Usage Guide

This guide is aimed at Administrators of a CloudStack based Cloud

• Log In to the UI
  • Root Administrator’s UI Overview
  • Changing the Root Password

Managing Accounts, Users and Domains

• Roles, Accounts, Users, and Domains
  • Accounts
  • Users
  • Root Administrator
• Using Dynamic Roles
• How to Dedicate a Zone, Cluster, Pod, or Host to an Account or Domain
  • Behavior of Dedicated Hosts, Clusters, Pods, and Zones
• • Restricting LDAP users to a group:
  • LDAP groups:

Using Projects to Organize User Resources

• Configuring Projects
  • Setting Resource Limits for Projects
    • Setting the Global Project Resource Limits
• Creating a New Project
• • Sending Project Membership Invitations
• Accepting a Membership Invitation
• Using the Project View

Service Offerings

• Service Offerings, Disk Offerings, Network Offerings, and Templates
• • Custom Compute Offering
  • Creating a New Disk Offering
• System Service Offerings
• Network Throttling

Setting up Networking for Users

• About Virtual Networks
  • Shared Networks
• Network Service Providers
• • Creating a New Network Offering
• • What is AutoScaling?
  • Prerequisites
  • Disabling and Enabling an AutoScale Configuration
  • Runtime Considerations

• • About Working with Virtual Machines
  • • Monitor VMs for Max Capacity
  • VM Lifecycle
  • Accessing VMs
  • Assigning VMs to Hosts
    • • Creating a New Affinity Group
      • Change Affinity Group for an Existing VM
      • Delete an Affinity Group
  • • Limitations on VM Snapshots
    • Using VM Snapshots
  • Appending a Display Name to the Guest VM’s Internal Name
  • • CPU and Memory Scaling for Running VMs
    • Configuring Dynamic CPU and RAM Scaling
    • Limitations
  • Moving VMs Between Hosts (Manual Live Migration)
  • Working with ISOs
    • Attaching an ISO to a VM
  • Using SSH Keys for Authentication
    • Creating the SSH Keypair
    • Logging In Using the SSH Keypair
  • User-Data and Meta-Data
    • user-data example
  • • Prerequisites and System Requirements
    • GPU/vGPU Assignment Workflow

Working with Templates

• Creating Templates: Overview
• Best Practices for Templates
• Private and Public Templates
• Creating a Template from a Snapshot
• vSphere Templates and ISOs
• Creating a Linux Template
• Creating a Windows Template
  • System Preparation for Windows Server 2003 R2
• Converting a Hyper-V VM to a Template
• • Linux OS Installation
• Deleting Templates

Working with Hosts

• Adding Hosts
• • vCenter and Maintenance Mode
• Disabling and Enabling Zones, Pods, and Clusters
• • Removing XenServer and KVM Hosts
• Re-Installing Hosts
• Changing Host Password
• • Limitations on Over-Provisioning in XenServer and KVM
  • • Balloon Driver
      • KVM
    • • XenServer
  • Setting Over-Provisioning Ratios
• VLAN Provisioning
  • Adding Non Contiguous VLAN Ranges
• Out-of-band Management
• Server Address Usage
• KVM Libvirt Hook Script Include
  • The KVM Libvirt Hook script allows for
  • Timeout Configuration
  • Custom Script Naming for All VM Actions

Working with Storage

• Primary Storage
  • Runtime Behavior of Primary Storage
  • Storage Tags
• Secondary Storage
• • Creating a New Volume
    • To Create a New Volume
  • Attaching a Volume
  • VM Storage Migration
    • • Migrating Storage For a Running VM
    • Migrating a VM Root Volume to a New Storage Pool
  • Reset VM to New Root Disk on Reboot
• Working with Volume Snapshots
  • Automatic Snapshot Creation and Retention
  • Volume Status
  • Snapshot Job Throttling

Working with System Virtual Machines

• Changing the Default System VM Template
• Console Proxy
  • Changing the Console Proxy SSL Certificate and Domain
  • Load-balancing Console Proxies
• • Configuring the Virtual Router
  • Best Practices for Virtual Routers
  • Enhanced Upgrade for Virtual Routers
    • Upgrading Virtual Routers

• Working with Usage
  • Setting Usage Limits
    • Limiting Resource Usage
    • Limit Usage Considerations
    • Default Account Resource Limits
  • • Virtual Machine Usage Record Format
    • IP Address Usage Record Format
    • Template, ISO, and Snapshot Usage Record Format
    • Network Offering Usage Record Format
  • Usage Types
  • Dates in the Usage Record

Managing Networks and Traffic

• Guest Traffic
• Networking in a Zone
• Advanced Zone Physical Network Configuration
  • Configure Public Traffic in an Advanced Zone
• Using Multiple Guest Networks
  • Reconfiguring Networks in VMs
    • Adding a Network
    • Selecting the Default Network
• IP Reservation in Isolated Guest Networks
  • Limitations
  • Reserving an IP Range
• • Dedicating IP Address Ranges to an Account
• Configuring Multiple IP Addresses on a Single NIC
  • Guidelines
  • Port Forwarding and StaticNAT Services Changes
• About Elastic IPs
• • About Portable IP
  • Configuring Portable IPs
  • Transferring Portable IP
• • Prerequisites and Guidelines
• Isolation in Advanced Zone Using Private VLAN
  • Prerequisites
• Security Groups
  • Adding a Security Group
  • • Limitations
  • Adding Ingress and Egress Rules to a Security Group
• • About Using a NetScaler Load Balancer
  • Initial Setup of External Firewalls and Load Balancers
  • Load Balancer Rules
    • Sticky Session Policies for Load Balancer Rules
  • Configuring AutoScale
    • Configuration
    • Updating an AutoScale Configuration
• Global Server Load Balancing Support
  • • Components of GSLB
  • Configuring GSLB
    • Adding a GSLB Rule
  • Known Limitation
• Acquiring a New IP Address
• Static NAT
• IP Forwarding and Firewalling
  • Egress Firewall Rules in an Advanced Zone
    • Configuring an Egress Firewall Rule
    • • Allow
  • Port Forwarding
• DNS and DHCP
• • Configuring Remote Access VPN
  • Setting Up a Site-to-Site VPN Connection
    • • Updating and Removing a VPN Customer Gateway
    • Creating a VPN Connection
    • Restarting and Removing a VPN Connection
• Configuring a Virtual Private Cloud
  • • Major Components of a VPC
    • Connectivity Options for a VPC
  • Adding a Virtual Private Cloud
  • Configuring Network Access Control List
    • Creating ACL Lists
    • Creating a Tier with Custom ACL List
  • Adding a Private Gateway to a VPC
    • ACL on Private Gateway
    • Blacklisting Routes
  • Deploying VMs to VPC Tier and Shared Networks
  • Releasing an IP Address Alloted to a VPC
  • Adding Load Balancing Rules on a VPC
    • • Enabling NetScaler as the LB Provider on a VPC Tier
      • Creating an External LB Rule
    • • How Does Internal LB Work in VPC?
      • Enabling Internal LB on a VPC Tier
      • Creating an Internal LB Rule
  • Removing Tiers
• Persistent Networks
  • Creating a Persistent Guest Network
• • Functionality Provided
  • • Anatomy of the Palo Alto Networks Firewall
    • Configure the Public / Private Interfaces on the firewall
    • Configure the default Public Subinterface
  • Setup the Palo Alto Networks Firewall in CloudStack
    • Add a Network Service Offering to use the new Provider
  • • Palo Alto Networks Threat Profile
  • Limitations
• • Mac OSX

Managing the Cloud

• Reporting CPU Sockets
• Changing the Database Password
• Administrator Alerts
  • • SNMP Alert Details
    • Configuring SNMP and Syslog Managers
• Customizing the Network Domain Name

System Reliability and Availability

• Management Server Load Balancing
• HA for Hosts
• Primary Storage Outage and Data Loss
• Database High Availability
  • Configuring Database High Availability

Tuning

• • Performance Monitoring
  • Set Database Buffer Pool Size
  • Configure XenServer dom0 Memory

• • Event Logs
  • • Implementations
    • AMQP Configuration
  • Standard Events
  • Event Log Queries
  • • Permissions
• TroubleShooting
  • Data Loss on Exported Primary Storage
    • Cause
    • More Information
  • • Symptom
    • Solution
  • • Symptom
    • Solution
  • • Symptom
    • Solution
  • • Symptom
    • Solution
  • • Symptom
    • Solution
  • • Trouble Shooting Steps