You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by KENT ORTELL JOHNSON <ke...@utah.edu> on 2013/08/07 02:23:30 UTC
CloudStack 4.1.0 not compatible with XenServer 6.2?!
I just installed XenServer 6.2 on a Dell R410 and tried to add it as a host in cloudstack but CS told me "Unable to add host." And I look in the management-server.log and it tells me that " Only support XCP 1.0.0, 1.1.0, 1.4.x, 1.5 beta, 1.6.x; XenServer 5.6, XenServer 5.6 FP1, XenServer 5.6 SP2, Xenserver 6.0, 6.0.2, 6.1.0 but this one is XenServer 6.2.0"
Does that mean that CloudStack 4.1.0 is not compatible with XenServer 6.2 or does that just mean that the Xcp Server Discoverer is not compatible with 6.2?
see the pastebin link here: http://pastebin.com/7NZniFCc for the section from the management-server.log
Kent Johnson
-----Original Message-----
From: David Comerford [mailto:davestyle@gmail.com]
Sent: Tuesday, August 6, 2013 5:56 PM
To: users@cloudstack.apache.org
Subject: Re: Architecture Question
np :)
Looking forward to knowing the answer to this one actually.
Best regards,
David Comerford
------------------------
Tel: +353 87 1238295
Email: davestyle@gmail.com
Website: http://dave.ie
GPG key: http://gpg.dave.ie
On 7 August 2013 00:50, Bradley Hieber <me...@gmail.com> wrote:
> I do appreciate the assistance David
> -
> Sent from Mailbox for iPhone
>
> On Tue, Aug 6, 2013 at 7:48 PM, David Comerford <da...@gmail.com>
> wrote:
>
> > Ah I understand. So you need a "DMZ" network tier with some device
> > on it that filters all traffic to and from the other tiers?
> > That's a bit beyond my VPC experience, sorry. Hopefully someone else
> might
> > chime in at this point :)
> > Best regards,
> > David Comerford
> > ------------------------
> > Tel: +353 87 1238295
> > Email: davestyle@gmail.com
> > Website: http://dave.ie
> > GPG key: http://gpg.dave.ie
> > On 7 August 2013 00:39, Bradley Hieber <me...@gmail.com> wrote:
> >> In the design we are building, we need to have a DMZ tier that
> encompasses
> >> all of the VPC's and all traffic needs to pass through it.
> >>
> >>
> >> On Tue, Aug 6, 2013 at 7:15 PM, David Comerford
> >> <da...@gmail.com>
> >> wrote:
> >>
> >> > You don't need a proxy. The VPC is held together by the virtual
> router.
> >> > That forwards the traffic to and from all the zones/DMZs or the
> >> CloudStack
> >> > term "network tiers".
> >> >
> >> > Ideally you would make a Web network tier where the web servers
> >> > would reside. Anther tier for application servers, anto
> >> >
> >> > Best regards,
> >> > David Comerford
> >> > ------------------------
> >> > Tel: +353 87 1238295
> >> > Email: davestyle@gmail.com
> >> > Website: http://dave.ie
> >> > GPG key: http://gpg.dave.ie
> >> >
> >> >
> >> > On 7 August 2013 00:09, Bradley Hieber <me...@gmail.com> wrote:
> >> >
> >> > > I need to place a proxy and web servers in my DMZ. Am I just
> >> > > not
> >> getting
> >> > > something?
> >> > >
> >> > >
> >> > > On Tue, Aug 6, 2013 at 7:06 PM, David Comerford <
> davestyle@gmail.com>
> >> > > wrote:
> >> > >
> >> > > > The DMZ in your diagram would be the Guest Public network you
> >> > > > have
> >> > > defined.
> >> > > > Each zone you have behind the router can be isolated on it's
> >> > > > own
> VLAN
> >> > and
> >> > > > have it's own firewall rules controlling ingress/egress.
> >> > > >
> >> > > > This diagram might explain it a bit better:
> >> > > >
> >> > > >
> >> > >
> >> >
> >>
> https://cwiki.apache.org/confluence/download/attachments/30747129/imag
> e001.png?version=1&modificationDate=1357237708000
> >> > > >
> >> > > > Best regards,
> >> > > > David Comerford
> >> > > > ------------------------
> >> > > > Tel: +353 87 1238295
> >> > > > Email: davestyle@gmail.com
> >> > > > Website: http://dave.ie
> >> > > > GPG key: http://gpg.dave.ie
> >> > > >
> >> > > >
> >> > > > On 6 August 2013 23:59, Bradley Hieber <me...@gmail.com>
> wrote:
> >> > > >
> >> > > > > How would I force the traffic to go through the DMZ? Would
> >> > > > > I
> set a
> >> > > small
> >> > > > > LAN in the virtual router to point to a proxy address in
> >> > > > > the
> DMZ?
> >> > > > > -
> >> > > > > Sent from Mailbox for iPhone
> >> > > > >
> >> > > > > On Tue, Aug 6, 2013 at 6:58 PM, David Comerford <
> >> davestyle@gmail.com
> >> > >
> >> > > > > wrote:
> >> > > > >
> >> > > > > > VPC's are the way to go. Your diagram is a text book example.
> >> > > > > >
> >> > > > >
> >> > > >
> >> > >
> >> >
> >>
> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.2/html/I
> nstallation_Guide/configure-vpc.html
> >> > > > > > Best regards,
> >> > > > > > David Comerford
> >> > > > > > ------------------------
> >> > > > > > Tel: +353 87 1238295
> >> > > > > > Email: davestyle@gmail.com
> >> > > > > > Website: http://dave.ie
> >> > > > > > GPG key: http://gpg.dave.ie On 6 August 2013 14:36,
> >> > > > > > Bradley Hieber <me...@gmail.com>
> >> > wrote:
> >> > > > > >> It could very well be VPC's. The idea is we are planning
> >> > > > > >> on
> >> using
> >> > > 5-6
> >> > > > > hosts
> >> > > > > >> in this environment. So designing the solution to fit
> >> > > > > >> this
> >> > hardware
> >> > > > > >> requirement is critical.
> >> > > > > >>
> >> > > > > >>
> >> > > > > >> On Tue, Aug 6, 2013 at 9:29 AM, Murali Reddy <
> >> > > Murali.Reddy@citrix.com
> >> > > > > >> >wrote:
> >> > > > > >>
> >> > > > > >> >
> >> > > > > >> > Can 'hosting zones' represented in diagram can be
> >> > > > > >> > contained
> >> > into a
> >> > > > > >> > CloudStack zone? If so you can dedicated set of hosts
> >> > > > > >> > to
> be in
> >> > the
> >> > > > > DMZ.
> >> > > > > >> > Then you can leverage 'host tags' [1] functionality to
> place
> >> > VM's
> >> > > > > >> > providing edge services (CloudStack system VM's or
> >> > > > > >> > user
> VM's)
> >> on
> >> > > the
> >> > > > > >> hosts
> >> > > > > >> > dedicated in DMZ.
> >> > > > > >> >
> >> > > > > >> > [1]
> >> > > > >
> >> https://cwiki.apache.org/CLOUDSTACK/host-tags-and-storage-tags.html
> >> > > > > >> >
> >> > > > > >> > On 05/08/13 11:28 PM, "Bradley Hieber" <
> mercsniper@gmail.com>
> >> > > > wrote:
> >> > > > > >> >
> >> > > > > >> > >The goal is to have a virtualized dmz area where we
> >> > > > > >> > >can
> place
> >> > > > public
> >> > > > > >> > >facing
> >> > > > > >> > >webservers, and other software based firewalls to
> >> > > > > >> > >protect
> the
> >> > > > > different
> >> > > > > >> > >virtualization areas. Each of the virtualization
> >> > > > > >> > >areas
> will
> >> > host
> >> > > > > >> different
> >> > > > > >> > >environments for clients to utilize.
> >> > > > > >> > >
> >> > > > > >> > >
> >> > > > > >> > >On Mon, Aug 5, 2013 at 1:55 PM, Chip Childers
> >> > > > > >> > ><ch...@sungard.com>wrote:
> >> > > > > >> > >
> >> > > > > >> > >> Can you explain a bit more about what your diagram
> implies?
> >> > > That
> >> > > > > >> might
> >> > > > > >> > >> help us help you.
> >> > > > > >> > >>
> >> > > > > >> > >>
> >> > > > > >> > >> On Mon, Aug 5, 2013 at 10:24 AM, Bradley Hieber <
> >> > > > > mercsniper@gmail.com
> >> > > > > >> > >> >wrote:
> >> > > > > >> > >>
> >> > > > > >> > >> > Is it possible to create this type of
> >> > > > > >> > >> > architecture
> with
> >> > > > > cloudstack?
> >> > > > > >> > >>Any
> >> > > > > >> > >> > design ideas you can provide?
> >> > > > > >> > >> >
> >> > > > > >> > >> > http://img850.imageshack.us/img850/7940/lnzp.jpg
> >> > > > > >> > >> >
> >> > > > > >> > >> > --
> >> > > > > >> > >> > Brad
> >> > > > > >> > >> >
> >> > > > > >> > >>
> >> > > > > >> > >
> >> > > > > >> > >
> >> > > > > >> > >
> >> > > > > >> > >--
> >> > > > > >> > >Brad
> >> > > > > >> > >
> >> > > > > >> >
> >> > > > > >> >
> >> > > > > >> >
> >> > > > > >>
> >> > > > > >>
> >> > > > > >> --
> >> > > > > >> Brad
> >> > > > > >>
> >> > > > >
> >> > > >
> >> > >
> >> > >
> >> > >
> >> > > --
> >> > > Brad
> >> > >
> >> >
> >>
> >>
> >>
> >> --
> >> Brad
> >>
>
Re: CloudStack 4.1.0 not compatible with XenServer 6.2?!
Posted by Carlos Reategui <ca...@reategui.com>.
On Tue, Aug 6, 2013 at 5:31 PM, Bradley Hieber <me...@gmail.com> wrote:
> Kent,
>
> That is correct. Please see the following for compatible Xen versions with
> CS 4.1.0:
>
> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.1.0/html/Installation_Guide/citrix-xenserver-installation.html#system-requirements-xenserver-hosts
>
>
That page is out of date. It does not mention 6.1.
Re: CloudStack 4.1.0 not compatible with XenServer 6.2?!
Posted by Bradley Hieber <me...@gmail.com>.
Kent,
That is correct. Please see the following for compatible Xen versions with
CS 4.1.0:
http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.1.0/html/Installation_Guide/citrix-xenserver-installation.html#system-requirements-xenserver-hosts
On Tue, Aug 6, 2013 at 8:23 PM, KENT ORTELL JOHNSON
<ke...@utah.edu>wrote:
> I just installed XenServer 6.2 on a Dell R410 and tried to add it as a
> host in cloudstack but CS told me "Unable to add host." And I look in the
> management-server.log and it tells me that " Only support XCP 1.0.0, 1.1.0,
> 1.4.x, 1.5 beta, 1.6.x; XenServer 5.6, XenServer 5.6 FP1, XenServer 5.6
> SP2, Xenserver 6.0, 6.0.2, 6.1.0 but this one is XenServer 6.2.0"
>
> Does that mean that CloudStack 4.1.0 is not compatible with XenServer 6.2
> or does that just mean that the Xcp Server Discoverer is not compatible
> with 6.2?
>
> see the pastebin link here: http://pastebin.com/7NZniFCc for the section
> from the management-server.log
>
> Kent Johnson
>
> -----Original Message-----
> From: David Comerford [mailto:davestyle@gmail.com]
> Sent: Tuesday, August 6, 2013 5:56 PM
> To: users@cloudstack.apache.org
> Subject: Re: Architecture Question
>
> np :)
> Looking forward to knowing the answer to this one actually.
>
> Best regards,
> David Comerford
> ------------------------
> Tel: +353 87 1238295
> Email: davestyle@gmail.com
> Website: http://dave.ie
> GPG key: http://gpg.dave.ie
>
>
> On 7 August 2013 00:50, Bradley Hieber <me...@gmail.com> wrote:
>
> > I do appreciate the assistance David
> > -
> > Sent from Mailbox for iPhone
> >
> > On Tue, Aug 6, 2013 at 7:48 PM, David Comerford <da...@gmail.com>
> > wrote:
> >
> > > Ah I understand. So you need a "DMZ" network tier with some device
> > > on it that filters all traffic to and from the other tiers?
> > > That's a bit beyond my VPC experience, sorry. Hopefully someone else
> > might
> > > chime in at this point :)
> > > Best regards,
> > > David Comerford
> > > ------------------------
> > > Tel: +353 87 1238295
> > > Email: davestyle@gmail.com
> > > Website: http://dave.ie
> > > GPG key: http://gpg.dave.ie
> > > On 7 August 2013 00:39, Bradley Hieber <me...@gmail.com> wrote:
> > >> In the design we are building, we need to have a DMZ tier that
> > encompasses
> > >> all of the VPC's and all traffic needs to pass through it.
> > >>
> > >>
> > >> On Tue, Aug 6, 2013 at 7:15 PM, David Comerford
> > >> <da...@gmail.com>
> > >> wrote:
> > >>
> > >> > You don't need a proxy. The VPC is held together by the virtual
> > router.
> > >> > That forwards the traffic to and from all the zones/DMZs or the
> > >> CloudStack
> > >> > term "network tiers".
> > >> >
> > >> > Ideally you would make a Web network tier where the web servers
> > >> > would reside. Anther tier for application servers, anto
> > >> >
> > >> > Best regards,
> > >> > David Comerford
> > >> > ------------------------
> > >> > Tel: +353 87 1238295
> > >> > Email: davestyle@gmail.com
> > >> > Website: http://dave.ie
> > >> > GPG key: http://gpg.dave.ie
> > >> >
> > >> >
> > >> > On 7 August 2013 00:09, Bradley Hieber <me...@gmail.com>
> wrote:
> > >> >
> > >> > > I need to place a proxy and web servers in my DMZ. Am I just
> > >> > > not
> > >> getting
> > >> > > something?
> > >> > >
> > >> > >
> > >> > > On Tue, Aug 6, 2013 at 7:06 PM, David Comerford <
> > davestyle@gmail.com>
> > >> > > wrote:
> > >> > >
> > >> > > > The DMZ in your diagram would be the Guest Public network you
> > >> > > > have
> > >> > > defined.
> > >> > > > Each zone you have behind the router can be isolated on it's
> > >> > > > own
> > VLAN
> > >> > and
> > >> > > > have it's own firewall rules controlling ingress/egress.
> > >> > > >
> > >> > > > This diagram might explain it a bit better:
> > >> > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> > https://cwiki.apache.org/confluence/download/attachments/30747129/imag
> > e001.png?version=1&modificationDate=1357237708000
> > >> > > >
> > >> > > > Best regards,
> > >> > > > David Comerford
> > >> > > > ------------------------
> > >> > > > Tel: +353 87 1238295
> > >> > > > Email: davestyle@gmail.com
> > >> > > > Website: http://dave.ie
> > >> > > > GPG key: http://gpg.dave.ie
> > >> > > >
> > >> > > >
> > >> > > > On 6 August 2013 23:59, Bradley Hieber <me...@gmail.com>
> > wrote:
> > >> > > >
> > >> > > > > How would I force the traffic to go through the DMZ? Would
> > >> > > > > I
> > set a
> > >> > > small
> > >> > > > > LAN in the virtual router to point to a proxy address in
> > >> > > > > the
> > DMZ?
> > >> > > > > -
> > >> > > > > Sent from Mailbox for iPhone
> > >> > > > >
> > >> > > > > On Tue, Aug 6, 2013 at 6:58 PM, David Comerford <
> > >> davestyle@gmail.com
> > >> > >
> > >> > > > > wrote:
> > >> > > > >
> > >> > > > > > VPC's are the way to go. Your diagram is a text book
> example.
> > >> > > > > >
> > >> > > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> > http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.2/html/I
> > nstallation_Guide/configure-vpc.html
> > >> > > > > > Best regards,
> > >> > > > > > David Comerford
> > >> > > > > > ------------------------
> > >> > > > > > Tel: +353 87 1238295
> > >> > > > > > Email: davestyle@gmail.com
> > >> > > > > > Website: http://dave.ie
> > >> > > > > > GPG key: http://gpg.dave.ie On 6 August 2013 14:36,
> > >> > > > > > Bradley Hieber <me...@gmail.com>
> > >> > wrote:
> > >> > > > > >> It could very well be VPC's. The idea is we are planning
> > >> > > > > >> on
> > >> using
> > >> > > 5-6
> > >> > > > > hosts
> > >> > > > > >> in this environment. So designing the solution to fit
> > >> > > > > >> this
> > >> > hardware
> > >> > > > > >> requirement is critical.
> > >> > > > > >>
> > >> > > > > >>
> > >> > > > > >> On Tue, Aug 6, 2013 at 9:29 AM, Murali Reddy <
> > >> > > Murali.Reddy@citrix.com
> > >> > > > > >> >wrote:
> > >> > > > > >>
> > >> > > > > >> >
> > >> > > > > >> > Can 'hosting zones' represented in diagram can be
> > >> > > > > >> > contained
> > >> > into a
> > >> > > > > >> > CloudStack zone? If so you can dedicated set of hosts
> > >> > > > > >> > to
> > be in
> > >> > the
> > >> > > > > DMZ.
> > >> > > > > >> > Then you can leverage 'host tags' [1] functionality to
> > place
> > >> > VM's
> > >> > > > > >> > providing edge services (CloudStack system VM's or
> > >> > > > > >> > user
> > VM's)
> > >> on
> > >> > > the
> > >> > > > > >> hosts
> > >> > > > > >> > dedicated in DMZ.
> > >> > > > > >> >
> > >> > > > > >> > [1]
> > >> > > > >
> > >> https://cwiki.apache.org/CLOUDSTACK/host-tags-and-storage-tags.html
> > >> > > > > >> >
> > >> > > > > >> > On 05/08/13 11:28 PM, "Bradley Hieber" <
> > mercsniper@gmail.com>
> > >> > > > wrote:
> > >> > > > > >> >
> > >> > > > > >> > >The goal is to have a virtualized dmz area where we
> > >> > > > > >> > >can
> > place
> > >> > > > public
> > >> > > > > >> > >facing
> > >> > > > > >> > >webservers, and other software based firewalls to
> > >> > > > > >> > >protect
> > the
> > >> > > > > different
> > >> > > > > >> > >virtualization areas. Each of the virtualization
> > >> > > > > >> > >areas
> > will
> > >> > host
> > >> > > > > >> different
> > >> > > > > >> > >environments for clients to utilize.
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >On Mon, Aug 5, 2013 at 1:55 PM, Chip Childers
> > >> > > > > >> > ><ch...@sungard.com>wrote:
> > >> > > > > >> > >
> > >> > > > > >> > >> Can you explain a bit more about what your diagram
> > implies?
> > >> > > That
> > >> > > > > >> might
> > >> > > > > >> > >> help us help you.
> > >> > > > > >> > >>
> > >> > > > > >> > >>
> > >> > > > > >> > >> On Mon, Aug 5, 2013 at 10:24 AM, Bradley Hieber <
> > >> > > > > mercsniper@gmail.com
> > >> > > > > >> > >> >wrote:
> > >> > > > > >> > >>
> > >> > > > > >> > >> > Is it possible to create this type of
> > >> > > > > >> > >> > architecture
> > with
> > >> > > > > cloudstack?
> > >> > > > > >> > >>Any
> > >> > > > > >> > >> > design ideas you can provide?
> > >> > > > > >> > >> >
> > >> > > > > >> > >> > http://img850.imageshack.us/img850/7940/lnzp.jpg
> > >> > > > > >> > >> >
> > >> > > > > >> > >> > --
> > >> > > > > >> > >> > Brad
> > >> > > > > >> > >> >
> > >> > > > > >> > >>
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >--
> > >> > > > > >> > >Brad
> > >> > > > > >> > >
> > >> > > > > >> >
> > >> > > > > >> >
> > >> > > > > >> >
> > >> > > > > >>
> > >> > > > > >>
> > >> > > > > >> --
> > >> > > > > >> Brad
> > >> > > > > >>
> > >> > > > >
> > >> > > >
> > >> > >
> > >> > >
> > >> > >
> > >> > > --
> > >> > > Brad
> > >> > >
> > >> >
> > >>
> > >>
> > >>
> > >> --
> > >> Brad
> > >>
> >
>
--
Brad
RE: CloudStack 4.1.0 not compatible with XenServer 6.2?!
Posted by KENT ORTELL JOHNSON <ke...@utah.edu>.
Thanks, Bradley and Ahmad, now I need to reinstall with 6.1. >,<
-----Original Message-----
From: Ahmad Emneina [mailto:aemneina@gmail.com]
Sent: Tuesday, August 6, 2013 6:32 PM
To: Cloudstack users mailing list
Subject: Re: CloudStack 4.1.0 not compatible with XenServer 6.2?!
XenServer 6.2 support is supposed to come in cloudstack 4.2. Thats what i gather from previous emails to dev.
On Tue, Aug 6, 2013 at 5:23 PM, KENT ORTELL JOHNSON
<ke...@utah.edu>wrote:
> I just installed XenServer 6.2 on a Dell R410 and tried to add it as a
> host in cloudstack but CS told me "Unable to add host." And I look in
> the management-server.log and it tells me that " Only support XCP
> 1.0.0, 1.1.0, 1.4.x, 1.5 beta, 1.6.x; XenServer 5.6, XenServer 5.6
> FP1, XenServer 5.6 SP2, Xenserver 6.0, 6.0.2, 6.1.0 but this one is XenServer 6.2.0"
>
> Does that mean that CloudStack 4.1.0 is not compatible with XenServer
> 6.2 or does that just mean that the Xcp Server Discoverer is not
> compatible with 6.2?
>
> see the pastebin link here: http://pastebin.com/7NZniFCc for the
> section from the management-server.log
>
> Kent Johnson
>
> -----Original Message-----
> From: David Comerford [mailto:davestyle@gmail.com]
> Sent: Tuesday, August 6, 2013 5:56 PM
> To: users@cloudstack.apache.org
> Subject: Re: Architecture Question
>
> np :)
> Looking forward to knowing the answer to this one actually.
>
> Best regards,
> David Comerford
> ------------------------
> Tel: +353 87 1238295
> Email: davestyle@gmail.com
> Website: http://dave.ie
> GPG key: http://gpg.dave.ie
>
>
> On 7 August 2013 00:50, Bradley Hieber <me...@gmail.com> wrote:
>
> > I do appreciate the assistance David
> > -
> > Sent from Mailbox for iPhone
> >
> > On Tue, Aug 6, 2013 at 7:48 PM, David Comerford
> > <da...@gmail.com>
> > wrote:
> >
> > > Ah I understand. So you need a "DMZ" network tier with some device
> > > on it that filters all traffic to and from the other tiers?
> > > That's a bit beyond my VPC experience, sorry. Hopefully someone
> > > else
> > might
> > > chime in at this point :)
> > > Best regards,
> > > David Comerford
> > > ------------------------
> > > Tel: +353 87 1238295
> > > Email: davestyle@gmail.com
> > > Website: http://dave.ie
> > > GPG key: http://gpg.dave.ie
> > > On 7 August 2013 00:39, Bradley Hieber <me...@gmail.com> wrote:
> > >> In the design we are building, we need to have a DMZ tier that
> > encompasses
> > >> all of the VPC's and all traffic needs to pass through it.
> > >>
> > >>
> > >> On Tue, Aug 6, 2013 at 7:15 PM, David Comerford
> > >> <da...@gmail.com>
> > >> wrote:
> > >>
> > >> > You don't need a proxy. The VPC is held together by the virtual
> > router.
> > >> > That forwards the traffic to and from all the zones/DMZs or the
> > >> CloudStack
> > >> > term "network tiers".
> > >> >
> > >> > Ideally you would make a Web network tier where the web servers
> > >> > would reside. Anther tier for application servers, anto
> > >> >
> > >> > Best regards,
> > >> > David Comerford
> > >> > ------------------------
> > >> > Tel: +353 87 1238295
> > >> > Email: davestyle@gmail.com
> > >> > Website: http://dave.ie
> > >> > GPG key: http://gpg.dave.ie
> > >> >
> > >> >
> > >> > On 7 August 2013 00:09, Bradley Hieber <me...@gmail.com>
> wrote:
> > >> >
> > >> > > I need to place a proxy and web servers in my DMZ. Am I just
> > >> > > not
> > >> getting
> > >> > > something?
> > >> > >
> > >> > >
> > >> > > On Tue, Aug 6, 2013 at 7:06 PM, David Comerford <
> > davestyle@gmail.com>
> > >> > > wrote:
> > >> > >
> > >> > > > The DMZ in your diagram would be the Guest Public network
> > >> > > > you have
> > >> > > defined.
> > >> > > > Each zone you have behind the router can be isolated on
> > >> > > > it's own
> > VLAN
> > >> > and
> > >> > > > have it's own firewall rules controlling ingress/egress.
> > >> > > >
> > >> > > > This diagram might explain it a bit better:
> > >> > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> > https://cwiki.apache.org/confluence/download/attachments/30747129/im
> > ag
> > e001.png?version=1&modificationDate=1357237708000
> > >> > > >
> > >> > > > Best regards,
> > >> > > > David Comerford
> > >> > > > ------------------------
> > >> > > > Tel: +353 87 1238295
> > >> > > > Email: davestyle@gmail.com
> > >> > > > Website: http://dave.ie
> > >> > > > GPG key: http://gpg.dave.ie
> > >> > > >
> > >> > > >
> > >> > > > On 6 August 2013 23:59, Bradley Hieber
> > >> > > > <me...@gmail.com>
> > wrote:
> > >> > > >
> > >> > > > > How would I force the traffic to go through the DMZ?
> > >> > > > > Would I
> > set a
> > >> > > small
> > >> > > > > LAN in the virtual router to point to a proxy address in
> > >> > > > > the
> > DMZ?
> > >> > > > > -
> > >> > > > > Sent from Mailbox for iPhone
> > >> > > > >
> > >> > > > > On Tue, Aug 6, 2013 at 6:58 PM, David Comerford <
> > >> davestyle@gmail.com
> > >> > >
> > >> > > > > wrote:
> > >> > > > >
> > >> > > > > > VPC's are the way to go. Your diagram is a text book
> example.
> > >> > > > > >
> > >> > > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> > http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.2/html
> > /I nstallation_Guide/configure-vpc.html
> > >> > > > > > Best regards,
> > >> > > > > > David Comerford
> > >> > > > > > ------------------------
> > >> > > > > > Tel: +353 87 1238295
> > >> > > > > > Email: davestyle@gmail.com
> > >> > > > > > Website: http://dave.ie GPG key: http://gpg.dave.ie On
> > >> > > > > > 6 August 2013 14:36, Bradley Hieber
> > >> > > > > > <me...@gmail.com>
> > >> > wrote:
> > >> > > > > >> It could very well be VPC's. The idea is we are
> > >> > > > > >> planning on
> > >> using
> > >> > > 5-6
> > >> > > > > hosts
> > >> > > > > >> in this environment. So designing the solution to fit
> > >> > > > > >> this
> > >> > hardware
> > >> > > > > >> requirement is critical.
> > >> > > > > >>
> > >> > > > > >>
> > >> > > > > >> On Tue, Aug 6, 2013 at 9:29 AM, Murali Reddy <
> > >> > > Murali.Reddy@citrix.com
> > >> > > > > >> >wrote:
> > >> > > > > >>
> > >> > > > > >> >
> > >> > > > > >> > Can 'hosting zones' represented in diagram can be
> > >> > > > > >> > contained
> > >> > into a
> > >> > > > > >> > CloudStack zone? If so you can dedicated set of
> > >> > > > > >> > hosts to
> > be in
> > >> > the
> > >> > > > > DMZ.
> > >> > > > > >> > Then you can leverage 'host tags' [1] functionality
> > >> > > > > >> > to
> > place
> > >> > VM's
> > >> > > > > >> > providing edge services (CloudStack system VM's or
> > >> > > > > >> > user
> > VM's)
> > >> on
> > >> > > the
> > >> > > > > >> hosts
> > >> > > > > >> > dedicated in DMZ.
> > >> > > > > >> >
> > >> > > > > >> > [1]
> > >> > > > >
> > >> https://cwiki.apache.org/CLOUDSTACK/host-tags-and-storage-tags.ht
> > >> ml
> > >> > > > > >> >
> > >> > > > > >> > On 05/08/13 11:28 PM, "Bradley Hieber" <
> > mercsniper@gmail.com>
> > >> > > > wrote:
> > >> > > > > >> >
> > >> > > > > >> > >The goal is to have a virtualized dmz area where we
> > >> > > > > >> > >can
> > place
> > >> > > > public
> > >> > > > > >> > >facing
> > >> > > > > >> > >webservers, and other software based firewalls to
> > >> > > > > >> > >protect
> > the
> > >> > > > > different
> > >> > > > > >> > >virtualization areas. Each of the virtualization
> > >> > > > > >> > >areas
> > will
> > >> > host
> > >> > > > > >> different
> > >> > > > > >> > >environments for clients to utilize.
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >On Mon, Aug 5, 2013 at 1:55 PM, Chip Childers
> > >> > > > > >> > ><ch...@sungard.com>wrote:
> > >> > > > > >> > >
> > >> > > > > >> > >> Can you explain a bit more about what your
> > >> > > > > >> > >> diagram
> > implies?
> > >> > > That
> > >> > > > > >> might
> > >> > > > > >> > >> help us help you.
> > >> > > > > >> > >>
> > >> > > > > >> > >>
> > >> > > > > >> > >> On Mon, Aug 5, 2013 at 10:24 AM, Bradley Hieber <
> > >> > > > > mercsniper@gmail.com
> > >> > > > > >> > >> >wrote:
> > >> > > > > >> > >>
> > >> > > > > >> > >> > Is it possible to create this type of
> > >> > > > > >> > >> > architecture
> > with
> > >> > > > > cloudstack?
> > >> > > > > >> > >>Any
> > >> > > > > >> > >> > design ideas you can provide?
> > >> > > > > >> > >> >
> > >> > > > > >> > >> > http://img850.imageshack.us/img850/7940/lnzp.jp
> > >> > > > > >> > >> > g
> > >> > > > > >> > >> >
> > >> > > > > >> > >> > --
> > >> > > > > >> > >> > Brad
> > >> > > > > >> > >> >
> > >> > > > > >> > >>
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >--
> > >> > > > > >> > >Brad
> > >> > > > > >> > >
> > >> > > > > >> >
> > >> > > > > >> >
> > >> > > > > >> >
> > >> > > > > >>
> > >> > > > > >>
> > >> > > > > >> --
> > >> > > > > >> Brad
> > >> > > > > >>
> > >> > > > >
> > >> > > >
> > >> > >
> > >> > >
> > >> > >
> > >> > > --
> > >> > > Brad
> > >> > >
> > >> >
> > >>
> > >>
> > >>
> > >> --
> > >> Brad
> > >>
> >
>
Re: CloudStack 4.1.0 not compatible with XenServer 6.2?!
Posted by Ahmad Emneina <ae...@gmail.com>.
XenServer 6.2 support is supposed to come in cloudstack 4.2. Thats what i
gather from previous emails to dev.
On Tue, Aug 6, 2013 at 5:23 PM, KENT ORTELL JOHNSON
<ke...@utah.edu>wrote:
> I just installed XenServer 6.2 on a Dell R410 and tried to add it as a
> host in cloudstack but CS told me "Unable to add host." And I look in the
> management-server.log and it tells me that " Only support XCP 1.0.0, 1.1.0,
> 1.4.x, 1.5 beta, 1.6.x; XenServer 5.6, XenServer 5.6 FP1, XenServer 5.6
> SP2, Xenserver 6.0, 6.0.2, 6.1.0 but this one is XenServer 6.2.0"
>
> Does that mean that CloudStack 4.1.0 is not compatible with XenServer 6.2
> or does that just mean that the Xcp Server Discoverer is not compatible
> with 6.2?
>
> see the pastebin link here: http://pastebin.com/7NZniFCc for the section
> from the management-server.log
>
> Kent Johnson
>
> -----Original Message-----
> From: David Comerford [mailto:davestyle@gmail.com]
> Sent: Tuesday, August 6, 2013 5:56 PM
> To: users@cloudstack.apache.org
> Subject: Re: Architecture Question
>
> np :)
> Looking forward to knowing the answer to this one actually.
>
> Best regards,
> David Comerford
> ------------------------
> Tel: +353 87 1238295
> Email: davestyle@gmail.com
> Website: http://dave.ie
> GPG key: http://gpg.dave.ie
>
>
> On 7 August 2013 00:50, Bradley Hieber <me...@gmail.com> wrote:
>
> > I do appreciate the assistance David
> > -
> > Sent from Mailbox for iPhone
> >
> > On Tue, Aug 6, 2013 at 7:48 PM, David Comerford <da...@gmail.com>
> > wrote:
> >
> > > Ah I understand. So you need a "DMZ" network tier with some device
> > > on it that filters all traffic to and from the other tiers?
> > > That's a bit beyond my VPC experience, sorry. Hopefully someone else
> > might
> > > chime in at this point :)
> > > Best regards,
> > > David Comerford
> > > ------------------------
> > > Tel: +353 87 1238295
> > > Email: davestyle@gmail.com
> > > Website: http://dave.ie
> > > GPG key: http://gpg.dave.ie
> > > On 7 August 2013 00:39, Bradley Hieber <me...@gmail.com> wrote:
> > >> In the design we are building, we need to have a DMZ tier that
> > encompasses
> > >> all of the VPC's and all traffic needs to pass through it.
> > >>
> > >>
> > >> On Tue, Aug 6, 2013 at 7:15 PM, David Comerford
> > >> <da...@gmail.com>
> > >> wrote:
> > >>
> > >> > You don't need a proxy. The VPC is held together by the virtual
> > router.
> > >> > That forwards the traffic to and from all the zones/DMZs or the
> > >> CloudStack
> > >> > term "network tiers".
> > >> >
> > >> > Ideally you would make a Web network tier where the web servers
> > >> > would reside. Anther tier for application servers, anto
> > >> >
> > >> > Best regards,
> > >> > David Comerford
> > >> > ------------------------
> > >> > Tel: +353 87 1238295
> > >> > Email: davestyle@gmail.com
> > >> > Website: http://dave.ie
> > >> > GPG key: http://gpg.dave.ie
> > >> >
> > >> >
> > >> > On 7 August 2013 00:09, Bradley Hieber <me...@gmail.com>
> wrote:
> > >> >
> > >> > > I need to place a proxy and web servers in my DMZ. Am I just
> > >> > > not
> > >> getting
> > >> > > something?
> > >> > >
> > >> > >
> > >> > > On Tue, Aug 6, 2013 at 7:06 PM, David Comerford <
> > davestyle@gmail.com>
> > >> > > wrote:
> > >> > >
> > >> > > > The DMZ in your diagram would be the Guest Public network you
> > >> > > > have
> > >> > > defined.
> > >> > > > Each zone you have behind the router can be isolated on it's
> > >> > > > own
> > VLAN
> > >> > and
> > >> > > > have it's own firewall rules controlling ingress/egress.
> > >> > > >
> > >> > > > This diagram might explain it a bit better:
> > >> > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> > https://cwiki.apache.org/confluence/download/attachments/30747129/imag
> > e001.png?version=1&modificationDate=1357237708000
> > >> > > >
> > >> > > > Best regards,
> > >> > > > David Comerford
> > >> > > > ------------------------
> > >> > > > Tel: +353 87 1238295
> > >> > > > Email: davestyle@gmail.com
> > >> > > > Website: http://dave.ie
> > >> > > > GPG key: http://gpg.dave.ie
> > >> > > >
> > >> > > >
> > >> > > > On 6 August 2013 23:59, Bradley Hieber <me...@gmail.com>
> > wrote:
> > >> > > >
> > >> > > > > How would I force the traffic to go through the DMZ? Would
> > >> > > > > I
> > set a
> > >> > > small
> > >> > > > > LAN in the virtual router to point to a proxy address in
> > >> > > > > the
> > DMZ?
> > >> > > > > -
> > >> > > > > Sent from Mailbox for iPhone
> > >> > > > >
> > >> > > > > On Tue, Aug 6, 2013 at 6:58 PM, David Comerford <
> > >> davestyle@gmail.com
> > >> > >
> > >> > > > > wrote:
> > >> > > > >
> > >> > > > > > VPC's are the way to go. Your diagram is a text book
> example.
> > >> > > > > >
> > >> > > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> > http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.2/html/I
> > nstallation_Guide/configure-vpc.html
> > >> > > > > > Best regards,
> > >> > > > > > David Comerford
> > >> > > > > > ------------------------
> > >> > > > > > Tel: +353 87 1238295
> > >> > > > > > Email: davestyle@gmail.com
> > >> > > > > > Website: http://dave.ie
> > >> > > > > > GPG key: http://gpg.dave.ie On 6 August 2013 14:36,
> > >> > > > > > Bradley Hieber <me...@gmail.com>
> > >> > wrote:
> > >> > > > > >> It could very well be VPC's. The idea is we are planning
> > >> > > > > >> on
> > >> using
> > >> > > 5-6
> > >> > > > > hosts
> > >> > > > > >> in this environment. So designing the solution to fit
> > >> > > > > >> this
> > >> > hardware
> > >> > > > > >> requirement is critical.
> > >> > > > > >>
> > >> > > > > >>
> > >> > > > > >> On Tue, Aug 6, 2013 at 9:29 AM, Murali Reddy <
> > >> > > Murali.Reddy@citrix.com
> > >> > > > > >> >wrote:
> > >> > > > > >>
> > >> > > > > >> >
> > >> > > > > >> > Can 'hosting zones' represented in diagram can be
> > >> > > > > >> > contained
> > >> > into a
> > >> > > > > >> > CloudStack zone? If so you can dedicated set of hosts
> > >> > > > > >> > to
> > be in
> > >> > the
> > >> > > > > DMZ.
> > >> > > > > >> > Then you can leverage 'host tags' [1] functionality to
> > place
> > >> > VM's
> > >> > > > > >> > providing edge services (CloudStack system VM's or
> > >> > > > > >> > user
> > VM's)
> > >> on
> > >> > > the
> > >> > > > > >> hosts
> > >> > > > > >> > dedicated in DMZ.
> > >> > > > > >> >
> > >> > > > > >> > [1]
> > >> > > > >
> > >> https://cwiki.apache.org/CLOUDSTACK/host-tags-and-storage-tags.html
> > >> > > > > >> >
> > >> > > > > >> > On 05/08/13 11:28 PM, "Bradley Hieber" <
> > mercsniper@gmail.com>
> > >> > > > wrote:
> > >> > > > > >> >
> > >> > > > > >> > >The goal is to have a virtualized dmz area where we
> > >> > > > > >> > >can
> > place
> > >> > > > public
> > >> > > > > >> > >facing
> > >> > > > > >> > >webservers, and other software based firewalls to
> > >> > > > > >> > >protect
> > the
> > >> > > > > different
> > >> > > > > >> > >virtualization areas. Each of the virtualization
> > >> > > > > >> > >areas
> > will
> > >> > host
> > >> > > > > >> different
> > >> > > > > >> > >environments for clients to utilize.
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >On Mon, Aug 5, 2013 at 1:55 PM, Chip Childers
> > >> > > > > >> > ><ch...@sungard.com>wrote:
> > >> > > > > >> > >
> > >> > > > > >> > >> Can you explain a bit more about what your diagram
> > implies?
> > >> > > That
> > >> > > > > >> might
> > >> > > > > >> > >> help us help you.
> > >> > > > > >> > >>
> > >> > > > > >> > >>
> > >> > > > > >> > >> On Mon, Aug 5, 2013 at 10:24 AM, Bradley Hieber <
> > >> > > > > mercsniper@gmail.com
> > >> > > > > >> > >> >wrote:
> > >> > > > > >> > >>
> > >> > > > > >> > >> > Is it possible to create this type of
> > >> > > > > >> > >> > architecture
> > with
> > >> > > > > cloudstack?
> > >> > > > > >> > >>Any
> > >> > > > > >> > >> > design ideas you can provide?
> > >> > > > > >> > >> >
> > >> > > > > >> > >> > http://img850.imageshack.us/img850/7940/lnzp.jpg
> > >> > > > > >> > >> >
> > >> > > > > >> > >> > --
> > >> > > > > >> > >> > Brad
> > >> > > > > >> > >> >
> > >> > > > > >> > >>
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >
> > >> > > > > >> > >--
> > >> > > > > >> > >Brad
> > >> > > > > >> > >
> > >> > > > > >> >
> > >> > > > > >> >
> > >> > > > > >> >
> > >> > > > > >>
> > >> > > > > >>
> > >> > > > > >> --
> > >> > > > > >> Brad
> > >> > > > > >>
> > >> > > > >
> > >> > > >
> > >> > >
> > >> > >
> > >> > >
> > >> > > --
> > >> > > Brad
> > >> > >
> > >> >
> > >>
> > >>
> > >>
> > >> --
> > >> Brad
> > >>
> >
>