mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
147 lines
3.1 KiB
Bash
147 lines
3.1 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
|
|
|
|
#
|
|
# Copyright (C) 2010 Cloud.com, Inc. All rights reserved.
|
|
#
|
|
# This software is licensed under the GNU General Public License v3 or later.
|
|
#
|
|
# It is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or any later version.
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
|
|
# netusage.sh -- create iptable rules to gather network stats, running within DomR
|
|
#
|
|
|
|
source /root/func.sh
|
|
|
|
lock="biglock"
|
|
locked=$(getLockFile $lock)
|
|
if [ "$locked" != "1" ]
|
|
then
|
|
exit 1
|
|
fi
|
|
|
|
usage() {
|
|
printf "Usage: %s -[c|g|r] [-[a|d] <public interface>]\n" $(basename $0) >&2
|
|
}
|
|
|
|
create_usage_rules () {
|
|
iptables -N NETWORK_STATS > /dev/null
|
|
iptables -I FORWARD -j NETWORK_STATS > /dev/null
|
|
iptables -I INPUT -j NETWORK_STATS > /dev/null
|
|
iptables -I OUTPUT -j NETWORK_STATS > /dev/null
|
|
iptables -A NETWORK_STATS -i eth0 -o eth2 > /dev/null
|
|
iptables -A NETWORK_STATS -i eth2 -o eth0 > /dev/null
|
|
iptables -A NETWORK_STATS -o eth2 ! -i eth0 -p tcp > /dev/null
|
|
iptables -A NETWORK_STATS -i eth2 ! -o eth0 -p tcp > /dev/null
|
|
return $?
|
|
}
|
|
|
|
add_public_interface () {
|
|
local pubIf=$1
|
|
iptables -A NETWORK_STATS -i eth0 -o $pubIf > /dev/null
|
|
iptables -A NETWORK_STATS -i $pubIf -o eth0 > /dev/null
|
|
iptables -A NETWORK_STATS -o $pubIf ! -i eth0 -p tcp > /dev/null
|
|
iptables -A NETWORK_STATS -i $pubIf ! -o eth0 -p tcp > /dev/null
|
|
return $?
|
|
}
|
|
|
|
delete_public_interface () {
|
|
local pubIf=$1
|
|
echo $pubIf >> /root/removedVifs
|
|
return $?
|
|
}
|
|
|
|
get_usage () {
|
|
iptables -L NETWORK_STATS -n -v -x | awk '$1 ~ /^[0-9]+$/ { printf "%s:", $2}'; > /dev/null
|
|
if [ -f /root/removedVifs ] ; then iptables -Z NETWORK_STATS ; fi; > /dev/null
|
|
/root/clearUsageRules.sh > /dev/null
|
|
if [ $? -gt 0 -a $? -ne 2 ]
|
|
then
|
|
printf $?
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
reset_usage () {
|
|
iptables -Z NETWORK_STATS > /dev/null
|
|
if [ $? -gt 0 -a $? -ne 2 ]
|
|
then
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
#set -x
|
|
|
|
cflag=
|
|
gflag=
|
|
rflag=
|
|
iflag=
|
|
aflag=
|
|
dflag=
|
|
|
|
while getopts 'cgra:d:' OPTION
|
|
do
|
|
case $OPTION in
|
|
c) cflag=1
|
|
;;
|
|
g) gflag=1
|
|
;;
|
|
r) rflag=1
|
|
;;
|
|
a) aflag=1
|
|
publicIf="$OPTARG"
|
|
;;
|
|
d) dflag=1
|
|
publicIf="$OPTARG"
|
|
;;
|
|
?) usage
|
|
unlock_exit 2 $lock $locked
|
|
;;
|
|
esac
|
|
done
|
|
|
|
if [ "$cflag" == "1" ]
|
|
then
|
|
create_usage_rules
|
|
unlock_exit $? $lock $locked
|
|
fi
|
|
|
|
if [ "$gflag" == "1" ]
|
|
then
|
|
get_usage
|
|
unlock_exit $? $lock $locked
|
|
fi
|
|
|
|
if [ "$rflag" == "1" ]
|
|
then
|
|
reset_usage
|
|
unlock_exit $? $lock $locked
|
|
fi
|
|
|
|
if [ "$aflag" == "1" ]
|
|
then
|
|
add_public_interface $publicIf
|
|
unlock_exit $? $lock $locked
|
|
fi
|
|
|
|
if [ "$dflag" == "1" ]
|
|
then
|
|
delete_public_interface $publicIf
|
|
unlock_exit $? $lock $locked
|
|
fi
|
|
|
|
unlock_exit 0 $lock $locked
|
|
|