169 Commits

Author SHA1 Message Date
alena
56d5054e39 Revert "bug 10561: Allowing ICMP traffic through static NAT"
This reverts commit 5e74e24bb359456967866cb2c6cc0f6f73570f97.

Conflicts:

	server/src/com/cloud/network/rules/RulesManagerImpl.java
2011-08-09 15:51:57 -07:00
Sheng Yang
071a67dcb8 Change router to FAULT state if anything goes wrong on fail-over 2011-08-09 11:09:44 -07:00
Sheng Yang
980c4b9120 Change router to FAULT state if anything goes wrong on fail-over 2011-08-09 11:09:20 -07:00
Naredula Janardhana Reddy
536db8a1de loadbalancer.sh changes : 1) Removed source cidrs from iptable script,2) added sudo before iptables 2011-08-09 18:34:16 +05:30
Naredula Janardhana Reddy
ad29587e43 bug 10800,10557 :
Cahnges:
        1) putting back the changes(bug 10800 and 10557) that had been reverted during merging of Elb/nectarine.
        2) 10800 Upgrade from previous release also added: Upgrade from Previous release will leave iptable rules in the INPUT ipchain, this is fixed.
2011-08-09 16:53:19 +05:30
Chiradeep Vittal
179368ea32 get lb working on advanced mode again 2011-08-09 01:02:58 -07:00
Naredula Janardhana Reddy
12cadca538 Revert "bug 10561: Allowing ICMP traffic through static NAT"
This reverts commit 5e74e24bb359456967866cb2c6cc0f6f73570f97.
2011-08-08 17:59:05 -07:00
Chiradeep Vittal
8277584b8a merge ELB / nectarine branch 2011-08-08 15:20:56 -07:00
Sheng Yang
9985df928b Try to workaround "ip route add" fail in redundant router
It's probably due to the network is not ready, so wait some time for it.
2011-08-05 16:40:57 -07:00
Sheng Yang
49709d716a Try to workaround "ip route add" fail in redundant router
It's probably due to the network is not ready, so wait some time for it.
2011-08-05 16:40:35 -07:00
Chiradeep Vittal
0c408d8da5 handle elb vm restart 2011-08-04 22:05:48 -07:00
Naredula Janardhana Reddy
46427fef91 bug 10561: Allowing ICMP traffic through static NAT 2011-08-03 21:15:02 +05:30
Naredula Janardhana Reddy
954d8673c7 bug 10561: Allowing ICMP traffic through static NAT 2011-08-03 18:13:09 +05:30
Naredula Janardhana Reddy
15d57cef9f bug 10557: implemented the TODO - opening the stats port using iptable 2011-07-28 17:28:20 +05:30
Naredula Janardhana Reddy
d79633b545 bug 10800: iptable rable restore upon failure is changed 2011-07-28 17:27:44 +05:30
Naredula Janardhana Reddy
2fc7be14de bug 10557: implemented the TODO - opening the stats port using iptable 2011-07-28 17:24:10 +05:30
Naredula Janardhana Reddy
e19c51e68c bug 10800: iptable rable restore upon failure is changed 2011-07-28 13:43:07 +05:30
Chiradeep Vittal
f27116c50e log haproxy changes to system log and auth 2011-07-27 12:00:08 -07:00
Chiradeep Vittal
07c2f6cdc7 differentiate between dhcp server and elb vm 2011-07-27 12:00:07 -07:00
Naredula Janardhana Reddy
296d0af503 bug 10800: Load balancer - deleted settings from UI not removed from the Iptables 2011-07-27 14:57:49 +05:30
Kelven Yang
9761661989 bug 10855: fix a typo when merging git conflicts 2011-07-26 10:50:33 -07:00
Kelven Yang
db29f7792c bug 10855: the issue is caused by expanding content that has space inside at sub-shell, use back quote substitution to enforce the correct shell macro expansion 2011-07-26 10:50:10 -07:00
Kelven Yang
3e8fb4add2 bug 10855: fix a typo when merging git conflicts 2011-07-26 10:48:54 -07:00
Kelven Yang
db09c6ae47 bug 10855: the issue is caused by expanding content that has space inside at sub-shell, use back quote substitution to enforce the correct shell macro expansion 2011-07-26 10:41:26 -07:00
Naredula Janardhana Reddy
67dc2ec915 bug 10800: Load balancer - deleted settings from UI not removed from the Iptables 2011-07-26 15:28:01 +05:30
Edison Su
30942b77a3 fix meta data returning 404 issue on vmware 2011-07-25 21:20:09 -07:00
Edison Su
3a17b37808 fix meta data returning 404 issue on vmware 2011-07-25 21:17:42 -07:00
Abhinandan Prateek
dff712f2a9 bug 10731: sending source cidrs to the required router element, on domR allowing these source cidrs thru iptables
status 10731: resolved fixed
2011-07-21 13:48:42 +05:30
Abhinandan Prateek
de34d6089d bug 10731: sending source cidrs to the required router element, on domR allowing these source cidrs thru iptables
status 10731: resolved fixed
2011-07-21 13:40:06 +05:30
Sheng Yang
4bc8686513 bug 10429: Backport redundant virtual router
Part 1

This backport contained:

commit 52317c718c25111c2535657139b541db0c9d1e1f
    bug 9154: Initial check in for enabling redundant virtual router

commit 54199112055d754371bfb141168fb5538bf6d6ea
    Add host verification for CheckRouterCommand

commit cef978a228c90056ead9be10cbc4de74c2b8de76
    Fix CheckRouterAnswer's isMaster report

commit 4072f0a6991ac3b63601a1764fbe14188965f62f
    Some build fixes and code refactoring for redundant router

commit 4d3350b7cd8ee2706a9bace4437fc194e36c8dd5
    Redundant Router: Fix OVS

commit 6a228830e7c46d819fa0c3317e159e041337e887
    Fix findByNetwork()/findByNetworkAndPod()'s return

commit c627777b3d5bdbcd60db4032cebd349a5b1ecd83
    Redundant Router: Fix isVmAlive()

commit e1275d2514adc41f8744f5107d4069c38be195f1
    Only issue CheckRouterCommand to redundant routers

And all modification to the scripts till
commit 4e3942462ed3fde3a3d7011e95839e2128fba514
logging changes

in the master branch.
2011-07-18 18:29:56 -07:00
Edison Su
a622b48d32 It breaks port forwording.
Revert "bug 10329: changed - t :"

This reverts commit 16779afa0233e6ff33cdfca12611e6a43bcd0b42.
2011-07-08 13:52:49 -07:00
Edison Su
399c1addb9 fix meta issue for vmware: create a blank meta data file, even meta data is empty 2011-07-08 13:51:30 -07:00
Edison Su
a3613f2762 It breaks port forwording.
Revert "bug 10329: changed - t :"

This reverts commit 16779afa0233e6ff33cdfca12611e6a43bcd0b42.
2011-07-07 18:30:42 -07:00
Abhinandan Prateek
73b79deb99 bug 10329: changed - t :
status 10329: resolved fixed
2011-07-07 11:52:04 +05:30
Abhinandan Prateek
6b7279598e bug 10329: changing - to : in port range
status 10329: resolved fixed
2011-07-07 11:46:17 +05:30
Edison Su
28f413f223 fix meta issue for vmware: create a blank meta data file, even meta data is empty 2011-07-05 16:19:23 -07:00
Sheng Yang
dc46ffb0c7 bug 9154: various fix for scripts 2011-06-22 15:30:39 -07:00
Sheng Yang
bbb0f41a92 Fix ipassoc.sh with new added nic
The script should bring the new created interface up.
2011-06-20 17:21:32 -07:00
Sheng Yang
d71ed00148 bug 9154: Add more log in keepalived.log 2011-06-15 15:39:48 -07:00
Kelven Yang
dae72c26b0 bug 10093: always create .htaccess in DomR 2011-06-08 16:56:41 -07:00
Sheng Yang
5db86e6c20 Fix CheckRouterAnswer's isMaster report
If we got invalid/unsuccessed answer from CheckRouterAnswer, set master to
false.

Also add missed scripts.
2011-06-07 14:47:46 -07:00
Sheng Yang
819e67b189 Add file lock for keepalived scripts
They are not blocked callings.
2011-06-07 14:47:46 -07:00
Sheng Yang
2973ab5ef5 Enable multiply public ips for redundant router
Also solve duplicate mac issue.
2011-06-07 14:47:46 -07:00
Sheng Yang
62ac899091 bug 9154: Initial check in for enabling redundant virtual router
This patch enable redundant virtual routers.

1. To enable this feature, db need to be updated using follow SQL by now(we
would get a UI way later):

UPDATE network_offerings SET redundant_router=1 WHERE guest_type="Virtual" AND
system_only=0;

2. System would try to start up two routers at different hosts. But if there is
only one host in the zone, system would start up two routers on it.

3. The failover part is using keepalived, and connection tracking part is using
conntrackd. There would be one master router and one backup router. The status
of router(master or backup) can be query from the database table domain_router
now. Management server would update the status every 30s by default.

4. The routers for the same zone would use same external NIC(same ip and mac).
The script used for fail-over would ensure only one external NIC present in the
network at any time.

5. Currently management server don't got the ability to stop one of router is
both of them reported as master. The feature is in the todo list.

After two routers start up, disconnect anyone of them, the guest network
shouldn't be affected, and established connection(http, ssh, etc.) should still
works. The fail-over on gateway part should be 3~4 seconds.

Currently the patch works with KVM. Would deal with vmware and XenServer soon.
2011-06-07 14:47:45 -07:00
Abhinandan Prateek
6707048fd5 bug 9869: if several port forwarding rules are deleted in quick succession it makes the router iptables inconsistent
status 9869: resolved fixed
2011-05-16 13:49:24 +05:30
Chiradeep Vittal
8ac4605a0f bug 9771: also for vmware 2011-05-12 15:07:16 -07:00
Abhinandan Prateek
d8b7f5c19b bug 8115: Source IP filtering in Virtual Router
status 8115: resolved fixed

Changes to the router firewall.sh patch to add cidrs
2011-05-12 15:20:00 +05:30
Chiradeep Vittal
515981a436 bug 9544: deal with same ports forwarded from different public ips
status 9544: resolved fixed
2011-05-05 16:49:49 -07:00
Frank
92155522f2 Add license header to files 2011-04-14 11:23:14 -07:00
Kelven Yang
253b8837b4 Fix a problem in userdata.sh to set permissions in .htaccess file, extra quot cause apache internal server error 2011-04-12 14:37:09 -07:00