7703b2fab3
CLOUDSTACK-7092: Disabled icmp redirects in VR
...
(cherry picked from commit e0d4af5062
2014-07-15 22:13:32 +02:00
d5a92454fd
CLOUDSTACK-7028: Fixed adding route for additional public nic on fail over
...
(cherry picked from commit e336796cd5
2014-07-01 14:36:27 +02:00
d4a903fd6e
CLOUDSTACK-6997: Increase proc ip_conntrack_max
...
(cherry picked from commit 004d616322
2014-06-30 19:52:42 +02:00
8db1b21cc8
CLOUDSTACK-3540: Fix edithosts.sh on matching tag
...
(cherry picked from commit 46f2b61374
2014-06-29 11:15:04 +02:00
1369a0dacb
CLOUDSTACK-6908: Enable IPv6 in sysctl when only necessary
...
This new way would only enable IPv6 when VR is created in IPv6 shared network.
Otherwise IPv6 sysctl options remain disable.
(cherry picked from commit 60e4629323
2014-06-14 02:31:55 +02:00
f26b6d0a78
Cosmetic fixed. three in total. 1. Only run hv_kvp_daemon if it exists. 2. add the -f argument to the rm to make is silent if it doesn't exist. 3. by using log_action_msg instead of log_action_begin_msg the screen output looks way better.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 66816827cb
2014-06-12 14:58:24 +02:00
99aa7a096a
xenstore-utils on debian wheezy does not have /usr/sbin/xenstore so these commands file. It does have xenstore-write and xenstore-rm so by adding a - this is fixed easily.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 2e83baaca2ed330d4dcd
2014-06-10 16:29:01 +02:00
8ff5ca0b2f
If for some reason dnsmasq.log does not exist anymore logrotate will create it with nobody as owner. This will prevent dnsmasq deamon from logging to that file.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit c54ce3cafb94bb5c29b2
2014-06-10 16:28:51 +02:00
4262080ba4
rats
...
(cherry picked from commit b85dd956f85eb0265349
2014-06-10 16:28:41 +02:00
3394d3c4f5
blacklist pcspkr as cosmetic improvement. aesni_intel blacklisting was not working because the include only works if the file ends with .conf.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 11f532bbecf94ff4ad04
2014-06-10 16:28:34 +02:00
d298546ccc
CLOUDSTACK-6328: run.sh check if an existing java process is running, before spawining new ones
...
Signed-off-by: Jayapal <jayapal@apache.org>
2014-05-27 10:42:23 +02:00
8326428bb8
A slightly more reliable way of extracting the device name. Thanks John.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-05-20 12:33:48 +02:00
1c88ea51e5
releasing dhcp leases on vpcs failes because the network tier of the tennant aren't behinbd eth0. Here we make interface selection dynamic.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-05-20 12:33:44 +02:00
c4ae789e8b
CLOUDSTACK-6714: monitor script echo service command is added with quotes
2014-05-20 10:24:18 +02:00
adcc21ef3b
Fixed vpc private gateway backend issues
2014-05-15 20:09:26 +02:00
d00d28105e
CLOUDSTACK-6241: Fix default route for IPv6 network when IPv4 not used
...
(cherry picked from commit e406adc081
2014-05-14 09:02:40 +02:00
dcb0db6084
CLOUDSTACK-6434: Make RvR advert_int configurable
...
In some network environment, 1*3 seconds by default make RvR setup too
sensitive. A configurable parameter would be better for fitting different
network environments.
2014-04-16 20:15:56 -07:00
94a146a43e
CLOUDSTACK-6432: Blocking DHCP server to service DNS outside network
...
This would cover only DHCP only network since in basic and shared network, the
private IP used by VR and network may expose to outside.
2014-04-16 19:12:59 -07:00
b89765ab19
Ensure that min_free_kbytes in secstorage vm is set such that heavy nfs load will not cause page allocation failures
2014-04-14 00:02:22 -06:00
68c80e28c0
CLOUDSTACK-6253: Optimizing VR alerts getting algorithm In addition to this a new configuration parameter is added router.alerts.check.interval defaulted to 30minutes to check for alerts in Virtual Router
2014-04-09 18:11:24 +05:30
df4a21ae3d
add conntrackd logrotate for systemvms, dont start conntrackd on logrotate if it isnt running
2014-04-05 00:34:09 -06:00
f16dc3fd9f
CLOUDSTACK-6285: Fix savepassword.sh script for clear out old entries
2014-03-25 15:56:38 -07:00
f7337527cf
CLOUDSTACK-6090: Virtual Router Service Failure Alerting
...
Signed-off-by: Koushik Das <koushik@apache.org>
2014-03-14 15:14:15 +05:30
8937434fce
CLOUDSTACK-5986: Fix dnsmasq lease for VPC
2014-03-11 16:14:33 -07:00
540d020aa5
CLOUDSTACK-6179 Execute VR commands on Virtual Resource when commands received to Hyper-V
2014-03-11 13:10:13 +05:30
ccea5703df
CLOUDSTACK-6047: Add testing for VR aggregation commands
2014-03-06 16:22:23 -08:00
60dc25450a
CLOUDSTACK-6047: Introduce Aggregated commands queue to VR
2014-03-06 16:22:01 -08:00
986813d973
Prevent DHCPACK for DHCPINFORM in the DHCP server
...
The orignal "dhcp-range=xxx,static" would only prohibit DHCPREQUEST from unknown
hosts, but not DHCPINFORM which can request routing information. This caused
trouble for some bridged networks outside CloudStack.
This patch would fix the issue, prevent dnsmasq from acking any unknown request.
Signed-off-by: Sheng Yang <sheng.yang@citrix.com>
2014-02-25 14:55:24 -08:00
c0ed0b7819
CLOUDSTACK-6047: Make VR LB script accept a file name
...
Rather than default filename everytime since in aggregated commands the file
would be overrided if the filename is same.
2014-02-21 18:26:42 -08:00
11c5574b05
CLOUDSTACK-5966 enable/disable global setting for service monitor in VR
2014-02-11 15:35:02 +05:30
c39ec1eb8f
CLOUDSTACK-6062: nic device ids don't always correspond to
...
'eth' device numbers, but vpc scripts require it. Now we match
based on mac.
2014-02-07 14:59:40 -07:00
66989a9364
CLOUDSTACK-6018: Increase dnsmasq dhcp-lease-max to 2100
...
Would able to accomodate one /21 network then.
2014-02-03 14:52:42 -08:00
121d88743a
CLOUDSTACK-5986: Make dnsmasq handle dnsmasq.leases when dhcp_release is available
...
The original issue has been exposed due to CloudStack VR would modify the
dnsmasq.leases, thus make it unsync with dnsmasq's memory lease.
Make the modification to let dnsmasq handle the lease file if dhcp_release is
available.
2014-01-29 18:02:11 -08:00
7ac48934f7
CLOUDSTACK-5821 systemvmiso is locked by systevmvm in hyperv
2014-01-28 07:03:08 +05:30
807dc09138
CLOUDSTACK-5561 Support of multiple public vlans on VR running in HyperV
2014-01-28 07:03:08 +05:30
1767ddac77
CLOUDSTACK-5779: Update vmdata command in Vmware
...
To use Gson rather than copy a file to it, follow the same as Xen and KVM.
2014-01-21 18:59:30 -08:00
e88cc488e5
CLOUDSTACK-5779: Move loadbalancer to use routerProxy
2014-01-20 18:48:46 -08:00
0ea1c7dfc4
CLOUDSTACK-5779: Move firewall to use routerProxy
2014-01-17 12:36:42 -08:00
ce67e24d0a
CLOUDSTACK-5779: Move ipAlias to use routerProxy
2014-01-17 12:36:42 -08:00
0cdf0f6f67
CLOUDSTACK-5779: Moving bumpUpPriority, edithosts.sh, dnsmasq.sh to use routeProxy
2014-01-16 16:03:09 -08:00
238eda30ae
CLOUDSTACK-5592 ssh should run on eth1 interface in ssvm/cpvm running in HyperV
2013-12-27 14:57:52 +05:30
26858c16ee
CLOUDSTACK-4535 Fixed issue in PF in connecting from private nw when public and private ports are different
2013-12-19 10:57:18 +05:30
e54d1dec9d
CLOUDSTACK-5533: Disable VR's DNS functionality if user choose to use external dns
...
Also fix the regression that external dns won't be used if "dns" service in the
network offering is unset.
2013-12-17 16:06:58 -08:00
3ccdf67dfb
CLOUDSTACK-5297: Fix ACL rules on VPN for VPC
...
Insert a new iptables chain for FORWARD chain, in order to let following ACL
rules being executed as well.
2013-12-09 17:32:04 -08:00
764dec45fd
Monitoring python script removed semicolon
2013-11-26 11:24:37 +05:30
c1ed540af8
Monitoring python script organized into more methods
2013-11-26 10:07:20 +05:30
0be4a685e8
CLOUDSTACK-5164 Unmonit for 30 minutes for a failed process
2013-11-25 15:12:48 +05:30
7dceca5995
CLOUDSTACK-5177: Fixed issue with running script from cron job
2013-11-15 12:05:19 +05:30
416206595e
CLOUDSTACK-4736 Fixed issue in default service selection
2013-11-07 17:11:03 +05:30
27ce69fd55
CLOUDSTACK-5066: Don't remove the current VPN users when updating
...
If one VPN user and password is existed in current setup, then don't touch it,
otherwise would result in this user's existing connection be dropped.
2013-11-06 15:32:08 -08:00
Jayapal
Sheng Yang
Joris van Lieshout
Daan Hoogland
Saurav Lahiri
Marcus Sorensen
Harikrishna Patnala
Rajesh Battala