You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by se...@apache.org on 2015/10/01 16:04:45 UTC
[35/51] [partial] cloudstack-docs git commit: Remove all old docbook
files
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/egress-firewall-rule.xml
----------------------------------------------------------------------
diff --git a/en-US/egress-firewall-rule.xml b/en-US/egress-firewall-rule.xml
deleted file mode 100644
index 93d5a81..0000000
--- a/en-US/egress-firewall-rule.xml
+++ /dev/null
@@ -1,168 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="egress-firewall-rule">
- <title>Egress Firewall Rules in an Advanced Zone</title>
- <para>The egress traffic originates from a private network to a public network, such as the
- Internet. By default, the egress traffic is blocked in default network offerings, so no outgoing
- traffic is allowed from a guest network to the Internet. However, you can control the egress
- traffic in an Advanced zone by creating egress firewall rules. When an egress firewall rule is
- applied, the traffic specific to the rule is allowed and the remaining traffic is blocked. When
- all the firewall rules are removed the default policy, Block, is applied.</para>
- <section id="prereq-egress">
- <title>Prerequisites and Guidelines</title>
- <para>Consider the following scenarios to apply egress firewall rules:</para>
- <itemizedlist>
- <listitem>
- <para>Egress firewall rules are supported on Juniper SRX and virtual router.</para>
- </listitem>
- <listitem>
- <para>The egress firewall rules are not supported on shared networks.</para>
- </listitem>
- <listitem>
- <para>Allow the egress traffic from specified source CIDR. The Source CIDR is part of guest
- network CIDR.</para>
- </listitem>
- <listitem>
- <para>Allow the egress traffic with protocol TCP,UDP,ICMP, or ALL.</para>
- </listitem>
- <listitem>
- <para>Allow the egress traffic with protocol and destination port range. The port range is
- specified for TCP, UDP or for ICMP type and code.</para>
- </listitem>
- <listitem>
- <para>The default policy is Allow for the new network offerings, whereas on upgrade existing
- network offerings with firewall service providers will have the default egress policy
- Deny.</para>
- </listitem>
- </itemizedlist>
- </section>
- <section>
- <title>Configuring an Egress Firewall Rule</title>
- <orderedlist>
- <listitem>
- <para>Log in to the &PRODUCT; UI as an administrator or end user. </para>
- </listitem>
- <listitem>
- <para>In the left navigation, choose Network.</para>
- </listitem>
- <listitem>
- <para>In Select view, choose Guest networks, then click the Guest network you want.</para>
- </listitem>
- <listitem>
- <para>To add an egress rule, click the Egress rules tab and fill out the following fields to
- specify what type of traffic is allowed to be sent out of VM instances in this guest
- network:</para>
- <mediaobject>
- <imageobject>
- <imagedata fileref="./images/egress-firewall-rule.png"/>
- </imageobject>
- <textobject>
- <phrase>egress-firewall-rule.png: adding an egress firewall rule</phrase>
- </textobject>
- </mediaobject>
- <itemizedlist>
- <listitem>
- <para><emphasis role="bold">CIDR</emphasis>: (Add by CIDR only) To send traffic only to
- the IP addresses within a particular address block, enter a CIDR or a comma-separated
- list of CIDRs. The CIDR is the base IP address of the destination. For example,
- 192.168.0.0/22. To allow all CIDRs, set to 0.0.0.0/0.</para>
- </listitem>
- <listitem>
- <para><emphasis role="bold">Protocol</emphasis>: The networking protocol that VMs uses
- to send outgoing traffic. The TCP and UDP protocols are typically used for data
- exchange and end-user communications. The ICMP protocol is typically used to send
- error messages or network monitoring data.</para>
- </listitem>
- <listitem>
- <para><emphasis role="bold">Start Port, End Port</emphasis>: (TCP, UDP only) A range of
- listening ports that are the destination for the outgoing traffic. If you are opening
- a single port, use the same number in both fields.</para>
- </listitem>
- <listitem>
- <para><emphasis role="bold">ICMP Type, ICMP Code</emphasis>: (ICMP only) The type of
- message and error code that are sent.</para>
- </listitem>
- </itemizedlist>
- </listitem>
- <listitem>
- <para>Click Add.</para>
- </listitem>
- </orderedlist>
- </section>
- <section id="default-egress-policy">
- <title>Configuring the Default Egress Policy</title>
- <para>The default egress policy for Isolated guest network is configured by using Network
- offering. Use the create network offering option to determine whether the default policy
- should be block or allow all the traffic to the public network from a guest network. Use this
- network offering to create the network. If no policy is specified, by default all the traffic
- is allowed from the guest network that you create by using this network offering.</para>
- <para>You have two options: Allow and Deny.</para>
- <formalpara>
- <title>Allow</title>
- <para>If you select Allow for a network offering, by default egress traffic is allowed.
- However, when an egress rule is configured for a guest network, rules are applied to block
- the specified traffic and rest are allowed. If no egress rules are configured for the
- network, egress traffic is accepted.</para>
- </formalpara>
- <formalpara>
- <title>Deny</title>
- <para>If you select Deny for a network offering, by default egress traffic for the guest
- network is blocked. However, when an egress rules is configured for a guest network, rules
- are applied to allow the specified traffic. While implementing a guest network, &PRODUCT;
- adds the firewall egress rule specific to the default egress policy for the guest
- network.</para>
- </formalpara>
- <para>This feature is supported only on virtual router and Juniper SRX.</para>
- <orderedlist>
- <listitem>
- <para>Create a network offering with your desirable default egress policy:</para>
- <orderedlist numeration="loweralpha">
- <listitem>
- <para>Log in with admin privileges to the &PRODUCT; UI.</para>
- </listitem>
- <listitem>
- <para>In the left navigation bar, click Service Offerings.</para>
- </listitem>
- <listitem>
- <para>In Select Offering, choose Network Offering.</para>
- </listitem>
- <listitem>
- <para>Click Add Network Offering.</para>
- </listitem>
- <listitem>
- <para>In the dialog, make necessary choices, including firewall provider.</para>
- </listitem>
- <listitem>
- <para>In the Default egress policy field, specify the behaviour.</para>
- </listitem>
- <listitem>
- <para>Click OK.</para>
- </listitem>
- </orderedlist>
- </listitem>
- <listitem>
- <para>Create an isolated network by using this network offering.</para>
- <para>Based on your selection, the network will have the egress public traffic blocked or
- allowed.</para>
- </listitem>
- </orderedlist>
- </section>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/elastic-ip.xml
----------------------------------------------------------------------
diff --git a/en-US/elastic-ip.xml b/en-US/elastic-ip.xml
deleted file mode 100644
index 8ecbd75..0000000
--- a/en-US/elastic-ip.xml
+++ /dev/null
@@ -1,103 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="elastic-ip">
- <title>About Elastic IP</title>
- <para>Elastic IP (EIP) addresses are the IP addresses that are associated with an account, and act
- as static IP addresses. The account owner has the complete control over the Elastic IP addresses
- that belong to the account. As an account owner, you can allocate an Elastic IP to a VM of your
- choice from the EIP pool of your account. Later if required you can reassign the IP address to a
- different VM. This feature is extremely helpful during VM failure. Instead of replacing the VM
- which is down, the IP address can be reassigned to a new VM in your account. </para>
- <para>Similar to the public IP address, Elastic IP addresses are mapped to their associated
- private IP addresses by using StaticNAT. The EIP service is equipped with StaticNAT (1:1)
- service in an EIP-enabled basic zone. The default network offering,
- DefaultSharedNetscalerEIPandELBNetworkOffering, provides your network with EIP and ELB network
- services if a NetScaler device is deployed in your zone. Consider the following illustration for
- more details.</para>
- <mediaobject>
- <imageobject>
- <imagedata fileref="./images/eip-ns-basiczone.png"/>
- </imageobject>
- <textobject>
- <phrase>eip-ns-basiczone.png: Elastic IP in a NetScaler-enabled Basic Zone.</phrase>
- </textobject>
- </mediaobject>
- <para>In the illustration, a NetScaler appliance is the default entry or exit point for the
- &PRODUCT; instances, and firewall is the default entry or exit point for the rest of the data
- center. Netscaler provides LB services and staticNAT service to the guest networks. The guest
- traffic in the pods and the Management Server are on different subnets / VLANs. The policy-based
- routing in the data center core switch sends the public traffic through the NetScaler, whereas
- the rest of the data center goes through the firewall. </para>
- <para>The EIP work flow is as follows:</para>
- <itemizedlist>
- <listitem>
- <para>When a user VM is deployed, a public IP is automatically acquired from the pool of
- public IPs configured in the zone. This IP is owned by the VM's account.</para>
- </listitem>
- <listitem>
- <para>Each VM will have its own private IP. When the user VM starts, Static NAT is provisioned
- on the NetScaler device by using the Inbound Network Address Translation (INAT) and Reverse
- NAT (RNAT) rules between the public IP and the private IP.</para>
- <note>
- <para>Inbound NAT (INAT) is a type of NAT supported by NetScaler, in which the destination
- IP address is replaced in the packets from the public network, such as the Internet, with
- the private IP address of a VM in the private network. Reverse NAT (RNAT) is a type of NAT
- supported by NetScaler, in which the source IP address is replaced in the packets
- generated by a VM in the private network with the public IP address.</para>
- </note>
- </listitem>
- <listitem>
- <para>This default public IP will be released in two cases:</para>
- <itemizedlist>
- <listitem>
- <para>When the VM is stopped. When the VM starts, it again receives a new public IP, not
- necessarily the same one allocated initially, from the pool of Public IPs.</para>
- </listitem>
- <listitem>
- <para>The user acquires a public IP (Elastic IP). This public IP is associated with the
- account, but will not be mapped to any private IP. However, the user can enable Static
- NAT to associate this IP to the private IP of a VM in the account. The Static NAT rule
- for the public IP can be disabled at any time. When Static NAT is disabled, a new public
- IP is allocated from the pool, which is not necessarily be the same one allocated
- initially.</para>
- </listitem>
- </itemizedlist>
- </listitem>
- </itemizedlist>
- <para>For the deployments where public IPs are limited resources, you have the flexibility to
- choose not to allocate a public IP by default. You can use the Associate Public IP option to
- turn on or off the automatic public IP assignment in the EIP-enabled Basic zones. If you turn
- off the automatic public IP assignment while creating a network offering, only a private IP is
- assigned to a VM when the VM is deployed with that network offering. Later, the user can acquire
- an IP for the VM and enable static NAT.</para>
- <para condition="admin">For more information on the Associate Public IP option, see <xref
- linkend="creating-network-offerings"/>.</para>
- <para condition="install">For more information on the Associate Public IP option, see the
- Administration Guide.</para>
- <note>
- <para>The Associate Public IP feature is designed only for use with user VMs. The System VMs
- continue to get both public IP and private by default, irrespective of the network offering
- configuration.</para>
- </note>
- <para>New deployments which use the default shared network offering with EIP and ELB services to
- create a shared network in the Basic zone will continue allocating public IPs to each user
- VM.</para>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/enable-disable-static-nat-vpc.xml
----------------------------------------------------------------------
diff --git a/en-US/enable-disable-static-nat-vpc.xml b/en-US/enable-disable-static-nat-vpc.xml
deleted file mode 100644
index 467a304..0000000
--- a/en-US/enable-disable-static-nat-vpc.xml
+++ /dev/null
@@ -1,112 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="enable-disable-static-nat-vpc">
- <title>Enabling or Disabling Static NAT on a VPC</title>
- <para>A static NAT rule maps a public IP address to the private IP address of a VM in a VPC to
- allow Internet traffic to it. This section tells how to enable or disable static NAT for a
- particular IP address in a VPC.</para>
- <para>If port forwarding rules are already in effect for an IP address, you cannot enable static
- NAT to that IP.</para>
- <para>If a guest VM is part of more than one network, static NAT rules will function only if they
- are defined on the default network.</para>
- <orderedlist>
- <listitem>
- <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
- </listitem>
- <listitem>
- <para>In the left navigation, choose Network.</para>
- </listitem>
- <listitem>
- <para>In the Select view, select VPC.</para>
- <para>All the VPCs that you have created for the account is listed in the page.</para>
- </listitem>
- <listitem>
- <para>Click the Configure button of the VPC to which you want to deploy the VMs.</para>
- <para>The VPC page is displayed where all the tiers you created are listed in a
- diagram.</para>
- <para>For each tier, the following options are displayed.</para>
- <itemizedlist>
- <listitem>
- <para>Internal LB</para>
- </listitem>
- <listitem>
- <para>Public LB IP</para>
- </listitem>
- <listitem>
- <para>Static NAT</para>
- </listitem>
- <listitem>
- <para>Virtual Machines</para>
- </listitem>
- <listitem>
- <para>CIDR</para>
- </listitem>
- </itemizedlist>
- <para>The following router information is displayed:</para>
- <itemizedlist>
- <listitem>
- <para>Private Gateways</para>
- </listitem>
- <listitem>
- <para>Public IP Addresses</para>
- </listitem>
- <listitem>
- <para>Site-to-Site VPNs</para>
- </listitem>
- <listitem>
- <para>Network ACL Lists</para>
- </listitem>
- </itemizedlist>
- </listitem>
- <listitem>
- <para>In the Router node, select Public IP Addresses.</para>
- <para>The IP Addresses page is displayed.</para>
- </listitem>
- <listitem>
- <para>Click the IP you want to work with.</para>
- </listitem>
- <listitem>
- <para>In the Details tab,click the Static NAT button.<inlinemediaobject>
- <imageobject>
- <imagedata fileref="./images/enable-disable.png"/>
- </imageobject>
- <textobject>
- <phrase>enable-disable.png: button to enable Static NAT.</phrase>
- </textobject>
- </inlinemediaobject>The button toggles between Enable and Disable, depending on whether
- static NAT is currently enabled for the IP address.</para>
- </listitem>
- <listitem>
- <para>If you are enabling static NAT, a dialog appears as follows:</para>
- <mediaobject>
- <imageobject>
- <imagedata fileref="./images/select-vm-staticnat-vpc.png"/>
- </imageobject>
- <textobject>
- <phrase>select-vmstatic-nat.png: selecting a tier to apply staticNAT.</phrase>
- </textobject>
- </mediaobject>
- </listitem>
- <listitem>
- <para>Select the tier and the destination VM, then click Apply.</para>
- </listitem>
- </orderedlist>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/enable-disable-static-nat.xml
----------------------------------------------------------------------
diff --git a/en-US/enable-disable-static-nat.xml b/en-US/enable-disable-static-nat.xml
deleted file mode 100644
index 0154dca..0000000
--- a/en-US/enable-disable-static-nat.xml
+++ /dev/null
@@ -1,46 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="enable-disable-static-nat">
- <title>Enabling or Disabling Static NAT</title>
- <para>If port forwarding rules are already in effect for an IP address, you cannot enable static NAT to that IP.</para>
- <para>If a guest VM is part of more than one network, static NAT rules will function only if they are defined on the default network.</para>
- <orderedlist>
- <listitem><para>Log in to the &PRODUCT; UI as an administrator or end user.</para></listitem>
- <listitem><para>In the left navigation, choose Network.</para></listitem>
- <listitem><para>Click the name of the network where you want to work with.</para></listitem>
- <listitem><para>Click View IP Addresses.</para></listitem>
- <listitem><para>Click the IP address you want to work with.</para>
- </listitem>
- <listitem><para>Click the Static NAT <inlinemediaobject>
- <imageobject>
- <imagedata fileref="./images/enable-disable.png"/>
- </imageobject>
- <textobject>
- <phrase>ReleaseIPButton.png: button to release an IP</phrase>
- </textobject>
- </inlinemediaobject>button.</para><para>The button toggles between Enable and Disable, depending on whether static NAT is currently enabled for the IP address.</para></listitem>
- <listitem><para>If you are enabling static NAT, a dialog appears where you can choose the destination VM and
- click Apply.</para></listitem>
- </orderedlist>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/enable-security-groups.xml
----------------------------------------------------------------------
diff --git a/en-US/enable-security-groups.xml b/en-US/enable-security-groups.xml
deleted file mode 100644
index c957310..0000000
--- a/en-US/enable-security-groups.xml
+++ /dev/null
@@ -1,32 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="enable-security-groups">
- <title>Enabling Security Groups</title>
- <para>In order for security groups to function in a zone, the security groups feature must first be
- enabled for the zone. The administrator can do this when creating a new zone, by selecting a
- network offering that includes security groups. The procedure is described in Basic Zone
- Configuration in the Advanced Installation Guide. The administrator can not enable security
- groups for an existing zone, only when creating a new zone.</para>
-</section>
-
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/enabling-api-call-expiration.xml
----------------------------------------------------------------------
diff --git a/en-US/enabling-api-call-expiration.xml b/en-US/enabling-api-call-expiration.xml
deleted file mode 100644
index cd82d3d..0000000
--- a/en-US/enabling-api-call-expiration.xml
+++ /dev/null
@@ -1,40 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-
- <section id="enabling-api-call-expiration">
- <title>Enabling API Call Expiration</title>
- <para>
- You can set an expiry timestamp on API calls to prevent replay attacks over non-secure channels, such as HTTP. The server tracks the expiry timestamp you have specified and rejects all the subsequent API requests that come in after this validity period.
- </para>
- <para>To enable this feature, add the following parameters to the API request:</para>
- <itemizedlist>
- <listitem><para>signatureVersion=3: If the signatureVersion parameter is missing or is not equal to 3, the expires parameter is ignored in the API request.</para></listitem>
- <listitem><para>expires=YYYY-MM-DDThh:mm:ssZ: Specifies the date and time at which the signature included in the request is expired. The timestamp is expressed in the YYYY-MM-DDThh:mm:ssZ format, as specified in the ISO 8601 standard.</para></listitem>
- </itemizedlist>
- <para>For example:</para>
- <programlisting>expires=2011-10-10T12:00:00+0530</programlisting>
- <para>A sample API request with expiration is given below:</para>
- <programlisting>http://<IPAddress>:8080/client/api?command=listZones&signatureVersion=3&expires=2011-10-10T12:00:00+0530&apiKey=miVr6X7u6bN_sdahOBpjNejPgEsT35eXq-jB8CG20YI3yaxXcgpyuaIRmFI_EJTVwZ0nUkkJbPmY3y2bciKwFQ&signature=Lxx1DM40AjcXU%2FcaiK8RAP0O1hU%3D</programlisting>
- </section>
-
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/enabling-port-8096.xml
----------------------------------------------------------------------
diff --git a/en-US/enabling-port-8096.xml b/en-US/enabling-port-8096.xml
deleted file mode 100644
index 57c492e..0000000
--- a/en-US/enabling-port-8096.xml
+++ /dev/null
@@ -1,37 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-
- <section id="enabling-port-8096">
- <title>Enabling Port 8096</title>
- <para>
- Port 8096, which allows API calls without authentication, is closed and disabled by default on any fresh 3.0.1 installations. You can enable 8096 (or another port) for this purpose as follows:
- </para>
- <orderedlist>
- <listitem><para>Ensure that the first Management Server is installed and running.</para></listitem>
- <listitem><para>Set the global configuration parameter integration.api.port to the desired port.</para></listitem>
- <listitem><para>Restart the Management Server.</para></listitem>
- <listitem><para>On the Management Server host machine, create an iptables rule allowing access to that port.</para></listitem>
- </orderedlist>
- </section>
-
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/end-user-ui-overview.xml
----------------------------------------------------------------------
diff --git a/en-US/end-user-ui-overview.xml b/en-US/end-user-ui-overview.xml
deleted file mode 100644
index 6ec1a25..0000000
--- a/en-US/end-user-ui-overview.xml
+++ /dev/null
@@ -1,27 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="end-user-ui-overview">
- <title>End User's UI Overview</title>
- <para>The &PRODUCT; UI helps users of cloud infrastructure to view and use their cloud resources, including virtual machines, templates and ISOs, data volumes and snapshots, guest networks, and IP addresses. If the user is a member or administrator of one or more &PRODUCT; projects, the UI can provide a project-oriented view.</para>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/error-handling.xml
----------------------------------------------------------------------
diff --git a/en-US/error-handling.xml b/en-US/error-handling.xml
deleted file mode 100644
index 3f119bf..0000000
--- a/en-US/error-handling.xml
+++ /dev/null
@@ -1,29 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-
- <section id="error-handling">
- <title>Error Handling</title>
- <para>If an error occurs while processing an API request, the appropriate response in the format specified is returned. Each error response consists of an error code and an error text describing what possibly can go wrong. For an example error response, see page 12.</para>
- <para>An HTTP error code of 401 is always returned if API request was rejected due to bad signatures, missing API Keys, or the user simply did not have the permissions to execute the command.</para>
- </section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/event-framework.xml
----------------------------------------------------------------------
diff --git a/en-US/event-framework.xml b/en-US/event-framework.xml
deleted file mode 100644
index 0f62fac..0000000
--- a/en-US/event-framework.xml
+++ /dev/null
@@ -1,110 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="event-framework">
- <title>Event Notification</title>
- <para>Event notification framework provides a means for the Management Server components to
- publish and subscribe to &PRODUCT; events. Event notification is achieved by implementing the
- concept of event bus abstraction in the Management Server. An event bus is introduced in the
- Management Server that allows the &PRODUCT; components and extension plug-ins to subscribe to the
- events by using the Advanced Message Queuing Protocol (AMQP) client. In &PRODUCT;, a default
- implementation of event bus is provided as a plug-in that uses the RabbitMQ AMQP client. The
- AMQP client pushes the published events to a compatible AMQP server. Therefore all the &PRODUCT;
- events are published to an exchange in the AMQP server. </para>
- <para>A new event for state change, resource state change, is introduced as part of Event
- notification framework. Every resource, such as user VM, volume, NIC, network, public IP,
- snapshot, and template, is associated with a state machine and generates events as part of the
- state change. That implies that a change in the state of a resource results in a state change
- event, and the event is published in the corresponding state machine on the event bus. All the
- &PRODUCT; events (alerts, action events, usage events) and the additional category of resource
- state change events, are published on to the events bus.</para>
- <formalpara>
- <title>Use Cases</title>
- <para>The following are some of the use cases:</para>
- </formalpara>
- <itemizedlist>
- <listitem>
- <para>Usage or Billing Engines: A third-party cloud usage solution can implement a plug-in
- that can connects to &PRODUCT; to subscribe to &PRODUCT; events and generate usage data. The
- usage data is consumed by their usage software.</para>
- </listitem>
- <listitem>
- <para>AMQP plug-in can place all the events on the a message queue, then a AMQP message broker
- can provide topic-based notification to the subscribers.</para>
- </listitem>
- <listitem>
- <para>Publish and Subscribe notification service can be implemented as a pluggable service in
- &PRODUCT; that can provide rich set of APIs for event notification, such as topics-based
- subscription and notification. Additionally, the pluggable service can deal with
- multi-tenancy, authentication, and authorization issues.</para>
- </listitem>
- </itemizedlist>
- <formalpara>
- <title>Configuration</title>
- <para>As a &PRODUCT; administrator, perform the following one-time configuration to enable event
- notification framework. At run time no changes can control the behaviour.</para>
- </formalpara>
- <orderedlist>
- <listitem>
- <para>Open <filename>'componentContext.xml</filename>.</para>
- </listitem>
- <listitem>
- <para>Define a bean named <filename>eventNotificationBus</filename> as follows:</para>
- <itemizedlist>
- <listitem>
- <para>name : Specify a name for the bean.</para>
- </listitem>
- <listitem>
- <para>server : The name or the IP address of the RabbitMQ AMQP server.</para>
- </listitem>
- <listitem>
- <para>port : The port on which RabbitMQ server is running.</para>
- </listitem>
- <listitem>
- <para>username : The username associated with the account to access the RabbitMQ
- server.</para>
- </listitem>
- <listitem>
- <para>password : The password associated with the username of the account to access the
- RabbitMQ server.</para>
- </listitem>
- <listitem>
- <para>exchange : The exchange name on the RabbitMQ server where &PRODUCT; events are
- published.</para>
- <para>A sample bean is given below:</para>
- <programlisting><bean id="eventNotificationBus" class="org.apache.cloudstack.mom.rabbitmq.RabbitMQEventBus">
- <property name="name" value="eventNotificationBus"/>
- <property name="server" value="127.0.0.1"/>
- <property name="port" value="5672"/>
- <property name="username" value="guest"/>
- <property name="password" value="guest"/>
- <property name="exchange" value="cloudstack-events"/>
- </bean></programlisting>
- <para>The <filename>eventNotificationBus</filename> bean represents the
- <filename>org.apache.cloudstack.mom.rabbitmq.RabbitMQEventBus</filename> class.</para>
- </listitem>
- </itemizedlist>
- </listitem>
- <listitem>
- <para>Restart the Management Server.</para>
- </listitem>
- </orderedlist>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/event-log-queries.xml
----------------------------------------------------------------------
diff --git a/en-US/event-log-queries.xml b/en-US/event-log-queries.xml
deleted file mode 100644
index a0dcaa6..0000000
--- a/en-US/event-log-queries.xml
+++ /dev/null
@@ -1,36 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="event-log-queries">
- <title>Event Log Queries</title>
- <para>Database logs can be queried from the user interface. The list of events captured by the system includes:</para>
- <itemizedlist>
- <listitem><para>Virtual machine creation, deletion, and on-going management operations</para></listitem>
- <listitem><para>Virtual router creation, deletion, and on-going management operations</para>
- </listitem>
- <listitem><para>Template creation and deletion</para></listitem>
- <listitem><para>Network/load balancer rules creation and deletion</para></listitem>
- <listitem><para>Storage volume creation and deletion</para></listitem>
- <listitem><para>User login and logout</para></listitem>
- </itemizedlist>
- </section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/event-types.xml
----------------------------------------------------------------------
diff --git a/en-US/event-types.xml b/en-US/event-types.xml
deleted file mode 100644
index b364bdd..0000000
--- a/en-US/event-types.xml
+++ /dev/null
@@ -1,461 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE appendix PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<appendix id="event-types">
- <title>Event Types</title>
- <informaltable frame="all">
- <tgroup cols="2" align="left" colsep="1" rowsep="1">
- <colspec colnum="1" colname="c1" colwidth="1.0*"/>
- <colspec colnum="2" colname="c2" colwidth="3.15*"/>
- <thead>
- <row>
- <entry><para>Types</para></entry>
- <entry><para>Events</para></entry>
- </row>
- </thead>
- <tbody>
- <row>
- <entry><para>VM</para></entry>
- <entry><para>VM.CREATE</para>
- <para>VM.DESTROY</para>
- <para>VM.START</para>
- <para>VM.STOP</para>
- <para>VM.REBOOT</para>
- <para>VM.UPDATE</para>
- <para>VM.UPGRADE</para>
- <para>VM.DYNAMIC.SCALE</para>
- <para>VM.RESETPASSWORD</para>
- <para>VM.RESETSSHKEY</para><para>VM.MIGRATE </para>
- <para>VM.MOVE </para>
- <para>VM.RESTORE</para></entry>
- </row>
- <row>
- <entry><para> Domain Router</para></entry>
- <entry><para>ROUTER.CREATE</para>
- <para>ROUTER.DESTROY </para>
- <para>ROUTER.START </para>
- <para>ROUTER.STOP </para>
- <para>ROUTER.REBOOT </para>
- <para>ROUTER.HA </para>
- <para>ROUTER.UPGRADE</para></entry>
- </row>
- <row>
- <entry><para>Console proxy</para></entry>
- <entry><para>PROXY.CREATE</para>
- <para>PROXY.DESTROY</para>
- <para>PROXY.START </para>
- <para>PROXY.STOP </para>
- <para>PROXY.REBOOT</para>
- <para>PROXY.HA</para></entry>
- </row>
- <row>
- <entry><para>VNC Console Events</para></entry>
- <entry><para>VNC.CONNECT</para>
- <para>VNC.DISCONNECT</para></entry>
- </row>
- <row>
- <entry><para>Network Events</para></entry>
- <entry><para>NET.IPASSIGN</para>
- <para>NET.IPRELEASE </para>
- <para>PORTABLE.IPASSIGN </para>
- <para>PORTABLE.IPRELEASE </para>
- <para>NET.RULEADD </para>
- <para>NET.RULEDELETE </para>
- <para>NET.RULEMODIFY </para>
- <para>NETWORK.CREATE </para>
- <para>NETWORK.DELETE </para>
- <para>NETWORK.UPDATE </para>
- <para>FIREWALL.OPEN </para>
- <para>FIREWALL.CLOSE</para></entry>
- </row>
- <row>
- <entry><para>NIC Events</para></entry>
- <entry><para>NIC.CREATE </para>
- <para>NIC.DELETE </para>
- <para>NIC.UPDATE </para>
- <para>NIC.DETAIL.ADD </para>
- <para>NIC.DETAIL.UPDATE </para>
- <para>NIC.DETAIL.REMOVE</para></entry>
- </row>
- <row>
- <entry><para>Load Balancers</para></entry>
- <entry><para>LB.ASSIGN.TO.RULE</para>
- <para>LB.REMOVE.FROM.RULE </para>
- <para>LB.CREATE </para>
- <para>LB.DELETE </para>
- <para>LB.STICKINESSPOLICY.CREATE </para>
- <para>LB.STICKINESSPOLICY.DELETE </para>
- <para>LB.HEALTHCHECKPOLICY.CREATE </para>
- <para>LB.HEALTHCHECKPOLICY.DELETE </para>
- <para>LB.UPDATE</para></entry>
- </row>
- <row>
- <entry><para>Global Load Balancer rules</para></entry>
- <entry><para>GLOBAL.LB.ASSIGN </para>
- <para>GLOBAL.LB.REMOVE </para>
- <para>GLOBAL.LB.CREATE </para>
- <para>GLOBAL.LB.DELETE </para>
- <para>GLOBAL.LB.UPDATE </para></entry>
- </row>
- <row>
- <entry><para>Account events</para></entry>
- <entry><para>ACCOUNT.ENABLE </para>
- <para>ACCOUNT.DISABLE </para>
- <para>ACCOUNT.CREATE </para>
- <para>ACCOUNT.DELETE </para>
- <para>ACCOUNT.UPDATE </para>
- <para>ACCOUNT.MARK.DEFAULT.ZONE</para></entry>
- </row>
- <row>
- <entry><para>UserVO Events</para></entry>
- <entry><para>USER.LOGIN </para>
- <para>USER.LOGOUT </para>
- <para>USER.CREATE </para>
- <para>USER.DELETE </para>
- <para>USER.DISABLE </para>
- <para>USER.UPDATE </para>
- <para>USER.ENABLE </para>
- <para>USER.LOCK</para></entry>
- </row>
- <row>
- <entry><para>Registering SSH keypair events</para></entry>
- <entry><para>REGISTER.SSH.KEYPAIR</para></entry>
- </row>
- <row>
- <entry><para>Register for user API and secret keys</para></entry>
- <entry><para>REGISTER.USER.KEY</para></entry>
- </row>
- <row>
- <entry><para>Template Events</para></entry>
- <entry><para>TEMPLATE.CREATE </para>
- <para>TEMPLATE.DELETE </para>
- <para>TEMPLATE.UPDATE </para>
- <para>TEMPLATE.DOWNLOAD.START </para>
- <para>TEMPLATE.DOWNLOAD.SUCCESS </para>
- <para>TEMPLATE.DOWNLOAD.FAILED </para>
- <para>TEMPLATE.COPY </para>
- <para>TEMPLATE.EXTRACT </para>
- <para>TEMPLATE.UPLOAD </para>
- <para>TEMPLATE.CLEANUP</para></entry>
- </row>
- <row>
- <entry><para>Volume Events</para></entry>
- <entry><para>VOLUME.CREATE </para>
- <para>VOLUME.DELETE </para>
- <para>VOLUME.ATTACH </para>
- <para>VOLUME.DETACH </para>
- <para>VOLUME.EXTRACT </para>
- <para>VOLUME.UPLOAD </para>
- <para>VOLUME.MIGRATE </para>
- <para>VOLUME.RESIZE </para>
- <para>VOLUME.DETAIL.UPDATE </para>
- <para>VOLUME.DETAIL.ADD </para>
- <para>VOLUME.DETAIL.REMOVE</para></entry>
- </row>
- <row>
- <entry><para>Domains</para></entry>
- <entry><para>DOMAIN.CREATE </para>
- <para>DOMAIN.DELETE </para>
- <para>DOMAIN.UPDATE</para></entry>
- </row>
- <row>
- <entry><para>Snapshots</para></entry>
- <entry><para>SNAPSHOT.CREATE </para>
- <para>SNAPSHOT.DELETE </para>
- <para>SNAPSHOTPOLICY.CREATE </para>
- <para>SNAPSHOTPOLICY.UPDATE </para>
- <para>SNAPSHOTPOLICY.DELETE</para></entry>
- </row>
- <row>
- <entry><para>ISO</para></entry>
- <entry><para>ISO.CREATE </para>
- <para>ISO.DELETE </para>
- <para>ISO.COPY </para>
- <para>ISO.ATTACH </para>
- <para>ISO.DETACH </para>
- <para>ISO.EXTRACT </para>
- <para>ISO.UPLOAD</para></entry>
- </row>
- <row>
- <entry><para>SSVM</para></entry>
- <entry><para>SSVM.CREATE </para>
- <para>SSVM.DESTROY </para>
- <para>SSVM.START </para>
- <para>SSVM.STOP </para>
- <para>SSVM.REBOOT </para>
- <para>SSVM.HA</para></entry>
- </row>
- <row>
- <entry><para>Service Offerings</para></entry>
- <entry><para>SERVICE.OFFERING.CREATE </para>
- <para>SERVICE.OFFERING.EDIT </para>
- <para>SERVICE.OFFERING.DELETE</para></entry>
- </row>
- <row>
- <entry><para>Disk Offerings</para></entry>
- <entry><para>DISK.OFFERING.CREATE </para>
- <para>DISK.OFFERING.EDIT </para>
- <para>DISK.OFFERING.DELETE</para></entry>
- </row>
- <row>
- <entry><para>Network offerings</para></entry>
- <entry><para>NETWORK.OFFERING.CREATE </para>
- <para>NETWORK.OFFERING.ASSIGN </para>
- <para>NETWORK.OFFERING.EDIT </para>
- <para>NETWORK.OFFERING.REMOVE </para>
- <para>NETWORK.OFFERING.DELETE</para></entry>
- </row>
- <row>
- <entry><para>Pods</para></entry>
- <entry><para>POD.CREATE </para>
- <para>POD.EDIT </para>
- <para>POD.DELETE</para></entry>
- </row>
- <row>
- <entry><para>Zones</para></entry>
- <entry><para>ZONE.CREATE </para>
- <para>ZONE.EDIT </para>
- <para>ZONE.DELETE</para></entry>
- </row>
- <row>
- <entry><para>VLANs/IP ranges</para></entry>
- <entry><para>VLAN.IP.RANGE.CREATE </para>
- <para>VLAN.IP.RANGE.DELETE </para>
- <para>VLAN.IP.RANGE.DEDICATE </para>
- <para>VLAN.IP.RANGE.RELEASE </para>
- <para>STORAGE.IP.RANGE.CREATE </para>
- <para>STORAGE.IP.RANGE.DELETE </para>
- <para>STORAGE.IP.RANGE.UPDATE</para></entry>
- </row>
- <row>
- <entry><para>Configuration Table</para></entry>
- <entry><para>CONFIGURATION.VALUE.EDIT</para></entry>
- </row>
- <row>
- <entry><para>Security Groups</para></entry>
- <entry><para>SG.AUTH.INGRESS </para>
- <para>SG.REVOKE.INGRESS </para>
- <para>SG.AUTH.EGRESS </para>
- <para>SG.REVOKE.EGRESS </para>
- <para>SG.CREATE </para>
- <para>SG.DELETE </para>
- <para>SG.ASSIGN </para>
- <para>SG.REMOVE</para></entry>
- </row>
- <row>
- <entry><para>Host</para></entry>
- <entry><para>HOST.RECONNECT</para></entry>
- </row>
- <row>
- <entry><para>Maintenance</para></entry>
- <entry><para>MAINT.CANCEL </para>
- <para>MAINT.CANCEL.PS </para>
- <para>MAINT.PREPARE </para>
- <para>MAINT.PREPARE.PS</para></entry>
- </row>
- <row>
- <entry><para>VPN</para></entry>
- <entry><para>VPN.REMOTE.ACCESS.CREATE </para>
- <para>VPN.REMOTE.ACCESS.DESTROY </para>
- <para>VPN.USER.ADD </para>
- <para>VPN.USER.REMOVE </para>
- <para>VPN.S2S.VPN.GATEWAY.CREATE </para>
- <para>VPN.S2S.VPN.GATEWAY.DELETE </para>
- <para>VPN.S2S.CUSTOMER.GATEWAY.CREATE </para>
- <para>VPN.S2S.CUSTOMER.GATEWAY.DELETE </para>
- <para>VPN.S2S.CUSTOMER.GATEWAY.UPDATE </para>
- <para>VPN.S2S.CONNECTION.CREATE </para>
- <para>VPN.S2S.CONNECTION.DELETE </para>
- <para>VPN.S2S.CONNECTION.RESET </para></entry>
- </row>
- <row>
- <entry><para>Network</para></entry>
- <entry><para>NETWORK.RESTART</para></entry>
- </row>
- <row>
- <entry><para>Custom certificates</para></entry>
- <entry><para>UPLOAD.CUSTOM.CERTIFICATE</para></entry>
- </row>
- <row>
- <entry><para>OneToOnenat</para></entry>
- <entry><para>STATICNAT.ENABLE </para>
- <para>STATICNAT.DISABLE</para>
- <para>ZONE.VLAN.ASSIGN </para>
- <para>ZONE.VLAN.RELEASE</para></entry>
- </row>
- <row>
- <entry><para>Projects</para></entry>
- <entry><para>PROJECT.CREATE </para>
- <para>PROJECT.UPDATE </para>
- <para>PROJECT.DELETE </para>
- <para>PROJECT.ACTIVATE </para>
- <para>PROJECT.SUSPEND </para>
- <para>PROJECT.ACCOUNT.ADD </para>
- <para>PROJECT.INVITATION.UPDATE </para>
- <para>PROJECT.INVITATION.REMOVE </para>
- <para>PROJECT.ACCOUNT.REMOVE</para></entry>
- </row>
- <row>
- <entry><para>Network as a Service</para></entry>
- <entry><para>NETWORK.ELEMENT.CONFIGURE</para></entry>
- </row>
- <row>
- <entry><para>Physical Network Events</para></entry>
- <entry><para>PHYSICAL.NETWORK.CREATE </para>
- <para>PHYSICAL.NETWORK.DELETE </para>
- <para>PHYSICAL.NETWORK.UPDATE </para></entry>
- </row>
- <row>
- <entry><para>Physical Network Service Provider Events</para></entry>
- <entry><para>SERVICE.PROVIDER.CREATE </para>
- <para>SERVICE.PROVIDER.DELETE </para>
- <para>SERVICE.PROVIDER.UPDATE</para></entry>
- </row>
- <row>
- <entry><para>Physical Network Traffic Type Events</para></entry>
- <entry><para>TRAFFIC.TYPE.CREATE </para>
- <para>TRAFFIC.TYPE.DELETE </para>
- <para>TRAFFIC.TYPE.UPDATE</para></entry>
- </row>
- <row>
- <entry><para>External network device events</para></entry>
- <entry><para>PHYSICAL.LOADBALANCER.ADD </para>
- <para>PHYSICAL.LOADBALANCER.DELETE </para>
- <para>PHYSICAL.LOADBALANCER.CONFIGURE</para></entry>
- </row>
- <row>
- <entry><para>External switch management device events</para>
- <para>For example: Cisco Nexus 1000v Virtual Supervisor Module.</para></entry>
- <entry><para>SWITCH.MGMT.ADD </para>
- <para>SWITCH.MGMT.DELETE </para>
- <para>SWITCH.MGMT.CONFIGURE </para>
- <para>SWITCH.MGMT.ENABLE </para>
- <para>SWITCH.MGMT.DISABLE </para>
- <para>PHYSICAL.FIREWALL.ADD </para>
- <para>PHYSICAL.FIREWALL.DELETE </para>
- <para>PHYSICAL.FIREWALL.CONFIGURE</para></entry>
- </row>
- <row>
- <entry><para>VPC</para></entry>
- <entry><para>VPC.CREATE </para>
- <para>VPC.UPDATE </para>
- <para>VPC.DELETE </para>
- <para>VPC.RESTART</para></entry>
- </row>
- <row>
- <entry><para>Network ACL</para></entry>
- <entry><para>NETWORK.ACL.CREATE</para>
- <para>NETWORK.ACL.DELETE</para>
- <para>NETWORK.ACL.REPLACE </para>
- <para>NETWORK.ACL.ITEM.CREATE </para>
- <para>NETWORK.ACL.ITEM.UPDATE </para>
- <para>NETWORK.ACL.ITEM.DELETE</para></entry>
- </row>
- <row>
- <entry><para>VPC offerings</para></entry>
- <entry><para>VPC.OFFERING.CREATE</para>
- <para>VPC.OFFERING.UPDATE </para>
- <para>VPC.OFFERING.DELETE</para></entry>
- </row>
- <row>
- <entry><para>Private gateway</para></entry>
- <entry><para>PRIVATE.GATEWAY.CREATE</para>
- <para>PRIVATE.GATEWAY.DELETE </para></entry>
- </row>
- <row>
- <entry><para>Static routes</para></entry>
- <entry><para>STATIC.ROUTE.CREATE</para>
- <para>STATIC.ROUTE.DELETE </para></entry>
- </row>
- <row>
- <entry><para>Tag-related events</para></entry>
- <entry><para>CREATE_TAGS</para>
- <para>DELETE_TAGS</para></entry>
- </row>
- <row>
- <entry><para>Meta data-related events</para></entry>
- <entry><para>CREATE_RESOURCE_DETAILS</para>
- <para>DELETE_RESOURCE_DETAILS </para></entry>
- </row>
- <row>
- <entry><para>VM snapshot events</para></entry>
- <entry><para>VMSNAPSHOT.CREATE</para>
- <para>VMSNAPSHOT.DELETE</para>
- <para>VMSNAPSHOT.REVERTTO</para></entry>
- </row>
- <row>
- <entry><para>External network device events</para></entry>
- <entry><para>PHYSICAL.NVPCONTROLLER.ADD</para>
- <para>PHYSICAL.NVPCONTROLLER.DELETE</para>
- <para>PHYSICAL.NVPCONTROLLER.CONFIGURE</para></entry>
- </row>
- <row>
- <entry><para>AutoScale</para></entry>
- <entry><para>COUNTER.CREATE</para>
- <para>COUNTER.DELETE</para>
- <para>CONDITION.CREATE</para>
- <para>CONDITION.DELETE </para>
- <para>AUTOSCALEPOLICY.CREATE </para>
- <para>AUTOSCALEPOLICY.UPDATE </para>
- <para>AUTOSCALEPOLICY.DELETE </para>
- <para>AUTOSCALEVMPROFILE.CREATE </para>
- <para>AUTOSCALEVMPROFILE.DELETE </para>
- <para>AUTOSCALEVMPROFILE.UPDATE </para>
- <para>AUTOSCALEVMGROUP.CREATE </para>
- <para>AUTOSCALEVMGROUP.DELETE </para>
- <para>AUTOSCALEVMGROUP.UPDATE </para>
- <para>AUTOSCALEVMGROUP.ENABLE </para>
- <para>AUTOSCALEVMGROUP.DISABLE </para>
- <para>PHYSICAL.DHCP.ADD </para>
- <para>PHYSICAL.DHCP.DELETE </para>
- <para>PHYSICAL.PXE.ADD </para>
- <para>PHYSICAL.PXE.DELETE </para>
- <para>AG.CREATE </para>
- <para>AG.DELETE </para>
- <para>AG.ASSIGN </para>
- <para>AG.REMOVE </para>
- <para>VM.AG.UPDATE </para>
- <para>INTERNALLBVM.START </para>
- <para>INTERNALLBVM.STOP </para>
- <para>HOST.RESERVATION.RELEASE</para></entry>
- </row>
- <row>
- <entry><para>Dedicated guest vlan range</para></entry>
- <entry><para>GUESTVLANRANGE.DEDICATE</para>
- <para>GUESTVLANRANGE.RELEASE </para>
- <para>PORTABLE.IP.RANGE.CREATE </para>
- <para>PORTABLE.IP.RANGE.DELETE </para>
- <para>PORTABLE.IP.TRANSFER</para></entry>
- </row>
- <row>
- <entry><para>Dedicated Resources</para></entry>
- <entry><para>DEDICATE.RESOURCE</para>
- <para>DEDICATE.RESOURCE.RELEASE </para>
- <para>VM.RESERVATION.CLEANUP </para>
- <para>UCS.ASSOCIATEPROFILE </para>
- <para>UCS.DISASSOCIATEPROFILE</para></entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
-</appendix>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/events-log.xml
----------------------------------------------------------------------
diff --git a/en-US/events-log.xml b/en-US/events-log.xml
deleted file mode 100644
index fa97db4..0000000
--- a/en-US/events-log.xml
+++ /dev/null
@@ -1,35 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="events-log">
- <title>Event Logs</title>
- <para>There are two types of events logged in the &PRODUCT; Event Log. Standard events log
- the success or failure of an event and can be used to identify jobs or processes that have
- failed. There are also long running job events. Events for asynchronous jobs log when a job
- is scheduled, when it starts, and when it completes. Other long running synchronous jobs log
- when a job starts, and when it completes. Long running synchronous and asynchronous event
- logs can be used to gain more information on the status of a pending job or can be used to
- identify a job that is hanging or has not started. The following sections provide more
- information on these events..</para>
-</section>
-
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/events.xml
----------------------------------------------------------------------
diff --git a/en-US/events.xml b/en-US/events.xml
deleted file mode 100644
index 3b93ee0..0000000
--- a/en-US/events.xml
+++ /dev/null
@@ -1,36 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="events">
- <title>Events</title>
- <para>An event is essentially a significant or meaningful change in the state of both virtual and
- physical resources associated with a cloud environment. Events are used by monitoring systems,
- usage and billing systems, or any other event-driven workflow systems to discern a pattern and
- make the right business decision. In &PRODUCT; an event could be a state change of virtual or
- physical resources, an action performed by an user (action events), or policy based events
- (alerts).</para>
- <xi:include href="events-log.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="event-framework.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="standard-events.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="long-running-job-events.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="event-log-queries.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="delete-event-alerts.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/example-LDAP-configuration-commands.xml
----------------------------------------------------------------------
diff --git a/en-US/example-LDAP-configuration-commands.xml b/en-US/example-LDAP-configuration-commands.xml
deleted file mode 100644
index e557386..0000000
--- a/en-US/example-LDAP-configuration-commands.xml
+++ /dev/null
@@ -1,47 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-
-<section id="example-LDAP-configuration-commands">
- <title>Example LDAP Configuration Commands</title>
- <para>To understand the examples in this section, you need to know the basic concepts behind calling the &PRODUCT; API, which are explained in the Developer’s Guide.</para>
- <para>The following shows an example invocation of ldapConfig with an ApacheDS LDAP server</para>
- <programlisting>http://127.0.0.1:8080/client/api?command=ldapConfig&hostname=127.0.0.1&searchbase=ou%3Dtesting%2Co%3Dproject&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=cn%3DJohn+Singh%2Cou%3Dtesting%2Co%project&bindpass=secret&port=10389&ssl=true&truststore=C%3A%2Fcompany%2Finfo%2Ftrusted.ks&truststorepass=secret&response=json&apiKey=YourAPIKey&signature=YourSignatureHash</programlisting>
- <para>The command must be URL-encoded. Here is the same example without the URL encoding:</para>
- <programlisting>http://127.0.0.1:8080/client/api?command=ldapConfig
-&hostname=127.0.0.1
-&searchbase=ou=testing,o=project
-&queryfilter=(&(%uid=%u))
-&binddn=cn=John+Singh,ou=testing,o=project
-&bindpass=secret
-&port=10389
-&ssl=true
-&truststore=C:/company/info/trusted.ks
-&truststorepass=secret
-&response=json
-&apiKey=YourAPIKey&signature=YourSignatureHash
- </programlisting>
- <para>The following shows a similar command for Active Directory. Here, the search base is the testing group within a company, and the users are matched up based on email address.</para>
-<programlisting>http://10.147.29.101:8080/client/api?command=ldapConfig&hostname=10.147.28.250&searchbase=OU%3Dtesting%2CDC%3Dcompany&queryfilter=%28%26%28mail%3D%25e%29%29 &binddn=CN%3DAdministrator%2COU%3Dtesting%2CDC%3Dcompany&bindpass=1111_aaaa&port=389&response=json&apiKey=YourAPIKey&signature=YourSignatureHash</programlisting>
- <para>The next few sections explain some of the concepts you will need to know when filling out the ldapConfig parameters. </para>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/example-response-from-listUsageRecords.xml
----------------------------------------------------------------------
diff --git a/en-US/example-response-from-listUsageRecords.xml b/en-US/example-response-from-listUsageRecords.xml
deleted file mode 100644
index e0d7924..0000000
--- a/en-US/example-response-from-listUsageRecords.xml
+++ /dev/null
@@ -1,56 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-
- <section id="example-response-from-listUsageRecords">
- <title>Example response from listUsageRecords</title>
- <para>
- All &PRODUCT; API requests are submitted in the form of a HTTP GET/POST with an associated command and any parameters. A request is composed of the following whether in HTTP or HTTPS:</para>
-
- <programlisting>
- <listusagerecordsresponse>
- <count>1816</count>
- <usagerecord>
- <account>user5</account>
- <accountid>10004</accountid>
- <domainid>1</domainid>
- <zoneid>1</zoneid>
- <description>i-3-4-WC running time (ServiceOffering: 1) (Template: 3)</description>
- <usage>2.95288 Hrs</usage>
- <usagetype>1</usagetype>
- <rawusage>2.95288</rawusage>
- <virtualmachineid>4</virtualmachineid>
- <name>i-3-4-WC</name>
- <offeringid>1</offeringid>
- <templateid>3</templateid>
- <usageid>245554</usageid>
- <type>XenServer</type>
- <startdate>2009-09-15T00:00:00-0700</startdate>
- <enddate>2009-09-18T16:14:26-0700</enddate>
- </usagerecord>
-
- … (1,815 more usage records)
- </listusagerecordsresponse>
- </programlisting>
- </section>
-
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/export-template.xml
----------------------------------------------------------------------
diff --git a/en-US/export-template.xml b/en-US/export-template.xml
deleted file mode 100644
index c225e36..0000000
--- a/en-US/export-template.xml
+++ /dev/null
@@ -1,29 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-
-<section id="export-template">
- <title>Exporting Templates</title>
- <para>End users and Administrators may export templates from the &PRODUCT;. Navigate to the template in the UI and choose the Download function from the Actions menu.</para>
-
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/external-firewalls-and-load-balancers.xml
----------------------------------------------------------------------
diff --git a/en-US/external-firewalls-and-load-balancers.xml b/en-US/external-firewalls-and-load-balancers.xml
deleted file mode 100644
index 42ecacf..0000000
--- a/en-US/external-firewalls-and-load-balancers.xml
+++ /dev/null
@@ -1,34 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="external-firewalls-and-load-balancers">
- <title>External Firewalls and Load Balancers</title>
- <para>&PRODUCT; is capable of replacing its Virtual Router with an external Juniper SRX device and
- an optional external NetScaler or F5 load balancer for gateway and load balancing services. In
- this case, the VMs use the SRX as their gateway.</para>
- <xi:include href="using-netscaler-load-balancers.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="configure-snmp-rhel.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="initial-setup-of-external-firewalls-loadbalancers.xml"
- xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="ongoing-config-of-external-firewalls-lb.xml"
- xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="load-balancer-rules.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
- <xi:include href="autoscale.xml" xmlns:xi="http://www.w3.org/2001/XInclude"/>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/external-fw-topology-req.xml
----------------------------------------------------------------------
diff --git a/en-US/external-fw-topology-req.xml b/en-US/external-fw-topology-req.xml
deleted file mode 100644
index ab81496..0000000
--- a/en-US/external-fw-topology-req.xml
+++ /dev/null
@@ -1,25 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="external-fw-topology-req">
- <title>External Firewall Topology Requirements</title>
- <para>When external firewall integration is in place, the public IP VLAN must still be trunked to
- the Hosts. This is required to support the Secondary Storage VM and Console Proxy VM.</para>
-</section>
http://git-wip-us.apache.org/repos/asf/cloudstack-docs/blob/f42520a5/en-US/external-guest-firewall-integration.xml
----------------------------------------------------------------------
diff --git a/en-US/external-guest-firewall-integration.xml b/en-US/external-guest-firewall-integration.xml
deleted file mode 100644
index 0b34dca..0000000
--- a/en-US/external-guest-firewall-integration.xml
+++ /dev/null
@@ -1,201 +0,0 @@
-<?xml version='1.0' encoding='utf-8' ?>
-<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
-<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
-%BOOK_ENTITIES;
-]>
-<!-- Licensed to the Apache Software Foundation (ASF) under one
- or more contributor license agreements. See the NOTICE file
- distributed with this work for additional information
- regarding copyright ownership. The ASF licenses this file
- to you under the Apache License, Version 2.0 (the
- "License"); you may not use this file except in compliance
- with the License. You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing,
- software distributed under the License is distributed on an
- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- KIND, either express or implied. See the License for the
- specific language governing permissions and limitations
- under the License.
--->
-<section id="external-guest-firewall-integration">
- <title>External Guest Firewall Integration for Juniper SRX (Optional)</title>
- <note>
- <para>Available only for guests using advanced networking.</para>
- </note>
- <para>&PRODUCT; provides for direct management of the Juniper SRX series of firewalls. This
- enables &PRODUCT; to establish static NAT mappings from public IPs to guest VMs, and to use
- the Juniper device in place of the virtual router for firewall services. You can have one or
- more Juniper SRX per zone. This feature is optional. If Juniper integration is not provisioned,
- &PRODUCT; will use the virtual router for these services.</para>
- <para>The Juniper SRX can optionally be used in conjunction with an external load balancer.
- External Network elements can be deployed in a side-by-side or inline configuration.</para>
- <mediaobject>
- <imageobject>
- <imagedata fileref="./images/parallel-mode.png"/>
- </imageobject>
- <textobject>
- <phrase>parallel-mode.png: adding a firewall and load balancer in parallel mode.</phrase>
- </textobject>
- </mediaobject>
- <para>&PRODUCT; requires the Juniper to be configured as follows:</para>
- <note>
- <para>Supported SRX software version is 10.3 or higher.</para>
- </note>
- <orderedlist>
- <listitem>
- <para>Install your SRX appliance according to the vendor's instructions.</para>
- </listitem>
- <listitem>
- <para>Connect one interface to the management network and one interface to the public network.
- Alternatively, you can connect the same interface to both networks and a use a VLAN for the
- public network.</para>
- </listitem>
- <listitem>
- <para>Make sure "vlan-tagging" is enabled on the private interface.</para>
- </listitem>
- <listitem>
- <para>Record the public and private interface names. If you used a VLAN for the public
- interface, add a ".[VLAN TAG]" after the interface name. For example, if you are using
- ge-0/0/3 for your public interface and VLAN tag 301, your public interface name would be
- "ge-0/0/3.301". Your private interface name should always be untagged because the
- &PRODUCT; software automatically creates tagged logical interfaces.</para>
- </listitem>
- <listitem>
- <para>Create a public security zone and a private security zone. By default, these will
- already exist and will be called "untrust" and "trust". Add the public interface to the
- public zone and the private interface to the private zone. Note down the security zone
- names.</para>
- </listitem>
- <listitem>
- <para>Make sure there is a security policy from the private zone to the public zone that
- allows all traffic.</para>
- </listitem>
- <listitem>
- <para>Note the username and password of the account you want the &PRODUCT; software to log
- in to when it is programming rules.</para>
- </listitem>
- <listitem>
- <para>Make sure the "ssh" and "xnm-clear-text" system services are enabled.</para>
- </listitem>
- <listitem>
- <para>If traffic metering is desired:</para>
- <orderedlist>
- <listitem>
- <para>a. Create an incoming firewall filter and an outgoing firewall filter. These filters
- should be the same names as your public security zone name and private security zone
- name respectively. The filters should be set to be "interface-specific". For example,
- here is the configuration where the public zone is "untrust" and the private zone is
- "trust":</para>
- <programlisting>root@cloud-srx# show firewall
-filter trust {
- interface-specific;
-}
-filter untrust {
- interface-specific;
-}</programlisting>
- </listitem>
- <listitem>
- <para>Add the firewall filters to your public interface. For example, a sample
- configuration output (for public interface ge-0/0/3.0, public security zone untrust, and
- private security zone trust) is:</para>
- <programlisting>ge-0/0/3 {
- unit 0 {
- family inet {
- filter {
- input untrust;
- output trust;
- }
- address 172.25.0.252/16;
- }
- }
-}</programlisting>
- </listitem>
- </orderedlist>
- </listitem>
- <listitem>
- <para>Make sure all VLANs are brought to the private interface of the SRX.</para>
- </listitem>
- <listitem>
- <para>After the &PRODUCT; Management Server is installed, log in to the &PRODUCT; UI as
- administrator.</para>
- </listitem>
- <listitem>
- <para>In the left navigation bar, click Infrastructure.</para>
- </listitem>
- <listitem>
- <para>In Zones, click View More.</para>
- </listitem>
- <listitem>
- <para>Choose the zone you want to work with.</para>
- </listitem>
- <listitem>
- <para>Click the Network tab.</para>
- </listitem>
- <listitem>
- <para>In the Network Service Providers node of the diagram, click Configure. (You might have
- to scroll down to see this.)</para>
- </listitem>
- <listitem>
- <para>Click SRX.</para>
- </listitem>
- <listitem>
- <para>Click the Add New SRX button (+) and provide the following:</para>
- <itemizedlist>
- <listitem>
- <para>IP Address: The IP address of the SRX.</para>
- </listitem>
- <listitem>
- <para>Username: The user name of the account on the SRX that &PRODUCT; should use.</para>
- </listitem>
- <listitem>
- <para>Password: The password of the account.</para>
- </listitem>
- <listitem>
- <para>Public Interface. The name of the public interface on the SRX. For example,
- ge-0/0/2. A ".x" at the end of the interface indicates the VLAN that is in use.</para>
- </listitem>
- <listitem>
- <para>Private Interface: The name of the private interface on the SRX. For example,
- ge-0/0/1. </para>
- </listitem>
- <listitem>
- <para>Usage Interface: (Optional) Typically, the public interface is used to meter
- traffic. If you want to use a different interface, specify its name here</para>
- </listitem>
- <listitem>
- <para>Number of Retries: The number of times to attempt a command on the SRX before
- failing. The default value is 2.</para>
- </listitem>
- <listitem>
- <para>Timeout (seconds): The time to wait for a command on the SRX before considering it
- failed. Default is 300 seconds.</para>
- </listitem>
- <listitem>
- <para>Public Network: The name of the public network on the SRX. For example,
- trust.</para>
- </listitem>
- <listitem>
- <para>Private Network: The name of the private network on the SRX. For example,
- untrust.</para>
- </listitem>
- <listitem>
- <para>Capacity: The number of networks the device can handle</para>
- </listitem>
- <listitem>
- <para>Dedicated: When marked as dedicated, this device will be dedicated to a single
- account. When Dedicated is checked, the value in the Capacity field has no significance
- implicitly, its value is 1</para>
- </listitem>
- </itemizedlist>
- </listitem>
- <listitem>
- <para>Click OK.</para>
- </listitem>
- <listitem>
- <para>Click Global Settings. Set the parameter external.network.stats.interval to indicate how
- often you want &PRODUCT; to fetch network usage statistics from the Juniper SRX. If you
- are not using the SRX to gather network usage statistics, set to 0.</para>
- </listitem>
- </orderedlist>
-</section>