1. cf-dev@lists.cloudfoundry.org
  2. Messages
   Date   
CF CLI v6.46.1 Released

Alexander Berezovsky
 

Hey everyone,

The CF CLI team released cf CLI v6.46.1 ; please see release notes for full details.

Highlights Include

Deprecation of --hostname, --no-hostname, -d, --route-path on cf push

The cf CLI team reached out to the Community back in December 2017 to gather feedback about domains and hostnames app manifest properties. Based on feedback, in cf CLI release v6.34.0, the team moved forward with deprecating domains and hostnames properties in the app manifest in favor of the routes attribute.

At the time, the flag options to override the manifest properties were not deprecated. This release deprecates the flag options on cf push:

  • --hostname
  • --no-hostname
  • -d for domain
  • --route-path

When any of the above flag options are passed to cf push, a deprecation warning appears in output text. story

We are seeking feedback on this for the cf7 beta CLI. Please add feedback and comments if you have any concerns.

Update-One Is Generally Available

The SAPI and Services Enablement Team are GA'ing the Update-One Feature in this release. story

  • Adds a --force flag to update-service to support automation workflows story
  • Adds a helpful message if an upgrade is not available story

Bugs

  • Fixes an issue where update-user-provided-service can unset existing
    credentials associated with a service even when the -p flags is not specified story

Plugin Updates

  • Adds cf-security-entitlement plugin story
  • Updates top plugin to v0.9.4 story
  • Updates cf-puppeteer to 1.1.1 story
  • Updates html5-plugin to 1.3.0 story
  • Updates open plugin to v1.2.2 story
Thanks,
CF CLI Team
Re: cf7 beta CLI is available

Eric Malm <emalm@...>
 

Congratulations, Abby and the rest of the CLI and v3 Acceleration teams! That's a great accomplishment!

Best,
Eric


On Thu, Aug 22, 2019 at 6:05 PM Marco Nicosia <mnicosia@...> wrote:
Congratulations on making it to this milestone, VAT and CLI teams!

I know a lot of hours and work have gone into this, so this is a very special release.

I’m very excited for the coming feedback. I know that there’s still a lot of work to go, but really glad for it to be in the hands of real people!

On Thu, Aug 22, 2019 at 1:37 PM Tim Downey <tdowney@...> wrote:
Congratulations on shipping the beta V7 cf CLI! 🎉

Can't wait to start using it! 😎

On Thu, Aug 22, 2019 at 1:04 PM Abby Chau <achau@...> wrote:
Hi everyone,

We are excited to announce that the cf7 beta CLI is available and can be found on the cf CLI's release page. The V3 Acceleration Team (VAT formed to accelerate the development of the cf7 beta CLI and the backing v3 CC API) have been working hard on this first publicly consumable cf7 beta release. 

Please read the release notes and official documentation about new features on cf7, which commands we've converted to call the v3 API, and details about the differences between v6 and v7 cf CLIs.

A publicly consumable cf7 beta CLI triggers Phase 1 of the v6 Deprecation Plan, which stipulates that the majority of feature work will now be added to cf7 CLI only. v6 will continue to be fully supported, see the v6 Deprecation Plan for more information. 

Please reach out if you have feedback or questions. For cf7 CLI feedback, please open a GitHub issue, or reach out directly on Cloud Foundry Slack - we hang out at #v3-acceleration-team or #cli. 

Best,

V3 Acceleration and cf CLI teams

--
--
  Marco Nicosia
  Product Manager
  Pivotal Software, Inc.
  c: 650-796-2948
cfdev start Timed out waiting for the VM: rpc error

MatthiasLakaemper@...
 

Hi,
 
i have problems, starting cfdev.
 
System:      Windows 10 Enterprise via VMWare-Workstation with Virtualize Intel VT-x/'EPT or AMD-V/RVI -> enabled
cf version:   cf.exe version 6.46.0+29d6257f1.2019-07-09
i am using: pcfdev-v1.2.0-windows.tgz
 
any help is appreciated.
 
Regards, Matthias
 
-----Start-Protocol---------------------------------------------------------
cf dev start -f C:\Develop\CloudFoundry\pdfdev/pcfdev-v1.2.0-windows.tgz
 
cf dev start -f C:\Develop\CloudFoundry\pdfdev/pcfdev-v1.2.0-windows.tgz
Downloading Resources...
Progress: |====================>| 100.0%
Setting State...
 
Pivotal Telemetry
...
Are you ok with PCF Dev periodically capturing anonymized telemetry [y/N]?
 
y
Creating the VM...
Starting VPNKit...
Starting the VM...
Waiting for the VM...
FAILED
cf dev start: Timed out waiting for the VM: rpc error: code = Unavailable desc = all SubConns are in TransientFailure, latest connection error: connection error: desc = "transport: Error while dialing dial tcp 127.0.0.1:9999: connectex: Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte."
Re: [cf-bosh] BOSH OpenStack CPI: planned end of maintenance by end of 2019

Marco Voelz
 

Hi everyone, hi Daniel,

 

Thanks for the interest in the BOSH OpenStack CPI, I'm happy to give you some perspective on what we had been doing in the past and what the current status is.

 

* We've automated pretty much everything in terms of regular maintenance. This includes updates of the dependencies like rubygems [1], and consumption of the ruby-release in bosh packages [2]. We have automated the update of ruby-release itself, such that ruby, rubygems, etc are automatically updated.

* All PRs are tested against the supported set of OpenStack APIs by using the cf-openstack-validator to run a base set of API interactions with OpenStack [3]. We're using OpenLab [4] to provide virtualized OpenStack environments for us. Adding a new one is only a few lines of yml [5]

* New versions of bosh, a stemcell, or the cpi are automatically tested in a pipeline using BATs and e2e tests. While this pipeline currently runs against an SAP provided OpenStack, it is easy to set this up against a different OpenStack

* There are very few issues open (currently 7 issues and 3 of those are feature requests)

* There isn't really left-over work for now: Our backlog contains 37 open stories tagged with 'cpi' [6]. Quite a few are crossed out (we decided not to do them, but keep them for future reference to document decisions), or even about different CPIs like AWS and GCP.

* The biggest pain point in the past have been fog-openstack and excon. Updates of these two libraries are always a gamble, they don't seem to be well-tested and introduced quite some annoyances over the last few years. One example is how the individual OpenStack projects adopted microversions in their APIs and how fog-openstack selects which version to use. More recently, this didn't have much impact – it mostly matters when you're trying to use functionality that isn't present below a certain microversion or has been removed starting from a version.

* We have been trying to support the community with their OpenStack issues in #openstack and #bosh on CF Slack. Interrupts don't come on a daily basis, but there is a need for looking at community questions.

* We tried to improve the ecosystem with projects like cf-openstack-validator [9], better OpenStack support in bbl [10], and .tf templates for OpenStack [11]. Also maintaining the OpenStack part of the docs on bosh.io

 

Overall, I guess the amount of work you would need to put into the OpenStack CPI depends on what you're trying to do with it. My guess is that a pair of engineers is sufficient to address some of the more recent feature requests and keep the system alive and healthy.

 

Let me know if you need more information to get a feeling for what it means to take over this work. I'm happy to talk about individual aspects some more, if it helps.

 

Warm regards

Marco

 

[1] https://github.com/cloudfoundry/bosh-openstack-cpi-release/pull/212

[2] https://github.com/cloudfoundry/bosh-openstack-cpi-release/pull/207

[3] https://github.com/cloudfoundry/bosh-openstack-cpi-release/pull/212#issuecomment-518850649

[4] https://openlabtesting.org/

[5] https://github.com/cloudfoundry/bosh-openstack-cpi-release/commit/3c613ad99c574bcf741a796de9c1c9557480c5c5

[6] https://www.pivotaltracker.com/n/projects/1456570/search?q=label%3A%22cpi%22

[7] https://github.com/cloudfoundry/bosh-openstack-cpi-release/issues/186

[8] https://github.com/cloudfoundry/bosh-openstack-cpi-release/issues/211

[9] https://github.com/cloudfoundry-incubator/cf-openstack-validator

[10] https://github.com/cloudfoundry/bosh-bootloader/pull/431

[11] https://github.com/cloudfoundry-incubator/bosh-openstack-environment-templates

 

 

 

 

From: <cf-bosh@...> on behalf of Daniel Jones <daniel.jones@...>
Reply to: "cf-bosh@..." <cf-bosh@...>
Date: Thursday, 22. August 2019 at 15:52
To: "Discussions about the Cloud Foundry BOSH project." <cf-bosh@...>
Cc: "cf-dev@..." <cf-dev@...>
Subject: Re: [cf-bosh] BOSH OpenStack CPI: planned end of maintenance by end of 2019

 

Hi all,

 

I should imagine there must be enough very large consumers of the OpenStack CPI to make it commercially viable for a small team to be funded that could maintain it, were all said consumers to pull together and contribute what I should imagine would be a small sliver of their total CF expenditure.

 

If any OpenStack CPI users want to talk to EngineerBetter about funded development, we'd be happy to have that conversation as we're doing some similar EOL work for other CF projects. 

 

Similarly, if our chums at Anynines, Altoros, S&W, GrapeUp, EVoila, GStack, Armakuni, Novatec or others want to work together on this, we'd be open to that. I can also imagine that some chunk of Pivotal's revenue depends on this CPI, so perhaps some of our teal friends might be interested too? It could be like one of those Marvel films (that I don't watch) where we all team up to vanquish the evil villain of abandoned software. 

 

Marco - how many pairs were working on these streams of work, and do you have a feel for the balance of vital maintenance, tech debt, new features, and quality-of-life improvements in the backlog?


Regards,

Daniel 'Deejay' Jones - CTO

+44 (0)79 8000 9153

EngineerBetter Ltd - More than cloud platform specialists

 

 

On Wed, 21 Aug 2019 at 09:38, Marco Voelz <marco.voelz@...> wrote:

Dear Friends of OpenStack,

 

Since 2015, the BOSH OpenStack CPI [1] is maintained by the BOSH team Europe at SAP. Historically, this made sense, because SAP was a large user of OpenStack, but in the meantime our focus as a company has shifted.

 

Consequently, we would like to announce that our team at SAP will stop maintaining the BOSH OpenStack CPI and a few related projects like CF OpenStack validator [2] and bosh-openstack-environment-templates [3] *by the end of 2019*. Already starting right now, we are stopping feature work on the BOSH OpenStack CPI. From 2020 on, we will not release any new versions of the CPI, be it for fixing CVEs, ensuring support of new OpenStack versions, or other reasons.

 

If there is anybody in the community with interest to continue maintenance and development of the BOSH OpenStack CPI and potentially the related projects as well, we're happy to transfer the ownership of projects and CI pipelines. If no maintainer is found for a project,  the regular course of action would be to move it to the cloudfoundry-attic organization.

 

If this is a topic you'd like to talk about, please reach out to us by replying to this mail or contacting me directly.

 

Warm regards

Marco

 

[1] https://github.com/cloudfoundry/bosh-openstack-cpi-release

[2] https://github.com/cloudfoundry-incubator/cf-openstack-validator

[3] https://github.com/cloudfoundry-incubator/bosh-openstack-environment-templates

Re: cf7 beta CLI is available

Marco Nicosia
 

Congratulations on making it to this milestone, VAT and CLI teams!

I know a lot of hours and work have gone into this, so this is a very special release.

I’m very excited for the coming feedback. I know that there’s still a lot of work to go, but really glad for it to be in the hands of real people!

On Thu, Aug 22, 2019 at 1:37 PM Tim Downey <tdowney@...> wrote:
Congratulations on shipping the beta V7 cf CLI! 🎉

Can't wait to start using it! 😎

On Thu, Aug 22, 2019 at 1:04 PM Abby Chau <achau@...> wrote:
Hi everyone,

We are excited to announce that the cf7 beta CLI is available and can be found on the cf CLI's release page. The V3 Acceleration Team (VAT formed to accelerate the development of the cf7 beta CLI and the backing v3 CC API) have been working hard on this first publicly consumable cf7 beta release. 

Please read the release notes and official documentation about new features on cf7, which commands we've converted to call the v3 API, and details about the differences between v6 and v7 cf CLIs.

A publicly consumable cf7 beta CLI triggers Phase 1 of the v6 Deprecation Plan, which stipulates that the majority of feature work will now be added to cf7 CLI only. v6 will continue to be fully supported, see the v6 Deprecation Plan for more information. 

Please reach out if you have feedback or questions. For cf7 CLI feedback, please open a GitHub issue, or reach out directly on Cloud Foundry Slack - we hang out at #v3-acceleration-team or #cli. 

Best,

V3 Acceleration and cf CLI teams

--
--
  Marco Nicosia
  Product Manager
  Pivotal Software, Inc.
  c: 650-796-2948
Re: cf7 beta CLI is available

Tim Downey
 

Congratulations on shipping the beta V7 cf CLI! 🎉

Can't wait to start using it! 😎

On Thu, Aug 22, 2019 at 1:04 PM Abby Chau <achau@...> wrote:
Hi everyone,

We are excited to announce that the cf7 beta CLI is available and can be found on the cf CLI's release page. The V3 Acceleration Team (VAT formed to accelerate the development of the cf7 beta CLI and the backing v3 CC API) have been working hard on this first publicly consumable cf7 beta release. 

Please read the release notes and official documentation about new features on cf7, which commands we've converted to call the v3 API, and details about the differences between v6 and v7 cf CLIs.

A publicly consumable cf7 beta CLI triggers Phase 1 of the v6 Deprecation Plan, which stipulates that the majority of feature work will now be added to cf7 CLI only. v6 will continue to be fully supported, see the v6 Deprecation Plan for more information. 

Please reach out if you have feedback or questions. For cf7 CLI feedback, please open a GitHub issue, or reach out directly on Cloud Foundry Slack - we hang out at #v3-acceleration-team or #cli. 

Best,

V3 Acceleration and cf CLI teams
cf7 beta CLI is available

Abby Chau
 

Hi everyone,

We are excited to announce that the cf7 beta CLI is available and can be found on the cf CLI's release page. The V3 Acceleration Team (VAT formed to accelerate the development of the cf7 beta CLI and the backing v3 CC API) have been working hard on this first publicly consumable cf7 beta release. 

Please read the release notes and official documentation about new features on cf7, which commands we've converted to call the v3 API, and details about the differences between v6 and v7 cf CLIs.

A publicly consumable cf7 beta CLI triggers Phase 1 of the v6 Deprecation Plan, which stipulates that the majority of feature work will now be added to cf7 CLI only. v6 will continue to be fully supported, see the v6 Deprecation Plan for more information. 

Please reach out if you have feedback or questions. For cf7 CLI feedback, please open a GitHub issue, or reach out directly on Cloud Foundry Slack - we hang out at #v3-acceleration-team or #cli. 

Best,

V3 Acceleration and cf CLI teams
Re: [cf-bosh] BOSH OpenStack CPI: planned end of maintenance by end of 2019

Daniel Jones
 

Hi all,

I should imagine there must be enough very large consumers of the OpenStack CPI to make it commercially viable for a small team to be funded that could maintain it, were all said consumers to pull together and contribute what I should imagine would be a small sliver of their total CF expenditure.

If any OpenStack CPI users want to talk to EngineerBetter about funded development, we'd be happy to have that conversation as we're doing some similar EOL work for other CF projects. 

Similarly, if our chums at Anynines, Altoros, S&W, GrapeUp, EVoila, GStack, Armakuni, Novatec or others want to work together on this, we'd be open to that. I can also imagine that some chunk of Pivotal's revenue depends on this CPI, so perhaps some of our teal friends might be interested too? It could be like one of those Marvel films (that I don't watch) where we all team up to vanquish the evil villain of abandoned software. 

Marco - how many pairs were working on these streams of work, and do you have a feel for the balance of vital maintenance, tech debt, new features, and quality-of-life improvements in the backlog?

Regards,
Daniel 'Deejay' Jones - CTO
+44 (0)79 8000 9153
EngineerBetter Ltd - More than cloud platform specialists


On Wed, 21 Aug 2019 at 09:38, Marco Voelz <marco.voelz@...> wrote:

Dear Friends of OpenStack,

 

Since 2015, the BOSH OpenStack CPI [1] is maintained by the BOSH team Europe at SAP. Historically, this made sense, because SAP was a large user of OpenStack, but in the meantime our focus as a company has shifted.

 

Consequently, we would like to announce that our team at SAP will stop maintaining the BOSH OpenStack CPI and a few related projects like CF OpenStack validator [2] and bosh-openstack-environment-templates [3] *by the end of 2019*. Already starting right now, we are stopping feature work on the BOSH OpenStack CPI. From 2020 on, we will not release any new versions of the CPI, be it for fixing CVEs, ensuring support of new OpenStack versions, or other reasons.

 

If there is anybody in the community with interest to continue maintenance and development of the BOSH OpenStack CPI and potentially the related projects as well, we're happy to transfer the ownership of projects and CI pipelines. If no maintainer is found for a project,  the regular course of action would be to move it to the cloudfoundry-attic organization.

 

If this is a topic you'd like to talk about, please reach out to us by replying to this mail or contacting me directly.

 

Warm regards

Marco

 

[1] https://github.com/cloudfoundry/bosh-openstack-cpi-release

[2] https://github.com/cloudfoundry-incubator/cf-openstack-validator

[3] https://github.com/cloudfoundry-incubator/bosh-openstack-environment-templates

BOSH OpenStack CPI: planned end of maintenance by end of 2019

Marco Voelz
 

Dear Friends of OpenStack,

 

Since 2015, the BOSH OpenStack CPI [1] is maintained by the BOSH team Europe at SAP. Historically, this made sense, because SAP was a large user of OpenStack, but in the meantime our focus as a company has shifted.

 

Consequently, we would like to announce that our team at SAP will stop maintaining the BOSH OpenStack CPI and a few related projects like CF OpenStack validator [2] and bosh-openstack-environment-templates [3] *by the end of 2019*. Already starting right now, we are stopping feature work on the BOSH OpenStack CPI. From 2020 on, we will not release any new versions of the CPI, be it for fixing CVEs, ensuring support of new OpenStack versions, or other reasons.

 

If there is anybody in the community with interest to continue maintenance and development of the BOSH OpenStack CPI and potentially the related projects as well, we're happy to transfer the ownership of projects and CI pipelines. If no maintainer is found for a project,  the regular course of action would be to move it to the cloudfoundry-attic organization.

 

If this is a topic you'd like to talk about, please reach out to us by replying to this mail or contacting me directly.

 

Warm regards

Marco

 

[1] https://github.com/cloudfoundry/bosh-openstack-cpi-release

[2] https://github.com/cloudfoundry-incubator/cf-openstack-validator

[3] https://github.com/cloudfoundry-incubator/bosh-openstack-environment-templates

FINAL REMINDER: CAB call for August is next week Wednesday 21st @ 8a Pacific

Michael Maximilien
 

Please note, we now have two talks confirmed:
 
1. Project Eirini update / demo [1] by Julian Skupnjak of IBM and Mario Nitchev of SAP
2. Introducing EiriniX [2] by Vlad Iovanov of SUSE
 
Don't miss these talks. All info and agenda in [0].
 
Zoom soon. Best,

------
dr.max
ibm ☁ 
silicon valley, ca
maximilien.org
 
 
 

----- Original message -----
From: Michael Maximilien/Almaden/IBM
To: cf-dev@...
Cc:
Subject: REMINDER: CAB call for August is next week Wednesday 21st @ 8a Pacific
Date: Thu, Aug 15, 2019 6:20 PM
 
Hi, all,
 
Reminder that the CAB call [0] for August 2019 is next Wednesday 21st @ 8a Pacific.
 
We will have regular highlights, QAs, as well as two planned talks:
 
1. Project Eirini update / demo [1] by Julian Skupnjak of IBM and Mario Nitchev of SAP
2. TBD
  
All other info in agenda [0]. Zoom soon. Best,
 
------
dr.max
ibm ☁ 
silicon valley, ca
maximilien.org
 
[0] https://docs.google.com/document/d/1SCOlAquyUmNM-AQnekCOXiwhLs6gveTxAcduvDcW_xI
[1] https://github.com/cloudfoundry-incubator/eirini
 
planned end of life for cloudfoundry-incubator/efs-volume-release

Hjortshoj, Julian <Julian.Hjortshoj@...>
 

Hi Folks,

The Cloud Foundry Volume Services team is planning to migrate efs-volume-release and its submodules from the cloudfoundry-incubator github org into cloudfoundry-attic.  This will help us to free up our limited resources to deliver on upcoming roadmap items.

The code will continue to be available from cloudfoundry-attic, but we will stop testing it against new versions of cf-deployment, and cease all maintenance commits.  We plan to make this change in one month's time, on Friday September 20th.

The Volume Services team welcomes any feedback you might have regarding this planned EOL.  We can be reached in the #cf-volume-services channel of cf slack, or via email at cf-diego-persistence@...

Thanks,
-Julian Hjortshoj
Re: Silk VXLAN across mutli-datacenter #cf

Mike <micruzz82@...>
 

Just been reading about Flockport and not sure if that can be integrated with CF CNI... what could be an option is that at each site, every node has a bgp router agent like FRR/Quagga. There should be 2 other nodes which act as route reflectors to advertise the subnets to each of the same site nodes. Wireguard can them be used to build a VPN from each of the border nodes. The BGP peering between the border nodes then advertises the container routes from the other side and this way container to container communication is a possibilty.
Re: Silk VXLAN across mutli-datacenter #cf

Mike <micruzz82@...>
 
Edited

%3CmxGraphModel%3E%3Croot%3E%3CmxCell%20id%3D%220%22%2F%3E%3CmxCell%20id%3D%221%22%20parent%3D%220%22%2F%3E%3CmxCell%20id%3D%222%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22105%22%20y%3D%2290%22%20width%3D%22120%22%20height%3D%2260%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%223%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22265%22%20y%3D%2290%22%20width%3D%22120%22%20height%3D%2260%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%224%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22425%22%20y%3D%2290%22%20width%3D%22120%22%20height%3D%2260%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%225%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22585%22%20y%3D%2290%22%20width%3D%22120%22%20height%3D%2260%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%226%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22110%22%20y%3D%22310%22%20width%3D%22120%22%20height%3D%2260%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%227%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22270%22%20y%3D%22310%22%20width%3D%22120%22%20height%3D%2260%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%228%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22430%22%20y%3D%22310%22%20width%3D%22120%22%20height%3D%2260%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%229%22%20value%3D%22%22%20style%3D%22rounded%3D1%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22590%22%20y%3D%22310%22%20width%3D%22120%22%20height%3D%2260%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2210%22%20value%3D%22%22%20style%3D%22endArrow%3Dnone%3Bdashed%3D1%3Bhtml%3D1%3B%22%20edge%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20width%3D%2250%22%20height%3D%2250%22%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%2235%22%20y%3D%22120%22%20as%3D%22sourcePoint%22%2F%3E%3CmxPoint%20x%3D%22745%22%20y%3D%22120%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2211%22%20value%3D%22%22%20style%3D%22endArrow%3Dnone%3Bdashed%3D1%3Bhtml%3D1%3B%22%20edge%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20width%3D%2250%22%20height%3D%2250%22%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%2260%22%20y%3D%22339%22%20as%3D%22sourcePoint%22%2F%3E%3CmxPoint%20x%3D%22770%22%20y%3D%22339%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2212%22%20value%3D%22%22%20style%3D%22ellipse%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22350%22%20y%3D%22270%22%20width%3D%22100%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2213%22%20value%3D%22%22%20style%3D%22ellipse%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22350%22%20y%3D%22160%22%20width%3D%22100%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2214%22%20value%3D%22%22%20style%3D%22shape%3Dlink%3Bhtml%3D1%3BentryX%3D0.5%3BentryY%3D1%3BentryDx%3D0%3BentryDy%3D0%3BexitX%3D0.5%3BexitY%3D0%3BexitDx%3D0%3BexitDy%3D0%3Bwidth%3D18%3B%22%20edge%3D%221%22%20source%3D%2212%22%20target%3D%2213%22%20parent%3D%221%22%3E%3CmxGeometry%20width%3D%2250%22%20height%3D%2250%22%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%2280%22%20y%3D%22240%22%20as%3D%22sourcePoint%22%2F%3E%3CmxPoint%20x%3D%22130%22%20y%3D%22190%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2215%22%20value%3D%22%22%20style%3D%22shape%3Dlink%3Bhtml%3D1%3B%22%20edge%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20width%3D%2250%22%20height%3D%2250%22%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%2280%22%20y%3D%2280%22%20as%3D%22sourcePoint%22%2F%3E%3CmxPoint%20x%3D%22730%22%20y%3D%2280%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2216%22%20value%3D%22%22%20style%3D%22shape%3Dlink%3Bhtml%3D1%3B%22%20edge%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20width%3D%2250%22%20height%3D%2250%22%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%2270%22%20y%3D%22380%22%20as%3D%22sourcePoint%22%2F%3E%3CmxPoint%20x%3D%22720%22%20y%3D%22380%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2217%22%20value%3D%22Node8%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22630%22%20y%3D%22290%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2218%22%20value%3D%22Node7%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22470%22%20y%3D%22290%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2219%22%20value%3D%22Node6%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22310%22%20y%3D%22290%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2220%22%20value%3D%22Node5%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22145%22%20y%3D%22290%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2221%22%20value%3D%22Node4%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22625%22%20y%3D%22150%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2222%22%20value%3D%22Node3%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22465%22%20y%3D%22150%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2223%22%20value%3D%22Node2%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22300%22%20y%3D%22150%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2224%22%20value%3D%22Node1%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22140%22%20y%3D%22150%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2225%22%20value%3D%22%22%20style%3D%22endArrow%3Dnone%3Bdashed%3D1%3Bhtml%3D1%3B%22%20edge%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20width%3D%2250%22%20height%3D%2250%22%20relative%3D%221%22%20as%3D%22geometry%22%3E%3CmxPoint%20x%3D%2270%22%20y%3D%22220%22%20as%3D%22sourcePoint%22%2F%3E%3CmxPoint%20x%3D%22830%22%20y%3D%22220%22%20as%3D%22targetPoint%22%2F%3E%3C%2FmxGeometry%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2226%22%20value%3D%22DC2%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22750%22%20y%3D%22240%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2227%22%20value%3D%22DC1%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22750%22%20y%3D%22180%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2228%22%20value%3D%22VPN1%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22380.5%22%20y%3D%22160%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2229%22%20value%3D%22VPN2%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22380%22%20y%3D%22270%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2230%22%20value%3D%22SILK%20VXLAN%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22370%22%20y%3D%2240%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2231%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22120%22%20y%3D%2220%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2232%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22165%22%20y%3D%2220%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2233%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22215%22%20y%3D%2220%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2234%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22265%22%20y%3D%2220%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2235%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22320%22%20y%3D%2220%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2236%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22470%22%20y%3D%2215%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2237%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22530%22%20y%3D%2215%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2238%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22585%22%20y%3D%2215%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2239%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22625%22%20y%3D%2215%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2240%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22675%22%20y%3D%2215%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2241%22%20value%3D%22SILK%20VXLAN%22%20style%3D%22text%3Bhtml%3D1%3BstrokeColor%3Dnone%3BfillColor%3Dnone%3Balign%3Dcenter%3BverticalAlign%3Dmiddle%3BwhiteSpace%3Dwrap%3Brounded%3D0%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22377.5%22%20y%3D%22415%22%20width%3D%2240%22%20height%3D%2220%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2242%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22127.5%22%20y%3D%22395%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2243%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22172.5%22%20y%3D%22395%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2244%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22222.5%22%20y%3D%22395%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2245%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22272.5%22%20y%3D%22395%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2246%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22327.5%22%20y%3D%22395%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2247%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22477.5%22%20y%3D%22390%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2248%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22537.5%22%20y%3D%22390%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2249%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22592.5%22%20y%3D%22390%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2250%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22632.5%22%20y%3D%22390%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3CmxCell%20id%3D%2251%22%20value%3D%22%22%20style%3D%22shape%3Dcylinder%3BwhiteSpace%3Dwrap%3Bhtml%3D1%3BboundedLbl%3D1%3BbackgroundOutline%3D1%3B%22%20vertex%3D%221%22%20parent%3D%221%22%3E%3CmxGeometry%20x%3D%22682.5%22%20y%3D%22390%22%20width%3D%2230%22%20height%3D%2250%22%20as%3D%22geometry%22%2F%3E%3C%2FmxCell%3E%3C%2Froot%3E%3C%2FmxGraphModel%3E

III
If you take the above case, is there a possibility that the Silk controller at both ends be dynamically be able to learn the node ips from the 2 datacenters through bgp and if it needs to talk to a container on the other end, it will then send the traffic encapsulated in the IPSEC tunnel.

The aim is that no underlying physical network needs to be modified or any changes on the ESXI host level need to be done. Like the networking concept of border leafs in an EVPN fabric. If there is a similar concept of a border node at both sites and SILK controller determines the node is at a remote site, traffic will be sent to the border node through vpn, decapsulated at the other side, received by the SILK controller on the other side and then sent to the destination container.

I believe if you have this possibility in SILK, you could in theory have a true multi cloud cloud foundry deployment across both on prem and public cloud.

Again this might already exist and I still haven't researched enough.

Thanks

M
Silk VXLAN across mutli-datacenter #cf

micruzz82@...
 

Hi cf-dev team

I wanted to get some more information about how the Silk VXLAN works if you have multi cloud / multi datacenter deployments. If I have a CF deployment in DC-1 and another CF deployment in DC-2 each within unique IP space without stretching the L2 across datacenters, does the Silk VXLAN only get deployed within a single datacenter?

With the multi-cpi feature, a single BOSH director will be able to manage the 2 vcenters in each datacenter. But how will containers in one CF deployment be able to talk to containers in the second CF deployment.

Is there a way the Silk VXLAN can talk at layer 3 instead?

Thanks

M
REMINDER: CAB call for August is next week Wednesday 21st @ 8a Pacific

Michael Maximilien
 

Hi, all,
 
Reminder that the CAB call [0] for August 2019 is next Wednesday 21st @ 8a Pacific.
 
We will have regular highlights, QAs, as well as two planned talks:
 
1. Project Eirini update / demo [1] by Julian Skupnjak of IBM and Mario Nitchev of SAP
2. TBD
  
All other info in agenda [0]. Zoom soon. Best,
 
------
dr.max
ibm ☁ 
silicon valley, ca
maximilien.org
 
[0] https://docs.google.com/document/d/1SCOlAquyUmNM-AQnekCOXiwhLs6gveTxAcduvDcW_xI
[1] https://github.com/cloudfoundry-incubator/eirini
Re: Using X.509 certificates as a mechanism for OAuth client authentication #uaa

Dan Beneke
 

Hi Brian - 

Thanks for the comment/question.  

We're interested in understanding your intentions should UAA support the draft-ietf-oauth-mtls-04?  What value does it provide your organization over the client-id/client-secret authentication workflow?

Regards,
Dan Beneke
cf-networking-release & silk-release 2.24.0!

Aidan Obley <aobley@...>
 

Hello cf-dev!

CF-Networking-Release v2.24.0

Release Highlights

  • Upgrade cf-cli bosh release to v1.16 for latest fixes details
  • Clients of policy server external API receive a strict-transport-security header on HTTP requests details
  • Policy Server External API can be configured to listen using TLS details

Manifest Property Changes

Job Property 2.22.0 Default 2.23.0 Default
policy-server enable_tls did not exist false
policy-server server_cert did not exist
policy-server server_key did not exist

Silk-Release v2.24.0

Release Highlights

  • Fix: cloudfoundry/silk-release #13: Rate Limiting causes apps to become unresponsive even after no traffic details

Regards,
The Networking Program
Re: Using a TLS connection to the MySQL database #uaa

Filip Hanik
 

You’re welcome. 

Covered in a later section


On Wed, Aug 7, 2019 at 13:55 vshetty via Lists.Cloudfoundry.Org <vshetty=fdic.gov@...> wrote:
Thanks Filip. That was very helpful. I updated the uaa.yml with useSSL = true. I had to set trustServerCertificate to true as well otherwise it gives a handshake error. 

If i want to validate the MySQL server certificate, then do I just add it to the cacerts truststore of the UAA server ?  

Re: Using a TLS connection to the MySQL database #uaa

Shetty, Viraj S [CTR]
 

Thanks Filip. That was very helpful. I updated the uaa.yml with useSSL = true. I had to set trustServerCertificate to true as well otherwise it gives a handshake error. 

If i want to validate the MySQL server certificate, then do I just add it to the cacerts truststore of the UAA server ?  
Re: Using a TLS connection to the MySQL database #uaa

Filip Hanik
 

MySQL TLS is enabled through the JDBC URL of the MySQL driver.
For example, if you are deploying the UAA using Bosh, it generates the JDBC URL based on your configuration, and inserts that into uaa.yml

Here is a reference to URL properties


On Tue, Aug 6, 2019 at 1:14 PM vshetty via Lists.Cloudfoundry.Org <vshetty=fdic.gov@...> wrote:
We have  a separate instance of UAA server interacting with the MySQL database running on cloud.gov. Recently, we have been advised to use a TLS connection to connect to the database. After doing some research, we found that the TLS certifciate is setup on the MySQL server. How do I make sure that the UAA server can connect to this MySQL server using TLS ? Is there any any configuration in uaa.yml that I can set ? 

Any help would be appreciated ! 

Thanks, 
Viraj 

721 - 740 of 9432