Re: CS4.02 KVM Advanced Network, VM instance can not access public IP. NAT(Source)

2013-05-21 Thread Jayapal Reddy Uradi
I think UI link is missed but it is fixed after that. Try to add rules using the API 'createEgressFirewallRule' Thanks, Jayapal On 22-May-2013, at 12:05 PM, wq meng wrote: > Hello Jayapal, > > > https://cwiki.apache.org/CLOUDSTACK/egress-firewall-rules-for-guest-network.html > > I have che

Re: CS4.02 KVM Advanced Network, VM instance can not access public IP. NAT(Source)

2013-05-21 Thread wq meng
Hello Jayapal, https://cwiki.apache.org/CLOUDSTACK/egress-firewall-rules-for-guest-network.html I have checked Network -> Guest Network (Name) -> I can not find out any Egress fire rule tab. Have I missed something? Thank you very much. On Wed, May 22, 2013 at 1:23 PM, Jayapal Reddy

Re: Juniper SRX Configuration

2013-05-21 Thread Venkata SwamyBabu Budumuru
currently we only support SourceNat Type : Per zone and in this case, you need to manually configure source NAT in case of per Zone source NAT. On 21-May-2013, at 11:56 PM, Francois Gaudreault wrote: > Jayapal, > > I added the SRX now, I can get the basic stuff working (private interface > c

Re: Juniper SRX Configuration

2013-05-21 Thread Jayapal Reddy Uradi
In network offering if you select ZONE wide source NAT then source rules are not configured by cloudstack. Admin/User has to manually select source NAT ip and configure the source NAT rules. When you configure firewall rules, firewall filter rules on srx get configured. Please try configuring t

Re: CS4.02 KVM Advanced Network, VM instance can not access public IP. NAT(Source)

2013-05-21 Thread Jayapal Reddy Uradi
Hi, Did you configure the egress firewall rules on the guest network ? You need to add egress rules to allow guest traffic. After adding egress rule it not works, please send router iptables rules. Thanks, Jayapal On 22-May-2013, at 4:10 AM, wq meng wrote: > Hello > > Anyone have faced this

Re: puppet integartion

2013-05-21 Thread David Nalley
On Tue, May 21, 2013 at 7:32 AM, Oliver Leach wrote: > 1.Can you tell me how the cloudstack and puppet communicate with each other. > > They don't - Cloudstack is an orchestration tool used to deploy > infrastructure and Puppet is a configuration management tool. The work in > tandem nicely toge

Re: cloudstack

2013-05-21 Thread Shanker Balan
On 22-May-2013, at 10:15 AM, Chitra Manjunath mailto:chitra_manjun...@infosys.com>> wrote: I will manage the virtual environment using cloudstack. If I integrate puppet with cloudstack, will I'm able to manage the physical environment? Puppet has very minimal support for physical devices. Can y

RE: cloudstack

2013-05-21 Thread Chitra Manjunath
I will manage the virtual environment using cloudstack. If I integrate puppet with cloudstack, will I'm able to manage the physical environment? -Original Message- From: Jerry Jiang [mailto:jerry.ji...@sjcloud.cn] Sent: Wednesday, May 22, 2013 6:21 AM To: users@cloudstack.apache.org Subj

RE: cloudstack

2013-05-21 Thread Jerry Jiang
Cloudstack is able to manage your virtual part of x86 assets in your datacenter, as you organize your x86 with any virtualization tech. You can also develop your own portal which includes x86 virtual part and non-x86 part, and even physical part. The portal may provides Unified view of all resou

CS4.02 KVM Advanced Network, VM instance can not access public IP. NAT(Source)

2013-05-21 Thread wq meng
Hello Anyone have faced this problem? CS4.02 KVM Advanced Network, VM instance can not access public IP. NAT(Source) That the VM instance running, but inside the VM instance, it is not possible to access outside. It can ping VMs each other, It can ping google.com in the* Virtual Router VM.

Re: Juniper SRX Configuration

2013-05-21 Thread Francois Gaudreault
Jayapal, I added the SRX now, I can get the basic stuff working (private interface created), but it looks like the source nat rules are not being created. Also, when I create firewall rules, they are not being created on the SRX. However, I can get the destination nat (port-forwarding) work

Re: [DISCUSS] EIP Enhancements FS & Design Document

2013-05-21 Thread Murali Reddy
On 20/05/13 11:31 PM, "Chip Childers" wrote: >On Mon, May 20, 2013 at 02:19:24PM +, Murali Reddy wrote: >> >> Swamy, >> >> As mentioned in my merge request [1], I have generalised this feature >>and >> tried to not enforce AWS EIP semantics. Please see the updated FS [2] >> >> [1] http://s

Re: cloudstack

2013-05-21 Thread Shanker Balan
On 21-May-2013, at 11:59 AM, Chitra Manjunath mailto:chitra_manjun...@infosys.com>> wrote: HI Cloudstack manages only virtual machines right.. but I have a cloud which contains both virtual machines and physical environments like storage, servers etc will I'm able to manage this kind of clou

RE: puppet integartion

2013-05-21 Thread Oliver Leach
1.Can you tell me how the cloudstack and puppet communicate with each other. They don't - Cloudstack is an orchestration tool used to deploy infrastructure and Puppet is a configuration management tool. The work in tandem nicely together. You could look at the chef cloudstack-knife plugin http

RE: puppet integartion

2013-05-21 Thread Chitra Manjunath
Thank you so much for your information.. I'm using cloudstack to manage both virtual and physical infrastructure. 1.Can you tell me how the cloudstack and puppet communicate with each other. 2. Is puppet has some built in scripts like to increase the storage of a physical machine or we need to

RE: puppet integartion

2013-05-21 Thread Oliver Leach
Wow - that is hard to say but yeah that is one way. What will you be using Cloudstack for? Will you be using it to offer a Cloud service offering for customers, or is it something that will be used internally to help manage your infrastructure? If security is a concern and you do not want your

RE: puppet integartion

2013-05-21 Thread Chitra Manjunath
Ya Thank you.. So I need to install puppet on the cloud stack(where the management server reside) and puppet master communicates to the physical host through agents which is installed on physical host.. Is it correct. -Original Message- From: Oliver Leach [mailto:oliver.le...@tataco

RE: puppet integartion

2013-05-21 Thread Oliver Leach
It kind of depends as there are a couple of different ways you can do this, but the answer is yes. You can use Cloudstack to deploy your virtual machines managed by a puppet infrastructure, then as long as that puppet master is able to communicate with your physical environment, then you should

VNC Security---Remote Authentication Vulnerability

2013-05-21 Thread Aslan Lin
Hi : I deploy CloudStack 4.0.2 following the install guide, and use KVM as the hypervisor, recently I get the secrity report which present the Remote authentication vulnerability on my kvm host. I think that may qemu build-in vnc server, I don't know how to fix this problem, does any one me

RE: puppet integartion

2013-05-21 Thread Chitra Manjunath
Will I able to manage the physical environments on cloud using cloudstack-puppet. -Original Message- From: Oliver Leach [mailto:oliver.le...@tatacommunications.com] Sent: Tuesday, May 21, 2013 2:21 PM To: users@cloudstack.apache.org Subject: RE: puppet integartion Here is my github rep

RE: puppet integartion

2013-05-21 Thread Oliver Leach
Here is my github repo which has some more info around how I used puppet and cloudstack. https://github.com/oliverleach/cloudstack-puppet Here is another one from Prasanna would is seen around the forums a fair bit. https://github.com/vogxn/puppet-cloudstack Depending what you would like to d

RE: puppet integartion

2013-05-21 Thread Geoff Higginbottom
Hi Chitra, Oliver Leach from Tata Communications gave a presentation at the last CloudStack European User Group meet-up on using Puppet with CloudStack, whilst its not a full how to manual, you might find it useful. You can find the content here http://www.shapeblue.com/2013/04/16/cloudstack-e