git.net

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SSL offload in the VR


Hi Paul, ok I was not aware of that new feature. Is it wanted to support lb
on sourceNAT IP has in your screenshot?


Le mer. 21 nov. 2018 03 h 27, Paul Angus <paul.angus@xxxxxxxxxxxxx> a
écrit :

> Thanks @Pierre-Luc Dion and @jayapal@xxxxxxxxxx,
>
> My 'problem' is that being able to add an SSL cert to a VR loadbalancer
> has appeared from nowhere in the 4.11 branch. (easiest explained with a
> screen snip):
>
> https://imgur.com/a/r7zxA0b
>
> ... which led me to finding the assignCertToLoadBalancer API.
>
> I can't find a specific PR for it, or anything in the cwiki, and nothing
> in our read-the-docs...
> So I'm trying to find the author, so we can back fit some documentation,
> rather than trying to reverse engineer it out of the code/trial and error.
>
>
>
> paul.angus@xxxxxxxxxxxxx
> www.shapeblue.com
> Amadeus House, Floral Street, London  WC2E 9DPUK
> @shapeblue
>
>
>
>
> -----Original Message-----
> From: Jayapal Uradi <jayapal.uradi@xxxxxxxxxxxxxx>
> Sent: 21 November 2018 04:31
> To: dev@xxxxxxxxxxxxxxxxxxxxx
> Subject: Re: SSL offload in the VR
>
> What I remember is ssl offload feature  added for netscaler  and
> assignCertToLoadBalancer API added during that time.
>
> -Jayapal
>
> > On 21-Nov-2018, at 5:06 AM, Pierre-Luc Dion <pdion@xxxxxxxxxxxx> wrote:
> >
> > Hey Paul, I'm not aware the vr support ssl offload. What you are
> > trying to achieve, there might be a work around.
> >
> > Le mar. 20 nov. 2018 07 h 08, Paul Angus <paul.angus@xxxxxxxxxxxxx> a
> > écrit :
> >
> >> Apologies if my GitHub foo has abandoned me (it wouldn’t me the first
> >> time);
> >>
> >> I searched for files which contained the API command
> >> ‘assignCertToLoadBalancer’ and found ‘AssignCertToLoadBalancerCmd.java’
> >>
> >> According to the history it was first committed as part of PR #2283
> >> “CLOUDSTACK-10105: Use maven standard project structure in all
> >> projects” [1]
> >>
> >>
> >> https://github.com/apache/cloudstack/commits/1d05fead49f5c856257a741b
> >> 07122f5633d2e359/api/src/main/java/org/apache/cloudstack/api/command/
> >> user/loadbalancer/AssignCertToLoadBalancerCmd.java
> >>
> >> again, sorry if I’ve misread or misinterpreted the history…
> >>
> >> Kind regards,
> >>
> >> Paul Angus
> >>
> >> From: Marc-Aurèle Brothier <m@xxxxxxxxxxxx>
> >> Sent: 20 November 2018 11:23
> >> To: Paul Angus <paul.angus@xxxxxxxxxxxxx>
> >> Cc: dev@xxxxxxxxxxxxxxxxxxxxx
> >> Subject: Re: SSL offload in the VR
> >>
> >> Hi Paul,
> >>
> >> What made you think so? I haven’t pushed any change related to the
> >> VR. At Exoscale, we removed the VR entirely instead and moved the
> >> services down at the HV level.
> >>
> >> Kind regards,
> >> Marc-Aurèle
> >>
> >>
> >> paul.angus@xxxxxxxxxxxxx
> >> www.shapeblue.com
> >> Amadeus House, Floral Street, London  WC2E 9DPUK @shapeblue
> >>
> >>
> >>
> >> On 20 Nov 2018, at 09:04, Paul Angus <paul.angus@xxxxxxxxxxxxx<mailto:
> >> paul.angus@xxxxxxxxxxxxx>> wrote:
> >> Hi Marc-Aurèle,
> >>
> >> As far as I can tell, I believe that you added the ability to upload
> >> an SSL certificate to the VR in 4.11 I can’t find any user
> >> documentation for it in our Wiki or the in read-the-docs.
> >> I guess it’s something that you use at Exoscale, could you do a pull
> >> request to cloudstack-documentation or forward me some documentation
> >> which I can then add to the users documentation.
> >>
> >>
> >> Kind regards,
> >>
> >> Paul Angus
> >>
> >>
> >> paul.angus@xxxxxxxxxxxxx<mailto:paul.angus@xxxxxxxxxxxxx>
> >> www.shapeblue.com<http://www.shapeblue.com>
> >> @shapeblue
> >>
> >>
> >>
> >>
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is
> the property of Accelerite, a Persistent Systems business. It is intended
> only for the use of the individual or entity to which it is addressed. If
> you are not the intended recipient, you are not authorized to read, retain,
> copy, print, distribute or use this message. If you have received this
> communication in error, please notify the sender and delete all copies of
> this message. Accelerite, a Persistent Systems business does not accept any
> liability for virus infected mails.
>