Re: Iptables on Virtual router

2018-03-07 Thread Marc-Aurèle Brothier
Hi Varun, The file is for the firewall are all comig from the system VM image, you can find them here depending on the type of the system: https://github.com/apache/cloudstack/tree/master/systemvm/debian/etc/iptables. After the system vm has booted and the SSH is available, the agent daemon sends

Re: KVM HostHA

2018-03-07 Thread Andrija Panic
Hi Victor, zero experience here with 4.11 in general, but what are you expecting to happen ? you powered off a host, so nothing for IPMI driver to do - host is down already, no host HA actions are expected afaik. I guess you might have have wanted to i.e. unplug NIC (cause network issues on

RE: KVM HostHA

2018-03-07 Thread Paul Angus
Hi Victor, What parameters do you have for: kvm.ha.activity.check.max.attempts kvm.ha.activity.check.interval kvm.ha.activity.check.timeout kvm.ha.health.check.timeout kvm.ha.degraded.max.period the logs should show entries relating to these, BUT it's possible that as you performed a clean

KVM HostHA

2018-03-07 Thread victor
Hello Guys, I have installed cloudstack 4.11. I have enabled HA for each hosts I have added. I have also added ipmi successfully (using ipmi driver).   The hosts are showing like the following. === HA Enabled Yes HA StateAvailable HA Provider kvmhaprovider == Also

Re: Change VPC CIDR - and some Mailing List issues

2018-03-07 Thread Andrija Panic
root@r-5015-VM:~# grep -ir "10.128.0.0/18" /etc/ ### this is VPC CIDR /etc/iptables/router_rules.v4:-A INPUT -s 10.128.64.0/18 -d 10.128.0.0/18 -j MARK --set-xmark 0x524/0x /etc/iptables/router_rules.v4:-A FORWARD -s 10.128.64.0/18 -d 10.128.0.0/18 -j MARK --set-xmark 0x524/0x

Re: Change VPC CIDR - and some Mailing List issues

2018-03-07 Thread daniel.herrmann
Hi, As far as I know, when creating a site 2 site VPN, you can only specify the remote networks. The local network is always set to the whole VPC CIDR. Or am I wrong? Regards Daniel On 07.03.18, 12:39, "Rafael Weingärtner" wrote: I agree with you. I was not

Re: Change VPC CIDR - and some Mailing List issues

2018-03-07 Thread Rafael Weingärtner
I agree with you. I was not aware of that link in ACS website. I already created a task for myself to fix that. I thought the VPC CIDR was used only as a logical value internally in ACS. However, as you pointed out, you can create a VPN to the whole VPC. Then, yes, a restart would be required.

Re: Change VPC CIDR - and some Mailing List issues

2018-03-07 Thread daniel.herrmann
Hi, Maybe we could link to the Apache search system at the page listing the Cloudstack Mailing-Lists: https://cloudstack.apache.org/mailing-lists.html If you click on the list there, you get to http://mail-archives.apache.org/mod_mbox/cloudstack-users/. Then there is markmail linked and the

Re: Change VPC CIDR - and some Mailing List issues

2018-03-07 Thread Rafael Weingärtner
MarkMail is not an Apache's system. If you want an Apache's system to search mailing lists you can use: https://lists.apache.org/list.html?d...@cloudstack.apache.org. Do you intend on changing the Tiers CIDR as well? If it is only the VPC, you might not even need to restart with a cleanup. Of

Change VPC CIDR - and some Mailing List issues

2018-03-07 Thread daniel.herrmann
Hi all, First of all: when trying to search the lists on MarkMail (https://cloudstack.apache.org/mailing-lists.html) I get a warning that the entered information will be transmitted insecurely (no HTTPs). If I accept that, MarkMail redirects back to HTTPs but does not present a valid

Re: VHD import

2018-03-07 Thread Dag Sonstebo
Thanks for the update Gregoire, Would you be able to check the vhd-util versions in your working vs not-working scenarios? Regards, Dag Sonstebo Cloud Architect ShapeBlue On 06/03/2018, 22:11, "Grégoire Lamodière" wrote: Hi Dag, All, I spent some time

Re: Iptables on Virtual router

2018-03-07 Thread Dag Sonstebo
Hi Varun, Not sure if I follow your use case – the VR is built to provide services to VMs on the internal isolated network / VPC tier, the public interface is there for port forwarding / NATing to services hosted on the VMs. Hosting DHCP on the VR for clients on the public interface isn’t a

RE: CS fail after upgrade to 4.11

2018-03-07 Thread Piotr Pisz
Hi Paul, Done roll back, run sql script and run managemen server (db upgrade in startup performer correctly). Regards, Piotr -Original Message- From: Paul Angus [mailto:paul.an...@shapeblue.com] Sent: Wednesday, March 7, 2018 9:16 AM To: pp...@pulab.pl; users@cloudstack.apache.org

RE: CS fail after upgrade to 4.11

2018-03-07 Thread Paul Angus
Hi Piotr, Did you roll back and start the upgrade again, or just run the sql statements? paul.an...@shapeblue.com  www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue -Original Message- From: Piotr Pisz Sent: 07 March 2018 07:42 To: