mirror of
https://github.com/apache/cloudstack.git
synced 2025-11-04 00:02:37 +01:00
131 lines
2.9 KiB
Bash
Executable File
131 lines
2.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Copyright 2012 Citrix Systems, Inc. Licensed under the
|
|
# Apache License, Version 2.0 (the "License"); you may not use this
|
|
# file except in compliance with the License. Citrix Systems, Inc.
|
|
# reserves all rights not expressly granted by the License.
|
|
# You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
# Automatically generated by addcopyright.py at 04/03/2012
|
|
# @VERSION@
|
|
|
|
source /root/func.sh
|
|
source /opt/cloud/bin/vpc_func.sh
|
|
lock="biglock"
|
|
locked=$(getLockFile $lock)
|
|
if [ "$locked" != "1" ]
|
|
then
|
|
exit 1
|
|
fi
|
|
|
|
usage() {
|
|
printf "Usage: %s: -a < routes > \n" $(basename $0) >&2
|
|
}
|
|
|
|
#set -x
|
|
|
|
flush_table_backup() {
|
|
flush_table "static_route_back"
|
|
}
|
|
|
|
flush_table() {
|
|
local tab=$1
|
|
sudo ip route flush table $tab
|
|
}
|
|
|
|
copy_table() {
|
|
local from=$1
|
|
local to=$2
|
|
sudo ip route show table $from | while read route
|
|
do
|
|
sudo ip route add table $to $route
|
|
done
|
|
}
|
|
|
|
backup_table() {
|
|
flush_table "static_route_back"
|
|
copy_table "static_route" "static_route_back"
|
|
flush_table "static_route"
|
|
}
|
|
|
|
restore_table() {
|
|
flush_table "static_route"
|
|
copy_table "static_route_back" "static_route"
|
|
flush_table "static_route_back"
|
|
}
|
|
|
|
static_route() {
|
|
local rule=$1
|
|
local ip=$(echo $rule | cut -d: -f1)
|
|
if [ $ip == "Revoke" ]
|
|
then
|
|
return 0
|
|
fi
|
|
local gateway=$(echo $rule | cut -d: -f2)
|
|
local cidr=$(echo $rule | cut -d: -f3)
|
|
logger -t cloud "$(basename $0): static route: public ip=$ip \
|
|
gateway=$gateway cidr=$cidr"
|
|
local dev=$(getEthByIp $ip)
|
|
if [ $? -gt 0 ]
|
|
then
|
|
return 1
|
|
fi
|
|
sudo ip route add $cidr dev $dev via $gateway table static_route &>/dev/null
|
|
result=$?
|
|
logger -t cloud "$(basename $0): done static route: public ip=$ip \
|
|
gateway=$gateway cidr=$cidr"
|
|
return $result
|
|
}
|
|
|
|
gflag=
|
|
aflag=
|
|
while getopts 'a:' OPTION
|
|
|
|
do
|
|
case $OPTION in
|
|
a) aflag=1
|
|
rules="$OPTARG"
|
|
;;
|
|
?) usage
|
|
unlock_exit 2 $lock $locked
|
|
;;
|
|
esac
|
|
done
|
|
|
|
if [ -n "$rules" ]
|
|
then
|
|
rules_list=$(echo $rules | cut -d, -f1- --output-delimiter=" ")
|
|
fi
|
|
|
|
success=0
|
|
|
|
backup_table
|
|
|
|
for r in $rules_list
|
|
do
|
|
static_route $r
|
|
success=$?
|
|
if [ $success -gt 0 ]
|
|
then
|
|
logger -t cloud "$(basename $0): failure to apply fw rules for guest network: $gcidr"
|
|
break
|
|
else
|
|
logger -t cloud "$(basename $0): successful in applying fw rules for guest network: $gcidr"
|
|
fi
|
|
done
|
|
|
|
if [ $success -gt 0 ]
|
|
then
|
|
logger -t cloud "$(basename $0): restoring from backup for guest network: $gcidr"
|
|
restore_table
|
|
else
|
|
logger -t cloud "$(basename $0): deleting backup for guest network: $gcidr"
|
|
flush_table_backup
|
|
fi
|
|
unlock_exit $success $lock $locked
|
|
|