History | View | Annotate | Download (1.4 kB)
Fix ebtables
1) Add ebtables in INPUT/OUTPUT chains too This is needed because multicast packets (e.g. with dst address 01:00:83:xx:xx:xx) do NOT go through forward chain
2) In case of nfdhpcd allow DHCP replies only with src address the MAC address of incoming device (e.g. prv0)...
Setup ebtables only for mac filtered setups
We used to drop DHCP requests for all bridged setups in case ofnfdhcpd. This requires ebtables setup for private vlans as well.
Dropping DHCP requests in case of nfdhcpd is not really neededbecause they are dropped in user space...
Support execution of extra script
In case of kvm-ifup, if an extra script (/etc/ganeti/ifup-extra)exists, execute it before exiting.
An dummy example script is given, that parses instance's tags,and searches for synnefo:network:<ident>:mail.
Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
runlocked forgotten ebtables command
Add vif-custom script and split kvm-vif-bridge
Put functions in /usr/lib/snf-network/common.sh
Clear existing binding before adding new
This removes the enrty from nfdhcpd runtime (due to inotify).
Use tag types in kvm-vif-bridge
Refactor snf-network
Change conf files and vars
Insteed of infra.conf introduce generic.conf and grnet.conf.Change PUBLIC_* var into NODE_*.
Add exit 0 in kvm-vif-bridge
Fix kvm-vif-bridge
Fix a typo in kvm-vif-bridge
Refactor kvm-vif-bridge
Make better use of ebtables. Correctly drop DHCP request.
Modify kvm-vif-bridge to support network tags
Change network types
Revise snf-network
No NFS storage needed. All info passed in hooks env is producedby ganeti.
Remove netfile from kvm-vif-bridge
Fix proxy ndp configuration
uplink should be public vlan not gateway6
Code refactoring in kvm-vif-bridge and nfdhcpd
Allow binding files in form ofGATEWAY6=in case not defined.
Modify kvm-vif-bridge that clears the pending rules beforehandling the tap.
Fix IPv6 support for nfdhcpd
Supply all the neccessary fields for dhcp in binding file (createdby kvm-vid-bridge). Reference every dhcp client via the mac or eui64of the incomming packet on the nfqueue.
Modify nfdhcpd to distinguish tap form indev.
DHCPv6 should work fine.
Automate config via hooks
Various changes
Remove routing tables from nfdhcpd
Put all info inside binding files
Standardize interfaces
Asume standard interfaces per nodegroup.
First define a network.
Then define a nodegroup.
Then define connection.
Allow dhcp responce in ebtables
Add basic files
Include nfdhcpd and tools handling vlans
Include basic scripts for configuring networks in nodes