9:30 p.m.
I am deploying an OpenVPN server in my OVirt environment and I've come to a dead stop
with the developer support on a topic related to OVirt configuration.
The developer wants me to put the VM's underlying NIC into promiscuous mode.
I've seen this in a VMware environment and I know what they are asking me to do, and
I'm wondering if there is a clear way to do this in my OVirt environment.
I found "port mirroring" but no "promiscuous mode"
Cheers and thank you !
9:47 p.m.
Hi Clint, you might want to check the macspoof hook features here:
https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
This should override arp/spoofing filtering, that might be the cause of
your issues with OpenVPN setup (first guess).
On 03/05/2016 07:30 PM, Clint Boggio wrote:
I am deploying an OpenVPN server in my OVirt environment and I've
come to a dead stop with the developer support on a topic related to OVirt configuration.
The developer wants me to put the VM's underlying NIC into promiscuous mode.
I've seen this in a VMware environment and I know what they are asking me to do, and
I'm wondering if there is a clear way to do this in my OVirt environment.
I found "port mirroring" but no "promiscuous mode"
Cheers and thank you !
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
10:02 p.m.
I had a related question on this.
When it comes to ovirt-node or rhev-h, is there anything required to be
installed on the hypervisor hosts themselves?
Thanks,
Chris
On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com> wrote:
Hi Clint, you might want to check the macspoof hook features here:
https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
This should override arp/spoofing filtering, that might be the cause of
your issues with OpenVPN setup (first guess).
On 03/05/2016 07:30 PM, Clint Boggio wrote:
> I am deploying an OpenVPN server in my OVirt environment and I've come to
> a dead stop with the developer support on a topic related to OVirt
> configuration.
>
> The developer wants me to put the VM's underlying NIC into promiscuous
> mode.
>
> I've seen this in a VMware environment and I know what they are asking me
> to do, and I'm wondering if there is a clear way to do this in my OVirt
> environment.
>
> I found "port mirroring" but no "promiscuous mode"
>
> Cheers and thank you !
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
10:09 p.m.
This is a multi-part message in MIME format.
--------------050704070604050302010500
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Just the hook rpm (vdsm-hook-macspoof
<http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...>).
Ivan
On 03/05/2016 08:02 PM, Christopher Young wrote:
I had a related question on this.
When it comes to ovirt-node or rhev-h, is there anything required to
be installed on the hypervisor hosts themselves?
Thanks,
Chris
On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com
<mailto:combuster@gmail.com>> wrote:
Hi Clint, you might want to check the macspoof hook features here:
https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
This should override arp/spoofing filtering, that might be the
cause of your issues with OpenVPN setup (first guess).
On 03/05/2016 07:30 PM, Clint Boggio wrote:
I am deploying an OpenVPN server in my OVirt environment and
I've come to a dead stop with the developer support on a topic
related to OVirt configuration.
The developer wants me to put the VM's underlying NIC into
promiscuous mode.
I've seen this in a VMware environment and I know what they
are asking me to do, and I'm wondering if there is a clear way
to do this in my OVirt environment.
I found "port mirroring" but no "promiscuous mode"
Cheers and thank you !
_______________________________________________
Users mailing list
Users(a)ovirt.org <mailto:Users@ovirt.org>
http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org <mailto:Users@ovirt.org>
http://lists.ovirt.org/mailman/listinfo/users
--------------050704070604050302010500
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Just the hook rpm (<a
href="http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/...
<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 03/05/2016 08:02 PM, Christopher
Young wrote:<br>
</div>
<blockquote
cite="mid:CAC1p532gochVfAakMKC8_1AjoG8XULtcKKkJhFMEJW1RRCt2bg@mail.gmail.com"
type="cite">
<p dir="ltr">I had a related question on this. </p>
<p dir="ltr">When it comes to ovirt-node or rhev-h, is there
anything required to be installed on the hypervisor hosts
themselves?</p>
<p dir="ltr">Thanks,</p>
<p dir="ltr">Chris</p>
<div class="gmail_quote">On Mar 5, 2016 1:47 PM,
"combuster" <<a
moz-do-not-send="true"
href="mailto:combuster@gmail.com"><a
class="moz-txt-link-abbreviated"
href="mailto:combuster@gmail.com">combuster@gmail.com</a></a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Clint,
you might want to check the macspoof hook features here:<br>
<br>
<a moz-do-not-send="true"
href="https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof&...
rel="noreferrer"
target="_blank">https://github.com/oVirt/vdsm/tree/master/vd...
<br>
This should override arp/spoofing filtering, that might be the
cause of your issues with OpenVPN setup (first guess).<br>
<br>
On 03/05/2016 07:30 PM, Clint Boggio wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
I am deploying an OpenVPN server in my OVirt environment and
I've come to a dead stop with the developer support on a
topic related to OVirt configuration.<br>
<br>
The developer wants me to put the VM's underlying NIC into
promiscuous mode.<br>
<br>
I've seen this in a VMware environment and I know what they
are asking me to do, and I'm wondering if there is a clear
way to do this in my OVirt environment.<br>
<br>
I found "port mirroring" but no "promiscuous
mode"<br>
<br>
Cheers and thank you !<br>
_______________________________________________<br>
Users mailing list<br>
<a moz-do-not-send="true"
href="mailto:Users@ovirt.org"
target="_blank">Users(a)ovirt.org</a><br>
<a moz-do-not-send="true"
href="http://lists.ovirt.org/mailman/listinfo/users"
rel="noreferrer"
target="_blank">http://lists.ovirt.org/mailman/listinfo/user...
</blockquote>
<br>
_______________________________________________<br>
Users mailing list<br>
<a moz-do-not-send="true" href="mailto:Users@ovirt.org"
target="_blank">Users(a)ovirt.org</a><br>
<a moz-do-not-send="true"
href="http://lists.ovirt.org/mailman/listinfo/users"
rel="noreferrer"
target="_blank">http://lists.ovirt.org/mailman/listinfo/user...
</blockquote>
</div>
</blockquote>
<br>
</body>
</html>
--------------050704070604050302010500--
10:13 p.m.
This is a multi-part message in MIME format.
--------------090404090702020905090301
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Ignore the link (minor accident while pasting). Yum will download the
appropriate one from the repos.
On 03/05/2016 08:09 PM, combuster wrote:
Just the hook rpm (vdsm-hook-macspoof
<http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...>).
Ivan
On 03/05/2016 08:02 PM, Christopher Young wrote:
>
> I had a related question on this.
>
> When it comes to ovirt-node or rhev-h, is there anything required to
> be installed on the hypervisor hosts themselves?
>
> Thanks,
>
> Chris
>
> On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com> wrote:
>
> Hi Clint, you might want to check the macspoof hook features here:
>
> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
>
> This should override arp/spoofing filtering, that might be the
> cause of your issues with OpenVPN setup (first guess).
>
> On 03/05/2016 07:30 PM, Clint Boggio wrote:
>
> I am deploying an OpenVPN server in my OVirt environment and
> I've come to a dead stop with the developer support on a
> topic related to OVirt configuration.
>
> The developer wants me to put the VM's underlying NIC into
> promiscuous mode.
>
> I've seen this in a VMware environment and I know what they
> are asking me to do, and I'm wondering if there is a clear
> way to do this in my OVirt environment.
>
> I found "port mirroring" but no "promiscuous mode"
>
> Cheers and thank you !
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org <mailto:Users@ovirt.org>
> http://lists.ovirt.org/mailman/listinfo/users
>
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org <mailto:Users@ovirt.org>
> http://lists.ovirt.org/mailman/listinfo/users
>
--------------090404090702020905090301
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Ignore the link (minor accident while pasting). Yum will download
the appropriate one from the repos.<br>
<br>
<div class="moz-cite-prefix">On 03/05/2016 08:09 PM, combuster
wrote:<br>
</div>
<blockquote cite="mid:56DB2F04.4060305@gmail.com"
type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
Just the hook rpm (<a moz-do-not-send="true"
href="http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/...
<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 03/05/2016 08:02 PM, Christopher
Young wrote:<br>
</div>
<blockquote
cite="mid:CAC1p532gochVfAakMKC8_1AjoG8XULtcKKkJhFMEJW1RRCt2bg@mail.gmail.com"
type="cite">
<p dir="ltr">I had a related question on this. </p>
<p dir="ltr">When it comes to ovirt-node or rhev-h, is there
anything required to be installed on the hypervisor hosts
themselves?</p>
<p dir="ltr">Thanks,</p>
<p dir="ltr">Chris</p>
<div class="gmail_quote">On Mar 5, 2016 1:47 PM,
"combuster"
<<a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:combuster@gmail.com">combuster@gmail.com</a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Clint,
you might want to check the macspoof hook features here:<br>
<br>
<a moz-do-not-send="true"
href="https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof&...
rel="noreferrer"
target="_blank">https://github.com/oVirt/vdsm/tree/master/vd...
<br>
This should override arp/spoofing filtering, that might be
the cause of your issues with OpenVPN setup (first guess).<br>
<br>
On 03/05/2016 07:30 PM, Clint Boggio wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex"> I am
deploying an OpenVPN server in my OVirt environment and
I've come to a dead stop with the developer support on a
topic related to OVirt configuration.<br>
<br>
The developer wants me to put the VM's underlying NIC into
promiscuous mode.<br>
<br>
I've seen this in a VMware environment and I know what
they are asking me to do, and I'm wondering if there is a
clear way to do this in my OVirt environment.<br>
<br>
I found "port mirroring" but no "promiscuous
mode"<br>
<br>
Cheers and thank you !<br>
_______________________________________________<br>
Users mailing list<br>
<a moz-do-not-send="true"
href="mailto:Users@ovirt.org"
target="_blank">Users(a)ovirt.org</a><br>
<a moz-do-not-send="true"
href="http://lists.ovirt.org/mailman/listinfo/users"
rel="noreferrer"
target="_blank">http://lists.ovirt.org/mailman/listinfo/user...
</blockquote>
<br>
_______________________________________________<br>
Users mailing list<br>
<a moz-do-not-send="true"
href="mailto:Users@ovirt.org"
target="_blank">Users(a)ovirt.org</a><br>
<a moz-do-not-send="true"
href="http://lists.ovirt.org/mailman/listinfo/users"
rel="noreferrer"
target="_blank">http://lists.ovirt.org/mailman/listinfo/user...
</blockquote>
</div>
</blockquote>
<br>
</blockquote>
<br>
</body>
</html>
--------------090404090702020905090301--
10:21 p.m.
On 2016-03-05 13:13, combuster wrote:
Ignore the link (minor accident while pasting). Yum will download
the
appropriate one from the repos.
On 03/05/2016 08:09 PM, combuster wrote:
> Just the hook rpm (vdsm-hook-macspoof [1]).
>
> Ivan
>
> On 03/05/2016 08:02 PM, Christopher Young wrote:
>
> I had a related question on this.
>
> When it comes to ovirt-node or rhev-h, is there anything required to
> be installed on the hypervisor hosts themselves?
>
> Thanks,
>
> Chris
> On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com> wrote:
> Hi Clint, you might want to check the macspoof hook features here:
>
> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof [2]
>
> This should override arp/spoofing filtering, that might be the
> cause of your issues with OpenVPN setup (first guess).
>
> On 03/05/2016 07:30 PM, Clint Boggio wrote:
> I am deploying an OpenVPN server in my OVirt environment and I've
> come to a dead stop with the developer support on a topic related to
> OVirt configuration.
>
> The developer wants me to put the VM's underlying NIC into
> promiscuous mode.
>
> I've seen this in a VMware environment and I know what they are
> asking me to do, and I'm wondering if there is a clear way to do
> this in my OVirt environment.
>
> I found "port mirroring" but no "promiscuous mode"
>
> Cheers and thank you !
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users [3]
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users [3]
Links:
------
[1]
http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...
[2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
[3] http://lists.ovirt.org/mailman/listinfo/users
Thank you very much. Reading the README it appears that there is a
series of commands to run on the engine to make the options to remove
filtering from the vNIC, or the whole VM available. What purpose is
filled by the two scripts that are included in the git, and where do I
put them so that they will be utilized if that's even necessary ?
10:34 p.m.
Correct procedure would be:
1. On each of your ovirt nodes run:
yum install vdsm-hook-macspoof
2. On the engine run:
sudo engine-config -s "UserDefinedVMProperties=macspoof=^(true|false)$"
3. Edit OpenVPN virtual machine settings and add a custom property
containing macspoof keyword and set the value "true" for it.
If you want to remove filtering for a single interface, then replace
steps 2 and 3 as outlined in the README.
Kind regards,
Ivan
On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote:
On 2016-03-05 13:13, combuster wrote:
> Ignore the link (minor accident while pasting). Yum will download the
> appropriate one from the repos.
>
> On 03/05/2016 08:09 PM, combuster wrote:
>
>> Just the hook rpm (vdsm-hook-macspoof [1]).
>>
>> Ivan
>>
>> On 03/05/2016 08:02 PM, Christopher Young wrote:
>>
>> I had a related question on this.
>>
>> When it comes to ovirt-node or rhev-h, is there anything required to
>> be installed on the hypervisor hosts themselves?
>>
>> Thanks,
>>
>> Chris
>> On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com> wrote:
>> Hi Clint, you might want to check the macspoof hook features here:
>>
>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof [2]
>>
>> This should override arp/spoofing filtering, that might be the
>> cause of your issues with OpenVPN setup (first guess).
>>
>> On 03/05/2016 07:30 PM, Clint Boggio wrote:
>> I am deploying an OpenVPN server in my OVirt environment and I've
>> come to a dead stop with the developer support on a topic related to
>> OVirt configuration.
>>
>> The developer wants me to put the VM's underlying NIC into
>> promiscuous mode.
>>
>> I've seen this in a VMware environment and I know what they are
>> asking me to do, and I'm wondering if there is a clear way to do
>> this in my OVirt environment.
>>
>> I found "port mirroring" but no "promiscuous mode"
>>
>> Cheers and thank you !
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users [3]
>
>
>
> Links:
> ------
> [1]
>
http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...
>
> [2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
> [3] http://lists.ovirt.org/mailman/listinfo/users
Thank you very much. Reading the README it appears that there is a
series of commands to run on the engine to make the options to remove
filtering from the vNIC, or the whole VM available. What purpose is
filled by the two scripts that are included in the git, and where do I
put them so that they will be utilized if that's even necessary ?
11:09 p.m.
On 2016-03-05 13:34, combuster wrote:
Correct procedure would be:
1. On each of your ovirt nodes run:
yum install vdsm-hook-macspoof
2. On the engine run:
sudo engine-config -s "UserDefinedVMProperties=macspoof=^(true|false)$"
3. Edit OpenVPN virtual machine settings and add a custom property
containing macspoof keyword and set the value "true" for it.
If you want to remove filtering for a single interface, then replace
steps 2 and 3 as outlined in the README.
Kind regards,
Ivan
On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote:
> On 2016-03-05 13:13, combuster wrote:
>> Ignore the link (minor accident while pasting). Yum will download the
>> appropriate one from the repos.
>>
>> On 03/05/2016 08:09 PM, combuster wrote:
>>
>>> Just the hook rpm (vdsm-hook-macspoof [1]).
>>>
>>> Ivan
>>>
>>> On 03/05/2016 08:02 PM, Christopher Young wrote:
>>>
>>> I had a related question on this.
>>>
>>> When it comes to ovirt-node or rhev-h, is there anything required to
>>> be installed on the hypervisor hosts themselves?
>>>
>>> Thanks,
>>>
>>> Chris
>>> On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com>
wrote:
>>> Hi Clint, you might want to check the macspoof hook features here:
>>>
>>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof [2]
>>>
>>> This should override arp/spoofing filtering, that might be the
>>> cause of your issues with OpenVPN setup (first guess).
>>>
>>> On 03/05/2016 07:30 PM, Clint Boggio wrote:
>>> I am deploying an OpenVPN server in my OVirt environment and I've
>>> come to a dead stop with the developer support on a topic related to
>>> OVirt configuration.
>>>
>>> The developer wants me to put the VM's underlying NIC into
>>> promiscuous mode.
>>>
>>> I've seen this in a VMware environment and I know what they are
>>> asking me to do, and I'm wondering if there is a clear way to do
>>> this in my OVirt environment.
>>>
>>> I found "port mirroring" but no "promiscuous mode"
>>>
>>> Cheers and thank you !
>>> _______________________________________________
>>> Users mailing list
>>> Users(a)ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users(a)ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>
>>
>>
>> Links:
>> ------
>> [1]
>>
http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...
>> [2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
>> [3] http://lists.ovirt.org/mailman/listinfo/users
>
>
> Thank you very much. Reading the README it appears that there is a
> series of commands to run on the engine to make the options to remove
> filtering from the vNIC, or the whole VM available. What purpose is
> filled by the two scripts that are included in the git, and where do I
> put them so that they will be utilized if that's even necessary ?
Ivan, because of YOU, I get me weekend back ! It works and OVPN is up
and running.
Thank you SO MUCH !
11:32 p.m.
It's great to know that it's working.
Best of luck Clint.
On 03/05/2016 09:09 PM, clint(a)theboggios.com wrote:
On 2016-03-05 13:34, combuster wrote:
> Correct procedure would be:
>
> 1. On each of your ovirt nodes run:
>
> yum install vdsm-hook-macspoof
>
> 2. On the engine run:
>
> sudo engine-config -s "UserDefinedVMProperties=macspoof=^(true|false)$"
>
> 3. Edit OpenVPN virtual machine settings and add a custom property
> containing macspoof keyword and set the value "true" for it.
>
> If you want to remove filtering for a single interface, then replace
> steps 2 and 3 as outlined in the README.
>
> Kind regards,
>
> Ivan
>
> On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote:
>> On 2016-03-05 13:13, combuster wrote:
>>> Ignore the link (minor accident while pasting). Yum will download the
>>> appropriate one from the repos.
>>>
>>> On 03/05/2016 08:09 PM, combuster wrote:
>>>
>>>> Just the hook rpm (vdsm-hook-macspoof [1]).
>>>>
>>>> Ivan
>>>>
>>>> On 03/05/2016 08:02 PM, Christopher Young wrote:
>>>>
>>>> I had a related question on this.
>>>>
>>>> When it comes to ovirt-node or rhev-h, is there anything required to
>>>> be installed on the hypervisor hosts themselves?
>>>>
>>>> Thanks,
>>>>
>>>> Chris
>>>> On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com>
wrote:
>>>> Hi Clint, you might want to check the macspoof hook features here:
>>>>
>>>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof [2]
>>>>
>>>> This should override arp/spoofing filtering, that might be the
>>>> cause of your issues with OpenVPN setup (first guess).
>>>>
>>>> On 03/05/2016 07:30 PM, Clint Boggio wrote:
>>>> I am deploying an OpenVPN server in my OVirt environment and I've
>>>> come to a dead stop with the developer support on a topic related to
>>>> OVirt configuration.
>>>>
>>>> The developer wants me to put the VM's underlying NIC into
>>>> promiscuous mode.
>>>>
>>>> I've seen this in a VMware environment and I know what they are
>>>> asking me to do, and I'm wondering if there is a clear way to do
>>>> this in my OVirt environment.
>>>>
>>>> I found "port mirroring" but no "promiscuous mode"
>>>>
>>>> Cheers and thank you !
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users(a)ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>>
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users(a)ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>
>>>
>>>
>>> Links:
>>> ------
>>> [1]
>>>
http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...
>>> [2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
>>> [3] http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>> Thank you very much. Reading the README it appears that there is a
>> series of commands to run on the engine to make the options to
>> remove filtering from the vNIC, or the whole VM available. What
>> purpose is filled by the two scripts that are included in the git,
>> and where do I put them so that they will be utilized if that's even
>> necessary ?
Ivan, because of YOU, I get me weekend back ! It works and OVPN is up
and running.
Thank you SO MUCH !
11:48 p.m.
Question:
There is no yum functionality on ovirt-node/RHEV-H, so how does one go
about this in that scenario?
On Sat, Mar 5, 2016 at 3:32 PM, combuster <combuster(a)gmail.com> wrote:
It's great to know that it's working.
Best of luck Clint.
On 03/05/2016 09:09 PM, clint(a)theboggios.com wrote:
>
> On 2016-03-05 13:34, combuster wrote:
>>
>> Correct procedure would be:
>>
>> 1. On each of your ovirt nodes run:
>>
>> yum install vdsm-hook-macspoof
>>
>> 2. On the engine run:
>>
>> sudo engine-config -s
"UserDefinedVMProperties=macspoof=^(true|false)$"
>>
>> 3. Edit OpenVPN virtual machine settings and add a custom property
>> containing macspoof keyword and set the value "true" for it.
>>
>> If you want to remove filtering for a single interface, then replace
>> steps 2 and 3 as outlined in the README.
>>
>> Kind regards,
>>
>> Ivan
>>
>> On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote:
>>>
>>> On 2016-03-05 13:13, combuster wrote:
>>>>
>>>> Ignore the link (minor accident while pasting). Yum will download the
>>>> appropriate one from the repos.
>>>>
>>>> On 03/05/2016 08:09 PM, combuster wrote:
>>>>
>>>>> Just the hook rpm (vdsm-hook-macspoof [1]).
>>>>>
>>>>> Ivan
>>>>>
>>>>> On 03/05/2016 08:02 PM, Christopher Young wrote:
>>>>>
>>>>> I had a related question on this.
>>>>>
>>>>> When it comes to ovirt-node or rhev-h, is there anything required to
>>>>> be installed on the hypervisor hosts themselves?
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Chris
>>>>> On Mar 5, 2016 1:47 PM, "combuster"
<combuster(a)gmail.com> wrote:
>>>>> Hi Clint, you might want to check the macspoof hook features here:
>>>>>
>>>>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof [2]
>>>>>
>>>>> This should override arp/spoofing filtering, that might be the
>>>>> cause of your issues with OpenVPN setup (first guess).
>>>>>
>>>>> On 03/05/2016 07:30 PM, Clint Boggio wrote:
>>>>> I am deploying an OpenVPN server in my OVirt environment and
I've
>>>>> come to a dead stop with the developer support on a topic related to
>>>>> OVirt configuration.
>>>>>
>>>>> The developer wants me to put the VM's underlying NIC into
>>>>> promiscuous mode.
>>>>>
>>>>> I've seen this in a VMware environment and I know what they are
>>>>> asking me to do, and I'm wondering if there is a clear way to do
>>>>> this in my OVirt environment.
>>>>>
>>>>> I found "port mirroring" but no "promiscuous
mode"
>>>>>
>>>>> Cheers and thank you !
>>>>> _______________________________________________
>>>>> Users mailing list
>>>>> Users(a)ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>>>
>>>>> _______________________________________________
>>>>> Users mailing list
>>>>> Users(a)ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>>
>>>>
>>>>
>>>>
>>>> Links:
>>>> ------
>>>> [1]
>>>>
>>>>
http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...
>>>> [2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
>>>> [3] http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>>
>>> Thank you very much. Reading the README it appears that there is a
>>> series of commands to run on the engine to make the options to remove
>>> filtering from the vNIC, or the whole VM available. What purpose is filled
>>> by the two scripts that are included in the git, and where do I put them so
>>> that they will be utilized if that's even necessary ?
>
>
>
> Ivan, because of YOU, I get me weekend back ! It works and OVPN is up and
> running.
>
> Thank you SO MUCH !
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
12:47 a.m.
I haven't tried it, but here is a guide on how to add a hook to ovirt-node:
http://www.ovirt.org/develop/developer-guide/vdsm/hook/qemucmdline/
On 03/05/2016 09:48 PM, Christopher Young wrote:
Question:
There is no yum functionality on ovirt-node/RHEV-H, so how does one go
about this in that scenario?
On Sat, Mar 5, 2016 at 3:32 PM, combuster <combuster(a)gmail.com> wrote:
> It's great to know that it's working.
>
> Best of luck Clint.
>
>
> On 03/05/2016 09:09 PM, clint(a)theboggios.com wrote:
>> On 2016-03-05 13:34, combuster wrote:
>>> Correct procedure would be:
>>>
>>> 1. On each of your ovirt nodes run:
>>>
>>> yum install vdsm-hook-macspoof
>>>
>>> 2. On the engine run:
>>>
>>> sudo engine-config -s
"UserDefinedVMProperties=macspoof=^(true|false)$"
>>>
>>> 3. Edit OpenVPN virtual machine settings and add a custom property
>>> containing macspoof keyword and set the value "true" for it.
>>>
>>> If you want to remove filtering for a single interface, then replace
>>> steps 2 and 3 as outlined in the README.
>>>
>>> Kind regards,
>>>
>>> Ivan
>>>
>>> On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote:
>>>> On 2016-03-05 13:13, combuster wrote:
>>>>> Ignore the link (minor accident while pasting). Yum will download
the
>>>>> appropriate one from the repos.
>>>>>
>>>>> On 03/05/2016 08:09 PM, combuster wrote:
>>>>>
>>>>>> Just the hook rpm (vdsm-hook-macspoof [1]).
>>>>>>
>>>>>> Ivan
>>>>>>
>>>>>> On 03/05/2016 08:02 PM, Christopher Young wrote:
>>>>>>
>>>>>> I had a related question on this.
>>>>>>
>>>>>> When it comes to ovirt-node or rhev-h, is there anything required
to
>>>>>> be installed on the hypervisor hosts themselves?
>>>>>>
>>>>>> Thanks,
>>>>>>
>>>>>> Chris
>>>>>> On Mar 5, 2016 1:47 PM, "combuster"
<combuster(a)gmail.com> wrote:
>>>>>> Hi Clint, you might want to check the macspoof hook features
here:
>>>>>>
>>>>>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
[2]
>>>>>>
>>>>>> This should override arp/spoofing filtering, that might be the
>>>>>> cause of your issues with OpenVPN setup (first guess).
>>>>>>
>>>>>> On 03/05/2016 07:30 PM, Clint Boggio wrote:
>>>>>> I am deploying an OpenVPN server in my OVirt environment and
I've
>>>>>> come to a dead stop with the developer support on a topic related
to
>>>>>> OVirt configuration.
>>>>>>
>>>>>> The developer wants me to put the VM's underlying NIC into
>>>>>> promiscuous mode.
>>>>>>
>>>>>> I've seen this in a VMware environment and I know what they
are
>>>>>> asking me to do, and I'm wondering if there is a clear way to
do
>>>>>> this in my OVirt environment.
>>>>>>
>>>>>> I found "port mirroring" but no "promiscuous
mode"
>>>>>>
>>>>>> Cheers and thank you !
>>>>>> _______________________________________________
>>>>>> Users mailing list
>>>>>> Users(a)ovirt.org
>>>>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>>>>
>>>>>> _______________________________________________
>>>>>> Users mailing list
>>>>>> Users(a)ovirt.org
>>>>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>>>
>>>>>
>>>>>
>>>>> Links:
>>>>> ------
>>>>> [1]
>>>>>
>>>>>
http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...
>>>>> [2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
>>>>> [3] http://lists.ovirt.org/mailman/listinfo/users
>>>>
>>>>
>>>> Thank you very much. Reading the README it appears that there is a
>>>> series of commands to run on the engine to make the options to remove
>>>> filtering from the vNIC, or the whole VM available. What purpose is
filled
>>>> by the two scripts that are included in the git, and where do I put them
so
>>>> that they will be utilized if that's even necessary ?
>>
>>
>> Ivan, because of YOU, I get me weekend back ! It works and OVPN is up and
>> running.
>>
>> Thank you SO MUCH !
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
6:17 a.m.
That may work for me. I'll look into it. This is going to be a
production environment (I had previously been running OVirt for over a
year with success, but my hypervisors were standard EL7 servers vs.
OVirtnode/RHEV-H) so I'm looking for the most "official", clean
solution.
I will open a ticket with RH on that one, but if anyone knows of an
alternative or any reason why I should do something different, please
let me know.
Many thanks,
Chris
On Sat, Mar 5, 2016 at 4:47 PM, combuster <combuster(a)gmail.com> wrote:
I haven't tried it, but here is a guide on how to add a hook to
ovirt-node:
http://www.ovirt.org/develop/developer-guide/vdsm/hook/qemucmdline/
On 03/05/2016 09:48 PM, Christopher Young wrote:
>
> Question:
>
> There is no yum functionality on ovirt-node/RHEV-H, so how does one go
> about this in that scenario?
>
> On Sat, Mar 5, 2016 at 3:32 PM, combuster <combuster(a)gmail.com> wrote:
>>
>> It's great to know that it's working.
>>
>> Best of luck Clint.
>>
>>
>> On 03/05/2016 09:09 PM, clint(a)theboggios.com wrote:
>>>
>>> On 2016-03-05 13:34, combuster wrote:
>>>>
>>>> Correct procedure would be:
>>>>
>>>> 1. On each of your ovirt nodes run:
>>>>
>>>> yum install vdsm-hook-macspoof
>>>>
>>>> 2. On the engine run:
>>>>
>>>> sudo engine-config -s
"UserDefinedVMProperties=macspoof=^(true|false)$"
>>>>
>>>> 3. Edit OpenVPN virtual machine settings and add a custom property
>>>> containing macspoof keyword and set the value "true" for it.
>>>>
>>>> If you want to remove filtering for a single interface, then replace
>>>> steps 2 and 3 as outlined in the README.
>>>>
>>>> Kind regards,
>>>>
>>>> Ivan
>>>>
>>>> On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote:
>>>>>
>>>>> On 2016-03-05 13:13, combuster wrote:
>>>>>>
>>>>>> Ignore the link (minor accident while pasting). Yum will download
the
>>>>>> appropriate one from the repos.
>>>>>>
>>>>>> On 03/05/2016 08:09 PM, combuster wrote:
>>>>>>
>>>>>>> Just the hook rpm (vdsm-hook-macspoof [1]).
>>>>>>>
>>>>>>> Ivan
>>>>>>>
>>>>>>> On 03/05/2016 08:02 PM, Christopher Young wrote:
>>>>>>>
>>>>>>> I had a related question on this.
>>>>>>>
>>>>>>> When it comes to ovirt-node or rhev-h, is there anything
required to
>>>>>>> be installed on the hypervisor hosts themselves?
>>>>>>>
>>>>>>> Thanks,
>>>>>>>
>>>>>>> Chris
>>>>>>> On Mar 5, 2016 1:47 PM, "combuster"
<combuster(a)gmail.com> wrote:
>>>>>>> Hi Clint, you might want to check the macspoof hook features
here:
>>>>>>>
>>>>>>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
[2]
>>>>>>>
>>>>>>> This should override arp/spoofing filtering, that might be
the
>>>>>>> cause of your issues with OpenVPN setup (first guess).
>>>>>>>
>>>>>>> On 03/05/2016 07:30 PM, Clint Boggio wrote:
>>>>>>> I am deploying an OpenVPN server in my OVirt environment and
I've
>>>>>>> come to a dead stop with the developer support on a topic
related to
>>>>>>> OVirt configuration.
>>>>>>>
>>>>>>> The developer wants me to put the VM's underlying NIC
into
>>>>>>> promiscuous mode.
>>>>>>>
>>>>>>> I've seen this in a VMware environment and I know what
they are
>>>>>>> asking me to do, and I'm wondering if there is a clear
way to do
>>>>>>> this in my OVirt environment.
>>>>>>>
>>>>>>> I found "port mirroring" but no "promiscuous
mode"
>>>>>>>
>>>>>>> Cheers and thank you !
>>>>>>> _______________________________________________
>>>>>>> Users mailing list
>>>>>>> Users(a)ovirt.org
>>>>>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> Users mailing list
>>>>>>> Users(a)ovirt.org
>>>>>>> http://lists.ovirt.org/mailman/listinfo/users [3]
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Links:
>>>>>> ------
>>>>>> [1]
>>>>>>
>>>>>>
>>>>>>
http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m...
>>>>>> [2]
https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof
>>>>>> [3] http://lists.ovirt.org/mailman/listinfo/users
>>>>>
>>>>>
>>>>>
>>>>> Thank you very much. Reading the README it appears that there is a
>>>>> series of commands to run on the engine to make the options to
remove
>>>>> filtering from the vNIC, or the whole VM available. What purpose is
>>>>> filled
>>>>> by the two scripts that are included in the git, and where do I put
>>>>> them so
>>>>> that they will be utilized if that's even necessary ?
>>>
>>>
>>>
>>> Ivan, because of YOU, I get me weekend back ! It works and OVPN is up
>>> and
>>> running.
>>>
>>> Thank you SO MUCH !
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
3183
days inactive
3184
days old
11 comments
4 participants
participants (4)
-
Christopher Young -
Clint Boggio -
clint＠theboggios.com
-
combuster