cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CLOUDSTACK-6747) Allowing non rfc1918 networks on the other end of VPC Site 2 Site VPN
Date Wed, 25 Jun 2014 15:17:25 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-6747?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14043602#comment-14043602
] 

ASF subversion and git services commented on CLOUDSTACK-6747:
-------------------------------------------------------------

Commit c05a007536af3e8ad628f77beda88b2d99129c4e in cloudstack's branch refs/heads/4.3 from
[~dahn]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=c05a007 ]

CLOUDSTACK-6747 test to allow all cidrs on other end of vpc, public or
private
(cherry picked from commit 018b471ad300ea0987e52d6b42dde71387de8c5b)


> Allowing non rfc1918 networks on the other end of VPC Site 2 Site VPN
> ---------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-6747
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6747
>             Project: CloudStack
>          Issue Type: Improvement
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Management Server, Network Controller, Virtual Router
>    Affects Versions: 4.2.0, 4.3.0
>            Reporter: Erik Weber
>            Assignee: Daan Hoogland
>             Fix For: Future
>
>
> When you configure a Site 2 Site VPN Customer gateway the other end from CloudStack point
of view is not allowed to be outside rfc1918 address scope.
> There are use cases where the client / remote networks use official/public addresses
and you want to encrypt / secure the traffic with VPN.
> Log excerpt:
> 2014-05-21 12:30:42,326 WARN  [c.c.u.n.NetUtils] (API-Job-Executor-7:job-3072 ctx-bf3922b1)
cidr 50.0.1.0/24 is not RFC 1918 compliant
> 2014-05-21 12:30:42,335 ERROR [c.c.a.ApiAsyncJobDispatcher] (API-Job-Executor-7:job-3072)
Unexpected exception while executing org.apache.cloudstack.api.command.user.vpn.CreateVpnCustomerGatewayCmd
> com.cloud.exception.InvalidParameterValueException: The customer gateway guest cidr list
50.0.1.0/24 is invalid guest cidr!
> at com.cloud.network.vpn.Site2SiteVpnManagerImpl.createCustomerGateway(Site2SiteVpnManagerImpl.java:176)
> Expected behavior is that guest cidr should be allowed as long as it's a valid cidr,
including if it's outside of RFC1918



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message