kvm host gets wrong IP address in host= at agent.properties

2021-09-28 Thread jay hs
Hi all:
I must be doing something wrong.
I am installing 4.15 from the apt repositories on ubuntu 16.04
deb http://download.cloudstack.org/ubuntu xenial 4.15

Everything goes grandly, except that when cloudstack-agent starts up, it puts a 
seemingly random IP address (from the correct subnet) in host= at 
agent.properties.

It should be 
host=172.16.10.2
but it picks up
host=172.16.10.246@static

Evidently, it passes this *.246 value on to the ssvm -- which makes it very mad.

I've redone my management server and first kvm host a second time, and it got 
*.234 instead of *.246.

I am doing these on a test network that is NATed off from the main network.  
That NAT network did have its own DHCP active.  I've switched that off -- and 
will do another try (tomorrow).  

But does this sound like I've got a configuration missing -- or am I picking up 
a bum copy of the cloudstack-agent from the repo?  or... ideas?

thanks.
--jay


Re: Unable to read/process CSR: Command failed due to Exception: java.lang.Exception

2021-09-28 Thread Daan Hoogland
Christian, did you solve this (i just encountered your mail and see it is
yet unanswered)
the problem is with the certificate generation, it seems to try and
generate from an empty string (the csr/certificate signing request)
Not being able to sign in to the SVM is a problem but on vmware you would
use a specific command as described in [1]. Did you try `ssh -i
/opt/xensource/bin/id_rsa --p 3922 root@privateIP 
OfTheHost`?

[1]
https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting

On Thu, Sep 23, 2021 at 11:31 AM  wrote:

> Hello,
>
>
>
>I'm not sure why I get this error (added new vmware zone), there are
> not permission issues for systemvms folder, and I do not see any error
> above
> this. If I try to login to login into SSVM/Proxy console via cloudstack
> management, I get this access denied.
>
>
>
>Any suggestion?
>
>
>
>
>
>
>
>
>
> 021-09-23 05:22:15,012 ERROR [c.c.u.s.SshHelper]
> (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host, job-34950/job-34972,
> cmd: SetupKeyStoreCommand) (logid:f3cd2252) Failed to authentication SSH
> user root on host 10.15.0.160
>
> 2021-09-23 05:22:15,012 INFO  [c.c.h.v.u.VmwareHelper]
> (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host, job-34950/job-34972,
> cmd: SetupKeyStoreCommand) (logid:f3cd2252) [ignored]failed to get message
> for exception: Failed to authentication SSH user root on host 10.15.0.160
>
> 2021-09-23 05:22:15,012 ERROR [c.c.h.v.r.VmwareResource]
> (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host, job-34950/job-34972,
> cmd: SetupKeyStoreCommand) (logid:f3cd2252) Command failed due to
> Exception:
> java.lang.Exception
>
> Message: Failed to authentication SSH user root on host 10.15.0.160
>
>
>
> 2021-09-23 05:22:15,012 DEBUG [c.c.h.v.r.VmwareResource]
> (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host, job-34950/job-34972,
> cmd: SetupKeyStoreCommand) (logid:f3cd2252) keystore-setup execution
> result:
> false
>
> 2021-09-23 05:22:15,014 DEBUG [c.c.a.m.DirectAgentAttache]
> (DirectAgent-283:ctx-b1e493bd) (logid:f3cd2252) Seq 40-1394708509601300577:
> Response Received:
>
> 2021-09-23 05:22:15,016 DEBUG [c.c.a.t.Request]
> (DirectAgent-283:ctx-b1e493bd) (logid:f3cd2252) Seq 40-1394708509601300577:
> Processing:  { Ans: , MgmtId: 345049356158, via: 40(lnd-uk-001.shape.host),
> Ver: v1, Flags: 10,
> [{"org.apache.cloudstack.ca
> .SetupKeystoreAnswer":{"result":"true","wait":"0"
> ,"bypassHostMaintenance":"false"}}] }
>
> 2021-09-23 05:22:15,016 DEBUG [c.c.a.t.Request]
> (Work-Job-Executor-14:ctx-10c822ed job-34950/job-34972 ctx-67aa0df0)
> (logid:f3cd2252) Seq 40-1394708509601300577: Received:  { Ans: , MgmtId:
> 345049356158, via: 40(lnd-uk-001.test.host), Ver: v1, Flags: 10, {
> SetupKeystoreAnswer } }
>
> 2021-09-23 05:22:15,022 ERROR [c.c.v.VirtualMachineManagerImpl]
> (Work-Job-Executor-14:ctx-10c822ed job-34950/job-34972 ctx-67aa0df0)
> (logid:f3cd2252) Retrying after catching exception while trying to secure
> agent for systemvm id=1955
>
> com.cloud.utils.exception.CloudRuntimeException: Unable to read/process
> CSR:
> Command failed due to Exception: java.lang.Exception
>
> Message: Failed to authentication SSH user root on host 10.15.0.160
>
>
>
> at
> org.apache.cloudstack.ca
> .provider.RootCAProvider.generateCertificateUsingCsr
> (RootCAProvider.java:170)
>
> at
> org.apache.cloudstack.ca
> .provider.RootCAProvider.issueCertificate(RootCAProv
> ider.java:230)
>
> at
> org.apache.cloudstack.ca
> .CAManagerImpl.issueCertificate(CAManagerImpl.java:1
> 64)
>
> at jdk.internal.reflect.GeneratedMethodAccessor318.invoke(Unknown
> Source)
>
> at
>
> java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Delegatin
> gMethodAccessorImpl.java:43)
>
> at java.base/java.lang.reflect.Method.invoke(Method.java:566)
>
> at
>
> org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopU
> tils.java:344)
>
> at
>
> org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint
> (ReflectiveMethodInvocation.java:198)
>
> at
>
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(Reflect
> iveMethodInvocation.java:163)
>
> at
>
> org.apache.cloudstack.network.contrail.management.EventUtils$EventIntercepto
> r.invoke(EventUtils.java:107)
>
> at
>
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(Reflect
> iveMethodInvocation.java:175)
>
> at
>
> com.cloud.event.ActionEventInterceptor.invoke(ActionEventInterceptor.java:51
> )
>
> at
>
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(Reflect
> iveMethodInvocation.java:175)
>
> at
>
> org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(Expos
> eInvocationInterceptor.java:97)
>
> at
>
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(Reflect
> iveMethodInvocation.java:186

Re: kvm host gets wrong IP address in host= at agent.properties

2021-09-28 Thread Daan Hoogland
Jay, is this after you added the host to cloudstack or before?

On Tue, Sep 28, 2021 at 9:02 AM jay hs  wrote:

> Hi all:
> I must be doing something wrong.
> I am installing 4.15 from the apt repositories on ubuntu 16.04
> deb http://download.cloudstack.org/ubuntu xenial 4.15
>
> Everything goes grandly, except that when cloudstack-agent starts up, it
> puts a seemingly random IP address (from the correct subnet) in host= at
> agent.properties.
>
> It should be
> host=172.16.10.2
> but it picks up
> host=172.16.10.246@static
>
> Evidently, it passes this *.246 value on to the ssvm -- which makes it
> very mad.
>
> I've redone my management server and first kvm host a second time, and it
> got *.234 instead of *.246.
>
> I am doing these on a test network that is NATed off from the main
> network.  That NAT network did have its own DHCP active.  I've switched
> that off -- and will do another try (tomorrow).
>
> But does this sound like I've got a configuration missing -- or am I
> picking up a bum copy of the cloudstack-agent from the repo?  or... ideas?
>
> thanks.
> --jay
>


-- 
Daan


Re: kvm host gets wrong IP address in host= at agent.properties

2021-09-28 Thread Wei ZHOU
Hi Jay,

Please note that `host` is the IP of the cloudstack management server, not
the IP of the kvm host.

If it is wrong, you can change agent.properties manually and restart
cloudstack-agent.

Please also check `host` in the cloustack global settings.

-Wei





On Tue, 28 Sept 2021 at 09:02, jay hs  wrote:

> Hi all:
> I must be doing something wrong.
> I am installing 4.15 from the apt repositories on ubuntu 16.04
> deb http://download.cloudstack.org/ubuntu xenial 4.15
>
> Everything goes grandly, except that when cloudstack-agent starts up, it
> puts a seemingly random IP address (from the correct subnet) in host= at
> agent.properties.
>
> It should be
> host=172.16.10.2
> but it picks up
> host=172.16.10.246@static
>
> Evidently, it passes this *.246 value on to the ssvm -- which makes it
> very mad.
>
> I've redone my management server and first kvm host a second time, and it
> got *.234 instead of *.246.
>
> I am doing these on a test network that is NATed off from the main
> network.  That NAT network did have its own DHCP active.  I've switched
> that off -- and will do another try (tomorrow).
>
> But does this sound like I've got a configuration missing -- or am I
> picking up a bum copy of the cloudstack-agent from the repo?  or... ideas?
>
> thanks.
> --jay
>


Re: kvm host gets wrong IP address in host= at agent.properties

2021-09-28 Thread vas...@gmx.de
Hi Jay, i would suggest the following approach:
- set IPs manually for the all hosts you wont't to use OR use a different
dhcp server (not the Cloudstack Managementserver) and work with static
leases for the hosts
- only the system vm's (instances of systemvm's, console proxys and later
on virtural routers) using dhcp
- while creating the zone, you then double check that you didn't use the
whole managametn ip range in dhcp. You can specify parts of your management
network for ip leaese - not the whole network.
   For example when using the wizzard and enter the informations for your
"Pod Network"
  Name: Pod 1
  Reserved System Gateway: Address of your Gateway
  Reserved System Netmask: Subnetmask of the whole Pod-Network
  Start / End IP Reserved System IP: IP Range used for leases to the
system vms's - not the whole pod / management network





Am Di., 28. Sept. 2021 um 08:16 Uhr schrieb jay hs <
jhahn-steic...@whatcom.edu>:

> Hi all:
> I must be doing something wrong.
> I am installing 4.15 from the apt repositories on ubuntu 16.04
> deb http://download.cloudstack.org/ubuntu xenial 4.15
>
> Everything goes grandly, except that when cloudstack-agent starts up, it
> puts a seemingly random IP address (from the correct subnet) in host= at
> agent.properties.
>
> It should be
> host=172.16.10.2
> but it picks up
> host=172.16.10.246@static
>
> Evidently, it passes this *.246 value on to the ssvm -- which makes it
> very mad.
>
> I've redone my management server and first kvm host a second time, and it
> got *.234 instead of *.246.
>
> I am doing these on a test network that is NATed off from the main
> network.  That NAT network did have its own DHCP active.  I've switched
> that off -- and will do another try (tomorrow).
>
> But does this sound like I've got a configuration missing -- or am I
> picking up a bum copy of the cloudstack-agent from the repo?  or... ideas?
>
> thanks.
> --jay
>


RE: Unable to read/process CSR: Command failed due to Exception: java.lang.Exception

2021-09-28 Thread cristian.c
Hi,

We already tested in all the ways is possible, this problem is related to 
these specific servers, 100%.

   The last test we did, was to add the ESXI server to the zone we already have 
and works, we disabled all hosts from that zone and destroyed the SSVM to force 
a redeploy on this ESXI, of course, we have ended with the same error.

   I want to mention that we have the exact same ESXI version and hardware, for 
me looks like there is a BIOS/HW/DISK issue.


FYI:

   "I did this in 3 different new Setup (new Management install, NFS, etc), no 
matter if I add as first zone or second zone.

   " I have tested this with multiple Cloudstack versions, 4.15.0, 4.15.1,
4.15.2 and VMware, 6.5 and with 6.7 different patches and with the last 
patches.  I'm 100% that is related to these 2 servers, I do not understand what 
is wrong with these servers, this is the problem.  
 
We have 2 identical servers' hardware/ESXI, the only difference is the 
location, the not working, are in UK, and any other location we have, DE, NYC, 
FR, CA, etc. works fine. But we tested with the exact same servers which are 
from DE(Germany) works perfect, with any ACS or VMware version (also same CIDR 
range/size for public and private), when we test with UK, we get same error no 
matter what."

   I want to mention that we have these servers (UK, DE, FR, CA ) from OVH in 
vRack  and the UK, are not working.  ( I manage these server for more than 5 
years )"

Regards,
Cristian

-Original Message-
From: Daan Hoogland  
Sent: Tuesday, September 28, 2021 11:00 AM
To: users 
Subject: Re: Unable to read/process CSR: Command failed due to Exception: 
java.lang.Exception

Christian, did you solve this (i just encountered your mail and see it is yet 
unanswered) the problem is with the certificate generation, it seems to try and 
generate from an empty string (the csr/certificate signing request) Not being 
able to sign in to the SVM is a problem but on vmware you would use a specific 
command as described in [1]. Did you try `ssh -i /opt/xensource/bin/id_rsa --p 
3922 root@privateIP  OfTheHost`?

[1]
https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting

On Thu, Sep 23, 2021 at 11:31 AM  wrote:

> Hello,
>
>
>
>I'm not sure why I get this error (added new vmware zone), 
> there are not permission issues for systemvms folder, and I do not see 
> any error above this. If I try to login to login into SSVM/Proxy 
> console via cloudstack management, I get this access denied.
>
>
>
>Any suggestion?
>
>
>
>
>
>
>
>
>
> 021-09-23 05:22:15,012 ERROR [c.c.u.s.SshHelper] 
> (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host, 
> job-34950/job-34972,
> cmd: SetupKeyStoreCommand) (logid:f3cd2252) Failed to authentication 
> SSH user root on host 10.15.0.160
>
> 2021-09-23 05:22:15,012 INFO  [c.c.h.v.u.VmwareHelper] 
> (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host, 
> job-34950/job-34972,
> cmd: SetupKeyStoreCommand) (logid:f3cd2252) [ignored]failed to get 
> message for exception: Failed to authentication SSH user root on host 
> 10.15.0.160
>
> 2021-09-23 05:22:15,012 ERROR [c.c.h.v.r.VmwareResource] 
> (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host, 
> job-34950/job-34972,
> cmd: SetupKeyStoreCommand) (logid:f3cd2252) Command failed due to
> Exception:
> java.lang.Exception
>
> Message: Failed to authentication SSH user root on host 10.15.0.160
>
>
>
> 2021-09-23 05:22:15,012 DEBUG [c.c.h.v.r.VmwareResource] 
> (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host, 
> job-34950/job-34972,
> cmd: SetupKeyStoreCommand) (logid:f3cd2252) keystore-setup execution
> result:
> false
>
> 2021-09-23 05:22:15,014 DEBUG [c.c.a.m.DirectAgentAttache]
> (DirectAgent-283:ctx-b1e493bd) (logid:f3cd2252) Seq 40-1394708509601300577:
> Response Received:
>
> 2021-09-23 05:22:15,016 DEBUG [c.c.a.t.Request]
> (DirectAgent-283:ctx-b1e493bd) (logid:f3cd2252) Seq 40-1394708509601300577:
> Processing:  { Ans: , MgmtId: 345049356158, via: 
> 40(lnd-uk-001.shape.host),
> Ver: v1, Flags: 10,
> [{"org.apache.cloudstack.ca
> .SetupKeystoreAnswer":{"result":"true","wait":"0"
> ,"bypassHostMaintenance":"false"}}] }
>
> 2021-09-23 05:22:15,016 DEBUG [c.c.a.t.Request] 
> (Work-Job-Executor-14:ctx-10c822ed job-34950/job-34972 ctx-67aa0df0)
> (logid:f3cd2252) Seq 40-1394708509601300577: Received:  { Ans: , MgmtId:
> 345049356158, via: 40(lnd-uk-001.test.host), Ver: v1, Flags: 10, { 
> SetupKeystoreAnswer } }
>
> 2021-09-23 05:22:15,022 ERROR [c.c.v.VirtualMachineManagerImpl] 
> (Work-Job-Executor-14:ctx-10c822ed job-34950/job-34972 ctx-67aa0df0)
> (logid:f3cd2252) Retrying after catching exception while trying to 
> secure agent for systemvm id=1955
>
> com.cloud.utils.exception.CloudRuntimeException: Unable to 
> read/process
> CSR:
> Command failed due to Exception: java.lang.Exception
>
> Message: Failed to authentication SSH user root on host 10.15.0.160
>
>
>
> at
>

Re: Unable to read/process CSR: Command failed due to Exception: java.lang.Exception

2021-09-28 Thread Daan Hoogland
ok, than I would like to add an idea to your "it's the server". Not saying
you are wrong but location points to network i.e. firewall(s).
Hope you strike luck,

On Tue, Sep 28, 2021 at 10:58 AM  wrote:

> Hi,
>
> We already tested in all the ways is possible, this problem is related
> to these specific servers, 100%.
>
>The last test we did, was to add the ESXI server to the zone we already
> have and works, we disabled all hosts from that zone and destroyed the SSVM
> to force a redeploy on this ESXI, of course, we have ended with the same
> error.
>
>I want to mention that we have the exact same ESXI version and
> hardware, for me looks like there is a BIOS/HW/DISK issue.
>
>
> FYI:
>
>"I did this in 3 different new Setup (new Management install, NFS,
> etc), no matter if I add as first zone or second zone.
>
>" I have tested this with multiple Cloudstack versions, 4.15.0, 4.15.1,
> 4.15.2 and VMware, 6.5 and with 6.7 different patches and with the last
> patches.  I'm 100% that is related to these 2 servers, I do not understand
> what is wrong with these servers, this is the problem.
>
> We have 2 identical servers' hardware/ESXI, the only difference is the
> location, the not working, are in UK, and any other location we have, DE,
> NYC, FR, CA, etc. works fine. But we tested with the exact same servers
> which are from DE(Germany) works perfect, with any ACS or VMware version
> (also same CIDR range/size for public and private), when we test with UK,
> we get same error no matter what."
>
>I want to mention that we have these servers (UK, DE, FR, CA ) from OVH
> in vRack  and the UK, are not working.  ( I manage these server for more
> than 5 years )"
>
> Regards,
> Cristian
>
> -Original Message-
> From: Daan Hoogland 
> Sent: Tuesday, September 28, 2021 11:00 AM
> To: users 
> Subject: Re: Unable to read/process CSR: Command failed due to Exception:
> java.lang.Exception
>
> Christian, did you solve this (i just encountered your mail and see it is
> yet unanswered) the problem is with the certificate generation, it seems to
> try and generate from an empty string (the csr/certificate signing request)
> Not being able to sign in to the SVM is a problem but on vmware you would
> use a specific command as described in [1]. Did you try `ssh -i
> /opt/xensource/bin/id_rsa --p 3922 root@privateIP 
> OfTheHost`?
>
> [1]
>
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting
>
> On Thu, Sep 23, 2021 at 11:31 AM  wrote:
>
> > Hello,
> >
> >
> >
> >I'm not sure why I get this error (added new vmware zone),
> > there are not permission issues for systemvms folder, and I do not see
> > any error above this. If I try to login to login into SSVM/Proxy
> > console via cloudstack management, I get this access denied.
> >
> >
> >
> >Any suggestion?
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > 021-09-23 05:22:15,012 ERROR [c.c.u.s.SshHelper]
> > (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host,
> > job-34950/job-34972,
> > cmd: SetupKeyStoreCommand) (logid:f3cd2252) Failed to authentication
> > SSH user root on host 10.15.0.160
> >
> > 2021-09-23 05:22:15,012 INFO  [c.c.h.v.u.VmwareHelper]
> > (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host,
> > job-34950/job-34972,
> > cmd: SetupKeyStoreCommand) (logid:f3cd2252) [ignored]failed to get
> > message for exception: Failed to authentication SSH user root on host
> > 10.15.0.160
> >
> > 2021-09-23 05:22:15,012 ERROR [c.c.h.v.r.VmwareResource]
> > (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host,
> > job-34950/job-34972,
> > cmd: SetupKeyStoreCommand) (logid:f3cd2252) Command failed due to
> > Exception:
> > java.lang.Exception
> >
> > Message: Failed to authentication SSH user root on host 10.15.0.160
> >
> >
> >
> > 2021-09-23 05:22:15,012 DEBUG [c.c.h.v.r.VmwareResource]
> > (DirectAgent-283:ctx-b1e493bd lnd-uk-001.shape.host,
> > job-34950/job-34972,
> > cmd: SetupKeyStoreCommand) (logid:f3cd2252) keystore-setup execution
> > result:
> > false
> >
> > 2021-09-23 05:22:15,014 DEBUG [c.c.a.m.DirectAgentAttache]
> > (DirectAgent-283:ctx-b1e493bd) (logid:f3cd2252) Seq
> 40-1394708509601300577:
> > Response Received:
> >
> > 2021-09-23 05:22:15,016 DEBUG [c.c.a.t.Request]
> > (DirectAgent-283:ctx-b1e493bd) (logid:f3cd2252) Seq
> 40-1394708509601300577:
> > Processing:  { Ans: , MgmtId: 345049356158, via:
> > 40(lnd-uk-001.shape.host),
> > Ver: v1, Flags: 10,
> > [{"org.apache.cloudstack.ca
> > .SetupKeystoreAnswer":{"result":"true","wait":"0"
> > ,"bypassHostMaintenance":"false"}}] }
> >
> > 2021-09-23 05:22:15,016 DEBUG [c.c.a.t.Request]
> > (Work-Job-Executor-14:ctx-10c822ed job-34950/job-34972 ctx-67aa0df0)
> > (logid:f3cd2252) Seq 40-1394708509601300577: Received:  { Ans: , MgmtId:
> > 345049356158, via: 40(lnd-uk-001.test.host), Ver: v1, Flags: 10, {
> > SetupKeystoreAnswer } }
> >
> > 2021-09-23 05:22:15,022 ERROR [c.c.v.VirtualMachineManagerImpl]
> 

Re: RE: Recommendation for Storage.

2021-09-28 Thread Abishek
Thank You Alex for the information. I will take that into consideration.


On 2021/09/23 10:12:39, Alex Mattioli  wrote: 
> I second what he said, I've ran ACS zones with 60+ hypervisors and 2,000 VMs 
> from one single pair of storage servers delivering , all on NFS and no issues 
> at all.
> 
> Just be sure to select the right vendor and size it correctly.
> 
>  
> 
> 
> -Original Message-
> From: Ivan Kudryavtsev  
> Sent: 23 September 2021 11:02
> To: users 
> Subject: Re: Recommendation for Storage.
> 
> Abishek,
> 
> NFS over a bunch of drives works just fine but has no means for failover (out 
> of the box, when self-built). If your benchmark shows enough IO performance 
> per VM, then NFS is just the way to go.
> Keep in mind that NFS can have various backing store technologies like NetApp 
> appliances, Ceph, plain RAID volumes - it leads to different performance 
> levels and reliability guarantees. As for accessor, NFS is OK.
> 
> On Thu, Sep 23, 2021 at 3:56 PM Abishek  wrote:
> 
> > Hello Every One,
> >
> > We are planning to go into cloud production with cloudstack 4.15 and 
> > KVM host. We are currently considering nfs as storage because of the 
> > performance. Is it feasible to use NFS as primary storage type in 
> > production environment. Will there be any bottleneck of any offsets in 
> > future(if any one has deployed nfs as storage in production). Shall I 
> > prefer iscsi with NFS or any other storage type above NFS for 
> > production environment.
> >
> > Thank You.
> >
> 


Re: Recommendation for Storage.

2021-09-28 Thread Abishek
Thank You Ivan. I am very grateful for the response.

On 2021/09/23 09:01:42, Ivan Kudryavtsev  wrote: 
> Abishek,
> 
> NFS over a bunch of drives works just fine but has no means for failover
> (out of the box, when self-built). If your benchmark shows enough IO
> performance per VM, then NFS is just the way to go.
> Keep in mind that NFS can have various backing store technologies like
> NetApp appliances, Ceph, plain RAID volumes - it leads to different
> performance levels and reliability guarantees. As for accessor, NFS is OK.
> 
> On Thu, Sep 23, 2021 at 3:56 PM Abishek  wrote:
> 
> > Hello Every One,
> >
> > We are planning to go into cloud production with cloudstack 4.15 and KVM
> > host. We are currently considering nfs as storage because of the
> > performance. Is it feasible to use NFS as primary storage type in
> > production environment. Will there be any bottleneck of any offsets in
> > future(if any one has deployed nfs as storage in production). Shall I
> > prefer iscsi with NFS or any other storage type above NFS for production
> > environment.
> >
> > Thank You.
> >
> 


Re: Recommendation for Storage.

2021-09-28 Thread Wido den Hollander




Op 23-09-2021 om 12:18 schreef Mevludin Blazevic:

Hi all,

very interesting discussion here. I am facing the issue connecting my 
Ceph cluster with Cloudstack via the RBD protocol. It seems like there 
is either a documentation or software bug because we are running always 
in the same error (rbd pool not found). I was thinking about creating a 
NFS service on my Ceph cluster to connect it to Cloudstack because I 
know that adding an NFS server as primary storage works. My cluster is 
far smaller than yours but I am worry about performance and IOPS when 
using NFS service with Ceph.




That is weird though. Ceph+RBD should just work with CloudStack. Using 
this with tens of thousands of VMs.


NFS works fine as well. In our case we use TrueNAS M50 appliances in 
addition to Ceph for the use-cases where we need much lower latency.


Both function fine with KVM.

Wido


Mevludin

Am 23.09.2021 um 12:12 schrieb Alex Mattioli:
I second what he said, I've ran ACS zones with 60+ hypervisors and 
2,000 VMs from one single pair of storage servers delivering , all on 
NFS and no issues at all.


Just be sure to select the right vendor and size it correctly.



-Original Message-
From: Ivan Kudryavtsev 
Sent: 23 September 2021 11:02
To: users 
Subject: Re: Recommendation for Storage.

Abishek,

NFS over a bunch of drives works just fine but has no means for 
failover (out of the box, when self-built). If your benchmark shows 
enough IO performance per VM, then NFS is just the way to go.
Keep in mind that NFS can have various backing store technologies like 
NetApp appliances, Ceph, plain RAID volumes - it leads to different 
performance levels and reliability guarantees. As for accessor, NFS is 
OK.


On Thu, Sep 23, 2021 at 3:56 PM Abishek  wrote:


Hello Every One,

We are planning to go into cloud production with cloudstack 4.15 and
KVM host. We are currently considering nfs as storage because of the
performance. Is it feasible to use NFS as primary storage type in
production environment. Will there be any bottleneck of any offsets in
future(if any one has deployed nfs as storage in production). Shall I
prefer iscsi with NFS or any other storage type above NFS for
production environment.

Thank You.



KVM + iSCSI/FC

2021-09-28 Thread Дикевич Евгений Александрович
HI all!

I try to configure CloudStack with KVM hypervisor and SAN storage. I CAN'T use 
NFS for some reasons.
I have few questions:
1) Which is best solution to configure CS + KVM + SAN for newest CS versions 
(4.15.x)? In documentation I saw few possible solutions - CLVM, Shared 
Mountpoint and Gluster. Which of them is easiest for configure and have max 
performance for end users?
2) Maybe someone have actual manual or how-to for similar configuration?
I really need help with this problem:(
Best regards


Внимание!
Это электронное письмо и все прикрепленные к нему файлы являются 
конфиденциальными и предназначены исключительно для использования лицом 
(лицами), которому (которым) оно предназначено. Если Вы не являетесь лицом 
(лицами), которому (которым) предназначено это письмо, не копируйте и не 
разглашайте его содержимое и удалите это сообщение и все вложения из Вашей 
почтовой системы. Любое несанкционированное использование, распространение, 
раскрытие, печать или копирование этого электронного письма и прикрепленных к 
нему файлов, кроме как лицом (лицами) которому (которым) они предназначены, 
является незаконным и запрещено. Принимая во внимание, что передача данных 
посредством Интернет не является безопасной, мы не несем никакой 
ответственности за любой потенциальный ущерб, причиненный в результате ошибок 
при передаче данных или этим сообщением и прикрепленными к нему файлами.

Attention!
This email and all attachments to it are confidential and are intended solely 
for use by the person (or persons) referred to (mentioned) as the intended 
recipient (recipients). If you are not the intended recipient of this email, do 
not copy or disclose its contents and delete the message and any attachments to 
it from your e-mail system. Any unauthorized use, dissemination, disclosure, 
printing or copying of this e-mail and files attached to it, except by the 
intended recipient, is illegal and is prohibited. Taking into account that data 
transmission via Internet is not secure, we assume no responsibility for any 
potential damage caused by data transmission errors or this message and the 
files attached to it.


Virtual Router failing health check - webserver.service

2021-09-28 Thread vas...@gmx.de
 Hi everyone,

I am setting up a redundant VPC.
Therefore i created a custome service offering with the following Service
provided by the virtual Router:
- Portforwarding
- Network ACL
- SourceNAT
- VPN
- StaticNat

I now getting alerts, that the router couldn't pass all health checks. The
one failing at the moment is "webserver.service".
As far as i got reading the log files, the apache service on the router is
shutting down, as know valid / correct ssl - certificate is availeable.

So now i am looking for some support on how to get rid of the errors and
some information, why a webserver is running on the router?
I found some articel in the wiki about the integrated Load Balancer. But i
didn't have the service in the vpc service offering as well it wasn't
selected for the (custome) service offering for the tier-networks for the
vpc.

Hope someone can help me out!
Regards!