Revision:

Revisions

# Date Author Comment
6caf0d8d 03/10/2014 04:43 pm Vangelis Koukis

Fix typo in URL in README.md
ae809198 03/10/2014 04:38 pm Vangelis Koukis

Add Copyright headers, add README.md
4b1eede6 03/10/2014 04:13 pm Vangelis Koukis

Fix a few typos
d941d35c 03/05/2014 06:29 pm Dimitris Aragiorgis

Changes in debian files

- install: kvm-ifup-custom, kvm-ifdown-custom
- default: SNF_NETWORK_LOG, LOGFILE, TTL
- links: kvm-vif-bridge

Signed-off-by: Dimitris Aragiorgis <>
2cf2e75c 03/05/2014 06:28 pm Dimitris Aragiorgis

Merge branch 'develop' into debian-develop
42840ccc 03/05/2014 06:28 pm Dimitris Aragiorgis

Minor fix related to logging in dnshook

Signed-off-by: Dimitris Aragiorgis <>
126f8f4e 03/05/2014 06:28 pm Dimitris Aragiorgis

Add docs

Signed-off-by: Dimitris Aragiorgis <>
b0a87613 03/05/2014 06:28 pm Dimitris Aragiorgis

Fix ebtables in vif-custom

..and remove any unused rules (comments) related to ebtables

Signed-off-by: Dimitris Aragiorgis <>
329f0df8 03/05/2014 06:28 pm Dimitris Aragiorgis

Rename kvm-vif-bridge to kvm-ifup-custom

Package will create a symlink until this gets renamed in
upstream Ganeti as well.

Signed-off-by: Dimitris Aragiorgis <>
bea1eb60 03/05/2014 06:28 pm Dimitris Aragiorgis

Add kvm-ifdown-custom script

This should do any cleanup needed related to the interface
that is going down.

Signed-off-by: Dimitris Aragiorgis <>
8ba80517 03/05/2014 06:28 pm Dimitris Aragiorgis

Move things inside get_info()

  • Set GANETI_INSTANCE_NAME
  • Set TABLE, INDEV

Signed-off-by: Dimitris Aragiorgis <>
cc09dec1 03/05/2014 06:28 pm Dimitris Aragiorgis

Log table's uplink only if exists

Signed-off-by: Dimitris Aragiorgis <>
4e403e04 03/05/2014 06:28 pm Dimitris Aragiorgis

Minor changes related to logging

Signed-off-by: Dimitris Aragiorgis <>
6afbe696 03/05/2014 06:28 pm Dimitris Aragiorgis

Some minor fixes..

- Use NETWORK_SUBNET6 since this is exported by Ganeti and not
just SUBNET6
- All logging in helper function
- Do not send GARP or delete neighbor proxy if desired vars are not
set

Signed-off-by: Dimitris Aragiorgis <>
63f1d9e7 03/05/2014 06:28 pm Dimitris Aragiorgis

Introduce get_info helper method

It gets the exported environment and calculates all needed vars for
a specific interface. Use this function early in scripts and as
soon as you extract each interface info in hooks.

Signed-off-by: Dimitris Aragiorgis <>
bd59aebc 03/05/2014 06:28 pm Dimitris Aragiorgis

Make get_info caclulate ebtables chain names

Signed-off-by: Dimitris Aragiorgis <>
bfe9b00f 03/05/2014 06:28 pm Dimitris Aragiorgis

Use env var for logging script

Signed-off-by: Dimitris Aragiorgis <>
d026b975 03/05/2014 06:28 pm Dimitris Aragiorgis

Rename dnshook and fix-net

..to snf-network-dnshook and snf-network-hook correspondingly.

Signed-off-by: Dimitris Aragiorgis <>
cc56d684 03/05/2014 06:28 pm Dimitris Aragiorgis

Use arpsend instead of arping

arpsend comes along with ndsend with vzctl package.
We send only one packet in order not to delay ifup script.

Signed-off-by: Dimitris Aragiorgis <>
77ce5a39 03/05/2014 06:28 pm Dimitris Aragiorgis

Small changes in if* scripts

  • Factor out GARP and neighbor proxy action from setup_routed*
  • Invoke send_garp in kvm-ifup
  • Invoke delete_neighbor_proxy in snf-network-hook

Signed-off-by: Dimitris Aragiorgis <>
fa5bd914 03/05/2014 06:28 pm Dimitris Aragiorgis

Factor out common funtions from dnshook

Signed-off-by: Dimitris Aragiorgis <>
12b20916 03/05/2014 06:28 pm Dimitris Aragiorgis

hooks-log -> snf-network-log

Signed-off-by: Dimitris Aragiorgis <>
6cb3bcb8 03/05/2014 06:26 pm Dimitris Aragiorgis

Bump version to 0.15.8next
5f1c8be6 03/05/2014 06:19 pm Dimitris Aragiorgis

Add ifup-extra script

..in install and default.

Signed-off-by: Dimitris Aragiorgis <>
2dbf11bc 03/05/2014 06:16 pm Dimitris Aragiorgis

Merge branch 'develop' into debian-develop
c05f2608 03/05/2014 06:14 pm Dimitris Aragiorgis

Refactor ifup-extra script

1) Look for all kind of tags (interface specific or not):
some-prefix:1:mail
some-prefix:snf-nic-12345:mail
some-prefix:8252fabd-1021-411c-b8f7-ed79ed509bb8:mail
some-prefix:mail

2) some-prefix must be other than synnefo:network:...
fd80d055 03/05/2014 06:14 pm Dimitris Aragiorgis

Do not add ebtables rule for dhcp response

nfdhpcd opens a socket and binds it with tap interface. So dhcp
response will NOT go though the bridge and ebtables rule is
not needed.

Signed-off-by: Dimitris Aragiorgis <>
e5171922 03/05/2014 06:14 pm Dimitris Aragiorgis

Fix typo in ebtables

If interface has an IP we used to add a rule that does not allow
packets coming from TAP to have a different IP. There was a typo
in if statement and the rule did never apply.

Still, we do NOT want this rule so we fix typo and comment the...
184370fd 03/05/2014 06:14 pm Dimitris Aragiorgis

Create ebtables chains with RETURN policy

This fixes inter-node private networks in case of multicast packets.
Multicast packets are forwarded to all interfaces bridged
on the bridge. Lets assume the following:

prv0 bridge with tap0, tap1, and eth1.
From tap0 comes a multicast packet....
66c58448 03/05/2014 06:14 pm Dimitris Aragiorgis

Support execution of extra script

In case of kvm-ifup, if an extra script (/etc/ganeti/ifup-extra)
exists, execute it before exiting.

An dummy example script is given, that parses instance's tags,
and searches for synnefo:network:<ident>:mail.

Signed-off-by: Dimitris Aragiorgis <>
c780a7c5 03/05/2014 06:14 pm Dimitris Aragiorgis

Add sample rules in ifup-extra

Here we allows outgoing traffic with destination port 25.

Please note that every rule that is added when the corresponding
tag is found it should always be removed at the beginning of the
script. With other words you should remove stale entries before...
a57b3c64 03/05/2014 06:14 pm Dimitris Aragiorgis

Fix ebtables

1) Add ebtables in INPUT/OUTPUT chains too
This is needed because multicast packets
(e.g. with dst address 01:00:83:xx:xx:xx) do NOT go through forward chain

2) In case of nfdhpcd allow DHCP replies only with src address the
MAC address of incoming device (e.g. prv0)...
2cf27346 03/05/2014 06:14 pm Dimitris Aragiorgis

Setup ebtables only for mac filtered setups

We used to drop DHCP requests for all bridged setups in case of
nfdhcpd. This requires ebtables setup for private vlans as well.

Dropping DHCP requests in case of nfdhcpd is not really needed
because they are dropped in user space...
b0b92ac3 03/05/2014 03:06 pm Dimitris Aragiorgis

Add docs

Signed-off-by: Dimitris Aragiorgis <>
93476f13 03/05/2014 02:30 pm Dimitris Aragiorgis

Log table's uplink only if exists

Signed-off-by: Dimitris Aragiorgis <>
5ec7b145 03/05/2014 02:30 pm Dimitris Aragiorgis

Minor fix related to logging in dnshook

Signed-off-by: Dimitris Aragiorgis <>
c6fad0f3 03/05/2014 02:30 pm Dimitris Aragiorgis

Add kvm-ifdown-custom script

This should do any cleanup needed related to the interface
that is going down.

Signed-off-by: Dimitris Aragiorgis <>
263fe009 03/05/2014 02:30 pm Dimitris Aragiorgis

Move things inside get_info()

  • Set GANETI_INSTANCE_NAME
  • Set TABLE, INDEV

Signed-off-by: Dimitris Aragiorgis <>
30db6769 03/05/2014 02:30 pm Dimitris Aragiorgis

Fix ebtables in vif-custom

..and remove any unused rules (comments) related to ebtables

Signed-off-by: Dimitris Aragiorgis <>
46a998a6 03/05/2014 02:30 pm Dimitris Aragiorgis

Rename kvm-vif-bridge to kvm-ifup-custom

Package will create a symlink until this gets renamed in
upstream Ganeti as well.

Signed-off-by: Dimitris Aragiorgis <>
5b3472ad 03/05/2014 02:30 pm Dimitris Aragiorgis

Introduce get_info helper method

It gets the exported environment and calculates all needed vars for
a specific interface. Use this function early in scripts and as
soon as you extract each interface info in hooks.

Signed-off-by: Dimitris Aragiorgis <>
fe6454e7 03/05/2014 02:30 pm Dimitris Aragiorgis

Make get_info caclulate ebtables chain names

Signed-off-by: Dimitris Aragiorgis <>
e2c822b5 03/05/2014 02:30 pm Dimitris Aragiorgis

Minor changes related to logging

Signed-off-by: Dimitris Aragiorgis <>
90f2e36b 03/05/2014 02:30 pm Dimitris Aragiorgis

Some minor fixes..

- Use NETWORK_SUBNET6 since this is exported by Ganeti and not
just SUBNET6
- All logging in helper function
- Do not send GARP or delete neighbor proxy if desired vars are not
set

Signed-off-by: Dimitris Aragiorgis <>
43589485 03/05/2014 02:30 pm Dimitris Aragiorgis

Use arpsend instead of arping

arpsend comes along with ndsend with vzctl package.
We send only one packet in order not to delay ifup script.

Signed-off-by: Dimitris Aragiorgis <>
aeaafeb9 03/05/2014 02:30 pm Dimitris Aragiorgis

Small changes in if* scripts

  • Factor out GARP and neighbor proxy action from setup_routed*
  • Invoke send_garp in kvm-ifup
  • Invoke delete_neighbor_proxy in snf-network-hook

Signed-off-by: Dimitris Aragiorgis <>
859d4ba0 03/05/2014 02:30 pm Dimitris Aragiorgis

Use env var for logging script

Signed-off-by: Dimitris Aragiorgis <>
e8ff8060 03/05/2014 02:30 pm Dimitris Aragiorgis

Rename dnshook and fix-net

..to snf-network-dnshook and snf-network-hook correspondingly.

Signed-off-by: Dimitris Aragiorgis <>
14697fe6 03/05/2014 02:30 pm Dimitris Aragiorgis

Factor out common funtions from dnshook

Signed-off-by: Dimitris Aragiorgis <>
0e4e6bea 03/05/2014 02:30 pm Dimitris Aragiorgis

hooks-log -> snf-network-log

Signed-off-by: Dimitris Aragiorgis <>
74ab2e3c 03/05/2014 02:30 pm Dimitris Aragiorgis

Create ebtables chains with RETURN policy

This fixes inter-node private networks in case of multicast packets.
Multicast packets are forwarded to all interfaces bridged
on the bridge. Lets assume the following:

prv0 bridge with tap0, tap1, and eth1.
From tap0 comes a multicast packet....
68f103bd 03/05/2014 01:25 pm Dimitris Aragiorgis

Bump version to 0.15.8-1~wheezy

Signed-off-by: Dimitris Aragiorgis <>
6de5017b 03/05/2014 01:24 pm Dimitris Aragiorgis

Merge branch 'master' into debian-wheezy
3304ce51 03/05/2014 01:24 pm Dimitris Aragiorgis

Bump version to 0.15.8
8f7d1f1c 03/05/2014 01:03 pm Dimitris Aragiorgis

Create ebtables chains with RETURN policy

This fixes inter-node private networks in case of multicast packets.
Multicast packets are forwarded to all interfaces bridged
on the bridge. Lets assume the following:

prv0 bridge with tap0, tap1, and eth1.
From tap0 comes a multicast packet....
a3960db8 03/04/2014 05:39 pm Dimitris Aragiorgis

Changes in debian files

- install: kvm-ifup-custom, kvm-ifdown-custom
- default: SNF_NETWORK_LOG, LOGFILE, TTL
- links: kvm-vif-bridge

Signed-off-by: Dimitris Aragiorgis <>
8bdda5ff 03/04/2014 05:38 pm Dimitris Aragiorgis

Add ifup-extra script

..in install and default.

Signed-off-by: Dimitris Aragiorgis <>
c3d3d121 03/04/2014 04:02 pm Dimitris Aragiorgis

Do not add ebtables rule for dhcp response

nfdhpcd opens a socket and binds it with tap interface. So dhcp
response will NOT go though the bridge and ebtables rule is
not needed.

Signed-off-by: Dimitris Aragiorgis <>
c9d2a566 03/04/2014 04:02 pm Dimitris Aragiorgis

Fix typo in ebtables

If interface has an IP we used to add a rule that does not allow
packets coming from TAP to have a different IP. There was a typo
in if statement and the rule did never apply.

Still, we do NOT want this rule so we fix typo and comment the...
95226ff3 03/04/2014 04:02 pm Dimitris Aragiorgis

Setup ebtables only for mac filtered setups

We used to drop DHCP requests for all bridged setups in case of
nfdhcpd. This requires ebtables setup for private vlans as well.

Dropping DHCP requests in case of nfdhcpd is not really needed
because they are dropped in user space...
aa38fdaf 03/04/2014 04:02 pm Dimitris Aragiorgis

Refactor ifup-extra script

1) Look for all kind of tags (interface specific or not):
some-prefix:1:mail
some-prefix:snf-nic-12345:mail
some-prefix:8252fabd-1021-411c-b8f7-ed79ed509bb8:mail
some-prefix:mail

2) some-prefix must be other than synnefo:network:...
a67910c4 03/04/2014 12:50 pm Dimitris Aragiorgis

Fix ebtables

1) Add ebtables in INPUT/OUTPUT chains too
This is needed because multicast packets
(e.g. with dst address 01:00:83:xx:xx:xx) do NOT go through forward chain

2) In case of nfdhpcd allow DHCP replies only with src address the
MAC address of incoming device (e.g. prv0)...
3f64dc08 03/04/2014 12:50 pm Dimitris Aragiorgis

Add sample rules in ifup-extra

Here we allows outgoing traffic with destination port 25.

Please note that every rule that is added when the corresponding
tag is found it should always be removed at the beginning of the
script. With other words you should remove stale entries before...
dc1bb18b 03/04/2014 12:50 pm Dimitris Aragiorgis

Support execution of extra script

In case of kvm-ifup, if an extra script (/etc/ganeti/ifup-extra)
exists, execute it before exiting.

An dummy example script is given, that parses instance's tags,
and searches for synnefo:network:<ident>:mail.

Signed-off-by: Dimitris Aragiorgis <>
9aca216b 02/28/2014 01:22 pm Dimitris Aragiorgis

Bump version to 0.15.7-1~wheezy

Signed-off-by: Dimitris Aragiorgis <>
8d888c63 02/28/2014 01:20 pm Dimitris Aragiorgis

Merge branch 'master' into debian-wheezy
96cefca5 02/28/2014 01:20 pm Dimitris Aragiorgis

Bump version to 0.15.7
efce42cb 02/28/2014 01:20 pm Dimitris Aragiorgis

Fix typo in ebtables

If interface has an IP we used to add a rule that does not allow
packets coming from TAP to have a different IP. There was a typo
in if statement and the rule did never apply.

Still, we do NOT want this rule so we fix typo and comment the...
c7b580d5 02/28/2014 12:56 pm Dimitris Aragiorgis

Do not add ebtables rule for dhcp response

nfdhpcd opens a socket and binds it with tap interface. So dhcp
response will NOT go though the bridge and ebtables rule is
not needed.

Signed-off-by: Dimitris Aragiorgis <>
4d3b0880 02/28/2014 12:34 pm Dimitris Aragiorgis

Refactor ifup-extra script

1) Look for all kind of tags (interface specific or not):
some-prefix:1:mail
some-prefix:snf-nic-12345:mail
some-prefix:8252fabd-1021-411c-b8f7-ed79ed509bb8:mail
some-prefix:mail

2) some-prefix must be other than synnefo:network:...
52366a23 02/27/2014 05:49 pm Dimitris Aragiorgis

Fix ebtables

1) Add ebtables in INPUT/OUTPUT chains too
This is needed because multicast packets
(e.g. with dst address 01:00:83:xx:xx:xx) do NOT go through forward chain

2) In case of nfdhpcd allow DHCP replies only with src address the
MAC address of incoming device (e.g. prv0)...
054ff79a 02/27/2014 05:49 pm Dimitris Aragiorgis

Setup ebtables only for mac filtered setups

We used to drop DHCP requests for all bridged setups in case of
nfdhcpd. This requires ebtables setup for private vlans as well.

Dropping DHCP requests in case of nfdhcpd is not really needed
because they are dropped in user space...
56ed9805 02/26/2014 03:25 pm Dimitris Aragiorgis

Bump version to 0.15.6-1~wheezy

Signed-off-by: Dimitris Aragiorgis <>
998347e0 02/26/2014 03:24 pm Dimitris Aragiorgis

Merge branch 'master' into debian-wheezy
3c8da32d 02/26/2014 03:13 pm Dimitris Aragiorgis

Bump version to 0.15.6
dc1aa5d9 02/26/2014 03:08 pm Dimitris Aragiorgis

Add sample rules in ifup-extra

Here we allows outgoing traffic with destination port 25.

Please note that every rule that is added when the corresponding
tag is found it should always be removed at the beginning of the
script. With other words you should remove stale entries before...
53988d78 02/25/2014 01:07 pm Dimitris Aragiorgis

Bump version to 0.15.5-1~wheezy

Signed-off-by: Dimitris Aragiorgis <>
9943ed11 02/25/2014 01:06 pm Dimitris Aragiorgis

Merge branch 'master' into debian-wheezy
b2a2459e 02/25/2014 01:06 pm Dimitris Aragiorgis

Bump version to 0.15.5
6980cb56 02/25/2014 01:02 pm Dimitris Aragiorgis

Add ifup-extra script

..in install and default.

Signed-off-by: Dimitris Aragiorgis <>
62ebfafe 02/25/2014 12:58 pm Dimitris Aragiorgis

Support execution of extra script

In case of kvm-ifup, if an extra script (/etc/ganeti/ifup-extra)
exists, execute it before exiting.

An dummy example script is given, that parses instance's tags,
and searches for synnefo:network:<ident>:mail.

Signed-off-by: Dimitris Aragiorgis <>
81ba8f0f 02/03/2014 07:23 pm Dimitris Aragiorgis

Add TTL in default file

..and let snf-network-hook only as migrate/failover post hook.

Signed-off-by: Dimitris Aragiorgis <>
d4d45fdd 02/03/2014 06:50 pm Dimitris Aragiorgis

Install dnshook in post stop

Signed-off-by: Dimitris Aragiorgis <>
fc443c7a 02/03/2014 06:44 pm Dimitris Aragiorgis

Some refactor related to get_* functions

Gather all get_* function in get_info() and invoke it inside every
NIC configuration script.

Signed-off-by: Dimitris Aragiorgis <>
a004c27e 02/03/2014 05:31 pm Dimitris Aragiorgis

Several minor fixes

Signed-off-by: Dimitris Aragiorgis <>
838c1835 01/31/2014 04:37 am Dimitris Aragiorgis

Small changes in if* scripts

  • Factor out GARP and neighbor proxy action from setup_routed*
  • Invoke send_garp in kvm-ifup
  • Invoke delete_neighbor_proxy in kvm-ifdown

Signed-off-by: Dimitris Aragiorgis <>
4bda656e 01/31/2014 04:24 am Dimitris Aragiorgis

Move migrate hook action to if-down

On old primary we should issue some rules if migration succeeds.
Now this can be done in if-down script.

Use arpsend instead of arping.

Signed-off-by: Dimitris Aragiorgis <>
c1d81f8b 01/31/2014 04:10 am Dimitris Aragiorgis

Update debian files

Signed-off-by: Dimitris Aragiorgis <>
d814ecb6 01/31/2014 04:03 am Dimitris Aragiorgis

Support execution of extra script

In case of kvm-ifup, if an extra script (/etc/ganeti/ifup-extra)
exists, execute it before exiting.

An dummy example script is given, that parses instance's tags,
and searches for synnefo:network:<ident>:mail.

Signed-off-by: Dimitris Aragiorgis <>
2ef1ff70 01/31/2014 03:48 am Dimitris Aragiorgis

Minor changes in log

Signed-off-by: Dimitris Aragiorgis <>
97c4e079 01/31/2014 03:38 am Dimitris Aragiorgis

Update dns in vif-custom

..just like in kvm-ifup

Signed-off-by: Dimitris Aragiorgis <>
58645c13 01/31/2014 03:37 am Dimitris Aragiorgis

Some minor fixes

  • In Ganeti hooks instance name is available via
    GANETI_INSTANCE_NAME. In NIC configuration scripts it is via
    INSTANCE. Make common.sh take both since methods there are
    being executed in both contexts.
  • Fix a typo

Signed-off-by: Dimitris Aragiorgis <>
8a567d09 01/31/2014 02:08 am Dimitris Aragiorgis

Great refactor in kvm-ifdown and dnshook

Make dnshook responsible for reseting all dns entries of an
instance. It queries the server and issues one by one commands
to remove any A, AAAA, PTR entries. It does not get any info
from the exported environment since now works only instance level...
cc90a41d 01/30/2014 08:02 pm Dimitris Aragiorgis

Rename dnshook and fix-net

..to snf-network-dnshook and snf-network-hook correspondingly.

Signed-off-by: Dimitris Aragiorgis <>
af715b0d 01/30/2014 07:59 pm Dimitris Aragiorgis

Various renames

  • fix-net -> snf-network-hook
  • hooks-log -> snf-network-log
  • dnshook -> snf-network-dnshook

Signed-off-by: Dimitris Aragiorgis <>
bd5895a6 01/30/2014 07:42 pm Dimitris Aragiorgis

Fix links for kvm-if*

Ganeti uses kvm-vif-bridge/kvm-if*-custom for external scripts.

Signed-off-by: Dimitris Aragiorgis <>
73c2276d 01/30/2014 07:40 pm Dimitris Aragiorgis

Setup DNS in kvm-ifup

Signed-off-by: Dimitris Aragiorgis <>
b795153e 01/30/2014 07:38 pm Dimitris Aragiorgis

Use env var for logging script

Signed-off-by: Dimitris Aragiorgis <>
60407cd2 01/30/2014 07:35 pm Dimitris Aragiorgis

hooks-log -> snf-network-log

Signed-off-by: Dimitris Aragiorgis <>
264562c1 01/29/2014 05:23 pm Dimitris Aragiorgis

Factor out common funtions from dnshook

Signed-off-by: Dimitris Aragiorgis <>

1 2 3 Next » (1-100/249) | Per page: 25, 50, 100

Also available in: Atom