Feature Name Securing Agent Comms (CA Framework)

• Summary The aim of this feature is to provide pluggable CA (certificate authority) management in CloudStack that can fetch/provision certificates to (new) host(s) and systemvms. As a default CA plugin, a root CA plugin will be implement where CloudStack becomes a self-signed Root Certificate Authority. Developers will have option to implement further integration with their TLS/SSL cert providers such as letsencrypt and other vendors.
• FS_Jira https://cwiki.apache.org/confluence/display/CLOUDSTACK/Secure+Agent+Communications
• Lead Dev R Yadav
• Release Target 4.11

Feature Name Error code framework

• Summary Aim is to get understandable, actionable errors out of CloudStack, ie not 'insufficient capacity'.
  BitWork Software have implemented some context based interpretation in their UI. We hope to work with them and others to implement a framework in side CloudStack)
• FS_Jira TBC
• Lead Dev D Hoogland
• Release Target TBC

Feature Name Enable Dedication of Public IP range to CPVM/SSVM

• Summary By dedicating a small public IP range to only CPVM and SSVM, firewall rules can be used to control inbound access to this smaller range without affecting public traffic destined for the VRs.
  Such security is a general best practice, but also highly desireable in PCI DSS compliant environments
• FS_Jira TBC
• Lead Dev TBC
• Release Target Q4 2017

Feature Name Multi-disk OVA import + Additional OVA metadata

• Summary Many users add data disks to their instances, migration of these between platforms (ie onboarding) is greatly simplified by being able to import mu
• FS_Jira TBC
• Lead Dev N Vasquez
• Release Target Q4 2017

Feature Name Fix and Update template checksum validation

• Summary the obsoletion of the md5 checksum algorithm requires that CloudStack checks downloaded templates by means of an alternative algorithm to the current one. The algorithm type should be configurable and include both the obfuscated MD5 and, as an example SHA256.
• FS_Jira https://cwiki.apache.org/confluence/display/CLOUDSTACK/SHA256+checksums+for+checking+uploads
• Lead Dev TBC
• Release Target 4.11

Feature Name Add Layer 2 network type

• Summary Required for any kind of service chaining, currently users have to resort to creating networks with IP allocations that they don't want.
• FS_Jira TBC
• Lead Dev TBC
• Release Target Q4 2017

Feature Name New UI Framework

• Summary Aim is to work with BitWorks and their existing UI to create a flexible framework upon which a next generation UI
• FS_Jira TBC
• Lead Dev TBC
• Release Target Q4 2017

Feature Name System VM diagnostics API

• Summary Enable administrators to perform basic tasks such as ping (over default and specific interfaces) tracert, retrieve logs and configuration files. This will greatly simplify an admin's job by largely removing the need to log into System VMs.
  Also enable admin to increase/decrease logging verbosity on specific system VMs via API.
• FS_Jira TBC
• Lead Dev TBC
• Release Target Q1 2018

Feature Name Ability to request a range of public IPs (v4 and v6)

• Summary Required for IPv6 routing in CloudStack, and also for users who prefer to deal with a block of IPs rather than individual IPs as this greatly simplifies ACLs.
• FS_Jira TBC
• Lead Dev TBC
• Release Target Q4 2017

Feature Name CloudStack Metrics Exporter for Prometheus

• Summary Several organizations use Prometheus based metrics/monitoring, the aim is to develop a CloudStack metrics exporter for Prometheus server which can export metrics such as CPU, memory, cores, VMs, volumes, IPs.
• FS_Jira https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudStack+Metrics+Exporter+for+Prometheus
• Lead Dev
• Release Target

Feature Name Embedded Jetty

• Summary CloudStack installation has huge dependency on distro provided tomcat, by moving to embedded jetty (like we do use jetty for development) we can sync how developers develop/test mgmt servers and users use it. In addition, it will be easier to publish pkgs without depending on distro provided dependencies.
• FS_Jira https://issues.apache.org/jira/browse/CLOUDSTACK-10012
• Lead Dev R Yadav
• Release Target 4.11

Feature Name Debian 9 SystemVM template

• Summary Required update, Debian7 is EOL, moving to Debian9 will give; newer kernel, newer packages, Smaller disk footprint (faster deployment and more space efficient) and Systemd should give quicker boot time
• FS_Jira https://issues.apache.org/jira/browse/CLOUDSTACK-10013
• Lead Dev R Yadav
• Release Target Q4 2017

Feature Name Enable dedication of public IPs to system VMs (CPVM/SSVM)

• Summary Allow a public IP range to be dedicated to CPVM/SSVM, allowing external firewall control of ports which are allowed to connect to CPVM/SSVM from "outside" CloudStack.
• FS_Jira TBC
• Lead Dev N Vasquez
• Release Target Q4 2017