cloudstack/patches/systemvm/debian/config/etc/iptables
Naredula Janardhana Reddy 7fd7a4ae58 Bug 12808:
Summary of changes:
  - Mutiple routing table for each public interface is added (previously there is only one routing table ). when the packet is send out of public interface corresponding per-interface routing table will be used. per-interface routing table will modified when ever ip/interface added/deleted.
  - New parameter is added to ipassoc command  to include the default gateway for every interface/ip. prevously it is using only one public interface to send out, default gateway is obtained at the boot up time.
  - In the DNAT case. In the revese path(from guest vm to outside, or when DNAT packet receives from the eth0) the public ip/source ip will not be available till POSTROUTING. to overcome this, DNAT connection are marked with routing table number at the time of connection creation, in the reverse path the routing table# from DNAT connection is used to detect per-interface routing table.
2012-01-19 20:18:46 +05:30
..
iptables-consoleproxy 1) As the lack of dom0 scripting support in vmware hyperviors, domR, and other system VM will fall back to private network interface instead of link local interface, accordingly, 2010-10-21 21:46:41 -07:00
iptables-elbvm handle elb vm restart 2011-08-04 22:05:48 -07:00
iptables-router Bug 12808: 2012-01-19 20:18:46 +05:30
iptables-secstorage bug 7519 : Opening eth2 for public traffic on ssvm. Implementing the ip firewall for zone to zone copy in the Apache layer. Disabling directory listing for extract server root. 2011-01-11 20:05:35 +05:30
rules remove patches/systemv, and mv tools/systemvm into patches 2010-10-05 20:41:39 -07:00