Commit Graph

400 Commits

Author SHA1 Message Date
Chip Childers 8bb7226397 Modified references to 4.0.0 to 4.0.0-incubating 2012-10-09 20:22:59 -04:00
Anthony Xu 1ff798ca76 CS-16409 : dhcp request doesn't have target ip, remove ip in the iptable rule 2012-10-04 15:38:28 -07:00
Anthony Xu 4cb4628bec CS-16049 : VPC, VR provides metadata and user data through port 80, this port should be only open for targeting to this VR ip 2012-10-04 15:38:26 -07:00
Anthony Xu a513435089 CS-16049 : VPC, VR provides metadata and user data through port 80, this port should be only open for targeting to this VR ip 2012-10-03 10:06:55 -07:00
Anthony Xu ed094447cd CS-16409 : dhcp request doesn't have target ip, remove ip in the iptable rule 2012-10-03 10:04:11 -07:00
Anthony Xu 95df352e87 CLOUDSTACK-106: this issue seems be coverred by other issue somehow, when other issue is fixed, this issue shows up 2012-10-03 09:57:16 -07:00
Alex Huang 986ceff883 Applied review #7342 2012-10-01 17:36:01 -07:00
Edison Su 83d072e52b CLOUDSTACK-142 remove unneeded file
Conflicts:

	pom.xml
2012-09-28 10:40:46 -07:00
Chiradeep Vittal 4b8bf08e9a CLOUDSTACK-168 remove unneeded file 2012-09-28 10:40:27 -07:00
Edison Su 43c9157323 CLOUDSTACK-170 remove unneeded secrets file
Conflicts:

	pom.xml
2012-09-28 10:40:13 -07:00
Edison Su 7583f02bc4 CLOUDSTACK-170 remove unneeded file
Conflicts:

	pom.xml
2012-09-28 10:39:18 -07:00
Chiradeep Vittal b83f0250e2 CLOUDSTACK-174 remove unused file 2012-09-28 10:38:43 -07:00
Edison Su 824aa3f148 CLOUDSTACK-143 vcpu hotplug is used whenever the number of vcpus are increased or decreased while the vm is online. so far this is never done in CloudStack for system vms. Also, no evidence that this file is copied to /etc/udev/rules.d where it would be needed
CLOUDSTACK-144 xe-linux-distribution.init is used to communicate the distribution information to the xe toolset in dom0. No evidence that this file is copied to /etc/init.d where it would be needed. The right way to do it would be to install the xe-guest-utilities deb package from the xs-tools ISO distributed by Citrix XenServer

Conflicts:

	pom.xml
2012-09-28 10:38:21 -07:00
Anthony Xu e0a22d4fee VPC : password reset fix 2012-09-26 21:56:45 -07:00
Anthony Xu 28b13ea4a5 VPC : password reset,
add console redirect
2012-09-26 21:56:34 -07:00
Anthony Xu c58713780f CS-16393
one typo fix
    make passwd service exitable
2012-09-26 21:56:30 -07:00
Anthony Xu 9afe06e2bb VPC : password server, start password server when guest network is created 2012-09-26 21:56:24 -07:00
Anthony Xu a0e390fd97 open port 3922 on correct eth device 2012-09-26 21:55:12 -07:00
Sheng Yang 4f4b1f56ee CS-15094: Fix multiply vlan of redundang router
This fix would work because:
1. When booting up the router, there is possible that no ip information have
been set for the interface(CS would do it after confirm router is up), so the
interface isn't associate with any ip, then ifconfig cannot work. We have to use
ifup, this is especially true for the first router become master.

2. After booting up phase, the ip would be associated with interfaces, then we
can use ifconfig to bring them up.
2012-09-26 21:54:32 -07:00
Sheng Yang 705481b562 CS-16400: Fix LB service using port 8080
Also added license header for passwd_server_ip

Ported from:

commit 1072ec7ae3
Author: Sheng Yang <sheng.yang@citrix.com>
Date:   Wed Sep 12 11:15:33 2012 -0700

    CS-16318: Update the fix with some tweak

    1. The old fix run cloud-passwd-srvr twice because cloud-passwd-srvr is
still in the list of enabled_svcs

    2. The lock should be applied on serve_password.sh, which controlled the
accessing to the password. Applied on the MASTER/BACKUP switch is useless, two
instance of serve_password.sh would still able to access the password file at
the same time.

    3. Password service is a part of redundant router state transition process
now, so if the service failed to start, then the transition failed.

    4. Restart password service should be put before restart dnsmasq, which
would sent out DHCP offer to the user vms. If user VMs got the DHCP offer first
but failed to get password, there would be an issue.

    Reviewed-by: Anthony Xu

commit fa94da1140
Author: Jayapal Reddy <jayapalreddy.uradi@citrix.com>
Date:   Wed Sep 12 17:57:03 2012 +0530

    Bug:CS-16318 Starting password server on the both IPs in RRVM
    Reviewed-by: Abhi

Conflicts:

	patches/systemvm/debian/config/opt/cloud/bin/passwd_server
2012-09-26 21:54:13 -07:00
Chiradeep Vittal d736863f87 CLOUDSTACK-171 cleanroom version of ipsec.conf 2012-09-26 21:50:27 -07:00
Edison Su 7559ade45e CLOUDSTACK-171 according to http://markmail.org/thread/hipzcgtc7qx2o7iz delete first
Conflicts:

	patches/systemvm/debian/vpn/etc/ipsec.conf
2012-09-26 21:50:08 -07:00
Edison Su ff738feacb remove the last vhd-util 2012-09-25 15:16:28 -07:00
Chip Childers db57ffff4d Corrected RAT mvn plugin to appropriate exclude things at the top level, and to also include subprojects. 2012-09-25 15:15:26 -07:00
Chip Childers fffd3ba625 Adding license headers and licensing details for patches folder. 2012-09-25 15:14:08 -07:00
Edison Su 853db618ba Adding patches module config for RAT.
Conflicts:

	pom.xml
2012-09-25 15:13:21 -07:00
Marcus Sorensen 0699d65ef1 VPC - enable passwd server service
There is currently no vpcrouter type defined in patchsystemvm.sh, which
controls our init scripts in the system vms. This patch allows the
services that would normally start on a router to start also on the VPC
router, in particular the password server was missing.

Signed-off-by: Edison Su <sudison@gmail.com>
2012-09-20 17:13:06 -07:00
Marcus Sorensen f9e94125af CLOUDSTACK-131: KVM fails to copy authorized_keys to system vm now that iso is not
mounted

Signed-off-by: Edison Su <sudison@gmail.com>
2012-09-20 14:00:20 -07:00
Chip Childers 868bad8445 Adding license headers to CS authored ip tables config files 2012-09-14 13:19:17 -04:00
Chip Childers d1eb762b1e Adding license header 2012-09-14 13:19:17 -04:00
Chip Childers 763311c006 License header updates, and modification to root pom for exclusions. 2012-09-13 16:55:48 -04:00
Manikanta Kattamuri cfc2b85651 Removing eclipse .classpath and .project files as they are configured to ant build and adding the entries into .gitignore to stop further comitting of the files
Signed-off-by: Chip Childers <chip.childers@gmail.com>
2012-09-13 14:18:14 -04:00
anthony ba0522461d VPC : configure apache2 for each guest network 2012-09-07 18:10:42 -07:00
anthony 5756a2a73b VPC : clean up rt_table when stop domr 2012-09-07 17:48:23 -07:00
anthony 6c96e638be VPC : static route, add route table in cloud-early-config 2012-09-07 17:46:40 -07:00
Anthony Xu 4a0e645e28 CS-16254:
passwd_server listen on every interface, but only guest interface is enabled for that port
2012-09-07 17:10:54 -07:00
Anthony Xu 3cfe01d07c VPC : by default , outgoing traffic is allowed out, once egress rules are added, only traffic specified in those are allowed out, others are blocked 2012-09-07 17:03:12 -07:00
Edison Su 3db9736a07 CLOUDSTACK-29
remove iptables/xe-guest/xt
2012-09-06 11:05:09 -07:00
Edison Su 5ae15f8bbf first OSS build 2012-09-05 17:45:25 -07:00
Edison Su ea9121bc8f KVM initial VPC support
Implements
SetupGuestNetworkCommand,SetNetworkACLCommand,SetSourceNatCommand,IpAssocVpcCommand,SetPortForwardingRulesVpcCommand.
Passes basic functionality, though I'm sure there may be some honing to
do.

Also fixes a few minor things found along the way:
 vpc_guestnw.sh wasn't successfully setting up apache due to default
listen IP of 10.1.1.1
 vpc_guestnw.sh was referencing a 'logger_it' function, replaced with
'logger -t cloud'
 system vms were running with OS type "Debian GNU/Linux 5.0(32-bit)",
which was not found in the KVMGuestOsMapper
 the Xen implementation of SetupGuestNetworkCommand had apparently
copied its catch message from UnPlug Nic, fixed string

Send-by: Marcus Sorensen
RB: https://reviews.apache.org/r/6883
2012-09-04 11:45:59 -07:00
Hugo Trippaers 3054537182 Use maven to build the systemvm zip and iso 2012-09-03 14:09:19 +02:00
Gavin Lee 39a676c496 Correct license header mainly for patches folder
Signed-off-by: Chip Childers <chip.childers@gmail.com>
I've assumed that Gavin's commit is appropriate, based
on an assumption that we will keep these files in the source
tree.  If https://issues.apache.org/jira/browse/LEGAL-146
results in a different opionion from the members, then we
will end up having to do something more drastic anyway.
2012-08-31 10:50:46 -04:00
Rohit Yadav 2296dc4acc bug CS-15942: Fixes port forwarding issue for redundant routers 2012-08-28 12:11:55 +05:30
Rohit Yadav fd4a1a39c1 Bug CS-15970: Fixes Redundant router status when host is XenServer 2012-08-28 12:07:33 +05:30
kishan b42a813ff1 bug CS-16112: During unplug nic iptables rules are cleaned up in both cloud_nic.sh and vpc_netusage.sh. Consolidated this code in cloud_nic.sh
status CS-16112: resolved fixed

Conflicts:
	patches/systemvm/debian/config/opt/cloud/bin/vpc_netusage.sh
2012-08-22 12:00:02 +05:30
Sheng Yang 20ccb6c1cb S2S VPN: CS-16092: Add ESP rule to iptables
Otherwise the other end cannot initiate connection.
2012-08-20 17:28:46 -07:00
kishan 691be5c60e bug CS-15577: Added per gateway network usage for VPC and VPN usage. VPN usage uses 525 mark for outgoing traffic and 524 mark for incoming traffic
status CS-15577: resolved fixed
2012-08-17 17:07:13 +05:30
John Kinsella 6a41965b70 [ASFCS40] Updated version number to reflect 4.0.0 2012-08-14 22:54:44 -07:00
Sheng Yang e7efd0d95b S2S VPN: Don't consider VPN is down if IPsec SA still existed
Because ISAKMP SA wouldn't be updated after expiration if IPsec SA is still in
affect.
2012-08-10 16:20:52 -07:00
Sheng Yang 435480cb5a S2S VPN: CS-15641: Enable UDP port 4500 for NAT-T 2012-08-06 17:15:38 -07:00