Nitin
e7a199e253
bug 11096: ExtractTemplate - For private template choose the correct sec storage host id since its not present in all the sec storage now.
2011-08-12 14:46:12 +05:30
Naredula Janardhana Reddy
00dbaf0954
bug 10561: allowing to create a firewall rule with sameport range but different protocols
2011-08-12 12:54:41 +05:30
Sheng Yang
b560880907
Add alert and log for redundant router state change
2011-08-11 23:36:31 -07:00
alena
4530d35bc5
bug 11029: db upgrade from 2.2.9 to 2.2.10 includes firewall_rule upgrade now
...
status 11029: resolved fixed
Commit also includes the following:
* map firewall rule to pf/lb/staticNat/vpn when the firewall rule is created as a part of pf/lb/staticNat/vpn rule creation
* when delete firewall rules, also delete related firewall rule
2011-08-11 18:09:08 -07:00
Kelven Yang
a3ad26ed89
Disable HA in CloudStack HA manager under VMware
2011-08-11 18:07:57 -07:00
Sheng Yang
0387b6e802
Redundant router script fix, also fix CheckRouterTask
2011-08-11 17:56:28 -07:00
Chiradeep Vittal
e4092e8084
do not release ip for advanced networking / regular LB usage
2011-08-11 17:44:03 -07:00
alena
5080e8ba33
No need to apply static nat for ip which is not static nat enabled
2011-08-11 16:00:16 -07:00
Sheng Yang
b63b3fcf05
Skip the null Host for CheckRouterTask
2011-08-11 14:29:49 -07:00
Kelven Yang
9e1ee30ea3
bug 11019: Let VM sync to coordinate with possible VM-relocation under VMware when VM is in starting time
2011-08-11 14:28:39 -07:00
alena
10034bc196
Fixed rule validation for static nat rules
2011-08-11 14:03:49 -07:00
Sheng Yang
f28291cedb
Fix redundant router switch back to single router
...
The existed redundant router network didn't change.
2011-08-11 12:48:56 -07:00
keshav
d47eb46faf
Added parameter to enable the firewall rule UI to the list capabilities API.
2011-08-11 11:42:02 -07:00
alena
477e5d6389
bug 10561: reapply static nat on the backend as a part of domR restart and network restart
2011-08-11 11:19:09 -07:00
Alex Huang
1079a77024
bug 11043: rverted the bad fix
2011-08-11 10:27:02 -07:00
alena
278f2a401f
bug 10561: intermediate checkin for enable/disableStaticNat.
...
1) On enableStaticNat command we actually send the command to the backend (we used to just upgrade the DB in the past). The backend command carries sourceIp and destIp, and creates IP to IP mapping on the domR.
2) On disableStaticNat for the Ip address in addition to cleaning up port ranges, we also delete IP to IP mapping on the domR.
2011-08-11 10:19:22 -07:00
Chiradeep Vittal
17a8234140
should be able to apply firewall rules to static natted ips
2011-08-10 22:53:07 -07:00
Chiradeep Vittal
b33f08053c
bug 11072: one more
2011-08-10 22:04:21 -07:00
Chiradeep Vittal
375da4da1a
bug 11072: icky icky icky
2011-08-10 20:40:13 -07:00
alena
e874109839
bug 11071: when elb service is enabled, don't check supported protocols as the provider is NULL in data_center table
...
status 11071: resolved fixed
2011-08-10 19:25:04 -07:00
alena
0805dbd3fb
Fixed rule validation for ICMP protocol
2011-08-10 19:11:26 -07:00
alena
13a9c1d589
Fixed capability check in rule validation
2011-08-10 18:23:13 -07:00
Sheng Yang
8c70e06572
Fix existed single router network after enable redundant router feature
2011-08-10 18:07:42 -07:00
alena
3c29f00de1
bug 11013: Basic zone setup - pass domRs from other pods to addVirtualMachineToNetwork() method only when network.dns.basiczone.updates is set to "all"
...
status 11013: resolved fixed
2011-08-10 16:03:48 -07:00
keshav
1bb057d113
Added configuration parameter to enable/disable the firewall rule UI.
2011-08-10 15:56:01 -07:00
Sheng Yang
18f2df44a1
Clean up restart Network
2011-08-10 15:02:08 -07:00
Sheng Yang
bcf5058eda
Clean up VirtualRouterElement.restart()
2011-08-10 13:23:30 -07:00
alena
956445960a
Throw ResourceUnavailableException when rules/ips fail to apply on the backend
2011-08-10 12:56:25 -07:00
alena
fe3dd44bec
ICMP protocol is supported in createFirewallRule command only; throw an error if specified in createPF/StaticNat/LB rule
2011-08-10 12:56:25 -07:00
Sheng Yang
58a13c0d5a
bug 11021: Add ReservationStrategy.Managed to prevent sourceNat from release
...
status 11021: resolved fixed
2011-08-10 12:51:43 -07:00
Sheng Yang
6e0eeb132e
bug 11045: Fix exception exit of CheckRouterTask
...
Catch all the exception and come back to work.
status 11045: resolved fixed
2011-08-10 12:05:22 -07:00
alena
32b53351ff
Fixed response processing in createFirewallRule command
2011-08-10 11:36:34 -07:00
Chiradeep Vittal
3f3c64025b
change it back to false since ui now handles false
2011-08-10 10:20:45 -07:00
Abhinandan Prateek
9bba09857e
bug 10561: readding source cidr changes to firewall rules
2011-08-10 13:52:42 +05:30
Sheng Yang
501dc0d9f4
bug 10640: Update redundant virtual router allocation algorithm
...
Try to put routers to two different primary storages with two hosts, not the same
host.
2011-08-09 18:21:28 -07:00
Sheng Yang
15cad8ba8e
Revert "Catch domr creation exception"
...
This reverts commit 2eff1d0eb9e39e4a8d702bb9867b9e95bb276b3e.
2011-08-09 15:57:46 -07:00
Sheng Yang
f558f74863
Catch domr creation exception
2011-08-09 15:03:27 -07:00
Kelven Yang
75c9d43f2f
Seperate template cleanup control to enable template preloading
2011-08-09 13:31:23 -07:00
Sheng Yang
8249c072ee
Add more detail log for startVirtualRouter
2011-08-09 11:16:33 -07:00
Sheng Yang
980c4b9120
Change router to FAULT state if anything goes wrong on fail-over
2011-08-09 11:09:20 -07:00
Abhinandan Prateek
311afeae23
bug 10731: reverting back source cidr changes for loadbalancer and portforwarding
2011-08-09 16:01:48 +05:30
Chiradeep Vittal
e466f49fc6
for now keep supportELB for virtualized as public instead of false
2011-08-09 01:09:14 -07:00
Chiradeep Vittal
179368ea32
get lb working on advanced mode again
2011-08-09 01:02:58 -07:00
Chiradeep Vittal
64efcf0443
Merge branch '2.2.8' of ssh://git.cloud.com/var/lib/git/cloudstack-oss into 2.2.8
2011-08-08 22:42:10 -07:00
Chiradeep Vittal
301bf049d1
fix compile issues
2011-08-08 22:03:08 -07:00
Chiradeep Vittal
924961d898
merge nectarine
2011-08-08 21:45:37 -07:00
alena
ae9ba8996a
Fixed restarNetwork for networks of type Direct - was broken with checkin bfdb4d2d989ed00adcbbf5455731cc2980afcb7b
2011-08-08 21:33:34 -07:00
alena
c5502fb8aa
Fixed the bug when domR was re-created as a part of implement() method in network gurus with sourceNatIp address belonging to incorrect user (System user instead of network owner).
2011-08-08 21:17:24 -07:00
alena
06d007337a
bug 10561: intermidiate checkin for FirewallRuleFeature
...
1) Added new apis: createFirewallRule, deleteFirewallRule, listFirewallRules
2) Modified existing apis - added boolean openFirewall parameter to createPortForwardingRule/createIpForwardingRule/createRemoteAccessVpn. If parameter is set to true, open firewall on the domR before creating an actual PF rule there
Modified backend calls appropriately.
3) Schema changes for firewall_rules table:
* startPort/endPort can be null now
* added icmp_type, icmp_code fields (can be not null only when protocol is icmp)
4) Added new manager - FirewallManagerImpl
2011-08-08 20:59:40 -07:00
Kelven Yang
a3fb501378
adjust to merged changes
2011-08-08 18:44:14 -07:00