Re: Time-out when creating a template from a snapshot

2018-02-02 Thread Vladimir Melnik
Thanks for sharing! I think, it's not only an SQL-related issue. I raised timeout thresholds of haproxy, so now there's no DB exceptions since that, but something is terminating the "cp" process on the SSVM leaving the template incomplete. There are no messages about the database in the

Re: Time-out when creating a template from a snapshot

2018-02-02 Thread Andrija Panic
Might have sense, yes. Anyway, chech that parameter and let us know. Again, for me (we use SolidFire, so snapshots are kept on SF, not on Secondary Storage) so the snapshot to Template copy process is handled by Agent (KVM host) not SSVM. Cheers On 2 February 2018 at 15:02, Vladimir Melnik

Re: Failing to enable SSL/HTTPS on console proxy vm

2018-02-02 Thread Ugo Vasi
Hi Paul, do I have to destroy console-proxy too? Could the problem be caused by certificates' chain? I've got two intermediate certificates between the root and the leaf one, could this cause problems? Thanks On 02/02/2018 13:18, Paul Angus wrote: Hi Ugo, Have you destroyed your sec storage

Re: AW: AW: KVM storage cluster

2018-02-02 Thread Ivan Kudryavtsev
Swen, performance looks awesome, but still wonder where is the magic here, because AFAIK Ceph is not capable to even touch the base, but Red Hat bets on it... Might it be the ScaleIO doesn't wait while the replication complete for IO or other hack is used? 2 февр. 2018 г. 3:19 ПП пользователь "S.

AW: AW: AW: KVM storage cluster

2018-02-02 Thread S . Brüseke - proIO GmbH
Hi Andrija, you are right, of course it is Samsung PM1633a. I am not sure if this is really only RAM. I let the fio command run for more than 30min and IOPS did not drop. I am using 6 SSDs in my setup, each has 35.000 IOPS random write max, so ScaleIO can do 210.000 IOPS (read) at its best. fio

Re: Network ACL Lists

2018-02-02 Thread Dag Sonstebo
Hi Benjamin, Not to my knowledge – that would be a security issue in itself since you would then announce to any user what ACL rules are in place for other users. Regards, Dag Sonstebo Cloud Architect ShapeBlue On 02/02/2018, 10:06, "Benjamin Naber" wrote:

Re: AW: AW: KVM storage cluster

2018-02-02 Thread Andrija Panic
>From my extremely short reading on ScaleIO few months ago, they are utilizing RAM or similar for write caching, so basically, you write to RAM or other part of ultra fast temp memory (NVME,etc) and later it is flushed to durable part of storage. I assume its 1633a not 1663a ? -

Re: AW: AW: AW: KVM storage cluster

2018-02-02 Thread Ivan Kudryavtsev
I suppose Andrija says about the volume size, it should be much bigger than storage host RAM. 2 февр. 2018 г. 10:17 ПП пользователь "S. Brüseke - proIO GmbH" < s.brues...@proio.com> написал: > Hi Andrija, > > you are right, of course it is Samsung PM1633a. I am not sure if this is > really only

RE: Failing to enable SSL/HTTPS on console proxy vm

2018-02-02 Thread Paul Angus
Hi Ugo, Have you destroyed your sec storage VM and let CloudStack recreate it. A stop-start isn't usually enough to reconfigure certificates. paul.an...@shapeblue.com  www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue -Original Message- From: Ugo

Re: kvm live volume migration

2018-02-02 Thread Andrija Panic
@Dag, you might want to check with Mike Tutkowski, how he implemented this for the "online storage migration" from other storages (CEPH and NFS implemented so far as sources) to SolidFire. We are doing exactly the same demo/manual way (this is what Mike has sent me back in the days), so perhaps

AW: AW: AW: KVM storage cluster

2018-02-02 Thread S . Brüseke - proIO GmbH
Hi Ivan, it is a standard installation without any tuning. We are using 2x 10Gbit interfaces on all servers. I am not really sure how ScaleIO handles the replication at the moment. I do not have any experience with Ceph too so I am unable to compare it. FYI: If you use 128k instead of 4k

Re: Failing to enable SSL/HTTPS on console proxy vm

2018-02-02 Thread Andrija Panic
You need to put all certificates in the chain in the GUI dialog, in 4.8 this is supported in GUI, made easy (god forgive doing the same work in 4.5 :) I don't remember ATM, but I believe also restarting MGMT was required or advises, since it build up the ssl/trust chan (of whaever...) so make

Apache project page updates needed.

2018-02-02 Thread Ron Wheeler
http://cloudstack.apache.org/ list upcoming conferences in 2016 and 2017. Nothing planned for 2018. -- Ron Wheeler President Artifact Software Inc email: rwhee...@artifact-software.com skype: ronaldmwheeler phone: 866-970-2435, ext 102

Re: Failing to enable SSL/HTTPS on console proxy vm

2018-02-02 Thread Paul Angus
Sorry should have said that, yes cpvm is the more important one to restart for your issue. Ssvm also uses cert for transfers. From: Andrija Panic Sent: Friday, 2 February 2018 3:13 pm To: users Cc: Paul Angus; Benjamin Naber Subject: Re:

cloudstackcollab.org needs updating

2018-02-02 Thread Ron Wheeler
http://us.cloudstackcollab.org/ list upcoming conferences for 2017 in Miami and Brazil. -- Ron Wheeler President Artifact Software Inc email: rwhee...@artifact-software.com skype: ronaldmwheeler phone: 866-970-2435, ext 102

Re: AW: AW: AW: KVM storage cluster

2018-02-02 Thread Andrija Panic
No other FIO command, that is OK, direct=1, engine=libaio is the critical ones, I use very similar setup, except that i prefer to do pure READ and later pure WRITE, dont like these interleaved settings :) Also, the critical thing is not the IOPS alone but also LATENCY (completion latency on IO) -

Re: AW: AW: AW: KVM storage cluster

2018-02-02 Thread Ivan Kudryavtsev
Andrija, indeed, amen! 2 февр. 2018 г. 11:14 ПП пользователь "Andrija Panic" < andrija.pa...@gmail.com> написал: > No other FIO command, that is OK, direct=1, engine=libaio is the critical > ones, I use very similar setup, except that i prefer to do pure READ and > later pure WRITE, dont like

Re: Migrate system VMs volumes to new storage

2018-02-02 Thread Andrija Panic
If you can afford using (Storage) Tags, then you can do it that way also. we have 3 different storages (had) and all 3 were having at some time different TAGs - you edit existing System Offering for the CPVM, SSVM, VR (and/or Compute and Data disk offerings) i.e. //Service Offerings -> System

Re: XenServer Licensing Change - Switch Hypervisors?

2018-02-02 Thread Alessandro Caviglione
Hi all, I'm also trying to find a solution, our infrastructure is based on XS6.5 that will not patched on meltdown and spectre so we're considering to create new cluster based on a different hypervisor instead of upgrade to XS7.2. In fact, I think that all here work for a company that has a MS

Re: Network ACL Lists

2018-02-02 Thread daniel.herrmann
Hi Benjamin, Hi Dag, I think, in some environment that could make perfect sense. We are using the software in a private cloud environment and have some centrally managed lists of IP networks which are allowed to access internal services. Right now, every service using our private cloud has to

Re: Failing to enable SSL/HTTPS on console proxy vm

2018-02-02 Thread Ugo Vasi
Hi all, I had the same problem installing the wildcard certificate. I tried to set the consoleproxy.url.domain in global settings but now the console interface inside the iframe does not respond... The dns record are OK. On 16/06/2016 18:10, Andy Dills wrote: I have this working

Re: Failing to enable SSL/HTTPS on console proxy vm

2018-02-02 Thread Ugo Vasi
I noticed another problem related to this procedure: after loading the certificates the console is restarted while the secondary storage VM disconnects and I have to stop it and restart it to see it online. On 02/02/2018 11:26, Ugo Vasi wrote: Hi all, I had the same problem installing the

Re: Failing to enable SSL/HTTPS on console proxy vm

2018-02-02 Thread Ugo Vasi
Hi Ben, I'm sure that the DNS is resolving the right IP (aaa-bbb-ccc-ddd.domain.com -> aaa.bbb.ccc.ddd), I tried with wget using the same src of iframe (masquerade log): $ wget https://123-123-123-123.domain.com/ajax?token=...(snipped) --2018-02-02 10:24:23--

Re: Failing to enable SSL/HTTPS on console proxy vm

2018-02-02 Thread Benjamin Naber
Hi Ugo, you need a DNS Record for the public ip address the consoleproxy has beed allocatet. should be look like this: 80-190-44-22.domain.com otherwise the iframe denied loading in case of ssl error. In Global setting "Console proxy url domain" set *.domain.com restart management server and it

AW: AW: KVM storage cluster

2018-02-02 Thread S . Brüseke - proIO GmbH
Hi Ivan, it is a 50/50 read-write mix. Here is the fio command I used: fio --name=test --readwrite=randrw --rwmixwrite=50 --bs=4k --invalidate=1 --group_reporting --direct=1 --filename=/dev/scinia --time_based --runtime= --ioengine=libaio --numjobs=4 --iodepth=256 --norandommap

Re: [fosdem] Anybody going to Fosdem this weekend?

2018-02-02 Thread Daan Hoogland
what he said !!! On Thu, Feb 1, 2018 at 11:58 PM, Rohit Yadav wrote: > Hi all, > > I will be at Fosdem in Brussels this weekend, and I know Daan is going to > be there too - if you're going it would be lovely to meet you and discuss > CloudStack among other things,

Network ACL Lists

2018-02-02 Thread Benjamin Naber
Hi @all, is there any way, to create Network ACL Lists that global accessable ? Kind Reagrds Benjamin