Edison Su
cefc5cbff3
bug CS-16172
...
Reviewed-by: chiradeep
2012-08-24 16:13:29 -07:00
anthony
2ea876dfd3
in basic zone, allow dhcp traffic by default
2012-08-15 13:11:58 -07:00
Alena Prokharchyk
b61468d65c
Merge branch 'master' into vpc
...
Conflicts:
plugins/hypervisors/kvm/src/com/cloud/hypervisor/kvm/resource/LibvirtComputingResource.java
2012-08-11 18:27:18 -07:00
Edison Su
263216caa5
Adds CLVM as an option for primary storage. It copies most of the RBD bits, in most cases simply adding an 'else if' or similar. In the managesnapshot.sh we add the ability to manipulate snapshots for the CLVM volumes, as well as a few minor fixes like adjusting the usage for the -b option to reflect that it accepts four arguments (note that it already accepted four args, it just wasn't reflected in the usage).
...
RB: https://reviews.apache.org/r/6470/
Send-by: shadowsor@gmail.com
2012-08-10 13:33:06 -07:00
Alena Prokharchyk
5a72044dc7
Merge branch 'master' into vpc
2012-08-03 14:30:54 -07:00
Chip Childers
09bdd3b6c3
License header updates for the scripts folder.
2012-08-03 09:38:28 -04:00
Alena Prokharchyk
7706a9c32f
Merge branch 'master' into vpc
...
Conflicts:
server/src/com/cloud/network/NetworkManagerImpl.java
server/src/com/cloud/network/rules/RulesManagerImpl.java
2012-07-31 13:37:28 -07:00
Hugo Trippaers
10e4a5ae48
Disable IPv6 in XenServer if it is enabled. The cloud support pack apparently enables IPv6 support at the moment, but wihtout proper security.
2012-07-30 17:36:29 +02:00
Alena Prokharchyk
a39fd61249
Merge branch 'master' into vpc
...
Conflicts:
server/src/com/cloud/network/rules/RulesManagerImpl.java
server/src/com/cloud/vm/UserVmManagerImpl.java
server/src/com/cloud/vm/VirtualMachineGuru.java
2012-07-27 13:47:46 -07:00
Edison Su
f497c7c031
Bug: HA takes a lot of time to migrate VMs (trigger HA) to another KVM
...
host if there are multiple storage pools in a cluster.
The issue is as follows:
1. When CloudStack detects that a host is not responding to ping
requests it'll send a fence command for this host to another host in the
cluster.
2. The agent takes a long time to respond to this check if the storage
is fenced. This is because the agent checks if the first host is writing
to its heartbeat file on all pools in the cluster. It is doing this in a
sequential manner on all storage pool.
Making a fix to get rid of sleep, wait during HA. The behavior is now
similar to Xenserver.
RB: https://reviews.apache.org/r/6133/
Send-by:devdeep.singh@citrix.com
2012-07-25 10:17:09 -07:00
Alena Prokharchyk
353423acec
Merge branch 'master' into vpc
...
Conflicts:
api/src/com/cloud/api/commands/ListFirewallRulesCmd.java
api/src/com/cloud/api/response/FirewallResponse.java
api/src/com/cloud/api/response/IPAddressResponse.java
server/src/com/cloud/api/ApiDBUtils.java
server/src/com/cloud/network/NetworkManagerImpl.java
server/src/com/cloud/network/dao/FirewallRulesDaoImpl.java
server/src/com/cloud/network/dao/NetworkDaoImpl.java
server/src/com/cloud/server/ManagementServerImpl.java
2012-07-06 12:04:10 -07:00
Sheng Yang
7349842c42
CS-15116: Add missing scripts for XCP server
...
Thank for the help from Wilhem Putz(wp@typoheads.at ) to identify the issue.
2012-07-06 11:34:36 -07:00
Edison Su
27e9cdbece
add console proxy support for devcloud
2012-07-03 23:38:39 -07:00
Sheng Yang
8d4079d477
CS-6840: Add hypervisor commands for site-to-site vpn
...
Conflicts:
plugins/hypervisors/xen/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-07-02 16:28:44 -07:00
Alena Prokharchyk
1f01d923ca
Merge branch 'master' into vpc
2012-06-28 17:44:08 -07:00
Alena Prokharchyk
634cd78baa
Merge branch 'master' into vpc
...
Conflicts:
api/src/com/cloud/api/ApiConstants.java
api/src/com/cloud/api/BaseCmd.java
api/src/com/cloud/api/ResponseGenerator.java
api/src/com/cloud/api/commands/ListNetworksCmd.java
api/src/com/cloud/api/response/NetworkResponse.java
api/src/com/cloud/event/EventTypes.java
api/src/com/cloud/network/NetworkService.java
client/tomcatconf/commands.properties.in
scripts/network/domr/getDomRVersion.sh
scripts/network/domr/ipassoc.sh
scripts/network/domr/l2tp_vpn.sh
scripts/network/domr/networkUsage.sh
scripts/network/domr/router_proxy.sh
server/src/com/cloud/api/ApiDBUtils.java
server/src/com/cloud/api/ApiResponseHelper.java
server/src/com/cloud/configuration/DefaultComponentLibrary.java
server/src/com/cloud/network/NetworkManagerImpl.java
server/src/com/cloud/network/dao/IPAddressDao.java
server/src/com/cloud/network/dao/IPAddressDaoImpl.java
setup/apidoc/gen_toc.py
setup/db/create-schema.sql
wscript
2012-06-28 17:41:40 -07:00
Edison Su
80e2a6faa0
add ASF license
2012-06-28 13:28:38 -07:00
Edison Su
5f6387e113
add clouddev
2012-06-27 23:28:34 -07:00
David Nalley
d630fa8697
license header changes for scripts folder from Chip Childers
2012-06-23 00:58:00 -04:00
frank
27265597bf
make cloud-install-sys-tmplt work without db.properties file
...
this allows developer setup secondary storage from their development environment
2012-06-20 11:08:33 -07:00
Wido den Hollander
bdec29b3dc
Create iptable rules for all bridges assigned to a system VM
...
The default_network_rules_systemvm method in security_group.py only created the appropriate rules for
just one bridge.
This however leads to traffic not being forwarded to the virtual machine in the case of the system VMs
both (console & storage) having different bridges in basic networking.
This patch makes sure rules are generated for all target devices based on their source device/bridge
It however excludes the LinkLocalBridge since no filtering is needed on that bridge.
2012-06-19 12:20:22 +02:00
anthony
418cbe2e17
VPC : fixed get_domr_version
2012-06-15 14:33:43 -07:00
anthony
a4d0f91cfe
VPC : use routerProxy to call l2tpVpn
...
Conflicts:
core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
2012-06-15 14:26:20 -07:00
anthony
c75fe80125
VPC : use routerProxy to call networkUsage.sh
...
Conflicts:
core/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
2012-06-15 14:25:21 -07:00
anthony
251a91f5b3
VCP : use routerProxy to call checkrouter script
2012-06-15 14:24:18 -07:00
anthony
a08c9e7890
VPC : move acl.sh ipassoc.sh to /opt/cloud/bin/
2012-06-15 14:24:09 -07:00
anthony
337c36d8b9
VPC: typo fix
...
Conflicts:
scripts/vm/hypervisor/xenserver/xenserver56fp1/patch
2012-06-15 14:23:41 -07:00
anthony
8c1700a3a4
VPC : introduce router_proxy.sh, resource should use this as a proxy to call scripts inside domr
...
already did this for ipassoc and getDomRVersion
2012-06-15 14:22:49 -07:00
butanet
2c001bbe21
Fix variable name in createtmplt.sh
2012-05-28 14:18:47 -04:00
butanet
f5eefc0493
Fix variable name in createtmplt.sh ($tmplfs -> $tmpltfs)
2012-05-28 14:13:37 -04:00
John Kinsella
efe318336a
CS-14955: security_group.py only creates ICMP iptables rules for ICMP type -1
...
Description:
Unindented 3 lines to update logic flow to execute iptables when
passed ICMP type is not -1.
2012-05-27 19:39:56 -04:00
anthony
8581d02ee8
CS-14946, check if it is linux bridge before call ovs
2012-05-23 19:06:35 -07:00
Salvatore Orlando
c1539e4e42
CS-14902: Removing files needed for SDN feature from XS 5.6FP1
2012-05-21 15:56:42 +01:00
Nitin Mehta
d77af1a96c
bug CS-14941: Revert accidental chages to the create template script for KVM
2012-05-21 09:11:40 +05:30
Salvatore Orlando
e72b61eccc
CS-14900:
...
CS-14902: Fixing ovs-vif-flows.py for avoiding it kicks in with exp backoff timeouts if ovs is not running
Also removing unnecessary copies of the same script
2012-05-17 16:09:11 +01:00
Edison Su
bafc3f2a5a
CS-14521
...
Remove CLVM, due to license issue
2012-05-15 15:13:15 -07:00
anthony
e9f339cd14
remove another vnc hack
2012-05-08 11:01:52 -07:00
anthony
b7f5dd633d
delete vnc hack after upgrade
2012-05-08 10:45:27 -07:00
Edison Su
d913e3bdfb
security group: exactly match bridge name
2012-05-04 13:56:34 -07:00
Salvatore Orlando
b6c2c4c506
CS-14605: OVS cleanup
...
pep8 fixes to python scripts
removing superflous/unused code from python scripts
2012-04-25 11:32:01 +01:00
Salvatore Orlando
2340ebced3
Now using vnets instead of network id for creating networks
...
Fixed issues with vif scripts on 5.6FP1
Fixed ipv6 issue on 5.6FP1
Plus other various fixes and improvements
Starting to remove debug code
NOTE: Network is configured correctly but instances do not start. Possibly indefinite wait occuring on some commands
2012-04-23 22:33:18 +01:00
Salvatore Orlando
b10ab6b2d0
Adding Missing file to source control
2012-04-23 22:32:52 +01:00
Salvatore Orlando
3eef46f8a9
Open vSwitch tunnel manager
...
Applying patch with new ovs-tunnel-manager on top of cloudstack oss-master
2012-04-23 22:32:52 +01:00
Salvatore Orlando
5568e95d4c
Overwriting ovstunnel
2012-04-23 22:32:52 +01:00
Salvatore Orlando
e2cc2c1f6e
Fixing remaining issues with per-VIF flow script and removing version-specific scripts.
...
Now generating XSnetwork names using gre keys
Plus other minor corrections
2012-04-23 22:32:52 +01:00
Salvatore Orlando
8987499cda
Now using vnets instead of network id for creating networks
...
Fixed issues with vif scripts on 5.6FP1
Fixed ipv6 issue on 5.6FP1
Plus other various fixes and improvements
Starting to remove debug code
NOTE: Network is configured correctly but instances do not start. Possibly indefinite wait occuring on some commands
2012-04-23 22:32:52 +01:00
Salvatore Orlando
8268635846
Adding Missing file to source control
2012-04-23 22:32:16 +01:00
Salvatore Orlando
9f321ffeac
Open vSwitch tunnel manager
...
Applying patch with new ovs-tunnel-manager on top of cloudstack oss-master
2012-04-23 22:32:16 +01:00
Salvatore Orlando
a1a615e018
Overwriting ovstunnel
2012-04-23 22:32:16 +01:00
Nitin Mehta
4434aa0d2d
bug CS-10789: More changes for the imageformat, introdueced new column in db for the format, created scripts for doffernt hypervisors ...and the list goes on.
2012-04-23 13:44:34 +05:30
Nitin Mehta
ac2175bdbc
bug CS-10789: Adding volume sync and delete functionality.
2012-04-23 12:29:38 +05:30
Nitin Mehta
564cef8ddf
More changes for uploadVolume. Create framework for upload volume progress communication between MS and SSVM.
2012-04-23 12:14:35 +05:30
Abhi
6f0890ea3a
bug CS-12812: XCP has get_mtime missing from the utils, added it here
2012-04-20 10:43:01 +05:30
Rajesh Battala
327049b5c5
CS-14546: Fixed bug Unable to view console in System and Guest VMs and Added Upgrade script
2012-04-19 21:15:45 +05:30
anthony
88d6562dac
typo in cloud-setup-bonding.sh
2012-04-13 15:19:49 -07:00
Rajesh Battala
537914ffae
Xenserver Secure Console Proxy. Removing vnc hacks when adding xen host
2012-04-11 17:52:24 +05:30
frank
2f634c0913
Switch to Apache license
2012-04-03 04:50:05 -07:00
Edison Su
a6d4a76647
bug 14498: in xenserver 6.0 and openvswitch enabled, reboot xenserver will lost link local bridge; the workaround is if the link local bridge is lost, create a new one; status 14498: resolved fixed; Reviewed-by: frank
2012-03-26 17:15:03 -07:00
Sheng Yang
edcf95a6f0
Change KVM's delimiter from "," to "%"
...
In order not to confuse with commandline parameters
2012-03-13 15:59:09 -07:00
abhi
a560ec3001
removing the minor version number for comparisions for Xenserver 6.0
2012-03-13 11:23:27 +05:30
anthony
3a4ee0d486
removed unused files
2012-02-27 13:59:09 -08:00
anthony
6d39e10b76
get fsimage from sp2 for XenServer 5.6 GA
2012-02-24 15:03:34 -08:00
anthony
9159de57fc
bug 13603: in XenServer 6.0, qemu-dm-wrapper listens on local host by fault
...
status 13603: resolved fixed
reviewed-by: edison
2012-02-22 18:41:46 -08:00
Chiradeep Vittal
7008e5a46b
bug 13734: allow dhcp requests and responses all the time
2012-02-15 15:34:48 -08:00
Chiradeep Vittal
3a3d096a5c
it appears xs 6.0 allows iptables rules across the bridge without csp
2012-02-13 15:53:45 -08:00
kishan
606902ff09
Bug 11931: Add quotes to snapshot name and volume name. Fixed create template from snapshot also by adding quotes
...
Status 11931: resolved fixed
Reviewed-By: Nitin
Conflicts:
scripts/storage/qcow2/createtmplt.sh
2012-02-08 17:24:17 +05:30
Edison Su
738a5927a8
quote the snapshot name
2012-01-31 16:23:34 -08:00
Chiradeep Vittal
08636d5802
bug 13060: check for resident vms as xapi will return vms running on other hosts in the cluster
2012-01-17 18:37:59 -08:00
frank
1a3a3f8e0d
use /usr/lib/cloud/management/systemvm_mnt instead of /mnt/cloud/systemvm.
...
We should use home dir of user 'cloud', don't do any assumption of umask of /mnt,
it varies from distribution
2012-01-13 13:28:31 -08:00
Chiradeep Vittal
af667d26b7
bug 13033: security rule prevents console access
2012-01-12 15:35:25 -08:00
anthony
5d54a3aef8
bug 13052: check if ebtables exists in can_bridge_firewall
...
status 13052: resolved fixed
2012-01-12 11:34:31 -08:00
frank
52610ffcb3
add copyright header to shell scripts
2012-01-11 18:41:53 -08:00
anthony
12b7fa60f0
fixed typo
2012-01-11 10:30:31 -08:00
anthony
f114ddf471
propagate local_link_network
2012-01-10 19:48:55 -08:00
anthony
9be635367e
bug 10363 : cleanup vhd in secondary storage if creating private template fails
...
status 10363 : resolved fixed
Conflicts:
core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-01-10 16:45:07 -08:00
anthony
fb8364ad0c
bug 10363 : cleanup vhd in secondary storage if backsnapshot fails
...
Conflicts:
core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-01-10 15:51:13 -08:00
anthony
924953220b
bug 10363 : cleanup vhd in secondary storage if copy_vhd_to_secondarystorage fails
2012-01-10 15:07:49 -08:00
anthony
f964c4d227
bug 10363 : cleanup vhd in primary storage if download template to primary storage fails
...
Conflicts:
core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
scripts/vm/hypervisor/xenserver/vmops
2012-01-10 13:56:29 -08:00
anthony
c25cb29f10
remove nfs.py patch
2012-01-10 13:56:29 -08:00
Sheng Yang
59981f71c1
bug 12883: Fix numerous NETWORK_STAT related rule in iptables
...
Also use script in the router for the execution.
status 12883: resolved fixed
2012-01-09 20:04:45 -08:00
Naredula Janardhana Reddy
6aa0560d37
bug 12917: security groups - icmp type/code validations.
2012-01-06 19:33:07 +05:30
Chiradeep Vittal
5aba3913bb
bug 12854: arp requests can also be used to poison arp caches
2012-01-05 18:01:19 -08:00
Chiradeep Vittal
f138d15efb
bug 12854: arp and ip antispoof independent of the order of vm start
2012-01-05 18:01:10 -08:00
Chiradeep Vittal
24894e2354
bug 11302: dont allow stuff like BPDUS, don't allow vms to connect to hypervisor
2011-12-29 17:35:24 -08:00
Chiradeep Vittal
4718f194ef
bug 12772: typo
2011-12-29 16:01:41 -08:00
Chiradeep Vittal
338aa3e2a8
accidental commit
2011-12-29 16:01:41 -08:00
Chiradeep Vittal
a51ee064ee
bug 11302: more efficient caching of keyword
2011-12-29 16:01:41 -08:00
Chiradeep Vittal
c05903b2d0
bug 11302: support new CSP for SP2.
...
conditional check : --match-set vs --set
forgot to merge this in from 2.2.y
2011-12-29 16:01:40 -08:00
frank
363aea4aee
Bug 12731 - Ebtable rules are blocking all traffic going out of VMs in basic zone
...
status 12731: resolved fixed
reviewed-by: edison
2011-12-22 15:04:15 -08:00
anthony
c00d663df2
use soft mount for secondary storage
2011-12-21 20:31:40 -08:00
anthony
61eab674d2
bug 12328: XenServer 6.0 changes vnc-port path in xenstore
...
status 12328: resolved fixed
2011-12-21 12:00:27 -08:00
Edison Su
c067763075
bug 12604: if there are actually snapshots creating on the volume, then don't move the snapshot
...
status 12604: resolved fixed
2011-12-20 15:12:31 -08:00
Chiradeep Vittal
5dfa0ed169
remove obsolete file
2011-12-19 10:56:52 -08:00
Chiradeep Vittal
2278477737
add stronger security to defend against attacks originating in the vm
2011-12-19 10:56:52 -08:00
Chiradeep Vittal
5393a44c56
bug 12290: improve antispoofing lgic
...
handle reboot within vm correctly
iptables -S missing in csp
2011-12-19 10:56:52 -08:00
frank
9c4f009c69
Bug 12241 - document all supported options in routing script: cloud-install-sys-tmplt
...
status 12241: resolved fixed
2011-12-15 14:49:16 -08:00
anthony
331bd6c103
SWIFT: add error handling code
...
add swift plugin for XenServer 6.0
2011-12-14 19:53:56 -08:00
Edison Su
ee60039404
bug 8489: remove the leading /
...
status 8489: resolved fixed
2011-12-06 14:14:09 -08:00
kishan
489a1d5738
bug 12365: Read secret key from file for encryption type file. For web type use comman-line option -s.
...
status 12365 : resolved fixed
reviewed-by: Nitin
2011-12-06 14:52:57 +05:30
Chiradeep Vittal
797836723d
bug 10804: add default dns provider
2011-12-05 16:56:31 -08:00