git.net

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: SSL offload in the VR


Thanks @Pierre-Luc Dion and @jayapal@xxxxxxxxxx,

My 'problem' is that being able to add an SSL cert to a VR loadbalancer has appeared from nowhere in the 4.11 branch. (easiest explained with a screen snip):

https://imgur.com/a/r7zxA0b

... which led me to finding the assignCertToLoadBalancer API.

I can't find a specific PR for it, or anything in the cwiki, and nothing in our read-the-docs...
So I'm trying to find the author, so we can back fit some documentation, rather than trying to reverse engineer it out of the code/trial and error.



paul.angus@xxxxxxxxxxxxx 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


-----Original Message-----
From: Jayapal Uradi <jayapal.uradi@xxxxxxxxxxxxxx> 
Sent: 21 November 2018 04:31
To: dev@xxxxxxxxxxxxxxxxxxxxx
Subject: Re: SSL offload in the VR

What I remember is ssl offload feature  added for netscaler  and  assignCertToLoadBalancer API added during that time.

-Jayapal

> On 21-Nov-2018, at 5:06 AM, Pierre-Luc Dion <pdion@xxxxxxxxxxxx> wrote:
> 
> Hey Paul, I'm not aware the vr support ssl offload. What you are 
> trying to achieve, there might be a work around.
> 
> Le mar. 20 nov. 2018 07 h 08, Paul Angus <paul.angus@xxxxxxxxxxxxx> a 
> écrit :
> 
>> Apologies if my GitHub foo has abandoned me (it wouldn’t me the first 
>> time);
>> 
>> I searched for files which contained the API command 
>> ‘assignCertToLoadBalancer’ and found ‘AssignCertToLoadBalancerCmd.java’
>> 
>> According to the history it was first committed as part of PR #2283
>> “CLOUDSTACK-10105: Use maven standard project structure in all 
>> projects” [1]
>> 
>> 
>> https://github.com/apache/cloudstack/commits/1d05fead49f5c856257a741b
>> 07122f5633d2e359/api/src/main/java/org/apache/cloudstack/api/command/
>> user/loadbalancer/AssignCertToLoadBalancerCmd.java
>> 
>> again, sorry if I’ve misread or misinterpreted the history…
>> 
>> Kind regards,
>> 
>> Paul Angus
>> 
>> From: Marc-Aurèle Brothier <m@xxxxxxxxxxxx>
>> Sent: 20 November 2018 11:23
>> To: Paul Angus <paul.angus@xxxxxxxxxxxxx>
>> Cc: dev@xxxxxxxxxxxxxxxxxxxxx
>> Subject: Re: SSL offload in the VR
>> 
>> Hi Paul,
>> 
>> What made you think so? I haven’t pushed any change related to the 
>> VR. At Exoscale, we removed the VR entirely instead and moved the 
>> services down at the HV level.
>> 
>> Kind regards,
>> Marc-Aurèle
>> 
>> 
>> paul.angus@xxxxxxxxxxxxx
>> www.shapeblue.com
>> Amadeus House, Floral Street, London  WC2E 9DPUK @shapeblue
>> 
>> 
>> 
>> On 20 Nov 2018, at 09:04, Paul Angus <paul.angus@xxxxxxxxxxxxx<mailto:
>> paul.angus@xxxxxxxxxxxxx>> wrote:
>> Hi Marc-Aurèle,
>> 
>> As far as I can tell, I believe that you added the ability to upload 
>> an SSL certificate to the VR in 4.11 I can’t find any user 
>> documentation for it in our Wiki or the in read-the-docs.
>> I guess it’s something that you use at Exoscale, could you do a pull 
>> request to cloudstack-documentation or forward me some documentation 
>> which I can then add to the users documentation.
>> 
>> 
>> Kind regards,
>> 
>> Paul Angus
>> 
>> 
>> paul.angus@xxxxxxxxxxxxx<mailto:paul.angus@xxxxxxxxxxxxx>
>> www.shapeblue.com<http://www.shapeblue.com>
>> @shapeblue
>> 
>> 
>> 
>> 

DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.