Rodrigo D. Lopez
4189bac8e0
enable to create VPC portfowarding rules with source cidr ( #7081 )
...
Co-authored-by: Lopez <rodrigo@scclouds.com.br>
Co-authored-by: Fabricio Duarte <fabricio.duarte.jr@gmail.com>
2024-11-28 17:53:07 +01:00
Rohit Yadav
5b7c86aa45
Merge remote-tracking branch 'origin/4.18' into 4.19
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2024-11-07 14:51:43 +05:30
Wei Zhou
896b8bfabf
VR: fix wrong check when compare two configuration files ( #9822 )
2024-11-07 14:48:02 +05:30
Wei Zhou
1ca9a10912
VR: remove vpn user info when apply vpn users list ( #9568 )
...
Prior to this PR
```
root@r-663-VM:/var/cache/cloud# gzip -dk vpn_user_list.json.aae73e2c-32ba-44f3-bf47-426933a67bcb.gz
root@r-663-VM:/var/cache/cloud# /opt/cloud/bin/update_config.py vpn_user_list.json.aae73e2c-32ba-44f3-bf47-426933a67bcb
{'id': 'vpnuserlist', 'test': {'add': True, 'password': 'test', 'user': 'test'}}
{'vpn_users': [{'user': 'test', 'password': 'test', 'add': True}], 'type': 'vpnuserlist', 'delete_from_processed_cache': False}
line = # Secrets for authentication using CHAP
line = # client server secret IP addresses
line =
line =
line = test * test *
```
with this PR
```
root@r-663-VM:/var/cache/cloud# gzip -dk vpn_user_list.json.aae73e2c-32ba-44f3-bf47-426933a67bcb.gz
root@r-663-VM:/var/cache/cloud# /opt/cloud/bin/update_config.py vpn_user_list.json.aae73e2c-32ba-44f3-bf47-426933a67bcb
root@r-663-VM:/var/cache/cloud#
```
2024-09-04 11:57:28 +05:30
Daan Hoogland
050ee44137
Merge branch '4.18' into 4.19
2024-06-18 16:05:45 +02:00
Vishesh
6c7426e3a7
Prevent network disruption on adding a VPC tier for redundant VRs ( #9251 )
2024-06-18 13:47:45 +02:00
dahn
56b69b157e
prevent duplicate ip table rules in SSVM ( #8530 )
...
Co-authored-by: Wei Zhou <weizhou@apache.org>
2024-06-14 09:01:15 +02:00
Rohit Yadav
5745674da5
Merge remote-tracking branch 'origin/4.18' into 4.19
2024-04-25 09:45:08 +05:30
Wei Zhou
3b0e6ac90c
VR: fix dnmasq misconfiguration if there are multiple IP ranges in a shared network ( #8741 )
2024-04-24 14:51:50 +02:00
Daan Hoogland
78e07cff62
Merge release branch 4.18 to 4.19
...
* 4.18:
protect against null-path (#8915 )
UI: Fix missing locale strings for Status widget (#8792 )
Add a shutdownhook to remove jobs owned by the process (#8896 )
2024-04-19 12:43:34 +02:00
dahn
7affbb1dac
protect against null-path ( #8915 )
...
Co-authored-by: Vladimir Dombrovski <vladimir.dombrovski@bso.co>
Co-authored-by: Vishesh <vishesh92@gmail.com>
Co-authored-by: Suresh Kumar Anaparti <sureshkumar.anaparti@gmail.com>
2024-04-19 12:23:31 +02:00
Rohit Yadav
308ed1399e
Merge remote-tracking branch 'origin/4.18' into 4.19
2024-03-20 15:49:21 +05:30
Wei Zhou
8c62365dbb
VPC VR: fix empty iptables if there is no vpc tier ( #8787 )
2024-03-19 14:45:24 -03:00
Vishesh
a8028eecbd
Merge remote-tracking branch 'origin/4.18' into 4.19
2024-02-13 11:44:20 +05:30
Wei Zhou
e47a910019
VR: fix issue between VPC VMs and other Public IPs in the same subnet as additional Public IPs ( #8599 )
...
* VR: fix issue between VPC VMs and other Public IPs in the same subnet as additional Public IPs
* Update PR8599: move to VpcVirtualNetworkApplianceManagerImpl
2024-02-13 11:03:40 +05:30
Wei Zhou
b8904f75dd
Merge remote-tracking branch 'apache/4.18' into 4.19
2024-02-05 10:08:31 +01:00
dahn
3f33592b67
systemvm: vncport evaluation ( #8369 )
...
* make sure env var gets evaluated by using double quotes
* delete unsused scripts
2024-02-05 14:08:00 +05:30
Abhishek Kumar
b4c7705d4b
Merge remote-tracking branch 'apache/4.18' into main
2023-10-10 17:30:37 +05:30
Wei Zhou
e290ac5451
systemvm: remove config in /etc/pam.d/systemd-user to fix user@0.service ( #8048 )
...
the service `user@0.service` fails in system vms and virtual routers
This PR removes a change to fix memory leak of SSH connections in the systemvm templates with old linux kernel.
2023-10-10 15:46:44 +05:30
Daan Hoogland
72cf9740f9
Merge branch '4.18'
2023-10-06 13:50:29 +02:00
Wei Zhou
51add0a066
systemvm: check if patchfile exists and is valid tarball before patching ( #7953 )
2023-10-06 09:41:16 +02:00
Daan Hoogland
b20554820b
Merge release branch 4.18 to main
...
* 4.18:
VR: remove apache2 config for removed VPC tiers (#7982 )
fix units labels (#8001 )
2023-09-28 07:59:15 +02:00
Wei Zhou
10d7e6cf6f
VR: remove apache2 config for removed VPC tiers ( #7982 )
2023-09-26 15:25:39 +02:00
John Bampton
6f4503488b
pre-commit: apply `end-of-file-fixer` to all files ( #7551 )
2023-08-02 13:47:21 +02:00
Wei Zhou
8c546bd5a6
router: do not restart conntrackd if no guest networks (issue 6702) ( #7265 )
...
This PR fixes #6702
The service conntrackd will be started by the script /opt/cloud/bin/cs/CsRedundant.py, therefore add it to disabled_svcs so it is not started automatically when VR is started.
2023-05-11 12:59:32 +05:30
David Jumani
c774b865c9
Tungsten integration ( #7065 )
...
Co-authored-by: rtodirica <rtodirica@ena.com>
Co-authored-by: Huy Le <huylm@unitech.vn>
Co-authored-by: radu-todirica <Radu.Todirica@ness.com>
Co-authored-by: Huy Le <minh.le@ext.ewerk.com>
Co-authored-by: Simon Weller <siweller77@gmail.com>
Co-authored-by: dahn <daan@onecht.net>
2023-02-01 09:19:53 +01:00
John Bampton
d74f64a2e1
Use lowercase HTTP header field names so we are compatible with HTTP/2 ( #7006 )
2023-01-23 11:17:54 +01:00
Pearl Dsilva
3044d63a8b
Configurable MTU for VR ( #6426 )
...
Co-authored-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
2023-01-04 09:42:24 +01:00
Paula Oliveira
0fe2e6950e
Improving code related to the Agent properties ( #6348 )
...
Co-authored-by: Paula Zomignani Oliveira <paula@scclouds.com.br>
Co-authored-by: João Jandre <48719461+JoaoJandre@users.noreply.github.com>
Co-authored-by: GutoVeronezi <daniel@scclouds.com.br>
2022-12-22 12:00:49 +01:00
Rohit Yadav
01b79e797c
Merge remote-tracking branch 'origin/4.17' into main
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2022-12-12 14:16:31 +00:00
Abhishek Kumar
5516f74fce
systemvm: fix management route ( #6921 )
...
Fixes #6873
When the management server is in a different subnet than the pod in which a VPC VR is deployed, an ip route must be added just after creation of eth0 to allow the connectivity between the VR and the management server.
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
Co-authored-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2022-12-12 17:41:54 +05:30
Rohit Yadav
1be7c2f348
Merge remote-tracking branch 'origin/4.17'
2022-12-12 13:29:28 +05:30
Wei Zhou
11d27a5a3a
systemvm: vpc router fix /etc/network/interfaces is misconfigured ( #6435 )
...
This PR fixes that the /etc/network/interfaces is misconfigured in VPC VR startup, which causes VPC VR to be stuck for 1 minute and continue working.
The issue is because ifup eth0 and ifdown eth0 do not work when /etc/network/interfaces is not correct in VPC VR.
2022-12-09 18:10:20 +05:30
Wei Zhou
a63b2aba7a
VM Autoscaling with virtual router ( #6571 )
2022-12-05 15:23:03 +01:00
Rohit Yadav
3d8ea4f3b3
Merge remote-tracking branch 'origin/4.17'
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2022-11-30 21:02:17 +05:30
Daniel Augusto Veronezi Salvador
cf32f77e3d
systemvm: Fix C2S VPN in parallel to S2S VPN ( #6907 )
...
PR #5375 , introduced in version 4.15.2.0, removed parameter %any of VPNs client-to-site (C2S) IPSec secrets:
structure before PR vr: ipsec/l2tp vpn secret with no ID selectors #5375 :
<IP> %any : PSK "<PSK>"
structure after PR vr: ipsec/l2tp vpn secret with no ID selectors #5375 :
<IP> : PSK "<PSK>"
Because of that, when a VPN site-so-site (S2S) is created in parallel to a VPN C2S in the same network, the C2S will not handle any IP (%any) anymore and, as the network is being tunneled to the other VPN, the connection will be handled by the final peer. This way, when a VPN S2S is created in parallel to a VPN C2S in the same network, it is only possible to connect to the C2S with the S2S PSK.
As ACS is only able to implement a single C2S per network (ACS allows setting more than one IP of the network as VPN, however, only the first will be implemented) and every S2S has its own secret file, the secrets structure of C2S was changed to contain only the PSK:
: PSK "<PSK>"
By doing that, StrongSwan will handle correctly C2S connections from any IP and still will use the correct PSK for S2S.
Co-authored-by: GutoVeronezi <daniel@scclouds.com.br>
2022-11-30 18:29:05 +05:30
John Bampton
e65c22d883
Fix spelling ( #6860 )
2022-11-13 10:56:15 +01:00
dahn
0c93a85b3a
add ip rule for VPC extra IPs ( #6846 )
2022-10-31 15:13:19 +01:00
Rodrigo D. Lopez
adfaa730b1
Externalizes logrotate service frequency timer in VR ( #6507 )
...
Co-authored-by: Lopez <rodrigo@scclouds.com.br>
2022-10-26 09:04:12 +02:00
Abhishek Kumar
67024b036a
vr: fix packet interface mismatch ( #6656 )
...
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
Co-authored-by: Daan Hoogland <daan@onecht.net>
2022-09-29 17:02:28 +02:00
Marcus Sorensen
1a0a61fd9f
Allow option of exposing VM domain info via instance metadata ( #6710 )
...
This PR allows the cloud admin to set either a global or domain-specific value "metadata.allow.expose.domain", and when set this allows the VM to see the name and ID of the immediate domain that contains the VM in instance metadata. This can be useful or a variety of things such as bootstrapping VM configuration and access according to domain.
This PR also deletes the CloudZonesNetworkElement because it isn't referred to anywhere, and there was initially some confusion as to whether this code needed to be updated when extending metadata. If it needs to be kept we can remove that delete from the PR.
Signed-off-by: Marcus Sorensen <mls@apple.com>
Co-authored-by: Marcus Sorensen <mls@apple.com>
Co-authored-by: dahn <daan.hoogland@gmail.com>
Co-authored-by: Daniel Augusto Veronezi Salvador <38945620+GutoVeronezi@users.noreply.github.com>
2022-09-22 15:14:21 +05:30
Nicolas Vazquez
b2fbe7bb12
console: Console access enhancements ( #6577 )
...
This PR creates a new API createConsoleAccess to create VM console URL allowing it to connect using other UI implementations. To avoid reply attacks, the console access is enhanced to use a one time token per session
New configuration added:
consoleproxy.extra.security.validation.enabled: Enable/disable extra security validation for console proxy using a token
Documentation PR: apache/cloudstack-documentation#284
2022-09-14 12:39:59 +05:30
Abhishek Kumar
78b68fd7e6
api,server: custom dns for guest network ( #6425 )
...
Adds option to provide custom DNS servers for isolated network, shared network and VPC tier.
New API parameters added in createNetwork API along with the corresponding response parameters.
Doc PR: apache/cloudstack-documentation#276
2022-09-10 13:05:40 +05:30
Abhishek Kumar
cf18549dbb
Merge remote-tracking branch 'apache/4.17' into main
2022-09-07 14:11:09 +05:30
Abhishek Kumar
d3bfdacffd
systemvm,vr: disable radvd for non-applicable VRs ( #6706 )
...
Fixes #6700
When VR is a DHCP server system VM type then stop radvd.
2022-09-07 13:42:57 +05:30
Rodrigo D. Lopez
ac2857158d
externalizes used protocol to upload isos, volumes and templates ( #6506 )
...
Co-authored-by: Lopez <rodrigo@scclouds.com.br>
2022-08-02 08:46:55 +02:00
Abhishek Kumar
d42c0eeb11
systemvm: setup radvd correctly ( #6343 )
...
* systemvm: setup radvd correctly
Fixes radvd setup on VR for isolated network
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* donot start radvd on startup
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* Revert "donot start radvd on startup"
This reverts commit 2a8f737f3c .
* ipv6: do not start radvd in common.sh
* ipv6: do not add radvd to enabled_svcs in CsRedundant.py
* systemvm: add radvd to /var/cache/cloud/enabled_svcs when enable radvd
* test: fix test_network_ipv6.py
Co-authored-by: Wei Zhou <weizhou@apache.org>
2022-05-03 17:53:32 -03:00
Pearl Dsilva
3bd723ca06
Change patch path during live patching of systemVMs ( #6328 )
...
* Improve log when live patching fails
* change patching path from /tmp to /var/cache/clou
* add iptable rule for console proxy (novnc)
* temporary template paths
* revert pom xml to original paths
2022-04-29 00:01:11 -03:00
Abhishek Kumar
e53ed9e350
network: fix event, acl, firewall for ipv6 nw ( #6314 )
...
* add guest ipv6 cidr for fw rule
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
* fix fw, acl nft chains
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
* remove unnecessary log
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
* api response should return default internet protocol
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
* event resource fix for ipv6 firewall rule events
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
* fix radvd, restore ipv6 intf in vm type script
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
* fix dadfailed with rvr
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
2022-04-26 23:30:44 -03:00
Abhishek Kumar
4a914aa88d
network: ipv6 static routes ( #5786 )
...
* wip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* IPv6: configure VR of isolated networks
* IPv6: add default IPv6 route in VR of isolated networks
* Reformat server/src/main/java/com/cloud/network/NetworkServiceImpl.java
* IPv6: update network to offering which support IPv6
* IPv6: update vm nic ipv6 address when update network to new offering
* IPv6: configure VPC VR to support multiple tiers with IPv6
* IPv6: add RDNSS in radvd.conf
* IPv6/UI: support ipv6 protocols in Network ACL
* wip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes for diagnostics
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* more import fromo #5594
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* IPv6: fix wrong public ipv6 in VPC VR
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* Update server/src/main/java/com/cloud/configuration/ConfigurationManagerImpl.java
Co-authored-by: dahn <daan.hoogland@gmail.com>
* ui: fix add ipv6 prefix labels, message
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: label fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* logging fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* minor ui refactor
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ip6 events
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ip6 usage
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* unused
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* slaac based public ip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* remove unused
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* diagnostics fix for vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* firewall changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* alert and show ipv6 usage
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* change for network response
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ipv6 network test
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: fix ipaddress listing
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* wip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix simulator
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test and fixes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test temp change revert
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fixes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* use uuid
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* event syntax fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* wip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* review comments
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* assign vlan public IP for dualstack only if both protocols present on same vlan
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* internetprotocol in networkofferingresponse
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* add tcp, udp
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* support vpc with ipv6 only on same vlan
- adds new internet protocol param to createVpcOffering API
- When DualStack internet protocol is selected for the VPC offering, tiers with network with or without IPv6 support can be deployed.
- When IPv4 internet protocol is used for the VPC offering, tiers with network with only IPv4 support can be deployed
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* change and fix
allow VPC with IPv4 protocol to deploy tiers with IPv6
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui fixes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix multiple routes, network guest ipv6 gateway
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* address review comments
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* stop radvd on backup VR
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix router redundant status with ipv6
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* disable radvd for backup vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* correctly set ipv6 in redundant router case
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* remove unused code
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix connection
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: don't show all protocol for egress
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix guest ipv6 for redundant VRs
Redundant VRs will not be assigned an IPv6 by ACS and guest netwrok gateway will be added as IPv6 for guest interface by systemvm scripts during setting redundant state of the VR.
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix missing ipv6 on redundant vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix syntax
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: fix vpc tier redirect to show details
When redirecting to VPC tier, details tab should be active by default
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* restart radvd on primary redundant vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* check for ipv6 values
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* remove old ui change
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix condition
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* remove gateway from backup vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* network upgrade fail early
when IPv6 network cannot be allocated fail before shutting down the network
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix radvd not running on RVR
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* prepare radvd.conf once
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix job polling
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix RVR for vpc with ipv6
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix ipv6 network acls
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* Update CsConfig.py
* add check
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test: vpc offering test
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test: add negative tests for guest prefix, public range
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* add default ipv6 route for primary
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix dadfailed on vpc rvr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: fix add iprange form, dedicate action visibility
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix adding, deleting ipv6 range
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix failing test
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix missing destination cidr in ipv6 firewall
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix ipv6 nftables rules
Allow storing linger IPv6 CIDRs in DB
Specify all port range for TC{, UDP protocol rules withot ports
Fix adding nft rules by creating chains first
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix icmpv6 type, code
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix icmp type, code
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test: add more for ipv6 network
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* add warning message for egress policy in ipv6 fw rule
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui,server: update ipv6 vlan range
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* subnet operations inside transaction
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* server: persistent public IPv6 for network
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: fix action alignment
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix vpc acl for tiers
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix removing network placeholder nic
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix acl rules for ip version
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix placeholder nic and nd-neighbor block issue
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test for redundant nw
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix ping
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* systemvm: uprgade to debian 11.3.0
* ipv6: enable ipv6 in sysctl config in bootstrap.sh
* VR: fix KeyError: 'nic_ip6_cidr'
* build fix for latest event changes
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
Co-authored-by: Wei Zhou <weizhou@apache.org>
Co-authored-by: dahn <daan.hoogland@gmail.com>
2022-04-25 22:51:32 -03:00