We're Hiring!  
Toll Free US & Canada: 1(877) 946-4743   Worldwide: +1(415) 869-7444

Archive for the ‘Cloud Server’ Category

As of today, GoGrid has released multiple images of the leading software load balancer, Riverbed Stingray! The following images are available on the GoGrid Partner Exchange in both San Francisco and Amsterdam:

  • Riverbed 7.4 Simple Load Balancer 10 Mbps
  • Riverbed 8.1 Load Balancer 10 Mbps
  • Riverbed 8.1 Load Balancer 200 Mbps
  • Riverbed 8.1 Load Balancer 200 Mbps WAF
wpid3797-Stingray.png

Note that the Riverbed 7.4 image is still Zeus branded. We have made that available in order for users to have access to the Simple Load Balancer on GoGrid. It currently supports up to 10Mbps bandwidth and basic load balancing. It does not have clustering, SSL decryption, health checks or any advanced load balancing features.

The Riverbed 8.1 Load Balancer 10 Mbps Load Balancer supports bandwidth up to 10Mbps, clustering, no SSL, basic load balancing, and health checks.

The Riverbed 8.1 Load Balancer 200 Mbps Load Balancer supports bandwidth up to 200Mbps, clustering, no SSL, basic load balancing and health checks.

The Riverbed 8.1 Load Balancer 200 Mbps Load Balancer WAF supports bandwidth up to 200Mbps, clustering, SSL, load balancing, health checks and integrated Web Application Firewall.

Finding the Images

wpid3789-media_1327947751889.png

The images are available via our image selector. In order to find and launch the Riverbed images, click on “Add Cloud Server” for the Data Center that you want to use. In the “Name” field type “Riverbed” and then hit enter. This will filter for just the Riverbed images.

The charges are monthly and you will be charged after you deploy the image. There is a special promotion occurring for Amsterdam regarding deployment of the Riverbed images. Please contact your GoGrid Sales Representative for more details.

Deploying the Load Balancer

wpid3795-media_1328226831712.png

The deployment of Stingray is similar to the setup for Zeus. The main difference is the setup is now automated and the license is automatically applied. Note that these instructions ONLY apply to the Riverbed 8.1 versions. These are the basic steps.

  1. Select the Load Balancer image based on your needs. For this example, I will select “Riverbed 8.1 Load Balancer 10Mbps”. Click “Next” and then enter a Server Name, select an IP and the amount of RAM – I recommend using at least 1 GB of RAM on the server. This will generate a Virtual Machine with the software pre-deployed after you click “Save”.
  2. All the Stingray Images run on Ubuntu x64 base images. You will need to access the server via SSH using the root login. Your logins can be found in the GoGrid web portal by clicking on the server icon, then Tools > Passwords.
  3. One of the main differences with this version is that the installer starts immediately upon login and applies the appropriate license. Type “accept” at the prompt to begin the installer or press “return” to abort. If you do not accept the license terms, please delete the server.
  4. The script will configure the Load Balancer for you and generate a temporary password. The password for the Load Balancer will be documented at the end of the script so look for it there. Make sure to take note of it since you will need it to login to the GUI.
  5. You will be returned to the prompt – at this point I recommend changing the server password (note that this is NOT the password for the load balancer). This is the password that you will use to access the server again via SSH. In case you have forgotten, the command to enter a new password for Ubuntu is “passwd”.

Launching the UI

wpid3793-media_1328220648196.png

Launch your favorite browser and enter the IP address of the server with the port 9090. For example, you would enter something like:

https://190.10.1.1:9090

Since you are connecting via SSL with a self-signed certificate, your browser will give you a warning message. Since this is your own server, you can bypass the message (assuming that you entered the address correctly) and set an exception for this address.

Once you have cleared the warning page, you will be presented with the Riverbed Stingray GUI. At the login screen, enter the following:

Username: admin

Password: [the password generated for you by the system in the previous step]

Update the Admin Password

wpid3791-media_1328220486670.png

Go to the tab “System”.

Select Users > Local > Admin

Change your admin password on this screen. You can also create other accounts from the User tab.

All the Stingray 8.1 licenses in GoGrid allow for clustering and basic health checks. You can configure this on the GUI – the process is the same as the Zeus Load Balancer so you can refer to my previous blog post for more details – “How to Configure Zeus’ New Load Balancer in the GoGrid Cloud“. You can just scroll past the SSL Certificate graphic to bypass the Zeus-specific instructions and into the details on how to add servers to a pool and configure the load balancer.

You can also refer to the Riverbed Quick Start Guide on our wiki.

Since this is a partner image, all support will go through Riverbed. There is extensive documentation on the Riverbed support website as well.

With four different images to chose from, you will now have the flexibility to select the features and price point that work best for you. From controlling traffic to a single web server to managing a large pool of servers across multiple data centers, GoGrid with Riverbed Load Balancers offers the right, scalable solutions for your unique Cloud Fingerprint.


CloudPassage is a key security partner that has images available on the GoGrid Partner Exchange. The CloudPassage images on GoGrid come pre-installed with their Halo daemon. This is available on CentOS, Debian, Red Hat, and Ubuntu on both 32-bit and 64-bit flavors. Alternately, you can launch a GoGrid base image and install the Halo daemon on your own. This tutorial assumes that you have a basic understanding of Linux and SSH as well as basic firewall strategies. It also assumes that you know how to configure private IPs so that will not be covered here.

Launch a server with the CloudPassage Halo daemon

wpid3389-media_1316643201731.png

In your account, add a cloud server. You will be presented with a screen where you can select all the images available to customers on GoGrid. If you enter “Halo” in the name field, it will filter for only the CloudPassage partner images. For this tutorial, I will be using the Ubuntu x64 version on US-West-1.

Register for CloudPassage

wpid3391-media_1316643490064.png

While your server is spinning up, go ahead and go to this link and register for CloudPassage (if you haven’t already). One of the advantages of CloudPassage is that you can centrally manage your security from a single web site.

Retrieving your CloudPassage API key

wpid3393-media_1316644604455.png

Once you have registered, you will want to pull your CloudPassage API key. Navigate to “Settings > Site Administration > API Keys” to retrieve your CloudPassage API key. Check your email spam folder if you haven’t received an email from CloudPassage. To have future emails from CloudPassage delivered to your Inbox, add cloudpassage.com to your safe senders list.

Upgrade your existing daemon

Log back into the Ubuntu server that you just provisioned. It’s a good practice to change the pre-assigned password so do that first. Next, you will want to upgrade the existing Halo daemon to make sure that you are using the latest version.

Run at the prompt:

apt-get update && apt-get install cphalo

Start the daemon with your API key

wpid3395-media_1316645014628.png

At the prompt enter:

/etc/init.d/cphalod start --api-key= <your CloudPassage API Key here>

to start the CloudPassage Halo daemon on your cloud server.
This will start the daemon and link the server to your account on Cloud Passage. If you go to Servers > Server Access you will see your server listed.

Create a new Firewall Policy

wpid3397-media_1316645198365.png

Next, go to Policies > Firewall Policies. Click on the button “Add New Firewall Policy”.
You will then be presented with a page where you can set the inbound and outbound rules.

I am going to create a rule on the private network (eth1) that allows only one private IP address to access this server. For the first inbound rule, select “eth1″ from the Interface drop-down.

Determine which IP can access your server

wpid3399-media_1316645536132.png

CloudPassage has the concept of IP Zones which is a grouping of IP addresses. At the Source drop-down, select “Add New” to create a new IP Zone. I have created a new Zone called “Access OK” and assigned it only one IP address. You can also assign a block of IPs or separate IP addresses. Click the Create button which will set the IP Zone as the default selection for the Source drop-down. Leave Service as “any, ” Conn. State as “Any”. Action as “ACCEPT”.

Set the default-deny rule

wpid3401-media_1316645951502.png

For this tutorial, I am just setting up access for one private IP into this server and blocking every other IP. This will only work if you configure a static private IP for the server you want to give access to. Alternately, you can select a predefined Server Group in the Source drop-down but servers will only appear there if you install the Halo daemon. Since our images are set to use DHCP for private IP assignment, you will still need to set a static private IP for this to work.

A best practice is set the last rule as a default-deny. This will prevent any other connections from accessing the server. Note that this configuration is only to control private IPs – this policy has no rules for public traffic. Realistically, you will want to control this as well in order to prevent external access to your servers. However, this tutorial is focused on demonstrating that private IPs can also be controlled centrally.

Click on the “Add” link as shown on the screen shot. This creates a default-deny rule. Make sure to select “eth1″ for the Interface drop-down or else you will lock out your public access as well.

Click Apply once you have made that change.

Assign the Policy to your server

wpid3403-media_1316646874105.png

First, go to Servers > Firewall Management. Your server will most likely not be assigned to any server group so it will be in the (1) Unassigned Group. Since the Firewall Policy is assigned at a group level, create a new group for this server by (2) clicking on the Link “Add a New Group”.

Select the Firewall Policy for the Group

wpid3405-media_1316647288936.png

After clicking on “Add a New Group” you will see a form where you can select the Policy that you just created and name the new group. Note that this policy is set GROUP wide so you can assign any new servers to this group and it will then have that Firewall policy applied. I have named this group “Private Network” and selected the Firewall Policy that I just created “Private Network Access”. Click “Save” when you are done with this form.

Move your server from Unassigned to the new group

wpid3407-media_1316647493896.png

Now that you have create a new Server Group, you will want to move your server to that group. (1)Click on the check box on the right of the server and on the (2) Actions drop-down select “Move Server(s). You will then be presented with a form – simply select the new group that you created (called Private Network in this tutorial) and then click the “Move Servers” button.

You’re done!

This configuration will then allow for you to assign certain private IPs to have access to your server while blocking others. This will help a few use cases:

1. You have a group of users who each have 3 servers and want only the three that they own to access each other via the private network. You can configure cloud passage to allow access to those 3 servers and block the other users servers. This will provide private network isolation that can be centrally managed via the CloudPassage Portal.
2. You have a group of web servers but you only want one to access your back-end servers via the private network.

Using CloudPassage is a great way to centrally manage security on any numbers of servers that you might have running on the GoGrid cloud. While, this tutorial has focused on the private network, CloudPassage is also excellent at manage firewalls for public access as well. Install their image and start using it to protect your servers today!


Yesterday we release several new and updated base GoGrid cloud server images as part of our regular Operating System refreshes.

new-updated-base-OS-images

Below is a quick lists of the New, Updated and End of Life-d base images.

New Major Versions

New Minor Versions

  • CentOS 5.6
  • RHEL 5.7

Updated Versions

  • Windows Server 2003 – updated with Microsoft Security Patches & Powershell 2.0
  • Windows Server 2008 – updated with Microsoft Security Patches, Powershell 2.0 and on SQL Server images, Microsoft SQL Server 2008 R2
  • Windows Server 2008 R2 – updated with Microsoft Security Patches

End of Life-d (EOL) Versions

  • CentOS 5.3
  • RHEL 5.4

Note: Servers already deployed that are running older (perhaps EOL-ed) images are not affected (meaning, we do not delete them) but you may want to consider refreshing those servers to a later version of the OS. When a server is EOL-ed, it is simply removed from the GoGrid base OS repository and you cannot create new servers from these images.

Remember that these updates and new versions only apply to NEW VMs that you create using these images listed above. If you have existing cloud servers running, please be sure that you regularly run security and Operating System updates to ensure that you servers are running the latest versions and have the most current security patches.


In this blog post series, I want to take a closer look at a storage technology called Gluster File System, and how it can be set up (this article), connected to (article #2) and expand storage (article #3). This is the first blog post of the series and I will review what GlusterFS is, why you would consider using it, and how to deploy it using the GoGrid GlusterFS Partner GSI.

image

GoGrid offers a great storage solution called Cloud Storage. But what if you want to deploy your own storage so that you can directly control performance and redundancy? What software would you use to provide this? The simple answer is Gluster. It is a powerful software-based storage solution that offers a centralized controlled storage pool management system that is very easy to use.

There are many different ways to take advantage of the GlusterFS storage solution. (Note: in the descriptions below a “brick” is a GoGrid Virtual Server.)

1. Distributed Volumes:

“Distributed volumes distribute files throughout the bricks in the volume. You can use distributed volumes where the requirement is to scale storage and the redundancy is either not important or is provided by other hardware/software layers.” – Gluster.org

2. Replicated Volumes:

“Replicated volumes replicate files throughout the bricks in the volume. You can use replicated volumes in environments where high-availability and high-reliability are critical.” – Gluster.org

3. Striped Volumes:

“Stripes data across bricks in the volume. For best results, you should use striped volumes only in high concurrency environments accessing very large files.”

These storage volume options seem very familiar, don’t they? Well, if you are familiar with the different RAID configurations of hard drives in server deployments, you will notice similarities with these options. For example, the “Distributed Volume” for Gluster is essentially a RAID 0. You sacrifice redundancy to gain superior performance and ease of capacity scaling.

The Replicated Volume is similar to a RAID 10 or RAID 1 where data integrity, redundancy and reliability are very important. However, the cost to scale is more since you need to basically add GoGrid Virtual Servers (bricks) in pairs to maintain the Replicated Volume structure.

The Striped Volume is similar to RAID 5 where data is striped across the GoGrid Virtual Servers (bricks). This comes in very handy when you are dealing with very large files (multiple GB files) and when the file is accessed multiple servers will stream the data to the web-server needing the file – offering very fast reads.

For my blog post, I am going to configure a 4 server Distributed Volume Gluster setup using the GoGrid Gluster Partner Image. I am going to deploy 4 x 8GB Gluster servers. Each Gluster server will have 384GB of storage available. In the Distributed Volume setup (similar to RAID 10), I will have 384GB x2 worth of space equaling approximately 768GB of usable space.

First step is to deploy the 4 new GoGrid Gluster Virtual Servers using the GoGrid Partner GSI. I log into my portal and then follow the next steps:

1. Click “Add”

Add_Button

2. Choose “Cloud Server”

Add_Cloud Server

3. Filter for “Gluster” & choose that image

Select_Gluster_Image

4. Accept the Terms

Partner_Image_Agreement

5. Fill in the server information (name, public IP, description, memory allotment)

Gluster_Server_Information_Save

6. Repeat this process 3 more time but using different server name and public IP address.

Once you have all 4 of your new Gluster servers deployed, you can then view the Support → Passwords page in your portal to find the login information. With this login information, you can run this command from your local Linux workstation to change the hostname, set the private IP address and reboot each system. Run the following Bash script from your Linux workstation. The script will prompt you for the server address and root login, and also ask for the hostname and private IP address/netmask you want to use. If you don’t want to use this script, simply log into each system manually, update the host names and private IP addresses, and then reboot.

https://github.com/sepulworld/Remote_Linux_System_Update/blob/master/system_update.sh

I should now be able to log into all 4 systems and see the appropriate hostnames and IPs on each.

Gluster_4_systems

This looks good – if you don’t see the right hostnames or IPs on one or more of the systems, double check what is configured in the /etc/sysconfig/network file and in the /etc/sysconfig/network-scripts/ifcfg-eth1 file. Also, confirm if your host performed the intended reboot (this is necessary for the host name to update at the command line).

From one of your Gluster servers, confirm private network connectivity by pinging each of the other Gluster servers via their private IP addresses. See image below.

Ping_Gluster_Systems

Once this has been confirmed, we can take a look and see if the Gluster process is already running. It is configured on this GoGrid Partner Image to start on boot.

Gluster_Process_Login

Now I need to configure the trusted server storage pool. Basically, I log into just one of my 4 Gluster servers (I choose Gluster_1) and I run a single command to put each of the other 3 members into the trusted server storage pool.

[root@Gluster_1 ~]# gluster peer probe 10.129.151.107

See image here -

Gluster_Peer_probe

Next, I run the command to create the distributed volume using my 4 Gluster servers.

command: gluster volume create DataStore1 replica 4 transport tcp 10.129.151.105:/store1 10.129.151.98:/store2 10.129.151.108:/store3 10.129.151.107:/store4

You can name the directories anything you want. I used “store1” thru “store4”. You can also name the volume whatever you would like. I choose DataStore1.

Gluster_Volume_creation

Now let’s start the Volume with one simple command: gluster volume start DataStore1

Start_Gluster_Volume

And finally let’s view the volume information: gluster volume info DataStore1

Show_Volume_Info

Helpful link:

http://gluster.com/community/documentation/index.php/Main_Page

If you run into any issues or have questions about the Gluster Partner GSI, please email gogrid-beta@gluster.com

That is it! You have successfully deployed the GoGrid Gluster servers from the GoGrid Partner GSI and configured 4 of them in a new replicated storage volume. My next blog post will cover deploying a web-server and connecting to this new storage volume. The third and final post will cover how to scale your replicated storage volume on GoGrid.

I hope you found this tutorial helpful. Stay tuned for Parts 2 and 3. Please let me know if you have any questions.


This is the 3rd and final post in my setup and use of the GoGrid Community GSI server for Cacti Monitoring. In my first post, “Set Up A Cacti Monitoring Server in Minutes with this GoGrid Community Server Image,,” I covered how to deploy Cacti in your GoGrid environment using a Community GSI. My second post, “How to Monitor Your Ubuntu Server on GoGrid in 6 Steps Using Cacti 0.8.7g,” I discussed how to initiate monitoring of your GoGrid Ubuntu server. Now to round things off, I want to show you how to link up your Cacti monitoring server to a Windows Server 2008 server on your GoGrid network. The base install of Cacti 0.8.7g will allow you to monitor the server’s bandwidth utilization, Ethernet errors, number of logged in users, and total number of processes. There are other templates available to monitor other components and services on your Windows server, but they require using an additional SNMP service beyond the Microsoft SNMP service. My blog post won’t get into the latter, but I will cover the former.

Objectives:

  1. Configure GoGrid private network connectivity on Windows 2008 Server and test connectivity to Cacti server
  2. Configure and start Microsoft SNMP service on your Windows 2008 Server
  3. Add new Cacti device
  4. Create graphs to log Local Connection and Local Connection 2 bandwidth and errors, Logged in Users, and server processes

Configure GoGrid private network connectivity on Windows 2008 Server and test connectivity to Cacti server

Below we see that we have a server (“Web2”) deployed on GoGrid with a public IP. Let’s log into this server and configure the private network with a private IP from the same subnet of the Cacti Monitor server. As I described in my previous post – I am using the prescribed private IP subnet from my GoGrid portal, contained under the List tab and then under Network – Private Network.

Selection_101

Once logged into the Windows 2008 server (“Web2”), I go to the Network and Sharing Center which is found by first going to the Start button. From here I need to open up Local Area Connection 2. This is the private network interface that plugs into your own private VLAN on GoGrid. I enter the “Properties” button and then open up “Internet Protocol Version 4 (TCP/IPv4)”. By default GoGrid will enable DHCP for this private network interface. If you have a DHCP server, your server can receive private IP addresses upon initial boot up. Perhaps I will cover this in a different post. For now, we need to configure the interface with a static IP available from our example private subnet 10.129.151.0/24. The subnet will be randomly generated for each customer account. I show you how to find this in my previous post, “How to Monitor Your Ubuntu Server on GoGrid in 6 Steps Using Cacti 0.8.7g.” Following the nomenclature – keeping the last octet of the 32bit address space the same as the public to make IP address association easier – I give this system the private IP address 10.129.151.110. The .110 matches up with the last 3 digits of the public IP address 173.204.58.110. This isn’t necessary, but helps you identify systems and know their private IP address based upon their public address and vice versa. See the image below of me assigning the private IP address.

Private_Network_Config_WindowsServer

Now, open up a command prompt >Go to Start, then Run – type in cmd and hit “enter”. I now test connectivity to the 10.129.151.0/24 network by pinging the gateway IP – 10.129.151.1. I get a response, so I can move on. If you don’t get a response, double check the private IP address you used and make sure the Subnet mask is correct. You can also test connectivity by pinging the private IP address of your Cacti Monitoring server. Remember, your 10.x.x.x/24 network will be different than my example subnet. Please check your portal for what you should be using.

Private_Network_Config_WindowsServer_verification

Configure and start Microsoft SNMP service on your Windows 2008 Server

Check to see if you have the SNMP Service running already on your Windows system. By default, this server role in Windows Server 2008 on GoGrid isn’t installed and running. Go to Start -> Administrative Tools -> Services. SNMP Trap may be there, but we also need SNMP Service. To install SNMP Service go to Start -> Administrative Tools -> Server Manager -> Select Features -> Add Features. From here find and check SNMP Services (which covers SNMP Service and SNMP WMI Provider). See image below.

enable_snmp1

Click Next and this will begin the install process of this feature on Windows.

enable_snmp2

Once the SNMP Service is installed, we can go to the Services page to find and configure the SNMP Service with the appropriate community and host IP address to accept SNMP calls from.

First go to the Services page – Start -> Administrative Tools -> Services or from Run type services.msc

Find the local service – SNMP Service and right click it and go to properties. From here you need to give the service the community string that you will set on the Cacti server and the private IP address of your Cacti Monitor server. This is under Accepted Community Names and Accept SNMP packets from these hosts. See image below:

SNMP_Conf_Windows

Add new Cacti device

This step is same “create a device” step that I outlined in my previous post – except the details of the host will be different.

Create_Device1

The IP, hostname and template used in the screen shot below represent my example Windows 2008 server named “Web2.” I chose the Host Template Windows 2000/XP Host –> selected SNMP v2 -> put in the community string I chose, and clicked “create.”

New_Device_Web2_Windows_Server

You should see the SNMP information for the host quickly appears near the upper left portion of the screen. If you see an error here, you will need to check your private network connectivity between the two servers and check the SNMP Service configuration on the Windows 2008 server.

With the new device in place on Cacti, we can now create the graphs.

Create graphs to log Local Connection and Local Connection 2 bandwidth and errors, Logged in Users, and server processes

From the device we just created, go to Create Graphs for this Host.

Create_Graphs1

From this page we want to add a check to the following graph templates seen below in the image:

  1. Logged in Users
  2. Processes
  3. Local Connection
  4. Local Connection 2

Once you have done this, click Create at the bottom of the page.

Create_Graphs2

We will do this again for the In/Out Errors/Discarded Packets option next.

  1. Change the “Select a graph type:” near the bottom of the Create Graph page to In/Out Errors/Discarded Packets
  2. Next check box the “Local Area Connection” and “Local Area Connection 2”
  3. Finally click the Create button at the bottom.

Create_Graphs3

After about 5 minutes, the graph icons will be available and your data will then begin to accumulate for your viewing.

network_graph

Processes_graph

Logged_in_User

I hope this blog series was helpful for you. The GoGrid Cacti Monitor – Community GSI is a great server-based application that can easily be deployed to a GoGrid virtual server, and configured to communicate via SNMP with your servers on the GoGrid network. The information gathered will give you real-time and historical interface bandwidth, server performance, and other important system level information.

Be sure to check out other Community or Partner Server Images available on GoGrid. The GoGrid Exchange has many pre-configured software solutions that can be deployed to your GoGrid architecture in a matter of minutes.