Commit Graph

685 Commits

Author SHA1 Message Date
Abhinandan Prateek 770e317218 bug 7553: Virtual Router service offering 2011-05-19 19:18:33 +05:30
Murali Reddy 5769fde46b bug 7194:New API for adding range of public & private ports in port forwarding rule addition
adding support for port ranges in port forwarding rules.
2011-05-19 18:32:09 +05:30
alena c2afcdec52 bug 9873: always add default security group to the SG list when deploy vm in 1) Basic zone 2) Advance zone using SG enabled network
status 9873: resolved fixed

Following fixes were made as a part of the checkin:

* When deploy user vm and SG doesn't exist in the DB, create it automatically.
* SecurityGroup enabled use vm start: if map to default group is not present in security_group_vm_map table, create one.
* Added "name" (securityGroupName) parameter back to deleteSecurityGroup/authorizeSecurityGroupIngress/deployVm. Mutually exclusive with security group id parameter.

Conflicts:

	api/src/com/cloud/api/commands/AuthorizeSecurityGroupIngressCmd.java
	api/src/com/cloud/api/commands/DeleteSecurityGroupCmd.java
	api/src/com/cloud/api/commands/DeployVMCmd.java
	server/src/com/cloud/api/ApiDBUtils.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
2011-05-17 15:08:13 -07:00
keshav d66227d0fb Fixed method to refer to the right provider. 2011-05-16 15:14:55 -07:00
alena 308cbf91fc bug 9879: throw insufficient address capacity exception with pod information in it when fail to allocate public ip address in specific pod
status 9879: resolved fixed
2011-05-16 15:05:00 -07:00
keshav 5d5363965d Changed usage code to look up stats by network ID. 2011-05-16 14:41:47 -07:00
keshav 17abb3e5d4 Added a method to look up public IPs that are used for static NAT rules. 2011-05-16 11:56:48 -07:00
Edison Su 981c497e1f Don't apply @DB on a private method 2011-05-16 10:04:08 -04:00
kishan b738408f7d bug 8866,4942: Added support for Direct Network Usage collection
status 8866,4942: resolved fixed
2011-05-16 18:31:41 +05:30
kishan d456f89095 bug 8866: Direct Network Usage, TrafficSentinel support added, work in progress 2011-05-12 19:43:47 +05:30
Abhinandan Prateek d752a94838 bug 8115: Source IP filtering in Virtual Router
Passing the additional source cidrs paramter to the xapi.
2011-05-12 13:37:43 +05:30
keshav 435e178eef Added a new service to enabled zone-wide, shared source NAT rules. 2011-05-11 15:35:26 -07:00
Jessica Wang fe8d81e246 bug 9765: This is NOT an UI bug. This is a server-side bug. UI calls DeployVM API with ServiceOfferingID parameter (NOT ServiceOfferingDescription parameter). Then, server-side gets ServiceOfferingDescription by ServiceOfferingID and send it to DomR WITHTOUT escaping it first. DomR doesn't support full range of unicode character set. Therefore, DomR fails to accept metadata that has non-ascii code (error: "vm_data failed"). This check-in will send Unicode-escaped string of metadata "service-offering", "availability-zone" and "local-hostname" to DomR. Data Consumer of VM-data service needs to unescape the content accordingly. 2011-05-10 17:57:44 -07:00
Alex Huang 154c6d9021 Propagating 1345af2a0e84684a804bde5b281c30df72f148a0 2011-05-10 05:52:39 -07:00
Abhinandan Prateek a6fac0d768 added annotation and fixes 2011-05-09 19:41:13 +05:30
Abhinandan Prateek 2984b0607f bug 8115: source ip filtering
Created a table for source cidrs list.
Created necessary Daos and VOs.
Updated PortForwardingRulesDao to persist/update non null list of cidrs.
For deletion depending on ON DELETE CASCADE.
2011-05-09 17:41:50 +05:30
alena 275bab0d91 bug 9740: fixed DB upgrade for Direct Tagged networks in Advance zone
status 9740: resolved fixed

Conflicts:

	server/src/com/cloud/upgrade/dao/Upgrade218to22.java
2011-05-05 11:20:27 -07:00
alena 33b3cb2c1a bug 9693: generate usage event when release Direct ip address.
status 9693: resolved fixed

2 more fixes with this commit:

* bug 9692 is fixed - we don't increment resource count when Direct ip address is allocated.
* as a part of 2.2.2->2.2.4 upgrade resource_count for public_ip records is recalculated - count only Virtual Ip addresses

Conflicts:

	server/src/com/cloud/network/NetworkManager.java
2011-05-03 18:56:52 -07:00
Alex Huang fba1c95512 bug 9615: Part of the HA cleanup 2011-05-03 16:34:53 -07:00
kishan 77e48b8683 bug 9678: update user statistics in cloud_usage. Send network usage command to routers of virtual network only
status 9678: resolved fixed
2011-05-04 02:38:25 +05:30
Chiradeep Vittal b42ebf4872 Build fixes after first pass at merge 2011-05-03 10:41:31 -07:00
Chiradeep Vittal 303e2a7481 Start of zonesfeature / mycloud/cloudkit 2011-05-03 10:40:17 -07:00
kishan 76a30cc76f bug 9686,9676,9677: Create usage events for existing resources for port forwarding, load balancer and network offering usage
status 9686,9676,9677: resolved fixed
2011-05-03 20:01:28 +05:30
Alex Huang 99bc15f64a changed getName to getHostname 2011-04-29 08:34:10 -07:00
alena 485f7a10cc bug 9621: dbUpgrade - set reservation strategy to be Create for Guest Nics in Basic zone
status 9621: resolved fixed

Conflicts:

	server/src/com/cloud/upgrade/dao/Upgrade218to22.java
	setup/db/db/schema-222to224.sql
2011-04-27 22:51:56 -07:00
alena 2aa5f8996b listNetworks: allow seeing Guest system network in Basic zone 2011-04-27 13:57:24 -07:00
alena 81e7b25217 Fixed ipAssoc in Basic zone (elastic IP) 2011-04-27 11:15:30 -07:00
kishan 42a9c49712 bug 8866: ignore network usage for system account 2011-04-27 19:44:52 +05:30
kishan 341e553b8a bug 8866: added support for direct network usage tracking using traffic sentinel 2011-04-27 19:03:02 +05:30
alena 508fef2269 Apply nic profile to nic: don't set reservationStrategy for DB object when it's value is NULL 2011-04-26 17:51:49 -07:00
alena 4290abb57c bug 9578: when deploy dhcp in Basic zone, put pod information to deploymentPlan
status 9578: resolved fixed
2011-04-26 14:57:40 -07:00
alena 5db28c57e4 bug 9492: allow security group removal when it has ingress rules, but not assigned to any vms yet
status 9492: resolved fixed
2011-04-25 16:43:39 -07:00
alena 3c48d8d432 bug 9556: set ip_type=ip4 for guestVm nics in Basic zone setup
status 9556: resolved fixed
2011-04-23 20:43:37 -07:00
alena 41e5e38fef bug 9336: securityGroups can be used by other securityGroups in the same domain only; no cross domain SG authentication
status 9336: resolved fixed

Following changes were made:

* deleteSecurityGroup/authorizeSecurityGroupIngress - removed account/domainId parameters as SG is uniquely identified by id now
* removed account_name field from securityGroup DB table; removed allowed_security_group/allowed_sec_grp_acct from security_ingress_rule.
These values were used for api response generation only for performance purposes; added caching on API level to improve performance
* Added missing security checks for securityGroups/ingressRules
2011-04-22 11:35:29 -07:00
alena 1a6d78eae4 Code cleanup. No need to declare runtime exceptions (CloudRuntimeException, InvalidParameterException, PermissionDenied exceptions) 2011-04-21 16:26:53 -07:00
alena b83456f895 bug 9504: don't send DHCP entry command for Destroyed vm
status 9504: resolved fixed
2011-04-21 14:26:42 -07:00
alena d7ec734b01 bug 9481: deployVm with Guest Virtual network - throw an exception when fail to acquire guest Ip address
status 9481: resolved fixed
2011-04-21 13:59:07 -07:00
alena c844655825 bug 9488: throw InsufficientVirtualNetworkCapcityException when fail to allocate guest vnet as a part of network implement() call
status 9488: resolved fixed
2011-04-21 13:59:06 -07:00
alena 3d33fd7f92 deleteNetwork: return false when fail to cleanup network resources (LB/PF/StaticNat rules) 2011-04-21 13:59:06 -07:00
alena 63cd66beb0 Fixed the bug in listNetworks when isSystem parameter was ignored if it was specified along with account/domainId parameter 2011-04-19 18:30:55 -07:00
alena 98baa7392e bug 9383: createStaticNat rule - allow opening the same port for tcp/udp traffic
status 9383: resolved fixed
2011-04-18 17:55:41 -07:00
alena 51c837fc66 Fixed logging for remote access vpn code 2011-04-15 09:57:56 -07:00
alena 7615ded08f bug 9407: lock network when do deployDomR/deployDhcp to avoid 2 network elements start for the same network
status 9407: resolved fixed

Conflicts:

	server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
2011-04-14 13:35:02 -07:00
Frank 92155522f2 Add license header to files 2011-04-14 11:23:14 -07:00
anthony e0ba2a2fa6 clean up transation code 2011-04-12 18:56:49 -07:00
alena acaab55c3e bug 9391: removed source_id, source_type from "volumes" table as we don't use them any more
status 9391: resolved fixed

Conflicts:

	server/src/com/cloud/network/NetworkManagerImpl.java
2011-04-11 18:19:10 -07:00
Frank 105db3b15a Merge branch 'baremetal' to master
modifies:
	api/src/com/cloud/api/ApiConstants.java
	api/src/com/cloud/api/commands/AddHostCmd.java
	api/src/com/cloud/api/commands/CreatePodCmd.java
	api/src/com/cloud/api/commands/DeployVMCmd.java
	api/src/com/cloud/dc/Pod.java
	api/src/com/cloud/network/NetworkService.java
	server/src/com/cloud/agent/manager/AgentManagerImpl.java
	server/src/com/cloud/configuration/ConfigurationManagerImpl.java
	server/src/com/cloud/dc/HostPodVO.java
	server/src/com/cloud/network/NetworkManager.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	setup/db/create-schema.sql
	utils/src/com/cloud/utils/SerialVersionUID.java
2011-04-11 14:21:41 -07:00
nit debe236a8d bug 8710: CONTD....Introducing a new user role in cloudstack called RESOURCE_DOMAIN_ADMIN. The role would have all the domain_admin rights and the rights to list zone,pods,clusters and so on. More info in the bug 2011-04-11 19:40:37 +05:30
prachi b0b2d594a0 Bug 8018 - return cloud identifier in some instance metadata
There's an API call "getCloudIdentifier".  it returns some UUID that uniquely identifies a cloud.

This bug is to set the value of the instace metadata field cloud-identifier to "CloudStack-{result of getCloudIdentifier}.  This metadata is programmed into
the virtual router by the management server.
2011-04-08 10:50:12 -07:00
Kelven Yang 5bf6df3d6c bug 9328: always add explict route to domR 2011-04-05 17:21:24 -07:00
alena 0fdcba3f4f bug 8855: introduced search by zoneId to listLoadBalancerRules api. Also added "zoneId" parameter to the response
status 8855: resolved fixed
2011-04-05 14:38:47 -07:00
alena 9b4b0abcce bug 8959: fixed mac address generation for public ip addresses 2011-04-04 18:26:11 -07:00
alena c6b8c0ecfa bug 9305: set Mode field for domR/CPVM/SSVM nics
status 9305: resolved fixed
2011-04-04 17:51:53 -07:00
alena a47a4c8cfe bug 9272: fixed the race condition bug when we tried to remove vm from SG after it was expunged (expunge interval was really small, 60 sec).
status 9272: resolved fixed

When do search for vm, do includingRemoved search.
2011-04-04 15:47:14 -07:00
alena bf588166ed bug 7704: network limits cleanup.
status 7704: resolved fixed

For user vm:
* for default network, take limit from the corresponding service offering
* for all additional networks, take limit from the network offerings

For domainRouter/SSVM/CPVM:
* get info from the network offering

Added new config parameter: "vm.network.throttling.rate". If nw_rate is NULL for serviceOffering, this parameter would be used for default vm's network
2011-04-01 15:48:32 -07:00
alena bb31bc779f For VirtualRouter apply networkThrottling rate of the GuestNetworkOffering to both Guest and Public networks. 2011-03-30 14:49:15 -07:00
alena 7ce9845fb7 No need to check if user vm exists during static nat port range creation. We already do it when enableStaticNat for the ip address 2011-03-29 13:46:18 -07:00
alena 65a083b1db bug 8831: no need for "isdedicatedtodomain" and "dedicateddomainid" parameters. If 1) network is private, return account/domainId 2)If network is shared for specific domain, return domainId only 3) If network is shared in zone, don't return account/domainId
status 8831: resolved fixed
2011-03-28 16:54:09 -07:00
alena 5dec433529 bug 9188: remove all lb-vm DB mapping that are set with Revoke status after the LB rule is set on the backend
status 9188: resolved fixed
2011-03-28 15:48:11 -07:00
alena 5d195b35c2 bug 9186: removeFromLoadBalancer - set firewall rule state to Add when the last Vm-LB mapping is removed
status 9186: resolved fixed
2011-03-28 13:20:05 -07:00
alena 1932652125 bug 5912: Added events and logging for securityGroup create/delete
status 5912: resolved fixed
2011-03-25 15:23:18 -07:00
alena 237c57e74f bug 9146: createNetwork via 8096 - assume that network is domain specific when domainId is not null and isShared = true.
status 9146: resolved fixed
2011-03-24 16:04:12 -07:00
alena a2619b902f AssociateIPAddress - first IP associated with the network should always be a source nat 2011-03-24 14:25:20 -07:00
alena dee2e59fb3 bug 8798: delete zone is fixed
status 8798: resolved fixed
2011-03-24 13:32:31 -07:00
alena cced97c5fb ipAssoc - verify that ip owner is the same as the owner of the network we are assigning ip to 2011-03-24 13:32:31 -07:00
prachi 50244b79ab Zone check in createNetwork for Bug 6873 - disable/enable mode for clusters (and pods and zones and hosts) 2011-03-23 22:20:53 -07:00
prachi 923f562aa8 Bug 6873: disable/enable mode for clusters (and pods and zones and hosts)
- Added a new flag 'allocation_state' to zone,pod,cluster and host
- The possible values for this flag are 'Enabled' or 'Disabled'
- When a new zone,pod,cluster or host is added, allocation_state is 'Disabled' by default.
- For existing zone,pod,cluster or host, the state is 'Enabled'.
- All Add/Update/List  commands for each of zone,pod,cluster or host can now take a new parameter 'allocationstate'
- If 'allocation_state' is 'Disabled', Allocators skip that zone or pod or cluster or pod.
- For a root admin, ListZones lists all zones including the 'Disabled' zones. But for any other user, the 'Disabled' zones are not included in the response.
- For any usecase that creates/deploys/adds/registers a resource and takes in zone as parameter, now we check if the Zone is 'Disabled'. If yes then the operation cannot be performed by a user other than root-admin. Add volume, snapshot, templates are examples of this usecase.
- To enable the root admin to test a particular pod/cluster/host, deployVM command takes in 'host_id' parameter that can be passed in only by root admin.
If this parameter is passed in by the admin, allocators do not search for hosts and use that host only. StoragePools are searched in the cluster of that host.
If VM cannot be deployed to that host, allocators and deployVM fails without retrying
2011-03-23 22:15:35 -07:00
alena 404b288af4 Throw an exception when can't find network offering during zone creation 2011-03-22 14:06:14 -07:00
alena 718386a2b6 bug 8862: added updateNetwork api command. Can update name/displayText only 2011-03-22 11:26:56 -07:00
alena e9a10c53dc bug 8831: added 2 new parameters to create/listNetworks api: "isdedicatedtodomain" and "dedicateddomainid" 2011-03-22 10:17:08 -07:00
alena 7c1a6e4884 bug 8831: API/Management server part is done for "Dedicate Network to domain". UI part is left 2011-03-21 18:17:59 -07:00
anthony d0320896f3 fixed set_dhcp_entry issue, don't need to lock an router entry, start function will handle concurrent starting domr 2011-03-21 15:19:09 -07:00
alena abb2e2b2ff bug 8831: partial checkin for Domain specific Networks (includes DB changes) 2011-03-21 15:05:07 -07:00
anthony 8e741fb80d bug 9024:
two issues here:
1. in some case, two sequent commands are sent out at the same time.
2. before starting a user VM , make sure domr is up

status 9024: resolved fixed
2011-03-17 17:30:19 -07:00
alena 96e83fe97f bug 8146: Elastic IP support in Basic zone.
Following was done as a part of checkin:

1) NetworkOffering/Network:

* add PF service support for default Guest network offering.
* Add one more additional network - Public.
* Allow to enable external firewall in Basic zone.

2) Don't allow to deployVm in Public Network.
3) Allow to add vlan ip ranges to Public networks in Basic zone.
4) Associate IP - allow to associate with Direct vms.
5) Allow to create PF/Static nat rules. Rules are being sent to External Firewall Rule only.
6) Add PF support to External Firewall element.
2011-03-17 17:19:36 -07:00
alena 95faeb620e bug 8863: generate usage event when PF/LB/StaticNat rule is set with Revoke status, not when it's actually removed on the backend.
status 8863: resolved fixed
2011-03-16 09:41:50 -07:00
alena 82f25426e7 domR start: program vm metadata even when userData is NULL 2011-03-15 17:29:23 -07:00
alena d2f92f1c76 bug 8973: Create Virtual Guest network as a part of deployVm if corresponding networkOffering has availability=Required and no networkIds are specified
status 8973: resolved fixed
2011-03-15 15:06:52 -07:00
alena 68219eba31 Fixed create vlan range for Account - pick source nat ip address from account specific vlan 2011-03-15 10:23:40 -07:00
Frank ffb900fc86 Bug 8208 - bare metal provisioning
Add useExternalDhcp option to createPodCmd
2011-03-14 16:42:59 -07:00
alena 1cf735c537 bug 8968: use search criteria when list security group by id
status 8968: resolved fixed
2011-03-14 13:45:11 -07:00
alena 4423e4d174 bug 8867: cidr is required for Direct network creation; remove this limitation later after we allow Shared network to have multiple ip ranges having different Cidrs
status 8867: resolved fixed
2011-03-10 14:40:35 -08:00
alena 3448513465 bug 8666: perform RFC1918 check for cidr of Guest Virtual cidr when 1) Create/Update zone 2) Create guest virtual network
status 8666: resolved fixed
2011-03-10 14:06:43 -08:00
alena dee3aefecf bug 8508: assign source nat ip address only during network implementation.
status 8508: resolved fixed
2011-03-10 13:34:35 -08:00
alena e89fc252f2 bug 8851: Guest Virtual Network can't be shared
status 8851: resolved fixed
2011-03-10 10:35:52 -08:00
alena 37d9b5ab50 bug 8849: Don't allow create Guest Virtual and Direct shared networks in Security Group enabled zone
status 8849: resolved fixed
2011-03-09 18:17:01 -08:00
alena 4f4683ec93 bug 8937: throw an Exception when fail to reapply Firewall rules as a part of network Implement
status 8937: resolved fixed
2011-03-09 16:24:28 -08:00
Edison Su 670afd2331 bug 8875: add new management cidr configuration for vmware: if there are multiple management servers, each of them may talk to domR, so that means domR needs to know the routing to all the mgt servers.
status 8875: resolved fixed
2011-03-09 10:20:05 -05:00
Frank 6c819c1491 Merge branch 'bareMetal'
Conflicts:
	api/src/com/cloud/api/ApiConstants.java
	api/src/com/cloud/api/commands/DeployVMCmd.java
	api/src/com/cloud/offering/ServiceOffering.java
	api/src/com/cloud/vm/UserVmService.java
	client/tomcatconf/components.xml.in
	server/src/com/cloud/agent/manager/AgentManagerImpl.java
	server/src/com/cloud/configuration/DefaultComponentLibrary.java
	server/src/com/cloud/deploy/FirstFitPlanner.java
	server/src/com/cloud/service/ServiceOfferingVO.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	server/src/com/cloud/vm/VirtualMachineManagerImpl.java
2011-03-08 14:18:11 -08:00
alena 5842392ec1 bug 8146: Multiple network case (default network is Virtual) - for Direct networks dhcp servers set dns to the eth0 ip address of the domR belonging to virtualNetwork
bug 8146: resolved fixed
2011-03-07 19:56:25 -08:00
alena b20fafeaa4 bug 8874: rebootVm - don't try to implement already implemented network
status 8874: resolved fixed
2011-03-07 10:23:48 -08:00
alena 94fb0612f2 Fixed DB upgrade script - vm_type field can be NULL
Conflicts:

	server/src/com/cloud/network/NetworkManagerImpl.java
2011-03-05 10:37:57 -08:00
Alex Huang 40db230095 more changes for db upgrade 2011-03-04 11:09:24 -08:00
Edison Su 8eaa53f282 fix transaction rollback in security group listener, which cause state machine update failed 2011-03-04 10:58:24 -05:00
alena 715a929e91 Separate createVm methods for 1) vm in Basic zone 2) Vm with SecurityGroup in Advanced zone 3) Vm without SecurityGroup in AdvancedZone 2011-03-03 16:13:00 -08:00
Edison Su 9ad5139fda fix delete security group rule 2011-03-03 13:44:48 -05:00
alena 1025f16940 bug 8819: Don't allow upgrade system network offerings
status 8819: resolved fixed
2011-03-02 15:55:36 -08:00
alena b3ff533244 bug 8795: start domR after corresponding network is shutdown - implement network before starting the domR
status 8795: resolved fixed

Conflicts:

	api/src/com/cloud/deploy/DeployDestination.java
2011-03-02 13:46:57 -08:00
alena d764bf245b Throw an error when fail to configure one of the nics for multiNic user Vm 2011-03-01 18:07:49 -08:00
alena a8e70cf9b4 bug 8763: Fixed account cleanup process - don't destroy networks when vm expunge failed
status 8763: resolved fixed

Conflicts:

	server/src/com/cloud/user/AccountManagerImpl.java
2011-03-01 14:25:09 -08:00