Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Date: Mon, 4 Nov 2013 22:37:19 +0000 (UTC)
From: "ASF subversion and git services (JIRA)" <jira@apache.org>
To: cloudstack-issues@incubator.apache.org
Message-ID: <JIRA.12676917.1383242493262.18803.1383604639318@arcas>
In-Reply-To: <JIRA.12676917.1383242493262@arcas>
References: <JIRA.12676917.1383242493262@arcas>
Subject: [jira] [Commented] (CLOUDSTACK-5017) If SSVM is unavailable
 DownloadCommands will be routed to mgmt server
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/CLOUDSTACK-5017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13813368#comment-13813368 ] 

ASF subversion and git services commented on CLOUDSTACK-5017:
-------------------------------------------------------------

Commit 9a62239a92c5eafca6fafee1fbccd413bdfb91af in branch refs/heads/ui-restyle from [~minchen07]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=9a62239 ]

CLOUDSTACK-5017: Throw CloudRuntimeException in case of template/volume 
download when ssvm is not ready so that caller can remove some leftover
entries in template_store_ref and volume_store_ref.


> If SSVM is unavailable DownloadCommands will be routed to mgmt server
> ---------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-5017
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-5017
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Storage Controller
>    Affects Versions: 4.2.0
>            Reporter: Darren Shepherd
>            Assignee: Min Chen
>            Priority: Blocker
>             Fix For: 4.3.0
>
>
> If a SSVM in the zone is not available, meaning either it does not exist or the host entry is not Up or Connecting, DownloadCommand will get routed to LocalHostEndpoint.  This is particularily dangerous in a NFS setup.  If the mgmt server handles the DownloadCommand it has sudo access to mount NFS and perform the action.  This mean the mgmt server is now in the data path, or worse, it could hang if it does not have network access to the NFS server.


--
This message was sent by Atlassian JIRA
(v6.1#6144)