GitHub user daniftodi added a comment to the discussion: [Architectural] 
SystemVMs using public DNS server

Version: 4.2.0.0

What I observed so far:
- It is missing a default route, it doesn't have access to the internet by 
default, is this ok?

In order to be able to download templates I added a `default` route manually, 
how can I make it permanent?
```
ip route show
default via 10.1.0.1 dev eth1 
10.1.0.0/24 dev eth1 proto kernel scope link src 10.1.0.145 
169.254.0.0/16 dev eth0 proto kernel scope link src 169.254.185.27
```

- Storage VM is dropping output `http` and `https` traffic?

```
iptables -L OUTPUT -v -n
Chain OUTPUT (policy ACCEPT 1280 packets, 197K bytes)
 pkts bytes target     prot opt in     out     source               destination 
        
    7   364 REJECT     6    --  *      eth1    0.0.0.0/0            0.0.0.0/0   
         state NEW tcp dpt:80 reject-with icmp-port-unreachable
    4   208 REJECT     6    --  *      eth1    0.0.0.0/0            0.0.0.0/0   
         state NEW tcp dpt:443 reject-with icmp-port-unreachable
````

- Even in documentation it is specified that port `3922` can be used to connect 
to instances using `ssh`, the `ssh` service is disabled by default.

GitHub link: 
https://github.com/apache/cloudstack/discussions/10352#discussioncomment-12254792

----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscr...@cloudstack.apache.org

Reply via email to