mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
Disable inband management of openvswitch on the link local network. You don't want instances connected to this network to be able to talk to the openvswitch management interface.
Signed-off-by: Daan Hoogland <daan@onecht.net>
This commit is contained in:
parent
aacf8ef77b
commit
e8c32c7f5b
@ -4455,11 +4455,14 @@ public abstract class CitrixResourceBase implements ServerResource, HypervisorRe
|
||||
configs.put("ip_begin", NetUtils.getLinkLocalGateway());
|
||||
configs.put("ip_end", NetUtils.getLinkLocalIpEnd());
|
||||
configs.put("netmask", NetUtils.getLinkLocalNetMask());
|
||||
configs.put("vswitch-disable-in-band", "true");
|
||||
rec.otherConfig = configs;
|
||||
linkLocal = Network.create(conn, rec);
|
||||
|
||||
} else {
|
||||
linkLocal = networks.iterator().next();
|
||||
if (!linkLocal.getOtherConfig(conn).containsKey("vswitch-disable-in-band")) {
|
||||
linkLocal.addToOtherConfig(conn, "vswitch-disable-in-band", "true");
|
||||
}
|
||||
}
|
||||
|
||||
/* Make sure there is a physical bridge on this network */
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user