Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Nux!
Hi, In Proxmox you could use the "IP Filter" option + "Firewall in" options to restrict IP address stealing. /offtopic If you go for a Cloudstack Advanced Zone with Security Groups, then your VMs can get 1 or more public IP addresses and this is enforced automatically via iptables and ebtables

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Razvan Rosca
Hey, > you can only connect a VM into one network, so if you want to have a 2nd "private" network, that's not yet possible with Cloudstack This will not be an issue, the vast majority of users don't need any, or if they need, one will suffice. > it was possible to have local live migrations with

CS 4.12 and XS 6.5

2019-05-03 Thread Alessandro Caviglione
Hi guys, we're going to upgrade CS 4.9 to 4.12. Actually CS are managing some XenServer 6.5 but in Compatibility Matrix for CS 4.12 I see that XS 6.5 is deprecated. What it means? Anyone knows if XS6.5 still works or it's possible that I'll lost the management of those nodes? Thank you!

Re: CS 4.12 and XS 6.5

2019-05-03 Thread Rafael Weingärtner
When I tested ACS 4.12, I used with XenServer 6.5, and it worked without problems. I have no idea on what that deprecation note means. In theory, we should not deprecate anything without creating a major release (semantic versioning.). I would expect a widespread notification and discussion wi

Automating creation of ACLs

2019-05-03 Thread Andrei Mikhailovsky
Hello everyone, I have come across a need to create an ACLs that includes around 100 different IP addresses and network ranges for several services. Now, looking at the ACS gui, there is currently no way that I could find to create an ACL with multiple IP addresses / network ranges. Not sure w

Re: Automating creation of ACLs

2019-05-03 Thread Andrija Panic
Hi Andrei, perhaps I got something wrong, but why don't you use API to create needed ACL rules ? Andrija On Fri, 3 May 2019 at 17:04, Andrei Mikhailovsky wrote: > Hello everyone, > > I have come across a need to create an ACLs that includes around 100 > different IP addresses and network range

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Nux!
Hi, All I can find right now is this, which doesn't specifically mention local storage, so will need to be tested. https://github.com/apache/cloudstack-documentation/pull/14 By the sound of it it leverages underlying libvirt capabilities. HTH -- Sent from the Delta quadrant using Borg technolo

Re: Automating creation of ACLs

2019-05-03 Thread Andrei Mikhailovsky
Hi Andrija, I wasn't aware the API supports creating ACLs with multiple networks / IP addresses. Andrei - Original Message - > From: "Andrija Panic" > To: "users" > Sent: Friday, 3 May, 2019 16:11:37 > Subject: Re: Automating creation of ACLs > Hi Andrei, > > perhaps I got somethin

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Razvan Rosca
Hey, Yeah, NFS is specified so I doubdt local storage will work, unfortunately. Razvan Rosca Skype: razvan.rosca Tel: +40 731 059 660 Linkedin: https://www.linkedin.com/in/razvanrosca/ Facebook: https://fb.com/razvanrosca.com On Fri, May 3, 2019 at 6:26 PM Nux! wrote: > Hi, > > All I can fin

Re: Automating creation of ACLs

2019-05-03 Thread Andrija Panic
Hi Andrei, I didn't claim that work actually - did you test it, does it actually works (if I understand correctly - you want in single rule to specify multiple CIDR ranges instead of creating a rule for each CIDR range in question) ? Best, On Fri, 3 May 2019 at 17:36, Andrei Mikhailovsky wrot

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Andrija Panic
https://github.com/apache/cloudstack/commit/bf209405e7d60b6a5abf87677d368c429359d98a , for KVM and ROOT volumes only (didn't test it myself). On Fri, 3 May 2019 at 17:41, Razvan Rosca wrote: > Hey, > > Yeah, NFS is specified so I doubdt local storage will work, unfortunately. > > Razvan Rosca

Re: Automating creation of ACLs

2019-05-03 Thread Andrei Mikhailovsky
Actually, I was wrong and made a mistake. The ACS gui does allow specifying multiple networks/IPS on the same ACL. I had a typo when I was testing it. All jolly good! Cheers - Original Message - > From: "Andrija Panic" > To: "users" > Sent: Friday, 3 May, 2019 17:04:24 > Subject: Re:

Re: Automating creation of ACLs

2019-05-03 Thread Andrei Mikhailovsky
Hi Andrija, I've setup the CloudMonkey on my local host and done some experimentation. It turns out that the API does support specifying multiple ips/networks per single ACL. The gui reflects this and shows a comma separated list. So, it looks like I can do everything I want from the CloudMonke