X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=planetstack%2Fcore%2Fmodels%2Fnetwork.py;h=51cc0c8708de57ec6630c1e0eff8aa3d77d31b3c;hb=4df786ffd7b10707a21667dfb4494b1d05ff4eae;hp=660107fe90608edfe9ffec55fd5847b76efaefc1;hpb=58a9c7a787ebcd8aee49e826a2fd1d6c60fdc522;p=plstackapi.git diff --git a/planetstack/core/models/network.py b/planetstack/core/models/network.py index 660107f..51cc0c8 100644 --- a/planetstack/core/models/network.py +++ b/planetstack/core/models/network.py @@ -1,21 +1,26 @@ import os import socket from django.db import models -from core.models import PlCoreBase, Site, Slice, Sliver +from core.models import PlCoreBase, Site, Slice, Sliver, Deployment +from core.models import DeploymentLinkManager,DeploymentLinkDeletionManager from django.contrib.contenttypes.models import ContentType from django.contrib.contenttypes import generic # If true, then IP addresses will be allocated by the model. If false, then # we will assume the observer handles it. -#NO_OBSERVER=True +NO_OBSERVER=False class NetworkTemplate(PlCoreBase): VISIBILITY_CHOICES = (('public', 'public'), ('private', 'private')) + TRANSLATION_CHOICES = (('none', 'none'), ('NAT', 'NAT')) name = models.CharField(max_length=32) description = models.CharField(max_length=1024, blank=True, null=True) guaranteedBandwidth = models.IntegerField(default=0) visibility = models.CharField(max_length=30, choices=VISIBILITY_CHOICES, default="private") + translation = models.CharField(max_length=30, choices=TRANSLATION_CHOICES, default="none") + sharedNetworkName = models.CharField(max_length=30, blank=True, null=True) + sharedNetworkId = models.CharField(null=True, blank=True, max_length=256, help_text="Quantum network") def __unicode__(self): return u'%s' % (self.name) @@ -25,14 +30,19 @@ class Network(PlCoreBase): subnet = models.CharField(max_length=32, blank=True) ports = models.CharField(max_length=1024, blank=True, null=True) labels = models.CharField(max_length=1024, blank=True, null=True) - owner = models.ForeignKey(Slice, related_name="ownedNetworks") + owner = models.ForeignKey(Slice, related_name="ownedNetworks", help_text="Slice that owns control of this Network") guaranteedBandwidth = models.IntegerField(default=0) permitAllSlices = models.BooleanField(default=False) permittedSlices = models.ManyToManyField(Slice, blank=True, related_name="availableNetworks") - slices = models.ManyToManyField(Slice, blank=True, related_name="networks") + slices = models.ManyToManyField(Slice, blank=True, related_name="networks", through="NetworkSlice") slivers = models.ManyToManyField(Sliver, blank=True, related_name="networks", through="NetworkSliver") + # for observer/manager + network_id = models.CharField(null=True, blank=True, max_length=256, help_text="Quantum network") + router_id = models.CharField(null=True, blank=True, max_length=256, help_text="Quantum router id") + subnet_id = models.CharField(null=True, blank=True, max_length=256, help_text="Quantum subnet id") + def __unicode__(self): return u'%s' % (self.name) def save(self, *args, **kwds): @@ -41,12 +51,137 @@ class Network(PlCoreBase): self.subnet = find_unused_subnet(existing_subnets=[x.subnet for x in Network.objects.all()]) super(Network, self).save(*args, **kwds) + def can_update(self, user): + return self.owner.can_update(user) + + @property + def nat_list(self): + """ Support a list of ports in the format "protocol:port, protocol:port, ..." + examples: + tcp 123 + tcp 123:133 + tcp 123, tcp 124, tcp 125, udp 201, udp 202 + + User can put either a "/" or a " " between protocol and ports + Port ranges can be specified with "-" or ":" + """ + nats = [] + if self.ports: + parts = self.ports.split(",") + for part in parts: + part = part.strip() + if "/" in part: + (protocol, ports) = part.split("/",1) + elif " " in part: + (protocol, ports) = part.split(None,1) + else: + raise TypeError('malformed port specifier %s, format example: "tcp 123, tcp 201:206, udp 333"' % part) + + protocol = protocol.strip() + ports = ports.strip() + + if not (protocol in ["udp", "tcp"]): + raise TypeError('unknown protocol %s' % protocol) + + if "-" in ports: + (first, last) = ports.split("-") + first = int(first.strip()) + last = int(last.strip()) + portStr = "%d:%d" % (first, last) + elif ":" in ports: + (first, last) = ports.split(":") + first = int(first.strip()) + last = int(last.strip()) + portStr = "%d:%d" % (first, last) + else: + portStr = "%d" % int(ports) + + nats.append( {"l4_protocol": protocol, "l4_port": portStr} ) + + return nats + + @staticmethod + def select_by_user(user): + if user.is_admin: + qs = Network.objects.all() + else: + slices = Slice.select_by_user(user) + #slice_ids = [s.id for s in Slice.select_by_user(user)] + qs = Network.objects.filter(owner__in=slices) + return qs + +class NetworkDeployments(PlCoreBase): + objects = DeploymentLinkManager() + deleted_objects = DeploymentLinkDeletionManager() + + # Stores the openstack ids at various deployments + network = models.ForeignKey(Network) + deployment = models.ForeignKey(Deployment) + net_id = models.CharField(null=True, blank=True, max_length=256, help_text="Quantum network") + router_id = models.CharField(null=True, blank=True, max_length=256, help_text="Quantum router id") + subnet_id = models.CharField(null=True, blank=True, max_length=256, help_text="Quantum subnet id") + subnet = models.CharField(max_length=32, blank=True) + + def can_update(self, user): + return user.is_admin + + @staticmethod + def select_by_user(user): + if user.is_admin: + qs = NetworkDeployments.objects.all() + else: + slices = Slice.select_by_user(user) + networks = Network.objects.filter(owner__in=slices) + qs = NetworkDeployments.objects.filter(network__in=networks) + return qs + +class NetworkSlice(PlCoreBase): + # This object exists solely so we can implement the permission check when + # adding slices to networks. It adds no additional fields to the relation. + + network = models.ForeignKey(Network) + slice = models.ForeignKey(Slice) + + def save(self, *args, **kwds): + slice = self.slice + if (slice not in self.network.permittedSlices.all()) and (slice != self.network.owner) and (not self.network.permitAllSlices): + # to add a sliver to the network, then one of the following must be true: + # 1) sliver's slice is in network's permittedSlices list, + # 2) sliver's slice is network's owner, or + # 3) network's permitAllSlices is true + raise ValueError("Slice %s is not allowed to connect to network %s" % (str(slice), str(self.network))) + + super(NetworkSlice, self).save(*args, **kwds) + + def __unicode__(self): return u'%s-%s' % (self.network.name, self.slice.name) + + def can_update(self, user): + return self.slice.can_update(user) + + @staticmethod + def select_by_user(user): + if user.is_admin: + qs = NetworkSlice.objects.all() + else: + slice_ids = [s.id for s in Slice.select_by_user(user)] + qs = NetworkSlice.objects.filter(id__in=slice_ids) + return qs + class NetworkSliver(PlCoreBase): network = models.ForeignKey(Network) sliver = models.ForeignKey(Sliver) - ip = models.GenericIPAddressField(help_text="Sliver ip address", blank=True) + ip = models.GenericIPAddressField(help_text="Sliver ip address", blank=True, null=True) + port_id = models.CharField(null=True, blank=True, max_length=256, help_text="Quantum port id") def save(self, *args, **kwds): + slice = self.sliver.slice + if (slice not in self.network.permittedSlices.all()) and (slice != self.network.owner) and (not self.network.permitAllSlices): + # to add a sliver to the network, then one of the following must be true: + # 1) sliver's slice is in network's permittedSlices list, + # 2) sliver's slice is network's owner, or + # 3) network's permitAllSlices is true + raise ValueError("Slice %s is not allowed to connect to network %s" % (str(slice), str(self.network))) + if (not self.ip) and (NO_OBSERVER): from util.network_subnet_allocator import find_unused_address self.ip = find_unused_address(self.network.subnet, @@ -55,6 +190,18 @@ class NetworkSliver(PlCoreBase): def __unicode__(self): return u'%s-%s' % (self.network.name, self.sliver.instance_name) + def can_update(self, user): + return self.sliver.can_update(user) + + @staticmethod + def select_by_user(user): + if user.is_admin: + qs = NetworkSliver.objects.all() + else: + sliver_ids = [s.id for s in NetworkSliver.select_by_user(user)] + qs = NetworkSliver.objects.filter(id__in=sliver_ids) + return qs + class Router(PlCoreBase): name = models.CharField(max_length=32) owner = models.ForeignKey(Slice, related_name="routers")