Commit Graph

69 Commits

Author SHA1 Message Date
Sheng Yang 6948902b75 S2S VPN: CS-15748: Deleting customer vpn gateway when delete account 2012-07-30 15:16:17 -07:00
Sheng Yang 65ef8b24c1 CS-15730: Prohibit create VPN connection from different gateway to same customer gateway 2012-07-27 17:41:22 -07:00
Sheng Yang 260422de07 CS-15704: Fix wrong domain id setting of non-root domain 2012-07-27 15:31:52 -07:00
Sheng Yang cc35ea2be3 S2S VPN: CS-15650: Add connection status update to s2s vpn 2012-07-25 22:00:40 -07:00
Sheng Yang 517c9af7c9 S2S VPN: Add list function for normal users 2012-07-25 18:59:49 -07:00
Vijayendra Bhamidipati a0fa53ecd8 CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
Description:

	Removing more DB IDs from exception messages.
2012-07-25 18:39:48 -04:00
Sheng Yang c4dff1e204 CS-15670: Allow normal users to configure S2S VPN 2012-07-24 19:44:27 -07:00
Sheng Yang eeaee286a1 S2S VPN: Fix incorrect conn returned by resetVpnConnection cmd 2012-07-24 13:02:29 -07:00
Sheng Yang f1dbdedfa9 S2S VPN: Add name field for customer gateway
Easier for user to identify the correct gateway
2012-07-24 13:02:24 -07:00
Sheng Yang 4dddd76e95 CS-15534: Mark VPN connection as Disconnected when rebootRouter 2012-07-23 21:07:49 -07:00
Sheng Yang 3dca5a8689 CS-15615: Fix Site2SiteVpnService injection 2012-07-18 09:58:14 -07:00
Sheng Yang d2643c0fdf CS-15574: Delete VPN gateway and connection when deleting VPC 2012-07-17 18:06:15 -07:00
Sheng Yang c36de737db S2S VPN: Use source NAT ip address for VPN gateway 2012-07-17 17:22:00 -07:00
Alena Prokharchyk 7e73ae8e74 VPC: CS-15553 and CS-15549 - more checks during automatic ip assoc to VPC network 2012-07-12 10:04:39 -07:00
Sheng Yang 6582882666 S2S VPN: Add domain and account for VPN
Admin can add VPN connection for others
2012-07-10 18:55:08 -07:00
Sheng Yang 37a0ef7375 CS-15512: Fix delete vpn connection 2012-07-10 14:47:27 -07:00
Sheng Yang 8212de6f94 CS-15513: Fix group 5 of s2s vpn 2012-07-10 10:31:25 -07:00
Sheng Yang a0a5e25e32 CS-15456: Prohibit creating more than one VPN gateway of VPC 2012-07-05 15:45:21 -07:00
Sheng Yang c5cdd6947f CS-6840: Fix 0 id returned by createVpnConnection 2012-07-02 16:15:43 -07:00
Sheng Yang 618d2541c8 CS-6840: Add status checking for site 2 site VPN 2012-06-29 18:58:52 -07:00
Sheng Yang 66a918f51a CS-6840: List all objects without require parameter 2012-06-28 15:25:15 -07:00
Sheng Yang 23c96451a7 CS-6840: Add hypervisor commands for site-to-site vpn 2012-06-27 19:06:32 -07:00
Sheng Yang 8670b703d2 CS-6840: Add Site2SiteVpnServiceProvider 2012-06-27 19:05:48 -07:00
Sheng Yang 52e80e5fb0 CS-6840: Add commands for site-to-site vpn 2012-06-27 19:05:41 -07:00
Alena Prokharchyk a65655e559 VPC: as there is no support for FirewallRules/remoteAccessVPN in the VPC, removed the networkId from the list of parameters for corresponding api calls 2012-06-27 14:09:33 -07:00
Alena Prokharchyk 84a4a7c1c8 VPC: update ip address object after the ip is associated with the network 2012-06-25 16:26:19 -07:00
Alena Prokharchyk ddae550a55 AssociateIpAddress to VPC - the ip gets associated to the network only when the first rule for the ip gets created.
When the last rule is removed for vpc ip, networkId is set to null
2012-05-30 19:46:40 -07:00
frank 72d284de7d Switch to Apache license 2012-04-03 04:54:14 -07:00
kishan dcf96fe0c8 Bug 13802: Log VPN user remove usage event when user fails to get applied
Status 13802: resolved fixed
Reviewed-By: Nitin
2012-02-17 17:35:59 +05:30
kishan 17659d1500 Bug 12972: Added VPN_USER_REMOVE usage events when VPN is disabled. VPN_USER_ADD events added when VPN is enabled again. VPN usage will be generated only when VPN is enabled.
Status 12972: resolved fixed
Reviewed-By: Nitin
2012-02-08 19:57:08 +05:30
Alena Prokharchyk cad392cd68 bug 13335: fixed listProjectInvitations by projectId
status 13335: resolved fixed
2012-02-07 13:16:27 -08:00
Alena Prokharchyk 83400cd15f bug 12776: if there are multiple objects involved in resource creation, verify that they belong to the same account
status 12776: resolved fixed
2012-01-17 13:40:37 -08:00
Alena Prokharchyk f0c4980dff bug 13110: use Ternary data structure when build search criteria
status 13110: resolved fixed
2012-01-16 14:15:28 -08:00
Alena Prokharchyk c581506103 bug 12306: list* command revamp 2012-01-09 10:07:42 -08:00
Sheng Yang 89ca2fe48e bug 12656: Add restriction for network update and new rules
status 12656: resolved fixed
2012-01-05 21:08:41 -08:00
Alena Prokharchyk 1871de3048 bug 11853: better error message when try to add VPN user with duplicated user name
status 11853: resolved fixed
2011-11-18 15:49:18 -08:00
Alex Huang f6fcaa49ec Merge complete except for virtualnetworkappliancemanager 2011-11-10 15:18:16 -08:00
kishan 606779b300 bug 11851: When Add VPN user fails, remove the user entry from db instead of leaving in Add state.
status 11851: resolved fixed
reviewed-by: Abhi
2011-11-08 15:56:16 +05:30
alena 3a845d2d75 Keep Service/Provider map per network as well as per networkOffering (to handle the case when there are multiple providers defined for the same service in the network offering, and only one is picked when the network is created) 2011-11-07 16:16:03 -08:00
alena 17a7b7cda4 listNetworkOfferings: added an ability to filter based on the Services supported 2011-11-07 10:53:28 -08:00
kishan f40dcbd82e bug 11851: While adding new Vpn user, exisitng users state will remain as Active and still be re-added
status 11851: resolved fixed
2011-11-04 13:58:14 +05:30
kishan 18ef8ca3b4 bug 11173: Added usage for VPN users
status 11173: resolved fixed
2011-11-01 17:01:48 +05:30
alena f6717e0a23 1) Method name change
2) Rely on SourceNatService when decide if DirectNetworkGuru and GuestNetworkGuru should handle the network
2011-10-24 17:30:14 -07:00
Sheng Yang 0121c0516d Network: Add Service providers
In the past, the NetworkElement would cover almost all the functionality that
e.g.  virtual router can cover: firewall, source NAT, static NAT, password,
VPN... So anyone want to implement the NetworkElement would have to implement
these service's specific methods, even it wouldn't support it. Also, if we want
to find a e.g. FirewallServiceProvider, we have to proceed all the current
network service providers, to call a method to know if it support such service.
That's neither elegant nor scaling way to do it.

As the first step, this patch separates each ServiceProvider from NetworkElement
(there are some interface already out of NetworkElement, so this patch slightly
modifies them too), and only the class would implement the correlated interface, would
have the ability to do these services.
2011-10-10 11:45:39 -07:00
alena 25c2734e03 More stuff to Projects feature - added support for adding resources (vms, templates, isos) to the project 2011-10-05 13:24:25 -07:00
alena 4d89066b2c bug 11515: reapply all firewall rules for the IP address when VPN related rules are being revoked
status 11515: resolved fixed

Reviewed-by: will@cloud.com
2011-09-21 09:50:32 -07:00
alena a1331d1cfc Intermidiate checkin to Project feature:
1) Introduce new managers - ProjectManager and DomainManager. Moved all domain related code from AccountManager to DomainManager.
2) Moved some code from ManagementServerImpl to the correct managers.
3) New resource limit for Domain - Project
2011-09-20 18:35:28 -07:00
alena 8c53dbcdd7 bug 11185: support multiple CIDR on overlapping port ranges for firewall rules
status 11185: resolved fixed

Conflicts:

	server/src/com/cloud/network/firewall/FirewallManagerImpl.java

Conflicts:

	api/src/com/cloud/network/firewall/FirewallService.java
	server/src/com/cloud/network/firewall/FirewallManagerImpl.java
	server/src/com/cloud/network/lb/LoadBalancingRulesManagerImpl.java
	server/src/com/cloud/network/rules/RulesManagerImpl.java
2011-08-25 12:21:11 -07:00
alena e3f179844e bug 11236: domainAdmin/regularUser can edit/delete/copy/extract Public template/iso only if it was created by them. They still can use/see public template/iso when execute list/deploy/attachIso commands. Root admin can operate with other people templates w/o any restrictions.
status 11236: resolved fixed
2011-08-24 14:48:35 -07:00
alena 803255b0ba bug 11029: db upgrade from 2.2.9 to 2.2.10 includes firewall_rule upgrade now
status 11029: resolved fixed

Commit also includes the following:

* map firewall rule to pf/lb/staticNat/vpn when the firewall rule is created as a part of pf/lb/staticNat/vpn rule creation
* when delete firewall rules, also delete related firewall rule
2011-08-15 10:18:09 -07:00