Commit Graph

3060 Commits

Author SHA1 Message Date
Nitin e7a199e253 bug 11096: ExtractTemplate - For private template choose the correct sec storage host id since its not present in all the sec storage now. 2011-08-12 14:46:12 +05:30
Naredula Janardhana Reddy 00dbaf0954 bug 10561: allowing to create a firewall rule with sameport range but different protocols 2011-08-12 12:54:41 +05:30
Sheng Yang b560880907 Add alert and log for redundant router state change 2011-08-11 23:36:31 -07:00
alena 4530d35bc5 bug 11029: db upgrade from 2.2.9 to 2.2.10 includes firewall_rule upgrade now
status 11029: resolved fixed

Commit also includes the following:

* map firewall rule to pf/lb/staticNat/vpn when the firewall rule is created as a part of pf/lb/staticNat/vpn rule creation
* when delete firewall rules, also delete related firewall rule
2011-08-11 18:09:08 -07:00
Kelven Yang a3ad26ed89 Disable HA in CloudStack HA manager under VMware 2011-08-11 18:07:57 -07:00
Sheng Yang 0387b6e802 Redundant router script fix, also fix CheckRouterTask 2011-08-11 17:56:28 -07:00
Chiradeep Vittal e4092e8084 do not release ip for advanced networking / regular LB usage 2011-08-11 17:44:03 -07:00
alena 5080e8ba33 No need to apply static nat for ip which is not static nat enabled 2011-08-11 16:00:16 -07:00
Sheng Yang b63b3fcf05 Skip the null Host for CheckRouterTask 2011-08-11 14:29:49 -07:00
Kelven Yang 9e1ee30ea3 bug 11019: Let VM sync to coordinate with possible VM-relocation under VMware when VM is in starting time 2011-08-11 14:28:39 -07:00
alena 10034bc196 Fixed rule validation for static nat rules 2011-08-11 14:03:49 -07:00
Sheng Yang f28291cedb Fix redundant router switch back to single router
The existed redundant router network didn't change.
2011-08-11 12:48:56 -07:00
keshav d47eb46faf Added parameter to enable the firewall rule UI to the list capabilities API. 2011-08-11 11:42:02 -07:00
alena 477e5d6389 bug 10561: reapply static nat on the backend as a part of domR restart and network restart 2011-08-11 11:19:09 -07:00
Alex Huang 1079a77024 bug 11043: rverted the bad fix 2011-08-11 10:27:02 -07:00
alena 278f2a401f bug 10561: intermediate checkin for enable/disableStaticNat.
1) On enableStaticNat command we actually send the command to the backend (we used to just upgrade the DB in the past). The backend command carries sourceIp and destIp, and creates IP to IP mapping on the domR.
2) On disableStaticNat for the Ip address in addition to cleaning up port ranges, we also delete IP to IP mapping on the domR.
2011-08-11 10:19:22 -07:00
Chiradeep Vittal 17a8234140 should be able to apply firewall rules to static natted ips 2011-08-10 22:53:07 -07:00
Chiradeep Vittal b33f08053c bug 11072: one more 2011-08-10 22:04:21 -07:00
Chiradeep Vittal 375da4da1a bug 11072: icky icky icky 2011-08-10 20:40:13 -07:00
alena e874109839 bug 11071: when elb service is enabled, don't check supported protocols as the provider is NULL in data_center table
status 11071: resolved fixed
2011-08-10 19:25:04 -07:00
alena 0805dbd3fb Fixed rule validation for ICMP protocol 2011-08-10 19:11:26 -07:00
alena 13a9c1d589 Fixed capability check in rule validation 2011-08-10 18:23:13 -07:00
Sheng Yang 8c70e06572 Fix existed single router network after enable redundant router feature 2011-08-10 18:07:42 -07:00
alena 3c29f00de1 bug 11013: Basic zone setup - pass domRs from other pods to addVirtualMachineToNetwork() method only when network.dns.basiczone.updates is set to "all"
status 11013: resolved fixed
2011-08-10 16:03:48 -07:00
keshav 1bb057d113 Added configuration parameter to enable/disable the firewall rule UI. 2011-08-10 15:56:01 -07:00
Sheng Yang 18f2df44a1 Clean up restart Network 2011-08-10 15:02:08 -07:00
Sheng Yang bcf5058eda Clean up VirtualRouterElement.restart() 2011-08-10 13:23:30 -07:00
alena 956445960a Throw ResourceUnavailableException when rules/ips fail to apply on the backend 2011-08-10 12:56:25 -07:00
alena fe3dd44bec ICMP protocol is supported in createFirewallRule command only; throw an error if specified in createPF/StaticNat/LB rule 2011-08-10 12:56:25 -07:00
Sheng Yang 58a13c0d5a bug 11021: Add ReservationStrategy.Managed to prevent sourceNat from release
status 11021: resolved fixed
2011-08-10 12:51:43 -07:00
Sheng Yang 6e0eeb132e bug 11045: Fix exception exit of CheckRouterTask
Catch all the exception and come back to work.

status 11045: resolved fixed
2011-08-10 12:05:22 -07:00
alena 32b53351ff Fixed response processing in createFirewallRule command 2011-08-10 11:36:34 -07:00
Chiradeep Vittal 3f3c64025b change it back to false since ui now handles false 2011-08-10 10:20:45 -07:00
Abhinandan Prateek 9bba09857e bug 10561: readding source cidr changes to firewall rules 2011-08-10 13:52:42 +05:30
Sheng Yang 501dc0d9f4 bug 10640: Update redundant virtual router allocation algorithm
Try to put routers to two different primary storages with two hosts, not the same
host.
2011-08-09 18:21:28 -07:00
Sheng Yang 15cad8ba8e Revert "Catch domr creation exception"
This reverts commit 2eff1d0eb9e39e4a8d702bb9867b9e95bb276b3e.
2011-08-09 15:57:46 -07:00
Sheng Yang f558f74863 Catch domr creation exception 2011-08-09 15:03:27 -07:00
Kelven Yang 75c9d43f2f Seperate template cleanup control to enable template preloading 2011-08-09 13:31:23 -07:00
Sheng Yang 8249c072ee Add more detail log for startVirtualRouter 2011-08-09 11:16:33 -07:00
Sheng Yang 980c4b9120 Change router to FAULT state if anything goes wrong on fail-over 2011-08-09 11:09:20 -07:00
Abhinandan Prateek 311afeae23 bug 10731: reverting back source cidr changes for loadbalancer and portforwarding 2011-08-09 16:01:48 +05:30
Chiradeep Vittal e466f49fc6 for now keep supportELB for virtualized as public instead of false 2011-08-09 01:09:14 -07:00
Chiradeep Vittal 179368ea32 get lb working on advanced mode again 2011-08-09 01:02:58 -07:00
Chiradeep Vittal 64efcf0443 Merge branch '2.2.8' of ssh://git.cloud.com/var/lib/git/cloudstack-oss into 2.2.8 2011-08-08 22:42:10 -07:00
Chiradeep Vittal 301bf049d1 fix compile issues 2011-08-08 22:03:08 -07:00
Chiradeep Vittal 924961d898 merge nectarine 2011-08-08 21:45:37 -07:00
alena ae9ba8996a Fixed restarNetwork for networks of type Direct - was broken with checkin bfdb4d2d989ed00adcbbf5455731cc2980afcb7b 2011-08-08 21:33:34 -07:00
alena c5502fb8aa Fixed the bug when domR was re-created as a part of implement() method in network gurus with sourceNatIp address belonging to incorrect user (System user instead of network owner). 2011-08-08 21:17:24 -07:00
alena 06d007337a bug 10561: intermidiate checkin for FirewallRuleFeature
1) Added new apis: createFirewallRule, deleteFirewallRule, listFirewallRules
2) Modified existing apis - added boolean openFirewall parameter to createPortForwardingRule/createIpForwardingRule/createRemoteAccessVpn. If parameter is set to true, open firewall on the domR before creating an actual PF rule there
Modified backend calls appropriately.
3) Schema changes for firewall_rules table:
* startPort/endPort can be null now
* added icmp_type, icmp_code fields (can be not null only when protocol is icmp)
4) Added new manager - FirewallManagerImpl
2011-08-08 20:59:40 -07:00
Kelven Yang a3fb501378 adjust to merged changes 2011-08-08 18:44:14 -07:00