@ronan-a
I have installed the XOSTOR with replica count of 2.
I have tried running one E-mail Server (PostFix) and one Web-Server (Nginx), with their VHD on XOSTOR. They seem to run fine. I have not done any benchmarks for now.
After installing, I noticed that the VxLAN (Encrypted) has stopped working.
Update:
I managed to fix the VxLAN by :
- Completely Removing all PIFs of VxLAN and removing the VxLAN Network from the pool
- Remove SDN controller configuration from plugin page > delete configuation
- Shutdown ALL hosts from the pool
- Restart XO VM
- Enable SDN controller again (this time with Override Certs ON)
- Click Save Configuration.
- Start All Hosts
- Create VxLAN again.
Previous Error Details (Now Solved as mentioned in the update above):
So this is how I was using:
1 VM on Node 1 which runs pfSense Router
VxLan (encrypted) on the pool.
Other VMs on Node 1 & Node 2.
VMs on Node1 are connecting to the pfSense which is running on the same node.
VMs on Node2 have stopped connecting.
I have not changed any settings. All I did for installing XOSTOR, was remove the previous SR (after migrating vhd to another sr using XO) edit partition (using fdisk) and then create 2 SRs (One for EXT4 and the Other for XOSTOR) and migrate all VHDs back to EXT4 and XOSTOR (as per requirement). I did this for both nodes.
I am not sure if installing XOSTOR has something to do with this or not so this is not a bug report (yet).
So far I have tried :
- Turn off and turn on SDN Controller in XO
- Override certificates in SDN controller in XO and rebooting both host nodes.
Do you think XOSTOR would have an impact on the MTU in the host Network Card ?
Any direction you can give me to diagnose the problem ?
I am planning to remove the VxLAN and re-create it. Do you think it would help ?
Update : Checked XO Logs:
I get :
2023-08-11T14:00:17.907Z xo:xo-server:sdn-controller:tls-connect ERROR TLS connection failed {
xen-orchestra-docker-orchestra-1 | error: [Error: 58EBD01E7F7F0000:error:0A000418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1586:SSL alert number 48]
{
| library: 'SSL routines',
| reason: 'tlsv1 alert unknown ca',
| code: 'ERR_SSL_TLSV1_ALERT_UNKNOWN_CA'
| },
Though earlier, the connection between Node1 and Node 2 were still being made despite this warning. So this is not new.
Further Update:
I deleted the previous VxLAN and now when I try to create it, it gives me the following error :
sdnController.createPrivateNetwork
{
"poolIds": [
"b990a09e(*removed*)"
],
"pifIds": [
"68fc6193(*removed*)"
],
"name": "VxLAN",
"description": "Private Lan Network",
"encapsulation": "vxlan",
"encrypted": true,
"mtu": 1500
}
{
"library": "SSL routines",
"reason": "tlsv1 alert unknown ca",
"code": "ERR_SSL_TLSV1_ALERT_UNKNOWN_CA",
"message": "582B645BC47F0000:error:0A000418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1586:SSL alert number 48
",
"name": "Error",
"stack": "Error: 582B645BC47F0000:error:0A000418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1586:SSL alert number 48
"
}