VPC issues with Static Routes and VPN

[weizhouapache]

I am working on VPC for now and have found several issues in my testing. I will work on the fixes

Static Routes

• iptables rules are not updated when add/remove static routes (fixed by VR: apply iptables rules when add/remove static routes #10064)
• cannot edit tags of static routes (fixed by UI: fix cannot open 'Edit tags' modal for static routes #10065)
• the check on denies routes failed (fixed by Static Routes: fix check on wrong global configuration #10066)

VPN

• cannot setup s2s vpn if split-connection is true (fixed by VR: fix site-2-site VPN if split connections is enabled #10067)
• remote access vpn client cannot reach the internet (fixed by [Draft] VR: allow outgoing traffic from Remote access VPN clients #10083)
• Users are able to create remote access vpn with a non-sourcenat IP, but the public IP is not configured in VR. (The issue exists with Isolated network as well) (fixed in Netris Network Plugin Integration with CloudStack #10458)
• Cannot create remote access vpn with specified ip range on UI (see Support iprange while creating remote access vpn #12063)
• Remote access VPN configuration (l2tp.conf) is not removed in VR when VPN is disabled

Others

• Cannot create network offering with conserve mode for VPC (fixed by UI: create VPC network offering with conserve mode #10082)
• Nsx VPC VR has a public network which is not needed as VPC VR only acts as Dhcp/Dns/Userdata server (fixed by [Draft] server: do not allocate nic on public network for NSX VPC VR #10081)
• typo removeaccessvpn in VirtualRouterElement (fixed by server: fix typo removeaccessvpn in VirtualRouterElement #10086)

ISSUE TYPE

• Bug Report

COMPONENT NAME

CLOUDSTACK VERSION

CONFIGURATION

OS / ENVIRONMENT

SUMMARY

STEPS TO REPRODUCE

EXPECTED RESULTS

ACTUAL RESULTS

[DaanHoogland]

@weizhouapache are you still working on this? Can you create child issue for the remaining tasks (to facilitate overview)?