#!/usr/bin/env bash



  #
  # Copyright (C) 2010 Cloud.com, Inc.  All rights reserved.
  # 
  # This software is licensed under the GNU General Public License v3 or later.
  # 
  # It is free software: you can redistribute it and/or modify
  # it under the terms of the GNU General Public License as published by
  # the Free Software Foundation, either version 3 of the License, or any later version.
  # This program is distributed in the hope that it will be useful,
  # but WITHOUT ANY WARRANTY; without even the implied warranty of
  # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  # GNU General Public License for more details.
  # 
  # You should have received a copy of the GNU General Public License
  # along with this program.  If not, see <http://www.gnu.org/licenses/>.
  #
 

# $Id: networkUsage.sh 9879 2010-06-24 02:41:46Z anthony $ $HeadURL: svn://svn.lab.vmops.com/repos/vmdev/java/scripts/vm/hypervisor/xenserver/networkUsage.sh $
# networkUsage.sh -- create iptable rules to gather network stats
#
#
usage() {
  printf "Usage: %s -[c|g|r] -i <domR eth1 ip> [-[a|d] <public interface>]\n" $(basename $0)  >&2
}

# check if gateway domain is up and running
check_gw() {
  ping -c 1 -n -q $1 > /dev/null
  if [ $? -gt 0 ]
  then
    sleep 1
    ping -c 1 -n -q $1 > /dev/null
  fi
  return $?;
}

cert="/root/.ssh/id_rsa.cloud"

create_usage_rules () {
  local dRIp=$1
   ssh -q -p 3922 -o StrictHostKeyChecking=no -i $cert root@$dRIp "\
     iptables -N NETWORK_STATS > /dev/null;
     iptables -I FORWARD -j NETWORK_STATS > /dev/null;
     iptables -I INPUT -j NETWORK_STATS > /dev/null;
     iptables -I OUTPUT -j NETWORK_STATS > /dev/null;
     iptables -A NETWORK_STATS -i eth0 -o eth2 > /dev/null;
     iptables -A NETWORK_STATS -i eth2 -o eth0 > /dev/null;
     iptables -A NETWORK_STATS -o eth2 ! -i eth0 -p tcp > /dev/null;
     iptables -A NETWORK_STATS -i eth2 ! -o eth0 -p tcp > /dev/null;
     "
  return $?
}

add_public_interface () {
  local dRIp=$1
  local pubIf=$2
   ssh -q -p 3922 -o StrictHostKeyChecking=no -i $cert root@$dRIp "\
     iptables -A NETWORK_STATS -i eth0 -o $pubIf > /dev/null;
     iptables -A NETWORK_STATS -i $pubIf -o eth0 > /dev/null;
     iptables -A NETWORK_STATS -o $pubIf ! -i eth0 -p tcp > /dev/null;
     iptables -A NETWORK_STATS -i $pubIf ! -o eth0 -p tcp > /dev/null;
     "
  return $?
}

delete_public_interface () {
  local dRIp=$1
  local pubIf=$2
   ssh -q -p 3922 -o StrictHostKeyChecking=no -i $cert root@$dRIp "\
     echo $pubIf >> /root/removedVifs;
     "
  return $?
}

get_usage () {
  local dRIp=$1
   ssh -q -p 3922 -o StrictHostKeyChecking=no -i $cert root@$dRIp "\
     iptables -L NETWORK_STATS -n -v -x | awk '\$1 ~ /^[0-9]+\$/ { printf \"%s:\", \$2}';
     /root/clearUsageRules.sh > /dev/null;
     "
  if [ $? -gt 0  -a $? -ne 2 ]
  then
     printf $?
     return 1
  fi
}

reset_usage () {
  local dRIp=$1
   ssh -q -p 3922 -o StrictHostKeyChecking=no -i $cert root@$dRIp "\
     iptables -Z NETWORK_STATS > /dev/null;
     "
  if [ $? -gt 0  -a $? -ne 2 ]
  then
     return 1
  fi
}

#set -x

cflag=
gflag=
rflag=
iflag=
aflag=
dflag=

while getopts 'cgri:a:d:' OPTION
do
  case $OPTION in
  c)	cflag=1
		;;
  g)	gflag=1
		;;
  r)	rflag=1
		;;
  i)	iflag=1
		domRIp="$OPTARG"
		;;
  a)    aflag=1
                publicIf="$OPTARG"
               ;;
  d)    dflag=1
                publicIf="$OPTARG"
                ;;
  ?)	usage
		exit 2
		;;
  esac
done

# check if gateway domain is up and running
if ! check_gw "$domRIp"
then
   printf "Unable to ping the routing domain, exiting\n" >&2
   exit 3
fi


if [ "$cflag" == "1" ] 
then
  create_usage_rules $domRIp  
  exit $?
fi

if [ "$gflag" == "1" ] 
then
  get_usage $domRIp  
  exit $?
fi

if [ "$rflag" == "1" ] 
then
  reset_usage $domRIp  
  exit $?
fi

if [ "$aflag" == "1" ] 
then
  add_public_interface $domRIp $publicIf 
  exit $?
fi

if [ "$dflag" == "1" ] 
then
  delete_public_interface $domRIp $publicIf 
  exit $?
fi

exit 0