Naredula Janardhana Reddy
854f81962f
bug 10617: Added Egress rules to Security groups.
...
Description :
API's:
- Two new api's authorizeSecurityGroupEgress,revokeSecurityGroupEgressCmd are added. These two API's are similer to ingress rule API's.
- authorizeSecurityGroupEgress :Authorizes a particular egress rule for this security group . Usageof API is very similer to that of authorizeSecurityGroupIngress except that instead of source cidr there will be destination cidr. By default like ingress, all the outgoing flows are blocked.
- revokeSecurityGroupEgress : It is similer to revokeSecurityGroupIngress api, It removes the egress rule.
- listSecurityGroup API's response changed. It include's egress list apart from the existing ingress rules in the output of the API.
Hypervisors :
- It is implemented in Xen and KVM.
Pending Tasks : Blocking using destination security groups.
Previous commits: c9fda641673df7701f44963ef27e1d488f121219 , 24e4e44b8f0712a37147a3777833de3f9e24829e
2011-08-30 16:28:35 +05:30
Edison Su
c3174664de
after vm reboot, change the security group if needed
2011-07-29 15:28:16 -07:00
Edison Su
5724a016c6
fix security group clean up on centos 5
2011-07-26 16:57:49 -07:00
Edison Su
1e944a2d86
cleanup ebtables rules if vm is manually deleted
2011-06-20 10:32:05 -04:00
Edison Su
ad5162ef86
fix ebtable cleanup issue: on ubuntu, it's not got deleted if vm is stopped
2011-06-16 19:26:24 -04:00
Edison Su
49550aff44
fix ebtable, which should only add a new DNAT rule for dhcp server
2011-06-10 11:39:43 -04:00
Edison Su
8312f1314b
remove augtools
2011-05-26 23:19:53 -04:00
Edison Su
29c510de28
need to insert iptable rules into FORWARD chain instead of append, as on rhel6, there is a reject rule added at the end of FORWARD
2011-05-13 16:05:20 -04:00
Edison Su
58e034fa41
add License header back
2011-05-03 11:47:10 -04:00
Chiradeep Vittal
303e2a7481
Start of zonesfeature / mycloud/cloudkit
2011-05-03 10:40:17 -07:00
Frank
92155522f2
Add license header to files
2011-04-14 11:23:14 -07:00
Edison Su
159f52c2ff
bug 9242: add vlan dependence for ubuntu, and set name type to DEV_PLUS_VID_NO_PAD, before creating vlan
...
status 9242: resolved fixed
2011-03-31 19:11:15 -04:00
Edison Su
9ad5139fda
fix delete security group rule
2011-03-03 13:44:48 -05:00
Edison Su
d7b7d6bc26
bug 8771: multitenancy on same host in security group
...
status 8711: resolved fixed
2011-03-01 16:38:06 -05:00
Edison Su
a7c6b9f28e
fix security group rules
2011-02-28 12:16:40 -05:00
Edison Su
0e90ede56a
don't break basic zone mode
2011-02-28 12:16:40 -05:00
Edison Su
2705adb3b1
security group is per bridge
2011-02-28 12:16:40 -05:00
Edison Su
adbd20ca5a
bug 8655: add security group for direct tagged network
2011-02-23 15:53:14 -05:00
Edison Su
0c8b86fc56
add multiple nics support for security group
2011-02-23 15:52:04 -05:00
Edison Su
37cb0ae2c9
add security group for direct tagged vlan
2011-02-23 15:52:04 -05:00
Edison Su
4b355ca301
bug 8118: add security group back
...
status 8118: resolved fixed
2011-01-22 04:04:52 -05:00
edison
3a143577b9
bug 7659: fix the race condition that agent inside systemvm connecting to mgt server at the head of startcommand returning to mgt server, then got a NPE. and fix bugs in security group of KVM
...
status 7659: resolved fixed
2010-12-28 15:51:28 -08:00
edison
eebb1021c1
fix security bug for kvm
2010-12-20 16:58:02 -08:00
edison
19431d31d3
add security group support for kvm
2010-12-16 18:02:41 -08:00
Anthony Xu
f62d9ae9c9
remove unused files
2010-11-18 14:43:20 -08:00
edison
6944979f94
bug 7142: fix the race condition that multiple create vlan requests coming from mgt svr
...
status 7142: resolved fixed
2010-11-10 13:36:50 -08:00
Manuel Amador (Rudd-O)
14ae76781e
Committing Kris' big merge
2010-08-11 16:02:57 -07:00
Manuel Amador (Rudd-O)
ac730ec496
Branch 2.1.refactor committed
2010-08-11 09:13:42 -07:00
Manuel Amador (Rudd-O)
05c020e1f6
Source code committed
2010-08-11 09:13:29 -07:00
