XOA - Console freezing every few seconds consistently.

olivierlambert

That's interesting. Can you try with /v6 in your XOA URL to see if you still have a console issue?

trobertson

Hey Oliver, apologies, this is an item I'm not aware of.

Where should I add /v6 into the URL?

trobertson

Ah apologies, looking at other comments, I am built from Source without a license atm. I don't believe I get the preview

olivierlambert

See https://xen-orchestra.com/blog/xen-orchestra-5-98#️-xo-6

To access the new preview UI, just add /v6 in your XOA URL. If you are using it from the sources, you can build it with yarn run turbo run build --filter @xen-orchestra/web from the XO root folder.

trobertson

Ah, I see now. I was adding it to the wrong location of the URL. I did load it up and it did freeze

Currently I have the same VM up in all 3 consoles (XO, XOv6, XO Lite)

XO and XOv6 both froze at differing times
XO lite is still going.

I've tried having XO and the host servers on the same VLAN, both tagged and untagged. I don't see any packet drops between them in monitoring.

trobertson

Well that did help me to find something I did not notice before! An oddity in which I see the XO webserver traffic between itself and the host is routing oddly over my networking, will try to trace down as to why.

The short and sweet is I see the XO TCP calls come across the wrong interface in routing to the Host at 443, since the traffic isn't expected in this direction it has no stateful tracking and it's denied. This doesn't seem to impact anything else except the console streams and likely a misconfiguration in my host setup I'm assuming.

Appreciate the help!

olivierlambert

Nice, that's interesting

trobertson

So I'm not 100% but I've resolved the symptom.

I have 3 VLANS involved

DATA - Endpoints
PRIV - Reverse proxy manager exists here
MGMT - Where XOA exists.

Myself and users access XOA via the reverse proxy, which access the webserver in the MGMT vlan.

My hosts had their primary management access on the DATA vlan, a holdover setup from prior, and a secondary management access on the MGMT VLAN and a third for data migrations.

XOA was connected to the MGMT IPs of each host.

Watching packet capture I see packets moving from the originating endpoint in DATA, to the reverse proxy, from it to the XOA backend server. Then suddenly I see XOA in the MGMT VLAN try to access the hosts directly in the DATA VLAN which was blocked.

Problem is, it seemed to send packets meant to originate from the MGMT-VLAN as sourced from the DATA-VLAN.

The resolution was I just removed the secondary management IP and switched the primary management of each host to the MGMT-VLAN alongside XOA.

They're happier now at least.

trobertson

Appreciate the assistance on it all. This is only a homelab turned private cloud setup, but XCP-NG has been a pleasure to work with, thanks for all you and the team do!

olivierlambert

Great news, nice catch