Virtual router missing and restartNetwork API call failing

2021-10-04 Thread V Viceri
Hi All, Just now my cloudstack installation decided to expunge my virtual router from some unknown reasons and I cannot bring it back either by issuing the restartNetwork or starting/stopping existing VMs. Please advise Logs: 2021-10-04 14:05:12,027 DEBUG [c.c.c.ConsoleProxyManagerImpl] (conso

Re: Understanding of network ACLs - looking for "egress" ACL items on virtual routers

2021-10-04 Thread Wei ZHOU
Hi, Good findings. Thanks for sharing. Do you think it works as what you expected? -Wei On Sat, 2 Oct 2021 at 23:41, vas...@gmx.de wrote: > Thanks for this Wei, > thant helped me out! > > I will share my findings - maybe someone googling for some more information > regarding the ACLs will fin

Re: Understanding of network ACLs - looking for "egress" ACL items on virtual routers

2021-10-04 Thread vas...@gmx.de
With this level of knowledge i can say yes, works like expected. Overall i have to admitt, that this kind of implementation is something i will have to get used to :-D Untill now I have been working with the "stateless" ACL approach. Also the "mixing" of in- and egress rule can be a bit overwhelmi

Re: prometheus

2021-10-04 Thread Daan Hoogland
never heard of this Piotr, Have you checked the timezone and locale settings on the hosts? On Thu, Sep 30, 2021 at 11:10 AM Piotr Pisz wrote: > Hello, > > I have a strange situation, I have two CS clusters (in the same version), > and each gives the prometheus stats differently. > In the last fi

Re: SQL Deadlocks using Galera Active/Backup/Backup

2021-10-04 Thread Daan Hoogland
Loth, I think you are better off asking this question on a mysql forum, somewhere. It doesn't seem anybody worked with a 3-node cluster, here. On Sun, Oct 3, 2021 at 7:29 AM Loth wrote: > Hi Users, > > I am seeing some deadlocks in my sql error log; > "[ERROR] mysqld: Deadlock found when trying

Re: Virtual router missing and restartNetwork API call failing

2021-10-04 Thread Daan Hoogland
V, Is this a vpc router, a router for an isolated network, or for a shared network? if it is for an isolated network a router should be spinnen up as soon as you add a VM. you can delete the VM again once it is running. On the other types of networks I wouldn't know a good workaround. And this is o

Re: Virtual router missing and restartNetwork API call failing

2021-10-04 Thread V Viceri
Hi Daan, Thank you for noticing my issue. This is for a Shared network. I haven't also tried any other workaround as I do not want to lose everything if a mess up the whole configuration. Does adding a new Shared network create a new VR? If so, what will happen to the old VMs associated to the

Re: Virtual router missing and restartNetwork API call failing

2021-10-04 Thread Wei ZHOU
Hi, Do you use the default shared network offering for the network ? -Wei On Mon, 4 Oct 2021 at 15:21, V Viceri wrote: > Hi Daan, > > Thank you for noticing my issue. This is for a Shared network. I haven't > also tried any other workaround as I do not want to lose everything if a > mess up th

Re: Understanding of network ACLs - looking for "egress" ACL items on virtual routers

2021-10-04 Thread Wei ZHOU
Hi, Great, looking forward to your article. If you make some code changes, please create a PR for review and testing. -Wei On Mon, 4 Oct 2021 at 13:38, vas...@gmx.de wrote: > With this level of knowledge i can say yes, works like expected. > > Overall i have to admitt, that this kind of implem

Re: SQL Deadlocks using Galera Active/Backup/Backup

2021-10-04 Thread Wei ZHOU
Hi Loth, I know some setup with 3-nodes mariadb cluster and nginx (not haproxy) which work fine. Could you please share more information, for example mariadb status, error logs in cloudstack management ? -Wei On Sun, 3 Oct 2021 at 07:29, Loth wrote: > Hi Users, > > I am seeing some deadlocks

Dynamic Roles and user roles in command.properties

2021-10-04 Thread David Larsen
Hi I have tried to migrate our Cloudstack (4.15) to use dynamic roles. The migrate process went ok, but users can't log in afterwards...(?). When they log in, the only response they get is "discovering..." I had to go back to commands.properties. What are the default user roles when using dyn

Re: Virtual router missing and restartNetwork API call failing

2021-10-04 Thread Daan Hoogland
V, As Wei implies, it will be created when it is needed. For an empty network (in principle), no. When you create your first VM the router will be created. You can associate the VMs with a second shared network, yes. On Mon, Oct 4, 2021 at 3:35 PM Wei ZHOU wrote: > Hi, > > Do you use the default

Re: Dynamic Roles and user roles in command.properties

2021-10-04 Thread Daan Hoogland
David, The '=15's mean user is allowed, as 15 = 8+4=2=1 (it is a decimal description of a bit-field) Have you created any roles along the way? On Mon, Oct 4, 2021 at 4:51 PM David Larsen wrote: > Hi > > I have tried to migrate our Cloudstack (4.15) to use dynamic roles. The > migrate process wen

VR swap on disk

2021-10-04 Thread Yordan Kostov
Hey everyone, Environment is 4.15 ACS + XCP-NG 8.2 on fiber shared storage. I notice a strange VR behavior happening once in a while (~10 mins or so) . The virtual router is generating significant amount of usage on the storage for about 1 min or so.

SV: Dynamic Roles and user roles in command.properties

2021-10-04 Thread David Larsen
Hi Daan. Thanks for your quick reply. I see.., 15 is user allowed. didn't read the description good enough 😊 I have never created any roles. I tried the -D option with migrate-dynamicroles.py Med vennlig hilsen David Larsen -Opprinnelig melding- Fra: Daan Hoogland Sendt: mandag

Size of the snapshots volume

2021-10-04 Thread Florian Noel
Hi, I've a question about the snapshots volume in Cloudstack When we take a snapshot of a volume, this create a VHD file on the secondary storage. Snapshot size doesn't match volume size used. Imagine a volume of 20GB, we fill the volume and empty it just after. We take a snapshot of the volume

RE: Size of the snapshots volume

2021-10-04 Thread Yordan Kostov
Here are a few considerations: - First snapshot of volume is always full snap. - XenServer/XCP-NG backups are always thin. - Thin provisioning calculations never go down. Even if you delete data from disk. As you filled the disk of the VM to top the thin provisioning threats it as full VM from

Can't start VM using Gluster driver

2021-10-04 Thread Mauro Ferraro - G2K Hosting
Hi guys, how are you?. We are testing a solution with ACS 4.15.1 with Gluster 9.3. We use a host with Ubuntu and when we try to start a VM we get an error. Host detail: lsb_release-aNoLSBmodulesareavailable.Distributor ID:UbuntuDescription:Ubuntu20.10Release:20.10Codename:groovyqemu-img--ver

RE: API Command Question for "networkids"

2021-10-04 Thread Corey, Mike
Daan, I see from the documentation that this is a new API for ACS 4.15. Do you have an example command line that I should inject this "deployasis" flag? Thanks! Mike -Original Message- From: Daan Hoogland Sent: Friday, October 1, 2021 11:18 AM To: users Cc: d...@cloudstack.apache.o

Re: VR swap on disk

2021-10-04 Thread Wei ZHOU
Hi Jordan, I have no idea what caused the issue. The default cpu/ram for virtual routers is small, but enough for most cases. There are two options to change the service offering of VR: (1) create a new network offering, with specified router offering, then update the network to the new offering.

Re: Can I install all services on same server

2021-10-04 Thread Darren Cole
I've built my own cloud on the cheap with two nodes (less than $500 US shipped). One was a compute node One for everything else including storage. Setup: used KVM for VMs simple networking NFS for primary and secondary storage only 250GB storage Most recently I've installed on Ubuntu 20 L

One Account accessing multiple public networks in zone

2021-10-04 Thread vas...@gmx.de
Hi everyone, today i would need some ideas on how to provide several (in my case two) public networks to a account. my "customer" would like to see a kind of dual - wan from his point of view. Currently i am working with one physical public network where i use vlans for logical separation. How ev