Commit Graph

533 Commits

Author SHA1 Message Date
Edison Su b88033ff2a fix installation issue 2012-09-07 05:12:27 -07:00
Gavin Lee d3921139ed Patch from Gavin Lee: Change license to ASL2.0 in server and tools
Signed-off-by: Chip Childers <chip.childers@gmail.com>
2012-08-30 10:36:29 -04:00
Edison Su cefc5cbff3 bug CS-16172
Reviewed-by: chiradeep
2012-08-24 16:13:29 -07:00
anthony 2ea876dfd3 in basic zone, allow dhcp traffic by default 2012-08-15 13:11:58 -07:00
Alena Prokharchyk b61468d65c Merge branch 'master' into vpc
Conflicts:
	plugins/hypervisors/kvm/src/com/cloud/hypervisor/kvm/resource/LibvirtComputingResource.java
2012-08-11 18:27:18 -07:00
Edison Su 263216caa5 Adds CLVM as an option for primary storage. It copies most of the RBD bits, in most cases simply adding an 'else if' or similar. In the managesnapshot.sh we add the ability to manipulate snapshots for the CLVM volumes, as well as a few minor fixes like adjusting the usage for the -b option to reflect that it accepts four arguments (note that it already accepted four args, it just wasn't reflected in the usage).
RB: https://reviews.apache.org/r/6470/
Send-by: shadowsor@gmail.com
2012-08-10 13:33:06 -07:00
Alena Prokharchyk 5a72044dc7 Merge branch 'master' into vpc 2012-08-03 14:30:54 -07:00
Chip Childers 09bdd3b6c3 License header updates for the scripts folder. 2012-08-03 09:38:28 -04:00
Alena Prokharchyk 7706a9c32f Merge branch 'master' into vpc
Conflicts:
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/rules/RulesManagerImpl.java
2012-07-31 13:37:28 -07:00
Hugo Trippaers 10e4a5ae48 Disable IPv6 in XenServer if it is enabled. The cloud support pack apparently enables IPv6 support at the moment, but wihtout proper security. 2012-07-30 17:36:29 +02:00
Alena Prokharchyk a39fd61249 Merge branch 'master' into vpc
Conflicts:
	server/src/com/cloud/network/rules/RulesManagerImpl.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	server/src/com/cloud/vm/VirtualMachineGuru.java
2012-07-27 13:47:46 -07:00
Edison Su f497c7c031 Bug: HA takes a lot of time to migrate VMs (trigger HA) to another KVM
host if there are multiple storage pools in a cluster.

The issue is as follows:
1. When CloudStack detects that a host is not responding to ping
requests it'll send a fence command for this host to another host in the
cluster.
2. The agent takes a long time to respond to this check if the storage
is fenced. This is because the agent checks if the first host is writing
to its heartbeat file on all pools in the cluster. It is doing this in a
sequential manner on all storage pool.

Making a fix to get rid of sleep, wait during HA. The behavior is now
similar to Xenserver.

RB: https://reviews.apache.org/r/6133/
Send-by:devdeep.singh@citrix.com
2012-07-25 10:17:09 -07:00
Alena Prokharchyk 353423acec Merge branch 'master' into vpc
Conflicts:
	api/src/com/cloud/api/commands/ListFirewallRulesCmd.java
	api/src/com/cloud/api/response/FirewallResponse.java
	api/src/com/cloud/api/response/IPAddressResponse.java
	server/src/com/cloud/api/ApiDBUtils.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/dao/FirewallRulesDaoImpl.java
	server/src/com/cloud/network/dao/NetworkDaoImpl.java
	server/src/com/cloud/server/ManagementServerImpl.java
2012-07-06 12:04:10 -07:00
Sheng Yang 7349842c42 CS-15116: Add missing scripts for XCP server
Thank for the help from Wilhem Putz(wp@typoheads.at) to identify the issue.
2012-07-06 11:34:36 -07:00
Edison Su 27e9cdbece add console proxy support for devcloud 2012-07-03 23:38:39 -07:00
Sheng Yang 8d4079d477 CS-6840: Add hypervisor commands for site-to-site vpn
Conflicts:

	plugins/hypervisors/xen/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-07-02 16:28:44 -07:00
Alena Prokharchyk 1f01d923ca Merge branch 'master' into vpc 2012-06-28 17:44:08 -07:00
Alena Prokharchyk 634cd78baa Merge branch 'master' into vpc
Conflicts:
	api/src/com/cloud/api/ApiConstants.java
	api/src/com/cloud/api/BaseCmd.java
	api/src/com/cloud/api/ResponseGenerator.java
	api/src/com/cloud/api/commands/ListNetworksCmd.java
	api/src/com/cloud/api/response/NetworkResponse.java
	api/src/com/cloud/event/EventTypes.java
	api/src/com/cloud/network/NetworkService.java
	client/tomcatconf/commands.properties.in
	scripts/network/domr/getDomRVersion.sh
	scripts/network/domr/ipassoc.sh
	scripts/network/domr/l2tp_vpn.sh
	scripts/network/domr/networkUsage.sh
	scripts/network/domr/router_proxy.sh
	server/src/com/cloud/api/ApiDBUtils.java
	server/src/com/cloud/api/ApiResponseHelper.java
	server/src/com/cloud/configuration/DefaultComponentLibrary.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/dao/IPAddressDao.java
	server/src/com/cloud/network/dao/IPAddressDaoImpl.java
	setup/apidoc/gen_toc.py
	setup/db/create-schema.sql
	wscript
2012-06-28 17:41:40 -07:00
Edison Su 80e2a6faa0 add ASF license 2012-06-28 13:28:38 -07:00
Edison Su 5f6387e113 add clouddev 2012-06-27 23:28:34 -07:00
David Nalley d630fa8697 license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
frank 27265597bf make cloud-install-sys-tmplt work without db.properties file
this allows developer setup secondary storage from their development environment
2012-06-20 11:08:33 -07:00
Wido den Hollander bdec29b3dc Create iptable rules for all bridges assigned to a system VM
The default_network_rules_systemvm method in security_group.py only created the appropriate rules for
just one bridge.

This however leads to traffic not being forwarded to the virtual machine in the case of the system VMs
both (console & storage) having different bridges in basic networking.

This patch makes sure rules are generated for all target devices based on their source device/bridge

It however excludes the LinkLocalBridge since no filtering is needed on that bridge.
2012-06-19 12:20:22 +02:00
anthony 418cbe2e17 VPC : fixed get_domr_version 2012-06-15 14:33:43 -07:00
anthony a4d0f91cfe VPC : use routerProxy to call l2tpVpn
Conflicts:

	core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
2012-06-15 14:26:20 -07:00
anthony c75fe80125 VPC : use routerProxy to call networkUsage.sh
Conflicts:

	core/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
2012-06-15 14:25:21 -07:00
anthony 251a91f5b3 VCP : use routerProxy to call checkrouter script 2012-06-15 14:24:18 -07:00
anthony a08c9e7890 VPC : move acl.sh ipassoc.sh to /opt/cloud/bin/ 2012-06-15 14:24:09 -07:00
anthony 337c36d8b9 VPC: typo fix
Conflicts:

	scripts/vm/hypervisor/xenserver/xenserver56fp1/patch
2012-06-15 14:23:41 -07:00
anthony 8c1700a3a4 VPC : introduce router_proxy.sh, resource should use this as a proxy to call scripts inside domr
already did this for ipassoc and getDomRVersion
2012-06-15 14:22:49 -07:00
butanet 2c001bbe21 Fix variable name in createtmplt.sh 2012-05-28 14:18:47 -04:00
butanet f5eefc0493 Fix variable name in createtmplt.sh ($tmplfs -> $tmpltfs) 2012-05-28 14:13:37 -04:00
John Kinsella efe318336a CS-14955: security_group.py only creates ICMP iptables rules for ICMP type -1
Description:
Unindented 3 lines to update logic flow to execute iptables when
passed ICMP type is not -1.
2012-05-27 19:39:56 -04:00
anthony 8581d02ee8 CS-14946, check if it is linux bridge before call ovs 2012-05-23 19:06:35 -07:00
Salvatore Orlando c1539e4e42 CS-14902: Removing files needed for SDN feature from XS 5.6FP1 2012-05-21 15:56:42 +01:00
Nitin Mehta d77af1a96c bug CS-14941: Revert accidental chages to the create template script for KVM 2012-05-21 09:11:40 +05:30
Salvatore Orlando e72b61eccc CS-14900:
CS-14902: Fixing ovs-vif-flows.py for avoiding it kicks in with exp backoff timeouts if ovs is not running

Also removing unnecessary copies of the same script
2012-05-17 16:09:11 +01:00
Edison Su bafc3f2a5a CS-14521
Remove CLVM, due to license issue
2012-05-15 15:13:15 -07:00
anthony e9f339cd14 remove another vnc hack 2012-05-08 11:01:52 -07:00
anthony b7f5dd633d delete vnc hack after upgrade 2012-05-08 10:45:27 -07:00
Edison Su d913e3bdfb security group: exactly match bridge name 2012-05-04 13:56:34 -07:00
Salvatore Orlando b6c2c4c506 CS-14605: OVS cleanup
pep8 fixes to python scripts
removing superflous/unused code from python scripts
2012-04-25 11:32:01 +01:00
Salvatore Orlando 2340ebced3 Now using vnets instead of network id for creating networks
Fixed issues with vif scripts on 5.6FP1
Fixed ipv6 issue on 5.6FP1
Plus other various fixes and improvements

Starting to remove debug code
NOTE: Network is configured correctly but instances do not start. Possibly indefinite wait occuring on some commands
2012-04-23 22:33:18 +01:00
Salvatore Orlando b10ab6b2d0 Adding Missing file to source control 2012-04-23 22:32:52 +01:00
Salvatore Orlando 3eef46f8a9 Open vSwitch tunnel manager
Applying patch with new ovs-tunnel-manager on top of cloudstack oss-master
2012-04-23 22:32:52 +01:00
Salvatore Orlando 5568e95d4c Overwriting ovstunnel 2012-04-23 22:32:52 +01:00
Salvatore Orlando e2cc2c1f6e Fixing remaining issues with per-VIF flow script and removing version-specific scripts.
Now generating XSnetwork names using gre keys

Plus other minor corrections
2012-04-23 22:32:52 +01:00
Salvatore Orlando 8987499cda Now using vnets instead of network id for creating networks
Fixed issues with vif scripts on 5.6FP1
Fixed ipv6 issue on 5.6FP1
Plus other various fixes and improvements

Starting to remove debug code
NOTE: Network is configured correctly but instances do not start. Possibly indefinite wait occuring on some commands
2012-04-23 22:32:52 +01:00
Salvatore Orlando 8268635846 Adding Missing file to source control 2012-04-23 22:32:16 +01:00
Salvatore Orlando 9f321ffeac Open vSwitch tunnel manager
Applying patch with new ovs-tunnel-manager on top of cloudstack oss-master
2012-04-23 22:32:16 +01:00
Salvatore Orlando a1a615e018 Overwriting ovstunnel 2012-04-23 22:32:16 +01:00
Nitin Mehta 4434aa0d2d bug CS-10789: More changes for the imageformat, introdueced new column in db for the format, created scripts for doffernt hypervisors ...and the list goes on. 2012-04-23 13:44:34 +05:30
Nitin Mehta ac2175bdbc bug CS-10789: Adding volume sync and delete functionality. 2012-04-23 12:29:38 +05:30
Nitin Mehta 564cef8ddf More changes for uploadVolume. Create framework for upload volume progress communication between MS and SSVM. 2012-04-23 12:14:35 +05:30
Abhi 6f0890ea3a bug CS-12812: XCP has get_mtime missing from the utils, added it here 2012-04-20 10:43:01 +05:30
Rajesh Battala 327049b5c5 CS-14546: Fixed bug Unable to view console in System and Guest VMs and Added Upgrade script 2012-04-19 21:15:45 +05:30
anthony 88d6562dac typo in cloud-setup-bonding.sh 2012-04-13 15:19:49 -07:00
Rajesh Battala 537914ffae Xenserver Secure Console Proxy. Removing vnc hacks when adding xen host 2012-04-11 17:52:24 +05:30
frank 2f634c0913 Switch to Apache license 2012-04-03 04:50:05 -07:00
Edison Su a6d4a76647 bug 14498: in xenserver 6.0 and openvswitch enabled, reboot xenserver will lost link local bridge; the workaround is if the link local bridge is lost, create a new one; status 14498: resolved fixed; Reviewed-by: frank 2012-03-26 17:15:03 -07:00
Sheng Yang edcf95a6f0 Change KVM's delimiter from "," to "%"
In order not to confuse with commandline parameters
2012-03-13 15:59:09 -07:00
abhi a560ec3001 removing the minor version number for comparisions for Xenserver 6.0 2012-03-13 11:23:27 +05:30
anthony 3a4ee0d486 removed unused files 2012-02-27 13:59:09 -08:00
anthony 6d39e10b76 get fsimage from sp2 for XenServer 5.6 GA 2012-02-24 15:03:34 -08:00
anthony 9159de57fc bug 13603: in XenServer 6.0, qemu-dm-wrapper listens on local host by fault
status 13603: resolved fixed

reviewed-by: edison
2012-02-22 18:41:46 -08:00
Chiradeep Vittal 7008e5a46b bug 13734: allow dhcp requests and responses all the time 2012-02-15 15:34:48 -08:00
Chiradeep Vittal 3a3d096a5c it appears xs 6.0 allows iptables rules across the bridge without csp 2012-02-13 15:53:45 -08:00
kishan 606902ff09 Bug 11931: Add quotes to snapshot name and volume name. Fixed create template from snapshot also by adding quotes
Status 11931: resolved fixed
Reviewed-By: Nitin

Conflicts:

	scripts/storage/qcow2/createtmplt.sh
2012-02-08 17:24:17 +05:30
Edison Su 738a5927a8 quote the snapshot name 2012-01-31 16:23:34 -08:00
Chiradeep Vittal 08636d5802 bug 13060: check for resident vms as xapi will return vms running on other hosts in the cluster 2012-01-17 18:37:59 -08:00
frank 1a3a3f8e0d use /usr/lib/cloud/management/systemvm_mnt instead of /mnt/cloud/systemvm.
We should use home dir of user 'cloud', don't do any assumption of umask of /mnt,
it varies from distribution
2012-01-13 13:28:31 -08:00
Chiradeep Vittal af667d26b7 bug 13033: security rule prevents console access 2012-01-12 15:35:25 -08:00
anthony 5d54a3aef8 bug 13052: check if ebtables exists in can_bridge_firewall
status 13052: resolved fixed
2012-01-12 11:34:31 -08:00
frank 52610ffcb3 add copyright header to shell scripts 2012-01-11 18:41:53 -08:00
anthony 12b7fa60f0 fixed typo 2012-01-11 10:30:31 -08:00
anthony f114ddf471 propagate local_link_network 2012-01-10 19:48:55 -08:00
anthony 9be635367e bug 10363 : cleanup vhd in secondary storage if creating private template fails
status 10363 : resolved fixed

Conflicts:

	core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-01-10 16:45:07 -08:00
anthony fb8364ad0c bug 10363 : cleanup vhd in secondary storage if backsnapshot fails
Conflicts:

	core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-01-10 15:51:13 -08:00
anthony 924953220b bug 10363 : cleanup vhd in secondary storage if copy_vhd_to_secondarystorage fails 2012-01-10 15:07:49 -08:00
anthony f964c4d227 bug 10363 : cleanup vhd in primary storage if download template to primary storage fails
Conflicts:

	core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
	scripts/vm/hypervisor/xenserver/vmops
2012-01-10 13:56:29 -08:00
anthony c25cb29f10 remove nfs.py patch 2012-01-10 13:56:29 -08:00
Sheng Yang 59981f71c1 bug 12883: Fix numerous NETWORK_STAT related rule in iptables
Also use script in the router for the execution.

status 12883: resolved fixed
2012-01-09 20:04:45 -08:00
Naredula Janardhana Reddy 6aa0560d37 bug 12917: security groups - icmp type/code validations. 2012-01-06 19:33:07 +05:30
Chiradeep Vittal 5aba3913bb bug 12854: arp requests can also be used to poison arp caches 2012-01-05 18:01:19 -08:00
Chiradeep Vittal f138d15efb bug 12854: arp and ip antispoof independent of the order of vm start 2012-01-05 18:01:10 -08:00
Chiradeep Vittal 24894e2354 bug 11302: dont allow stuff like BPDUS, don't allow vms to connect to hypervisor 2011-12-29 17:35:24 -08:00
Chiradeep Vittal 4718f194ef bug 12772: typo 2011-12-29 16:01:41 -08:00
Chiradeep Vittal 338aa3e2a8 accidental commit 2011-12-29 16:01:41 -08:00
Chiradeep Vittal a51ee064ee bug 11302: more efficient caching of keyword 2011-12-29 16:01:41 -08:00
Chiradeep Vittal c05903b2d0 bug 11302: support new CSP for SP2.
conditional check : --match-set vs --set
forgot to merge this in from 2.2.y
2011-12-29 16:01:40 -08:00
frank 363aea4aee Bug 12731 - Ebtable rules are blocking all traffic going out of VMs in basic zone
status 12731: resolved fixed

reviewed-by: edison
2011-12-22 15:04:15 -08:00
anthony c00d663df2 use soft mount for secondary storage 2011-12-21 20:31:40 -08:00
anthony 61eab674d2 bug 12328: XenServer 6.0 changes vnc-port path in xenstore
status 12328: resolved fixed
2011-12-21 12:00:27 -08:00
Edison Su c067763075 bug 12604: if there are actually snapshots creating on the volume, then don't move the snapshot
status 12604: resolved fixed
2011-12-20 15:12:31 -08:00
Chiradeep Vittal 5dfa0ed169 remove obsolete file 2011-12-19 10:56:52 -08:00
Chiradeep Vittal 2278477737 add stronger security to defend against attacks originating in the vm 2011-12-19 10:56:52 -08:00
Chiradeep Vittal 5393a44c56 bug 12290: improve antispoofing lgic
handle reboot within vm correctly
iptables -S missing in csp
2011-12-19 10:56:52 -08:00
frank 9c4f009c69 Bug 12241 - document all supported options in routing script: cloud-install-sys-tmplt
status 12241: resolved fixed
2011-12-15 14:49:16 -08:00
anthony 331bd6c103 SWIFT: add error handling code
add swift plugin for XenServer 6.0
2011-12-14 19:53:56 -08:00
Edison Su ee60039404 bug 8489: remove the leading /
status 8489: resolved fixed
2011-12-06 14:14:09 -08:00
kishan 489a1d5738 bug 12365: Read secret key from file for encryption type file. For web type use comman-line option -s.
status 12365 : resolved fixed
reviewed-by: Nitin
2011-12-06 14:52:57 +05:30
Chiradeep Vittal 797836723d bug 10804: add default dns provider 2011-12-05 16:56:31 -08:00
Chiradeep Vittal 89f13ad700 bug 10804 virtual router support for per-vm default network 2011-12-05 14:53:42 -08:00
kishan cdbf5b0db5 bug 12262: Updated jasypt jar path 2011-12-03 08:47:37 +05:30
kishan d64747a657 bug 12262: Added "-s" option. When encryption is used provide mgmt secret key using "-s" option.
status 12262 : resolved fixed
reviewed-by: Prasanna
2011-12-02 21:12:49 +05:30
Naredula Janardhana Reddy c7766ea6c8 bug 10617: kvm related changes. 2011-12-02 17:07:36 +05:30
Naredula Janardhana Reddy 0c1e21ab80 bug 10617: vmops related changes. 2011-12-01 19:32:57 +05:30
Naredula Janardhana Reddy 09905b641b bug 10617: merge code from branch bug10617. 2011-12-01 14:17:52 +05:30
frank 7eddef60fe Bug 11926 - Need parameter check before execution of cloud-install-sys-tmplt
make the check for mount point a litter earlier

status 11926: resolved fixed
2011-11-30 13:50:07 -08:00
Naredula Janardhana Reddy f1b99f4f07 Revert "bug 10617: merging code from branch bug10617"
This reverts commit 8bc33448b9220534ba0ddc6c642ffb1e69d5844e.

Conflicts:

	server/src/com/cloud/api/ApiResponseHelper.java
2011-11-11 20:23:26 +05:30
Naredula Janardhana Reddy 02adbd4bd3 bug 10617: merging code from branch bug10617 2011-11-10 15:23:48 +05:30
anthony 91aa145f5d Upgrade: no error for this statement 2011-11-04 20:39:39 -07:00
anthony de4d5f0397 Upgrade : script fix 2011-11-04 20:39:26 -07:00
anthony 548839e3bb bug 11903: create local link when host is connected
status 11903: resolved fixed
2011-11-04 20:39:05 -07:00
anthony 245cd32281 upgrade : fix script 2011-11-04 20:38:42 -07:00
anthony f30ee3fc91 Upgrade : eject CD 2011-11-04 20:38:15 -07:00
Edison Su 6841e265d3 bug 10330: finally merge Rommer's CLVM patch
status 10330: resolved fixed
2011-11-02 18:03:58 -07:00
anthony 1e86b5e1a6 script fix 2011-11-02 17:05:30 -07:00
anthony f41a9e8b23 propagate local link network 2011-11-02 17:05:05 -07:00
anthony f97b3e5c56 bug 11858: fake pv : use version in host parameter instead, fix XCP override
status 11858: resolved fixed

commit-by: Kevin Brooks

review-by: Anthony Xu
2011-11-01 19:51:06 -07:00
anthony 3067a9d2db Swift : add two new files 2011-10-21 14:26:20 -07:00
anthony c97010a160 BackupSnapshot to Swift 2011-10-18 18:11:09 -07:00
anthony 59b084a867 add swift client from 1.4.3 into SSVM 2011-10-13 15:52:58 -07:00
anthony 6710f09ab4 swift is written in python 2.6
make swift client work in python 2.4
changes:
1. md5 interface changed
2. urlparse interface changed
3. Queue interface changed
2011-10-13 12:07:09 -07:00
anthony 01d38fbb3e add swift client from 1.4.3 2011-10-13 11:47:41 -07:00
anthony 7ba15ce49b remove old swift client 2011-10-12 12:11:46 -07:00
Chiradeep Vittal 1c5adc7714 bug 11336: compression to allow number of cidrs to scale beyond 8k 2011-10-06 17:56:59 -07:00
Chiradeep Vittal 1b3372e1de bug 11625: separate out error paths to enable fine grained error handling and cleanup
status 11625: resolved fixed
2011-10-06 17:55:29 -07:00
Chiradeep Vittal 61fa7d8675 bug 11420: reduce duration of disruption 2011-10-06 17:55:21 -07:00
Sheng Yang 89e45bd671 bug 11130: Add GetDomRVersionCmd 2011-09-29 14:50:11 -07:00
kishan 8ffeddb020 bug 11547: Reset iptables counter when a public interface on domR is removed 2011-09-23 15:43:45 +05:30
anthony 9730160e63 typo 2011-09-14 20:39:57 -07:00
Sheng Yang 9317033a4f Add missing files for redundant router. 2011-09-14 16:25:56 -07:00
Sheng Yang 3549067d55 bug 11307: Add BumpUpPriorityCommand 2011-09-14 16:22:19 -07:00
Sheng Yang b987123daa bug 11307: Let CheckRouterAnswer() parse the return result 2011-09-14 16:21:33 -07:00
anthony d6cbd2b6bc bug 11275:
remove heartbeat entry for this Primary Storage, when put this Primary Storage into maintenance mode
create heartbeat entry for this Primary Storage, when cancal maintenance for this Primary Storage

status 11275: resolved fixed
2011-09-13 22:15:21 -07:00
kishan b7214e6202 bug 10626: Modified install sys tmpl script to get templateId from DB using db.properties
status 10626: resolved fixed
2011-09-14 01:08:07 +05:30
Chiradeep Vittal fae5e84699 if the xenserver host cannot do bridge firewalling do not attempt to retry the security rule updat
change some logs to debug level
2011-09-12 18:20:24 -07:00
Chiradeep Vittal 65fb83035f Enable monitoring over JMX
Add the ability to disable some vms from being scheduled

Add ability to trigger ruleset updates from JMX

added a few more dangerous JMX operations
2011-09-12 18:20:24 -07:00
Chiradeep Vittal 0aeb45fafc if sequence number increases but signature does not change, do not reprogram, but rewrite the rule log 2011-09-12 18:20:23 -07:00
Chiradeep Vittal d817f3c364 Revert "bug 10617: Added Egress rules to Security groups."
revert pending review

This reverts commit a19212703b9734ebd44ebf55cfdd81ebdc9d7fe4.
2011-09-12 14:45:58 -07:00
Chiradeep Vittal 53970c89dc Revert "bug 10617: blocking between security groups for egress rules fixed."
revert pending review

This reverts commit 7d30dfd79e3c4b01492f606333c26e36bcdc5d13.
2011-09-12 14:45:58 -07:00
Chiradeep Vittal e216686029 Revert "bug 10617: Intermediate checking"
revert pending review

This reverts commit 561b27565512d438db3d8896df6f97b644b0b498.
2011-09-12 14:45:58 -07:00
Naredula Janardhana Reddy f9b0962ad9 bug 10617: Intermediate checking
Changes :
         - Fixing API doc +response name + errorMessage
         - Adding seperate events to Egress rules
         - Egress rules Using the same database table as that of ingress with new column type.

   Pending Tasks:
         - db upgrade
         - database table rename from security_ingress_rule to generic name, renaming some of the jave class from ingress to generic name.
         - Retesting on kvm
2011-09-09 18:14:19 +05:30
Naredula Janardhana Reddy 10d2ca8d0a bug 10617: blocking between security groups for egress rules fixed. 2011-09-02 16:17:08 +05:30
Edison Su d18a1ddc28 fix the long time issue that sometimes libvirt reports volume missing 2011-09-02 01:01:27 -07:00
Edison Su 7621dea575 Fix the regression on security group cleanup:
In pre-2.2.10, the cleanup doens't work at all.
In 2.2.10, it works but make a mistake to delete all the rules for vmname ending with "-untagged"
2011-08-31 10:45:52 -07:00
Naredula Janardhana Reddy 854f81962f bug 10617: Added Egress rules to Security groups.
Description :
   API's:
     -  Two new api's authorizeSecurityGroupEgress,revokeSecurityGroupEgressCmd are added. These two API's are similer to ingress rule API's.
           - authorizeSecurityGroupEgress :Authorizes a particular egress rule for this security group . Usageof API is very similer to that of authorizeSecurityGroupIngress except that instead of source cidr  there will be destination cidr. By default like ingress, all the outgoing flows are blocked.
           - revokeSecurityGroupEgress : It is similer to revokeSecurityGroupIngress api, It removes the egress rule.
     -  listSecurityGroup API's response changed. It include's egress list apart from the existing ingress rules in the output of the API.

   Hypervisors :
      - It is implemented in Xen and KVM.

   Pending Tasks :  Blocking using destination security groups.

   Previous commits: c9fda641673df7701f44963ef27e1d488f121219 , 24e4e44b8f0712a37147a3777833de3f9e24829e
2011-08-30 16:28:35 +05:30
frank b3478c377e Full opensource 2011-08-23 19:52:19 -07:00
alena 8a7feb8ec1 Merge branch '2.2.y'
Conflicts:
	agent/src/com/cloud/agent/resource/computing/LibvirtComputingResource.java
	api/src/com/cloud/agent/api/routing/LoadBalancerConfigCommand.java
	api/src/com/cloud/agent/api/to/FirewallRuleTO.java
	api/src/com/cloud/agent/api/to/IpAddressTO.java
	api/src/com/cloud/agent/api/to/PortForwardingRuleTO.java
	api/src/com/cloud/api/ApiConstants.java
	api/src/com/cloud/api/BaseCmd.java
	api/src/com/cloud/api/ResponseGenerator.java
	api/src/com/cloud/api/commands/CreateFirewallRuleCmd.java
	api/src/com/cloud/api/commands/CreateIpForwardingRuleCmd.java
	api/src/com/cloud/api/commands/CreateLoadBalancerRuleCmd.java
	api/src/com/cloud/api/commands/CreatePortForwardingRuleCmd.java
	api/src/com/cloud/api/commands/DeleteLoadBalancerRuleCmd.java
	api/src/com/cloud/api/commands/ListCapabilitiesCmd.java
	api/src/com/cloud/api/commands/UpdateNetworkCmd.java
	api/src/com/cloud/api/response/CapabilitiesResponse.java
	api/src/com/cloud/network/Network.java
	api/src/com/cloud/network/NetworkService.java
	api/src/com/cloud/network/firewall/FirewallService.java
	api/src/com/cloud/network/lb/LoadBalancingRule.java
	api/src/com/cloud/network/lb/LoadBalancingRulesService.java
	api/src/com/cloud/network/rules/FirewallRule.java
	api/src/com/cloud/network/rules/RulesService.java
	api/src/com/cloud/offering/NetworkOffering.java
	client/tomcatconf/commands.properties.in
	cloud.spec
	core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
	core/src/com/cloud/hypervisor/xen/resource/CitrixHelper.java
	core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
	core/src/com/cloud/storage/template/DownloadManagerImpl.java
	core/src/com/cloud/vm/DomainRouterVO.java
	debian/cloud-deps.install
	patches/systemvm/debian/config/etc/init.d/cloud-early-config
	patches/systemvm/debian/config/root/ipassoc.sh
	patches/systemvm/debian/config/root/loadbalancer.sh
	scripts/vm/hypervisor/kvm/rundomrpre.sh
	scripts/vm/hypervisor/xenserver/vmops
	server/src/com/cloud/agent/manager/AgentAttache.java
	server/src/com/cloud/agent/manager/AgentManagerImpl.java
	server/src/com/cloud/agent/manager/AgentMonitor.java
	server/src/com/cloud/agent/manager/ClusteredAgentManagerImpl.java
	server/src/com/cloud/alert/ClusterAlertAdapter.java
	server/src/com/cloud/api/ApiResponseHelper.java
	server/src/com/cloud/api/ApiServer.java
	server/src/com/cloud/cluster/ClusterManagerImpl.java
	server/src/com/cloud/configuration/Config.java
	server/src/com/cloud/configuration/ConfigurationManager.java
	server/src/com/cloud/configuration/ConfigurationManagerImpl.java
	server/src/com/cloud/configuration/DefaultComponentLibrary.java
	server/src/com/cloud/deploy/FirstFitPlanner.java
	server/src/com/cloud/ha/HighAvailabilityManagerImpl.java
	server/src/com/cloud/host/dao/HostDaoImpl.java
	server/src/com/cloud/hypervisor/xen/discoverer/XcpServerDiscoverer.java
	server/src/com/cloud/network/LoadBalancerVO.java
	server/src/com/cloud/network/NetworkManager.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/dao/FirewallRulesDao.java
	server/src/com/cloud/network/dao/FirewallRulesDaoImpl.java
	server/src/com/cloud/network/element/DhcpElement.java
	server/src/com/cloud/network/element/VirtualRouterElement.java
	server/src/com/cloud/network/firewall/FirewallManagerImpl.java
	server/src/com/cloud/network/lb/LoadBalancingRulesManagerImpl.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManager.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
	server/src/com/cloud/network/rules/FirewallManager.java
	server/src/com/cloud/network/rules/FirewallRuleVO.java
	server/src/com/cloud/network/rules/PortForwardingRuleVO.java
	server/src/com/cloud/network/rules/RulesManagerImpl.java
	server/src/com/cloud/network/rules/StaticNatRuleImpl.java
	server/src/com/cloud/network/security/SecurityGroupListener.java
	server/src/com/cloud/network/security/SecurityGroupManagerImpl.java
	server/src/com/cloud/offerings/NetworkOfferingVO.java
	server/src/com/cloud/server/ConfigurationServerImpl.java
	server/src/com/cloud/server/ManagementServerImpl.java
	server/src/com/cloud/storage/StorageManager.java
	server/src/com/cloud/storage/StorageManagerImpl.java
	server/src/com/cloud/storage/dao/VMTemplateHostDaoImpl.java
	server/src/com/cloud/storage/download/DownloadMonitorImpl.java
	server/src/com/cloud/upgrade/DatabaseUpgradeChecker.java
	server/src/com/cloud/upgrade/dao/Upgrade228to229.java
	server/src/com/cloud/upgrade/dao/Upgrade229to2210.java
	server/src/com/cloud/user/AccountManagerImpl.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	server/src/com/cloud/vm/VirtualMachineManagerImpl.java
	server/src/com/cloud/vm/dao/DomainRouterDao.java
	server/src/com/cloud/vm/dao/DomainRouterDaoImpl.java
	setup/db/create-index-fk.sql
	setup/db/create-schema.sql
	setup/db/db/schema-222to224.sql
	setup/db/db/schema-227to228.sql
	setup/db/db/schema-228to229.sql
	setup/db/db/schema-229to2210.sql
	tools/testClient/README
	ui/scripts/cloud.core.instance.js
	utils/src/com/cloud/utils/SerialVersionUID.java
	utils/src/com/cloud/utils/db/ConnectionConcierge.java
	utils/src/com/cloud/utils/db/Merovingian2.java
	utils/src/com/cloud/utils/db/Transaction.java
	utils/src/com/cloud/utils/nio/Link.java
	utils/src/com/cloud/utils/nio/NioConnection.java
	utils/src/com/cloud/utils/time/InaccurateClock.java
2011-08-22 20:28:30 -07:00