Hey,

another question: With the admin account I created some domains (different departments) and within each domain a domain-admin user. Is there a possibility so that these domain-admin users can create users within their own domain? Or can this only be done by the user admin?
I saw this on CloudPortal Business Manager, there a corporate user can create new users for his organization.

Hope you can help me out ...
I want to create VMs with more than only one NIC. But I cant figure out how to do this. When creating a new compute offering there is no option to add more NICs and if a user already created a VM there is no "Add NIC" button or something like that in the VM's NIC tab.

I have a number of isolated networks, in each isolated network there are a couple of VMs that require public access via static NAT, but at the moment the static NAT is not functioning.

I have done the following:

1. Created a network offering "Isolated-SNAT" with DHCP, SourceNat, Firewall, StaticNat, UserData and DNS
2. Created a network using this offering - CIDR = 10.101.0.0/16; Gateway = 10.101.0.1

The network has the following NICs: eth0 - 10.101.0.1 (private); eth1 - 169.254.1.6; eth2 - 10.103.10.72 (public)

3. Deployed a VM within this network that gets the IP address 10.101.43.47

4. Acquired an IP from the public range (10.103.8.0/22) - 10.103.11.125

5. Enable static NAT to the VMs private IP (10.103.11.125 <-> 10.101.43.47)

In the management log it appears to be successful:

2013-06-26 09:45:53,662 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (catalina-exec-19:null) Applying ip association in network Ntwk[224|Guest|21]
2013-06-26 09:45:53,688 DEBUG [agent.transport.Request] (catalina-exec-19:null) Seq 10-248782112: Sending { Cmd , MgmtId: 124711801383, via: 10, Ver: v1, Flags: 100001, [{"routing.IpAssocCommand":{"ipAddresses":[{"accountId":5,"publicIp":"10.103.10.72","sourceNat":true,"add":true,"oneToOneNat":false,"firstIP":true,"vlanId":"102","vlanGateway":"10.103.11.254","vlanNetmask":"255.255.252.0","vifMacAddress":"06:a0:68:00:02:7a","networkRate":200,"trafficType":"Public","networkName":"guest-public"},{"accountId":5,"publicIp":"10.103.11.125","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"102","vlanGateway":"10.103.11.254","vlanNetmask":"255.255.252.0","vifMacAddress":"06:17:da:00:03:af","networkRate":200,"trafficType":"Public","networkName":"guest-public"},{"accountId":5,"publicIp":"10.103.10.12","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"102","vlanGateway":"10.103.11.254","vlanNetmask":"255.255.252.0","vifMacAddress":"06:d2:a0:00:02:3e","networkRate":200,"trafficType":"Public","networkName":"guest-public"}],"accessDetails":{"zone.network.type":"Advanced","router.name":"r-183-VM","router.ip":"169.254.1.6","router.guest.ip":"10.101.0.1"},"wait":0}}] }
2013-06-26 09:45:53,688 DEBUG [agent.transport.Request] (catalina-exec-19:null) Seq 10-248782112: Executing: { Cmd , MgmtId: 124711801383, via: 10, Ver: v1, Flags: 100001, [{"routing.IpAssocCommand":{"ipAddresses":[{"accountId":5,"publicIp":"10.103.10.72","sourceNat":true,"add":true,"oneToOneNat":false,"firstIP":true,"vlanId":"102","vlanGateway":"10.103.11.254","vlanNetmask":"255.255.252.0","vifMacAddress":"06:a0:68:00:02:7a","networkRate":200,"trafficType":"Public","networkName":"guest-public"},{"accountId":5,"publicIp":"10.103.11.125","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"102","vlanGateway":"10.103.11.254","vlanNetmask":"255.255.252.0","vifMacAddress":"06:17:da:00:03:af","networkRate":200,"trafficType":"Public","networkName":"guest-public"},{"accountId":5,"publicIp":"10.103.10.12","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"102","vlanGateway":"10.103.11.254","vlanNetmask":"255.255.252.0","vifMacAddress":"06:d2:a0:00:02:3e","networkRate":200,"trafficType":"Public","networkName":"guest-public"}],"accessDetails":{"zone.network.type":"Advanced","router.name":"r-183-VM","router.ip":"169.254.1.6","router.guest.ip":"10.101.0.1"},"wait":0}}] }

2013-06-26 09:46:02,209 INFO [cloud.network.NetworkManagerImpl] (catalina-exec-19:null) Let VirtualRouter handle StaticNat in network 224
2013-06-26 09:46:02,215 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (catalina-exec-19:null) Applying static nat rules in network Ntwk[224|Guest|21]
2013-06-26 09:46:02,223 DEBUG [agent.transport.Request] (catalina-exec-19:null) Seq 10-248782113: Sending { Cmd , MgmtId: 124711801383, via: 10, Ver: v1, Flags: 100001, [{"routing.SetStaticNatRulesCommand":{"rules":[{"dstIp":"10.101.43.47","id":0,"srcIp":"10.103.11.125","revoked":false,"alreadyAdded":false,"purpose":"StaticNat","icmpType":0,"icmpCode":0}],"accessDetails":{"zone.network.type":"Advanced","router.name":"r-183-VM","router.ip":"169.254.1.6","router.guest.ip":"10.101.0.1"},"wait":0}}] }
2013-06-26 09:46:02,223 DEBUG [agent.transport.Request] (catalina-exec-19:null) Seq 10-248782113: Executing: { Cmd , MgmtId: 124711801383, via: 10, Ver: v1, Flags: 100001, [{"routing.SetStaticNatRulesCommand":{"rules":[{"dstIp":"10.101.43.47","id":0,"srcIp":"10.103.11.125","revoked":false,"alreadyAdded":false,"purpose":"StaticNat","icmpType":0,"icmpCode":0}],"accessDetails":{"zone.network.type":"Advanced","router.name":"r-183-VM","router.ip":"169.254.1.6","router.guest.ip":"10.101.0.1"},"wait":0}}] }
2013-06-26 09:46:03,224 DEBUG [agent.transport.Request] (DirectAgent-231:null) Seq 10-248782113: Processing: { Ans: , MgmtId: 124711801383, via: 10, Ver: v1, Flags: 0, [{"routing.SetStaticNatRulesAnswer":{"results":[null],"result":true,"wait":0}}] }
2013-06-26 09:46:03,224 DEBUG [agent.transport.Request] (catalina-exec-19:null) Seq 10-248782113: Received: { Ans: , MgmtId: 124711801383, via: 10, Ver: v1, Flags: 0, { SetStaticNatRulesAnswer } }

However the static NAT does not work... no traffic goes through the VR

I have logged onto the VR and looked in the IPTABLE... there is no POSTROUTING or NAT table.

Is there any additional configuration i need to perform? Does CloudPlatform use IPTABLES?

Any advice is gratefully received

Andy

I am attempting to setup a trial installation following the steps followed in the CloudPlatform Master Class (and Trial Installation Guide). After pressing the Launch button, the operation never completes (i.e. the progress indication continues to spin and no success message is displayed). When I subsequently log into CloudPlatform UI and inspect the Infrastructure, I see that the status for the System VMs is Starting.

i've attached the management-server.log and catalina.out file where i see things like:

INFO [xen.resource.CitrixResourceBase] (DirectAgent-10:) Programmed default network rules for s-1-VM
WARN [storage.secondary.SecondaryStorageManagerImpl] (secstorage-1:) Unable to ssh to the VM: Can not ping System vm s-1-VMdue to:Timeout, Unable to logon to 169.254.1.143
INFO [cloud.vm.VirtualMachineManagerImpl] (secstorage-1:) The guru did not like the answers so stopping VM[SecondaryStorageVm|s-1-VM]
INFO [xen.resource.CitrixResourceBase] (DirectAgent-39:) Removed network rules for vm s-1-VM
ERROR [cloud.vm.VirtualMachineManagerImpl] (secstorage-1:) Failed to start instance VM[SecondaryStorageVm|s-1-VM]
com.cloud.utils.exception.ExecutionException: Unable to start VM[SecondaryStorageVm|s-1-VM] due to error in finalizeStart, not retrying

(stack trace follows)

INFO [xen.resource.CitrixResourceBase] (DirectAgent-10:) Programmed default network rules for s-1-VM
WARN [storage.secondary.SecondaryStorageManagerImpl] (secstorage-1:) Unable to ssh to the VM: Can not ping System vm s-1-VMdue to:Timeout, Unable to logon to 169.254.1.143
INFO [cloud.vm.VirtualMachineManagerImpl] (secstorage-1:) The guru did not like the answers so stopping VM[SecondaryStorageVm|s-1-VM]
INFO [xen.resource.CitrixResourceBase] (DirectAgent-39:) Removed network rules for vm s-1-VM
ERROR [cloud.vm.VirtualMachineManagerImpl] (secstorage-1:) Failed to start instance VM[SecondaryStorageVm|s-1-VM]
com.cloud.utils.exception.ExecutionException: Unable to start VM[SecondaryStorageVm|s-1-VM] due to error in finalizeStart, not retrying

(more stack trace)

The console window for the VMs indicate that the VMs come up but a number of errors are displayed including the following:

Starting enhanced syslogd: rsyslogd.
Not starting as we're not running in a vm.
Starting ACPI services...RTNETLINK1 answers: No such file or directory
acpid: error talking to the kernel via netlink
.
Starting the system activity data collector: sadc.
Starting DNS forwarder and DHCP server: dnsmasq
dnsmasq: unknown interface eth0
failed!
Starting OpenBSD Secure Shell server: sshd.Starting enhanced syslogd: rsyslogd.
Not starting as we're not running in a vm.
Starting ACPI services...RTNETLINK1 answers: No such file or directory
acpid: error talking to the kernel via netlink
.
Starting the system activity data collector: sadc.
Starting DNS forwarder and DHCP server: dnsmasq
dnsmasq: unknown interface eth0
failed!
Starting OpenBSD Secure Shell server: sshd.
Starting web server: apache2apache2: apr_sockaddr_info_get() failed for systemvm
apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
[Tue Jun 25 12:31:17 2013] [error] (EAI 3)Temporary failure in name resolution: Failed to resolve server name for 10.1.1.1 (check DNS) -- or specify an explicit ServerName
[Tue Jun 25 12:31:17 2013] [error] (EAI 3)Temporary failure in name resolution: Failed to resolve server name for 10.1.1.1 (check DNS) -- or specify an explicit ServerName
(99)Cannot assign requested address: make_sock: could not bind to address 10.1.1.1:80
no listening sockets available, shutting down
Unable to open logs
Action 'start' failed.
The Apache error log may have more information.
failed!
Starting periodic command scheduler: cron.
Starting OpenBSD Secure Shell server: sshd.
Starting web server: apache2apache2: apr_sockaddr_info_get() failed for systemvm
apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
[Tue Jun 25 12:31:17 2013] [error] (EAI 3)Temporary failure in name resolution: Failed to resolve server name for 10.1.1.1 (check DNS) -- or specify an explicit ServerName
[Tue Jun 25 12:31:17 2013] [error] (EAI 3)Temporary failure in name resolution: Failed to resolve server name for 10.1.1.1 (check DNS) -- or specify an explicit ServerName
(99)Cannot assign requested address: make_sock: could not bind to address 10.1.1.1:80
no listening sockets available, shutting down
Unable to open logs
Action 'start' failed.
The Apache error log may have more information.: Failed to resolve server name for 10.1.1.1 (check DNS) -- or specify an explicit ServerName
Unable to open logs
Action 'start' failed.
The Apache error log may have more information.
failed!
Starting periodic command scheduler: cron.
Starting OpenBSD Secure Shell server: sshd.
Starting web server: apache2apache2: apr_sockaddr_info_get() failed for systemvm
apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
[Tue Jun 25 12:31:17 2013] [error] (EAI 3)Temporary failure in name resolution: Failed to resolve server name for 10.1.1.1 (check DNS) -- or specify an explicit ServerName
[Tue Jun 25 12:31:17 2013] [error] (EAI 3)Temporary failure in name resolution: Failed to resolve server name for 10.1.1.1 (check DNS) -- or specify an explicit ServerName
(99)Cannot assign requested address: make_sock: could not bind to address 10.1.1.1:80
no listening sockets available, shutting down
Unable to open logs
Action 'start' failed.
The Apache error log may have more information.

I'm struggling with what I though to be a relatively standard deployment model for CP. Setting up test environments for developers

Essentially I want to set up 5 isolated environments with 20 VMs in each. Each isolated environment should have the same CIDR, isolated by VLAN.

Before I begin, I have CloudPlatform functioning nicely and have already deployed a Shared network with a number of VMs all behaving as expected.

The method I have used to create my isolated networks is as follows:

1. Create new network offering as follows:
- Name = IsolatedIntegrationEnvironment
- Guest type = Isolated
- Availability = Optional
- Specify VLAN = No
- Network rate = 200Mb/s
- Traffic Type = Guest
- Supported services = SourceNat, DHCP, UserData, Firewall

2. Create first isolated network:
- Type = Isolated
- VLAN ID = 11 (automatically assigned from VLAN range)
- Network Offering = IsolatedIntegrationEnvironment
- Gateway = xxx.xxx.xxx.254
- Netmask = 255.255.255.0

All works as expected, VMs successfully deployed across server pool

3. Create second isolated network... the same as step 2, however when i do this I get the following error:
"Found existing network configuration (with specified id) for offering (with specified id)"

Now I know that one of the primary capabilities of CloudPlatform is the ability to isolate networks by VLAN, so clearly I must be doing something wrong.

Any advice greatly appreciated.

Platform: Xenserver 6.1; CloudPlatform 3.0.6

Regards

Andy

I finished the trial installation. Then I went to access the URL by going to http://management-server-address:8080/client, but only get Page Cannot be Found. I disabled the firewall, but still no luck. Any help would be appreciated. Thanks.

I am trying to install the trial for CloudStack 3.0.6. I get to the step where the trial says to install xenserver cloud support package. Does one exist for Xenserver 6.1 or did I miss something ? Thanks.

Hi, I am researcher about Solutions about Iaas .I have a Question. Is information about Citrix True??

" Citrix wants to build momentum behind its own project rather than OpenStack, which already has the suport of such names as Dell, HP, Japanese giant NTT Data, and AT&T. Citrix is now competing with OpenStack as well as longtime rival VMware, which offers a proprietary platform — vCloud — that operates much like OpenStack and CloudStack. "

If it is true, Is there any Architecture Model For Citrix in This subject?

Hi all,

when i try to register iso the download doesn't start. But if i go manually from IE to http://mywebserver/template.iso the download start

Any ideas?

Thanks for the reply

This is a new installation of CCP 3.0.6-x on CentOS 6.2 , the installation completes OK with no errors but the cloud-management service does not come up, when I check it with *service cloud-management status* I get this message:

service cloud-management status
cloud-management dead but pid file exists
The pid file locates at /var/run/cloud-management.pid and lock file at /var/lock/subsys/cloud-management.
Starting cloud-management will take care of them or you can manually clean up.
root@cpman ~#

I tried deleting the pid file and restarting the service, still no go

Any ideas ?

-Oded

I'm trying to change the SSL certificate of the console proxy following the information from the Administrator Guide for CloudPlatform 3.0.6. I've generated the 2048 bit CSR and the key, bought the SSL certificate, converted the key to PKS8 format, however, when I'm trying to update the SSL certificate in the GUI I'm getting this error (I removed in this message most of the content between BEGIN and END):

Failed to update SSL Certificate. Received value -----BEGIN CERTIFICATE----- MIIFVD.........MdegH7 -----END CERTIFICATE----- for parameter certificate is invalid, contains illegal ASCII non-printable characters

management-server.log doesn't show any specific error while I'm trying the above.

Any idea about what I'm doing wrong?

Thanks,

Daniel

I've run into an strange issue when testing the deployment of VMs into my newly provisioned cloud.
I have a cluster of 7 Xenservers (6.1), and i am using local disk (lvm) for VM primary storage. I have created a service offering that uses local disk and offers no HA.
The first time I deploy a VM using this service offering (with the default CentOS template, and no disk offering), the VM deploys successfully. If I repeat this process the deployment fails, having examined the log it appears to be a storage issue. I can see that the AbstractStoragePoolAllocator interrogates each node in turn and returns:
"StoragePool is in avoid set, skipping this pool"
This happens for all further attempts to deploy an instance, whether i try and attach a disk offering or not.
Having trawled the log i can't see why each storagepool is in "avoid set"... why would this happen, and how do i clear this flag?
Appreciate any advice
Andy

We have a need to do SSL termination at the load balancer. I know the virtual one will not support this.

1. Will the Netscaler work in an Advanced Zone (the docs all reference a Basic zone)?
2. Will the Netscaler support SSL termination if not in dedicated mode, or must it be configured as a dedicated device for the account?

Can someone please provide further information on what the CCP API call: generateUsageRecords actually does.

Obviously it generates usage records, but:

1. Is this the very API command that is called by the Usage Server process when it runs at the scheduled time(=usage.stats.job.exec.time)?

2. Is the API command related in any way to the Usage Server?

3. For what period does it generate the usage records eg.
from the last time it was called

Assumptions: network.throttling.rate is the rate set at the network. vm.network.throttling.rate is the rate set at the compute offering.
Goal: We are trying to setup things so that the VMs can communicate (Advanced Zone) at 1GB between VMs but when accessing the Internet the rate is limited.
Question: Is it safe to assume that that if we set the network.throttling.rate at the lower level (let's say 100MB) and the vm.network.throttling.rate at 1000MB, this will accomplish the goal? The default network offering is pre-set at 200MB, so do we need to create a custom network offering to fix this? Has anyone used multiple network offerings with a way to limit which accounts can see which offerings?

<p>hi,</p><p>if I have (just for example) a XenServer and a vSphere host beneath my CloudPlatform installation and ressources on one host getting short, what will happen if I upgrade a VM on that host with additional RAM and CPU? Can that VM then be migrated from one Hypervisor to another or what will happen/can I do?</p>

We have multiple VMs inside a VLANed Cloudstack (v 3.0.2: CloudStack-oss-3.0.2-1-rhel6.2) private network. We need to have these VMs communicate with each other via their public IPs (port mapped but possibly static NATed would be ok also). (Long story as to why, just take this as a requirement for a third party server product which we have no control of.)

This capability seems like something that should just work, yet does not work with the cloudstack virtual routers. When we properly configure the cloudstack private network virtual routers for public IP connectivity to a private subnet VM, and test it from outside the private network, we have no problem connecting. However, when we connect to the same VM via its public IP, calling from a VM inside the called VM's private subnet, the call simply hangs.

We're looking to see if this should work, and help getting it to work if so.

If it is known to not work, this would appear to be a bug/feature defect. Are we wrong in this thinking? Is it known to work in a later version?

Thanks -

Stephen

Wonder if someone can provide some guidance on the order of activities when configuring xenserver host networks.

Traditionally with xenserver the pool is created and then networks configured, the pool master then pushes out changes. I'm assuming this isn't the case with CloudPlatform, and that the only pre-config work i need to do in xencenter is give the networks on the hosts the correct labels that match those that will be configured in CloudPlatform?

I have 5 NICs on each host and intend to configure as follows:

NIC0 = Generic management network
NIC1 = Primary management interface; label = cloud-mgmt
NIC2 = Guest; label = cloud-guest
NIC2 = Public; label = cloud-public
NIC3 + NIC4 (bonded) = Storage

So, do I:

1. Create networks on the xenserver hosts with the appropriate labels
2. Create the zone/pod/cluster physical networks with the relevant network labels to match those in Xenserver
3. Add the first host to the CloudPlatform cluster which will automatically create the Xenserver pool
4. Add subsequent hosts to the CloudPlatform cluster which will automatically receive the correct config for the pool

Or do I configure the pool in xenserver and then do the CloudPlatform config bits?

Apologies if this is a bit of a basic question, i'm fairly new to CP

I'm getting alerts all the time for my SSVMs running out of disk space.
They are only provisioned with a 2GB disk and I have found that the /var/log/cloud/cloud.out file is 1.1GB in size.

Can I clean out this file? Or is there somewhere else I can get some space back from?

I have been able to download my W2K8 template I created, from my webserver into CloudPlatform.

It sucsessfully downloads 100%, but then persists to sit at "Installing Template". Its a 35GB C:\ and 10GB E:\ - double to the base Centos size VM that downloaded and installed.

This is over my presonal LAN - Lab environment at home.

Anyone else encountered this?

Thoughts?

Hi,
We've been running CloudStack 3.0.6 for a while in a basic zone. Now that we've got a hang of it we want to migrate our cloud to an advanced zone. I know we can create the advanced zone and a new zone but we want to be able to use our existing templates, ISOs and running instances in the advanced zone. Is there a way of doing this without having to re-register all templates and ISOs in the new advanced zone?

Anyone knows how to remote debug secondary storage VM?