The Apache CloudStack Blog

Tuesday Mar 25, 2014

Realhostip Service is Being Retired

Recently the Apache CloudStack PMC was informed that the realhostip.com Dynamic DNS service that CloudStack currently uses as part of the console proxy will be disbanded this summer. The realhostip service will be shut down June 30th, 2014, meaning users have approximately 3 months to mitigate this.

Prior to version 4.3, CloudStack used the realhostip.com service by default. With the release of CloudStack version 4.3 the default communication method with the console proxy is plaintext HTTP.

Who is Affected

CloudStack installations prior to version 4.3 that have not been reconfigured to use a DNS domain other than realhostip.com for Console Proxy or Secondary Storage must make changes to continue functioning past June 30th, 2014.

Steps You Need to Take

If you meet the criteria above, there are several options to prepare for realhostip retirement:

  • Set up wildcard SSL certificate and DNS entries: This method is already well supported within prior versions of CloudStack.
  • Upgrade to CloudStack 4.3 and disable SSL: This is only recommended for development installations, or private clouds that contain no information of importance.
  • Upgrade to CloudStack 4.3, set up static SSL certificate and configure load balancer to point to the correct IP address: While this allows an administrator to skip setting up the DNS entries from the previous option, it is a more advanced option as CloudStack 4.3 does not support automatic load balancer configuration for the Console Proxy. It is hoped this functionality will be available in future releases.

For instructions on how to set up SSL encryption for use with CloudStack console proxy, please read the console proxy section of the CloudStack administration guide.

Additionally, if you will be using an SSL vendor who requires an intermediate CA chain to be installed for proper SSL validation by web browsers, detailed instructions for configuring the intermediate CA chain in CloudStack can be found here.

The Apache CloudStack security team does not recommend running a production cloud with either the realhostip.com SSL certificate, or with no SSL encryption at all.

Comments:

Hi, The service is now being retired on Sept 30th, 2014. Please refer to https://cwiki.apache.org/confluence/display/CLOUDSTACK/Procedure+to+Replace+realhostip.com+with+Your+Own+Domain+Name for detailed and updated information, and the impact of this change.

Posted by Amogh Vasekar on September 29, 2014 at 06:38 PM UTC #

*

Posted by 140.211.11.75 on October 09, 2014 at 08:26 PM UTC #

good

Posted by good on October 11, 2014 at 06:22 AM UTC #

close

Posted by Nk on October 13, 2014 at 08:58 AM UTC #

good

Posted by bratu andrei on October 13, 2014 at 09:40 AM UTC #

my console is not working

Posted by bratu andrei on October 13, 2014 at 09:41 AM UTC #

sss

Posted by mahk on October 13, 2014 at 01:00 PM UTC #

good

Posted by 140.211.11.75 on October 13, 2014 at 03:29 PM UTC #

Posted by 140.211.11.75 on October 15, 2014 at 06:58 AM UTC #

thanks

Posted by liuqing on October 15, 2014 at 07:09 AM UTC #

qq

Posted by 140.211.11.75 on October 16, 2014 at 04:31 AM UTC #

ssss

Posted by q on October 16, 2014 at 04:32 AM UTC #

ss

Posted by ss on October 16, 2014 at 04:32 AM UTC #

good

Posted by 140.211.11.75 on October 19, 2014 at 12:15 AM UTC #

good

Posted by Vu on October 19, 2014 at 06:32 AM UTC #

good

Posted by 140.211.11.75 on October 20, 2014 at 02:59 AM UTC #

Opa

Posted by 140.211.11.75 on October 22, 2014 at 11:46 PM UTC #

good

Posted by 140.211.11.75 on October 23, 2014 at 02:41 AM UTC #

good

Posted by 140.211.11.75 on October 23, 2014 at 02:47 AM UTC #

good

Posted by 140.211.11.75 on October 23, 2014 at 02:50 AM UTC #

dsadasd

Posted by lan on October 29, 2014 at 09:17 AM UTC #

good

Posted by M K on October 29, 2014 at 02:05 PM UTC #

nothing

Posted by 什么情况 on October 30, 2014 at 05:41 AM UTC #

cool

Posted by dfsgdfg on November 05, 2014 at 04:49 AM UTC #

rkr

Posted by 140.211.11.75 on November 05, 2014 at 10:03 AM UTC #

a

Posted by 140.211.11.75 on November 05, 2014 at 08:24 PM UTC #

nbjb.k

Posted by 140.211.11.75 on November 12, 2014 at 12:04 PM UTC #

thanks

Posted by 140.211.11.75 on November 13, 2014 at 02:21 PM UTC #

.

Posted by 140.211.11.75 on November 16, 2014 at 05:37 PM UTC #

comment

Posted by 140.211.11.75 on November 21, 2014 at 03:07 PM UTC #

a

Posted by 140.211.11.75 on December 05, 2014 at 09:23 AM UTC #

ddd

Posted by 140.211.11.75 on December 11, 2014 at 03:39 AM UTC #

dfd

Posted by 140.211.11.75 on December 19, 2014 at 12:21 AM UTC #

good

Posted by Trab on December 20, 2014 at 04:04 AM UTC #

asd

Posted by jon on December 21, 2014 at 05:38 PM UTC #

balls

Posted by deep on December 25, 2014 at 04:42 PM UTC #

good

Posted by wangfan on January 01, 2015 at 06:53 AM UTC #

good

Posted by andrew on January 12, 2015 at 02:10 AM UTC #

ser 2008

Posted by 140.211.11.75 on January 12, 2015 at 05:29 PM UTC #

good

Posted by 140.211.11.75 on January 12, 2015 at 05:35 PM UTC #

d3red3d3

Posted by 140.211.11.75 on January 24, 2015 at 03:44 PM UTC #

aaaaaaaaaaaaaaaaaaaaagaaaaaaaaaaa

Posted by 140.211.11.75 on January 28, 2015 at 07:06 PM UTC #

qqqq

Posted by qqqqq on January 31, 2015 at 06:27 PM UTC #

teste

Posted by Eduardo Rocha on February 02, 2015 at 06:24 PM UTC #

xx

Posted by 140.211.11.75 on February 05, 2015 at 04:39 PM UTC #

GOOd

Posted by ASDASD on February 28, 2015 at 02:58 AM UTC #

Very good

Posted by sreenivas on March 12, 2015 at 01:18 PM UTC #

ljgkjghjhj

Posted by ,khhkj on March 20, 2015 at 05:06 AM UTC #

dsdsdsf

Posted by 140.211.11.75 on April 16, 2015 at 02:58 AM UTC #

ee

Posted by 140.211.11.75 on April 16, 2015 at 08:41 AM UTC #

123

Posted by 123 on April 17, 2015 at 07:30 AM UTC #

kk

Posted by kk on April 19, 2015 at 04:41 PM UTC #

aa

Posted by 140.211.11.75 on May 13, 2015 at 03:04 AM UTC #

aa

Posted by 140.211.11.75 on May 13, 2015 at 03:05 AM UTC #

a

Posted by a on May 21, 2015 at 06:56 AM UTC #

111

Posted by zhao on May 22, 2015 at 03:34 AM UTC #

Post a Comment:
  • HTML Syntax: NOT allowed

Calendar

Search

Hot Blogs (today's hits)

Tag Cloud

Categories

Feeds

Links

Navigation