You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Richard Lawley <ri...@richardlawley.com> on 2019/06/07 07:15:36 UTC

Is anyone using SRX Integration?

Hi,

We've recently added a couple of Juniper SRXs, but are finding that
the integration with CloudStack is very broken.  So far there have
been a number of things which just don't work:
* Adding Static NAT Rules
* Adding Port Forwarding Rules
* Removing Port Forwarding Rules

I've found and fixed locally some of these things, but I'm trying to
work out whether this functionality ever worked?  The "Supported
External Devices" on the CloudStack website lists "SRX (Model srx100b)
versions 10.3 to 10.4 R7.5" - JunOS 10 went EOL in 2014.  We've been
using 15.x, so either the functionality never worked, or the changes
in JunOS broke compatibility with CloudStack.

I'm working finding and fixing the functionality, but I'd be
interested to know whether anyone was actively using any of this
integration, as if so, the fixes I apply may well break compatibility
with (much) older versions.

Regards,

Richard

Re: Is anyone using SRX Integration?

Posted by Richard Lawley <ri...@richardlawley.com>.
> The last version we used is JunOS 10.x only.

Do you mean that you're not using them anymore?

> You can check the xml config files at the code path  scripts/network/juniper/,  in JunOS 15 to see configuration differences.

Unfortunately it's not as simple as that - the scripts file can be
edited to fix some of the changes, but others require code changes.
For example, looking for an existing port forward rule used to require
looking for the "dst-port" tag, now it requires the "name" tag.  This
is a code change.

Should I be trying to fix this in the codebase or not?  If nobody is
using JunOS 10 SRX devices with current releases of CloudStack then it
should not be a problem.

Re: Is anyone using SRX Integration?

Posted by Richard Lawley <ri...@richardlawley.com>.
> The last version we used is JunOS 10.x only.

Do you mean that you're not using them anymore?

> You can check the xml config files at the code path  scripts/network/juniper/,  in JunOS 15 to see configuration differences.

Unfortunately it's not as simple as that - the scripts file can be
edited to fix some of the changes, but others require code changes.
For example, looking for an existing port forward rule used to require
looking for the "dst-port" tag, now it requires the "name" tag.  This
is a code change.

Should I be trying to fix this in the codebase or not?  If nobody is
using JunOS 10 SRX devices with current releases of CloudStack then it
should not be a problem.

Re: Is anyone using SRX Integration?

Posted by Jayapal Uradi <ja...@accelerite.com>.

On 07-Jun-2019, at 1:19 PM, Richard Lawley <ri...@richardlawley.com>> wrote:

Are you using them, or is this just something which has been seen in the past?

We would like to get the current versions supported, but I don't want
to break functionality for existing systems.  JunOS 10 is very old!  I
don't have access to anything older than 15, so I don't know at what
point the syntax changed to prevent the current code from working.

The last version we used is JunOS 10.x only.
You can check the xml config files at the code path  scripts/network/juniper/,  in JunOS 15 to see configuration differences.

Thanks,
Jayapal


On Fri, 7 Jun 2019 at 08:20, Jayapal Uradi <ja...@accelerite.com>> wrote:

Hi,

The mentioned functionalities works with  JunOs 10.x.
Not used JunOs 15.x. May be backward compatibility issues.


Thanks,
Jayapal


On 07-Jun-2019, at 12:45 PM, Richard Lawley <ri...@richardlawley.com>> wrote:

Hi,

We've recently added a couple of Juniper SRXs, but are finding that
the integration with CloudStack is very broken.  So far there have
been a number of things which just don't work:
* Adding Static NAT Rules
* Adding Port Forwarding Rules
* Removing Port Forwarding Rules

I've found and fixed locally some of these things, but I'm trying to
work out whether this functionality ever worked?  The "Supported
External Devices" on the CloudStack website lists "SRX (Model srx100b)
versions 10.3 to 10.4 R7.5" - JunOS 10 went EOL in 2014.  We've been
using 15.x, so either the functionality never worked, or the changes
in JunOS broke compatibility with CloudStack.

I'm working finding and fixing the functionality, but I'd be
interested to know whether anyone was actively using any of this
integration, as if so, the fixes I apply may well break compatibility
with (much) older versions.

Regards,

Richard

DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.

Re: Is anyone using SRX Integration?

Posted by Richard Lawley <ri...@richardlawley.com>.
Are you using them, or is this just something which has been seen in the past?

We would like to get the current versions supported, but I don't want
to break functionality for existing systems.  JunOS 10 is very old!  I
don't have access to anything older than 15, so I don't know at what
point the syntax changed to prevent the current code from working.

On Fri, 7 Jun 2019 at 08:20, Jayapal Uradi <ja...@accelerite.com> wrote:
>
> Hi,
>
> The mentioned functionalities works with  JunOs 10.x.
> Not used JunOs 15.x. May be backward compatibility issues.
>
>
> Thanks,
> Jayapal
>
>
> On 07-Jun-2019, at 12:45 PM, Richard Lawley <ri...@richardlawley.com>> wrote:
>
> Hi,
>
> We've recently added a couple of Juniper SRXs, but are finding that
> the integration with CloudStack is very broken.  So far there have
> been a number of things which just don't work:
> * Adding Static NAT Rules
> * Adding Port Forwarding Rules
> * Removing Port Forwarding Rules
>
> I've found and fixed locally some of these things, but I'm trying to
> work out whether this functionality ever worked?  The "Supported
> External Devices" on the CloudStack website lists "SRX (Model srx100b)
> versions 10.3 to 10.4 R7.5" - JunOS 10 went EOL in 2014.  We've been
> using 15.x, so either the functionality never worked, or the changes
> in JunOS broke compatibility with CloudStack.
>
> I'm working finding and fixing the functionality, but I'd be
> interested to know whether anyone was actively using any of this
> integration, as if so, the fixes I apply may well break compatibility
> with (much) older versions.
>
> Regards,
>
> Richard
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.

Re: Is anyone using SRX Integration?

Posted by Richard Lawley <ri...@richardlawley.com>.
Are you using them, or is this just something which has been seen in the past?

We would like to get the current versions supported, but I don't want
to break functionality for existing systems.  JunOS 10 is very old!  I
don't have access to anything older than 15, so I don't know at what
point the syntax changed to prevent the current code from working.

On Fri, 7 Jun 2019 at 08:20, Jayapal Uradi <ja...@accelerite.com> wrote:
>
> Hi,
>
> The mentioned functionalities works with  JunOs 10.x.
> Not used JunOs 15.x. May be backward compatibility issues.
>
>
> Thanks,
> Jayapal
>
>
> On 07-Jun-2019, at 12:45 PM, Richard Lawley <ri...@richardlawley.com>> wrote:
>
> Hi,
>
> We've recently added a couple of Juniper SRXs, but are finding that
> the integration with CloudStack is very broken.  So far there have
> been a number of things which just don't work:
> * Adding Static NAT Rules
> * Adding Port Forwarding Rules
> * Removing Port Forwarding Rules
>
> I've found and fixed locally some of these things, but I'm trying to
> work out whether this functionality ever worked?  The "Supported
> External Devices" on the CloudStack website lists "SRX (Model srx100b)
> versions 10.3 to 10.4 R7.5" - JunOS 10 went EOL in 2014.  We've been
> using 15.x, so either the functionality never worked, or the changes
> in JunOS broke compatibility with CloudStack.
>
> I'm working finding and fixing the functionality, but I'd be
> interested to know whether anyone was actively using any of this
> integration, as if so, the fixes I apply may well break compatibility
> with (much) older versions.
>
> Regards,
>
> Richard
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.

Re: Is anyone using SRX Integration?

Posted by Jayapal Uradi <ja...@accelerite.com>.
Hi,

The mentioned functionalities works with  JunOs 10.x.
Not used JunOs 15.x. May be backward compatibility issues.


Thanks,
Jayapal


On 07-Jun-2019, at 12:45 PM, Richard Lawley <ri...@richardlawley.com>> wrote:

Hi,

We've recently added a couple of Juniper SRXs, but are finding that
the integration with CloudStack is very broken.  So far there have
been a number of things which just don't work:
* Adding Static NAT Rules
* Adding Port Forwarding Rules
* Removing Port Forwarding Rules

I've found and fixed locally some of these things, but I'm trying to
work out whether this functionality ever worked?  The "Supported
External Devices" on the CloudStack website lists "SRX (Model srx100b)
versions 10.3 to 10.4 R7.5" - JunOS 10 went EOL in 2014.  We've been
using 15.x, so either the functionality never worked, or the changes
in JunOS broke compatibility with CloudStack.

I'm working finding and fixing the functionality, but I'd be
interested to know whether anyone was actively using any of this
integration, as if so, the fixes I apply may well break compatibility
with (much) older versions.

Regards,

Richard

DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.