Support throttling a VPC's public gateway network rate

Adds an operator-configurable data transfer rate for a VPC's public/internet-facing
network, independent of the intra-VPC tier rates that network offerings already
control. Precedence: vpc_offerings.public_nw_rate (per-offering override) falls back
to the new zone-scoped config vpc.public.network.throttling.rate (default 0/unlimited,
preserving today's unthrottled behavior on upgrade).

- createVPCOffering/updateVPCOffering/cloneVPCOffering accept publicnetworkrate
- listVPCOfferings/listVPCs expose it, normalized to -1 for unlimited
- vpc_details "publicnetworkrate" cache is (re)computed only where a VPC's offering
  can actually change: at creation and in restartVpc's make-redundant path
- backfills existing VPCs to -1 on upgrade, since the new column/config can't yet
  hold a value
- UI support for setting/viewing the rate on VPC offerings and VPCs

Author: sudo87

api/src/main/java/com/cloud/network/vpc/VpcOffering.java

@@ -86,4 +86,6 @@ public enum State {
     Boolean isSpecifyAsNumber();
 
     boolean isConserveMode();
+
+    Integer getPublicNetworkRate();
 }

api/src/main/java/com/cloud/network/vpc/VpcProvisioningService.java

@@ -42,7 +42,7 @@ VpcOffering createVpcOffering(String name, String displayText, List<String> supp
                                   Map serviceCapabilitystList, NetUtils.InternetProtocol internetProtocol,
                                   Long serviceOfferingId, String externalProvider, NetworkOffering.NetworkMode networkMode,
                                   List<Long> domainIds, List<Long> zoneIds, VpcOffering.State state,
-                                  NetworkOffering.RoutingMode routingMode, boolean specifyAsNumber, boolean conserveMode);
+                                  NetworkOffering.RoutingMode routingMode, boolean specifyAsNumber, boolean conserveMode, Integer publicNetworkRate);
 
 
     Pair<List<? extends VpcOffering>,Integer> listVpcOfferings(ListVPCOfferingsCmd cmd);

api/src/main/java/org/apache/cloudstack/api/ApiConstants.java

@@ -729,6 +729,7 @@ public class ApiConstants {
     public static final String IS_USER_DEFINED = "isuserdefined";
     public static final String AVAILABILITY = "availability";
     public static final String NETWORKRATE = "networkrate";
+    public static final String PUBLIC_NETWORK_RATE = "publicnetworkrate";
     public static final String HOST_TAGS = "hosttags";
     public static final String SSH_KEYPAIR = "keypair";
     public static final String SSH_KEYPAIRS = "keypairs";

api/src/main/java/org/apache/cloudstack/api/command/admin/vpc/CreateVPCOfferingCmd.java

@@ -165,6 +165,11 @@ public class CreateVPCOfferingCmd extends BaseAsyncCreateCmd {
             description = "True if the VPC offering is IP conserve mode enabled, allowing public IPs to be used across multiple VPC tiers. Default value is false")
     private Boolean conserveMode;
 
+    @Parameter(name = ApiConstants.PUBLIC_NETWORK_RATE, type = CommandType.INTEGER,
+            since = "4.24.0",
+            description = "Data transfer rate in megabits per second allowed for a VPC's public gateway (internet-facing network), created with this offering. Default is unlimited")
+    private Integer publicNetworkRate;
+
 
     /////////////////////////////////////////////////////
     /////////////////// Accessors ///////////////////////
@@ -318,6 +323,10 @@ public boolean isConserveMode() {
         return BooleanUtils.toBoolean(conserveMode);
     }
 
+    public Integer getPublicNetworkRate() {
+        return publicNetworkRate;
+    }
+
     @Override
     public void create() throws ResourceAllocationException {
         VpcOffering vpcOff = _vpcProvSvc.createVpcOffering(this);

api/src/main/java/org/apache/cloudstack/api/command/admin/vpc/UpdateVPCOfferingCmd.java

@@ -68,6 +68,11 @@ public class UpdateVPCOfferingCmd extends BaseAsyncCmd implements DomainAndZoneI
     @Parameter(name = ApiConstants.SORT_KEY, type = CommandType.INTEGER, description = "Sort key of the VPC offering, integer")
     private Integer sortKey;
 
+    @Parameter(name = ApiConstants.PUBLIC_NETWORK_RATE, type = CommandType.INTEGER,
+            since = "4.24.0",
+            description = "Data transfer rate in megabits per second allowed for a VPC's public gateway (internet-facing network), created with this offering. Use 0 for unlimited")
+    private Integer publicNetworkRate;
+
     /////////////////////////////////////////////////////
     /////////////////// Accessors ///////////////////////
     /////////////////////////////////////////////////////
@@ -100,6 +105,10 @@ public Integer getSortKey() {
         return sortKey;
     }
 
+    public Integer getPublicNetworkRate() {
+        return publicNetworkRate;
+    }
+
     /////////////////////////////////////////////////////
     /////////////// API Implementation///////////////////
     /////////////////////////////////////////////////////

api/src/main/java/org/apache/cloudstack/api/response/VpcOfferingResponse.java

@@ -106,6 +106,10 @@ public class VpcOfferingResponse extends BaseResponse {
     @Param(description = "True if the VPC offering is IP conserve mode enabled, allowing public IP services to be used across multiple VPC tiers.", since = "4.23.0")
     private Boolean conserveMode;
 
+    @SerializedName(ApiConstants.PUBLIC_NETWORK_RATE)
+    @Param(description = "Data transfer rate in megabits per second allowed for a VPC's public gateway (internet-facing network), created with this offering; null if not set (falls back to the zone/global default)", since = "4.24.0")
+    private Integer publicNetworkRate;
+
     public void setId(String id) {
         this.id = id;
     }
@@ -213,4 +217,8 @@ public Boolean getConserveMode() {
     public void setConserveMode(Boolean conserveMode) {
         this.conserveMode = conserveMode;
     }
+
+    public void setPublicNetworkRate(Integer publicNetworkRate) {
+        this.publicNetworkRate = publicNetworkRate;
+    }
 }

api/src/main/java/org/apache/cloudstack/api/response/VpcResponse.java

@@ -77,6 +77,10 @@ public class VpcResponse extends BaseResponseWithAnnotations implements Controll
     @Param(description = "true if VPC offering is ip conserve mode enabled", since = "4.23")
     private Boolean vpcOfferingConserveMode;
 
+    @SerializedName(ApiConstants.PUBLIC_NETWORK_RATE)
+    @Param(description = "Data transfer rate in megabits per second allowed for this VPC's public gateway (internet-facing network); -1 if unlimited", since = "4.24.0")
+    private Integer publicNetworkRate;
+
     @SerializedName(ApiConstants.CREATED)
     @Param(description = "The date this VPC was created")
     private Date created;
@@ -209,6 +213,10 @@ public void setVpcOfferingConserveMode(Boolean vpcOfferingConserveMode) {
         this.vpcOfferingConserveMode = vpcOfferingConserveMode;
     }
 
+    public void setPublicNetworkRate(Integer publicNetworkRate) {
+        this.publicNetworkRate = publicNetworkRate;
+    }
+
     public void setCreated(final Date created) {
         this.created = created;
     }

engine/api/src/main/java/org/apache/cloudstack/engine/orchestration/service/NetworkOrchestrationService.java

@@ -138,6 +138,9 @@ public interface NetworkOrchestrationService {
     ConfigKey<Integer> VmNetworkThrottlingRate = new ConfigKey<Integer>("Network", Integer.class, "vm.network.throttling.rate", "200",
             "Default data transfer rate in megabits per second allowed in User vm's default network.", true, ConfigKey.Scope.Zone);
 
+    ConfigKey<Integer> VpcPublicNetworkThrottlingRate = new ConfigKey<>("Network", Integer.class, "vpc.public.network.throttling.rate", "0",
+            "Default data transfer rate in megabits per second allowed for a VPC's public/internet-facing network. 0 means unlimited.", true, ConfigKey.Scope.Zone);
+
     List<? extends Network> setupNetwork(Account owner, NetworkOffering offering, DeploymentPlan plan, String name, String displayText, boolean isDefault)
         throws ConcurrentOperationException;
 

engine/components-api/src/main/java/com/cloud/configuration/ConfigurationManager.java

@@ -82,6 +82,8 @@ public interface ConfigurationManager {
 
     Integer getServiceOfferingNetworkRate(long serviceOfferingId, Long dataCenterId);
 
+    Integer getVpcOfferingNetworkRate(long vpcOfferingId, Long dataCenterId);
+
     /**
      * Updates a configuration entry with a new value
      */

engine/orchestration/src/main/java/org/apache/cloudstack/engine/orchestration/NetworkOrchestrator.java

@@ -5075,7 +5075,7 @@ public String getConfigComponentName() {
     @Override
     public ConfigKey<?>[] getConfigKeys() {
         return new ConfigKey<?>[]{NetworkGcWait, NetworkGcInterval, NetworkLockTimeout, DeniedRoutes,
-                GuestDomainSuffix, NetworkThrottlingRate, VmNetworkThrottlingRate, MinVRVersion, DhcpLeaseTimeout,
+                GuestDomainSuffix, NetworkThrottlingRate, VmNetworkThrottlingRate, VpcPublicNetworkThrottlingRate, MinVRVersion, DhcpLeaseTimeout,
                 PromiscuousMode, MacAddressChanges, ForgedTransmits, MacLearning, RollingRestartEnabled,
                 TUNGSTEN_ENABLED, NSX_ENABLED, NETRIS_ENABLED, NETWORK_LB_HAPROXY_MAX_CONN,
                 NETWORK_LB_HAPROXY_IDLE_TIMEOUT};