Commit Graph

52 Commits

Author SHA1 Message Date
Alena Prokharchyk 44ae760257 VPC: CS-15850 - don't unplug the nic for public network when there are existing ips in the same vlan having network rules 2012-08-06 17:37:16 -07:00
Alena Prokharchyk ddb9e498f7 VPC: unittest preparation 2012-08-06 16:31:32 -07:00
Alena Prokharchyk da9bd84e09 VPC: more validation for static route rules: 1) Can't belong to guest cidr defined on Vpc 2) Can't belong to link local cidr 2012-08-03 15:32:27 -07:00
Alena Prokharchyk 0b2b021f18 VPC: CS-15812 - fixed listVPCs by projectId 2012-08-03 14:08:26 -07:00
Vijayendra Bhamidipati 6dc833c771 CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
Description:

	Missed throwing exceptions at few places when making
	changes previously. Commit includes whitespace corrections.
2012-08-03 13:24:18 -07:00
Alena Prokharchyk 863bce0171 VPC: createPrivateGateway - added cleanup part happening in case when the gateway fails to be applied on the backend 2012-08-02 17:57:43 -07:00
Alena Prokharchyk f47d3f7b59 VPC: CS-15805 - verify vpc guest network cidr only against networks in the same vpc 2012-08-01 17:59:36 -07:00
Alena Prokharchyk 41655c0395 VPC: CS-15811 - removed Netscaler from the list of supported providers in VPC 2012-08-01 16:47:05 -07:00
Alena Prokharchyk f80bfb35f5 VPC: CS-15798 - added vpc resource limit. Check vpc functional spec for more details:
http://wiki.cloudstack.org/display/RelOps/Inter-VLAN+Routing+functional+spec
2012-08-01 16:19:30 -07:00
Alena Prokharchyk 21f2d1b779 VPC: moved vpc related code from NetworkManager to VpcManager 2012-07-31 16:58:14 -07:00
Alena Prokharchyk 6826dd16b5 VPC: reduced visability for some vpc related methods 2012-07-31 14:30:59 -07:00
Vijayendra Bhamidipati 62c11df4e9 CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
Description:

	1) With this commit in the series for this bug,
	removed all occurrances of db IDs being passed
	when raising InvalidParameterValueException.

	2) Renamed HyervisorTemplateAdapter.java to
	HypervisorTemplateAdapter.java.
2012-07-27 15:08:48 -07:00
Alena Prokharchyk 5eb87e99ff VPC: added global configuration for limiting number of networks per vpc (vpc.max.networks) 2012-07-26 14:05:56 -07:00
Alena Prokharchyk 20b6b36302 VPC:
1) CS-15692 - ipAddress is always null for NetworkACL rule
2) CS-15699 - redundant router = true when provider is VirtualRouter
3) CS-15701 - fixed error message
2012-07-26 10:15:35 -07:00
Alena Prokharchyk c0fb2fece9 VPC: CS-15638: Plug nic for the public ip address if the ip address from the diff vlan range than sourceNat ip 2012-07-20 13:25:09 -07:00
Sheng Yang d2643c0fdf CS-15574: Delete VPN gateway and connection when deleting VPC 2012-07-17 18:06:15 -07:00
Sheng Yang c36de737db S2S VPN: Use source NAT ip address for VPN gateway 2012-07-17 17:22:00 -07:00
anthony 2557315a5a VPC: CS-15580 - don't allow gateway for VPC guest network to be equal to the cidr broadcast ip 2012-07-13 18:20:30 -07:00
Alena Prokharchyk b145029718 VPC: CS-15580 - don't allow gateway for VPC guest network to be equal to the cidr subnet 2012-07-13 17:06:10 -07:00
Vijayendra Bhamidipati 05c910ca5c CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
Description:

	Removing DB IDs from exception messages.
2012-07-11 20:57:09 -07:00
Alena Prokharchyk fcd9c0c368 VPC: CS-15550 - fixed listVPCs by cidr 2012-07-11 19:10:48 -07:00
Alena Prokharchyk 9fe68fc4a9 VPC: mark gateway with Deleting state when all static routes are gone 2012-07-11 15:48:29 -07:00
Alena Prokharchyk a0a0113b51 VPC: fixed listStaticRoutes when search by gatewayId 2012-07-11 14:51:19 -07:00
Alena Prokharchyk c44af15cd6 VPC: added State to vpc_gateways 2012-07-11 11:53:30 -07:00
Alena Prokharchyk 1657486f41 VPC: added vpc_id to private_ip_address table to indicate which vpc the ip belongs to 2012-07-09 13:00:03 -07:00
Sheng Yang 987cf9bc93 CS-15447: Don't enable s2s vpn when provider is disabled 2012-07-06 15:08:26 -07:00
Alena Prokharchyk f9d512f163 ResourceTags: resourcetags support for Project/Vpc/NetworkACL/StaticRoute 2012-07-05 17:33:20 -07:00
Alena Prokharchyk 24023fd14d VPC: don't allow vpcs for the same account with overlapping cidrs 2012-07-05 15:20:44 -07:00
Alena Prokharchyk 2699e2c508 VPC: CS-15447 - fail vpc creation when vpc provider is not enabled at least in one physical network in the target zone 2012-07-05 13:34:34 -07:00
Alena Prokharchyk 481f59df3b VPC: multiple fixes:
* Separate service for NetworkACL - "NetworkACL" service
* allow having just one network supporting LB in the VPC
* perform check against VPC when upgrade network to the new network offering (the same set of checks when you add new network to the VPC)
2012-07-02 14:14:34 -07:00
Alena Prokharchyk 49d8b650e9 VPC: listPrivateGateways command is available for regular user too (he needs to know the gatewayId for the static route creation) 2012-06-29 15:17:17 -07:00
Alena Prokharchyk e6383fc845 VPC: when add guest network to VPC, verify that the list of network services is within the list of services supported by VPC offering 2012-06-28 17:13:39 -07:00
Alena Prokharchyk 90b96642a7 Static route can be created for generic VpcGateway now, not just Private gateway 2012-06-28 13:14:54 -07:00
Alena Prokharchyk bc9b23dfcd VPC: implemented vpc cleanup thread that cleans up Inactive VPCs (that were failed to delete) 2012-06-27 15:12:56 -07:00
Alena Prokharchyk 9936e9b731 VPC: 1) Don't allow to delete private gateway when it has static routes assigned. Routes have to be removed first.
2) Re-apply static routes as a part of VPC VR start
2012-06-26 15:14:29 -07:00
Alena Prokharchyk 8a7e525aa9 VPC: fixed getEntityOwnerId() in AssociateIpAddress command to return vpc owner if vpcId is passed in. Added action events for create/delete privateGateway/staticRoutes 2012-06-26 14:08:13 -07:00
Alena Prokharchyk 9d88781e8c VPC: implementation for Add/delete/list StaticRoute. Agent implementation is yet to be done 2012-06-26 11:11:26 -07:00
Alena Prokharchyk a539c6e824 VPC: intermidiate checkin to Static Routes 2012-06-25 18:08:19 -07:00
Alena Prokharchyk 515340b5e3 VPC: listPrivateGateways API implementation 2012-06-25 10:12:10 -07:00
Alena Prokharchyk ba7fddac3b VPC: implemented add/delete Private gateway 2012-06-22 15:06:58 -07:00
anthony 3b2b8fc143 VPC: fix VPC cidr check 2012-06-18 11:40:59 -07:00
Alena Prokharchyk 3b943d84dd Fixed addDhcpEntry/userdata/password in VPC setup 2012-06-11 13:37:38 -07:00
Alena Prokharchyk ddae550a55 AssociateIpAddress to VPC - the ip gets associated to the network only when the first rule for the ip gets created.
When the last rule is removed for vpc ip, networkId is set to null
2012-05-30 19:46:40 -07:00
Alena Prokharchyk a7c8354c7b Destroy VPC if it fails to start during the deployment 2012-05-29 10:36:46 -07:00
Alena Prokharchyk d3b1925e55 1) Added VPC restart support - new api command RestartVPC. The purpose of the call is to shutdown and start VPC including VPCVirtualRouter restart, rules re-implement, etc
2) Only networks created from offerings with conserveMode=false, can participate in VPC
2012-05-25 15:34:51 -07:00
Alena Prokharchyk fbdf10bac7 1) Added search by vpcId to listRouters/listNetworks Apis
2) Don't allow to add new networks/implement existing ones for VPC in Disabled state. Disabled state indicates that there was unsuccessful attempt to remove the VPC, and the further cleanup will be taken care of by cleanup thread.
2012-05-25 14:16:23 -07:00
Alena Prokharchyk d7f0689bcb Support for delete VPC 2012-05-24 16:12:45 -07:00
Alena Prokharchyk 2014cb0feb Plug nic support 2012-05-23 16:18:41 -07:00
Alena Prokharchyk 9fb9149c99 1) Added new element - VpcVirtualRouterElement. Extends VirtualRouter + has plug/unplug nics support
2) Added services api support for plugging/unplugging the nics to VpcElement
2012-05-22 16:53:27 -07:00
Alena Prokharchyk 1fab93a8fb Start Virtual Router as a part of VPC start 2012-05-21 17:37:47 -07:00