Statistics
| Branch: | Tag: | Revision:

root @ c7b580d5

Name Size
README 417 Bytes
common.sh 5.4 kB
devflow.conf 57 Bytes
dnshook 6 kB
fix-net 1.2 kB
hooks-log 163 Bytes
ifup-extra 1.8 kB
interfaces 2.5 kB
kvm-vif-bridge 1.4 kB
mac2eui64 1.1 kB
pylintrc 2.7 kB
runlocked 4.5 kB
version 7 Bytes
vif-custom 1.4 kB

Latest revisions

# Date Author Comment
c7b580d5 02/28/2014 12:56 pm Dimitris Aragiorgis

Do not add ebtables rule for dhcp response

nfdhpcd opens a socket and binds it with tap interface. So dhcp
response will NOT go though the bridge and ebtables rule is
not needed.

Signed-off-by: Dimitris Aragiorgis <>
4d3b0880 02/28/2014 12:34 pm Dimitris Aragiorgis

Refactor ifup-extra script

1) Look for all kind of tags (interface specific or not):
some-prefix:1:mail
some-prefix:snf-nic-12345:mail
some-prefix:8252fabd-1021-411c-b8f7-ed79ed509bb8:mail
some-prefix:mail

2) some-prefix must be other than synnefo:network:...
52366a23 02/27/2014 05:49 pm Dimitris Aragiorgis

Fix ebtables

1) Add ebtables in INPUT/OUTPUT chains too
This is needed because multicast packets
(e.g. with dst address 01:00:83:xx:xx:xx) do NOT go through forward chain

2) In case of nfdhpcd allow DHCP replies only with src address the
MAC address of incoming device (e.g. prv0)...
054ff79a 02/27/2014 05:49 pm Dimitris Aragiorgis

Setup ebtables only for mac filtered setups

We used to drop DHCP requests for all bridged setups in case of
nfdhcpd. This requires ebtables setup for private vlans as well.

Dropping DHCP requests in case of nfdhcpd is not really needed
because they are dropped in user space...
3c8da32d 02/26/2014 03:13 pm Dimitris Aragiorgis

Bump version to 0.15.6
dc1aa5d9 02/26/2014 03:08 pm Dimitris Aragiorgis

Add sample rules in ifup-extra

Here we allows outgoing traffic with destination port 25.

Please note that every rule that is added when the corresponding
tag is found it should always be removed at the beginning of the
script. With other words you should remove stale entries before...
b2a2459e 02/25/2014 01:06 pm Dimitris Aragiorgis

Bump version to 0.15.5
62ebfafe 02/25/2014 12:58 pm Dimitris Aragiorgis

Support execution of extra script

In case of kvm-ifup, if an extra script (/etc/ganeti/ifup-extra)
exists, execute it before exiting.

An dummy example script is given, that parses instance's tags,
and searches for synnefo:network:<ident>:mail.

Signed-off-by: Dimitris Aragiorgis <>
c53927b3 01/14/2014 12:56 pm Dimitris Aragiorgis

Bump version to 0.15.4
86774f86 01/14/2014 12:53 pm Dimitris Aragiorgis

Merge branch 'develop'

View all revisions | View revisions

Also available in: Atom