Commit Graph

25 Commits

Author SHA1 Message Date
Jayapal 7703b2fab3 CLOUDSTACK-7092: Disabled icmp redirects in VR
(cherry picked from commit e0d4af5062)
2014-07-15 22:13:32 +02:00
Jayapal d5a92454fd CLOUDSTACK-7028: Fixed adding route for additional public nic on fail over
(cherry picked from commit e336796cd5)
2014-07-01 14:36:27 +02:00
Jayapal d4a903fd6e CLOUDSTACK-6997: Increase proc ip_conntrack_max
(cherry picked from commit 004d616322)
2014-06-30 19:52:42 +02:00
Sheng Yang 1369a0dacb CLOUDSTACK-6908: Enable IPv6 in sysctl when only necessary
This new way would only enable IPv6 when VR is created in IPv6 shared network.
Otherwise IPv6 sysctl options remain disable.

(cherry picked from commit 60e4629323)
2014-06-14 02:31:55 +02:00
Joris van Lieshout f26b6d0a78 Cosmetic fixed. three in total. 1. Only run hv_kvp_daemon if it exists. 2. add the -f argument to the rm to make is silent if it doesn't exist. 3. by using log_action_msg instead of log_action_begin_msg the screen output looks way better.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 66816827cb)
2014-06-12 14:58:24 +02:00
Joris van Lieshout 8ff5ca0b2f If for some reason dnsmasq.log does not exist anymore logrotate will create it with nobody as owner. This will prevent dnsmasq deamon from logging to that file.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit c54ce3cafb)
(cherry picked from commit 94bb5c29b2)
2014-06-10 16:28:51 +02:00
Daan Hoogland 4262080ba4 rats
(cherry picked from commit b85dd956f8)

(cherry picked from commit 5eb0265349)
2014-06-10 16:28:41 +02:00
Joris van Lieshout 3394d3c4f5 blacklist pcspkr as cosmetic improvement. aesni_intel blacklisting was not working because the include only works if the file ends with .conf.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 11f532bbec)
(cherry picked from commit f94ff4ad04)
2014-06-10 16:28:34 +02:00
Saurav Lahiri d298546ccc CLOUDSTACK-6328: run.sh check if an existing java process is running, before spawining new ones
Signed-off-by: Jayapal <jayapal@apache.org>
2014-05-27 10:42:23 +02:00
Sheng Yang dcb0db6084 CLOUDSTACK-6434: Make RvR advert_int configurable
In some network environment, 1*3 seconds by default make RvR setup too
sensitive. A configurable parameter would be better for fitting different
network environments.
2014-04-16 20:15:56 -07:00
Sheng Yang 94a146a43e CLOUDSTACK-6432: Blocking DHCP server to service DNS outside network
This would cover only DHCP only network since in basic and shared network, the
private IP used by VR and network may expose to outside.
2014-04-16 19:12:59 -07:00
Marcus Sorensen b89765ab19 Ensure that min_free_kbytes in secstorage vm is set such that heavy nfs load will not cause page allocation failures 2014-04-14 00:02:22 -06:00
Marcus Sorensen df4a21ae3d add conntrackd logrotate for systemvms, dont start conntrackd on logrotate if it isnt running 2014-04-05 00:34:09 -06:00
Sheng Yang 8937434fce CLOUDSTACK-5986: Fix dnsmasq lease for VPC 2014-03-11 16:14:33 -07:00
Rajesh Battala 540d020aa5 CLOUDSTACK-6179 Execute VR commands on Virtual Resource when commands received to Hyper-V 2014-03-11 13:10:13 +05:30
Joris van Lieshout 986813d973 Prevent DHCPACK for DHCPINFORM in the DHCP server
The orignal "dhcp-range=xxx,static" would only prohibit DHCPREQUEST from unknown
hosts, but not DHCPINFORM which can request routing information. This caused
trouble for some bridged networks outside CloudStack.

This patch would fix the issue, prevent dnsmasq from acking any unknown request.

Signed-off-by: Sheng Yang <sheng.yang@citrix.com>
2014-02-25 14:55:24 -08:00
Sheng Yang 66989a9364 CLOUDSTACK-6018: Increase dnsmasq dhcp-lease-max to 2100
Would able to accomodate one /21 network then.
2014-02-03 14:52:42 -08:00
Sheng Yang 121d88743a CLOUDSTACK-5986: Make dnsmasq handle dnsmasq.leases when dhcp_release is available
The original issue has been exposed due to CloudStack VR would modify the
dnsmasq.leases, thus make it unsync with dnsmasq's memory lease.

Make the modification to let dnsmasq handle the lease file if dhcp_release is
available.
2014-01-29 18:02:11 -08:00
Rajesh Battala 7ac48934f7 CLOUDSTACK-5821 systemvmiso is locked by systevmvm in hyperv 2014-01-28 07:03:08 +05:30
Rajesh Battala 238eda30ae CLOUDSTACK-5592 ssh should run on eth1 interface in ssvm/cpvm running in HyperV 2013-12-27 14:57:52 +05:30
Sheng Yang e54d1dec9d CLOUDSTACK-5533: Disable VR's DNS functionality if user choose to use external dns
Also fix the regression that external dns won't be used if "dns" service in the
network offering is unset.
2013-12-17 16:06:58 -08:00
Hugo Trippaers 479f404aea Fix several rat issues introduced by recent commits 2013-11-04 20:14:46 +01:00
Rajesh Battala 989c6e6914 Modified cloud-early-config to configure, when the VR boots up in HyperV Environment
Implemented commands that are required for VR to bootup and Vm deployment to work
Modified hyperv agent code, to deploy VR with Boot Args, boot args passed to VR using KVP Exchange Component.
Fix for VR to boot up and get configured with boot args, Fixed issue in VolumeOrchestrator
Implemented SetFirewallRulesCommand in HyperV Resource
Implemented VR network commands to provide the necessary services from VR
Fixed hyperv localstorage path encode url issue. encode is converting space to '+'
2013-11-04 18:48:53 +05:30
Sheng Yang 85dc65c7f7 CLOUDSTACK-4786: Reset Redundant Router priority after all the routers are stopped
This patch would reset the priority in such condition:
1. All redundant routers are stopped, e.g. due to network GC
2. User start one VM in the network
3. The routers would be brought up with reseted priority(100 & 99).

This would resolve the issue of network GC result in lower limit of redundant router priority reached.
2013-10-17 20:00:48 -07:00
Hugo Trippaers 6c26104282 Move the system vm to a separate maven project.
All (almost) files belonging to the systemvm aer now centralize in the systemvm directory. The code for the separate functions is still in the services directory. This will make the code easier to understand and makes it clear that the systemvm is a separate item. It alos means that it can be excluded from the build entirely by not adding the systemvm profile, this will speed up the compiles somewhat.
2013-09-20 18:31:02 +08:00