Commit Graph

188 Commits

Author SHA1 Message Date
Bharat Kumar 42346cdf47 Cloudstack-3694 Dnsmasq rewrite in bash
(Sheng: Fix typo, fix log and error message, remove 'set -x' in script)

Signed-off-by: Sheng Yang <sheng.yang@citrix.com>
2013-07-24 13:59:58 -07:00
Sheng Yang 26f3427b66 CLOUDSTACK-3533: Add space after IP for dhcp_release
To prevent use the wrong mac of the IP with same prefix.

Thanks to Wei Zhou's comment!
2013-07-24 00:51:58 -07:00
Sheng Yang 730021c107 CLOUDSTACK-3533: Fix missing parameter of dhcp_release 2013-07-24 00:03:14 -07:00
Sheng Yang 3af96338dc CLOUDSTACK-3533: Fix dhcp_release for IPv6
dhcp_release doesn't support IPv6, though it won't return failure(that's a bug
that has been fixed in recent release). So if it's IPv6, we would still use the
old way(restart dnsmasq) to refresh the lease.
2013-07-23 18:08:44 -07:00
ilya musayev 88b36edf87 CLOUDSTACK-2053: Fixed userdata.sh redundancy and cloud-init support 2013-07-19 11:10:27 -04:00
Bharat Kumar 956a2a68ce Incorportaed the review changes Now dhcpservice IPs are removed when last vm from the subnet is removed.
Signed-off-by: Abhinandan Prateek <aprateek@apache.org>
2013-07-17 16:53:11 +05:30
Sheng Yang 54e9fe4485 CLOUDSTACK-3540: Fix edithosts.sh to prevent removing active dhcp entries
IP match must terminated by comma.
2013-07-15 18:01:31 -07:00
Sheng Yang fd06009d50 CLOUDSTACK-3434: Improve the atomic of file lock used in VR
Now we would retry if "ls" failed, since the list of files changed.
2013-07-15 16:07:36 -07:00
Jayapal 34582d672f CLOUDSTACK-3533 Fixed dhcphosts.txt for two entries and also dhcp_relase for ipv6 2013-07-15 20:02:56 +05:30
Jayapal ffbc30ddbb Revert "CLOUDSTACK-3424 Fixed dhcphosts entry and also dhcp_relase for ipv6"
This reverts commit f37567ef45.
This deletes the duplicate entry when new vm came with deleted vm ip.
So will not fix the bug CLOUDSTACK 3424 fully. So this changes will be committed into new bug
2013-07-15 18:47:24 +05:30
Jayapal acd9390901 CLOUDSTACK-3424 Fixed dhcphosts entry and also dhcp_relase for ipv6 2013-07-15 18:14:53 +05:30
Sheng Yang 2ea61e7f22 CLOUDSTACK-3436: Fix inconsistent ip routing table between redundant virtual routers 2013-07-10 15:54:14 -07:00
Jayapal c7f26583a2 CLOUDSTACK-3404 fixed vm deploy in ipv6 network, dhcp_release is performed only in ipv4 2013-07-09 13:12:06 +05:30
Jayapal 5a57e82eaf CLOUDSTACK-3312 Updated dhcp_release to listen on eth0 in edithosts.sh 2013-07-04 16:36:21 +05:30
Jayapal 6a7ae637dd CLOUDSTACK-1578 Egress default policy configurable using network offering in xenserver with VR as firewall provider 2013-06-24 13:37:00 +05:30
Bharat Kumar d92a01336b Cloudstack-2938 [Multiple_IP_Ranges] Password Service does not work in case of multiple subnets in a vlan
Signed-off-by: Abhinandan Prateek <aprateek@apache.org>
2013-06-20 10:37:24 +05:30
Alena Prokharchyk d66e9c7b51 CLOUDSTACK-2843: Provideded an ability to turn off the synchronization being done on the CS agent side,
for number of commands participating in Vm deployment process, as parallel deployment is supported on the hypervisor side.
The behavior is controlled by global config varirables:

"execute.in.sequence.hypervisor.commands" (false by default) sets/resets the synchronization for commands:
=========================
StartCommand
StopCommand
CreateCommand
CopyVolumeCommand

"execute.in.sequence.network.element.commands" (false by default) sets/resets the synchronization for commands:
==========================
DhcpEntryCommand
SavePasswordCommand
UserDataCommand
VmDataCommand

As a part of the fix, increased the global lock timeout to 30 mins in several VR scripts:
===========================
edithosts.sh
savepassword.sh
userdata.sh

to support situations when multiple concurrent calls to the script are being made.
2013-06-19 10:12:13 -07:00
Bharat Kumar 48913679e8 CLOUDSTACK-2648 [Multiple_IP_Ranges] Reboot or start/stop router vm deletes the ip alises created on VR in case of multiple subnets
Signed-off-by: Abhinandan Prateek <aprateek@apache.org>
2013-06-03 19:22:27 +05:30
Sheng Yang a21a4e5ac4 CLOUDSTACK-2682: Sleep 1 second before switch to BACKUP
To prevent backup.sh preempt master.sh when keepalived switch to MASTER then
back to BACKUP immediately.

Since it would take at least 3 seconds for BACKUP to switch to MASTER(vrrp
timeout), the fix won't cause chaos when keepalive try to switch to MASTER.
2013-05-24 17:10:55 -07:00
Bharat Kumar 052c24c4d1 CLOUDSTACK-702: Multiple ip ranges in different subnets.
This feature enables adding of guest ip ranges (public ips)  form different subnets.

In order to provide the dhcp service to a different subnet we create an ipalias on the router. This allows the router to listen to the dhcp request from the guest vms and respond accordingly. Every time a vm is deployed in the new subnet we configure an ip alias on the router. Cloudstack uses dnsmasq to provide dhcp service. We need to configure the dnsmasq to issue ips on the new subnets. Added a new class dnsmasqconfigurator which generates the dnsmasq confg file, this file replaces the old config in the router.

The details of the alias ips are stored in db in the nic_ip_alias table. Every time a new subnet is added one of the ip from the subnet is used to configure the ip alias.

I have pushed the code to  https://github.com/bvbharatk/cloud-stack/tree/Cloudstack-702 , also rebased the code with master.
I need to test the code for advanced sg enabled network using kvm.

I have added the unit test
Marvin tests are at https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=53e4965

Also accomodated some of the changes suggested by koushik.
corrected the import statements. renamed the IpAlias command to createIpAlias command.

This feature supports only ipv4
2013-05-13 17:06:44 +05:30
Marcus Sorensen 870d21c436 Summary: Release old DHCP entries
Detail: Refresh dnsmasq with updated entries live, no outage

BUG-ID: CLOUDSTACK-2299
Submitted-by: Dennis Lawler <dlawler@gmail.com>
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1367611792 -0600
2013-05-03 14:09:52 -06:00
Marcus Sorensen 71a17e4c13 CLOUDSTACK-2110 : allow vm to have multiple dhcp entries on same router
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1367439056 -0600
2013-05-01 14:10:56 -06:00
Hugo Trippaers c9c68e1928 Replace restart with SIGHUP
This signal will force the dnsmasq daemon to reload the configuration directly. This is much faster than restarting the daemon, which result in a much smaller window during which no dns server is available.

Tested by using the replaced version of edithosts.sh on a running vrouter causing dns problems.
2013-04-07 21:46:38 +02:00
Sheng Yang 630e75596e CLOUDSTACK-1653: Redundant router: Fix check_heartbeat.sh malfunctional due to delayed cron job
The interval between keepalived.ts and keepalived.ts2 should be >= 60 seconds in
normal condition, because every 10 seconds keepalived.ts would be updated, and
at least every 60 seconds, keepalived.ts would be copy to keepalived.ts2.

If the interval is less than 60 seconds, then keepalived process failed to
update keepalived.ts every 10 seconds.

Take some delay of updating into consideration, check_heartbeat.sh would use 30
seconds as a way to tell keepalived process is alive or not.
2013-03-12 18:31:31 -07:00
Sheng Yang e35ce6587a CLOUDSTACK-1461: Don't set dns server for non-default ipv6 network
The non-default parameter can be used by ipv4 as well in the future.
2013-03-08 17:43:23 -08:00
Sheng Yang 7602997b90 CLOUDSTACK-1521: Stop services after switch to BACKUP 2013-03-05 15:58:57 -08:00
Sheng Yang dd721a832a CLOUDSTACK-1522: Add timestamp to lock
Use higher precision timestamp rather than file timestamp to find out the order
of lock requester
2013-03-05 15:58:57 -08:00
Sheng Yang 89dee27503 CLOUDSTACK-1414: Reduce arping time to nearly 0
In the previous version it would take at least 1 seconds for arping, and it
would be big if the VR has more than 30 IPs - our biglock default timeout is 30
seconds.

Fix it by send out two arping immediately, and then sleep 1 second for router to
update arp cache.
2013-02-26 12:39:15 -08:00
Wei Zhou 1e24892dfe If filesystem in virtual router is in read-only state, reports error to
commands send to virtual router, instead of keeping silence.

Test:

Before change:
(1) Acquire IP. always in "Allocating" state.
(2) EnableStaticNat, the result is success(it is incorrect).
(3) DisableStaticNat, will get error message.. This is correct.
(4) Add Firewalls. always in "Adding" state.
(5) The AgentManager report statistics every 60 minutes(normally it
should be router.stats.interval=5 minutes).

After change:
(1) Acquire IP, will get error message.
(2) EnableStaticNat, will get error message.
(3) DisableStaticNat, will get error message.
(4) Add Firewalls, will get error message. But the firewall rules are
saved in database.
(5) The AgentManager report statistics every 5 minutes, except the
network with read-only FS virtual router.
2013-02-12 09:22:04 -08:00
anthony e936257674 CLOUDSTACK-1199: add external DNS to dnsmasq configuration file 2013-02-08 16:30:32 -08:00
Sheng Yang 5cb9df91a1 Merge branch 'ipv6'
Conflicts:
	api/src/com/cloud/network/NetworkProfile.java
2013-01-31 15:07:33 -08:00
Jayapal 48fdc25daa CLOUDSTACK-299: Egress firewall rules feature for guest network on VR 2013-01-31 10:57:30 +05:30
Sheng Yang 8f66d266b3 IPv6: Enable VR's ability to provide DHCPv6 service 2013-01-26 23:14:42 -08:00
Sheng Yang 9300a02ba4 IPv6: Update edithosts.sh accept parameters 2013-01-26 23:14:27 -08:00
Sheng Yang 0b60dda1e6 Correct the license information of services.sh 2012-12-21 15:32:36 -08:00
Sheng Yang 5eba489198 Redundant Router: Restart vpn related services when redundant router fail-over 2012-12-21 15:22:03 -08:00
Sheng Yang 7926e66afa Redundant router: Fix wrong log attend to keepalived.log
If something got wrong with passwd_server_ip script, it would output to
keepalived.log, thus cause other scripts malfunctional.

Also make savepassword.sh using the same lock as serve_password.sh.
2012-12-21 15:21:49 -08:00
Atsushi Midorikawa 15704cfa6c virtual router: edithosts.sh cleanup fails on existing hosts
The already deleted same hostname  is not deleted from /etc/hosts of
vRouter.

vRouter's /etc/hosts format:
$ip $host

This patch fixes deletion logic below.
sed -i /"$host "/d $HOSTS

Signed-off-by: Prasanna Santhanam <tsp@apache.org>
2012-12-13 23:02:14 -08:00
Chip Childers f212177146 CLOUDSTACK-159 - Added license header 2012-10-01 12:23:57 -04:00
Chip Childers 5f7a8a0436 CLOUDSTACK-162 - Added license header 2012-10-01 12:21:41 -04:00
Sheng Yang 0c6dcb4772 CS-15094: Fix multiply vlan of redundang router
This fix would work because:
1. When booting up the router, there is possible that no ip information have
been set for the interface(CS would do it after confirm router is up), so the
interface isn't associate with any ip, then ifconfig cannot work. We have to use
ifup, this is especially true for the first router become master.

2. After booting up phase, the ip would be associated with interfaces, then we
can use ifconfig to bring them up.
2012-09-26 16:28:33 -07:00
Sheng Yang 435e4f6868 CS-16400: Fix LB service using port 8080
Also added license header for passwd_server_ip

Ported from:

commit 1072ec7ae3
Author: Sheng Yang <sheng.yang@citrix.com>
Date:   Wed Sep 12 11:15:33 2012 -0700

    CS-16318: Update the fix with some tweak

    1. The old fix run cloud-passwd-srvr twice because cloud-passwd-srvr is
still in the list of enabled_svcs

    2. The lock should be applied on serve_password.sh, which controlled the
accessing to the password. Applied on the MASTER/BACKUP switch is useless, two
instance of serve_password.sh would still able to access the password file at
the same time.

    3. Password service is a part of redundant router state transition process
now, so if the service failed to start, then the transition failed.

    4. Restart password service should be put before restart dnsmasq, which
would sent out DHCP offer to the user vms. If user VMs got the DHCP offer first
but failed to get password, there would be an issue.

    Reviewed-by: Anthony Xu

commit fa94da1140
Author: Jayapal Reddy <jayapalreddy.uradi@citrix.com>
Date:   Wed Sep 12 17:57:03 2012 +0530

    Bug:CS-16318 Starting password server on the both IPs in RRVM
    Reviewed-by: Abhi

Conflicts:

	patches/systemvm/debian/config/opt/cloud/bin/passwd_server
2012-09-26 16:28:33 -07:00
Chip Childers e2730c91d9 Adding license headers and licensing details for patches folder. 2012-09-25 14:26:52 -04:00
Sheng Yang bbc78bab5d CLOUDSTACK-159: Clean the configuration file
Now it's all written by myself.
2012-09-21 11:47:58 -07:00
Gavin Lee 39a676c496 Correct license header mainly for patches folder
Signed-off-by: Chip Childers <chip.childers@gmail.com>
I've assumed that Gavin's commit is appropriate, based
on an assumption that we will keep these files in the source
tree.  If https://issues.apache.org/jira/browse/LEGAL-146
results in a different opionion from the members, then we
will end up having to do something more drastic anyway.
2012-08-31 10:50:46 -04:00
Rohit Yadav 2296dc4acc bug CS-15942: Fixes port forwarding issue for redundant routers 2012-08-28 12:11:55 +05:30
Sheng Yang dd50bdf38e CS-15731: Make S2S VPN no-nat rule the top of POSTROUTING 2012-07-27 18:49:25 -07:00
bfederle c8f72c9198 Merge branch 'master' into vpc
Conflicts:
	ui/scripts/network.js
2012-07-23 10:36:25 -07:00
David Nalley 67bc9c819a fixing some more license headers 2012-07-20 15:59:31 -04:00
anthony c75fe80125 VPC : use routerProxy to call networkUsage.sh
Conflicts:

	core/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
2012-06-15 14:25:21 -07:00