cloudstack-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dan Morrison <...@offworld.net.au>
Subject RE: VPN for VPC feature in 4.3
Date Fri, 18 Jul 2014 04:51:28 GMT
I've also encountered the exact same issue. Couldn't Remote Access VPN to
the VPC VR, and thanks to this thread discovered I have no public IP on the
VR (see ifconfig below)


I am also running an upgraded 4.2.1 -> 4.3 setup, on KVM hosts. The only
non-standard aspect of my setup is I am using the patched JAR to get around
issue #6464:


https://issues.apache.org/jira/browse/CLOUDSTACK-6464?focusedCommentId=14008807&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14008807


Andrei are you also using the patched JAR? I suspect this might be the root
cause of the issue, either that or the upgrade bug itself.


---


root@r-115-VM:~# ifconfig eth0 Link encap:Ethernet HWaddr 0e:00:a9:fe:00:1d
inet addr:169.254.0.29 Bcast:169.254.255.255 Mask:255.255.0.0 inet6 addr:
fe80::c00:a9ff:fefe:1d/64 Scope:Link UP BROADCAST RUNNING MULTICAST
MTU:1500 Metric:1 RX packets:219 errors:0 dropped:0 overruns:0 frame:0 TX
packets:220 errors:0 dropped:0 overruns:0 carrier:0 collisions:0
txqueuelen:1000 RX bytes:33934 (33.1 KiB) TX bytes:38836 (37.9 KiB) lo Link
encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128
Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:2 errors:0
dropped:0 overruns:0 frame:0 TX packets:2 errors:0 dropped:0 overruns:0
carrier:0 collisions:0 txqueuelen:0 RX bytes:214 (214.0 B) TX bytes:214
(214.0 B)

root@r-115-VM:~#


 Hi Praveen,

I was wondering if you've solved this problem that you were having with VPC
not
getting the IP on the public interface?

I've upgraded ACS from 4.2.1 to 4.3.0 and noticed that all my VPCs do not
have
the public IP address assigned to them on eth1. I've followed the upgrade
instructions and I've downloaded the new system vm as well as restarted all
system vms.

My VPCs worked perfectly well on 4.2.1, but they are not working now as VPC
vr
doesn't have a public IP. I've got plenty of free public IPs and I am also
using
kvm.

Thanks for any help

----- Original Message -----


From: "Praveen Buravilli" <Prav...@citrix.com> To: use...@
cloudstack.apache.org Sent: Wednesday, 2 April, 2014 12:19:43 PM Subject:
RE: VPN for VPC feature in 4.3

Yes Benoit, I have 40% of free public IPs available. So, that should not be
an
issue.

I don’t see any errors in log file too. Have you noticed any exceptions in
log
files by any chance when you encountered this issue?

Thanks, Praveen Kumar

-----Original Message----- From: benoit lair [mailto:kuru...@gmail.com]
Sent: 02 April 2014 17:30 To: use...@cloudstack.apache.org Subject: Re: VPN
for VPC feature in 4.3

Hi Praveen,

I already have this issue with vpc vr : Have you checked if you have some
public ip adresses available on your zone ?

Regards, Benoit.

2014-04-02 12:24 GMT+02:00 Praveen Buravilli <Prav...@citrix.com>:

Thanks Geoff. Actually, eth1 for VPC router is missing.

When I looked at log file, surprisingly a request has been sent to create
router VM with two NICs(one link local and other public) whereas, the
router was created with only one NIC.

Any thoughts? fyi, I'm running CloudStack 4.3 with KVM nodes.

Here attached is log file snippet containing both request and response info
on router start command:

(Highlighted NIC entries in the log with red and green texts).

======================================================================
================

2014-04-02 06:00:47,968 DEBUG [c.c.a.t.Request]
(Job-Executor-35:ctx-544b3513 ctx-5d9c4b47) Seq 6-1545667825: Sending { Cmd
, MgmtId: 52237010300, via: 6(localhost.localdomain), Ver: v1, Flags:
100111,
[{"com.cloud.agent.api.StartCommand":{"vm":{"id":43,"name":"r-43-VM","
type":"DomainRouter","cpus":1,"minSpeed":500,"maxSpeed":500,"minRam":1
34217728,"maxRam":134217728,"arch":"x86_64","os":"Debian GNU/Linux
7(64-bit)","bootArgs":" vpccidr=10.201.0.0/16domain=cs7cloud.internal
dns1=8.8.8.8 template=domP name=r-43-VM eth0ip=169.254.1.131
eth0mask=255.255.0.0 type=vpcrouter
disable_rp_filter=true","rebootOnCrash":false,"enableHA":true,"limitCp
uUse":false,"enableDynamicallyScaleVm":false,"vncPassword":"21a870dc77
23830","params":{},"uuid":"05b714cf-a511-42d9-b24a-6d077342865f","disk
s":[{"data":{"org.apache.cloudstack.storage.to.VolumeObjectTO":{"uuid"
:"b61da4e1-121e-4e02-b345-35719deec994","volumeType":"ROOT","dataStore
":{"org.apache.cloudstack.storage.to.PrimaryDataStoreTO":{"uuid":"90ff
a1df-e8bd-3e46-893d-bb9b63e0b180","id":2,"poolType":"NetworkFilesystem
","host":"172.20.105.2","path":"/export/praveen/csprimary","port":2049
,"url":"NetworkFilesystem://
172.20.105.2//export/praveen/csprimary/?ROLE=Primary&STOREUUID=90ffa1d
f-e8bd-3e46-893d-bb9b63e0b180
"}},"name":"ROOT-43","size":2621440000,"path":"b61da4e1-121e-4e02-b345-35719deec994","volumeId":46,"vmName":"r-43-VM","accountId":7,"format":"QCOW2","id":46,"deviceId":0,"hypervisorType":"KVM"}},"diskSeq":0,"path":"b61da4e1-121e-4e02-b345-35719deec994","type":"ROOT","_details":{"managed":"false","storagePort":"2049","storageHost":"172.20.105.2","volumeSize":"2621440000"}}],"nics":[{"deviceId":0,"networkRateMbps":-1,"defaultNic":false,"uuid":"2d4b2574-5e7d-45e7-bcbb-f64d1d9237c1","ip":"169.254.1.131","netmask":"255.255.0.0","gateway":"169.254.0.1","mac":"0e:00:a9:fe:01:83","broadcastType":"LinkLocal","type":"Control","isSecurityGroupEnabled":false}]},"hostIp":"172.20.210.7","executeInSequence":false,"wait":0}},{"com.cloud.agent.api.check.CheckSshCommand":{"ip":"169.254.1.131","port":3922,"interval":6,"retries":100,"name":"r-43-VM","wait":0}},{"com.cloud.agent.api.GetDomRVersionCmd":{"accessDetails":{"router.ip":"169.254.1.131","
router.name
":"r-43-VM"},"wait":0}},{"com.cloud.agent.api.PlugNicCommand":{"nic":{"deviceId":1,"networkRateMbps":200,"defaultNic":true,"uuid":"7f27078c-2123-4e53-9d4c-df2c6e4cb844","ip":"172.20.211.132","netmask":"255.255.255.0","gateway":"172.20.211.1","mac":"06:41:1a:00:00:20","broadcastType":"Vlan","type":"Public","broadcastUri":"vlan://211","isolationUri":"vlan://211","isSecurityGroupEnabled":false,"name":"cloudbr1"},"instanceName":"r-43-VM","vmType":"DomainRouter","wait":0}},{"com.cloud.agent.api.routing.IpAssocVpcCommand":{"ipAddresses":[{"accountId":7,"publicIp":"172.20.211.132","sourceNat":true,"add":true,"oneToOneNat":false,"firstIP":false,"broadcastUri":"211","vlanGateway":"172.20.211.1","vlanNetmask":"255.255.255.0","vifMacAddress":"06:41:1a:00:00:20","networkRate":200,"trafficType":"Public","networkName":"cloudbr1"}],"accessDetails":{"router.guest.ip":"172.20.211.132","zone.network.type":"Advanced","router.ip":"169.254.1.131","
router.name
":"r-43-VM"},"wait":0}},{"com.cloud.agent.api.routing.SetSourceNatCommand":{"ipAddress":{"accountId":7,"publicIp":"172.20.211.132","sourceNat":true,"add":true,"oneToOneNat":false,"firstIP":false,"broadcastUri":"211","vlanGateway":"172.20.211.1","vlanNetmask":"255.255.255.0","vifMacAddress":"06:41:1a:00:00:20","networkRate":200,"trafficType":"Public","networkName":"cloudbr1"},"add":true,"accessDetails":{"zone.network.type":"Advanced","router.ip":"169.254.1.131","
router.name":"r-43-VM"},"wait":0}},{}] }

2014-04-02 06:01:43,695 DEBUG [c.c.a.t.Request]
(AgentManager-Handler-10:null) Seq 6-1545667825: Processing: { Ans: ,
MgmtId: 52237010300, via: 6, Ver: v1, Flags: 110,
[{"com.cloud.agent.api.StartAnswer":{"vm":{"id":43,"name":"r-43-VM","t
ype":"DomainRouter","cpus":1,"minSpeed":500,"maxSpeed":500,"minRam":13
4217728,"maxRam":134217728,"arch":"x86_64","os":"Debian GNU/Linux
7(64-bit)","bootArgs":" vpccidr=10.201.0.0/16domain=cs7cloud.internal
dns1=8.8.8.8 template=domP name=r-43-VM eth0ip=169.254.1.131
eth0mask=255.255.0.0 type=vpcrouter
disable_rp_filter=true","rebootOnCrash":false,"enableHA":true,"limitCp
uUse":false,"enableDynamicallyScaleVm":false,"vncPassword":"21a870dc77
23830","vncAddr":"172.20.210.7","params":{},"uuid":"05b714cf-a511-42d9
-b24a-6d077342865f","disks":[{"data":{"org.apache.cloudstack.storage.t
o.VolumeObjectTO":{"uuid":"b61da4e1-121e-4e02-b345-35719deec994","volu
meType":"ROOT","dataStore":{"org.apache.cloudstack.storage.to.PrimaryD
ataStoreTO":{"uuid":"90ffa1df-e8bd-3e46-893d-bb9b63e0b180","id":2,"poo
lType":"NetworkFilesystem","host":"172.20.105.2","path":"/export/prave
en/csprimary","port":2049,"url":"NetworkFilesystem://
172.20.105.2//export/praveen/csprimary/?ROLE=Primary&STOREUUID=90ffa1d
f-e8bd-3e46-893d-bb9b63e0b180"}},"name":"ROOT-43","size":2621440000,"p
ath":"b61da4e1-121e-4e02-b345-35719deec994","volumeId":46,"vmName":"r-
43-VM","accountId":7,"format":"QCOW2","id":46,"deviceId":0,"hypervisor
Type":"KVM"}},"diskSeq":0,"path":"b61da4e1-121e-4e02-b345-35719deec994
","type":"ROOT","_details":{"managed":"false","storagePort":"2049","st
orageHost":"172.20.105.2","volumeSize":"2621440000"}}],"nics":[{"devic
eId":0,"networkRateMbps":-1,"defaultNic":false,"uuid":"2d4b2574-5e7d-4
5e7-bcbb-f64d1d9237c1","ip":"169.254.1.131","netmask":"255.255.0.0","g
ateway":"169.254.0.1","mac":"0e:00:a9:fe:01:83","broadcastType":"LinkL
ocal","type":"Control","isSecurityGroupEnabled":false}]},"result":true
,"wait":0}},{"com.cloud.agent.api.check.CheckSshAnswer":{"result":true
,"wait":0}},{"com.cloud.agent.api.GetDomRVersionAnswer":{"templateVers
ion":"Cloudstack Release 4.3.0 (64-bit) Wed Jan 15 00:27:19 UTC
2014","scriptsVersion":"07277b52f67248060835ca19947016cf","result":tru
e,"details":"Cloudstack Release 4.3.0 (64-bit) Wed Jan 15 00:27:19 UTC
2014&07277b52f67248060835ca19947016cf","wait":0}},{"com.cloud.agent.ap
i.PlugNicAnswer":{"result":true,"details":"success","wait":0}},{"com.c
loud.agent.api.routing.IpAssocAnswer":{"results":["172.20.211.132 -
success"],"result":true,"wait":0}},{"com.cloud.agent.api.routing.SetSo
urceNatAnswer":{"result":true,"details":"success","wait":0}},{"com.clo
ud.agent.api.NetworkUsageAnswer":{"routerName":"r-43-VM","bytesSent":0
,"bytesReceived":0,"result":true,"wait":0}}] }

Regards,

Praveen Kumar

-----Original Message----- From: Geoff Higginbottom [mailto:geof...@
shapeblue.com] Sent: 02 April 2014 15:30 To: use...@cloudstack.apache.org
Subject: RE: VPN for VPC feature in 4.3

Praveen,

I can confirm that User VPN for VPC works just like the User VPN for a
normal VR, but looking at your output below, you are missing eth2

Regards

Geoff Higginbottom

D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581

geof...@shapeblue.com<mailto:geoff.higginbottom@shapeblue.c om>

-----Original Message-----

From: Praveen Buravilli [mailto:Prav...@citrix.com]

Sent: 02 April 2014 03:37

To: use...@cloudstack.apache.org<mailto:use...@cloudstack.apache.org>

Subject: VPN for VPC feature in 4.3

Hi,

I have noticed an issue in working with VPN for VPC which is a new feature
introduced in CloudStack 4.3("1.1.6 Remote Access VPN for VPC" section of
CloudStack 4.3 release notes).

Regular remote VPN for guest networks fine without any problem whereas, VPN
for VPN isn't working.

When I checked the VPC router, there is no IP address assigned to its
public Nic.

Has anyone noticed this behaviour? Does this seem like a bug? Any known
workaround available?

VPC router interface details:

=======================

root@r-38-VM:/etc/network# ifconfig -a

eth0 Link encap:Ethernet HWaddr 0e:00:a9:fe:00:7d

inet addr:169.254.0.125 Bcast:169.254.255.255 Mask:255.255.0.0

inet6 addr: fe80::c00:a9ff:fefe:7d/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:1478 errors:0 dropped:0 overruns:0 frame:0

TX packets:722 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:126628 (123.6 KiB) TX bytes:124068 (121.1 KiB)

eth1 Link encap:Ethernet HWaddr 06:59:68:00:00:1a

BROADCAST MULTICAST MTU:1500 Metric:1

RX packets:0 errors:0 dropped:0 overruns:0 frame:0

TX packets:0 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

lo Link encap:Local Loopback

inet addr:127.0.0.1 Mask:255.0.0.0

inet6 addr: ::1/128 Scope:Host

UP LOOPBACK RUNNING MTU:16436 Metric:1

RX packets:2 errors:0 dropped:0 overruns:0 frame:0

TX packets:2 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:0

RX bytes:214 (214.0 B) TX bytes:214 (214.0 B)

Thanks,

Praveen Kumar

Need Enterprise Grade Support for Apache CloudStack?

Our CloudStack Infrastructure Support<
http://shapeblue.com/cloudstack-infrastructure-support/> offers the best
24/7 SLA for CloudStack Environments.

Apache CloudStack Bootcamp training courses

**NEW!** CloudStack 4.2.1 training<
http://shapeblue.com/cloudstack-training/>

18th-19th February 2014, Brazil. Classroom<
http://shapeblue.com/cloudstack-training/>

17th-23rd March 2014, Region A. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>

24th-28th March 2014, Region B. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>

16th-20th June 2014, Region A. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>

23rd-27th June 2014, Region B. Instructor led, On-line<
http://shapeblue.com/cloudstack-training/>

This email and any attachments to it may be confidential and are intended
solely for the use of the individual to whom it is addressed. Any views or
opinions expressed are solely those of the author and do not necessarily
represent those of Shape Blue Ltd or related companies. If you are not the
intended recipient of this email, you must neither take any action based
upon its contents, nor copy or show it to anyone. Please contact the sender
if you believe you have received this email in error. Shape Blue Ltd is a
company incorporated in England & Wales. ShapeBlue Services India LLP is a
company incorporated in India and is operated under license from Shape Blue
Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
and is operated under license from Shape Blue Ltd. ShapeBlue is a
registered trademark.

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message