1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
#!/usr/bin/env python3
#
# Copyright VyOS maintainers and contributors <maintainers@vyos.io>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 or later as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
from sys import exit
from vyos import ConfigError
from vyos import airbag
from vyos.config import Config
from vyos.configdep import set_dependents
from vyos.configdep import call_dependents
from vyos.configdict import get_interface_dict
from vyos.configdict import is_vrf_changed
from vyos.configverify import verify_address
from vyos.configverify import verify_bridge_delete
from vyos.configverify import verify_vrf
from vyos.configverify import verify_mtu_ipv6
from vyos.ifconfig import VethIf
from vyos.utils.dict import dict_search
from vyos.utils.network import interface_exists
airbag.enable()
def get_config(config=None):
"""
Retrieve CLI config as dictionary. Dictionary can never be empty, as at
least the interface name will be added or a deleted flag
"""
if config:
conf = config
else:
conf = Config()
base = ['interfaces', 'virtual-ethernet']
ifname, veth = get_interface_dict(conf, base)
# We need to know all other veth related interfaces as veth requires a 1:1
# mapping for the peer-names. The Linux kernel automatically creates both
# interfaces, the local one and the peer-name, but VyOS also needs a peer
# interfaces configured on the CLI so we can assign proper IP addresses etc.
veth['other_interfaces'] = conf.get_config_dict(base, key_mangling=('-', '_'),
get_first_key=True, no_tag_node_value_mangle=True)
# Protocols static arp dependency
if 'static_arp' in veth:
set_dependents('static_arp', conf)
# Check vrf membership, to ensure firewall is updated
if is_vrf_changed(conf, ifname):
set_dependents('firewall', conf)
return veth
def verify(veth):
if 'deleted' in veth:
verify_bridge_delete(veth)
# Prevent to delete veth interface which used for another "vethX peer-name"
for iface, iface_config in veth['other_interfaces'].items():
if veth['ifname'] in iface_config['peer_name']:
ifname = veth['ifname']
raise ConfigError(
f'Cannot delete "{ifname}" used for "interface {iface} peer-name"'
)
return None
verify_vrf(veth)
verify_mtu_ipv6(veth)
verify_address(veth)
if 'peer_name' not in veth:
raise ConfigError(f'Remote peer name must be set for "{veth["ifname"]}"!')
peer_name = veth['peer_name']
ifname = veth['ifname']
if veth['peer_name'] not in veth['other_interfaces']:
raise ConfigError(f'Used peer-name "{peer_name}" on interface "{ifname}" ' \
'is not configured!')
if dict_search(f'other_interfaces.{peer_name}.peer_name', veth) != ifname:
raise ConfigError(
f'Configuration mismatch between "{ifname}" and "{peer_name}"!')
if peer_name == ifname:
raise ConfigError(
f'Peer-name "{peer_name}" cannot be the same as interface "{ifname}"!')
return None
def generate(peth):
return None
def apply(veth):
# Check if the Veth interface already exists
if 'rebuild_required' in veth or 'deleted' in veth:
if interface_exists(veth['ifname']):
p = VethIf(**veth)
p.remove()
if 'deleted' not in veth:
p = VethIf(**veth)
p.update(veth)
# run the dependents
call_dependents()
return None
if __name__ == '__main__':
try:
c = get_config()
verify(c)
generate(c)
apply(c)
except ConfigError as e:
print(e)
exit(1)
|
