Commit Graph

189 Commits

Author SHA1 Message Date
Alex Huang a8b617c596 port forwarding is now in 2010-12-03 08:48:03 -08:00
Alex Huang b859e103d8 ip nat rule forwarding done 2010-12-03 08:48:03 -08:00
Alex Huang 9a70ee54f0 portforwarding is working 2010-12-03 08:48:03 -08:00
Alex Huang bb78986ddb port forwarding working 2010-12-03 08:48:02 -08:00
Alex Huang 223688d0bf Port forwarding rules and load balancing rules rewrite 2010-12-03 08:48:02 -08:00
alena f8a687ab23 1) Implemented create/list/deleteNetworkOffering create/delete/listNetwork APIs.
2) Added networkIds parameter to deployVMCmd - accepts list of networks ids separated by coma.
3) Changed domainRouter/systemVm/userVm response to return list of Nics associated with the vm.
2010-12-02 19:30:17 -08:00
abhishek dd9fd57514 changing the logging and error msgs from 1:1 NAT to static NAT (in accordance with the feature being called static and not 1:1 NAT) 2010-12-02 15:50:04 -08:00
abhishek e353b7ac2d we use 2 different tables for ip/port fwding and load balancer rules respectively. when we create a new static nat rule, this checkin tests against existing records in either of these tables based on the public ip address being mapped. if such a rule exists in either table, we do not permit creation of a static nat rule on this public ip 2010-12-02 15:50:04 -08:00
abhishek 66186ca876 bug 7348: fixing the issue of the static nat rules not being re-programmed on a domr stop/start or a domr reboot
status 7348: resolved fixed
2010-12-02 11:16:33 -08:00
abhishek dce3f9fa3b bug 7344: preventing enabling of static nat on an ip for more than one instance. Check the nat flag, and error out if set
status 7344: resolved fixed
2010-11-29 11:56:34 -08:00
Alex Huang d40700b286 Changed firewall rule's constructor 2010-11-29 09:38:13 -08:00
alena aa8aa6027a Modified UserContext - got rid of accountName, domainId fields as we can get this information from Account field. 2010-11-24 14:29:08 -08:00
abhishek 1950bf7a99 changing the nat feature to work with kvm 2010-11-24 10:04:24 -08:00
alena 44737d24c5 bug 7196: fixed response object generation for authorizeNetworkGroupIngress command (response type is Network group response - the way it was in 2.1.x - instead of IngressRule response)
status 7196: resolved fixed

Also fixed revokeNetworkGroup command - didn't work via 8096 port
2010-11-24 09:50:04 -08:00
abhishek 5543814f39 blocking the static natting of an ip address, if it is already source natted 2010-11-23 16:39:02 -08:00
alena 10fb2a0f39 bug 7292: fixed assignig LB to non-source Nat ip address
status 7292: resolved fixed
2010-11-22 20:54:08 -08:00
alena 3f1abbcbc8 Fixed assignToLoadBalancer command - admin couldn't assing LB rule in behalf of other user 2010-11-22 17:08:51 -08:00
Alex Huang d38f7fd56d Moved DAO to server 2010-11-22 07:40:41 -08:00
Alex Huang 1e44925564 api refactoring 2010-11-21 12:00:21 -08:00
alena 138e0914b6 bug 7245: don't try to set vm name for detached volume during expunge process.
status 7245: resolved fixed

Fixed couple of other problems:
* cleanup corresponding records in load_balancer_vm_map table when loadBalancerRule is removed.
* don't log "java.lang.IllegalStateException: getAttribute: Session already invalidated" exception when UI session expires
2010-11-19 20:08:18 -08:00
alena 6b61caad46 AssignToLoadBalancer - added missing transaction.commit to corresponding NetworkManager method. 2010-11-19 19:14:24 -08:00
alena 5426b1487c listPortForwardingRules: return empty response instead of throwing exception when ipAddress doesn't have any rules assigned. 2010-11-19 18:40:32 -08:00
Alex Huang 5b4a6f27db Changed networkconfigurations to network as per Sheng's suggestion 2010-11-19 15:44:42 -08:00
Chiradeep Vittal 394554770e Enforce user limit on number of vpn users 2010-11-18 18:38:29 -08:00
Chiradeep Vittal c53e165eaa bug 6971: bring back l2tp port 1701 2010-11-18 14:06:01 -08:00
Chiradeep Vittal a7547846bf bug 6971: Dont confuse PF rules added for VPN to be LB rules 2010-11-18 14:05:28 -08:00
Alex Huang a73e3dc9ac new networking can be set by use.new.networking 2010-11-17 17:51:17 -08:00
Chiradeep Vittal 4c7bb302bc bug 6971: Use PSK length configuration
validate global configurations
2010-11-17 16:32:50 -08:00
alena 9fefa33a36 bug 5701: listNetworkGroups api - apply page size parameter to the NetworkGroup instead of IngressRule.
status 5701: resolved fixed
2010-11-17 15:34:45 -08:00
Chiradeep Vittal 31e17b907d bug 6971: ensure no conflicts with portforwarding rules for vpn udp ports
also, do not open up port 1701 -- only used on ppp interface not public interface
also clean up password generator, make it easier to use and more secure
moved some constants to NetUtils
heuristic to determine if an ip is one-to-one nat'ted
2010-11-17 15:32:50 -08:00
abhishek 38292fcd02 bug 6929: we prevent upgrading of a router with a SO different from the type it was created with (eg. prevent a virtual offfering being upgraded to direct)
status 6929: resolved fixed
2010-11-17 12:59:54 -08:00
abhishek 1d1a2fa691 bug 6448: returning an error back from the api on trying to add a pf rule which already exists 2010-11-17 11:50:05 -08:00
alena c5d78a726e Modified exception handing in API. Following exceptions are supported now (location - BaseCmd.java):
* MALFORMED_PARAMETER_ERROR - when type of the request parameter is invalid (String instead of Long for id for example)
* PARAM_ERROR - when invalid parameter value is specified in api request. For example, id of non existing vm for StartVmCmd
* ACCOUNT_RESOURCE_LIMIT_ERROR - when user tries to exceed his resource limits by executing the api command.
* INSUFFICIENT_CAPACITY_ERROR - when resource fails to create/start due to insufficient capacity.
* RESOURCE_UNAVAILABLE_ERROR - when user tries to create a vm when storage is not available.
* RESOURCE_IN_USE_ERROR - when user tries to delete/modify resource while it's in use. For example, when we try to delete a network group when it contains ingress rules.
* NETWORK_RULE_CONFLICT_ERROR - when LB/PF rule to add conflicts with existing rule
* ACCOUNT_ERROR - when user is not authorized to execute operation on the resource.
* INTERNAL_ERROR
2010-11-16 11:56:34 -08:00
Alex Huang ed31497188 ComponentLocator changes 2010-11-16 04:28:15 -08:00
Alex Huang 17afeade00 better componentslocator 2010-11-16 04:28:14 -08:00
alena d43a8e983c Fixed authorizeNetworkGroupIngress api command (it stopped working after API refactor) 2010-11-15 17:44:51 -08:00
abhishek d5ab597fcf bug 6474,6475: porting over the expunge fixes for port forwarding rules to 2.2
status 6474,6475: resolved fixed
2010-11-15 17:33:05 -08:00
abhishek d520f0af5b adding a column in user_ip_address table called one_to_one_nat; which is a boolean to tell us if the ip is a nat ip. This is false by default, and is set to true when we nat the ip. Also, this value is returned in the list public ip addrsses api call.
finally, the value is set to false when we delete the ip forwarding rule.
2010-11-15 12:39:24 -08:00
abhishek d8fdcd3815 bug 7088: returning right error msg for assocIp failure 2010-11-12 15:31:30 -08:00
anthony 2537dc3058 bug 7149: merge from 2.1.x 2010-11-12 13:16:03 -08:00
abhishek 05bbd35860 resolving the network manager merge conflict 2010-11-11 13:13:04 -08:00
abhishek 1faaba8fb0 fixed a corner case; also changed the commands to be async and changed the method signatures to conform with the master refactor 2010-11-11 13:07:26 -08:00
abhishek 239942bbe1 refactored all the commands to cater to keshav's needs, and added the new apis. the initial set of testing is complete, will now focus on corner cases 2010-11-11 13:07:26 -08:00
abhishek 26b75fc05d this is a good point to check the code in; have completed a part of the enhancement's code; with create and delete ip forwarding rule commands and the skeleton for port to rule map with associated table 2010-11-11 13:07:26 -08:00
abhishek e5ca5dddf9 renaming the ip forwarding commands to port forwarding commands, and beginning to work on Keshav's request to modify the current 1-1 NAT to be compatible with the Amazon apis 2010-11-11 13:07:26 -08:00
Alex Huang 94250c1330 committing to update 2010-11-11 12:53:19 -08:00
Alex Huang c6033baa78 system vm start and stop added 2010-11-11 12:53:19 -08:00
alena d091bdd886 bug 7126: return true only when assignToLoadBalancer succeeded.
status 7126: resolved fixed
2010-11-11 12:46:21 -08:00
alena 86e83bc4bd Created new response objects for userVm/domainRouter/systemVm that going to be used by API after network refactorig is in place. 2010-11-11 10:43:18 -08:00
Alex Huang c8a3ea3080 merge conflict with alena's changes 2010-11-08 12:40:38 -08:00