Nir- > > For our particular use case, we are looking at making an IP the > delivery > > unit. We would like to use a single interface with multiple IPs. DSs > would > > be assigned to

Re: Traffic Server Secondary Streaming IPs Design

> > > > > On 03/04/2018, 7:08 AM, "Mark Torluemke" < > mtorlue...@apache.org> wrote: > > > >I would support an 'interfaces' table (adding some > sort

Re: [VOTE] Resolution for Traffic Control graduation to TLP

+1 On Mon, Apr 2, 2018 at 11:24 PM, Gelinas, Derek wrote: > +1 > > > On Apr 2, 2018, at 4:20 PM, Leif Hedstrom wrote: > > > > > >> On Apr 2, 2018, at 2:11 PM, David Neuman > wrote: > >> > >> Dear Traffic Control community

Re: Traffic Server Secondary Streaming IPs Design

Hi Zhilin, I took a quick look into the spec. Hope to have the opportunity to dive deeper into it soon so we can further discuss it. For now I have a 2 questions. In the spec, you refer to "secondary interfaces", and you have a list of secondary interfaces added. IIUC the secondary interfaces

Re: Traffic Server Secondary Streaming IPs Design

n) >that would include moving the management and lights out management >interfaces to that table as well. > >Cheers, >Mark > >On Mon, Apr 2, 2018 at 2:39 PM, Nir Sopher <n...@qwilt.com> wrote: >

Re: TM: Question about the poll model of the Traffic Monitor

Hi Eric/Neil, Isn't the question of supporting multi interfaces per server a much wider question? Architectural wise. What would be the desired behavior if the monitoring shows that only one of the interfaces is down? Will the router send traffic to the healthy interfaces? How? Nir On Wed, Mar

Re: [VOTE] Traffic Control graduation to TLP

+1 On Mar 1, 2018 10:27 PM, "Steve Malenfant" wrote: > +1 > > On Thu, Mar 1, 2018 at 12:14 PM, Phil Sorber wrote: > > > +1 > > > > On Thu, Mar 1, 2018 at 1:12 PM Hank Beatty wrote: > > > > > +1 > > > > > > On 03/01/2018 10:41 AM,