/** * Copyright (C) 2010 Cloud.com, Inc. All rights reserved. * * This software is licensed under the GNU General Public License v3 or later. * * It is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or any later version. * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . * */ package com.cloud.network; import java.util.List; import java.util.Map; import com.cloud.api.ServerApiException; import com.cloud.api.commands.AddVpnUserCmd; import com.cloud.api.commands.AssignToLoadBalancerRuleCmd; import com.cloud.api.commands.AssociateIPAddrCmd; import com.cloud.api.commands.CreateIpForwardingRuleCmd; import com.cloud.api.commands.CreatePortForwardingRuleCmd; import com.cloud.api.commands.CreateLoadBalancerRuleCmd; import com.cloud.api.commands.CreateRemoteAccessVpnCmd; import com.cloud.api.commands.DeleteIpForwardingRuleCmd; import com.cloud.api.commands.DeletePortForwardingRuleCmd; import com.cloud.api.commands.DeleteLoadBalancerRuleCmd; import com.cloud.api.commands.DeleteRemoteAccessVpnCmd; import com.cloud.api.commands.DisassociateIPAddrCmd; import com.cloud.api.commands.ListPortForwardingRulesCmd; import com.cloud.api.commands.RebootRouterCmd; import com.cloud.api.commands.RemoveFromLoadBalancerRuleCmd; import com.cloud.api.commands.RemoveVpnUserCmd; import com.cloud.api.commands.StartRouterCmd; import com.cloud.api.commands.StopRouterCmd; import com.cloud.api.commands.UpdateLoadBalancerRuleCmd; import com.cloud.api.commands.UpgradeRouterCmd; import com.cloud.dc.DataCenter; import com.cloud.dc.DataCenterVO; import com.cloud.dc.HostPodVO; import com.cloud.dc.VlanVO; import com.cloud.deploy.DeployDestination; import com.cloud.deploy.DeploymentPlan; import com.cloud.exception.ConcurrentOperationException; import com.cloud.exception.InsufficientAddressCapacityException; import com.cloud.exception.InsufficientCapacityException; import com.cloud.exception.InsufficientNetworkCapacityException; import com.cloud.exception.InvalidParameterValueException; import com.cloud.exception.NetworkRuleConflictException; import com.cloud.exception.PermissionDeniedException; import com.cloud.exception.ResourceAllocationException; import com.cloud.exception.ResourceUnavailableException; import com.cloud.hypervisor.Hypervisor.HypervisorType; import com.cloud.offerings.NetworkOfferingVO; import com.cloud.service.ServiceOfferingVO; import com.cloud.user.Account; import com.cloud.user.AccountVO; import com.cloud.utils.Pair; import com.cloud.vm.DomainRouter; import com.cloud.vm.DomainRouterVO; import com.cloud.vm.Nic; import com.cloud.vm.NicProfile; import com.cloud.vm.ReservationContext; import com.cloud.vm.UserVmVO; import com.cloud.vm.VMInstanceVO; import com.cloud.vm.VirtualMachine; import com.cloud.vm.VirtualMachineProfile; /** * NetworkManager manages the network for the different end users. * */ public interface NetworkManager { public static final int DEFAULT_ROUTER_VM_RAMSIZE = 128; // 128M public static final boolean USE_POD_VLAN = false; /** * create the router. * * @param accountId account Id the router belongs to. * @param ipAddress public ip address the router should use to access the internet. * @param dcId data center id the router should live in. * @param domain domain name of this network. * @param offering service offering associated with this request * @return DomainRouterVO if created. null if not. */ DomainRouterVO createRouter(long accountId, String ipAddress, long dcId, String domain, ServiceOfferingVO offering, long startEventId) throws ConcurrentOperationException; /** * create a DHCP server/user data server for directly connected VMs * @param userId the user id of the user creating the router. * @param accountId the account id of the user creating the router. * @param dcId data center id the router should live in. * @param domain domain name of this network. * @return DomainRouterVO if created. null if not. */ DomainRouterVO createDhcpServerForDirectlyAttachedGuests(long userId, long accountId, DataCenterVO dc, HostPodVO pod, Long candidateHost, VlanVO vlan) throws ConcurrentOperationException; /** /* * Send ssh public/private key pair to specified host * @param hostId * @param pubKey * @param prvKey */ boolean sendSshKeysToHost(Long hostId, String pubKey, String prvKey); /** * save a vm password on the router. * * @param routerId the ID of the router to save the password to * @param vmIpAddress the IP address of the User VM that will use the password * @param password the password to save to the router */ boolean savePasswordToRouter(long routerId, String vmIpAddress, String password); DomainRouterVO startRouter(long routerId, long eventId); /** * Starts domain router * @param cmd the command specifying router's id * @return DomainRouter object * @throws InvalidParameterValueException, PermissionDeniedException */ DomainRouter startRouter(StartRouterCmd cmd); boolean releaseRouter(long routerId); boolean destroyRouter(long routerId); boolean stopRouter(long routerId, long eventId); /** * Stops domain router * @param cmd the command specifying router's id * @return router if successful, null otherwise * @throws InvalidParameterValueException, PermissionDeniedException */ DomainRouter stopRouter(StopRouterCmd cmd); boolean getRouterStatistics(long vmId, Map netStats, Map diskStats); boolean rebootRouter(long routerId, long eventId); /** * Reboots domain router * @param cmd the command specifying router's id * @return the rebooted router * @throws InvalidParameterValueException, PermissionDeniedException */ DomainRouter rebootRouter(RebootRouterCmd cmd); /** * @param hostId get all of the virtual machine routers on a host. * @return collection of VirtualMachineRouter */ List getRouters(long hostId); /** * @param routerId id of the router * @return VirtualMachineRouter */ DomainRouterVO getRouter(long routerId); /** * Do all of the work of releasing public ip addresses. Note that * if this method fails, there can be side effects. * @param userId * @param ipAddress * @return true if it did; false if it didn't */ public boolean releasePublicIpAddress(long userId, String ipAddress); /** * Find or create the source nat ip address a user uses within the * data center. * * @param account account * @param dc data center * @param domain domain used for user's network. * @param so service offering associated with this request * @return public ip address. */ public String assignSourceNatIpAddress(Account account, DataCenterVO dc, String domain, ServiceOfferingVO so, long startEventId, HypervisorType hyperType) throws ResourceAllocationException; /** * @param fwRules list of rules to be updated * @param router router where the rules have to be updated * @return list of rules successfully updated */ public List updatePortForwardingRules(List fwRules, DomainRouterVO router, Long hostId); /** * @param fwRules list of rules to be updated * @param router router where the rules have to be updated * @return success */ public boolean updateLoadBalancerRules(List fwRules, DomainRouterVO router, Long hostId); /** * @param publicIpAddress public ip address associated with the fwRules * @param fwRules list of rules to be updated * @param router router where the rules have to be updated * @return list of rules successfully updated */ public List updateFirewallRules(String publicIpAddress, List fwRules, DomainRouterVO router); /** * Create a port forwarding rule from the given ipAddress/port to the given virtual machine/port. * @param cmd the command specifying the ip address, public port, protocol, private port, and virtual machine id. * @return the newly created FirewallRuleVO if successful, null otherwise. */ public FirewallRuleVO createPortForwardingRule(CreatePortForwardingRuleCmd cmd) throws NetworkRuleConflictException; /** * List port forwarding rules assigned to an ip address * @param cmd the command object holding the criteria for listing port forwarding rules (the ipAddress) * @return list of port forwarding rules on the given address, empty list if no rules exist */ public List listPortForwardingRules(ListPortForwardingRulesCmd cmd); /** * Create a load balancer rule from the given ipAddress/port to the given private port * @param cmd the command specifying the ip address, public port, protocol, private port, and algorithm * @return the newly created LoadBalancerVO if successful, null otherwise */ public LoadBalancerVO createLoadBalancerRule(CreateLoadBalancerRuleCmd cmd); /** * Associates or disassociates a list of public IP address for a router. * @param router router object to send the association to * @param ipAddrList list of public IP addresses * @param add true if associate, false if disassociate * @param vmId * @return */ boolean associateIP(DomainRouterVO router, List ipAddrList, boolean add, long vmId) throws ConcurrentOperationException; /** * Associates a public IP address for a router. * @param cmd - the command specifying ipAddress * @return ip address object * @throws ResourceAllocationException, InsufficientCapacityException */ IPAddressVO associateIP(AssociateIPAddrCmd cmd) throws ResourceAllocationException, InsufficientAddressCapacityException, ConcurrentOperationException; /** * Associates or disassociates a single IP address for a router. * @param router router object to send the association to * @param ipAddress public IP addresses * @param add true if associate, false if disassociate * @return */ boolean associateIP(DomainRouterVO router, String ipAddress, boolean add, long vmId) throws ResourceAllocationException; boolean updateFirewallRule(FirewallRuleVO fwRule, String oldPrivateIP, String oldPrivatePort); /** * Assign a virtual machine, or list of virtual machines, to a load balancer. */ boolean assignToLoadBalancer(AssignToLoadBalancerRuleCmd cmd) throws NetworkRuleConflictException; public boolean removeFromLoadBalancer(RemoveFromLoadBalancerRuleCmd cmd); public boolean deleteLoadBalancerRule(DeleteLoadBalancerRuleCmd cmd); public LoadBalancerVO updateLoadBalancerRule(UpdateLoadBalancerRuleCmd cmd); /** * Add a DHCP entry on the domr dhcp server * @param routerHostId - the host id of the domr * @param routerIp - the private ip address of the domr * @param vmName - the name of the VM (e.g., i-10-TEST) * @param vmMac - the mac address of the eth0 interface of the VM * @param vmIp - the ip address to hand out. * @return success or failure */ public boolean addDhcpEntry(long routerHostId, String routerIp, String vmName, String vmMac, String vmIp); /** * Adds a virtual machine into the guest network. * 1. Starts the domR * 2. Sets the dhcp Entry on the domR * 3. Sets the domR * * @param vm user vm to add to the guest network * @param password password for this vm. Can be null * @return DomainRouterVO if everything is successful. null if not. * * @throws ConcurrentOperationException if multiple starts are being attempted. */ public DomainRouterVO addVirtualMachineToGuestNetwork(UserVmVO vm, String password, long startEventId) throws ConcurrentOperationException; String createZoneVlan(DomainRouterVO router); /** * Lists IP addresses that belong to VirtualNetwork VLANs * @param accountId - account that the IP address should belong to * @param dcId - zone that the IP address should belong to * @param sourceNat - (optional) true if the IP address should be a source NAT address * @return - list of IP addresses */ List listPublicIpAddressesInVirtualNetwork(long accountId, long dcId, Boolean sourceNat); public boolean disassociateIpAddress(DisassociateIPAddrCmd cmd); List setupNetworkConfiguration(Account owner, NetworkOfferingVO offering, DeploymentPlan plan); List setupNetworkConfiguration(Account owner, NetworkOfferingVO offering, NetworkConfiguration predefined, DeploymentPlan plan); List getSystemAccountNetworkOfferings(String... offeringNames); void allocate(VirtualMachineProfile vm, List> networks) throws InsufficientCapacityException; void prepare(VirtualMachineProfile profile, DeployDestination dest, ReservationContext context) throws InsufficientNetworkCapacityException, ConcurrentOperationException, ResourceUnavailableException; void release(VirtualMachineProfile vmProfile); DomainRouter upgradeRouter(UpgradeRouterCmd cmd); List getNics (VirtualMachine vm); List getAccountsUsingNetworkConfiguration(long configurationId); AccountVO getNetworkConfigurationOwner(long configurationId); List getNetworkConfigurationsforOffering(long offeringId, long dataCenterId, long accountId); List setupNetworkConfiguration(Account owner, ServiceOfferingVO offering, DeploymentPlan plan); String assignSourceNatIpAddress(Account account, DataCenter dc) throws InsufficientAddressCapacityException; /** * Create a remote access vpn from the given public ip address and client ip range * @param cmd the command specifying the ip address, ip range * @return the newly created RemoteAccessVpnVO if successful, null otherwise * @throws InvalidParameterValueException * @throws PermissionDeniedException * @throws ConcurrentOperationException */ public RemoteAccessVpnVO createRemoteAccessVpn(CreateRemoteAccessVpnCmd cmd) throws ConcurrentOperationException, InvalidParameterValueException, PermissionDeniedException; /** * Start a remote access vpn for the given public ip address and client ip range * @param cmd the command specifying the ip address, ip range * @return the RemoteAccessVpnVO if successful, null otherwise * @throws ConcurrentOperationException * @throws ResourceUnavailableException */ public RemoteAccessVpnVO startRemoteAccessVpn(CreateRemoteAccessVpnCmd cmd) throws ConcurrentOperationException, ResourceUnavailableException; /** * Destroy a previously created remote access VPN * @param cmd the command specifying the account and zone * @return success if successful, false otherwise * @throws ConcurrentOperationException */ public boolean destroyRemoteAccessVpn(DeleteRemoteAccessVpnCmd cmd) throws ConcurrentOperationException; VpnUserVO addVpnUser(AddVpnUserCmd cmd) throws ConcurrentOperationException; boolean removeVpnUser(RemoveVpnUserCmd cmd) throws ConcurrentOperationException; NetworkConfiguration getNetworkConfiguration(long id); String getNextAvailableMacAddressInNetwork(long networkConfigurationId) throws InsufficientAddressCapacityException; FirewallRuleVO createIpForwardingRuleInDb(String ipAddr, Long virtualMachineId) throws ServerApiException; public boolean deletePortForwardingRule(Long id, boolean sysContext); FirewallRuleVO createIpForwardingRuleOnDomr(Long ruleId); boolean deleteIpForwardingRule(Long id); }