Sheng Yang
fd03091c81
Revert "CLOUDSTACK-7821: Fix OSX cannot connect to VPN due to wrongly declaim ENCAPSULATION_MODE_UDP_TRANSPORT_RFC"
...
This reverts commit e1c788ca3c69a8c8c2041c7b106f76fa49332888.
This breaks Windows 7 client.
2014-11-14 11:44:53 -08:00
Joris van Lieshout
1e1cc11d9a
Logrotate is called from crontab. Debian crontab does not include everything in it's path. Therefore reference to these bins need to be absoluut.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-11-09 13:13:56 +01:00
Rohit Yadav
a014617085
CLOUDSTACK-7855: NIC3 should set MTU and not NIC1 for storage network nic
...
The fix also persists the configuration in /etc/network/interfaces
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2014-11-06 18:21:32 +05:30
Sheng Yang
4b3217fe57
CLOUDSTACK-7841: Gracefully reload haproxy config
...
The old way would disconnect all the existing connections through haproxy when
reload the config.
This new way would ensure that all the existing connections would still alive
after reload the config.
2014-11-04 16:40:47 -08:00
Rohit Yadav
88acc9bd53
systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVE20143566)
...
Just prefer TLS over SSL in apache configuration in systemvm
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2014-11-04 01:43:55 +05:30
Sheng Yang
03a43159d8
CLOUDSTACK-7821: Fix OSX cannot connect to VPN due to wrongly declaim ENCAPSULATION_MODE_UDP_TRANSPORT_RFC
...
OSX always declaims it's behind NAT no matter it's true or not, thus result in
confusion of openswan.
Add parameter "forceencaps=yes" to openswan to make sure non NAT VPN connection
from OSX can pass through.
2014-10-30 17:23:34 -07:00
Edison Su
9d5b7b73a2
MTU should be put on storage network: eth3, instead of eth1 Reviewed-by: Frank
2014-10-30 02:45:46 -07:00
Daan Hoogland
1de0cb7094
restore barematel work after merge
2014-10-17 10:24:01 +02:00
Daan Hoogland
148efbb73f
Merge remote-tracking branch 'origin/4.5' into merge-master
...
Conflicts:
engine/schema/src/com/cloud/upgrade/dao/Upgrade441to450.java
plugins/hypervisors/baremetal/src/com/cloud/baremetal/manager/BaremetalManagerImpl.java
plugins/hypervisors/baremetal/src/com/cloud/baremetal/manager/BaremetalVlanManager.java
plugins/hypervisors/baremetal/src/com/cloud/baremetal/manager/BaremetalVlanManagerImpl.java
plugins/hypervisors/baremetal/src/com/cloud/baremetal/networkservice/BaremetalKickStartServiceImpl.java
plugins/hypervisors/vmware/src/com/cloud/storage/resource/VmwareStorageProcessor.java
server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
server/src/com/cloud/network/router/VpcVirtualNetworkApplianceManagerImpl.java
setup/db/db/schema-441to450.sql
test/integration/component/test_deploy_vgpu_vm.py
tools/marvin/marvin/config/test_data.py
2014-10-16 12:29:37 +02:00
Saksham Srivastava
b29d075108
CLOUDSTACK-7657: cloud.log is being rotated by multiple rotation policies on SSVM and CPVM
...
(cherry picked from commit 3e02bfa74fc7ec0f26ad53fcc528e3f3b5e8f742)
2014-10-13 00:13:25 -04:00
Saksham Srivastava
cd3df842f2
CLOUDSTACK-7631: Log rotate on VR may fail as /etc/init.d/rsyslog does not anymore support reload option on debian wheezy
...
(cherry picked from commit 3a8c450890299ba02bcc245d962b87da0306b2e1)
2014-10-12 23:55:42 -04:00
David Nalley
ac48aa8e0c
cleaning up some from a revert
2014-10-12 23:30:04 -04:00
Frank Zhang
6dd3a91864
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
fix baremetal-vr.py license header
2014-10-06 16:07:51 -07:00
Frank Zhang
01dada100a
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
2014-10-06 16:03:19 -07:00
Saksham Srivastava
3e02bfa74f
CLOUDSTACK-7657: cloud.log is being rotated by multiple rotation policies on SSVM and CPVM
2014-10-01 13:39:09 +05:30
Saksham Srivastava
3a8c450890
CLOUDSTACK-7631: Log rotate on VR may fail as /etc/init.d/rsyslog does not anymore support reload option on debian wheezy
2014-09-25 15:59:08 +05:30
Frank Zhang
3e6817c878
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
add missing license header to systemvm/patches/debian/config/etc/rc.local
2014-09-22 14:44:14 -07:00
Frank Zhang
6155d3ecaa
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
2014-09-22 13:57:32 -07:00
Frank Zhang
8b89494a35
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
2014-09-18 16:54:37 -07:00
Daan Hoogland
dec9133dcd
CLOUDSTACK-7184: xenheartbeat gets passed timeout and interval
...
(cherry picked from commit 4d065b9a3a336d59902c266202c1094509c007d2)
Conflicts:
plugins/hypervisors/xenserver/src/com/cloud/hypervisor/xenserver/discoverer/XcpServerDiscoverer.java
plugins/hypervisors/xenserver/src/com/cloud/hypervisor/xenserver/resource/CitrixResourceBase.java
server/src/com/cloud/configuration/Config.java
server/src/com/cloud/configuration/ConfigurationManagerImpl.java
server/src/com/cloud/resource/DiscovererBase.java
2014-09-18 12:51:10 +02:00
Bharat Kumar
29911dd2e1
CLOUDSTACK-7376 passwd_server attempts to start but terminates with the exit code 137
...
Signed-off-by: Sheng Yang <sheng.yang@citrix.com>
2014-09-17 09:28:44 -07:00
Jayapal
3cb6d4a4df
CLOUDSTACK-7544: Fixed ip addr del issues in ipassoc
2014-09-15 14:54:13 +05:30
Jayapal
b4f03a1339
CLOUDSTACK-7517: loading ftp modules in VR
2014-09-10 14:10:14 +05:30
Fred Clift
355eb72c7d
make virtual router /latest/.htaccess file be static - no longer dynamically generate it, remove code that managed the file previously
...
Signed-off-by: Sebastien Goasguen <runseb@gmail.com>
2014-09-04 04:22:27 -04:00
Wido den Hollander
1499972804
CLOUDSTACK-7405: Make the trailing slash conditional for meta-data requests
...
This should fix the cloud-init issues described in this issue.
2014-08-25 14:13:09 +02:00
Joris van Lieshout
c90bf1231f
sysctl improvements. 1. ip_nonlocal_bind for smooth transition in case of a keepalived failover. 2. panic settings so that a vm dies in a way that ACS understands it's down. 3. also up the nf_conntrack limits.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 45deade1df171d9ae5562111bf011ee913ff9dc0)
Conflicts:
systemvm/patches/debian/config/etc/sysctl.conf
(cherry picked from commit c4d1bf7f2426bfddd96ab9415fe793647e67a5a4)
2014-08-14 14:11:33 +02:00
Sheng Yang
2ff7b846fd
CLOUDSTACK-7185: Change Apache2 log rotation policy to avoid memory leak
2014-07-25 14:02:44 -07:00
Hugo Trippaers
1ad1883b74
Add virtualbox support to cloud-early-config so we can use virtualbox for testing
2014-07-14 15:34:14 +02:00
Jayapal
e0d4af5062
CLOUDSTACK-7092: Disabled icmp redirects in VR
2014-07-10 15:17:50 +05:30
Jayapal
2f1b40d2e8
CLOUDSTACK-7028: Fixed adding route for additional public nic on fail over
2014-07-01 15:16:27 +05:30
Jayapal
d5e686f2ec
CLOUDSTACK-6997: Increase proc ip_conntrack_max
2014-07-01 10:29:46 +05:30
Sheng Yang
563934c989
CLOUDSTACK-3540: Fix edithosts.sh on matching tag
2014-06-27 17:18:38 -07:00
Sheng Yang
75c9a20c77
CLOUDSTACK-6989: Add 3 strikes rule for RvR freezing detection
...
Sometime in VR ntpd would move time backward to keep sync with NTP server, which
can result in false alarm of keepalived monitering process.
This patch adds 3 strikes for keepalived process dead detection to avoid falsely
shutdown keepalived process due to time adjustment for only once.
2014-06-24 17:04:58 -07:00
Sheng Yang
c181485ae5
CLOUDSTACK-6908: Enable IPv6 in sysctl when only necessary
...
This new way would only enable IPv6 when VR is created in IPv6 shared network.
Otherwise IPv6 sysctl options remain disable.
2014-06-13 11:08:32 -07:00
Joris van Lieshout
66816827cb
Cosmetic fixed. three in total. 1. Only run hv_kvp_daemon if it exists. 2. add the -f argument to the rm to make is silent if it doesn't exist. 3. by using log_action_msg instead of log_action_begin_msg the screen output looks way better.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-12 14:56:11 +02:00
Daan Hoogland
b85dd956f8
rats
2014-06-10 16:21:06 +02:00
Joris van Lieshout
2e83baaca2
xenstore-utils on debian wheezy does not have /usr/sbin/xenstore so these commands file. It does have xenstore-write and xenstore-rm so by adding a - this is fixed easily.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-10 16:06:58 +02:00
Joris van Lieshout
c54ce3cafb
If for some reason dnsmasq.log does not exist anymore logrotate will create it with nobody as owner. This will prevent dnsmasq deamon from logging to that file.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-10 15:51:03 +02:00
Joris van Lieshout
11f532bbec
blacklist pcspkr as cosmetic improvement. aesni_intel blacklisting was not working because the include only works if the file ends with .conf.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-10 15:45:15 +02:00
Saurav Lahiri
96b1c6bf3c
CLOUDSTACK-6328: run.sh check if an existing java process is running, before spawining new ones
...
Signed-off-by: Jayapal <jayapal@apache.org>
2014-05-27 15:56:25 +05:30
Joris van Lieshout
2b325afb45
A slightly more reliable way of extracting the device name. Thanks John.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-05-20 12:29:41 +02:00
Jayapal
6052a181dd
CLOUDSTACK-6714: monitor script echo service command is added with quotes
2014-05-20 14:11:19 +05:30
Joris van Lieshout
2ebeec4334
releasing dhcp leases on vpcs failes because the network tier of the tennant aren't behinbd eth0. Here we make interface selection dynamic.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-05-14 16:11:03 +02:00
Jayapal
d4f167032b
Fixed vpc private gateway backend issues
2014-05-07 16:33:46 +05:30
Saurav Lahiri
42d48fe9ab
cloudstack-6258: Log file will be set to cloud.out only if CLOUD_DEBUG is enabled
2014-04-25 05:50:57 +05:30
Sheng Yang
74fe010db3
CLOUDSTACK-6434: Make RvR advert_int configurable
...
In some network environment, 1*3 seconds by default make RvR setup too
sensitive. A configurable parameter would be better for fitting different
network environments.
2014-04-16 20:13:16 -07:00
Sheng Yang
a554ebdf75
CLOUDSTACK-6432: Blocking DHCP server to service DNS outside network
...
This would cover only DHCP only network since in basic and shared network, the
private IP used by VR and network may expose to outside.
2014-04-16 19:13:23 -07:00
Marcus Sorensen
2a0236931a
Ensure that min_free_kbytes in secstorage vm is set such that heavy nfs load will not cause page allocation failures
2014-04-14 00:00:47 -06:00
Harikrishna Patnala
ecc71518a9
CLOUDSTACK-6253: Optimizing VR alerts getting algorithm In addition to this a new configuration parameter is added router.alerts.check.interval defaulted to 30minutes to check for alerts in Virtual Router
2014-04-09 18:12:20 +05:30
Marcus Sorensen
6b7f91d770
add conntrackd logrotate for systemvms, dont start conntrackd on logrotate if it isnt running
2014-04-05 00:30:28 -06:00