Commit Graph

332 Commits

Author SHA1 Message Date
Alexandre Derumier
bb95abb0af get_local_vnets: add permissions on /sdn/vnets/*
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-23 18:19:48 +02:00
Alexandre Derumier
95e2f20f5c evpn : remove "ip route add vrf vrf_myzone unreachable default metric 4278198272" on exit node
This is breaking routing between the evpn vrf && default vrf leak  on exit node only

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-07-21 09:38:13 +02:00
Thomas Lamprecht
6949fc0152 bump version to 0.6.1
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-07-05 19:07:55 +02:00
Alexandre Derumier
34c4c6d74f subnets/ipam : fix is_gateway
- add lost is_gateway in subnets subnet when creating subnet
- allow reuse ip as gateway in subnet create if it's already flagged gateway in the ipamdb
- add tests
2021-06-18 18:29:15 +02:00
Alexandre Derumier
9f1e793423 vnets: subroutines: return if !$vnetid 2021-06-18 18:29:15 +02:00
Alexandre Derumier
3c0fc96d9c add vnets test + ipam fixes
- add vnets tests with multiple subnets
- fix pve ipam ipv6 with next_free_ip (ipv6 don't have network && broadcast address)
- fix vnet next_free_ip with no ipam
2021-06-18 18:29:15 +02:00
Alexandre Derumier
3d8799db81 sdn: get_local_vnets : add ipam && vlanaware values
to be able to use them in ui bridgeselector
2021-06-18 18:29:15 +02:00
Thomas Lamprecht
c72266faee bump version to 0.6.0
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-10 10:45:56 +02:00
Thomas Lamprecht
4686176d29 d/source: switch to native versioning
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-10 10:45:53 +02:00
Alexandre Derumier
bdec70894d zones: simple|evpn : only enable ip-forward if gateway is defined on the subnet
or ifquery report an error
2021-05-10 09:38:14 +02:00
Alexandre Derumier
d6557a2dcd subnets: fix add|del subnets withtout ipam 2021-05-10 09:37:16 +02:00
Alexandre Derumier
bf8761e9fa subnets: tests: add noipam test 2021-05-10 09:37:16 +02:00
Thomas Lamprecht
7f50761859 api: zones: code/indentation/format cleanups
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 12:16:26 +02:00
Alexandre Derumier
690d3f7d4f api2: zone: check ipam change if no ipam was defined before too
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-05-05 12:07:47 +02:00
Thomas Lamprecht
26dedb18bc qinq: code cleanup and whitespace/indendation fixes
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 08:25:49 +02:00
Alexandre Derumier
403b05e2c1 zone: qinq: add vnet without tag support
some user want to be able to define a vnet without vlan,
so at qinq zone level, to be able to see traffic from others vnets of this
qinq zone.
Some example of usage is a inter-vnet firewall/gateway vm.

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-05-05 07:39:05 +02:00
Thomas Lamprecht
90c150b25b d/control: fix description
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 07:20:14 +02:00
Alexandre Derumier
de795a53d0 zones: qinq: vlanaware bridge: add tests with multiple vnets/zones
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Alexandre Derumier
2fa5d39288 zones: qinq: classic bridge: fix bridge zone name with multiple zones/vnets
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Alexandre Derumier
d8c88170fd zones: qinq: ovs: fix duplicate ovs_ports with multiple zones/vnets
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Thomas Lamprecht
baf955953f bump version to 0.5-2
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 18:26:15 +02:00
Thomas Lamprecht
153cb80d4c zone status: mark vnets with unknown zone as failed
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:42:20 +02:00
Thomas Lamprecht
6b0bf99c13 possible bug fix for falsy named zones
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht
65723efd38 code/whitespace cleanup
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht
d73c7c3668 sdn: rename config to running_config
to reduce my confusion..

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht
57a335c4c0 zones: IPAM config is optional for a zone
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 13:45:25 +02:00
Thomas Lamprecht
65cb893e27 zones: code/indendation cleanup
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 13:45:11 +02:00
Thomas Lamprecht
2f1e0d01e8 bump version to 0.5-1
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-26 16:51:38 +02:00
Thomas Lamprecht
7eeb790f72 d/control: bump versioned dependency for pve-cluster
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-26 16:11:36 +02:00
Alexandre Derumier
c08eeb0f95 controllers: increase controllerid to 64 characters max
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
1ba4901e03 zones: simple: fix ip-forward && ipv6 snat
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
645d5f4e62 zones: evpn: fix arp-accept && ip-forward + ipv6 snat
they were lost during subnet work

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
8313a2c0c6 zones: evpn: move vnet mac option to evpn zone plugin
This is only used by evpn plugin, and we can have
same anycast mac for all vnets like cisco,juniper,arista...

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
4083537ba6 bgp: add ebgp_multihop option
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
a8fb936da7 tests: fix evpn vrf
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
5221635a52 tests: add subnets tests
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-18 18:22:58 +02:00
Alexandre Bruyelles
d9ee954447 zones: evpn: add a default unreachable, to prevent vrf leak
On Linux, when no route is found in a vrf, it somehow fallback
to the default routing table. In our case, that means a leak
from the overlay to the underlay.
Adding a low priority unreachable catch-all route is the way to go, as
per the doc: https://www.kernel.org/doc/Documentation/networking/vrf.txt

Signed-off-by: Alexandre Bruyelles <git@jack.fr.eu.org>
2021-04-09 12:55:40 +02:00
Thomas Lamprecht
dd510e8a11 d/control: record libnet-subnet-perl build dependency
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-02-06 14:56:34 +01:00
Alexandre Derumier
533eb3d4e6 fix coding style NetAddr::IP->new
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:56:34 +01:00
Alexandre Derumier
77ec7eb206 subnets: add add_subnet/del_subnet
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
b61e93a5c6 subnets: convert dns private function to public sub
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
718ac053d4 tests: add dns tests
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
15a0b35c4d dns: add noerr param
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
79be833df6 tests: add ipams tests
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
04f6db9acd ipams: add noerr param
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
3f02d3ec2f ipam: phpipam: rename get_internal to get_prefix_id (like netbox)
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
0d2396b0ff dns: add update record && fix powerdns
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
0720c17e0e subnets: fix del_ip rollback
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
167dc03fe8 dns/ipam : move api_request helper to sdn module
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
dd54b5a3d4 ipam: add update_ip
used to update ip address options like hostname, mac,...

don't allow to change ip address, as some ipam don't support it.

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00