cloudstack-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andrija Panic <andrija.pa...@gmail.com>
Subject Re: [VOTE] Apache Cloudstack 4.5.1
Date Thu, 07 May 2015 13:08:30 GMT
While not voting (do I have reputation to do that ?)...

...  we do have serious VPC bug, which I also encountered wth previous
releases also (4.3.x):

Just created: https://issues.apache.org/jira/browse/CLOUDSTACK-8451


After you configure Port Forwarding or Static NAT on VPC, do "netstat" on
VM that is behind VPC, and you don't see real client remote IP, you see
Source NAT IP of the VPC VR !

We isolated 1 problematic VR iptables rule - please check the issue...

Lot of software behind VPC become uselsess, firewall,
fail2ban,SIP/Asterisk/web server logs etc.. - since all connections from
internet through VPC seems to come from VR...

Thanks

On 7 May 2015 at 14:57, Geoff Higginbottom <geoff.higginbottom@shapeblue.com
> wrote:

> +1 with the following testing
>
> Upgrade of 4.3.1 and 4.4 2 systems, both Adv Zones running XenServer 6.2
> Hypervisors
> Manual Tests via UI included
>   Upgrade System VM as Root Admin
>   Restart Network with Clean Up as User to upgrade VR
>   Restart VPC as User to upgrade VPC VR
>   VM Lifecycle events (create, stop, start, destroy etc)
>   Create, Update, Destroy VPC ACLs
>   Deleting Domains, Accounts, Users, VMs, Networks, Volumes etc and
> confirming storage clean-up
>
> API Scripted tests included
>   Creating Domains, Accounts, Users, Networks, Egress Rules, Firewall and
> NAT Rules, VMs, VPCs, VPC ACLs
>
>
> Upgrade of a previous 4.5.1 RC build, Basic Zone with EIP/ELB, GSLB and
> AutoScaling, with mix of XenServer 6.2 and 6.5 Hypervisors.  Dual Zone,
> with multiple PODs and Clusters.
> Manual Tests included
>   Upgrade System VM as Root Admin
>   Upgrade VRs as Root Admin
>   Updating Security Groups
>   Adding / Removing Static NAT
>   Adding / Removing Load Balancing
>   Adding / Removing Global Server Load Balancing
>   Adding / Removing AutoScaling
>
>
> Regards
>
> Geoff Higginbottom
>
> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581
>
> geoff.higginbottom@shapeblue.com
>
> -----Original Message-----
> From: Abhinandan Prateek [mailto:abhinandan.prateek@shapeblue.com]
> Sent: 07 May 2015 08:56
> To: CloudStack Dev
> Subject: Re: [VOTE] Apache Cloudstack 4.5.1
>
> +1 with following testing:
>
> Manual Testing:
>
> Zone with a cluster of Xenserver 6.5
>   VM lifecycle, Recovering a destroyed VM, Reinstall VM
>   VM Migration
>   Affinity groups - anti affinity
>   VM consoles
>   VM and volume snapshots
>   Template from volume snapshot, Download Template, Vm from template
> created form snapshot, Volume creation from volume snapshot
>   Attach volume - throws an exception, preferably should give a proper
> error on UI:    https://issues.apache.org/jira/browse/CLOUDSTACK-8448
>   Resize volum, Download volume
>   Snapshot policies
>   Change password
>   2 Tier VPC creation, Change password for VPC VMs, Reachability of VMs in
> the same tier, VPC ACL
>
> Automated testing: Ran some 20 regression suites, found one issue:
> https://issues.apache.org/jira/browse/CLOUDSTACK-8437
>
> None of the issues are a blocker.
>
> -abhi
>
>
> > On 06-May-2015, at 10:15 pm, Rohit Yadav <rohit.yadav@shapeblue.com>
> wrote:
> >
> > Hi all,
> >
> > I tested upgrading XS 6.2 from 4.4.2 to 4.5.1 to try to reproduce and
> test the issue Geoff reported.
> >
> > The issue Geoff found had to do with systemvmtemplate's requireshvm
> flag. When we register template for the next ACS version we want to
> upgrade, if done from UI would add requireshvm=true that sets the hvm flag
> to 1 (in the vm_instance table, as vms start). If the host is not HVM
> capable, which in case of Geoff was VirtualBox, systemvm will fail to
> start/deploy (due to no host found that is HVM).
> >
> > When we pre-seed systemvmtemplate on secondary storage the HVM tag is
> set to 0 (false), so it breaks the convention to set it to 1 when
> registering/upgrading systemvm template. The fix for this is to register
> the next sytemvm template (systemvm-xenserver-4.5) using something like
> cloudmonkey will hvm set to false for ACS 4.4.x or below. This UI issue has
> been fixed in ACS 4.5 so users can deselect the HVM option.
> >
> > I’ve asked Geoff to test and post his voting on a fresh environment,
> possibly using VMWare fusion (if doing on laptop) as VBox does not support
> vmx/amd-v.
> >
> > Hope this helps and hoping 4.5.1 will be solid.
> >
> >> On 06-May-2015, at 2:38 pm, Wilder Rodrigues <
> WRodrigues@schubergphilis.com> wrote:
> >>
> >> Thanks for the heads-up, Geoff.
> >>
> >> I will start testing an upgrade scenario now.
> >>
> >> Cheers,
> >> Wilder
> >>
> >>> On 06 May 2015, at 14:28, Geoff Higginbottom <
> geoff.higginbottom@shapeblue.com> wrote:
> >>>
> >>> For all those of you have voted +1 based on a clean install, if
> >>> possible please test upgrade scenarios including deploying new
> >>> Isolated networks and new VPCs as I have performed three upgrades
> >>> and all pass the initial upgrade, but then fail to add new VRs or
> >>> new SSVM/CPVMs post upgrade etc
> >>>
> >>> Regards
> >>>
> >>> Geoff Higginbottom
> >>>
> >>> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581
> >>>
> >>> geoff.higginbottom@shapeblue.com
> >>>
> >>> -----Original Message-----
> >>> From: Daan Hoogland [mailto:daan.hoogland@gmail.com]
> >>> Sent: 06 May 2015 13:25
> >>> To: dev@cloudstack.apache.org
> >>> Subject: Re: [VOTE] Apache Cloudstack 4.5.1
> >>>
> >>> based on Wilder's testing and my own bringing up a 4.5.1 server in a
> >>> test env i will +1(binding)
> >>>
> >>> Op wo 6 mei 2015 om 14:23 schreef Geoff Higginbottom <
> >>> geoff.higginbottom@shapeblue.com>:
> >>>
> >>>> Sorry for confusing the voting thread, I was backing Eriks
> >>>> statements with a '+1' but was not voting for the release -
> >>>> highlights the problem of mixing the threads
> >>>>
> >>>> Regards
> >>>>
> >>>> Geoff Higginbottom
> >>>>
> >>>> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581
> >>>>
> >>>> geoff.higginbottom@shapeblue.com
> >>>>
> >>>> -----Original Message-----
> >>>> From: Geoff Higginbottom [mailto:geoff.higginbottom@shapeblue.com]
> >>>> Sent: 06 May 2015 10:59
> >>>> To: dev@cloudstack.apache.org
> >>>> Subject: RE: [VOTE] Apache Cloudstack 4.5.1
> >>>>
> >>>> +1
> >>>>
> >>>> Regards
> >>>>
> >>>> Geoff Higginbottom
> >>>>
> >>>> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581
> >>>>
> >>>> geoff.higginbottom@shapeblue.com
> >>>>
> >>>> -----Original Message-----
> >>>> From: Erik Weber [mailto:terbolous@gmail.com]
> >>>> Sent: 06 May 2015 10:44
> >>>> To: dev
> >>>> Subject: Re: [VOTE] Apache Cloudstack 4.5.1
> >>>>
> >>>> On Wed, May 6, 2015 at 11:18 AM, Vadim Kimlaychuk <
> >>>> Vadim.Kimlaychuk@elion.ee
> >>>>> wrote:
> >>>>
> >>>>> Geoff,
> >>>>>
> >>>>>      Thank you for explaination. Basically the idea behind that
was
> to
> >>>>> have (for instance) database tier and web-app tier.   Web-apps-tier
> >>>> servers
> >>>>> have to communicate with databases, but databases are closed for
> >>>>> outside world.
> >>>>>
> >>>> The easiest way is to have 2 NICs at web-tier VMs and route inside
> >>>> VM
> >>>>> without need to send all the requests to VPC router.
> >>>>
> >>>>
> >>>> But you're also breaking the tiering. Your database server is now
> >>>> fully accessible from the internet (or wherever you're connected
> >>>> to) through the web servers, and not just the database.
> >>>>
> >>>> The proper way, imho, is to have a firewall between (ie. the VR),
> >>>> and fix the scaling issues instead. That's what you do in the
> >>>> non-cloud world as well, you create two tiers and put a firewall
> between them.
> >>>>
> >>>> --
> >>>>
> >>>> Erik
> >>>> Find out more about ShapeBlue and our range of CloudStack related
> >>>> services
> >>>>
> >>>> IaaS Cloud Design & Build<
> >>>> http://shapeblue.com/iaas-cloud-design-and-build//>
> >>>> CSForge – rapid IaaS deployment
> >>>> framework<http://shapeblue.com/csforge/>
> >>>> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> >>>> CloudStack Software Engineering<
> >>>> http://shapeblue.com/cloudstack-software-engineering/>
> >>>> CloudStack Infrastructure Support<
> >>>> http://shapeblue.com/cloudstack-infrastructure-support/>
> >>>> CloudStack Bootcamp Training Courses<
> >>>> http://shapeblue.com/cloudstack-training/>
> >>>>
> >>>> This email and any attachments to it may be confidential and are
> >>>> intended solely for the use of the individual to whom it is addressed.
> >>>> Any views or opinions expressed are solely those of the author and
> >>>> do not necessarily represent those of Shape Blue Ltd or related
> >>>> companies. If you are not the intended recipient of this email, you
> >>>> must neither take any action based upon its contents, nor copy or
> >>>> show it to anyone. Please contact the sender if you believe you
> >>>> have received this email in error. Shape Blue Ltd is a company
> >>>> incorporated in England & Wales. ShapeBlue Services India LLP is
a
> >>>> company incorporated in India and is operated under license from
> >>>> Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company
> >>>> incorporated in Brasil and is operated under license from Shape
> >>>> Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The
> Republic of South Africa and is traded under license from Shape Blue Ltd.
> ShapeBlue is a registered trademark.
> >>>> Find out more about ShapeBlue and our range of CloudStack related
> >>>> services
> >>>>
> >>>> IaaS Cloud Design & Build<
> >>>> http://shapeblue.com/iaas-cloud-design-and-build//>
> >>>> CSForge – rapid IaaS deployment
> >>>> framework<http://shapeblue.com/csforge/>
> >>>> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> >>>> CloudStack Software Engineering<
> >>>> http://shapeblue.com/cloudstack-software-engineering/>
> >>>> CloudStack Infrastructure Support<
> >>>> http://shapeblue.com/cloudstack-infrastructure-support/>
> >>>> CloudStack Bootcamp Training Courses<
> >>>> http://shapeblue.com/cloudstack-training/>
> >>>>
> >>>> This email and any attachments to it may be confidential and are
> >>>> intended solely for the use of the individual to whom it is addressed.
> >>>> Any views or opinions expressed are solely those of the author and
> >>>> do not necessarily represent those of Shape Blue Ltd or related
> >>>> companies. If you are not the intended recipient of this email, you
> >>>> must neither take any action based upon its contents, nor copy or
> >>>> show it to anyone. Please contact the sender if you believe you
> >>>> have received this email in error. Shape Blue Ltd is a company
> >>>> incorporated in England & Wales. ShapeBlue Services India LLP is
a
> >>>> company incorporated in India and is operated under license from
> >>>> Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company
> >>>> incorporated in Brasil and is operated under license from Shape
> >>>> Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The
> Republic of South Africa and is traded under license from Shape Blue Ltd.
> ShapeBlue is a registered trademark.
> >>>>
> >>> Find out more about ShapeBlue and our range of CloudStack related
> >>> services
> >>>
> >>> IaaS Cloud Design &
> >>> Build<http://shapeblue.com/iaas-cloud-design-and-build//>
> >>> CSForge – rapid IaaS deployment
> >>> framework<http://shapeblue.com/csforge/>
> >>> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> >>> CloudStack Software
> >>> Engineering<http://shapeblue.com/cloudstack-software-engineering/>
> >>> CloudStack Infrastructure
> >>> Support<http://shapeblue.com/cloudstack-infrastructure-support/>
> >>> CloudStack Bootcamp Training
> >>> Courses<http://shapeblue.com/cloudstack-training/>
> >>>
> >>> This email and any attachments to it may be confidential and are
> intended solely for the use of the individual to whom it is addressed. Any
> views or opinions expressed are solely those of the author and do not
> necessarily represent those of Shape Blue Ltd or related companies. If you
> are not the intended recipient of this email, you must neither take any
> action based upon its contents, nor copy or show it to anyone. Please
> contact the sender if you believe you have received this email in error.
> Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue
> Services India LLP is a company incorporated in India and is operated under
> license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a
> company incorporated in Brasil and is operated under license from Shape
> Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of
> South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is
> a registered trademark.
> >>
> >
> > Regards,
> > Rohit Yadav
> > Software Architect, ShapeBlue
> > M. +91 88 262 30892 | rohit.yadav@shapeblue.com
> > Blog: bhaisaab.org | Twitter: @_bhaisaab
> >
> >
> >
> > Find out more about ShapeBlue and our range of CloudStack related
> > services
> >
> > IaaS Cloud Design &
> > Build<http://shapeblue.com/iaas-cloud-design-and-build//>
> > CSForge – rapid IaaS deployment
> > framework<http://shapeblue.com/csforge/>
> > CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> > CloudStack Software
> > Engineering<http://shapeblue.com/cloudstack-software-engineering/>
> > CloudStack Infrastructure
> > Support<http://shapeblue.com/cloudstack-infrastructure-support/>
> > CloudStack Bootcamp Training
> > Courses<http://shapeblue.com/cloudstack-training/>
> >
> > This email and any attachments to it may be confidential and are
> intended solely for the use of the individual to whom it is addressed. Any
> views or opinions expressed are solely those of the author and do not
> necessarily represent those of Shape Blue Ltd or related companies. If you
> are not the intended recipient of this email, you must neither take any
> action based upon its contents, nor copy or show it to anyone. Please
> contact the sender if you believe you have received this email in error.
> Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue
> Services India LLP is a company incorporated in India and is operated under
> license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a
> company incorporated in Brasil and is operated under license from Shape
> Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of
> South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is
> a registered trademark.
>
> Find out more about ShapeBlue and our range of CloudStack related services
>
> IaaS Cloud Design & Build<
> http://shapeblue.com/iaas-cloud-design-and-build//>
> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> CloudStack Software Engineering<
> http://shapeblue.com/cloudstack-software-engineering/>
> CloudStack Infrastructure Support<
> http://shapeblue.com/cloudstack-infrastructure-support/>
> CloudStack Bootcamp Training Courses<
> http://shapeblue.com/cloudstack-training/>
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is a
> company incorporated in India and is operated under license from Shape Blue
> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
> and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is
> a company registered by The Republic of South Africa and is traded under
> license from Shape Blue Ltd. ShapeBlue is a registered trademark.
> Find out more about ShapeBlue and our range of CloudStack related services
>
> IaaS Cloud Design & Build<
> http://shapeblue.com/iaas-cloud-design-and-build//>
> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> CloudStack Software Engineering<
> http://shapeblue.com/cloudstack-software-engineering/>
> CloudStack Infrastructure Support<
> http://shapeblue.com/cloudstack-infrastructure-support/>
> CloudStack Bootcamp Training Courses<
> http://shapeblue.com/cloudstack-training/>
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is a
> company incorporated in India and is operated under license from Shape Blue
> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
> and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is
> a company registered by The Republic of South Africa and is traded under
> license from Shape Blue Ltd. ShapeBlue is a registered trademark.
>



-- 

Andrija Panić

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message