mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
Disable inband management of openvswitch on the link local network. You don't want instances connected to this network to be able to talk to the openvswitch management interface.
Signed-off-by: Daan Hoogland <daan@onecht.net>
This commit is contained in:
parent
aacf8ef77b
commit
e8c32c7f5b
@ -4455,11 +4455,14 @@ public abstract class CitrixResourceBase implements ServerResource, HypervisorRe
|
|||||||
configs.put("ip_begin", NetUtils.getLinkLocalGateway());
|
configs.put("ip_begin", NetUtils.getLinkLocalGateway());
|
||||||
configs.put("ip_end", NetUtils.getLinkLocalIpEnd());
|
configs.put("ip_end", NetUtils.getLinkLocalIpEnd());
|
||||||
configs.put("netmask", NetUtils.getLinkLocalNetMask());
|
configs.put("netmask", NetUtils.getLinkLocalNetMask());
|
||||||
|
configs.put("vswitch-disable-in-band", "true");
|
||||||
rec.otherConfig = configs;
|
rec.otherConfig = configs;
|
||||||
linkLocal = Network.create(conn, rec);
|
linkLocal = Network.create(conn, rec);
|
||||||
|
|
||||||
} else {
|
} else {
|
||||||
linkLocal = networks.iterator().next();
|
linkLocal = networks.iterator().next();
|
||||||
|
if (!linkLocal.getOtherConfig(conn).containsKey("vswitch-disable-in-band")) {
|
||||||
|
linkLocal.addToOtherConfig(conn, "vswitch-disable-in-band", "true");
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Make sure there is a physical bridge on this network */
|
/* Make sure there is a physical bridge on this network */
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user