From 224cdd06b135f675eb8c520c091598bb7aef626e Mon Sep 17 00:00:00 2001 From: PaulAngus Date: Wed, 27 May 2020 12:13:42 +0100 Subject: [PATCH 1/3] add information to external DNS note and reformat line widths. --- source/releasenotes/about.rst | 40 +++++++++++++++++++++++------------ 1 file changed, 26 insertions(+), 14 deletions(-) diff --git a/source/releasenotes/about.rst b/source/releasenotes/about.rst index c746d746af..7c40d675ef 100644 --- a/source/releasenotes/about.rst +++ b/source/releasenotes/about.rst @@ -17,7 +17,8 @@ What's New in |release| ======================= -Apache CloudStack |release| is a |version| LTS release with over 15 major new features, and over 200 enhancements and fixes since 4.13. Highlights include: +Apache CloudStack |release| is a |version| LTS release with over 15 major new features, and +over 200 enhancements and fixes since 4.13. Highlights include: • New modern UI (Project Primate, Technical preview) • Backup and Recovery framework @@ -33,29 +34,40 @@ Apache CloudStack |release| is a |version| LTS release with over 15 major new fe • Enable additional configuration metadata to virtual machines -The full list of new features can be found in the project release notes at http://docs.cloudstack.apache.org/en/4.14.0.0/releasenotes/changes.html +The full list of new features can be found in the project release notes at +http://docs.cloudstack.apache.org/en/4.14.0.0/releasenotes/changes.html -.. note:: +.. important:: This version of CloudStack allows control over the visibility of the DNS services provided - by the Virtual Router. One can control whether the service on the routers be available to - networks outside the local network. This might be important on Shared Networks which are - using Internet routable/public (i.e. non-RFC 1918) IP addresses. The new global setting - "expose.dns.externally" has been added with a default value of "true" in order to keep backward compatibility - with the previous installations. If you wish to disable public access to the DNS services - running on Virtual Router, set the value to "false" and recreate the related Virtual Routers. + by the Virtual Router in Shared networks. By default CloudStack allows DNS requires via the + Guest interface from any IP address. This allows for the DNS resolution of guest VMs on the + Shared network by services outside of the shared network. While this can be useful, it can + also be an issue on Shared Networks which are using Internet routable/public (i.e. non-RFC1918) + IP addresses as the DNS service is then queriable from the public internet at large. A new + global setting "expose.dns.externally" has been added (with a default value of "true" in + order to keep backward compatibility). If you wish to disable public access to the DNS services + running on Virtual Routers, set the value to "false" and recreate the related Virtual Routers. -Apache CloudStack powers numerous elastic Cloud computing services, including solutions that have ranked as Gartner Magic Quadrant leaders. Highlighted in the Forrester Q4 2017 Enterprise Open Source Cloud Adoption report, Apache CloudStack "sits beneath hundreds of service provider clouds", including Fortune 5 multinational corporations. A list of known Apache CloudStack users are available at http://cloudstack.apache.org/users.html +Apache CloudStack powers numerous elastic Cloud computing services, including solutions that have +ranked as Gartner Magic Quadrant leaders. Highlighted in the Forrester Q4 2017 Enterprise Open Source +Cloud Adoption report, Apache CloudStack "sits beneath hundreds of service provider clouds", including +Fortune 5 multinational corporations. A list of known Apache CloudStack users are available +at http://cloudstack.apache.org/users.html New User Interface & Depreciation notice of existing UI ======================================================= -Cloudstack 4.14 ships with a Technical Preview of a new, modern User Interface (project Primate) . This technical preview can be used by users & operators of Cloudstack environments for evaluation & testing purposes. With version 4.14, the existing UI remains the supported UI for production environments. -However, with the 4.14 release, the Apache Cloudstack community will stop taking feature requests for new functionality in the existing UI. All new functionality will be developed against the new UI. +Cloudstack 4.14 ships with a Technical Preview of a new, modern User Interface (project Primate). +This technical preview can be used by users & operators of Cloudstack environments for evaluation +& testing purposes. With version 4.14, the existing UI remains the supported UI for production environments. +However, with the 4.14 release, the Apache Cloudstack community will stop taking feature requests +for new functionality in the existing UI. All new functionality will be developed against the new UI. -The next LTS release (likely to be version 4.15) of Apache Cloudstack will ship with the production release of the new UI. It will also be the last version of CloudStack to ship with the old UI. This release will also have the final deprecation notice for the old UI. +The next LTS release (likely to be version 4.15) of Apache Cloudstack will ship with the production +release of the new UI. It will also be the last version of CloudStack to ship with the old UI. This +release will also have the final deprecation notice for the old UI. In the following release (likely to be 4.16), the old UI will be deprecated. Please see `Primate install guide <../installguide/primate.html>`_ - From 09a4726637c36251f7f7040f7ae0737278ced8af Mon Sep 17 00:00:00 2001 From: Paul Angus Date: Thu, 28 May 2020 12:21:46 +0100 Subject: [PATCH 2/3] fix typo and add a bit more information --- source/releasenotes/about.rst | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/source/releasenotes/about.rst b/source/releasenotes/about.rst index 7c40d675ef..082a810b30 100644 --- a/source/releasenotes/about.rst +++ b/source/releasenotes/about.rst @@ -39,13 +39,14 @@ http://docs.cloudstack.apache.org/en/4.14.0.0/releasenotes/changes.html .. important:: This version of CloudStack allows control over the visibility of the DNS services provided - by the Virtual Router in Shared networks. By default CloudStack allows DNS requires via the + by the Virtual Router in Shared networks. By default CloudStack allows DNS queries via the Guest interface from any IP address. This allows for the DNS resolution of guest VMs on the Shared network by services outside of the shared network. While this can be useful, it can also be an issue on Shared Networks which are using Internet routable/public (i.e. non-RFC1918) IP addresses as the DNS service is then queriable from the public internet at large. A new global setting "expose.dns.externally" has been added (with a default value of "true" in - order to keep backward compatibility). If you wish to disable public access to the DNS services + order to keep backward compatibility) which limits the source of DNS queries to hosts on the + Shared Network guest subnet. If you wish to disable public access to the DNS services running on Virtual Routers, set the value to "false" and recreate the related Virtual Routers. Apache CloudStack powers numerous elastic Cloud computing services, including solutions that have From da3415fd2b3196676e483342cbd07f3f11787dd9 Mon Sep 17 00:00:00 2001 From: PaulAngus Date: Fri, 29 May 2020 16:48:16 +0100 Subject: [PATCH 3/3] reword reversed logic. --- source/releasenotes/about.rst | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/source/releasenotes/about.rst b/source/releasenotes/about.rst index 082a810b30..fa791d2d83 100644 --- a/source/releasenotes/about.rst +++ b/source/releasenotes/about.rst @@ -43,11 +43,12 @@ http://docs.cloudstack.apache.org/en/4.14.0.0/releasenotes/changes.html Guest interface from any IP address. This allows for the DNS resolution of guest VMs on the Shared network by services outside of the shared network. While this can be useful, it can also be an issue on Shared Networks which are using Internet routable/public (i.e. non-RFC1918) - IP addresses as the DNS service is then queriable from the public internet at large. A new + IP addresses, as the DNS service is then queriable from the public internet at large. A new global setting "expose.dns.externally" has been added (with a default value of "true" in - order to keep backward compatibility) which limits the source of DNS queries to hosts on the - Shared Network guest subnet. If you wish to disable public access to the DNS services - running on Virtual Routers, set the value to "false" and recreate the related Virtual Routers. + order to keep backward compatibility) which controls whether the source of DNS queries + should be limited to only hosts on the Shared Network guest subnet or not. If you wish + to disable 'outside' access to the DNS services running on Virtual Routers; set the value + to "false" and recreate the related Virtual Routers. Apache CloudStack powers numerous elastic Cloud computing services, including solutions that have ranked as Gartner Magic Quadrant leaders. Highlighted in the Forrester Q4 2017 Enterprise Open Source