mirror of
https://github.com/apache/cloudstack
synced 2026-08-07 23:39:32 +00:00
84e496b4f9
This commit implements basic Security Grouping for KVM in Basic Networking. It does not implement full Security Grouping yet, but it does: - Prevent IP-Address source spoofing - Allow DHCPv6 clients, but disallow DHCPv6 servers - Disallow Instances to send out Router Advertisements The Security Grouping allows ICMPv6 packets as described by RFC4890 as they are essential for IPv6 connectivity. Following RFC4890 it allows: - Router Solicitations - Router Advertisements (incoming only) - Neighbor Advertisements - Neighbor Solicitations - Packet Too Big - Time Exceeded - Destination Unreachable - Parameter Problem - Echo Request ICMPv6 is a essential part of IPv6, without it connectivity will break or be very unreliable. For now it allows any UDP and TCP packet to be send in to the Instance which effectively opens up the firewall completely. Future commits will implement Security Grouping further which allows controlling UDP and TCP ports for IPv6 like can be done with IPv4. Regardless of the egress filtering (which can't be done yet) it will always allow outbound DNS to port 53 over UDP or TCP. Signed-off-by: Wido den Hollander <wido@widodh.nl>
60 lines
2.8 KiB
Plaintext
60 lines
2.8 KiB
Plaintext
Source: cloudstack
|
|
Section: libs
|
|
Priority: extra
|
|
Maintainer: Wido den Hollander <wido@widodh.nl>
|
|
Build-Depends: debhelper (>= 9), openjdk-8-jdk | java8-sdk | java8-jdk, genisoimage,
|
|
python-mysql.connector, maven (>= 3) | maven3, python (>= 2.7), lsb-release, dh-systemd
|
|
Standards-Version: 3.8.1
|
|
Homepage: http://www.cloudstack.org/
|
|
|
|
Package: cloudstack-common
|
|
Architecture: all
|
|
Depends: ${misc:Depends}, ${python:Depends}, genisoimage, nfs-common, python-netaddr
|
|
Conflicts: cloud-scripts, cloud-utils, cloud-system-iso, cloud-console-proxy, cloud-daemonize, cloud-deps, cloud-python, cloud-setup
|
|
Description: A common package which contains files which are shared by several CloudStack packages
|
|
|
|
Package: cloudstack-management
|
|
Architecture: all
|
|
Depends: ${misc:Depends}, ${python:Depends}, openjdk-8-jre-headless | java8-runtime-headless | java8-runtime, cloudstack-common (= ${source:Version}), tomcat6 | tomcat7, sudo, jsvc, python-mysql.connector, libmysql-java, augeas-tools, mysql-client, adduser, bzip2, ipmitool, lsb-release
|
|
Conflicts: cloud-server, cloud-client, cloud-client-ui
|
|
Description: CloudStack server library
|
|
The CloudStack management server
|
|
|
|
Package: cloudstack-agent
|
|
Architecture: all
|
|
Depends: ${python:Depends}, openjdk-8-jre-headless | java8-runtime-headless | java8-runtime, cloudstack-common (= ${source:Version}), lsb-base (>= 4.0), libcommons-daemon-java, openssh-client, qemu-kvm (>= 1.0), libvirt-bin (>= 0.9.8), uuid-runtime, iproute, ebtables, vlan, jsvc, ipset, python-libvirt, ethtool, iptables, lsb-release
|
|
Recommends: init-system-helpers
|
|
Conflicts: cloud-agent, cloud-agent-libs, cloud-agent-deps, cloud-agent-scripts
|
|
Description: CloudStack agent
|
|
The CloudStack agent is in charge of managing shared computing resources in
|
|
a CloudStack powered cloud. Install this package if this computer
|
|
will participate in your cloud as a KVM HyperVisor.
|
|
|
|
Package: cloudstack-usage
|
|
Architecture: all
|
|
Depends: openjdk-8-jre-headless | java8-runtime-headless | java8-runtime, cloudstack-common (= ${source:Version}), jsvc, libmysql-java
|
|
Recommends: init-system-helpers
|
|
Description: CloudStack usage monitor
|
|
The CloudStack usage monitor provides usage accounting across the entire cloud for
|
|
cloud operators to charge based on usage parameters.
|
|
|
|
Package: cloudstack-cli
|
|
Architecture: all
|
|
Depends: ${misc:Depends}, cloudstack-common (= ${source:Version})
|
|
Description: The CloudStack CLI called CloudMonkey
|
|
|
|
Package: cloudstack-docs
|
|
Architecture: all
|
|
Depends: ${misc:Depends}
|
|
Description: The CloudStack documentation
|
|
|
|
Package: cloudstack-marvin
|
|
Architecture: all
|
|
Depends: ${misc:Depends}, python-pip, python-dev, libffi-dev
|
|
Description: The CloudStack Marvin library
|
|
|
|
Package: cloudstack-integration-tests
|
|
Architecture: all
|
|
Depends: ${misc:Depends}, cloudstack-marvin (= ${source:Version})
|
|
Description: The CloudStack Marvin integration tests
|
