5 """network configuration"""
7 # system provided modules
8 import os, string, time, socket
10 # PlanetLab system modules
14 import bwlimit, logger, iptables
16 def GetSlivers(plc, data):
17 InitInterfaces(plc, data)
22 def InitNodeLimit(data):
23 if not 'networks' in data: return
25 # query running network interfaces
27 ips = dict(zip(devs.values(), devs.keys()))
30 macs[sioc.gifhwaddr(dev).lower()] = dev
32 # XXX Exempt Internet2 destinations from node bwlimits
33 # bwlimit.exempt_init('Internet2', internet2_ips)
34 for network in data['networks']:
35 # Get interface name preferably from MAC address, falling
38 if hwaddr <> None: hwaddr=hwaddr.lower()
40 dev = macs[network['mac']]
41 elif network['ip'] in ips:
42 dev = ips[network['ip']]
44 logger.log('%s: no such interface with address %s/%s' % (network['hostname'], network['ip'], network['mac']))
47 # Get current node cap
49 old_bwlimit = bwlimit.get_bwcap(dev)
53 # Get desired node cap
54 if network['bwlimit'] is None or network['bwlimit'] < 0:
55 new_bwlimit = bwlimit.bwmax
57 new_bwlimit = network['bwlimit']
59 if old_bwlimit != new_bwlimit:
60 # Reinitialize bandwidth limits
61 bwlimit.init(dev, new_bwlimit)
63 # XXX This should trigger an rspec refresh in case
64 # some previously invalid sliver bwlimit is now valid
65 # again, or vice-versa.
67 def InitI2(plc, data):
68 if not 'groups' in data: return
70 if "Internet2" in data['groups']:
71 logger.log("This is an Internet2 node. Setting rules.")
73 i2nodeids = plc.GetNodeGroups(["Internet2"])[0]['node_ids']
74 for node in plc.GetNodeNetworks({"node_id": i2nodeids}, ["ip"]):
76 i2nodes.append(node['ip'])
77 # this will create the set if it doesn't already exist
78 # and add IPs that don't exist in the set rather than
79 # just recreateing the set.
80 bwlimit.exempt_init('Internet2', i2nodes)
82 # set the iptables classification rule if it doesnt exist.
83 cmd = '-A POSTROUTING -m set --set Internet2 dst -j CLASSIFY --set-class 0001:2000 --add-mark'
85 ipt = os.popen("/sbin/iptables-save")
86 for line in ipt.readlines(): rules.append(line.strip(" \n"))
89 logger.verbose("net: Adding iptables rule for Internet2")
90 os.popen("/sbin/iptables -t mangle " + cmd)
92 def InitNAT(plc, data):
93 if not 'networks' in data: return
95 # query running network interfaces
97 ips = dict(zip(devs.values(), devs.keys()))
100 macs[sioc.gifhwaddr(dev).lower()] = dev
102 ipt = iptables.IPTables()
103 for network in data['networks']:
104 # Get interface name preferably from MAC address, falling
105 # back on IP address.
106 hwaddr=network['mac']
107 if hwaddr <> None: hwaddr=hwaddr.lower()
109 dev = macs[network['mac']]
110 elif network['ip'] in ips:
111 dev = ips[network['ip']]
113 logger.log('%s: no such interface with address %s/%s' % (network['hostname'], network['ip'], network['mac']))
117 settings = plc.GetNodeNetworkSettings({'nodenetwork_setting_id': network['nodenetwork_setting_ids']})
121 for setting in settings:
122 if setting['category'].upper() != 'FIREWALL':
124 if setting['name'].upper() == 'EXTERNAL':
125 # Enable NAT for this interface
127 elif setting['name'].upper() == 'INTERNAL':
129 elif setting['name'].upper() == 'PF': # XXX Uglier code is hard to find...
130 for pf in setting['value'].split("\n"):
132 for field in pf.split(","):
133 (key, val) = field.split("=", 2)
135 if 'new_dport' not in fields:
136 fields['new_dport'] = fields['dport']
137 if 'source' not in fields:
138 fields['source'] = "0.0.0.0/0"
142 def InitInterfaces(plc, data):
143 if not 'networks' in data: return
144 plnet.InitInterfaces(logger, plc, data)
146 def start(options, config):