apache/cloudstack
1
0
Fork 0
mirror of https://github.com/apache/cloudstack.git synced 2025-10-26 08:42:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

CLOUDSTACK-2806

Browse Source
This commit is contained in:
radhikap 2013-07-08 16:55:56 +05:30
parent 24e9797807
commit 03c8f74e98
4 changed files with 198 additions and 119 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/en-US/add-gateway-vpc.xml
View File

@ -144,10 +144,11 @@
<section id="acl-private-gateway">
<title>ACL on Private Gateway</title>
<para>The traffic on the VPC private gateway is controlled by creating both ingress and egress
network ACL rules. The ACLs contains both allow and deny rules. As per the rule, all the
ingress traffic to the private gateway interface and all the egress traffic out from the
private gateway interface are blocked. You can change this default behaviour while creating a
private gateway.</para>
network ACL rules. The ACLs contains both allow and deny rules. In addition to the default ACL
rules, rules you might have created are also listed in the ACL drop-down list. As per the
rule, all the ingress traffic to the private gateway interface and all the egress traffic out
from the private gateway interface are blocked. You can change this default behaviour while
creating a private gateway.</para>
</section>
<section id="static-route">
<title>Creating a Static Route</title>

110
docs/en-US/configure-acl.xml
View File

@ -25,6 +25,8 @@
default, all incoming and outgoing traffic to the guest networks is blocked. To open the ports,
you must create a new network ACL. The network ACLs can be created for the tiers only if the
NetworkACL service is supported.</para>
<section id="acl-list">
<title>Creating ACL Lists</title>
<orderedlist>
<listitem>
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
@ -37,8 +39,7 @@
<para>All the VPCs that you have created for the account is listed in the page.</para>
</listitem>
<listitem>
<para>Click the Configure button of the VPC, for which you want to configure load balancing
rules.</para>
<para>Click the Configure button of the VPC.</para>
<para>For each tier, the following options are displayed:</para>
<itemizedlist>
<listitem>
@ -90,33 +91,56 @@
</listitem>
</itemizedlist>
</listitem>
</orderedlist>
</section>
<section id="add-acl-rule">
<title>Creating an ACL Rule</title>
<orderedlist>
<listitem>
<para>Select the ACL list.</para>
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
</listitem>
<listitem>
<para>In the left navigation, choose Network.</para>
</listitem>
<listitem>
<para>In the Select view, select VPC.</para>
<para>All the VPCs that you have created for the account is listed in the page.</para>
</listitem>
<listitem>
<para>Click the Configure button of the VPC.</para>
</listitem>
<listitem>
<para>Select Network ACL Lists.</para>
<para>In addition to the custom ACL lists you have created, the following default rules are
displayed in the Network ACLs page: default_allow, default_deny.</para>
</listitem>
<listitem>
<para>Select the desired ACL list.</para>
</listitem>
<listitem>
<para>Select the ACL List Rules tab.</para>
<para>To add an ACL rule, fill in the following fields to specify what kind of network traffic
is allowed in the VPC. </para>
<para>To add an ACL rule, fill in the following fields to specify what kind of network
traffic is allowed in the VPC. </para>
<itemizedlist>
<listitem>
<para><emphasis role="bold">CIDR</emphasis>: The CIDR acts as the Source CIDR for the
Ingress rules, and Destination CIDR for the Egress rules. To accept traffic only from or
to the IP addresses within a particular address block, enter a CIDR or a comma-separated
list of CIDRs. The CIDR is the base IP address of the incoming traffic. For example,
192.168.0.0/22. To allow all CIDRs, set to 0.0.0.0/0.</para>
Ingress rules, and Destination CIDR for the Egress rules. To accept traffic only from
or to the IP addresses within a particular address block, enter a CIDR or a
comma-separated list of CIDRs. The CIDR is the base IP address of the incoming
traffic. For example, 192.168.0.0/22. To allow all CIDRs, set to 0.0.0.0/0.</para>
</listitem>
<listitem>
<para><emphasis role="bold">Protocol</emphasis>: The networking protocol that sources use
to send traffic to the tier. The TCP and UDP protocols are typically used for data
exchange and end-user communications. The ICMP protocol is typically used to send error
messages or network monitoring data. All supports all the traffic. Other option is
Protocol Number.</para>
<para><emphasis role="bold">Protocol</emphasis>: The networking protocol that sources
use to send traffic to the tier. The TCP and UDP protocols are typically used for data
exchange and end-user communications. The ICMP protocol is typically used to send
error messages or network monitoring data. All supports all the traffic. Other option
is Protocol Number.</para>
</listitem>
<listitem>
<para><emphasis role="bold">Start Port</emphasis>, <emphasis role="bold">End
Port</emphasis> (TCP, UDP only): A range of listening ports that are the destination
for the incoming traffic. If you are opening a single port, use the same number in both
fields.</para>
for the incoming traffic. If you are opening a single port, use the same number in
both fields.</para>
</listitem>
<listitem>
<para><emphasis role="bold">Protocol Number</emphasis>: The protocol number associated
@ -141,3 +165,57 @@
</listitem>
</orderedlist>
</section>
<section id="create-acl-tier">
<title>Assigning a Custom ACL List to a Tier</title>
<orderedlist>
<listitem>
<para>Create a VPC.</para>
</listitem>
<listitem>
<para>Create a custom ACL list.</para>
</listitem>
<listitem>
<para>Add ACL rules to the ACL list.</para>
</listitem>
<listitem>
<para>Create a tier in the VPC.</para>
<para>Select the desired ACL list while creating a tier.</para>
</listitem>
<listitem><para>Click OK.</para></listitem>
</orderedlist>
</section>
<section id="assign-acl-tier">
<title>Assigning a Custom ACL List to a Tier</title>
<orderedlist>
<listitem>
<para>Create a VPC.</para>
</listitem>
<listitem>
<para>Create a tier in the VPC.</para>
</listitem>
<listitem>
<para>Associate the tier with the default ACL rule.</para>
</listitem>
<listitem>
<para>Create a custom ACL list.</para>
</listitem>
<listitem>
<para>Add ACL rules to the ACL list.</para>
</listitem>
<listitem>
<para>Select the tier for which you want to assign the custom ACL.</para>
</listitem>
<listitem><para>Click the Replace ACL List icon.<inlinemediaobject>
<imageobject>
<imagedata fileref="./images/replace-acl-icon.png"/>
</imageobject>
<textobject>
<phrase>replace-acl-icon.png: button to replace an ACL list</phrase>
</textobject>
</inlinemediaobject></para>
<para>The Replace ACL List dialog is displayed.</para></listitem>
<listitem><para>Select the desired ACL list.</para></listitem>
<listitem><para>Click OK.</para></listitem>
</orderedlist>
</section>
</section>

BIN
docs/en-US/images/replace-acl-icon.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 930 B

BIN
docs/en-US/images/replace-acl-list.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 7.5 KiB