Hi Martin,
I checked my openssl connect output and my management server on port 8250 was
indeed returning valid certificates. On further investigation, when connections
to management server (NioServer, handled by Link class that reads
/etc/cloudstack/management/cloudmanagementserver.keystore) are received it uses
a keystore file (/etc/cloudstack/management/cloudmanagementserver.keystore).
Please check if that's valid, or backup your keystore file and do what Simon
has suggested.
For reference, here the output from my 4.9.0 mgmt server running on Ubuntu
14.04.4:
$ openssl s_client -tls1 -connect 192.168.1.11:8250
CONNECTED(00000003)
depth=0 C = Unknown, O = bluebox, OU = bluebox, CN = Cloudstack User
verify error:num=18:self signed certificate
verify return:1
depth=0 C = Unknown, O = bluebox, OU = bluebox, CN = Cloudstack User
verify return:1
---
Certificate chain
0 s:/C=Unknown/O=bluebox/OU=bluebox/CN=Cloudstack User
i:/C=Unknown/O=bluebox/OU=bluebox/CN=Cloudstack User
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIDPzCCAiegAwIBAgIEFHHX2DANBgkqhkiG9w0BAQsFADBQMRAwDgYDVQQGEwdV
bmtub3duMRAwDgYDVQQKEwdibHVlYm94MRAwDgYDVQQLEwdibHVlYm94MRgwFgYD
VQQDEw9DbG91ZHN0YWNrIFVzZXIwHhcNMTUwNTA2MTM0MjMzWhcNMjUwNTAzMTM0
MjMzWjBQMRAwDgYDVQQGEwdVbmtub3duMRAwDgYDVQQKEwdibHVlYm94MRAwDgYD
VQQLEwdibHVlYm94MRgwFgYDVQQDEw9DbG91ZHN0YWNrIFVzZXIwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0wN8kfOJMzwlbrOnBj/jjvjjIwDVpYLtH
WoKkNB+rzzKEUxaYwaQxe6E3M536ZuqcaJBIqcYPwTIkWyulvuHuJpSQak4VbuDV
f7dqt5RacLFT0jUciqTvL5QDCrk0uNugKkWgEvNtokVGSBwLPVEcdcGWpku1EpeH
vMYmpOkcWgbC8Z9D7QTlVw6oEWbPAtKr+gDrXdOFnpPPI45rteatIIgKm1Q6JjZM
qrUKfqt7s8ts6ZgdAN2WmtieSsnUX1su9SJMYg2J8LK7UJeGqiNtE+g944GPqtnW
aDldjharq54e79ug2ktxw29I3ulpRD/vgxwZmcPJrePUKwY91KEjAgMBAAGjITAf
MB0GA1UdDgQWBBSUJvLY8RL/1fTVqj1rT8136da4yzANBgkqhkiG9w0BAQsFAAOC
AQEAgDdFIgLvOH/UgRp2nnFUVcMp+uchSLj8CbCkukJBrUwrmJHp3Os+H1ggk8Vt
j3conj06zJBNN/E0J8pcpagE1aR+l4R8WxF3g/Oc7bNyrUlkGSQ82vavg9sEkwHY
eQY/4wj8CprICs9JilgZ6keeWNWgAW1goLZSzGVwz5eE0lPuc2Dg3laR5RsuTxie
dgQhpbOx3UZun+dhuP5NUHc+KWyrNvSZNN8FruO602KWZwm0Hndl7RVbkNEd0kxq
FhFK4Scc2HBrKMUrPTzO1nGCgR1gA015C2MFfmjeW49VTi95WnY8DDG2euUYAtpl
lLVuNxJxq7eDJfP/M9kxSIKgrQ==
-----END CERTIFICATE-----
subject=/C=Unknown/O=bluebox/OU=bluebox/CN=Cloudstack User
issuer=/C=Unknown/O=bluebox/OU=bluebox/CN=Cloudstack User
---
No client certificate CA names sent
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 1325 bytes and written 331 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1
Cipher : ECDHE-RSA-AES256-SHA
Session-ID: 57C08E5D841D9B74AB533A0000BDBE4275424640B5B7D1985D438B275598436F
Session-ID-ctx:
Master-Key:
E1DE7D7464766DCECD82088561A7D928519CA20BA91FDF4AA38BB2E51AB7C27D3F1ABA5788ADED2AD49FE8597EC4A344
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1472237149
Timeout : 7200 (sec)
Verify return code: 18 (self signed certificate)
---
Regards.
________________________________
From: martin kolly <[email protected]>
Sent: 26 August 2016 20:36:02
To: [email protected]
Subject: Re: CS 4.9 NIO Selector wait time PR-1601
good point, thanks Simon! with openssl we receive a response on port 8250.
# telnet 10.100.12.10 8250
Trying 10.100.12.10...
Connected to 10.100.12.10.
Escape character is '^]'.
Connection closed by foreign host.
# nc -zv 10.100.12.10 8250
Connection to 10.100.12.10 8250 port [tcp/*] succeeded!
# openssl s_client -tls1 -connect 10.100.12.10:8250
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1472223447
Timeout : 7200 (sec)
Verify return code: 0 (ok)
---
On 08/26/2016 04:49 PM, Simon Weller wrote:
> Martin,
>
>
> Are you able to actually telnet to 8250 from the host to the mgmt server?
>
>
> - Si
>
>
> ________________________________
> From: martin kolly <[email protected]>
> Sent: Friday, August 26, 2016 9:41 AM
> To: [email protected]
> Subject: Re: CS 4.9 NIO Selector wait time PR-1601
>
> Hi Rohit
>
> We highly appreciate your efforts! Unfortunately it still does not work.
> - ulimit is increased on mgmt server
> - jar file replaced
> - we confirm that cloudstack-agent 4.9.0 is installed
>
> MGMT Server
> # wget
> https://github.com/rhtyd/cloudstack/releases/download/4.9.0-nioinbound/cloud-utils-4.9.0.jar
> -O cloud-utils-4.9.0.jar.patch
> # md5sum cloud-utils-4.9.0.jar.patch
> c4496f42cc6741f562ac645c3a3d8a0c cloud-utils-4.9.0.jar.patch
> # md5sum
> /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-utils-4.9.0.jar
> c4496f42cc6741f562ac645c3a3d8a0c
> /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-utils-4.9.0.jar
>
> # ulimit -a
> core file size (blocks, -c) 0
> data seg size (kbytes, -d) unlimited
> scheduling priority (-e) 0
> file size (blocks, -f) unlimited
> pending signals (-i) 64109
> max locked memory (kbytes, -l) 64
> max memory size (kbytes, -m) unlimited
> open files (-n) 10240
> pipe size (512 bytes, -p) 8
> POSIX message queues (bytes, -q) 819200
> real-time priority (-r) 0
> stack size (kbytes, -s) 8192
> cpu time (seconds, -t) unlimited
> max user processes (-u) 64109
> virtual memory (kbytes, -v) unlimited
> file locks (-x) unlimited
>
> KVM Server
> # wget
> https://github.com/rhtyd/cloudstack/releases/download/4.9.0-nioinbound/cloud-utils-4.9.0.jar
> -O cloud-utils-4.9.0.jar.patch
> # md5sum cloud-utils-4.9.0.jar.patch
> c4496f42cc6741f562ac645c3a3d8a0c cloud-utils-4.9.0.jar.patch
> # md5sum /usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar
> c4496f42cc6741f562ac645c3a3d8a0c
> /usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar
>
> # apt-cache policy cloudstack-agent
> cloudstack-agent:
> Installed: 4.9.0
> Candidate: 4.9.0
> Version table:
> *** 4.9.0 0
> 500 http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/ ./
> Packages
> 100 /var/lib/dpkg/status
>
> The logs are attached. By the way: the error message "Caught the Exception in
> VmIpFetchTask" was already there with 4.8 release.
>
> Thanks
> Martin
>
> On 08/25/2016 07:44 PM, Rohit Yadav wrote:
>
> Hi Martin,
>
>
> Thanks for sharing. Alright, I'm not sure what's causing issue but based on
> the logs seems like only KVM agents are having issues while connecting to
> mgmt server as I don't see any Nio related exceptions in the management
> server logs.
>
>
> I could not see the cloudstack-agent version in the logs, I'm assuming that
> they were all upgraded to 4.9.0, and there are no conflicting jars at
> /usr/share/cloudstack-agent/lib.
>
>
> First, can you make sure mgmt server has enough ulimit. I found that
> Ubuntu/Debian's init.d script don't override this while CentOS initd/systemd
> script sets ulimit. On your mgmt server, edit
> /etc/init.d/cloudstack-management and add ulimit -n 10240 just before the
> mgmt server is started in the 'state' section (for me it was at around line
> #147 where it logs a message that it's starting the cloudstack-management
> server).
>
>
> Next, if this still does not solve the issue -- I created a special
> cloud-utils.jar for you that you need to place on your mgmt server and on the
> KVM agents and restart the mgmt server. This will increase verbosity of the
> error while reduce the Nio polling loop timeout (from 100ms to 10ms). On KVM
> agents, the error from the logs is that during SSL handshake inbound
> connection/stream gets closed, and we want to know the exception message.
> Please get the jar from here:
>
> https://github.com/rhtyd/cloudstack/releases/tag/4.9.0-nioinbound and place
> them at:
>
> /usr/share/cloudstack-agent/lib/ (on kvm host)
>
> /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/ (on mgmt server
> host)
>
>
> Let me know what worked for you, and if it still failed can you share the
> mgmt server and agent logs once again. Thanks.
>
>
> Regards.
>
> ________________________________
> From: martin kolly <[email protected]><mailto:[email protected]>
> Sent: 25 August 2016 20:50:08
> To: [email protected]<mailto:[email protected]>
> Subject: Re: CS 4.9 NIO Selector wait time PR-1601
>
> Hi Rohit
>
> We are running java version 1.7.0.111 on KVM and management server.
> mgmt# java -version
> java version "1.7.0_111"
> kvm# java -version
> java version "1.7.0_111"
>
> We get the same error message. Attached are the logs with TRACE enabled.
>
> "success consists of going from failure to failure without loss of
> enthusiasm."
>
> regards
> martin
>
> On 08/25/2016 02:02 PM, Rohit Yadav wrote:
>
> Hi Martin,
>
>
> Thanks for sharing, on the surface there does not seem to be any issue in
> configuration causing the failures. I'm personally running KVM and Ubuntu
> hosts based env without issues, I'm on Ubuntu 14.04.4 (Linux bluebox
> 3.16.0-45-generic #60~14.04.1-Ubuntu) and java 1.7.0_79. Can you try
> upgrading your JRE7 to latest (openjdk-7-jre, 7u111-2.6.7-0ubuntu0.14.04.3)
> on all mgmt server and kvm hosts?
>
>
> If upgrading your JRE does not help, can you increase the logging verbosity
> for both the agent and management server (in /etc/cloudstack/{agent,
> management} there would be a log4j file, edit that and replace DEBUG/INFO
> with TRACE for class/keys com.cloud and org.apache.cloudstack) and re-share
> logs when the failures occur? I want to see what additional information we
> can get from logs when it tries to connect to host 10.100.12.10 on port: 8250.
>
>
> Regards.
>
> ________________________________
> From: martin kolly
> <[email protected]><mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> Sent: 25 August 2016 17:11:06
> To:
> [email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> Subject: Re: CS 4.9 NIO Selector wait time PR-1601
>
>
> @Simon: We have one management server with local DB. KVMs connect
> directly to the management server without any security/loadbalancing
> device.
>
> Thanks
> Martin
>
> On 08/25/2016 12:41 PM, Simon Weller wrote:
>
>
> Martin,
>
> Can you provide more detail about your haproxy setup?
> Are you running it on separate servers, or on the management server itself?
>
> - Si
>
> Simon Weller/ENA
> (615) 312-6068
>
> [email protected]<mailto:[email protected]>
> www.shapeblue.com<http://www.shapeblue.com>
> 53 Chandos Place, Covent Garden, London WC2N 4HSUK
> @shapeblue
>
>
>
>
> -----Original Message-----
> From: martin kolly
> [[email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>]
> Received: Thursday, 25 Aug 2016, 5:04AM
> To: Rohit Yadav
> [[email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>];
>
> [email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
>
> [[email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>]
> Subject: Re: CS 4.9 NIO Selector wait time PR-1601
>
>
> thanks for your reply.
>
> This morning we repeated the upgrade process from 4.8 to 4.9 with the
> following repository:
> http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/.
> <http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/><http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/><http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/><http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/>
> Unfortunately we run into the same issue:
>
> /2016-08-25 09:49:00,660 INFO [utils.nio.NioClient] (main:null)
> (logid:) Connecting to 10.100.12.10:8250//
> //2016-08-25 09:49:00,668 WARN [utils.nio.Link] (main:null) (logid:)
> This SSL engine was forced to close inbound due to end of stream.//
> //2016-08-25 09:49:00,668 ERROR [utils.nio.NioClient] (main:null)
> (logid:) SSL Handshake failed while connecting to host: 10.100.12.10
> port: 8250//
> //2016-08-25 09:49:00,668 ERROR [utils.nio.NioConnection] (main:null)
> (logid:) Unable to initialize the threads.//
> //java.io.IOException: SSL Handshake failed while connecting to host:
> 10.100.12.10 port: 8250//
> // at com.cloud.utils.nio.NioClient.init(NioClient.java:67)//
> // at com.cloud.utils.nio.NioConnection.start(NioConnection.java:88)//
> // at com.cloud.agent.Agent.start(Agent.java:237)//
> // at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:399)//
> // at
> com.cloud.agent.AgentShell.launchAgentFromClassInfo(AgentShell.java:367)//
> // at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:351)//
> // at com.cloud.agent.AgentShell.start(AgentShell.java:456)//
> // at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)//
> // at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)//
> // at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)//
> // at java.lang.reflect.Method.invoke(Method.java:606)//
> // at
> org.apache.commons.daemon.support.DaemonLoader.start(DaemonLoader.java:243)//
> //2016-08-25 09:49:00,669 INFO [utils.exception.CSExceptionErrorCode]
> (main:null) (logid:) Could not find exception:
> com.cloud.utils.exception.NioConnectionException in error code list for
> exceptions//
> //2016-08-25 09:49:00,669 WARN [cloud.agent.Agent] (main:null) (logid:)
> NIO Connection Exception
> com.cloud.utils.exception.NioConnectionException: SSL Handshake failed
> while connecting to host: 10.100.12.10 port: 8250//
> //2016-08-25 09:49:00,670 INFO [cloud.agent.Agent] (main:null) (logid:)
> Attempted to connect to the server, but received an unexpected
> exception, trying again.../
>
> *KVM Hosts:
> */# java -version
> java version "1.7.0_95"
> OpenJDK Runtime Environment (IcedTea 2.6.4) (7u95-2.6.4-0ubuntu0.14.04.1)
> OpenJDK 64-Bit Server VM (build 24.95-b01, mixed mode)
>
> # dpkg --get-selections | grep -e 'jdk' -e 'java'
> ca-certificates-java install
> java-common install
> libcommons-daemon-java install
> openjdk-7-jre-headless:amd64 install
> tzdata-java install
>
> # apt-cache policy cloudstack-agent
> cloudstack-agent:
> Installed: 4.9.0
> Candidate: 4.9.0
> Version table:
> *** 4.9.0 0
> 500
> http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/ ./ Packages
> 100 /var/lib/dpkg/status
>
> # find /usr/share/ -name "cloud-utils*.jar"
> /usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar
> # md5sum /usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar
> a8de7306d7c80b5a73e93b83afdd119f
> /usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar
>
>
> /*Management Server:
> */# java -version//
> //java version "1.7.0_95"//
> //OpenJDK Runtime Environment (IcedTea 2.6.4)
> (7u95-2.6.4-0ubuntu0.14.04.1)//
> //OpenJDK 64-Bit Server VM (build 24.95-b01, mixed mode)//
> //
> //# dpkg --get-selections | grep -e 'jdk' -e 'java'//
> //ca-certificates-java install//
> //java-common install//
> //libcommons-collections3-java install//
> //libcommons-daemon-java install//
> //libcommons-dbcp-java install//
> //libcommons-pool-java install//
> //libecj-java install//
> //libgeronimo-jta-1.1-spec-java install//
> //libmysql-java install//
> //libservlet2.5-java install//
> //libtomcat6-java install//
> //openjdk-7-jre-headless:amd64 install//
> //tzdata-java install//
> //
> //# apt-cache policy cloudstack-management//
> //cloudstack-management://
> // Installed: 4.9.0//
> // Candidate: 4.9.0//
> // Version table://
> // *** 4.9.0 0//
> // 500
> http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/ ./ Packages//
> // 100 /var/lib/dpkg/status///
>
> /# find /usr/share/ -name "cloud-utils*.jar"//
> ///usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-utils-4.9.0.jar//
> ///usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar//
> ///usr/share/cloudstack-usage/lib/cloud-utils-4.9.0.jar//
> //# md5sum
> /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-utils-4.9.0.jar//
> //a8de7306d7c80b5a73e93b83afdd119f
> /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-utils-4.9.0.jar//
> //# md5sum /usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar//
> //a8de7306d7c80b5a73e93b83afdd119f
> /usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar//
> //# md5sum /usr/share/cloudstack-usage/lib/cloud-utils-4.9.0.jar//
> //a8de7306d7c80b5a73e93b83afdd119f
> /usr/share/cloudstack-usage/lib/cloud-utils-4.9.0.jar/
>
> The classpath.conf was not modified:
> /# cat /etc/cloudstack/management/classpath.conf
> #!/bin/bash
> #...
>
> SYSTEMJARS=""
> SCP=$(build-classpath $SYSTEMJARS 2>/dev/null) ; if [ $? != 0 ] ; then
> export SCP="" ; fi
> MCP=""
> DCP="/usr/share/tomcat6/bin/bootstrap.jar:/usr/share/tomcat6/bin/tomcat-juli.jar"
> CLASSPATH=$SCP:$DCP:$MCP:/etc/cloudstack/management:/usr/share/cloudstack-management/setup
> for jarfile in ""/* ; do
> if [ ! -e "$jarfile" ] ; then continue ; fi
> CLASSPATH=$jarfile:$CLASSPATH
> done
> for plugin in ""/* ; do
> if [ ! -e "$plugin" ] ; then continue ; fi
> CLASSPATH=$plugin:$CLASSPATH
> done
> for vendorconf in "/etc/cloudstack/management"/vendor/* ; do
> if [ ! -d "$vendorconf" ] ; then continue ; fi
> CLASSPATH=$vendorconf:$CLASSPATH
> done
> export CLASSPATH
> if ([ -z "$JAVA_HOME" ] || [ ! -d "$JAVA_HOME" ]) && [ -d
> /usr/lib/jvm/jre-1.7.0 ]; then
> export JAVA_HOME=/usr/lib/jvm/jre-1.7.0
> fi
> PATH=$JAVA_HOME/bin:/sbin:/usr/sbin:$PATH
> export PATH/
>
> Regards
> Martin
>
> On 08/24/2016 06:56 PM, Rohit Yadav wrote:
>
>
> Martin,
>
>
> Were you able to fix your issue after installing packages from the
> repo Will shared and restarting the services?
>
> I've not personally tested the apt-get.eu repo, but I had earlier
> built this repo which I'm personally using in my local KVM-trusty
> based cloud: http://packages.shapeblue.com/cloudstack/upstream/debian/4.9/
>
>
> If you're still getting the error, can you share the JRE version
> you're running, both on the mgmt server and on the KVM hosts? You can
> run java -version, or share output of "dpkg --get-selections | grep -e
> 'jdk' -e 'java'". Are you running CloudStack with any additional plugins?
>
> From the logs, looks like there are mixed jar files,
> NioConnectionException class was not found -- something's wrong with
> your installation. there must be a cloud-utils jar file make sure your
> installation don't have multiple copies/versions of jars
> (somewhere) in the in /usr/share/cloudstack-common and in
> /usr/share/cloudstack-management/webapps/client/ paths:
>
> Could not find exception:
> com.cloud.utils.exception.NioConnectionException in error code list for
> exceptions
> The error "Unable to initialize the threads." suggests, JVM was not
> able to spawn threads. I would like to know your JRE version and any
> other settings configured in /etc/cloudstack/management/classpath.conf
> (and there are bunch of other files where JAVA_OPTS might have been
> overridden). Note: For now you should only be using JRE1.7.
>
>
> Regards.
>
> [email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> www.shapeblue.com<http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com>
> @shapeblue
>
>
>
>
> ------------------------------------------------------------------------
> *From:* martin kolly
> <[email protected]><mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> *Sent:* 24 August 2016 19:53:26
> *To:*
> [email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>;
> Rohit Yadav
> *Subject:* Re: CS 4.9 NIO Selector wait time PR-1601
>
> Thanks Will!
>
> yes the repo is pointing to 4.9 release for all KVMs and for the
> management server:
> /cloudstack:~# cat /etc/apt/sources.list.d/cloudstack.list //
> //deb http://cloudstack.apt-get.eu/ubuntu trusty 4.9/
>
> All KVM agents and the mgmt server are upgraded to release 4.9 based
> on the documentation.We have restarted all the cloudstack-agents and
> the cloudstack-management service as well.
>
> Network traces are showing packets from KVM <-> Mgmt on port 8250.
> there is no security device in between.
>
> thanks
> fanfarlo
>
>
>
>
> On 08/24/2016 04:13 PM, Will Stevens wrote:
>
>
> @rohit, I am guessing they should be installing the cloudstack-agent using
> the following repo right? That is what is described in the upgrade (trusty
> instead of precise though).
>
> http://cloudstack.apt-get.eu/ubuntu/dists/trusty/4.9/
>
> @fanfarlo, are your repo's setup to point to the new 4.9 version?
>
> cheers,
>
> will
>
> On Wed, Aug 24, 2016 at 9:46 AM, Rohit Yadav
> <[email protected]><mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> wrote:
>
>
>
> The PR and fix already exists in 4.9.0 release. Please make sure to
> upgrade all of your management server(s) and KVM agents and then also
> restart them after the upgrade.
>
>
> If you are seeing SSL handshake failures, it could be due to network or
> security issue and most likely due to mismatch between CloudStack mgmt
> server and KVM agent version.
>
>
> Regards.
>
> [email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> www.shapeblue.com<http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com>
> @shapeblue
>
>
>
> ------------------------------
> *From:* Will Stevens
> <[email protected]><mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> *Sent:* 24 August 2016 18:17:17
> *To:*
> [email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>;
> Rohit Yadav
> *Subject:* Re: CS 4.9 NIO Selector wait time PR-1601
>
>
> That PR is already merged, so you don't have to do anything to get that
> code, you already have it.
>
> @rohit, can you review this? I think this is a similar to the issue Simon
> reported earlier.
>
> Will
>
> On Aug 24, 2016 6:56 AM, "fanfarlo"
> <[email protected]><mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> wrote:
>
>
>
> hi all
>
> We have the following environment:
> - OS: Debian 14.04 (hypervisors and management)
> - 4 KVM Hosts
> - Cloudstack Release 4.9 with local database
>
> Since we upgraded to Release 4.9 the KVM hosts no longer connect to the
> management Server. Upgrade procedure was followed as described:
> http://docs.cloudstack.apache.org/projects/cloudstack-releas
> e-notes/en/4.9.0/upgrade/upgrade-4.8.html
>
>
> On the KVM hosts we have the following error message:
> /2016-08-24 10:42:49,678 INFO [utils.exception.CSExceptionErrorCode]
> (main:null) (logid:) Could not find exception:
> com.cloud.utils.exception.NioConnectionException in error code list for
> exceptions
> 2016-08-24 10:42:49,678 WARN [cloud.agent.Agent] (main:null) (logid:)
> NIO Connection Exception
> com.cloud.utils.exception.NioConnectionException: SSL Handshake failed
> while connecting to host: 10.100.12.10 port: 8250
> 2016-08-24 10:42:49,678 INFO [cloud.agent.Agent] (main:null) (logid:)
> Attempted to connect to the server, but received an unexpected
> exception, trying again...
> 2016-08-24 10:42:54,679 INFO [utils.nio.NioClient] (main:null) (logid:)
> Connecting to 10.100.12.10:8250
> 2016-08-24 10:42:54,684 WARN [utils.nio.Link] (main:null) (logid:) This
> SSL engine was forced to close inbound due to end of stream.
> 2016-08-24 10:42:54,684 ERROR [utils.nio.NioClient] (main:null) (logid:)
> SSL Handshake failed while connecting to host: 10.100.12.10 port: 8250
> 2016-08-24 10:42:54,685 ERROR [utils.nio.NioConnection] (main:null)
> (logid:) Unable to initialize the threads.
> java.io.IOException: SSL Handshake failed while connecting to host:
> 10.100.12.10 port: 8250
> at com.cloud.utils.nio.NioClient.init(NioClient.java:67)
> at com.cloud.utils.nio.NioConnection.start(NioConnection.java:88)
> at com.cloud.agent.Agent.start(Agent.java:237)
> at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:399)
> at
> com.cloud.agent.AgentShell.launchAgentFromClassInfo(AgentShell.java:367)
> at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:351)
> at com.cloud.agent.AgentShell.start(AgentShell.java:456)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAcce
> ssorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMe
> thodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> org.apache.commons.daemon.support.DaemonLoader.start(DaemonL
> oader.java:243)
> 2016-08-24 10:42:54,685 INFO [utils.exception.CSExceptionErrorCode]
> (main:null) (logid:) Could not find exception:
> com.cloud.utils.exception.NioConnectionException in error code list for
> exceptions
> 2016-08-24 10:42:54,685 WARN [cloud.agent.Agent] (main:null) (logid:)
> NIO Connection Exception
> com.cloud.utils.exception.NioConnectionException: SSL Handshake failed
> while connecting to host: 10.100.12.10 port: 8250
> 2016-08-24 10:42:54,686 INFO [cloud.agent.Agent] (main:null) (logid:)
> Attempted to connect to the server, but received an unexpected
> exception, trying again.../
>
>
> Port is open on the management server, there is no firewall in between.
> We found that there was a bug report here:
> https://issues.apache.org/jira/browse/CLOUDSTACK-9348. There is a PR
> changing the NIO Selector wait time:
> https://github.com/apache/cloudstack/pull/1601 which was merged into
> master branch.
>
> Since we installed Release 4.9 we probably need to patch the
> NioConection.class as described in PR1601 , right?
>
> kvm03# unzip -v /usr/share/cloudstack-agent/lib/cloud-utils-4.9.0.jar |
> grep NioConnection
> 3923 Defl:N 1778 55% 2016-08-02 09:28 05aaf7d5
> com/cloud/utils/nio/NioConnection$1.class
> 881 Defl:N 495 44% 2016-08-02 09:28 e378984c
> com/cloud/utils/nio/NioConnection$ChangeRequest.class
> 15410 Defl:N 7130 54% 2016-08-02 09:28 b3281f5a
> com/cloud/utils/nio/NioConnection.class
> 1134 Defl:N 584 49% 2016-08-02 09:28 8d5cb4a8
> com/cloud/utils/exception/NioConnectionException.class
>
> Due to a lack of java expertise we have some basic questions:
> - Is there a patched jar file available ? public build server?
> - Do we need to create the jar from sources ? procedure?
> - How do we apply the patch ?
>
> many thanks!
> fanfarlo
>
>
>
>
>
>
>
>
> [email protected]<mailto:[email protected]><mailto:[email protected]><mailto:[email protected]>
> www.shapeblue.com<http://www.shapeblue.com><http://www.shapeblue.com><http://www.shapeblue.com>
> 53 Chandos Place, Covent Garden, London WC2N 4HSUK
> @shapeblue
>
>
>
>
>
>
>
>
>
>
[email protected]
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK
@shapeblue
