74 Commits

Author SHA1 Message Date
alena
f4f51f0451 Revert "bug 10812: modifying dhcp option 119 on domR as per zone config"
This reverts commit 606ec843475911680adb743d7975bf7d584ab240.
2011-08-01 13:00:53 -07:00
Abhinandan Prateek
826a3d6ad0 bug 10812: modifying dhcp option 119 on domR as per zone config
status 10812: resolved fixed.
2011-08-01 14:44:31 +05:30
Edison Su
a3613f2762 It breaks port forwording.
Revert "bug 10329: changed - t :"

This reverts commit 16779afa0233e6ff33cdfca12611e6a43bcd0b42.
2011-07-07 18:30:42 -07:00
Abhinandan Prateek
73b79deb99 bug 10329: changed - t :
status 10329: resolved fixed
2011-07-07 11:52:04 +05:30
Edison Su
28f413f223 fix meta issue for vmware: create a blank meta data file, even meta data is empty 2011-07-05 16:19:23 -07:00
Kelven Yang
5f7f885c6a bug 10214: merge fix from 2.2.4 branch 2011-06-10 12:08:22 -07:00
Sheng Yang
3106df1c72 bug 9495: Fix DomR logging error on boot
status: resolved fixed
2011-06-09 15:10:06 -07:00
anthony
37e6ded80c bug 10023: only set ip route for internal DNS
status 10023: resolved fixed
2011-05-25 17:39:20 -07:00
Edison Su
a13be45f7b bug 8350:
haproxy tunning:
0. Test case:
   httpd running in 5 user VMs, all of them created on a xenserver host(16 core, 42G memroy, 10G network)
   domR running on an anther host with same hardware configuration.
   test application, ab, running on anther host behind an anther seperate switch
1.haproxy is not a memory intensive app. I can get 4625.96 connection/s with 1G memory. While it's really a CPU intensive app, domR always uses around 100% CPU on the host.
2.By default, you can't get better connection/s rate, because ip_conntrack_max and tw_bucket are too small, you will see the error in domR like:
   "TCP: time wait bucket table overflow" or "nf_conntrack: table full, dropping packet".
  So I increase these numbers to 1000000 from 65536, then I can steadly get around 4600 connection/s when memory is >= 1G.

  Here is the connection per second, tested by "ab -n 1000000 -c 100 http://192.168.170.152:880/test.html"
  domR memory   conn/s
  128M:         3545.55
  256M:         4081.38
  512M:         4318.18
  1G:           4625.96
  7G:           4745.53

3. If I enable notrack for both connections between domr/user vm, and public network, that tell iptable in domR don't track the connection during my test, then I can get better number, around
5800 connections/s. But we can't enable notrack, as iptables is used to track throughput in domR.

4. In a word, with this commit, the connection rate of haproxy can be increased from 1000-2000/s to 4700/s when domR's memory is larger than 1G.

5. How many CPU need to assign to domR to get this number?  Haven't finished yet, as CPU is shared by all the VMs on the host, if other VMs are busy, it will impact the performance of haproxy.
2011-05-21 21:05:28 -04:00
Abhinandan Prateek
6707048fd5 bug 9869: if several port forwarding rules are deleted in quick succession it makes the router iptables inconsistent
status 9869: resolved fixed
2011-05-16 13:49:24 +05:30
Chiradeep Vittal
8ac4605a0f bug 9771: also for vmware 2011-05-12 15:07:16 -07:00
Abhinandan Prateek
d8b7f5c19b bug 8115: Source IP filtering in Virtual Router
status 8115: resolved fixed

Changes to the router firewall.sh patch to add cidrs
2011-05-12 15:20:00 +05:30
Chiradeep Vittal
515981a436 bug 9544: deal with same ports forwarded from different public ips
status 9544: resolved fixed
2011-05-05 16:49:49 -07:00
Frank
3b75abbde7 Fix DomR reply to windows's periodical DNS requirement 2011-04-21 11:23:23 -07:00
Frank
92155522f2 Add license header to files 2011-04-14 11:23:14 -07:00
Kelven Yang
253b8837b4 Fix a problem in userdata.sh to set permissions in .htaccess file, extra quot cause apache internal server error 2011-04-12 14:37:09 -07:00
Chiradeep Vittal
1e6024b83f bug 8959: 1. rp_filter prevents connections that span eth2 and eth3 because of default route
2. delete before add of default nat rules
status 8959: resolved fixed
2011-04-04 18:59:40 -07:00
Edison Su
8b3e22e84c enable serial console for system vm, to make debug easier 2011-03-31 19:11:09 -04:00
Edison Su
9854db7dcd bug 8459: acpiphp and pci_hotplug modules need to be auto loaded in domr
status 8459: resolved fixed
2011-03-31 19:11:06 -04:00
Murali Reddy
1b251a5fc8 Bug 4061: support for Microsoft Hyper-V changes- part 1 2011-03-30 18:48:51 +05:30
Kelven Yang
342648244d bug 8994: fix issues in userdata.py to support user_data in vmware 2011-03-23 13:34:40 -07:00
alena
ec96a9afea Reverted Anthony's checkin for systemVmPatch which he added by mistake. 2011-03-18 18:12:53 -07:00
anthony
2b188b37dd fixed start management server 2011-03-18 16:43:51 -07:00
Chiradeep Vittal
20045b3664 bug 8892: accept nameserver configurations on non-default networks. this is because if dnsmasq sends no nameservers, dhclient deletes all entries from resolv.conf. the MS will send the eth0 ip of the dhcp server / virtual router on the default network as the nameserver on the non-default networks 2011-03-07 17:04:45 -08:00
Chiradeep Vittal
a65dd9d9eb Ensure password server is started inside dhcp server system vms 2011-03-02 17:38:38 -08:00
Edison Su
88f3d04eb2 fix dns issue that in direct network mode, user vm can not get domr ip as dns server, then user vm can resolve its hostname, the consequence is that "starting sendmail" is tooo slow 2011-02-15 16:29:57 -05:00
Chiradeep Vittal
10dc1c75d8 bug 8370: pass in original params when calling delete during add
status 8370: resolved fixed
2011-02-08 16:41:27 -08:00
Edison Su
99c6d823b0 fix setting port forword rules 2011-02-08 14:50:58 -05:00
Chiradeep Vittal
711c4eeaae bug 8209,8370,8459: cleanup scripting 2011-02-08 12:10:07 -08:00
alena
54236677f3 bug 8419: changed domR password reset script to work with 2.1.x and 2.2 password scripts on userVm side
status 8419: resolved fixed
2011-02-07 11:04:55 -08:00
alena
ff281af035 bug 8253: get_password_from_domr is a part of source code now. It should be located under /usr/bin/ directory on the Management server once cloudstack software is installed
status 8253: resolved fixed
2011-02-01 17:40:00 -08:00
Chiradeep Vittal
757bd0b5e4 bug 8254: point save password to right location 2011-01-28 16:01:52 -08:00
Chiradeep Vittal
42f6e21d77 Detect hypervisor more reliably 2011-01-26 15:13:43 -08:00
Kelven Yang
8c77158bb9 fix domR setup issue when interface number is less than 3 2011-01-21 17:42:12 -08:00
Kelven Yang
6fe42d144f remove escapes in awk scripts when it is running inside domR 2011-01-13 14:28:06 -08:00
Chiradeep Vittal
ffdbab065b bug 7141: rotate standard logs more aggressively 2011-01-13 12:36:38 -08:00
Chiradeep Vittal
1327d6f914 bug 7141: make ppp(vpn) less verbose 2011-01-13 12:36:38 -08:00
Chiradeep Vittal
a724d587bf bug 7141: make dnsmasq less verbose 2011-01-13 12:36:38 -08:00
Chiradeep Vittal
8032b2d62a bug 7141: limit apache logs to 5 days 2011-01-13 12:36:38 -08:00
Chiradeep Vittal
17451e1dae bug 7141: cleanup cloudstack logs older than 7 days 2011-01-13 12:36:38 -08:00
Kelven Yang
55f28c3a2b Network Usage for vmware 2011-01-13 11:24:15 -08:00
Chiradeep Vittal
1934e79900 bug 7141: rotate logs 2011-01-12 17:31:39 -08:00
Chiradeep Vittal
6ecbbe0b37 Add logrotate for dnsmasq and haproxy 2011-01-12 17:31:39 -08:00
Chiradeep Vittal
ca2d32ad44 initial debian config for logging 2011-01-12 17:31:38 -08:00
nit
6850a0ae9a bug 7519 : Opening eth2 for public traffic on ssvm. Implementing the ip firewall for zone to zone copy in the Apache layer. Disabling directory listing for extract server root. 2011-01-11 20:05:35 +05:30
Edison Su
d33d61b1b4 fix default gw one more time... 2011-01-07 08:40:22 -05:00
Edison Su
a0ce28b769 one more fix for router gw, and rhel build 2011-01-07 08:27:24 -05:00
Edison Su
4a409200dc fix build for rhel6 and fix router default gw 2011-01-07 08:02:15 -05:00
Chiradeep Vittal
dd3f184d0e bug 7790: do not set default route in some cases 2010-12-30 18:27:18 -08:00
Chiradeep Vittal
c9c08a3ff8 bug 7790: do not set default route in some cases 2010-12-30 18:25:39 -08:00