Commit Graph

429 Commits

Author SHA1 Message Date
Sheng Yang f95013273a CLOUDSTACK-3540: Fix edithosts.sh to prevent removing active dhcp entries
IP match must terminated by comma.
2013-07-16 11:09:13 -07:00
ilya musayev 4612656de8 CLOUDSTACK-2053: Fixed userdata.sh redundancy and cloud-init support 2013-06-13 18:38:32 -04:00
Chiradeep Vittal 2fdeee4de7 CLOUDSTACK-2492: enable time sync on vmware if ntp is not installed 2013-05-16 18:18:45 +01:00
Sheng Yang 7686489c13 CLOUDSTACK-2044: Use dnsmasq.conf.tmpl to generate dnsmasq.conf
We add something like dhcp-range_ip4/ip6 in the template for implementing
different setups.
2013-05-03 15:48:40 +01:00
Marcus Sorensen 448ebd71af CLOUDSTACK-2110 : allow vm to have multiple dhcp entries on same router
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1367439056 -0600
2013-05-02 15:18:11 +01:00
Marcus Sorensen 625eb3c490 In system vm, wait for interface to be available before configuring gateway.
Previous patch to this only did so for system vms with a $3 interface, usually
eth2. System VMs that only provide DNS wouldn't get a gateway, for example.

BUG-ID: CLOUDSTACK-1565
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1365617851 -0600
2013-04-11 18:36:22 +01:00
Marcus Sorensen cf6e67bfe5 VPC - new system vm doesn't bring up eth0 reliably, and we don't set eth0 to
auto start like we should.  cloud-early-config sets 'auto lo $1', but we don't
pass $1 in vpc router scenario like we do in others for some reason. eth0 is
always link local in vpc router, so setting it to that.

Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1365546368 -0600
2013-04-10 21:57:18 +01:00
Marcus Sorensen aca6f28790 Summary: CLOUDSTACK-1565 - Waits for ip to come up before setting default route
Submitted-by: Jayapal Reddy <jayapalreddy.uradi@citrix.com>
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1364226284 -0600
2013-03-25 17:24:38 +00:00
Sheng Yang b8a16856ff CLOUDSTACK-1461: Don't set dns server for non-default ipv6 network
The non-default parameter can be used by ipv4 as well in the future.
2013-03-10 21:44:59 -04:00
Marcus Sorensen 33fd1a6fb3 Summary: Wait for VPC router nics to hotplug before assigning IPs
Detail: CLOUDSTACK-1452, CLOUDSTACK-1523 - When rebooting VPC routers, ip addr
assignment was inconsistent, sometimes the assignment would be attempted while
router was still setting up nic device. This adds a watch for the nic to show
up before attempting to add an ip to a nic.

Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1362521453 -0700
2013-03-05 18:09:43 -07:00
Sheng Yang 73d7b53f18 CLOUDSTACK-1521: Stop services after switch to BACKUP 2013-03-05 16:46:00 -08:00
Sheng Yang 7d370f2eb7 CLOUDSTACK-1414: Reduce arping time to nearly 0
In the previous version it would take at least 1 seconds for arping, and it
would be big if the VR has more than 30 IPs - our biglock default timeout is 30
seconds.

Fix it by send out two arping immediately, and then sleep 1 second for router to
update arp cache.
2013-02-26 12:25:30 -08:00
Sheng Yang 05331583c2 CLOUDSTACK-1332: Enable IPv6 dns in VR 2013-02-25 19:02:59 -08:00
Chiradeep Vittal 4d8d9c6368 CLOUDSTACK-1265: /etc/init.d/dnsmasq puts pid in /var/run/dnsmasq/dnsmasq.pid
logrotate checks /var/run/dnsmasq.pid instead and may not send SIGUSR2 to dnsmasq to start writing to the new log file instead
2013-02-13 14:37:52 -08:00
anthony 0923bf8f85 CLOUDSTACK-1199: add external DNS to dnsmasq configuration file 2013-02-08 16:32:24 -08:00
Sheng Yang 5cb9df91a1 Merge branch 'ipv6'
Conflicts:
	api/src/com/cloud/network/NetworkProfile.java
2013-01-31 15:07:33 -08:00
Jayapal b6727e5646 CLOUDSTACK-299: Egress firewall rules feature for guest network on VR 2013-01-31 11:20:47 +05:30
Jayapal 48fdc25daa CLOUDSTACK-299: Egress firewall rules feature for guest network on VR 2013-01-31 10:57:30 +05:30
Sheng Yang dfc9dc19f8 IPv6: Add IPv6 address to router in /etc/hosts 2013-01-29 22:08:32 -08:00
Sheng Yang 8f66d266b3 IPv6: Enable VR's ability to provide DHCPv6 service 2013-01-26 23:14:42 -08:00
Sheng Yang f89c66070b IPv6: Update dnsmasq.conf to new version 2013-01-26 23:14:35 -08:00
Sheng Yang 9300a02ba4 IPv6: Update edithosts.sh accept parameters 2013-01-26 23:14:27 -08:00
Sheng Yang 6169c1d724 IPv6: Enable IPv6 address for router 2013-01-26 23:14:21 -08:00
Sheng Yang a5ac88db88 CLOUDSTACK-938: Add missing checkbatchs2svpn.sh 2013-01-18 11:01:00 -08:00
Marcus Sorensen e37a82375c Summary: Fix rp_filter for VPC router
Detail: VPC router was being treated like normal VR, which was an issue because
normally the VR has an eth0,1,2 which are isolated, linklocal, and public
networks respectively. rp_filter is turned on for eth0,1 and off for 2
(hardcoded). VPC however comes up with eth0,1 as public, linklocal, and no other
interfaces until new isolated networks are added, so the process doesn't work.
This change turns on rp_filter as new isolated networks are added to the VR.

BUG-ID: CLOUDSTACK-938
Bugfix-for: 4.0.2
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1358451991 -0700
2013-01-17 12:51:38 -07:00
Sheng Yang 0b60dda1e6 Correct the license information of services.sh 2012-12-21 15:32:36 -08:00
Sheng Yang 911f8c33c5 Fix broadcast address is 0.0.0.0 on additional public vlan issue 2012-12-21 15:22:15 -08:00
Sheng Yang 5eba489198 Redundant Router: Restart vpn related services when redundant router fail-over 2012-12-21 15:22:03 -08:00
Sheng Yang 7926e66afa Redundant router: Fix wrong log attend to keepalived.log
If something got wrong with passwd_server_ip script, it would output to
keepalived.log, thus cause other scripts malfunctional.

Also make savepassword.sh using the same lock as serve_password.sh.
2012-12-21 15:21:49 -08:00
Edison Su b70c1a5a84 Backs NFS-based secondary storage with an S3-compatible object store. Periodically, a reaper thread synchronizes templates and ISOs stored on a NFS secondary storage mount with a configured S3 object store. It also pushes snapshots to the object store when they are created and downloads them in other zones on-demand. In addition to permitting the use of commodity or IaaS storage solutions for static assets, it provides a means of automatically synchronizing template and ISO assets across multiple zones. 2012-12-13 23:18:37 -08:00
Atsushi Midorikawa 15704cfa6c virtual router: edithosts.sh cleanup fails on existing hosts
The already deleted same hostname  is not deleted from /etc/hosts of
vRouter.

vRouter's /etc/hosts format:
$ip $host

This patch fixes deletion logic below.
sed -i /"$host "/d $HOSTS

Signed-off-by: Prasanna Santhanam <tsp@apache.org>
2012-12-13 23:02:14 -08:00
ilya musayev 8ff8673f73 Fixed ARP issue that affected VmWare with Adavanced Network Zone that use Multiple vSwitches 2012-12-07 16:24:24 -06:00
Marcus Sorensen 82a7e49fad Summary: Add TCP to DNS firewall settings for virtual routers
Detail: TCP is occasionally used for certain DNS query types

BUG-ID: CLOUDSTACK-535
Bugfix-for: 4.0.1
Reported-by: Tamas Monos
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1353946670 -0700
2012-11-26 09:21:32 -07:00
Rohit Yadav ac1920ee9d CLOUDSTACK-500: Fix race condition between password server and iptables-persistent
Fixes order of service startup. Fixes file redirectors.

Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2012-11-23 15:43:11 +05:30
Marcus Sorensen b8af4278d0 Summary: VPC router needs /etc/hosts entry
Detail: This adjusts cloud-early-config to properly set the host entry for a
   vpc router. We were previously using the hostname command prior to the actual
   hostname being set, now we use the NAME variable passed to us.

BUG-ID: CLOUDSTACK-502
Bugfix-for: 4.0.1
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1353083661 -0700
2012-11-16 09:34:21 -07:00
Wido den Hollander e477e1b78d CLOUDSTACK-448: Detect when running inside Xen HVM
This was reported by Jason Bausewein <jason.bausewein@tier3.com>
2012-11-09 14:05:27 +01:00
Marcus Sorensen 761b4f60a1 Summary: Fix virtual router trying to resolve own host name (v2)
Detail: Make change in 95df86e1e0 be specific
to VPC.

BUG-ID : NONE
Reviewed-by: Marcus Sorensen
Reported-by: Marcus Sorensen
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1351695701 -0600
2012-10-31 09:01:41 -06:00
marcus 95df86e1e0 Summary: Fix virtual router trying to resolve own host name
Detail: Several virtual router configuration commands, such as iptables
commands, run slowly due to attempting to do a name lookup on the virtual
router's hostname and having to time out. This is seen in the agent logs when
a virtual router command is run, as "unable to resolve host r-410-VM" or
similar. This can make for very slow router configuration, especially as the
number of network rules grows. This change simply sets the router's name to
the localhost IP in /etc/hosts

BUG-ID : NONE
Reviewed-by: Marcus Sorensen
Reported-by: Marcus Sorensen
Signed-off-by: Marcus Sorensen <shadowsor@gmail.com> 1351659441 -0600
2012-10-30 22:57:21 -06:00
Rohit Yadav dbe88c1ed3 CLOUDSTACK-417: Handle passwd-srvr securely on VR, port 8080
By default do not enable port 8080 in iptables-router. Since, the socat
server which serves the password is in an infinite loop, any incorrect
attempt is returned bad_request and passwd-srvr won't break.

When /etc/init.d/cloud-passwd-srvr is started:
  - It finds and removes any old rules on port 8080, eth0
  - It applies iptables rule that accepts only traffic from private cidr.

When cloud-passwd-srvr is stopped:
  - It removes iptables rules on port 8080, eth0

Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2012-10-26 21:37:32 +05:30
Sheng Yang 5ff1c52e40 CS-16441: Clear /tmp for file locks when starting up 2012-10-03 17:19:47 -07:00
Alex Huang 25e8deb679 Applied review #7342 2012-10-01 17:34:56 -07:00
Anthony Xu 12d12ac54c CS-16409 : dhcp request doesn't have target ip, remove ip in the iptable rule 2012-10-01 10:27:42 -07:00
Anthony Xu 87e6278725 CS-16049 : VPC, VR provides metadata and user data through port 80, this port should be only open for targeting to this VR ip 2012-10-01 10:27:42 -07:00
Chip Childers f212177146 CLOUDSTACK-159 - Added license header 2012-10-01 12:23:57 -04:00
Chip Childers 5f7a8a0436 CLOUDSTACK-162 - Added license header 2012-10-01 12:21:41 -04:00
Anthony Xu a892f08280 fix licnese header for vpc_passwd_server 2012-09-28 10:18:01 -07:00
Anthony Xu e44d306dd9 VPC : password reset fix 2012-09-26 17:42:42 -07:00
Anthony Xu 1946a9a583 VPC : password reset,
add console redirect
2012-09-26 17:42:42 -07:00
Anthony Xu ddffdc9db7 CS-16393
one typo fix
    make passwd service exitable
2012-09-26 17:42:42 -07:00
Anthony Xu b59c3c8885 VPC : password server, start password server when guest network is created 2012-09-26 17:42:42 -07:00