You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by anil lakineni <an...@gmail.com> on 2015/05/05 16:20:34 UTC
Centralized Management console for all tenants on CS 4.3.1..??
Hi All,
I need a help..
I want to monitor all the tenant VMs from a centralized VM with in the
Cloud Stack.
" Here my testing plan is, I have two isolated accounts and each account
contains a VM .And I will be deploying a VM (which is centralized
management VM) on ROOT account. Now I want to monitor those two isloated
account VMs from ROOT account VM." and here main concern is no two tenants
VMs will communicate.
Please can any one suggest me the best possible ways to solve my task.
My CS version is 4.3.1 and XenServer version is 6.2.0
Looking forward for your valuable comments.
Best Regards,
Anil.
Re: Centralized Management console for all tenants on CS 4.3.1..??
Posted by anil lakineni <an...@gmail.com>.
Somesh,
Thank you for your replay..
My CS Environment is Advanced Zone without Security Groups option. Can we
have other possibilities like blocking communication between VMs at virtual
router (VR) level or any thing else.
If we can do blocking at VR level, can you please elaborate the process to
me (any commands need to execute in the VR).
Looking forward for your replays.
Thank You,
Anil.
On Wed, May 6, 2015 at 3:59 AM, Somesh Naidu <So...@citrix.com>
wrote:
> You could use Security Groups to achieve this.
>
> Somesh
> CloudPlatform Escalations
> Citrix Systems, Inc.
>
>
> -----Original Message-----
> From: anil lakineni [mailto:anilkumar459.lakineni@gmail.com]
> Sent: Tuesday, May 05, 2015 4:32 PM
> To: users@cloudstack.apache.org; dev@cloudstack.apache.org
> Subject: Re: Centralized Management console for all tenants on CS 4.3.1..??
>
> Hi All,
>
> Comments are in line,
>
> A quick question, Is there any possibility to stop communication between
> two VMs which are using shared network (why because I need communication
> between some VMs on this shared network and I don't want communication
> between some VMs on this same shared network).
>
> Waiting for your valuable replays.
>
> Thank You,
> Anil.
>
> On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
> anilkumar459.lakineni@gmail.com> wrote:
>
> > Hi All,
> >
> > I need a help..
> >
> > I want to monitor all the tenant VMs from a centralized VM with in the
> > Cloud Stack.
> >
> > " Here my testing plan is, I have two isolated accounts and each account
> > contains a VM .And I will be deploying a VM (which is centralized
> > management VM) on ROOT account. Now I want to monitor those two isloated
> > account VMs from ROOT account VM." and here main concern is no two
> tenants
> > VMs will communicate.
> >
> > Please can any one suggest me the best possible ways to solve my task.
> >
> > My CS version is 4.3.1 and XenServer version is 6.2.0
> >
> > Looking forward for your valuable comments.
> >
> > Best Regards,
> > Anil.
> >
>
Re: Centralized Management console for all tenants on CS 4.3.1..??
Posted by anil lakineni <an...@gmail.com>.
Hi ilya,
Thanks for provided additional information..
We have already an existing CS Environment (with XenServer hosts) with no
security groups option enabled. So, do we have any options to re-enable
security groups option for existing zone which is already in production.
Thank You,
Anil.
On Wed, May 6, 2015 at 9:15 AM, ilya <il...@gmail.com> wrote:
> A little more context to what Somesh mentioned.
>
> If you are running Xen/KVM, then you can deploy a cloudstack zone with
> Security Groups.
>
> This means cloudstack will manage the iptables rules on the hypervisors
> and push only the ACL rules you define in cloudstack.
>
> This suppose to be very scalable and would solve the common firewall
> management challenges as well as need for running VLAN isolation.
>
> Really powerful concept to say the least in very large setups and
> abstracts lots of firewall and switch level complexity.
>
>
> On 5/5/15 3:29 PM, Somesh Naidu wrote:
>
>> You could use Security Groups to achieve this.
>>
>> Somesh
>> CloudPlatform Escalations
>> Citrix Systems, Inc.
>>
>>
>> -----Original Message-----
>> From: anil lakineni [mailto:anilkumar459.lakineni@gmail.com]
>> Sent: Tuesday, May 05, 2015 4:32 PM
>> To: users@cloudstack.apache.org; dev@cloudstack.apache.org
>> Subject: Re: Centralized Management console for all tenants on CS
>> 4.3.1..??
>>
>> Hi All,
>>
>> Comments are in line,
>>
>> A quick question, Is there any possibility to stop communication between
>> two VMs which are using shared network (why because I need communication
>> between some VMs on this shared network and I don't want communication
>> between some VMs on this same shared network).
>>
>> Waiting for your valuable replays.
>>
>> Thank You,
>> Anil.
>>
>> On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
>> anilkumar459.lakineni@gmail.com> wrote:
>>
>> Hi All,
>>>
>>> I need a help..
>>>
>>> I want to monitor all the tenant VMs from a centralized VM with in the
>>> Cloud Stack.
>>>
>>> " Here my testing plan is, I have two isolated accounts and each account
>>> contains a VM .And I will be deploying a VM (which is centralized
>>> management VM) on ROOT account. Now I want to monitor those two isloated
>>> account VMs from ROOT account VM." and here main concern is no two
>>> tenants
>>> VMs will communicate.
>>>
>>> Please can any one suggest me the best possible ways to solve my task.
>>>
>>> My CS version is 4.3.1 and XenServer version is 6.2.0
>>>
>>> Looking forward for your valuable comments.
>>>
>>> Best Regards,
>>> Anil.
>>>
>>>
>
Re: Centralized Management console for all tenants on CS 4.3.1..??
Posted by anil lakineni <an...@gmail.com>.
Hi ilya,
Thanks for provided additional information..
We have already an existing CS Environment (with XenServer hosts) with no
security groups option enabled. So, do we have any options to re-enable
security groups option for existing zone which is already in production.
Thank You,
Anil.
On Wed, May 6, 2015 at 9:15 AM, ilya <il...@gmail.com> wrote:
> A little more context to what Somesh mentioned.
>
> If you are running Xen/KVM, then you can deploy a cloudstack zone with
> Security Groups.
>
> This means cloudstack will manage the iptables rules on the hypervisors
> and push only the ACL rules you define in cloudstack.
>
> This suppose to be very scalable and would solve the common firewall
> management challenges as well as need for running VLAN isolation.
>
> Really powerful concept to say the least in very large setups and
> abstracts lots of firewall and switch level complexity.
>
>
> On 5/5/15 3:29 PM, Somesh Naidu wrote:
>
>> You could use Security Groups to achieve this.
>>
>> Somesh
>> CloudPlatform Escalations
>> Citrix Systems, Inc.
>>
>>
>> -----Original Message-----
>> From: anil lakineni [mailto:anilkumar459.lakineni@gmail.com]
>> Sent: Tuesday, May 05, 2015 4:32 PM
>> To: users@cloudstack.apache.org; dev@cloudstack.apache.org
>> Subject: Re: Centralized Management console for all tenants on CS
>> 4.3.1..??
>>
>> Hi All,
>>
>> Comments are in line,
>>
>> A quick question, Is there any possibility to stop communication between
>> two VMs which are using shared network (why because I need communication
>> between some VMs on this shared network and I don't want communication
>> between some VMs on this same shared network).
>>
>> Waiting for your valuable replays.
>>
>> Thank You,
>> Anil.
>>
>> On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
>> anilkumar459.lakineni@gmail.com> wrote:
>>
>> Hi All,
>>>
>>> I need a help..
>>>
>>> I want to monitor all the tenant VMs from a centralized VM with in the
>>> Cloud Stack.
>>>
>>> " Here my testing plan is, I have two isolated accounts and each account
>>> contains a VM .And I will be deploying a VM (which is centralized
>>> management VM) on ROOT account. Now I want to monitor those two isloated
>>> account VMs from ROOT account VM." and here main concern is no two
>>> tenants
>>> VMs will communicate.
>>>
>>> Please can any one suggest me the best possible ways to solve my task.
>>>
>>> My CS version is 4.3.1 and XenServer version is 6.2.0
>>>
>>> Looking forward for your valuable comments.
>>>
>>> Best Regards,
>>> Anil.
>>>
>>>
>
Re: Centralized Management console for all tenants on CS 4.3.1..??
Posted by ilya <il...@gmail.com>.
A little more context to what Somesh mentioned.
If you are running Xen/KVM, then you can deploy a cloudstack zone with
Security Groups.
This means cloudstack will manage the iptables rules on the hypervisors
and push only the ACL rules you define in cloudstack.
This suppose to be very scalable and would solve the common firewall
management challenges as well as need for running VLAN isolation.
Really powerful concept to say the least in very large setups and
abstracts lots of firewall and switch level complexity.
On 5/5/15 3:29 PM, Somesh Naidu wrote:
> You could use Security Groups to achieve this.
>
> Somesh
> CloudPlatform Escalations
> Citrix Systems, Inc.
>
>
> -----Original Message-----
> From: anil lakineni [mailto:anilkumar459.lakineni@gmail.com]
> Sent: Tuesday, May 05, 2015 4:32 PM
> To: users@cloudstack.apache.org; dev@cloudstack.apache.org
> Subject: Re: Centralized Management console for all tenants on CS 4.3.1..??
>
> Hi All,
>
> Comments are in line,
>
> A quick question, Is there any possibility to stop communication between
> two VMs which are using shared network (why because I need communication
> between some VMs on this shared network and I don't want communication
> between some VMs on this same shared network).
>
> Waiting for your valuable replays.
>
> Thank You,
> Anil.
>
> On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
> anilkumar459.lakineni@gmail.com> wrote:
>
>> Hi All,
>>
>> I need a help..
>>
>> I want to monitor all the tenant VMs from a centralized VM with in the
>> Cloud Stack.
>>
>> " Here my testing plan is, I have two isolated accounts and each account
>> contains a VM .And I will be deploying a VM (which is centralized
>> management VM) on ROOT account. Now I want to monitor those two isloated
>> account VMs from ROOT account VM." and here main concern is no two tenants
>> VMs will communicate.
>>
>> Please can any one suggest me the best possible ways to solve my task.
>>
>> My CS version is 4.3.1 and XenServer version is 6.2.0
>>
>> Looking forward for your valuable comments.
>>
>> Best Regards,
>> Anil.
>>
Re: Centralized Management console for all tenants on CS 4.3.1..??
Posted by anil lakineni <an...@gmail.com>.
Somesh,
Thank you for your replay..
My CS Environment is Advanced Zone without Security Groups option. Can we
have other possibilities like blocking communication between VMs at virtual
router (VR) level or any thing else.
If we can do blocking at VR level, can you please elaborate the process to
me (any commands need to execute in the VR).
Looking forward for your replays.
Thank You,
Anil.
On Wed, May 6, 2015 at 3:59 AM, Somesh Naidu <So...@citrix.com>
wrote:
> You could use Security Groups to achieve this.
>
> Somesh
> CloudPlatform Escalations
> Citrix Systems, Inc.
>
>
> -----Original Message-----
> From: anil lakineni [mailto:anilkumar459.lakineni@gmail.com]
> Sent: Tuesday, May 05, 2015 4:32 PM
> To: users@cloudstack.apache.org; dev@cloudstack.apache.org
> Subject: Re: Centralized Management console for all tenants on CS 4.3.1..??
>
> Hi All,
>
> Comments are in line,
>
> A quick question, Is there any possibility to stop communication between
> two VMs which are using shared network (why because I need communication
> between some VMs on this shared network and I don't want communication
> between some VMs on this same shared network).
>
> Waiting for your valuable replays.
>
> Thank You,
> Anil.
>
> On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
> anilkumar459.lakineni@gmail.com> wrote:
>
> > Hi All,
> >
> > I need a help..
> >
> > I want to monitor all the tenant VMs from a centralized VM with in the
> > Cloud Stack.
> >
> > " Here my testing plan is, I have two isolated accounts and each account
> > contains a VM .And I will be deploying a VM (which is centralized
> > management VM) on ROOT account. Now I want to monitor those two isloated
> > account VMs from ROOT account VM." and here main concern is no two
> tenants
> > VMs will communicate.
> >
> > Please can any one suggest me the best possible ways to solve my task.
> >
> > My CS version is 4.3.1 and XenServer version is 6.2.0
> >
> > Looking forward for your valuable comments.
> >
> > Best Regards,
> > Anil.
> >
>
RE: Centralized Management console for all tenants on CS 4.3.1..??
Posted by Somesh Naidu <So...@citrix.com>.
You could use Security Groups to achieve this.
Somesh
CloudPlatform Escalations
Citrix Systems, Inc.
-----Original Message-----
From: anil lakineni [mailto:anilkumar459.lakineni@gmail.com]
Sent: Tuesday, May 05, 2015 4:32 PM
To: users@cloudstack.apache.org; dev@cloudstack.apache.org
Subject: Re: Centralized Management console for all tenants on CS 4.3.1..??
Hi All,
Comments are in line,
A quick question, Is there any possibility to stop communication between
two VMs which are using shared network (why because I need communication
between some VMs on this shared network and I don't want communication
between some VMs on this same shared network).
Waiting for your valuable replays.
Thank You,
Anil.
On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
anilkumar459.lakineni@gmail.com> wrote:
> Hi All,
>
> I need a help..
>
> I want to monitor all the tenant VMs from a centralized VM with in the
> Cloud Stack.
>
> " Here my testing plan is, I have two isolated accounts and each account
> contains a VM .And I will be deploying a VM (which is centralized
> management VM) on ROOT account. Now I want to monitor those two isloated
> account VMs from ROOT account VM." and here main concern is no two tenants
> VMs will communicate.
>
> Please can any one suggest me the best possible ways to solve my task.
>
> My CS version is 4.3.1 and XenServer version is 6.2.0
>
> Looking forward for your valuable comments.
>
> Best Regards,
> Anil.
>
RE: Centralized Management console for all tenants on CS 4.3.1..??
Posted by Somesh Naidu <So...@citrix.com>.
You could use Security Groups to achieve this.
Somesh
CloudPlatform Escalations
Citrix Systems, Inc.
-----Original Message-----
From: anil lakineni [mailto:anilkumar459.lakineni@gmail.com]
Sent: Tuesday, May 05, 2015 4:32 PM
To: users@cloudstack.apache.org; dev@cloudstack.apache.org
Subject: Re: Centralized Management console for all tenants on CS 4.3.1..??
Hi All,
Comments are in line,
A quick question, Is there any possibility to stop communication between
two VMs which are using shared network (why because I need communication
between some VMs on this shared network and I don't want communication
between some VMs on this same shared network).
Waiting for your valuable replays.
Thank You,
Anil.
On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
anilkumar459.lakineni@gmail.com> wrote:
> Hi All,
>
> I need a help..
>
> I want to monitor all the tenant VMs from a centralized VM with in the
> Cloud Stack.
>
> " Here my testing plan is, I have two isolated accounts and each account
> contains a VM .And I will be deploying a VM (which is centralized
> management VM) on ROOT account. Now I want to monitor those two isloated
> account VMs from ROOT account VM." and here main concern is no two tenants
> VMs will communicate.
>
> Please can any one suggest me the best possible ways to solve my task.
>
> My CS version is 4.3.1 and XenServer version is 6.2.0
>
> Looking forward for your valuable comments.
>
> Best Regards,
> Anil.
>
Re: Centralized Management console for all tenants on CS 4.3.1..??
Posted by anil lakineni <an...@gmail.com>.
Hi All,
Comments are in line,
A quick question, Is there any possibility to stop communication between
two VMs which are using shared network (why because I need communication
between some VMs on this shared network and I don't want communication
between some VMs on this same shared network).
Waiting for your valuable replays.
Thank You,
Anil.
On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
anilkumar459.lakineni@gmail.com> wrote:
> Hi All,
>
> I need a help..
>
> I want to monitor all the tenant VMs from a centralized VM with in the
> Cloud Stack.
>
> " Here my testing plan is, I have two isolated accounts and each account
> contains a VM .And I will be deploying a VM (which is centralized
> management VM) on ROOT account. Now I want to monitor those two isloated
> account VMs from ROOT account VM." and here main concern is no two tenants
> VMs will communicate.
>
> Please can any one suggest me the best possible ways to solve my task.
>
> My CS version is 4.3.1 and XenServer version is 6.2.0
>
> Looking forward for your valuable comments.
>
> Best Regards,
> Anil.
>
Re: Centralized Management console for all tenants on CS 4.3.1..??
Posted by anil lakineni <an...@gmail.com>.
Hi All,
Comments are in line,
A quick question, Is there any possibility to stop communication between
two VMs which are using shared network (why because I need communication
between some VMs on this shared network and I don't want communication
between some VMs on this same shared network).
Waiting for your valuable replays.
Thank You,
Anil.
On Tue, May 5, 2015 at 7:50 PM, anil lakineni <
anilkumar459.lakineni@gmail.com> wrote:
> Hi All,
>
> I need a help..
>
> I want to monitor all the tenant VMs from a centralized VM with in the
> Cloud Stack.
>
> " Here my testing plan is, I have two isolated accounts and each account
> contains a VM .And I will be deploying a VM (which is centralized
> management VM) on ROOT account. Now I want to monitor those two isloated
> account VMs from ROOT account VM." and here main concern is no two tenants
> VMs will communicate.
>
> Please can any one suggest me the best possible ways to solve my task.
>
> My CS version is 4.3.1 and XenServer version is 6.2.0
>
> Looking forward for your valuable comments.
>
> Best Regards,
> Anil.
>