X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=net.py;h=be4e16e1627ccf585b7974cc1870ed7c863c11be;hb=e57f1eed3dbd95226c1febfefb0e78536b23798b;hp=2bd220c019e37461e777ec0244c0b0ab1ec28e8b;hpb=761cada14f2a583c6791d779d68b8a7e5094800d;p=nodemanager.git diff --git a/net.py b/net.py index 2bd220c..be4e16e 100644 --- a/net.py +++ b/net.py @@ -1,20 +1,44 @@ # # $Id$ # + """network configuration""" -import sioc -import bwlimit -import logger -import string -import iptables +# system provided modules +import os, string, time, socket + +# PlanetLab system modules +import sioc, plnet + +# local modules +import bwlimit, logger, iptables, tools -def GetSlivers(plc, data): - InitNodeLimit(data) - InitI2(plc, data) +dev_default = tools.get_default_if() + +def start(options, conf): + logger.log("net plugin starting up...") + +def GetSlivers(data, config, plc): + logger.verbose("net:GetSlivers called.") + InitInterfaces(plc, data) # writes sysconfig files. + if 'OVERRIDES' in dir(config): + if config.OVERRIDES.get('net_max_rate') == '-1': + logger.log("net: Slice and node BW Limits disabled.") + if len(bwlimit.tc("class show dev %s" % dev_default)): + logger.verbose("*** DISABLING NODE BW LIMITS ***") + bwlimit.stop() + else: + InitNodeLimit(data) + InitI2(plc, data) + else: + InitNodeLimit(data) + InitI2(plc, data) InitNAT(plc, data) + def InitNodeLimit(data): + if not 'networks' in data: return + # query running network interfaces devs = sioc.gifconf() ips = dict(zip(devs.values(), devs.keys())) @@ -22,14 +46,14 @@ def InitNodeLimit(data): for dev in devs: macs[sioc.gifhwaddr(dev).lower()] = dev - # XXX Exempt Internet2 destinations from node bwlimits - # bwlimit.exempt_init('Internet2', internet2_ips) for network in data['networks']: # Get interface name preferably from MAC address, falling # back on IP address. - if macs.has_key(network['mac']): - dev = macs[network['mac'].lower()] - elif ips.has_key(network['ip']): + hwaddr=network['mac'] + if hwaddr <> None: hwaddr=hwaddr.lower() + if hwaddr in macs: + dev = macs[network['mac']] + elif network['ip'] in ips: dev = ips[network['ip']] else: logger.log('%s: no such interface with address %s/%s' % (network['hostname'], network['ip'], network['mac'])) @@ -56,15 +80,33 @@ def InitNodeLimit(data): # again, or vice-versa. def InitI2(plc, data): + if not 'groups' in data: return + if "Internet2" in data['groups']: logger.log("This is an Internet2 node. Setting rules.") i2nodes = [] i2nodeids = plc.GetNodeGroups(["Internet2"])[0]['node_ids'] for node in plc.GetInterfaces({"node_id": i2nodeids}, ["ip"]): + # Get the IPs i2nodes.append(node['ip']) + # this will create the set if it doesn't already exist + # and add IPs that don't exist in the set rather than + # just recreateing the set. bwlimit.exempt_init('Internet2', i2nodes) + + # set the iptables classification rule if it doesnt exist. + cmd = '-A POSTROUTING -m set --set Internet2 dst -j CLASSIFY --set-class 0001:2000 --add-mark' + rules = [] + ipt = os.popen("/sbin/iptables-save") + for line in ipt.readlines(): rules.append(line.strip(" \n")) + ipt.close() + if cmd not in rules: + logger.verbose("net: Adding iptables rule for Internet2") + os.popen("/sbin/iptables -t mangle " + cmd) def InitNAT(plc, data): + if not 'networks' in data: return + # query running network interfaces devs = sioc.gifconf() ips = dict(zip(devs.values(), devs.keys())) @@ -76,19 +118,21 @@ def InitNAT(plc, data): for network in data['networks']: # Get interface name preferably from MAC address, falling # back on IP address. - if macs.has_key(network['mac']): - dev = macs[network['mac'].lower()] - elif ips.has_key(network['ip']): + hwaddr=network['mac'] + if hwaddr <> None: hwaddr=hwaddr.lower() + if hwaddr in macs: + dev = macs[network['mac']] + elif network['ip'] in ips: dev = ips[network['ip']] else: logger.log('%s: no such interface with address %s/%s' % (network['hostname'], network['ip'], network['mac'])) continue try: - settings = plc.GetInterfaceSettings({'interface_setting_id': network['interface_setting_ids']}) + settings = plc.GetInterfaceTags({'interface_tag_id': network['interface_tag_ids']}) except: continue - # XXX arbitrary names + for setting in settings: if setting['category'].upper() != 'FIREWALL': continue @@ -110,5 +154,9 @@ def InitNAT(plc, data): ipt.add_pf(fields) ipt.commit() +def InitInterfaces(plc, data): + if not 'networks' in data: return + plnet.InitInterfaces(logger, plc, data) + def start(options, config): pass