SSL offloading in Virtual router for LB

2023-01-04 Thread Vivek Kumar
Hello Folks, I just wanted to know if we can terminate the ssl on VPC VR for load balancer, In old UI it was there but in new UI I can’t find that option,I have gone through the API, couldn't find to bind SSL with Load balancer. Vivek Kumar Sr. Manager - Cloud & DevOps TechOps | Indiqus Tech

Re: Isoleted source nat network

2023-01-04 Thread Wei ZHOU
Can you check if there are firewall rules in your instance ? On Wednesday, 4 January 2023, Mariusz Wojtarek wrote: > Hi, > > Thank u, I have done it, but still doesnt works, when I ping 1.1.1.1 from > instance I see on virtual router those packets but on instance there is no > reply. > > Wysła

Re: Isoleted source nat network

2023-01-04 Thread Mariusz Wojtarek
Hi, Thank u, I have done it, but still doesnt works, when I ping 1.1.1.1 from instance I see on virtual router those packets but on instance there is no reply. Wysłane z iPhone'a > Wiadomość napisana przez Wei ZHOU w dniu 04.01.2023, > o godz. 22:12: > > Hi, > > If you create an isolated

Re: Isoleted source nat network

2023-01-04 Thread Wei ZHOU
Hi, If you create an isolated network with the default network offering, the egress policy is "deny" by default. In this case, you need to add an egress rule to allow internet access from vm instances, the destination cidr is normally 0.0.0.0/0 -Wei On Wed, 4 Jan 2023 at 21:39, Mariusz Wojtarek

Isoleted source nat network

2023-01-04 Thread Mariusz Wojtarek
Hi, I createad snat isolet network, instances connected to that network resolvs ip addresses but nothing else, no ping is working etc. I have logged to virtual router usinc console and from virtual rotuer internet is working. I had allow all port from guest cdir to 0.0.0./24 Do you have any id

Re: Multiple public networks per zone ?

2023-01-04 Thread Lukáš Mrtvý
Unfortunately, I can not add two physical networks ( wan and lan ) to single bridge ( cloudbr0 ) and yes, there is also a physical network for the management network. BPDU Guard would disable the ethernet port on my bare metal server to prevent a bridge loop. Is even reverse proxy supported for Con

RE: Multiple public networks per zone ?

2023-01-04 Thread Alex Mattioli
+1 to what Wei said. Can't you use that 2 IP subnet and then check which IP the Console Proxy uses? Or do you need to know beforehand? -Original Message- From: Lukáš Mrtvý Sent: 04 January 2023 17:44 To: users@cloudstack.apache.org Subject: Re: Multiple public networks per zone ?

Re: Multiple public networks per zone ?

2023-01-04 Thread Lukáš Mrtvý
Seems its not possible to set static ip for system vms, reverse proxy needs to know ip of console and storage vm, of course I can use for example subnet of two ips 192.168.0.0/31, but still its 50:50. Ideas? Thanks st 4. 1. 2023 v 13:59 odesílatel Wei ZHOU napsal: > The requirement is clear now

AW: UI bug in Recurring snapshots wizard?

2023-01-04 Thread me
Hey Wei, thx for reproduce it. I will open an issue! Cu Swen -Ursprüngliche Nachricht- Von: Wei ZHOU Gesendet: Mittwoch, 4. Januar 2023 14:54 An: users@cloudstack.apache.org Betreff: Re: UI bug in Recurring snapshots wizard? Hi, Sorry I missed your step 1. I can reproduce the issue.

Re: UI bug in Recurring snapshots wizard?

2023-01-04 Thread Wei ZHOU
Hi, Sorry I missed your step 1. I can reproduce the issue. It is a UI bug. Can you create a github issue ? As a workaround, you can create a snapshot policy using api or cloudmonkey. for example, (localcloud) 🐱 > create snapshotpolicy volumeid=1890793d-8332-4d1a-a7e4-0c3b50dfdd79 maxsnaps=10 i

AW: UI bug in Recurring snapshots wizard?

2023-01-04 Thread me
Hello Wie, take a look at my step 1, I already did this. Are you able to reproduce my issue? Cu Swen -Ursprüngliche Nachricht- Von: Wei ZHOU Gesendet: Mittwoch, 4. Januar 2023 13:39 An: users@cloudstack.apache.org Betreff: Re: UI bug in Recurring snapshots wizard? Hi, Please increas

Re: Multiple public networks per zone ?

2023-01-04 Thread Wei ZHOU
The requirement is clear now. I think it is possible. All these Ips can be RFC1918 Ipv4 addresses. for example, (1) use 192.168.0.0/24 as management Ip range. (2) add 192.168.1.0/24 as a public ip range reserved for system vms. system vms will have public IPs in this range. (3) add a real public

Re: UI bug in Recurring snapshots wizard?

2023-01-04 Thread Wei ZHOU
Hi, Please increase the value of some global settings (searched by keyword "snapshot.max"). The default values are 8. -Wei On Wed, 4 Jan 2023 at 12:57, wrote: > Hi, > > > > can someone please confirm this behavior? > > 1. Edit global setting snapshot.max.daily to 30 > 2. Restart man

UI bug in Recurring snapshots wizard?

2023-01-04 Thread me
Hi, can someone please confirm this behavior? 1. Edit global setting snapshot.max.daily to 30 2. Restart management server 3. Got to Instance -> Volumes -> ROOT-X -> Recurring snapshots icon -> Interval type Daily -> add Time and Timezone and try to enter a value over 8 into Kee

Change https port to 443 from 8443

2023-01-04 Thread Mariusz Wojtarek
Hi, Is it possible to change magement server port from 8443 to 443 ? I had changed port number in server.propertise file but it doesn’t work, when I used nmap localhost, server doesn’t listen on port 443 Service cloudstack-management was restarted and it is running [Support Online] Mariusz Woj

Re: Multiple public networks per zone ?

2023-01-04 Thread Lukáš Mrtvý
Maybe the correct question would be how to save IPv4 addresses ( non RFC1918 ) ? I have only a few available of them and allocating two of them to systemVMs is quite "expensive" for me. As far as I know, this is minimal set of IPs needed. - UI ( Technically it sits on the management network, but I

AW: console proxy ssl offloading

2023-01-04 Thread me
Thx Wie and Nux for your replies. I solved the problem and achieved ssl offloading. Here is what we did: 1. (optional) Add a new internal IP range as a public ip range to your zone and activate SystemVM usage only! We did this because of the offloading the console proxy and ssvm do not need public