OpenNebula

Feature #3175: New Security Group pool in the core

Feature #3175: Add secgroup acl resource to CLI

Feature #3175: Sec groups store the VMs using them

Feature #3175: Ask for SECGROUP USE auth in VM creation.

This only checks the sec groups requested directly in
each NIC/SECURITY_GROUPS. The sec groups added from the
vnet (and AR) are not checked for auth.

Feature #3175: Migrate the sec group wizard to new non-modal mechanism

Feature #3175: Security group definition for vnet, ar & nic

Feature #3175: Sec group table in vnet AR update

Feature #3175: Move vnet creation wizard to new window model

Feature #3175: Update sec groups in Template nic

Feature #3175: SG vnm driver now uses the model of TEMPLATE/SECURITY_GROUP_RULE and TEMPLATE/NIC/SECURITY_GROUPS

Feature #3175: Core support for RULE/NETWORK_ID

Each rule is copied once for each vnet's AR

Feature #3175: Add extended info to NICs in vm view

Feature #3175: Improve SG info panel, and nic SG table

Feature #3175: SG update wizard

Feature #3175: Refactor SG wizard

Feature #3175: Do not send icmp_type for 'all' value

Feature #3175: Hide SG in VNet template attributes

Feature #3175: Table for SG rules in onevm show

Feature #3175: Fix SG tables after merge

Feature #3175: Better management of nics without security groups

Feature #3175: Better sg/post call that can handle exceptions.

Feature #3175: Add support for IPSEC

Feature #3175: use proper vnet

feature #3175: Copy security group rules by reference

feature #3175: Review VirtualMachine method scope

feature #3175: fix error bootstraping security group rules

feature #3175: Check security group consistency

feature #3175: Security Group 0 cannot be deleted

feature #3175: Remove duplicated sgs when the VNET is inserted

Feature #3175: Change range labels to "port range"

Feature #3175: fix multiple choice table bug

Feature #3175: Add SECGROUP to sunstone acls

Feature #3175: Add default SG in onedb migrator

Feature #3175: Add a warning about the default SG

Feature #3175: Default security group allows also inbound and outbound connections

Feature #3175: Add migrator rule to include inbound connections

Feature #3175: Avoid errors if empty rules and apply an ACCEPT policy by default.

Feature #3175: Add spoofing checkboxes to vnet wizard

Feature #3175: Extract IPNetmask to its own library

Feature #3175: Function that returns true if the VM has deprecated firewall attributes

Feature #3175: Firewall driver is compatible with the security groups driver

Feature #3175: Unify the way the filter driver is called and handled

Feature #3175: Tooltips for IP and MAC spoofing

Feature #3175: Remove white/black ports and icmp drop from sunstone

Previous Templates will have this information removed from the NIC
if the update wizard is used, see #3424

feature #3175: Some refactor of SG classes

feature #3175: Moved Nic and VM to new modules

feature #3175: Fix multiple syntax errors

feature #3175: Fix bugs

feature #3175: Fix bug

feature #3175: Fix bugs. New method to access commands

feature #3175: Check if RANGE has proper syntax

Feature #3471, #3175: Add VDC to ACL rules

SECGROUP was also missing from the java oca

Feature #3175: Syntax errors