Thank you Nischal.
Good points. I've checked secstorage.allowed.internal.sites but it is empty.
It seems network team mixed up a firewall rule and now it's working as expected 
again.

-----Ursprüngliche Nachricht-----
Von: Nischal P <[email protected]> 
Gesendet: Montag, 28. Juli 2025 12:31
An: [email protected]
Betreff: Re: Template / ISO register via UI - Connection timed out (Connection 
timed out)

HI Wilken,


This error could occur due to a few reasons, Can you please check the Value of 
the Global Parameter - secstorage.allowed.internal.sites This parameter should 
have your internal webservers IP addresses which will help you download the 
template. You could check this setting and see if the IP or the range of IP has 
been mentioned in this setting.
The other thing is you could check the file permissions on the webserver if 
there are correct permissions to access this file.



Thanks & Regards
Nischal



On Mon, Jul 28, 2025 at 3:50 PM W. Verleger - proIO GmbH < 
[email protected]> wrote:

> Hello,
>
> running ACS 4.19.3.0.
> I have troubles to register new ISO / templates, getting the following 
> timeout message:
>
> Connection timed out (Connection timed out) Download state: 
> DOWNLOAD_ERROR
>
> The management server has internet access, and I can download an ISO 
> manually straight to the management server (via curl/wget).
>
> Secondary storage is also connected:
>
> 10.2.224.2:/srv/data1              4.4T  701G  3.7T  16%
> /var/lib/cloudstack/mnt/90520736402273.603d0d48
> 10.2.224.3:/volume1/data2           70T   20T   50T  29%
> /var/lib/cloudstack/mnt/90520736402273.66e57ff4
>
> ISO name: ubuntu24-test
>
> 2025-07-28 09:31:32,562 DEBUG [c.c.a.ApiServlet]
> (qtp341748265-790:ctx-f51ff957) (logid:e0d6fbe6) ===START===  
> 10.2.224.100
> -- GET
> bootable=true&isextractable=false&ispublic=true&isdynamicallyscalable=
> true&zoneid=e02b6018-9eff-4726-817d-34c3a1a4fa62&account=admin&ostypei
> d=0e35a7a4-5963-4a0b-a369-7914d76eeddc&name=ubuntu24-test&displaytext=
> ubuntu24-test&url=https:%2F%
> 2Fdrmirror.physi.uni-heidelberg.de
> %2Fubuntu-releases%2F24.04.2%2Fubuntu-24.04.2-live-server-amd64.iso&do
> mainid=a7f78d5a-df17-11ef-85c5-525400568b61&isfeatured=true&command=re
> gisterIso&response=json&sessionkey=kZ_XiOMosCHKqW0z7Kbzxl0rMLM
> 025-07-28 09:31:34,274 DEBUG [c.c.a.t.Request]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) Seq
> 10-5477221571812663842: Sending  { Cmd , MgmtId: 90520736402273, via:
> 10(s-250-VM), Ver: v1, Flags: 100011,
> [{"org.apache.cloudstack.storage.command.DownloadCommand":{"hvm":"true
> ","description":"ubuntu24-test","maxDownloadSizeInBytes":"(50.00
> GB)
> 53687091200","id":"247","resourceType":"TEMPLATE","installPath":"templ
> ate/tmpl/2/247","_store":{"com.cloud.agent.api.to.NfsTO":{"_url":"nfs:
> //
> 10.2.224.3/volume1/data2
> ","_role":"Image"}},"followRedirects":"true","url":
> https://drmirror.physi.uni-heidelberg.de/ubuntu-releases/24.04.2/ubunt
> u-24.04.2-live-server-amd64.iso, 
> "format":"ISO","accountId":"2","name":"247-2-7269c587-84d0-3a21-85c1-9
> b806226b063","secUrl":"nfs:// 
> 10.2.224.3/volume1/data2","wait":"0","bypassHostMaintenance":"false"}}
> ] }
> 2025-07-28 09:31:34,277 DEBUG [c.c.s.StatsCollector]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) 
> Verifying image storage [1]. Capacity: total=[4 TB], used=[697 GB], 
> threshold=[89.99999761581421%].
> 2025-07-28 09:31:34,277 INFO  [c.c.t.HypervisorTemplateAdapter]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) Private 
> template will be allocated in image store 
> [org.apache.cloudstack.storage.image.store.ImageStoreImpl@69c1e577] in 
> zone [Zone {"id": "1", "name": "esn1", "uuid":
> "e02b6018-9eff-4726-817d-34c3a1a4fa62"}].
> 2025-07-28 09:31:34,281 DEBUG [o.a.c.s.i.TemplateDataFactoryImpl]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) template 
> 247 is not in store:1, type:Image
> 2025-07-28 09:31:34,357 DEBUG [c.c.s.s.SnapshotSchedulerImpl]
> (SnapshotPollTask:ctx-06746046) (logid:d2d3b49a) Snapshot 
> [7dd5aa27-6294-4774-ab3b-435c2863053c] for volume 
> [{"name":"ROOT-117","uuid":"28e81b26-2e4c-4f81-a960-b82246eee698"}] 
> can be executed.
> 2025-07-28 09:31:34,358 DEBUG [c.c.c.CapacityManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Found 12 VMs on host 5
> 2025-07-28 09:31:34,360 DEBUG [c.c.c.CapacityManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Found 0 VMs are 
> Migrating from host 5
> 2025-07-28 09:31:34,379 DEBUG [c.c.c.CapacityManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Found 0 VM, not 
> running on host 5
> 2025-07-28 09:31:34,384 DEBUG [c.c.c.CapacityManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) No need to calibrate 
> cpu capacity, host:5 usedCpuCore: 34 reservedCpuCore: 0
> 2025-07-28 09:31:34,384 DEBUG [c.c.c.CapacityManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) No need to calibrate 
> cpu capacity, host:5 usedCpu: 62100 reservedCpu: 0
> 2025-07-28 09:31:34,384 DEBUG [c.c.c.CapacityManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) No need to calibrate 
> memory capacity, host:5 usedMem: (91.50 GB) 98247376896 reservedMem: 
> (0 bytes) 0
> 2025-07-28 09:31:34,563 DEBUG [o.a.c.s.i.TemplateDataFactoryImpl]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) template 
> 247 is already in store:1, type:Image
> 2025-07-28 09:31:34,588 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Done executing cpu/ram 
> capacity update
> 2025-07-28 09:31:34,588 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Executing storage 
> capacity update
> 2025-07-28 09:31:34,599 DEBUG [c.c.s.StorageManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Found storage pool
> elpix-linstor-1 of type Linstor with overprovisioning factor 4
> 2025-07-28 09:31:34,600 DEBUG [c.c.s.StorageManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Total over provisioned 
> capacity calculated is 4 * (83.8347 TB) 92177229152256
> 2025-07-28 09:31:34,600 DEBUG [c.c.s.StorageManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Total over provisioned 
> capacity of the pool elpix-linstor-1 id: 1 is (335.3388 TB) 
> 368708916609024
> 2025-07-28 09:31:34,602 DEBUG [c.c.s.StorageManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Successfully set 
> Capacity -
> (335.3388 TB) 368708916609024 for capacity type - 3 , DataCenterId - 
> 1, HostOrPoolId - 1, PodId 1
> 2025-07-28 09:31:34,602 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Done executing storage 
> capacity update
> 2025-07-28 09:31:34,602 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Executing capacity 
> updates for public ip and Vlans
> 2025-07-28 09:31:34,621 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Done capacity updates 
> for public ip and Vlans
> 2025-07-28 09:31:34,621 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Executing capacity 
> updates for private ip
> 2025-07-28 09:31:34,627 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Done executing 
> capacity updates for private ip
> 2025-07-28 09:31:34,627 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Done recalculating 
> system capacity
> 2025-07-28 09:31:34,663 DEBUG [c.c.a.AlertManagerImpl]
> (CapacityChecker:ctx-81f146eb) (logid:ab7139aa) Done running Capacity 
> Checker ...
> 2025-07-28 09:31:34,760 DEBUG [o.a.c.s.i.BaseImageStoreDriverImpl]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) 
> Downloading template to data store 1
> 2025-07-28 09:31:34,775 DEBUG [o.a.c.s.i.BaseImageStoreDriverImpl]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) 
> Performing image store createTemplate async callback
> 2025-07-28 09:31:34,778 INFO  [o.a.c.s.i.BaseImageStoreDriverImpl]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) Updating 
> store ref entry for template ubuntu24-test
> 2025-07-28 09:31:34,815 DEBUG [o.a.c.h.HAManagerImpl]
> (BackgroundTaskPollManager-4:ctx-23246d15) (logid:8ce4417e) HA health 
> check task is running...
> 2025-07-28 09:31:34,921 DEBUG [c.c.h.o.r.Ovm3HypervisorGuru]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6)
> getCommandHostDelegation: class
> org.apache.cloudstack.storage.command.DownloadCommand
> 2025-07-28 09:31:34,923 DEBUG [c.c.h.XenServerGuru]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) We are 
> returning the default host to execute commands because the command is 
> not of Copy type.
> 2025-07-28 09:31:34,923 DEBUG [o.a.c.s.RemoteHostEndPoint]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) Sending 
> command org.apache.cloudstack.storage.command.DownloadCommand to host: 
> 10
> 2025-07-28 09:31:34,926 DEBUG [c.c.a.t.Request]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) Seq
> 10-5477221571812663843: Sending  { Cmd , MgmtId: 90520736402273, via:
> 10(s-250-VM), Ver: v1, Flags: 100011,
> [{"org.apache.cloudstack.storage.command.DownloadCommand":{"hvm":"true
> ","description":"ubuntu24-test","maxDownloadSizeInBytes":"(50.00
> GB)
> 53687091200","id":"247","resourceType":"TEMPLATE","installPath":"templ
> ate/tmpl/2/247","_store":{"com.cloud.agent.api.to.NfsTO":{"_url":"nfs:
> //
> 10.2.224.2/srv/data1","_role":"Image"}},"followRedirects":"true","url":
> https://drmirror.physi.uni-heidelberg.de/ubuntu-releases/24.04.2/ubunt
> u-24.04.2-live-server-amd64.iso, 
> "format":"ISO","accountId":"2","name":"247-2-7269c587-84d0-3a21-85c1-9
> b806226b063","secUrl":"nfs:// 
> 10.2.224.2/srv/data1","wait":"0","bypassHostMaintenance":"false"}}] }
> 2025-07-28 09:31:35,415 DEBUG [c.c.a.ApiServlet]
> (qtp341748265-790:ctx-f51ff957 ctx-50cb005f) (logid:e0d6fbe6) 
> ===END===
> 10.2.224.100 -- GET
> bootable=true&isextractable=false&ispublic=true&isdynamicallyscalable=
> true&zoneid=e02b6018-9eff-4726-817d-34c3a1a4fa62&account=admin&ostypei
> d=0e35a7a4-5963-4a0b-a369-7914d76eeddc&name=ubuntu24-test&displaytext=
> ubuntu24-test&url=https:%2F%
> 2Fdrmirror.physi.uni-heidelberg.de
> %2Fubuntu-releases%2F24.04.2%2Fubuntu-24.04.2-live-server-amd64.iso&do
> mainid=a7f78d5a-df17-11ef-85c5-525400568b61&isfeatured=true&command=re
> gisterIso&response=json&sessionkey=kZ_XiOMosCHKqW0z7Kbzxl0rMLM
>
> Is there anything I can double check?
>
> Thank you!
>
>
> Mit freundlichen Grüßen / With kind regards
>
> Wilken Verleger
>
> - proIO GmbH -
> Geschäftsführer: Swen Brüseke
> Sitz der Gesellschaft: Frankfurt am Main
>
> USt-IdNr. DE 267 075 918
> Registergericht: Frankfurt am Main - HRB 86239
>
> Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte 
> Informationen.
> Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich 
> erhalten haben, informieren Sie bitte sofort den Absender und 
> vernichten Sie diese Mail.
> Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail 
> sind nicht gestattet.
>
> This e-mail may contain confidential and/or privileged information.
> If you are not the intended recipient (or have received this e-mail in
> error) please notify
> the sender immediately and destroy this e-mail.
> Any unauthorized copying, disclosure or distribution of the material 
> in this e-mail is strictly forbidden.
>
>


- proIO GmbH -
Geschäftsführer: Swen Brüseke
Sitz der Gesellschaft: Frankfurt am Main

USt-IdNr. DE 267 075 918
Registergericht: Frankfurt am Main - HRB 86239

Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. 
Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten 
haben, 
informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. 
Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail sind nicht 
gestattet. 

This e-mail may contain confidential and/or privileged information. 
If you are not the intended recipient (or have received this e-mail in error) 
please notify 
the sender immediately and destroy this e-mail.  
Any unauthorized copying, disclosure or distribution of the material in this 
e-mail is strictly forbidden. 


Reply via email to