Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
Hello, Due to large size of management-server log i have uploaded the ziped file. kindly find following link for the same https://www.sendspace.com/file/yi48rz In addition i have also tried to add another xenserver pool with nfs as primary storage. NFS storage SR is getting mounted to xenserve

Re: security group and xenserver query

2014-11-26 Thread Jayapal Reddy Uradi
Please share full length of logs in pastebin.com to get the reason for failure of the systemvm. Along with the MS logs also check the host logs (/var/log/SMLog). Check systemvm.iso is present in the host. Thanks, Jayapal On 27-Nov-2014, at 11:49 AM, Tejas Sheth wrote: > Hello Guyz, > > W

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
Hello Guyz, We are facing issue starting system VM. deployment is in production so really need your help. following is the log entry for the error and detail of the issue is defiend in my previous mail trail. 2014-11-26 21:45:31,516 ERROR [c.c.v.VirtualMachineManagerImpl] (secstorage-1:ctx-676

Re: DNS search order

2014-11-26 Thread Kirk Kosinski
Hi, did you try updating a zone with the desired dnssearchorder to see if it works? If there is no such option in the UI, use the API with cloudmonkey or a similar tool. It might only get applied to new VRs so try creating a new network or destroying and recreating a VR for an existing network.

Re: The specified pod is in avoid set, returning

2014-11-26 Thread Kirk Kosinski
Hi, "avoid set" messages indicate some error occurred earlier in the job, so to find the real error you need to continue looking (i.e. scroll up in the log). I did this and found: 2014-11-26 16:14:47,834 DEBUG [c.c.a.t.Request] (AgentManager-Handler-11:null) Seq 33-995164179: Processing: { Ans:

Re: security group and xenserver query

2014-11-26 Thread Nux!
In my defence - after checking - I always relied on the UI (stupidly) and it will not offer the option to specify an account. So I assumed it's not possible ... :-( Using the API (via cloudmonkey) did the job. i.e. create network account=lucian domainid=0638fea4-2d33-11e4-8126-f2a3ece198a5 dis

CloudStack Job offering @exoscale

2014-11-26 Thread Coetsier, Antoine
Hello All, We are looking for a developer that already has some knowledge of CloudStack to join our team at Exoscale. Trendy topics about network functions/distributed LB in CS for this full time job. This is based in Switzerland of course. The job description is here: https://www.exoscale.ch/

Re: security group and xenserver query

2014-11-26 Thread Nux!
Geoff, Nooo... Wish I knew this a while ago. Darn it. :-) Anywho, better late than never. But nevertheless, VLAN allocation is not automatic like in plain Adv Zone, the root admin must do that manually. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www

Re: security group and xenserver query

2014-11-26 Thread Geoff Higginbottom
Sorry Nux, but YES there are Customer Specific VLANs in a Security Group enabled Advanced Zone. When you create an Advanced Zone with Security Groups you initially create a 'default guest network' and you allocate a VLAN and IP range to this network. This is then used by System VMs and can als

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
We have tried removing primary storage and re added to CS. It got added sucessfully. We have 2 xenserver cluster but in both cluster is behaving simillar way. We have updated xenserver 6.2 with all citrix recommend hotfixes. On Nov 26, 2014 11:13 PM, "Jayapal Reddy Uradi" < jayapalreddy.ur...@cit

Re: deleted host entries still exist in /etc/dhcphost.txt and /etc/hosts on VR

2014-11-26 Thread Yiping Zhang
Alright, just filed Jira issue CLOUDSTACK-7974: deleted host entries still exists in /etc/hosts and /etc/dhcphosts.txt files on virtual router Yiping On 11/24/14, 8:16 PM, "Sanjeev Neelarapu" wrote: >Hi Yiping, > >Host entries must be deleted from /etc/dhcphosts.txt and /etc/hosts file >aft

Re: security group and xenserver query

2014-11-26 Thread Yiping Zhang
According to this document, http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.4 /networking/security_groups.html?highlight=security%20group It is clearly stated in the very first paragraph that ³In advanced zones, security groups are supported only on the KVM hypervisor.²

Re: security group and xenserver query

2014-11-26 Thread Jayapal Reddy Uradi
Is the first added primary storage removed from the host ? If it is not removed and trying to added again it will fail. You can delete it using the xencenter or xsconsole. Thanks, Jayapal On 26-Nov-2014, at 11:04 PM, Tejas Sheth wrote: > Hi Jayapal, > > initially storage gave error while cr

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
Hi Jayapal, initially storage gave error while creating zone after we added vhd-util so after it got attached. then we tried to reconfigure new zone with another pool after changing network bridge to openvswitch but still the same issue. follwoing is the error for SMlog Nov 26 22:11:15 cloud

Re: The specified pod is in avoid set, returning

2014-11-26 Thread Jayapal Reddy Uradi
Hi Veera, If you observe the management server logs above the below message will give reason for the failure. "Unable to start a VM due to insufficient capacity" Thanks, Jayapal On 26-Nov-2014, at 10:25 PM, Tejas Sheth wrote: > Try configuration following parameter in global config. > > ->

Re: security group and xenserver query

2014-11-26 Thread Jayapal Reddy Uradi
Hi Tejas, Please check that your xenserver host copied with 'vhd-util' binary. Also check the /var/log/SMLog in the host for more detailed logs for this error. Thanks, Jayapal On 26-Nov-2014, at 9:51 PM, Tejas Sheth wrote: > Hello, > > ISSUE!!! > we are not using security groups but still

Re: The specified pod is in avoid set, returning

2014-11-26 Thread Tejas Sheth
Try configuration following parameter in global config. -> mem.overprovisioning.factor=2 ->cpu.overprovisioning.factor=2 Thanks, Tejas On Wed, Nov 26, 2014 at 9:54 PM, Andrija Panic wrote: > Check your network connectivity, if all hosts are UP etc. > > 2014-11-26 16:14:47,835 INFO [c.c.v.V

Re: The specified pod is in avoid set, returning

2014-11-26 Thread Andrija Panic
Check your network connectivity, if all hosts are UP etc. 2014-11-26 16:14:47,835 INFO [c.c.v.VirtualMachineManagerImpl] (Job-Executor-1:ctx-300e8909 ctx-c12a818e) Unable to contact resource. com.cloud.exception.ResourceUnavailableException: Resource [Pod:1] is unreachable: Unable to apply dhcp e

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
Hello, ISSUE!!! we are not using security groups but still bridge is configured. Zone is created sucessfully but System VMs are not able to start. follwoing error we are getting. 2014-11-26 21:43:26,763 WARN [c.c.h.x.r.XenServerStorageProcessor] (DirectAgent-97:ctx-861d1d2e) can not create

The specified pod is in avoid set, returning

2014-11-26 Thread veera
Hi, I have working cloudstack setup with 1 zone - 1 pod - 2 clusters. Now I am getting the error "Unable to start a VM due to insufficient capacity" when i try to start a VM. the log says "The specified pod is in avoid set, returning". Any hints? thanks. 2014-11-26 16:13:07,924 DEBUG [c.c.a.m

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
We are getting following error: 2014-11-26 21:43:26,763 WARN [c.c.h.x.r.XenServerStorageProcessor] (DirectAgent-97:ctx-861d1d2e) can not create vdi in sr 4436b39f-2d6b-d0ab-9074-f56daefd2f70 2014-11-26 21:43:26,763 WARN [c.c.h.x.r.XenServerStorageProcessor] (DirectAgent-97:ctx-861d1d2e) Catch Exc

Re: Unable to take Snapshot CS 4.2.1

2014-11-26 Thread Andrija Panic
disclamer - I did not read your logs, but.,,: CentOS 6.5 version of qemu-img is missing some flag, I beleive "-s" flag (redhat removed itd) - and cloudstack still uses that flag... So if this is also problem in your case - the snapshtos should be created, but not backup-ed. Meaning, downgrate qe

RE: Unable to take Snapshot CS 4.2.1

2014-11-26 Thread Jeff Barnett
The OS is CentOS 6.5, Storage is NFS not hosted on the controller. I will also note that there is two zones, with the same configuration just using different NFS devices one zone can take snapshots but the one that can no longer take them has been working for 8 months with no issues. Here is

Re: Documentation update procedure? - newby

2014-11-26 Thread Andrija Panic
Great, thx then :) On 26 November 2014 at 15:04, Rohit Yadav wrote: > Hi Andrija, > > You pull request is fine. CloudStack community tries to be very > constructive and we welcome more and more contributions in all forms. > > Thanks for the PR, I’ll help merge it tonight. > > > On 26-Nov-2014, a

Re: Documentation update procedure? - newby

2014-11-26 Thread Rohit Yadav
Hi Andrija, You pull request is fine. CloudStack community tries to be very constructive and we welcome more and more contributions in all forms. Thanks for the PR, I’ll help merge it tonight. > On 26-Nov-2014, at 6:23 pm, Andrija Panic wrote: > > Hi Rohit, > > I did it, hope I did not mess an

Re: Network limits and busines usage of those

2014-11-26 Thread Andrija Panic
Thx Lucian ! On 26 November 2014 at 14:56, Nux! wrote: > We simply don't charge for traffic a.t.m. since we can't really get any > stats, unless it gets crazy in which case we suggest getting bare metal. > > I know other people do some traffic stats outside Cloudstack via > sflow/openflow (forgo

Re: Network limits and busines usage of those

2014-11-26 Thread Nux!
We simply don't charge for traffic a.t.m. since we can't really get any stats, unless it gets crazy in which case we suggest getting bare metal. I know other people do some traffic stats outside Cloudstack via sflow/openflow (forgot the details), but I'm yet to look at that. Most customers don'

Re: Network limits and busines usage of those

2014-11-26 Thread Andrija Panic
Hi Lucian, I understand that default network throtling rate is 200Mbps - but if running public cloud - how do you charge customers ? Give them some average price for 200 Mbps and that's it ? What if a customer wants 500Mbps - you lock them on 200 Mbps (it is an option of course, just asking) ? Pr

RE: DNS search order

2014-11-26 Thread STEENBLIK Jason
Thought I'd give it one more attempt. Anybody know how to give additional DNS search domains to guests? Thanks -Original Message- From: STEENBLIK Jason [mailto:jason.steenb...@leonteq.com] Sent: 21 November 2014 15:43 To: users@cloudstack.apache.org Subject: DNS search order I have a co

Re: Network limits and busines usage of those

2014-11-26 Thread Nux!
Andrija, Because indeed bw stats are hard to interpret (or missing altogether, like in the case of Basic zones and Adv zones + SG) we just don't bother with it. We leave traffic shaping in place per service offering (default is 200 Mbps) and don't care too much, unless we notice an abusive beha

Network limits and busines usage of those

2014-11-26 Thread Andrija Panic
Hi folks, I was wondering what is your way/experience with billing customers the bandwith. Example - since network usage stats are almoust imposible to extract (let me know if I'm wrong...) do you i.e. - offer clients different flat rates i.e. 100 Mb/s, 200 Mb/s, 500 Mb/s, - or maybe just have i

Re: Documentation update procedure? - newby

2014-11-26 Thread Andrija Panic
Hi Rohit, I did it, hope I did not mess anything - https://github.com/apache/cloudstack-docs/pull/8 I have forked, (did not change from master branch to another though...) edited 1 file, and made pull request... Since this is my first interaction with the GITHUB and GIT in general (more or a les

Re: VMs not Expunging

2014-11-26 Thread Kirk Kosinski
Hi, if the disks and storage are gone you can hack the database to force them out of the system. Just set the volumes for the affected VMs as state = "Expunged" and removed = now() and hopefully CloudStack will be able to expunge the VMs fully (i.e. they'll disappear from the UI). Of course be ca

Re: security group and xenserver query

2014-11-26 Thread Nux!
No, in Advanced Zone with SG - just like in Basic zone - there is no per customer VLAN; there are no firewall, load balancer or additional NICs; there is also no IPv6. A VM will just get a public IP via DHCP and that's it, the customers are isolated via "security groups" which is a fancy name f

RE: security group and xenserver query

2014-11-26 Thread Geoff Higginbottom
If you want NAT and Load Balancing you need to do this on the Physical Device which terminates the VLANs etc (this will be outside of CloudStack) Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -Original Message-

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
Thanks for simplification, so it means that each account will have seprate VLAN with its own subnet and those VLANs will be created and configured in physical switch? if architecture is above mentioned way configured then how can we achieve NAT and loadbalancing? Thanks Tejas On Wed, Nov 26,

RE: security group and xenserver query

2014-11-26 Thread Geoff Higginbottom
I like to think of Advanced Network with SG as simply multiple Basic Networks, each on its own VLAN. You have the same features (or rather lack of) as you would with a Basic Zone, but you have multiple Guest Networks. Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +4

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
so NAT and loadbalancers are not possible if we use security group? so it meanse there will be no internal and external IPs for VMs. is it correct? On Wed, Nov 26, 2014 at 3:14 PM, Jayapal Reddy Uradi < jayapalreddy.ur...@citrix.com> wrote: > For SG networks there is no public network. > We conf

Re: security group and xenserver query

2014-11-26 Thread Jayapal Reddy Uradi
For SG networks there is no public network. We configure public ips for the guest network. -Jayapal On 26-Nov-2014, at 12:00 PM, Tejas Sheth wrote: > Hello, > > I have made the bridge configuration, but when i am selecting advance > zone. it is not showing public network configuration. only

Re: Documentation update procedure? - newby

2014-11-26 Thread Rohit Yadav
Hi Andrija, On the docs docs.cloudstack.apache.org find a relevant section where you want to edit, click on the edit link on the top-right side of the page this will take you to Github docs repo. On Github fork the repository and make changes, and send a pull request to the main repository (the

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
Hello, Kindly find following screen shots for advance zone. The public traffic icon is not working showing if we select security group. https://www.sendspace.com/file/e0g1ok Thanks, Tejas On Wed, Nov 26, 2014 at 2:00 PM, Tejas Sheth wrote: > Hi, > >I am not able to see public traffic i

Documentation update procedure? - newby

2014-11-26 Thread Andrija Panic
Hi there, I would like to update VxLAN docs with required setup etc... Since current docs is pretty incomplete, and not enough information to make vxlan acually work. Since I'm new to this process, what is the required way to contribute ? So far I have only complained via JIRA...also no dev skill

Re: CS agent consumes a lot of RAM

2014-11-26 Thread Rohit Yadav
That’s right you can pass in -Xmx to restrict maximum JVM heap size. An issue related to cloudstack agent was recently fixed on 4.3/4.4/4.5/master; https://github.com/apache/cloudstack/commit/19d73fe67d6c43ec4ef7c4a8e76c09e15e05a830 > On 26-Nov-2014, at 1:51 pm, Andrija Panic wrote: > > This is

Re: AW: taking snapshots kills all machines

2014-11-26 Thread Nux!
Ingo, Then set the loggin in DEBUG[1] mode and send us relevant fragments from when the problems occurs. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Ingo Jochim" > To: "users@cloudstack.apache.org" > Sent: Wednesday, 26

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
Hi, I am not able to see public traffic icon itself to drag it to other nic On Nov 26, 2014 1:13 PM, "Nux!" wrote: > That should not be the case, you can pick up traffic types icons from your > left. Can you share some screenshots with us? > > -- > Sent from the Delta quadrant using Borg tech

Re: CS agent consumes a lot of RAM

2014-11-26 Thread Andrija Panic
This is what I see on ACS 4.4.2, so perhaps you make same/similar changes, with limiting java RAM usage etc: [root@compute1 ~]# grep -ir Xmx /etc/ /etc/cloudstack/management/tomcat6-nonssl.conf:JAVA_OPTS="-Djava.awt.headless=true -Dcom.sun.management.jmxremote=false -Xmx2g -XX:+HeapDumpOnOutOfMemo

AW: CS agent consumes a lot of RAM

2014-11-26 Thread Jochim, Ingo
The upgrade to 4.4 is planned but we are looking for a short term solution. Ingo -Ursprüngliche Nachricht- Von: Andrija Panic [mailto:andrija.pa...@gmail.com] Gesendet: Mittwoch, 26. November 2014 08:57 An: users@cloudstack.apache.org Betreff: Re: CS agent consumes a lot of RAM Had exac

AW: taking snapshots kills all machines

2014-11-26 Thread Jochim, Ingo
Hello Lucian, it's an advanced zone. The primary and secondary storage are on two different physical networks (bonds). Regards, Ingo -Ursprüngliche Nachricht- Von: Nux! [mailto:n...@li.nux.ro] Gesendet: Mittwoch, 26. November 2014 08:55 An: users@cloudstack.apache.org Betreff: Re: tak