net.py

   1 #
   2 # $Id$
   3 #
   4 """network configuration"""
   5
   6 import sioc
   7 import bwlimit
   8 import logger
   9 import string
  10 import iptables
  11
  12 def GetSlivers(plc, data):
  13     InitNodeLimit(data)
  14     InitI2(plc, data)
  15     InitNAT(plc, data)
  16
  17 def InitNodeLimit(data):
  18     # query running network interfaces
  19     devs = sioc.gifconf()
  20     ips = dict(zip(devs.values(), devs.keys()))
  21     macs = {}
  22     for dev in devs:
  23         macs[sioc.gifhwaddr(dev).lower()] = dev
  24
  25     # XXX Exempt Internet2 destinations from node bwlimits
  26     # bwlimit.exempt_init('Internet2', internet2_ips)
  27     for network in data['networks']:
  28         # Get interface name preferably from MAC address, falling
  29         # back on IP address.
  30         if macs.has_key(network['mac']):
  31             dev = macs[network['mac'].lower()]
  32         elif ips.has_key(network['ip']):
  33             dev = ips[network['ip']]
  34         else:
  35             logger.log('%s: no such interface with address %s/%s' % (network['hostname'], network['ip'], network['mac']))
  36             continue
  37
  38         # Get current node cap
  39         try:
  40             old_bwlimit = bwlimit.get_bwcap(dev)
  41         except:
  42             old_bwlimit = None
  43
  44         # Get desired node cap
  45         if network['bwlimit'] is None or network['bwlimit'] < 0:
  46             new_bwlimit = bwlimit.bwmax
  47         else:
  48             new_bwlimit = network['bwlimit']
  49
  50         if old_bwlimit != new_bwlimit:
  51             # Reinitialize bandwidth limits
  52             bwlimit.init(dev, new_bwlimit)
  53
  54             # XXX This should trigger an rspec refresh in case
  55             # some previously invalid sliver bwlimit is now valid
  56             # again, or vice-versa.
  57
  58 def InitI2(plc, data):
  59     if "Internet2" in data['groups']:
  60         logger.log("This is an Internet2 node.  Setting rules.")
  61         i2nodes = []
  62         i2nodeids = plc.GetNodeGroups(["Internet2"])[0]['node_ids']
  63         for node in plc.GetInterfaces({"node_id": i2nodeids}, ["ip"]):
  64             i2nodes.append(node['ip'])
  65         bwlimit.exempt_init('Internet2', i2nodes)
  66
  67 def InitNAT(plc, data):
  68     # query running network interfaces
  69     devs = sioc.gifconf()
  70     ips = dict(zip(devs.values(), devs.keys()))
  71     macs = {}
  72     for dev in devs:
  73         macs[sioc.gifhwaddr(dev).lower()] = dev
  74
  75     ipt = iptables.IPTables()
  76     for network in data['networks']:
  77         # Get interface name preferably from MAC address, falling
  78         # back on IP address.
  79         if macs.has_key(network['mac']):
  80             dev = macs[network['mac'].lower()]
  81         elif ips.has_key(network['ip']):
  82             dev = ips[network['ip']]
  83         else:
  84             logger.log('%s: no such interface with address %s/%s' % (network['hostname'], network['ip'], network['mac']))
  85             continue
  86
  87         try:
  88             settings = plc.GetInterfaceSettings({'interface_setting_id': network['interface_setting_ids']})
  89         except:
  90             continue
  91         # XXX arbitrary names
  92         for setting in settings:
  93             if setting['category'].upper() != 'FIREWALL':
  94                 continue
  95             if setting['name'].upper() == 'EXTERNAL':
  96                 # Enable NAT for this interface
  97                 ipt.add_ext(dev)
  98             elif setting['name'].upper() == 'INTERNAL':
  99                 ipt.add_int(dev)
 100             elif setting['name'].upper() == 'PF': # XXX Uglier code is hard to find...
 101                 for pf in setting['value'].split("\n"):
 102                     fields = {}
 103                     for field in pf.split(","):
 104                         (key, val) = field.split("=", 2)
 105                         fields[key] = val
 106                     if 'new_dport' not in fields:
 107                         fields['new_dport'] = fields['dport']
 108                     if 'source' not in fields:
 109                         fields['source'] = "0.0.0.0/0"
 110                     ipt.add_pf(fields)
 111     ipt.commit()
 112
 113 def start(options, config):
 114     pass