5 """network configuration"""
7 # system provided modules
8 import os, string, time, socket
10 # PlanetLab system modules
14 import bwlimit, logger, iptables
16 def GetSlivers(plc, data, config):
17 InitInterfaces(plc, data) # writes sysconfig files.
18 if ('OVERRIDES' in dir(config)) and (config.OVERRIDESget('net_max_rate') == -1):
19 logger.log("Slice and node BW Limits disabled.")
20 if len(bwlimit.get()):
21 logger.verbose("*** DISABLING NODE BW LIMITS ***")
29 def InitNodeLimit(data):
30 if not 'networks' in data: return
32 # query running network interfaces
34 ips = dict(zip(devs.values(), devs.keys()))
37 macs[sioc.gifhwaddr(dev).lower()] = dev
39 for network in data['networks']:
40 # Get interface name preferably from MAC address, falling
43 if hwaddr <> None: hwaddr=hwaddr.lower()
45 dev = macs[network['mac']]
46 elif network['ip'] in ips:
47 dev = ips[network['ip']]
49 logger.log('%s: no such interface with address %s/%s' % (network['hostname'], network['ip'], network['mac']))
52 # Get current node cap
54 old_bwlimit = bwlimit.get_bwcap(dev)
58 # Get desired node cap
59 if network['bwlimit'] is None or network['bwlimit'] < 0:
60 new_bwlimit = bwlimit.bwmax
62 new_bwlimit = network['bwlimit']
64 if old_bwlimit != new_bwlimit:
65 # Reinitialize bandwidth limits
66 bwlimit.init(dev, new_bwlimit)
68 # XXX This should trigger an rspec refresh in case
69 # some previously invalid sliver bwlimit is now valid
70 # again, or vice-versa.
72 def InitI2(plc, data):
73 if not 'groups' in data: return
75 if "Internet2" in data['groups']:
76 logger.log("This is an Internet2 node. Setting rules.")
78 i2nodeids = plc.GetNodeGroups(["Internet2"])[0]['node_ids']
79 for node in plc.GetNodeNetworks({"node_id": i2nodeids}, ["ip"]):
81 i2nodes.append(node['ip'])
82 # this will create the set if it doesn't already exist
83 # and add IPs that don't exist in the set rather than
84 # just recreateing the set.
85 bwlimit.exempt_init('Internet2', i2nodes)
87 # set the iptables classification rule if it doesnt exist.
88 cmd = '-A POSTROUTING -m set --set Internet2 dst -j CLASSIFY --set-class 0001:2000 --add-mark'
90 ipt = os.popen("/sbin/iptables-save")
91 for line in ipt.readlines(): rules.append(line.strip(" \n"))
94 logger.verbose("net: Adding iptables rule for Internet2")
95 os.popen("/sbin/iptables -t mangle " + cmd)
97 def InitNAT(plc, data):
98 if not 'networks' in data: return
100 # query running network interfaces
101 devs = sioc.gifconf()
102 ips = dict(zip(devs.values(), devs.keys()))
105 macs[sioc.gifhwaddr(dev).lower()] = dev
107 ipt = iptables.IPTables()
108 for network in data['networks']:
109 # Get interface name preferably from MAC address, falling
110 # back on IP address.
111 hwaddr=network['mac']
112 if hwaddr <> None: hwaddr=hwaddr.lower()
114 dev = macs[network['mac']]
115 elif network['ip'] in ips:
116 dev = ips[network['ip']]
118 logger.log('%s: no such interface with address %s/%s' % (network['hostname'], network['ip'], network['mac']))
122 settings = plc.GetNodeNetworkSettings({'nodenetwork_setting_id': network['nodenetwork_setting_ids']})
126 for setting in settings:
127 if setting['category'].upper() != 'FIREWALL':
129 if setting['name'].upper() == 'EXTERNAL':
130 # Enable NAT for this interface
132 elif setting['name'].upper() == 'INTERNAL':
134 elif setting['name'].upper() == 'PF': # XXX Uglier code is hard to find...
135 for pf in setting['value'].split("\n"):
137 for field in pf.split(","):
138 (key, val) = field.split("=", 2)
140 if 'new_dport' not in fields:
141 fields['new_dport'] = fields['dport']
142 if 'source' not in fields:
143 fields['source'] = "0.0.0.0/0"
147 def InitInterfaces(plc, data):
148 if not 'networks' in data: return
149 plnet.InitInterfaces(logger, plc, data)
151 def start(options, config):