From dev-return-113087-archive-asf-public=cust-asf.ponee.io@cloudstack.apache.org Fri Jun 7 07:16:02 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 383F018067E for ; Fri, 7 Jun 2019 09:16:02 +0200 (CEST) Received: (qmail 91985 invoked by uid 500); 7 Jun 2019 07:15:57 -0000 Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list dev@cloudstack.apache.org Received: (qmail 91973 invoked by uid 99); 7 Jun 2019 07:15:57 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 07 Jun 2019 07:15:57 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id DD6B31A184E for ; Fri, 7 Jun 2019 07:15:56 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.002 X-Spam-Level: X-Spam-Status: No, score=0.002 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=richardlawley-com.20150623.gappssmtp.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id hg5erKR1TK7i for ; Fri, 7 Jun 2019 07:15:55 +0000 (UTC) Received: from mail-ot1-f54.google.com (mail-ot1-f54.google.com [209.85.210.54]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 69E675F180 for ; Fri, 7 Jun 2019 07:15:55 +0000 (UTC) Received: by mail-ot1-f54.google.com with SMTP id d17so960096oth.5 for ; Fri, 07 Jun 2019 00:15:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=richardlawley-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=h0QSXrczKwGsJ5u3Ga29mf2J8TD55nsAyZ/dEGg/pHE=; b=emvAlcfJXLd5rDiwdts5AEn493obwfZj9XlfoOAy2FlPTlAsdafWAxaMLUcIepbF7h yAFtga2pmKyAjICafimeOwRZwLu11G01YSS4XXo9GV0ahFN2StJXIjrrk1ZiNIXTVHJi hmUrraW4hqIOlnu9yV7qDBl6b/FmfN8SF2aLMKcWFePhN3Irfn3IUatHpYo7/TgHx37K YpwbKAMvQ1otY6rL2hCDXcQy4ee5Gg4oVkCDAl0TJUgcJ/gsZ5o2xmwjUwuUy5aQ1YGh Ssz0aJXmQ0G8fRCnjgvlUcvC3kDXEnpHN9fN6MY6mZp0u+csIMO/vMN+EaC3+J2EQiLS HAGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=h0QSXrczKwGsJ5u3Ga29mf2J8TD55nsAyZ/dEGg/pHE=; b=LnICAtT9Rc08VXmk2CqmrrfQOwtvbq6qZ6UVA3LKl7j2axC9+QO5GH4xmIMOzC12uO +WbZ6vf6W/BT4YtZ0joygyqp3IxSwkbtsy11m58dD1h5hd9SIDwb14AdPAsXYLzA5gMA iReut9jDLH4m86rcCOeRx7NdZ4jlnX7tFc2u1O4Nc2kYjb020diaOGW2SmZCDMVfr5Hl Ke+z1917FjnJDTl+CHSGhUBFRyaMht3I8aiQtTWP1ZOGzyl5POksF2KUBX+X7DRYTl+V H8+H1By9qOQ5sV5WiA4Rkua2RrvHVvYNx/+0JBcIFR4ZW6C4ZCFqc0DK0+SO3ja/BUVs y21w== X-Gm-Message-State: APjAAAWkwQFbADhCqOJZJXX0YhwiWQEZT8+Tt3Jm04d6kYuVJoGXnphD HurRaNn7oYYAv65RaGSvtGcWeLKBOqY= X-Google-Smtp-Source: APXvYqwcL8lt3FSk6l2pijSudbxBNncPb+fqnrm0qIPfa0yU7rS8G6qQgvvmA4lATaQ6nbr74z+OTQ== X-Received: by 2002:a9d:6d12:: with SMTP id o18mr2153732otp.166.1559891748541; Fri, 07 Jun 2019 00:15:48 -0700 (PDT) Received: from mail-ot1-f46.google.com (mail-ot1-f46.google.com. [209.85.210.46]) by smtp.gmail.com with ESMTPSA id p8sm497583otl.36.2019.06.07.00.15.47 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 07 Jun 2019 00:15:47 -0700 (PDT) Received: by mail-ot1-f46.google.com with SMTP id r10so962051otd.4; Fri, 07 Jun 2019 00:15:47 -0700 (PDT) X-Received: by 2002:a9d:3d03:: with SMTP id a3mr17460177otc.80.1559891747512; Fri, 07 Jun 2019 00:15:47 -0700 (PDT) MIME-Version: 1.0 From: Richard Lawley Date: Fri, 7 Jun 2019 08:15:36 +0100 X-Gmail-Original-Message-ID: Message-ID: Subject: Is anyone using SRX Integration? To: dev@cloudstack.apache.org, users@cloudstack.apache.org Content-Type: text/plain; charset="UTF-8" Hi, We've recently added a couple of Juniper SRXs, but are finding that the integration with CloudStack is very broken. So far there have been a number of things which just don't work: * Adding Static NAT Rules * Adding Port Forwarding Rules * Removing Port Forwarding Rules I've found and fixed locally some of these things, but I'm trying to work out whether this functionality ever worked? The "Supported External Devices" on the CloudStack website lists "SRX (Model srx100b) versions 10.3 to 10.4 R7.5" - JunOS 10 went EOL in 2014. We've been using 15.x, so either the functionality never worked, or the changes in JunOS broke compatibility with CloudStack. I'm working finding and fixing the functionality, but I'd be interested to know whether anyone was actively using any of this integration, as if so, the fixes I apply may well break compatibility with (much) older versions. Regards, Richard