Commit Graph

6999 Commits

Author SHA1 Message Date
Chiradeep Vittal 5bd0ffa80a bug 11103: create firewall chains on ipassoc
status 11103: resolved fixed
bug 11106: this is somehow fixed / cannot reproduced
status 11106: resolved fixed
2011-08-12 17:47:16 -07:00
alena 78849c2959 Revert "fix NPE when listvolume if vm got destroyed"
This reverts commit 9bdaa9d967a6390cc1655ce7344d5af474890e4c.
2011-08-12 17:27:08 -07:00
alena 4a3635ee34 Remove firewall rule along with pf/staticNat/lb rule if the pf/staticNat/lb failed to create due to network rule conflict 2011-08-12 16:19:36 -07:00
Jessica Wang ecf9c37f7e bug 11108: cloudStack - IP Address page - Port Range tab - Create Port Range row - Make "Add" link under actions column instead of state column. 2011-08-12 16:14:35 -07:00
Jessica Wang 6fb2c6ca43 bug 10977: cloudStack - instance page - limit "Migrate Instance" action to be only available for XenServer and VMware (because KVM does not support Migrate Instance). 2011-08-12 15:37:13 -07:00
Jessica Wang 989d862c57 bug 10977: cloudStack - instance page - provide "Migrate Instance" action to all hypervisors. 2011-08-12 15:37:12 -07:00
Edison Su 1ee9afd8df fix NPE when listvolume if vm got destroyed 2011-08-12 14:41:23 -07:00
alena 671b360df7 Resend firewall rules on domR restart 2011-08-12 12:39:09 -07:00
anthony d32ca5ae45 revert pool vm sync to host vm sync in startupcommand in 2.2.10.
then XenServer upgrade is supported in 2.2.10
2011-08-12 10:59:53 -07:00
Murali Reddy ba9a127d3e bug 10923: changes for snapshot command to carry primary storage pool path 2011-08-12 17:30:01 +05:30
Nitin e7a199e253 bug 11096: ExtractTemplate - For private template choose the correct sec storage host id since its not present in all the sec storage now. 2011-08-12 14:46:12 +05:30
Naredula Janardhana Reddy 00dbaf0954 bug 10561: allowing to create a firewall rule with sameport range but different protocols 2011-08-12 12:54:41 +05:30
Sheng Yang c30faf8b53 bug 11083: Fix broadcast address is 0.0.0.0
The reason is:
1. In redundant router, we won't enable eth2(public network interface) until
keepalived determine the router is MASTER.
2. ipassoc.sh normally kick in before keepalived process running. And it would
set eth2's IP address using "ip addr add $dev $ip"
3. "ip addr add $dev $ip" won't add mask for the device, then there is no way to
update broadcast address for eth2. Then broadcast address is 0.0.0.0.
4. As long as "ip addr add $dev $ip" executed, later executed "ifconfig $dev $ip
netmask $mask" won't calculated the broadcast address from $ip and $mask.

To fix this, we enable and configure eth2 temporaily when cloud-early-config
executed, then disable eth2 interface. By this way, broadcast address of should
be calculated and set correctly.

status 11083: resolved fixed
2011-08-12 00:04:57 -07:00
Sheng Yang b560880907 Add alert and log for redundant router state change 2011-08-11 23:36:31 -07:00
Chiradeep Vittal 34ffbdfceb bug 11084: ensure AH and ESP protocols are allowed in when creating a VPN 2011-08-11 18:24:02 -07:00
alena 4530d35bc5 bug 11029: db upgrade from 2.2.9 to 2.2.10 includes firewall_rule upgrade now
status 11029: resolved fixed

Commit also includes the following:

* map firewall rule to pf/lb/staticNat/vpn when the firewall rule is created as a part of pf/lb/staticNat/vpn rule creation
* when delete firewall rules, also delete related firewall rule
2011-08-11 18:09:08 -07:00
Kelven Yang a3ad26ed89 Disable HA in CloudStack HA manager under VMware 2011-08-11 18:07:57 -07:00
Sheng Yang 0387b6e802 Redundant router script fix, also fix CheckRouterTask 2011-08-11 17:56:28 -07:00
Chiradeep Vittal e4092e8084 do not release ip for advanced networking / regular LB usage 2011-08-11 17:44:03 -07:00
Jessica Wang e3b35e8d95 bug 10843: cloudStack - Instance page - statistics tab - show "N/A" when NetworkRead/NetworkWrite is null or equal to zero. 2011-08-11 16:26:47 -07:00
Jessica Wang 1205206ed2 bug 10843: cloudStack - Instance page - statistics tab - show "N/A" when NetworkRead/NetworkWrite is equal to zero. (2) 2011-08-11 16:11:59 -07:00
alena 5080e8ba33 No need to apply static nat for ip which is not static nat enabled 2011-08-11 16:00:16 -07:00
Jessica Wang 4d86929eb5 bug 10843: cloudStack - Instance page - statistics tab - show "N/A" when NetworkRead/NetworkWrite is equal to zero. 2011-08-11 15:42:38 -07:00
Jessica Wang edcc962a3b bug 8053: cloudStack - volume page - hide Download Volume action for volume whose state is Allocated (newly created volume). 2011-08-11 15:23:44 -07:00
Sheng Yang a935e52b62 Ifdown may not bring interface down if ifup not run
Use ifconfig to bring it down
2011-08-11 15:00:43 -07:00
Jessica Wang 45a927b3d5 bug 11070: cloudStack - delete cluster/host/network/pod/primaryStorage/secondaryStorage/zone - fix a bug that an API error showed after account was deleted ("listxxxxxxx&id=N") 2011-08-11 14:52:04 -07:00
Chiradeep Vittal f91d173511 bug 10561: handle icmp (finally\!) 2011-08-11 14:36:41 -07:00
Sheng Yang 95cc2d6381 Use ifup/ifdown for redundant router 2011-08-11 14:29:49 -07:00
Sheng Yang b63b3fcf05 Skip the null Host for CheckRouterTask 2011-08-11 14:29:49 -07:00
Jessica Wang 0fcd364412 bug 11070: cloudStack - delete diskOffering/serviceOffering - fix a bug that an API error showed after account was deleted ("listxxxxxxx&id=N") 2011-08-11 14:29:23 -07:00
Kelven Yang 9e1ee30ea3 bug 11019: Let VM sync to coordinate with possible VM-relocation under VMware when VM is in starting time 2011-08-11 14:28:39 -07:00
Jessica Wang ac62f290d3 bug 11070: cloudStack - delete domain/IPAddress/SecurityGroup/snapshot/volume - fix a bug that an API error showed after account was deleted ("listxxxxxxx&id=N") 2011-08-11 14:24:08 -07:00
alena 10034bc196 Fixed rule validation for static nat rules 2011-08-11 14:03:49 -07:00
Jessica Wang a73c6edcb9 cloudStack - IP Address page - take "firewallRuleUiEnabled" from listcapabilitiesresponse to determine to show/hide network tab. 2011-08-11 13:45:55 -07:00
Chiradeep Vittal 9083bbcb47 bug 11084: enable firewall ports for vpn by default 2011-08-11 13:30:24 -07:00
Jessica Wang aea70fab01 cloudStack - IP Address page - hide network tab for system-owned IP. 2011-08-11 13:11:10 -07:00
Sheng Yang f28291cedb Fix redundant router switch back to single router
The existed redundant router network didn't change.
2011-08-11 12:48:56 -07:00
Chiradeep Vittal 88a1c69413 bug 10561: get static nat working 2011-08-11 12:41:21 -07:00
Jessica Wang aa1e09224d cloudStack - IP Address page - for elasticLB-basicZone, do not open firewall when creating load balancer rule and IP. 2011-08-11 11:57:46 -07:00
keshav d47eb46faf Added parameter to enable the firewall rule UI to the list capabilities API. 2011-08-11 11:42:02 -07:00
Chiradeep Vittal d1ec7e759b remove cruft 2011-08-11 11:26:45 -07:00
Chiradeep Vittal d54c3dab57 fix firewall script. FIXME: make this 2 different scripts 2011-08-11 11:26:45 -07:00
alena 477e5d6389 bug 10561: reapply static nat on the backend as a part of domR restart and network restart 2011-08-11 11:19:09 -07:00
Jessica Wang 0504832425 bug 11070: cloudStack - delete account - fix a bug that an API error showed after account was deleted ("listAccounts&id=N") 2011-08-11 11:01:45 -07:00
Sheng Yang 8b405e477c Fix sometime system VM is up but mgmt server can't reach it 2011-08-11 10:57:05 -07:00
Alex Huang 1079a77024 bug 11043: rverted the bad fix 2011-08-11 10:27:02 -07:00
alena 278f2a401f bug 10561: intermediate checkin for enable/disableStaticNat.
1) On enableStaticNat command we actually send the command to the backend (we used to just upgrade the DB in the past). The backend command carries sourceIp and destIp, and creates IP to IP mapping on the domR.
2) On disableStaticNat for the Ip address in addition to cleaning up port ranges, we also delete IP to IP mapping on the domR.
2011-08-11 10:19:22 -07:00
Naredula Janardhana Reddy 7c2395e684 bug 10561: fix: last entry in the firewall rules unable to delete 2011-08-11 19:01:36 +05:30
Naredula Janardhana Reddy 699b197a3c bug 10561: changes to the create/delete firewall rule backend script:
1) changes to the return value
    2) added a FIXME to one the leak.
2011-08-11 16:53:18 +05:30
Chiradeep Vittal 35e67bbfdf bug 10561: ensure outgoing connections work 2011-08-10 23:16:04 -07:00