362 Commits

Author SHA1 Message Date
Chiradeep Vittal
3158e2fa16 CLOUDSTACK-174 remove unused file 2012-09-21 11:55:17 -07:00
Sheng Yang
bbc78bab5d CLOUDSTACK-159: Clean the configuration file
Now it's all written by myself.
2012-09-21 11:47:58 -07:00
Anthony Xu
44e8938120 CLOUDSTACK-106: this issue seems be coverred by other issue somehow, when other issue is fixed, this issue shows up 2012-09-21 10:24:58 -07:00
Marcus Sorensen
bf30dbc241 VPC - enable passwd server service
There is currently no vpcrouter type defined in patchsystemvm.sh, which
controls our init scripts in the system vms. This patch allows the
services that would normally start on a router to start also on the VPC
router, in particular the password server was missing.

Signed-off-by: Edison Su <sudison@gmail.com>
2012-09-20 15:44:51 -07:00
Marcus Sorensen
38457ee8ac CLOUDSTACK-131: KVM fails to copy authorized_keys to system vm now that iso is not
mounted

Signed-off-by: Edison Su <sudison@gmail.com>
2012-09-20 11:06:53 -07:00
Chip Childers
868bad8445 Adding license headers to CS authored ip tables config files 2012-09-14 13:19:17 -04:00
Chip Childers
d1eb762b1e Adding license header 2012-09-14 13:19:17 -04:00
Chip Childers
763311c006 License header updates, and modification to root pom for exclusions. 2012-09-13 16:55:48 -04:00
anthony
ba0522461d VPC : configure apache2 for each guest network 2012-09-07 18:10:42 -07:00
anthony
5756a2a73b VPC : clean up rt_table when stop domr 2012-09-07 17:48:23 -07:00
anthony
6c96e638be VPC : static route, add route table in cloud-early-config 2012-09-07 17:46:40 -07:00
Anthony Xu
4a0e645e28 CS-16254:
passwd_server listen on every interface, but only guest interface is enabled for that port
2012-09-07 17:10:54 -07:00
Anthony Xu
3cfe01d07c VPC : by default , outgoing traffic is allowed out, once egress rules are added, only traffic specified in those are allowed out, others are blocked 2012-09-07 17:03:12 -07:00
Edison Su
3db9736a07 CLOUDSTACK-29
remove iptables/xe-guest/xt
2012-09-06 11:05:09 -07:00
Edison Su
ea9121bc8f KVM initial VPC support
Implements
SetupGuestNetworkCommand,SetNetworkACLCommand,SetSourceNatCommand,IpAssocVpcCommand,SetPortForwardingRulesVpcCommand.
Passes basic functionality, though I'm sure there may be some honing to
do.

Also fixes a few minor things found along the way:
 vpc_guestnw.sh wasn't successfully setting up apache due to default
listen IP of 10.1.1.1
 vpc_guestnw.sh was referencing a 'logger_it' function, replaced with
'logger -t cloud'
 system vms were running with OS type "Debian GNU/Linux 5.0(32-bit)",
which was not found in the KVMGuestOsMapper
 the Xen implementation of SetupGuestNetworkCommand had apparently
copied its catch message from UnPlug Nic, fixed string

Send-by: Marcus Sorensen
RB: https://reviews.apache.org/r/6883
2012-09-04 11:45:59 -07:00
Gavin Lee
39a676c496 Correct license header mainly for patches folder
Signed-off-by: Chip Childers <chip.childers@gmail.com>
I've assumed that Gavin's commit is appropriate, based
on an assumption that we will keep these files in the source
tree.  If https://issues.apache.org/jira/browse/LEGAL-146
results in a different opionion from the members, then we
will end up having to do something more drastic anyway.
2012-08-31 10:50:46 -04:00
Rohit Yadav
2296dc4acc bug CS-15942: Fixes port forwarding issue for redundant routers 2012-08-28 12:11:55 +05:30
Rohit Yadav
fd4a1a39c1 Bug CS-15970: Fixes Redundant router status when host is XenServer 2012-08-28 12:07:33 +05:30
kishan
b42a813ff1 bug CS-16112: During unplug nic iptables rules are cleaned up in both cloud_nic.sh and vpc_netusage.sh. Consolidated this code in cloud_nic.sh
status CS-16112: resolved fixed

Conflicts:
	patches/systemvm/debian/config/opt/cloud/bin/vpc_netusage.sh
2012-08-22 12:00:02 +05:30
Sheng Yang
20ccb6c1cb S2S VPN: CS-16092: Add ESP rule to iptables
Otherwise the other end cannot initiate connection.
2012-08-20 17:28:46 -07:00
kishan
691be5c60e bug CS-15577: Added per gateway network usage for VPC and VPN usage. VPN usage uses 525 mark for outgoing traffic and 524 mark for incoming traffic
status CS-15577: resolved fixed
2012-08-17 17:07:13 +05:30
John Kinsella
6a41965b70 [ASFCS40] Updated version number to reflect 4.0.0 2012-08-14 22:54:44 -07:00
Sheng Yang
e7efd0d95b S2S VPN: Don't consider VPN is down if IPsec SA still existed
Because ISAKMP SA wouldn't be updated after expiration if IPsec SA is still in
affect.
2012-08-10 16:20:52 -07:00
Sheng Yang
435480cb5a S2S VPN: CS-15641: Enable UDP port 4500 for NAT-T 2012-08-06 17:15:38 -07:00
Sheng Yang
4908adb3a1 S2S VPN: CS-15852: Add vpninmask for VPN network usage 2012-08-06 15:32:36 -07:00
Sheng Yang
6e7b4bc07b S2S VPN: CS-15642: Re-initiate the VPN connections after router reboot
Conflicts:

	server/src/com/cloud/network/vpn/Site2SiteVpnManagerImpl.java
2012-08-06 15:32:18 -07:00
Sheng Yang
84a1a311f9 S2S VPN: CS-15511: Add PFS support for VPN connection 2012-08-06 15:27:13 -07:00
Sheng Yang
1b5103c501 S2S VPN: CS-15472: Separate IKE lifetime and ESP lifetime 2012-08-06 15:19:26 -07:00
anthony
9b43753399 VPC : handle Revoke rules for staticroute 2012-08-02 18:59:49 -07:00
anthony
0c9d5f5eb1 VPC : typo 2012-08-02 18:59:48 -07:00
Alena Prokharchyk
7706a9c32f Merge branch 'master' into vpc
Conflicts:
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/rules/RulesManagerImpl.java
2012-07-31 13:37:28 -07:00
anthony
f763f53c2d CS-15680 : set broadcast IP 2012-07-30 13:24:33 -07:00
anthony
3aae979967 CS-15708 : fix network cleanup 2012-07-30 13:24:10 -07:00
Hugo Trippaers
5d31b58c1b Disable IPv6 in the systemvm 2012-07-30 15:17:56 +02:00
Sheng Yang
dd50bdf38e CS-15731: Make S2S VPN no-nat rule the top of POSTROUTING 2012-07-27 18:49:25 -07:00
Sheng Yang
8eee8f342e S2S VPN: CS-15650: Add connection status update to s2s vpn 2012-07-27 16:28:06 -07:00
anthony
d5d6c9f5f4 VPC : this is default iptables for vpc route 2012-07-27 15:04:42 -07:00
anthony
0369fa3101 VCP : for each network, there will be a seperate config file deriving from this one 2012-07-27 15:04:42 -07:00
anthony
59937838e5 VPC : create/destroy static nat 2012-07-27 15:04:42 -07:00
anthony
ae579c4cdd VPC : create/destroy static route 2012-07-27 15:04:42 -07:00
anthony
0d52ac205b VPC : create/destroy source NAT 2012-07-27 15:04:42 -07:00
anthony
9910176d76 VPC : create/destroy private Gateway 2012-07-27 15:04:41 -07:00
anthony
f7da1772b0 VPC : portforwarding script 2012-07-27 15:04:41 -07:00
anthony
952da87e19 VPC : basic network usage per guest network 2012-07-27 15:04:41 -07:00
anthony
744bfdce5f VPC : vpc loadbalancer script 2012-07-27 15:04:41 -07:00
anthony
7dc4231ea6 VPC : vpc ip assocate fix 2012-07-27 15:04:41 -07:00
anthony
165a21c62a VPC : vpc_acl.sh is for VPC access control list 2012-07-27 15:04:40 -07:00
anthony
05dc92c02c VPC : remove all rules for a plugged nic device 2012-07-27 15:04:40 -07:00
anthony
599dcb49d5 VPC : add vpc_func.sh 2012-07-27 15:04:40 -07:00
anthony
5edb646be2 VPC : ipassoc.sh typo fix 2012-07-27 15:04:40 -07:00