VPC : create/destroy static route
Project: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/commit/ae579c4c Tree: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/tree/ae579c4c Diff: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/diff/ae579c4c Branch: refs/heads/vpc Commit: ae579c4cdd430685e2e7804fd3e659e39a24de26 Parents: 0d52ac2 Author: anthony <[email protected]> Authored: Thu Jul 26 14:17:01 2012 -0700 Committer: anthony <[email protected]> Committed: Fri Jul 27 15:04:42 2012 -0700 ---------------------------------------------------------------------- .../debian/config/opt/cloud/bin/vpc_staticroute.sh | 130 +++++++++++++++ 1 files changed, 130 insertions(+), 0 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/ae579c4c/patches/systemvm/debian/config/opt/cloud/bin/vpc_staticroute.sh ---------------------------------------------------------------------- diff --git a/patches/systemvm/debian/config/opt/cloud/bin/vpc_staticroute.sh b/patches/systemvm/debian/config/opt/cloud/bin/vpc_staticroute.sh new file mode 100755 index 0000000..542c0c6 --- /dev/null +++ b/patches/systemvm/debian/config/opt/cloud/bin/vpc_staticroute.sh @@ -0,0 +1,130 @@ +#!/usr/bin/env bash +# Copyright 2012 Citrix Systems, Inc. Licensed under the +# Apache License, Version 2.0 (the "License"); you may not use this +# file except in compliance with the License. Citrix Systems, Inc. +# reserves all rights not expressly granted by the License. +# You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +# Automatically generated by addcopyright.py at 04/03/2012 +# @VERSION@ + +source /root/func.sh +source /opt/cloud/bin/vpc_func.sh +lock="biglock" +locked=$(getLockFile $lock) +if [ "$locked" != "1" ] +then + exit 1 +fi + +usage() { + printf "Usage: %s: -a < routes > \n" $(basename $0) >&2 +} + +#set -x + +flush_table_backup() { + flush_table "static_route_back" +} + +flush_table() { + local tab=$1 + sudo ip route flush table $tab +} + +copy_table() { + local from=$1 + local to=$2 + sudo ip route show table $from | while read route + do + sudo ip route add table $to $route + done +} + +backup_table() { + flush_table "static_route_back" + copy_table "static_route" "static_route_back" + flush_table "static_route" +} + +restore_table() { + flush_table "static_route" + copy_table "static_route_back" "static_route" + flush_table "static_route_back" +} + +static_route() { + local rule=$1 + if [ "$rule" == "none" ] + then + return 0 + fi + local ip=$(echo $rule | cut -d: -f1) + local gateway=$(echo $rule | cut -d: -f2) + local cidr=$(echo $rule | cut -d: -f3) + logger -t cloud "$(basename $0): static route: public ip=$ip \ + gateway=$gateway cidr=$cidr" + local dev=$(getEthByIp $ip) + if [ $? -gt 0 ] + then + return 1 + fi + sudo ip route add $cidr dev $dev via $gateway table static_route &>/dev/null + result=$? + logger -t cloud "$(basename $0): done static route: public ip=$ip \ + gateway=$gateway cidr=$cidr" + return $result +} + +gflag= +aflag= +while getopts 'a:' OPTION + +do + case $OPTION in + a) aflag=1 + rules="$OPTARG" + ;; + ?) usage + unlock_exit 2 $lock $locked + ;; + esac +done + +if [ -n "$rules" ] +then + rules_list=$(echo $rules | cut -d, -f1- --output-delimiter=" ") +fi + +success=0 + +backup_table + +for r in $rules_list +do + static_route $r + success=$? + if [ $success -gt 0 ] + then + logger -t cloud "$(basename $0): failure to apply fw rules for guest network: $gcidr" + break + else + logger -t cloud "$(basename $0): successful in applying fw rules for guest network: $gcidr" + fi +done + +if [ $success -gt 0 ] +then + logger -t cloud "$(basename $0): restoring from backup for guest network: $gcidr" + restore_table +else + logger -t cloud "$(basename $0): deleting backup for guest network: $gcidr" + flush_table_backup +fi +unlock_exit $success $lock $locked +
