9dc685cefb
bug CS-16027: fixed typo. regression due to 8683857c6c
...
status CS-16027: resolved fixed
2012-08-16 12:15:14 +05:30
8683857c6c
in network_rules_for_rebooted_vm, if tap doesn't exist, don't setup rules for tap device
2012-08-15 19:50:07 -07:00
3e0689fcf1
bug 13734: allow dhcp traffic by default
...
status 13734: resolved fixed
2012-08-15 12:36:06 -07:00
70c84badab
CS-15138: strip the string before compare
2012-08-08 17:57:14 +05:30
fddf23a986
VPC : loadbalancer works
2012-06-28 17:16:54 -07:00
aaf0d24a83
Merge branch 'vpc-3.0.x' into 3.0.x
...
Conflicts:
api/src/com/cloud/api/ApiConstants.java
api/src/com/cloud/api/BaseCmd.java
api/src/com/cloud/api/ResponseGenerator.java
api/src/com/cloud/api/commands/AssociateIPAddrCmd.java
api/src/com/cloud/api/commands/EnableStaticNatCmd.java
api/src/com/cloud/event/EventTypes.java
api/src/com/cloud/network/NetworkService.java
api/src/com/cloud/network/rules/RulesService.java
client/tomcatconf/commands.properties.in
core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
scripts/vm/hypervisor/xenserver/xenserver56fp1/patch
server/src/com/cloud/api/ApiDBUtils.java
server/src/com/cloud/api/ApiResponseHelper.java
server/src/com/cloud/configuration/DefaultComponentLibrary.java
server/src/com/cloud/consoleproxy/ConsoleProxyManagerImpl.java
server/src/com/cloud/network/NetworkManagerImpl.java
server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
server/src/com/cloud/network/rules/RulesManagerImpl.java
server/src/com/cloud/server/ManagementServerImpl.java
server/src/com/cloud/storage/secondary/SecondaryStorageManagerImpl.java
server/src/com/cloud/upgrade/dao/Upgrade2214to30.java
server/test/com/cloud/network/MockNetworkManagerImpl.java
server/test/com/cloud/vm/MockVirtualMachineManagerImpl.java
setup/db/create-schema.sql
wscript
2012-06-14 19:04:59 -07:00
d83c81b637
VPC : fixed get_domr_version
2012-06-13 19:25:48 -07:00
49a6d37e80
bug 13733: fix vm after reboot can't get ipaddress; status 13733: resolved fixed. Reviewed-by: Chiradeep
2012-06-07 21:37:41 -07:00
2619492b6e
VPC : use routerProxy to call l2tpVpn
2012-06-06 17:19:52 -07:00
1b81342354
VPC : use routerProxy to call networkUsage.sh
2012-06-06 16:36:47 -07:00
a015a9203e
VCP : use routerProxy to call checkrouter script
2012-06-06 16:08:14 -07:00
076a876f80
VPC : introduce router_proxy.sh, resource should use this as a proxy to call scripts inside domr
...
already did this for ipassoc and getDomRVersion
2012-06-05 17:26:19 -07:00
175f396c1e
CS-14946, check if it is linux bridge before call ovs
2012-05-23 19:08:17 -07:00
8c398654d3
Open vSwitch tunnel manager
...
Applying patch with new ovs-tunnel-manager on top of cloudstack oss-master
Conflicts:
api/src/com/cloud/network/ovs/OvsCreateTunnelAnswer.java
2012-04-24 02:20:37 +01:00
0ed1943d28
bug 14498: in xenserver 6.0 and openvswitch enabled, reboot xenserver will lost link local bridge; the workaround is if the link local bridge is lost, create a new one; status 14498: resolved fixed; Reviewed-by: frank
2012-03-26 17:14:43 -07:00
89dfd57806
removing the minor version number for comparisions for Xenserver 6.0
2012-03-13 11:26:01 +05:30
e89eec45b6
bug 13734: allow dhcp requests and responses all the time
...
Reviewed-by: Anthony
2012-02-15 15:37:37 -08:00
0a446a9504
bug 13632: it appears xs 6.0 allows iptables rules across the bridge without csp
...
status 13632: resolved fixed
reviewed-by: anthony
2012-02-14 18:45:00 -08:00
08636d5802
bug 13060: check for resident vms as xapi will return vms running on other hosts in the cluster
2012-01-17 18:37:59 -08:00
af667d26b7
bug 13033: security rule prevents console access
2012-01-12 15:35:25 -08:00
5d54a3aef8
bug 13052: check if ebtables exists in can_bridge_firewall
...
status 13052: resolved fixed
2012-01-12 11:34:31 -08:00
f964c4d227
bug 10363 : cleanup vhd in primary storage if download template to primary storage fails
...
Conflicts:
core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
scripts/vm/hypervisor/xenserver/vmops
2012-01-10 13:56:29 -08:00
6aa0560d37
bug 12917: security groups - icmp type/code validations.
2012-01-06 19:33:07 +05:30
5aba3913bb
bug 12854: arp requests can also be used to poison arp caches
2012-01-05 18:01:19 -08:00
f138d15efb
bug 12854: arp and ip antispoof independent of the order of vm start
2012-01-05 18:01:10 -08:00
24894e2354
bug 11302: dont allow stuff like BPDUS, don't allow vms to connect to hypervisor
2011-12-29 17:35:24 -08:00
4718f194ef
bug 12772: typo
2011-12-29 16:01:41 -08:00
a51ee064ee
bug 11302: more efficient caching of keyword
2011-12-29 16:01:41 -08:00
c05903b2d0
bug 11302: support new CSP for SP2.
...
conditional check : --match-set vs --set
forgot to merge this in from 2.2.y
2011-12-29 16:01:40 -08:00
363aea4aee
Bug 12731 - Ebtable rules are blocking all traffic going out of VMs in basic zone
...
status 12731: resolved fixed
reviewed-by: edison
2011-12-22 15:04:15 -08:00
61eab674d2
bug 12328: XenServer 6.0 changes vnc-port path in xenstore
...
status 12328: resolved fixed
2011-12-21 12:00:27 -08:00
2278477737
add stronger security to defend against attacks originating in the vm
2011-12-19 10:56:52 -08:00
5393a44c56
bug 12290: improve antispoofing lgic
...
handle reboot within vm correctly
iptables -S missing in csp
2011-12-19 10:56:52 -08:00
0c1e21ab80
bug 10617: vmops related changes.
2011-12-01 19:32:57 +05:30
09905b641b
bug 10617: merge code from branch bug10617.
2011-12-01 14:17:52 +05:30
f1b99f4f07
Revert "bug 10617: merging code from branch bug10617"
...
This reverts commit 8bc33448b9220534ba0ddc6c642ffb1e69d5844e.
Conflicts:
server/src/com/cloud/api/ApiResponseHelper.java
2011-11-11 20:23:26 +05:30
02adbd4bd3
bug 10617: merging code from branch bug10617
2011-11-10 15:23:48 +05:30
1c5adc7714
bug 11336: compression to allow number of cidrs to scale beyond 8k
2011-10-06 17:56:59 -07:00
1b3372e1de
bug 11625: separate out error paths to enable fine grained error handling and cleanup
...
status 11625: resolved fixed
2011-10-06 17:55:29 -07:00
61fa7d8675
bug 11420: reduce duration of disruption
2011-10-06 17:55:21 -07:00
89e45bd671
bug 11130: Add GetDomRVersionCmd
2011-09-29 14:50:11 -07:00
3549067d55
bug 11307: Add BumpUpPriorityCommand
2011-09-14 16:22:19 -07:00
fae5e84699
if the xenserver host cannot do bridge firewalling do not attempt to retry the security rule updat
...
change some logs to debug level
2011-09-12 18:20:24 -07:00
65fb83035f
Enable monitoring over JMX
...
Add the ability to disable some vms from being scheduled
Add ability to trigger ruleset updates from JMX
added a few more dangerous JMX operations
2011-09-12 18:20:24 -07:00
0aeb45fafc
if sequence number increases but signature does not change, do not reprogram, but rewrite the rule log
2011-09-12 18:20:23 -07:00
53970c89dc
Revert "bug 10617: blocking between security groups for egress rules fixed."
...
revert pending review
This reverts commit 7d30dfd79e3c4b01492f606333c26e36bcdc5d13.
2011-09-12 14:45:58 -07:00
e216686029
Revert "bug 10617: Intermediate checking"
...
revert pending review
This reverts commit 561b27565512d438db3d8896df6f97b644b0b498.
2011-09-12 14:45:58 -07:00
f9b0962ad9
bug 10617: Intermediate checking
...
Changes :
- Fixing API doc +response name + errorMessage
- Adding seperate events to Egress rules
- Egress rules Using the same database table as that of ingress with new column type.
Pending Tasks:
- db upgrade
- database table rename from security_ingress_rule to generic name, renaming some of the jave class from ingress to generic name.
- Retesting on kvm
2011-09-09 18:14:19 +05:30
10d2ca8d0a
bug 10617: blocking between security groups for egress rules fixed.
2011-09-02 16:17:08 +05:30
7621dea575
Fix the regression on security group cleanup:
...
In pre-2.2.10, the cleanup doens't work at all.
In 2.2.10, it works but make a mistake to delete all the rules for vmname ending with "-untagged"
2011-08-31 10:45:52 -07:00
kishan
anthony
Alena Prokharchyk
Edison Su
Salvatore Orlando
Edison Su
abhi
Chiradeep Vittal
Naredula Janardhana Reddy
frank
Sheng Yang
Edison Su