mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
149 lines
3.8 KiB
Bash
Executable File
149 lines
3.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# modifyvxlan.sh -- Managed VXLAN devices and Bridges on Linux KVM hypervisor
|
|
|
|
usage() {
|
|
echo "Usage: $0: -o <op>(add | delete) -v <vxlan id> -p <pif> -b <bridge name> (-6)"
|
|
}
|
|
|
|
multicastGroup() {
|
|
local VNI=$1
|
|
local FAMILY=$2
|
|
if [[ -z "$FAMILY" || $FAMILY == "inet" ]]; then
|
|
echo "239.$(( (${VNI} >> 16) % 256 )).$(( (${VNI} >> 8) % 256 )).$(( ${VNI} % 256 ))"
|
|
fi
|
|
|
|
if [[ "$FAMILY" == "inet6" ]]; then
|
|
echo "ff05::$(( (${VNI} >> 16) % 256 )):$(( (${VNI} >> 8) % 256 )):$(( ${VNI} % 256 ))"
|
|
fi
|
|
}
|
|
|
|
addVxlan() {
|
|
local VNI=$1
|
|
local PIF=$2
|
|
local VXLAN_BR=$3
|
|
local FAMILY=$4
|
|
local VXLAN_DEV=vxlan${VNI}
|
|
local GROUP=$(multicastGroup ${VNI} ${FAMILY})
|
|
|
|
echo "multicast ${GROUP} for VNI ${VNI} on ${PIF}"
|
|
|
|
if [[ ! -d /sys/class/net/${VXLAN_DEV} ]]; then
|
|
ip -f ${FAMILY} link add ${VXLAN_DEV} type vxlan id ${VNI} group ${GROUP} ttl 10 dev ${PIF}
|
|
ip link set ${VXLAN_DEV} up
|
|
ip -f ${FAMILY} route add ${GROUP} dev ${PIF}
|
|
sysctl -qw net.ipv6.conf.${VXLAN_DEV}.disable_ipv6=1
|
|
fi
|
|
|
|
if [[ ! -d /sys/class/net/$VXLAN_BR ]]; then
|
|
ip link add name ${VXLAN_BR} type bridge
|
|
ip link set ${VXLAN_BR} up
|
|
sysctl -qw net.ipv6.conf.${VXLAN_BR}.disable_ipv6=1
|
|
fi
|
|
|
|
bridge link show|grep ${VXLAN_BR}|awk '{print $2}'|grep "^${VXLAN_DEV}\$" > /dev/null
|
|
if [[ $? -gt 0 ]]; then
|
|
ip link set ${VXLAN_DEV} master ${VXLAN_BR}
|
|
fi
|
|
}
|
|
|
|
deleteVxlan() {
|
|
local VNI=$1
|
|
local PIF=$2
|
|
local VXLAN_BR=$3
|
|
local FAMILY=$4
|
|
local VXLAN_DEV=vxlan${VNI}
|
|
local GROUP=$(multicastGroup ${VNI} ${FAMILY})
|
|
|
|
ip -f ${FAMILY} route del ${GROUP} dev ${PIF}
|
|
|
|
ip link set ${VXLAN_DEV} nomaster
|
|
ip link delete ${VXLAN_DEV}
|
|
|
|
ip link set ${VXLAN_BR} down
|
|
ip link delete ${VXLAN_BR} type bridge
|
|
}
|
|
|
|
OP=
|
|
VNI=
|
|
FAMILY=inet
|
|
option=$@
|
|
|
|
while getopts 'o:v:p:b:6' OPTION
|
|
do
|
|
case $OPTION in
|
|
o) oflag=1
|
|
OP="$OPTARG"
|
|
;;
|
|
v) vflag=1
|
|
VNI="$OPTARG"
|
|
;;
|
|
p) pflag=1
|
|
PIF="$OPTARG"
|
|
;;
|
|
b) bflag=1
|
|
BRNAME="$OPTARG"
|
|
;;
|
|
6)
|
|
FAMILY=inet6
|
|
;;
|
|
?) usage
|
|
exit 2
|
|
;;
|
|
esac
|
|
done
|
|
|
|
if [[ "$oflag$vflag$pflag$bflag" != "1111" ]]; then
|
|
usage
|
|
exit 2
|
|
fi
|
|
|
|
lsmod|grep ^vxlan >& /dev/null
|
|
if [[ $? -gt 0 ]]; then
|
|
modprobe=`modprobe vxlan 2>&1`
|
|
if [[ $? -gt 0 ]]; then
|
|
echo "Failed to load vxlan kernel module: $modprobe"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
|
|
#
|
|
# Add a lockfile to prevent this script from running twice on the same host
|
|
# this can cause a race condition
|
|
#
|
|
|
|
LOCKFILE=/var/run/cloud/vxlan.lock
|
|
|
|
# ensures that parent directories exists and prepares the lock file
|
|
mkdir -p "${LOCKFILE%/*}"
|
|
|
|
(
|
|
flock -x -w 10 200 || exit 1
|
|
if [[ "$OP" == "add" ]]; then
|
|
addVxlan ${VNI} ${PIF} ${BRNAME} ${FAMILY}
|
|
|
|
if [[ $? -gt 0 ]]; then
|
|
exit 1
|
|
fi
|
|
elif [[ "$OP" == "delete" ]]; then
|
|
deleteVxlan ${VNI} ${PIF} ${BRNAME} ${FAMILY}
|
|
fi
|
|
) 200>${LOCKFILE}
|