Hi!

After managed to inject sslcerts, I'm facing the Problem that my Network says:
"Ssl termination not supported by the loadbalancer"

Is there any Capability I could add via NetworkOfferings to get SSL Offloading 
working?

  "accountid": "4b14365a-5c6f-11e5-a590-3400a30d0aba",
  "cmd": 
"org.apache.cloudstack.api.command.user.loadbalancer.AssignCertToLoadBalancerCmd",
  "created": "2018-04-10T13:47:22+0200",
  "jobid": "0f1ba348-bab2-481f-8839-b0d9f6aa916e",
  "jobprocstatus": 0,
  "jobresult": {
    "errorcode": 431,
    "errortext": "Ssl termination not supported by the loadbalancer"
  },
  "jobresultcode": 530,
  "jobresulttype": "object",
  "jobstatus": 2,
  "userid": "4b143f31-5c6f-11e5-a590-3400a30d0aba"


... looks like kind of obvious. But Ild like to know if it's really not 
supported in VR at all?



Here's the network:

{
  "count": 1,
  "network": [
    {
      "acltype": "Account",
      "broadcastdomaintype": "Vlan",
      "broadcasturi": "vlan://3124",
      "canusefordeploy": true,
      "cidr": "172.17.0.0/22",
      "displaynetwork": true,
      "displaytext": "ms.mailbox.org",
      "dns1": "REDACTED",
      "dns2": "REDACTED",
      "domain": "Intern",
      "domainid": "819b01fd-b7bc-464d-9c43-59578eafcafe",
      "gateway": "172.17.0.1",
      "id": "d59d9e2a-be25-4918-b930-30e5eb0b4b71",
      "ispersistent": true,
      "issystem": false,
      "name": "REDACTED",
      "netmask": "255.255.252.0",
      "networkdomain": "REDACTED",
      "networkofferingavailability": "Optional",
      "networkofferingconservemode": true,
      "networkofferingdisplaytext": "Isolated-Net-Redundant-Router",
      "networkofferingid": "a19677cb-424e-4d09-bdb8-dfb14c2c5a1e",
      "networkofferingname": "Isolated-Net-Redundant-Router",
      "physicalnetworkid": "9d52c064-0749-4f53-8879-05f7b7d3ae3b",
      "project": "REDACTED-Microservices",
      "projectid": "c7fbc416-ce30-4e97-8401-e1da1db24f33",
      "related": "d59d9e2a-be25-4918-b930-30e5eb0b4b71",
      "restartrequired": false,
      "service": [
        {
          "capability": [
            {
              "canchooseservicecapability": false,
              "name": "VpnTypes",
              "value": "removeaccessvpn"
            },
            {
              "canchooseservicecapability": false,
              "name": "SupportedVpnTypes",
              "value": "pptp,l2tp,ipsec"
            }
          ],
          "name": "Vpn"
        },
        {
          "capability": [
            {
              "canchooseservicecapability": false,
              "name": "SupportedTrafficDirection",
              "value": "ingress, egress"
            },
            {
              "canchooseservicecapability": false,
              "name": "TrafficStatistics",
              "value": "per public ip"
            },
            {
              "canchooseservicecapability": false,
              "name": "SupportedEgressProtocols",
              "value": "tcp,udp,icmp, all"
            },
            {
              "canchooseservicecapability": false,
              "name": "MultipleIps",
              "value": "true"
            },
            {
              "canchooseservicecapability": false,
              "name": "SupportedProtocols",
              "value": "tcp,udp,icmp"
            }
          ],
          "name": "Firewall"
        },
        {
          "capability": [
            {
              "canchooseservicecapability": false,
              "name": "SupportedProtocols",
              "value": "tcp,udp"
            }
          ],
          "name": "PortForwarding"
        },
        {
          "name": "StaticNat"
        },
        {
          "capability": [
            {
              "canchooseservicecapability": false,
              "name": "SupportedSourceNatTypes",
              "value": "peraccount"
            },
            {
              "canchooseservicecapability": false,
              "name": "RedundantRouter",
              "value": "true"
            }
          ],
          "name": "SourceNat"
        },
        {
          "capability": [
            {
              "canchooseservicecapability": false,
              "name": "AllowDnsSuffixModification",
              "value": "true"
            }
          ],
          "name": "Dns"
        },
        {
          "capability": [
            {
              "canchooseservicecapability": false,
              "name": "DhcpAccrossMultipleSubnets",
              "value": "true"
            }
          ],
          "name": "Dhcp"
        },
        {
          "capability": [
            {
              "canchooseservicecapability": false,
              "name": "SupportedLbAlgorithms",
              "value": "roundrobin,leastconn,source"
            },
            {
              "canchooseservicecapability": false,
              "name": "SupportedLBIsolation",
              "value": "dedicated"
            },
            {
              "canchooseservicecapability": false,
              "name": "SupportedStickinessMethods",
              "value": 
"[{\"methodname\":\"LbCookie\",\"paramlist\":[{\"paramname\":\"cookie-name\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"mode\",\"required\":false,\"isflag\":false,\"description\":\"
 
\"},{\"paramname\":\"nocache\",\"required\":false,\"isflag\":true,\"description\":\"
\"},{\"paramname\":\"indirect\",\"required\":false,\"isflag\":true,\"description\":\"
 
\"},{\"paramname\":\"postonly\",\"required\":false,\"isflag\":true,\"description\":\"
\"},{\"paramname\":\"domain\",\"required\":false,\"isflag\":false,\"description\":\"
 \"}],\"description\":\"This is loadbalancer cookie based stickiness
method.\"},{\"methodname\":\"AppCookie\",\"paramlist\":[{\"paramname\":\"cookie-name\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"length\",\"required\":false,\"isflag\":false,\"description\":\"
 
\"},{\"paramname\":\"holdtime\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"request-learn\",\"required\":false,\"isflag\":true,\"description\":\"
 
\"},{\"paramname\":\"prefix\",\"required\":false,\"isflag\":true,\"description\":\"
\"},{\"paramname\":\"mode\",\"required\":false,\"isflag\":false,\"description\":\"
 \"}],\"description\":\"This is App session based sticky method. Define session 
stickiness on an existing application
cookie. It can be used only for a specific http 
traffic\"},{\"methodname\":\"SourceBased\",\"paramlist\":[{\"paramname\":\"tablesize\",\"required\":false,\"isflag\":false,\"description\":\"
\"},{\"paramname\":\"expire\",\"required\":false,\"isflag\":false,\"description\":\"
 \"}],\"description\":\"This is source based Stickiness method, it can be used 
for any type of protocol.\"}]"
            },
            {
              "canchooseservicecapability": false,
              "name": "LbSchemes",
              "value": "Public"
            },
            {
              "canchooseservicecapability": false,
              "name": "AutoScaleCounters",
              "value": 
"[{\"methodname\":\"cpu\",\"paramlist\":[]},{\"methodname\":\"memory\",\"paramlist\":[]}]"
            },
            {
              "canchooseservicecapability": false,
              "name": "SupportedProtocols",
              "value": "tcp, udp, tcp-proxy"
            }
          ],
          "name": "Lb"
        },
        {
          "name": "UserData"
        }
      ],
      "specifyipranges": false,
      "state": "Implemented",
      "strechedl2subnet": false,
      "tags": [],
      "traffictype": "Guest",
      "type": "Isolated",
      "vlan": "3124",
      "zoneid": "25488fa3-cd04-4e4f-bf61-a79800d2540c",
      "zonename": "Berlin-1"
    }
  ]
}



cheers,

- Stephan

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to