1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
|
#!/usr/bin/env python3
#
# Copyright (C) 2020 VyOS maintainers and contributors
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 or later as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
import os
from ipaddress import IPv4Address
from sys import exit
from vyos.config import Config
from vyos import ConfigError
from vyos.util import call, process_named_running
from vyos.template import render
from signal import SIGTERM
from vyos import airbag
airbag.enable()
# Required to use the full path to pimd, in another case daemon will not be started
pimd_cmd = f'/usr/lib/frr/pimd -d -F traditional --daemon -A 127.0.0.1'
config_file = r'/tmp/pimd.frr'
def get_config(config=None):
if config:
conf = config
else:
conf = Config()
pim_conf = {
'pim_conf' : False,
'igmp_conf' : False,
'igmp_proxy_conf' : False,
'old_pim' : {
'ifaces' : {},
'rp' : {}
},
'pim' : {
'ifaces' : {},
'rp' : {}
}
}
if not (conf.exists('protocols pim') or conf.exists_effective('protocols pim')):
return None
if conf.exists('protocols igmp-proxy'):
pim_conf['igmp_proxy_conf'] = True
if conf.exists('protocols igmp'):
pim_conf['igmp_conf'] = True
if conf.exists('protocols pim'):
pim_conf['pim_conf'] = True
conf.set_level('protocols pim')
# Get interfaces
for iface in conf.list_effective_nodes('interface'):
pim_conf['old_pim']['ifaces'].update({
iface : {
'hello' : conf.return_effective_value('interface {0} hello'.format(iface)),
'dr_prio' : conf.return_effective_value('interface {0} dr-priority'.format(iface))
}
})
for iface in conf.list_nodes('interface'):
pim_conf['pim']['ifaces'].update({
iface : {
'hello' : conf.return_value('interface {0} hello'.format(iface)),
'dr_prio' : conf.return_value('interface {0} dr-priority'.format(iface)),
}
})
conf.set_level('protocols pim rp')
# Get RPs addresses
for rp_addr in conf.list_effective_nodes('address'):
pim_conf['old_pim']['rp'][rp_addr] = conf.return_effective_values('address {0} group'.format(rp_addr))
for rp_addr in conf.list_nodes('address'):
pim_conf['pim']['rp'][rp_addr] = conf.return_values('address {0} group'.format(rp_addr))
# Get RP keep-alive-timer
if conf.exists_effective('rp keep-alive-timer'):
pim_conf['old_pim']['rp_keep_alive'] = conf.return_effective_value('rp keep-alive-timer')
if conf.exists('rp keep-alive-timer'):
pim_conf['pim']['rp_keep_alive'] = conf.return_value('rp keep-alive-timer')
return pim_conf
def verify(pim):
if pim is None:
return None
if pim['pim_conf']:
# Check conflict with IGMP-Proxy
if pim['igmp_proxy_conf']:
raise ConfigError(f"IGMP proxy and PIM cannot be both configured at the same time")
# Check interfaces
if not pim['pim']['ifaces']:
raise ConfigError(f"PIM require defined interfaces!")
if not pim['pim']['rp']:
raise ConfigError(f"RP address required")
# Check unique multicast groups
uniq_groups = []
for rp_addr in pim['pim']['rp']:
if not pim['pim']['rp'][rp_addr]:
raise ConfigError(f"Group should be specified for RP " + rp_addr)
for group in pim['pim']['rp'][rp_addr]:
if (group in uniq_groups):
raise ConfigError(f"Group range " + group + " specified cannot exact match another")
# Check, is this multicast group
gr_addr = group.split('/')
if IPv4Address(gr_addr[0]) < IPv4Address('224.0.0.0'):
raise ConfigError(group + " not a multicast group")
uniq_groups.extend(pim['pim']['rp'][rp_addr])
def generate(pim):
if pim is None:
return None
render(config_file, 'frr/pimd.frr.tmpl', pim)
return None
def apply(pim):
if pim is None:
return None
pim_pid = process_named_running('pimd')
if pim['igmp_conf'] or pim['pim_conf']:
if not pim_pid:
call(pimd_cmd)
if os.path.exists(config_file):
call("vtysh -d pimd -f " + config_file)
os.remove(config_file)
elif pim_pid:
os.kill(int(pim_pid), SIGTERM)
return None
if __name__ == '__main__':
try:
c = get_config()
verify(c)
generate(c)
apply(c)
except ConfigError as e:
print(e)
exit(1)
|
