XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Managing a host using a proxy

    Scheduled Pinned Locked Moved Management
    23 Posts 3 Posters 4.3k Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      McHenry @olivierlambert
      last edited by

      @olivierlambert

      xcp-ng host
      Private: 192.168.1.4
      Public: 10.27.50.4

      XO Proxy
      Private: 192.168.1.159
      Public: 10.27.50.159

      XOA
      Private: 192.168.1.199
      Public: 10.27.0.199

      XOA can connect to the xcp-ng host
      XOA can connect to the xo proxy

      4d9577f6-a293-473e-a119-85bc9a61441f-image.png

      My problem appears to be similar to this post that appears to have been resolved with a proxy upgrade that was problematic.
      https://xcp-ng.org/forum/topic/6626/xo-proxy-not-working

      When I try to upgrade the proxy I receive the following error:

      proxy.upgradeAppliance
      {
        "id": "5271ae70-d243-4722-bba5-e4e381d1703b"
      }
      {
        "code": -32000,
        "message": "unknown error from the peer"
      }
      
      1 Reply Last reply Reply Quote 0
      • olivierlambertO Offline
        olivierlambert Vates 🪐 Co-Founder CEO
        last edited by

        Is this kind of a test network?

        M 1 Reply Last reply Reply Quote 0
        • M Offline
          McHenry @olivierlambert
          last edited by McHenry

          @olivierlambert

          No.

          Edit: We are testing xcp-ng as an alternative to HyperV and would require the proxy functionality.

          1 Reply Last reply Reply Quote 0
          • olivierlambertO Offline
            olivierlambert Vates 🪐 Co-Founder CEO
            last edited by

            I don't get why you have similar ranges between different networks 🤔

            @julien-f any idea why proxy doesn't work? Sounds like a topology or connectivity issue to me 🤔

            M 1 Reply Last reply Reply Quote 0
            • M Offline
              McHenry @olivierlambert
              last edited by

              @olivierlambert

              We have multiple distinct networks at client sites all connected via VPN, some use the same range.

              Each is contactable using a unique network range via NAT 10.27.X.X

              Works well and has done for years.

              1 Reply Last reply Reply Quote 0
              • olivierlambertO Offline
                olivierlambert Vates 🪐 Co-Founder CEO
                last edited by

                Obviously there's something wrong otherwise it would work 🤷 (as we have many users relying on the proxy). It's hard to tell more without having a support tunnel open and trying to poke around.

                M 1 Reply Last reply Reply Quote 0
                • M Offline
                  McHenry @olivierlambert
                  last edited by

                  @olivierlambert

                  OK, so how do we do that?

                  1 Reply Last reply Reply Quote 0
                  • olivierlambertO Offline
                    olivierlambert Vates 🪐 Co-Founder CEO
                    last edited by

                    Since we are all ultra mega busy right now (despite we hire like crazy), your best chance is to be seen as a valuable lead so we can spare some engineer time to take a look and see if there's an obvious issue: https://vates.tech/contact

                    Or wait for someone in the community to dig deeper in here, depends on how patient (or how in a hurry) you are 🙂

                    M 1 Reply Last reply Reply Quote 0
                    • M Offline
                      McHenry @olivierlambert
                      last edited by McHenry

                      @olivierlambert

                      When deploying a proxy from the terminal what Xen Orchestra credentials are used?
                      https://xen-orchestra.com/blog/xo-proxy-a-concrete-guide/

                      Is this my Vates account, the login creds for the XOA or the login creds for the xcp-ng server it is being installed on?

                      1 Reply Last reply Reply Quote 0
                      • olivierlambertO Offline
                        olivierlambert Vates 🪐 Co-Founder CEO
                        last edited by

                        You deploy from this script directly from your XCP-ng host. Then, the proxy doesn't have credentials but a token.

                        M 1 Reply Last reply Reply Quote 0
                        • M Offline
                          McHenry @olivierlambert
                          last edited by McHenry

                          @olivierlambert

                          Sorry, still unclear on what creds to use here:
                          d54f20f0-80f8-4801-92f5-9daf52c33da6-image.png

                          1 Reply Last reply Reply Quote 0
                          • olivierlambertO Offline
                            olivierlambert Vates 🪐 Co-Founder CEO
                            last edited by

                            Those are your Vates/Xen.orchestra.com creds 🙂

                            M 1 Reply Last reply Reply Quote 0
                            • nathanael-hN Offline
                              nathanael-h Vates 🪐 DevOps Team
                              last edited by

                              Hello @McHenry I wanted to share with you that we've just build a new images for XOA and the proxy. You might want to try it and keep us posted.

                              1 Reply Last reply Reply Quote 1
                              • M Offline
                                McHenry @olivierlambert
                                last edited by

                                @olivierlambert

                                Got it. To assist in my understanding of the ecosystem can you advise the purpose of these creds.

                                Is it simply to allow Vates to monitor usage of proxies? As the install completes even if no creds are entered, are they optional?

                                1 Reply Last reply Reply Quote 0
                                • olivierlambertO Offline
                                  olivierlambert Vates 🪐 Co-Founder CEO
                                  last edited by

                                  IIRC, it's needed to attach a proxy support license to your appliance. If you don't do it here, you'll have to register afterward. That's because proxies are an extra product invoiced per product.

                                  M 1 Reply Last reply Reply Quote 0
                                  • olivierlambertO Offline
                                    olivierlambert Vates 🪐 Co-Founder CEO
                                    last edited by

                                    Adding @julien-f in the convo for confirmation.

                                    1 Reply Last reply Reply Quote 0
                                    • M Offline
                                      McHenry @olivierlambert
                                      last edited by

                                      @olivierlambert

                                      No problem however I am confused.

                                      If I use XO, which does not need registration, and the proxy does need registration however is the proxy registration tied to the unregistered XO?

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post