You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by ke...@apache.org on 2013/01/31 20:40:12 UTC
[29/50] [abbrv] git commit: refs/heads/javelin - Docs.
CLOUDSTACK-737. Documentation for security groups in advanced zones. In
about-security-groups.xml, add 1 sentence: "In advanced zones,
security groups are supported only on the KVM hypervisor." This
Docs. CLOUDSTACK-737. Documentation for security groups in advanced zones. In about-security-groups.xml, add 1 sentence: "In advanced zones, security groups are supported only on the KVM hypervisor." This replaces a sentence that states they are supported only in basic zones. New section: security-groups-advanced-zones.xml. In security-groups.xml: include the new section.
Project: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/commit/7dbbdd59
Tree: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/tree/7dbbdd59
Diff: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/diff/7dbbdd59
Branch: refs/heads/javelin
Commit: 7dbbdd59c7fbed3507964dfe4332c9cb53b188e0
Parents: 397b5b5
Author: Jessica Tomechak <je...@gmail.com>
Authored: Wed Jan 30 16:16:35 2013 -0800
Committer: Jessica Tomechak <je...@gmail.com>
Committed: Wed Jan 30 16:37:49 2013 -0800
----------------------------------------------------------------------
docs/en-US/about-security-groups.xml | 7 ++-
docs/en-US/security-groups-advanced-zones.xml | 52 ++++++++++++++++++++
docs/en-US/security-groups.xml | 3 +-
3 files changed, 60 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/7dbbdd59/docs/en-US/about-security-groups.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/about-security-groups.xml b/docs/en-US/about-security-groups.xml
index 85e8477..6a31b25 100644
--- a/docs/en-US/about-security-groups.xml
+++ b/docs/en-US/about-security-groups.xml
@@ -24,7 +24,12 @@
<section id="about-security-groups">
<title>About Security Groups</title>
- <para>Security groups provide a way to isolate traffic to VMs. A security group is a group of VMs that filter their incoming and outgoing traffic according to a set of rules, called ingress and egress rules. These rules filter network traffic according to the IP address that is attempting to communicate with the VM. Security groups are particularly useful in zones that use basic networking, because there is a single guest network for all guest VMs. In &PRODUCT; 3.0.3 - 3.0.5, security groups are supported only in zones that use basic networking.</para>
+ <para>Security groups provide a way to isolate traffic to VMs. A security group is a group of
+ VMs that filter their incoming and outgoing traffic according to a set of rules, called
+ ingress and egress rules. These rules filter network traffic according to the IP address
+ that is attempting to communicate with the VM. Security groups are particularly useful in
+ zones that use basic networking, because there is a single guest network for all guest VMs.
+ In advanced zones, security groups are supported only on the KVM hypervisor.</para>
<note><para>In a zone that uses advanced networking, you can instead define multiple guest networks to isolate traffic to VMs.</para>
</note>
<para></para>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/7dbbdd59/docs/en-US/security-groups-advanced-zones.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/security-groups-advanced-zones.xml b/docs/en-US/security-groups-advanced-zones.xml
new file mode 100644
index 0000000..bfae188
--- /dev/null
+++ b/docs/en-US/security-groups-advanced-zones.xml
@@ -0,0 +1,52 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+
+<section id="security-groups-advanced-zones">
+ <title>Security Groups in Advanced Zones (KVM Only)</title>
+ <para>&PRODUCT; provides the ability to use security groups to provide isolation between
+ guests on a single shared, zone-wide network in an advanced zone where KVM is the
+ hypervisor. Using security groups in advanced zones rather than multiple VLANs allows a greater range
+ of options for setting up guest isolation in a cloud.</para>
+ <formalpara>
+ <title>Limitations</title>
+ <para>The following are not supported for this feature:</para>
+ </formalpara>
+ <itemizedlist>
+ <listitem>
+ <para>Two IP ranges with the same VLAN and different gateway or netmask in security
+ group-enabled shared network.</para>
+ </listitem>
+ <listitem>
+ <para>Two IP ranges with the same VLAN and different gateway or netmask in
+ account-specific shared networks.</para>
+ </listitem>
+ <listitem>
+ <para>Multiple VLAN ranges in security group-enabled shared network.</para>
+ </listitem>
+ <listitem>
+ <para>Multiple VLAN ranges in account-specific shared networks.</para>
+ </listitem>
+ </itemizedlist>
+ <para>Security groups must be enabled in the zone in order for this feature to be used.</para>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/7dbbdd59/docs/en-US/security-groups.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/security-groups.xml b/docs/en-US/security-groups.xml
index 3c08965..00dbf5e 100644
--- a/docs/en-US/security-groups.xml
+++ b/docs/en-US/security-groups.xml
@@ -25,7 +25,8 @@
<section id="security-groups">
<title>Security Groups</title>
<xi:include href="about-security-groups.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
- <xi:include href="add-security-group.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
+ <xi:include href="security-groups-advanced-zones.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
<xi:include href="enable-security-groups.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
+ <xi:include href="add-security-group.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
<xi:include href="add-ingress-egress-rules.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
</section>