cloudstack-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From radh...@apache.org
Subject git commit: updated refs/heads/4.2 to fdac51f
Date Thu, 22 Aug 2013 07:40:56 GMT
Updated Branches:
  refs/heads/4.2 bd5f6e039 -> fdac51f46


CLOUDSTACK-770 ntier review comments


Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/fdac51f4
Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/fdac51f4
Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/fdac51f4

Branch: refs/heads/4.2
Commit: fdac51f46591642133a9bc79124153ea3b639714
Parents: bd5f6e0
Author: Radhika PC <radhika.puthiyetath@citrix.com>
Authored: Thu Aug 22 13:09:38 2013 +0530
Committer: Radhika PC <radhika.puthiyetath@citrix.com>
Committed: Thu Aug 22 13:10:26 2013 +0530

----------------------------------------------------------------------
 docs/en-US/configure-acl.xml   |  14 ++++++++------
 docs/en-US/images/add-tier.png | Bin 14891 -> 19054 bytes
 2 files changed, 8 insertions(+), 6 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cloudstack/blob/fdac51f4/docs/en-US/configure-acl.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/configure-acl.xml b/docs/en-US/configure-acl.xml
index c89210b..3ac2b74 100644
--- a/docs/en-US/configure-acl.xml
+++ b/docs/en-US/configure-acl.xml
@@ -22,9 +22,11 @@
   <title>Configuring Network Access Control List</title>
   <para>Define Network Access Control List (ACL) on the VPC virtual router to control
incoming
     (ingress) and outgoing (egress) traffic between the VPC tiers, and the tiers and Internet.
By
-    default, all incoming and outgoing traffic to the guest networks is blocked. To open
the ports,
-    you must create a new network ACL. The network ACLs can be created for the tiers only
if the
-    NetworkACL service is supported.</para>
+    default, all incoming traffic to the guest networks is blocked and all outgoing traffic
from
+    guest networks is allowed, once you add an ACL rule for outgoing traffic, then only outgoing
+    traffic specified in this ACL rule is allowed, the rest is blocked. To open the ports,
you must
+    create a new network ACL. The network ACLs can be created for the tiers only if the NetworkACL
+    service is supported.</para>
   <section id="network-acl">
     <title>About Network ACL Lists</title>
     <para>In &PRODUCT; terminology, Network ACL is a group of Network ACL items.
Network ACL items
@@ -35,8 +37,8 @@
       VPC tiers within a VPC. A Tier is associated with a Network ACL at all the times. Each
tier
       can be associated with only one ACL.</para>
     <para>The default Network ACL is used when no ACL is associated. Default behavior
is all the
-      incoming and outgoing traffic is blocked to the tiers. Default network ACL cannot be
removed
-      or modified. Contents of the default Network ACL is:</para>
+      incoming traffic is blocked and outgoing traffic is allowed from the tiers. Default
network
+      ACL cannot be removed or modified. Contents of the default Network ACL is:</para>
     <informaltable>
       <tgroup cols="5" align="left" colsep="1" rowsep="1">
         <colspec colnum="1" colname="c1" colwidth="31.5pt"/>
@@ -222,7 +224,7 @@
     </orderedlist>
   </section>
   <section id="create-acl-tier">
-    <title>Assigning a Custom ACL List to a Tier</title>
+    <title>Creating a Tier with Custom ACL List</title>
     <orderedlist>
       <listitem>
         <para>Create a VPC.</para>

http://git-wip-us.apache.org/repos/asf/cloudstack/blob/fdac51f4/docs/en-US/images/add-tier.png
----------------------------------------------------------------------
diff --git a/docs/en-US/images/add-tier.png b/docs/en-US/images/add-tier.png
index 881671e..0994dbd 100644
Binary files a/docs/en-US/images/add-tier.png and b/docs/en-US/images/add-tier.png differ


Mime
View raw message