cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
197
Views
1
Helpful
3
Replies

IOx Application Hosting for Cisco-Signed Apps -- BIND9

alexgill
Level 1
Level 1

Hi. I'm new here.

I'm trying to run a Cisco-signed application "Bind9" on a C9300 and am following their guide:

"Application Hosting on Cisco Catalyst Switches": https://developer.cisco.com/docs/app-hosting/general-instructions/

The info seems thin on running anything other than "iPerf3" and "Thousand Eyes": https://developer.cisco.com/app-hosting/ciscosigned/

Seems the ISC Bind9 Docker image needs to have a Cisco signature to be installed on the bootflash. I'm not sure how this happens. ANd have found "app-hosting verification" does not help -- only for enforcing with developer created apps for deployment.

 

Suggestions appreciated. 

 

3 Replies 3

Stefan Mihajlov
Spotlight
Spotlight

@alexgill 

try 
conf t
no app-hosting verification

and run again

alexgill
Level 1
Level 1

Thanks @Stefan Mihajlov for the tip. ` no app-hosting verification` doesn't see to exist anymore in 17.15 -- what tab completion gives is `no app-hosting signed-verification` which didn't change much. `show app-hosting infra` report then reported `IOX version: 2.12.0.3 [line-br] App signature verification: disabled`. Setting it from the web UI changed that setting: "Application Signature Validation is currently Disabled". Trying the below silently fails as before. (The web UI was more descriptive with an error message -- complaining "App signature validation is required")

> hy-cat-test#app-hosting install appid Bind9 package flash:bind.tar

End of the day, Cisco states this:
"Cisco does not provide any pre-packaged third party unsupported apps. Customers have to package it themselves. Certain third party vendors with whom Cisco has collaborated with can share a link specific to Cisco installation." https://www.cisco.com/c/en/us/support/docs/switches/catalyst-9500-series-switches/222780-understand-app-hosting-on-catalyst-9000.html

It wasn't clear from their webpage, but the only "Cisco-signed" apps are (1) ThousandEyes and (2) Cisco DNA Spaces. Custom apps, and "open source" seems to require running from Cisco USB storage.  https://developer.cisco.com/app-hosting/ciscosigned/

I was optimistic about a great solution utilizing powerful equipment we already owned to do some DNS resolving internally.

@alexgill  tbh, i stuck with IOX same