Why Gemfury?
Push, build, and install
RubyGems
npm packages
Python packages
Maven artifacts
PHP packages
Go Modules
Debian packages
RPM packages
NuGet packages
trilio-internal
trilio-internal / idna python
Repository URL to install this package:
|
Version:
2.5 ▾
|
ó
±EYc @ s" d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z d d l
m Z d d l
m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l Z d d l Z d d
l m Z d d l m Z m Z m Z d d l m Z d d
l m Z d d l m! Z" d d l m! Z! e j# e$ Z% e j& j' Z' d Z( e( Z) d e* f d YZ+ d e* f d YZ, d e* f d YZ- d d Z. d Z/ d Z0 d Z1 d Z2 e3 d Z4 e3 d Z5 d Z6 d Z7 d Z8 d! Z9 d" Z: d# Z; d$ Z< d% Z= d& Z> d' Z? d( Z@ e! jA d) d* eB d+ ZC d, ZD d- ZE d. ZF d/ ZG d0 ZH d1 ZI d2 ZJ d3 ZK d4 ZL d5 ZM d6 ZN d7 ZO e! jA d8 d9 ZP e! jA d: d; ZQ d< ZR d= ZS d> ZT d? ZU eV eV d@ ZW dA ZX dB ZY dC ZZ dD Z[ dE Z\ dF Z] dG Z^ eV dH Z_ eV dI Z` dJ Za eV dK Zb eV eV dL Zc eB dM Zd dN Ze dO Zf eV dP Zg dQ Zh dR Zi dS Zj dT Zk eV al dU Zm eB dV Zn dW Zo dX Zp dY e* f dZ YZq d[ eq f d\ YZr d] Zs e! jA d^ d* eB d_ d` Zt e! jA d^ d* eB d_ da Zu db Zv dc Zw dd Zx de eq f df YZy dg eq f dh YZz e- Z{ di dj Z| d S(k sD Implements vlans, bridges, and iptables rules using linux utilities.iÿÿÿÿN( t processutils( t log( t jsonutils( t excutils( t fileutils( t importutils( t timeutils( t exception( t _t _LEt _LW( t model( t objects( t utilsc C s" t j j t j d d d S( s- Grab the name of the binary we're running in.iÿÿÿÿi i ( t ost patht basenamet inspectt stack( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt get_binary_name7 s t IptablesRulec B s8 e Z d Z e e d Z d Z d Z d Z RS( sr An iptables rule.
You shouldn't need to use this class directly, it's only used by
IptablesManager.
c C s( | | _ | | _ | | _ | | _ d S( N( t chaint rulet wrapt top( t selfR R R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt __init__F s c C sF | j | j k oE | j | j k oE | j | j k oE | j | j k S( N( R R R R ( R t other( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt __eq__L s c C s | | k S( N( ( R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt __ne__R s c C s9 | j r d t | j f } n | j } d | | j f S( Ns %s-%ss [0:0] -A %s %s( R t binary_nameR R ( R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt __repr__U s ( t __name__t
__module__t __doc__t Truet FalseR R R R ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR > s
t
IptablesTablec B sw e Z d Z d Z e d Z e d Z e d Z e e d Z d Z
e e d Z d Z e d Z
RS(
s An iptables table.c C sC g | _ g | _ t | _ t | _ t | _ t | _ d S( N( t rulest remove_rulest sett chainst unwrapped_chainst
remove_chainsR# t dirty( R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR a s c C s$ | r | | j k S| | j k Sd S( N( R) R* ( R t nameR ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt has_chaini s
c C s6 | r | j j | n | j j | t | _ d S( s¸ Adds a named chain to the table.
The chain name is wrapped to be unique for the component creating
it, so different components of Nova can safely create identically
named chains without interfering with one another.
At the moment, its wrapped name is <binary name>-<chain name>,
so if nova-compute creates a chain named 'OUTPUT', it'll actually
end up named 'nova-compute-OUTPUT'.
N( R) t addR* R# R, ( R R- R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt add_chaino s c C sp | r | j } n | j } | | k rA t j t d | d St | _ | sc | j j | n | j | | s | j
g | j D] } | j | k r | ^ q 7_
n g | j D] } | j | k r· | ^ q· | _ | rô d t
| f } n
d | f } | s>| j
g | j D] } | | j k r| ^ q7_
n g | j D] } | | j k rH| ^ qH| _ d S( s× Remove named chain.
This removal "cascades". All rule in the chain are removed, as are
all rules in other chains that jump to it.
If the chain is not found, this is merely logged.
s1 Attempted to remove chain %s which does not existNs -j %s-%ss -j %s( R) R* t LOGt warningR
R# R, R+ R/ t removeR' R& R R R ( R R- R t chain_sett rt jump_snippet( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt remove_chain s*
7.
c C sÕ | r. | | j k r. t t d | n d | k ra d j t | j | j d } n t | | | | } | | j k r© t j
d i | d 6| j d 6 n( | j j t | | | | t | _
d S( s= Add a rule to the table.
This is just like what you'd feed to iptables, just without
the '-A <chain name>' bit at the start.
However, if you need to jump to one of your wrapped chains,
prepend its name with a '$' which will ensure the wrapping
is applied correctly.
s Unknown chain: %rt $t sH Skipping duplicate iptables rule addition. %(rule)r already in %(rules)rR R& N( R) t
ValueErrorR t joint mapt _wrap_target_chaint splitR R& R1 t debugt appendR# R, ( R R R R R t rule_obj( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt add_rule¨ s ' c C s% | j d r! d t | d f S| S( NR8 s %s-%si ( t
startswithR ( R t s( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR= Â s c C s yT | j j t | | | | | sJ | j j t | | | | n t | _ WnC t k
r t j t
d i | d 6| d 6| d 6| d 6 n Xd S( sÎ Remove a rule from a chain.
Note: The rule must be exactly identical to the one that was added.
You cannot switch arguments around like you can with the iptables
CLI tool.
sL Tried to remove rule that was not there: %(chain)r %(rule)r %(wrap)r %(top)rR R R R N( R& R3 R R' R@ R# R, R: R1 R2 R
( R R R R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt remove_ruleÇ s "
c C s t | t j r$ t j | } n t | j } g | j D]! } | j t | s= | ^ q= | _ | t | j } | d k r t | _
n | S( s Remove all rules matching regex.i ( t
isinstancet sixt string_typest ret compilet lenR& t matcht strR# R, ( R t regext num_rulesR5 t removed( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt remove_rules_regexÚ s 4 c C sq g | j D]* } | j | k r
| j | k r
| ^ q
} | rL t | _ n x | D] } | j j | qS Wd S( s Remove all rules from a chain.N( R& R R R# R, R3 ( R R R R t
chained_rules( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt empty_chainå s *
( R R! R" R R# R. R0 R7 R$ RB R= RE RQ RS ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR% ^ s ' t IptablesManagerc B sn e Z d Z d d Z d Z d Z d Z d Z e j
d d e d Z d Z
d
Z RS( s Wrapper for iptables.
See IptablesTable for some usage docs
A number of chains are set up to begin with.
First, nova-filter-top. It's added at the top of FORWARD and OUTPUT. Its
name is not wrapped, so it's shared between the various nova workers. It's
intended for rules that need to live at the top of the FORWARD and OUTPUT
chains. It's in both the ipv4 and ipv6 set of tables.
For ipv4 and ipv6, the built-in INPUT, OUTPUT, and FORWARD filter chains
are wrapped, meaning that the "real" INPUT chain has a rule that jumps to
the wrapped INPUT chain, etc. Additionally, there's a wrapped chain named
"local" which is jumped to from nova-filter-top.
For ipv4, the built-in PREROUTING, OUTPUT, and POSTROUTING nat chains are
wrapped in the same was as the built-in filter chains. Additionally,
there's a snat chain that is applied after the POSTROUTING chain.
c C s | s t | _ n | | _ i t d 6t d 6t d 6| _ i t d 6| _ t | _ x | j | j g D] } | d j d d t | d j d d d t d t | d j d d d t d t | d j d
| d j d d d t qq Wi i d d d g d 6d
d d g d 6d g d 6d 6i d d d g d 6d 6} x¥ | D] } | d k rp| j } n | d k r| j } n xd t
j | | D]O \ } } x@ | D]8 } | | j | | | j | d | f d t q¯WqWqRW| j d j d d t | j d j d d d t | j d j d | j d j d d d t | j d j d | j d j d d d S( Nt filtert natt mangles nova-filter-topR t FORWARDs -j nova-filter-topR t OUTPUTt locals -j $localt INPUTt
PREROUTINGt POSTROUTINGi i s -j $%ss nova-postrouting-bottoms -j nova-postrouting-bottomt snats -j $snats
float-snats -j $float-snat( t _executet executeR% t ipv4t ipv6R$ t iptables_apply_deferredR0 RB R# RG t iteritems( R R` t tablest builtin_chainst
ip_versiont tableR) R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR sN
c C s
t | _ d S( N( R# Rc ( R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt defer_apply_onE s c C s t | _ | j d S( N( R$ Rc t apply( R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt defer_apply_offH s c C sd x' t j | j D] } | j r t Sq Wt j r` x* t j | j D] } | j rF t SqF Wn t S( N( RG t
itervaluesRa R, R# t CONFt use_ipv6Rb R$ ( R Rh ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR, L s c C s7 | j r
d S| j r& | j n
t j d d S( Ns' Skipping apply due to lack of new rules( Rc R, t _applyR1 R? ( R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRj V s
t iptablest externalc
C s, d | j f g } t j r4 | d | j f g 7} n xä | D]Ü \ } } | j d | f d d t d d \ } } | j d } xa t j | D]P \ } } | j | | \ } }
| j
| | |
!| | | | |
+t | _ q W| j d | f d d t d
d j
| d d q; Wt j d d S(
s Apply the current in-memory set of iptables rules.
This will blow away any rules left over from previous runs of the
same component of Nova, and replace them with our current set of
rules. This happens atomically, thanks to iptables-restore.
Rp t ip6tabless %s-saves -ct run_as_roott attemptsi s
s
%s-restoret
process_inputs, IPTablesManager.apply completed with successN( Ra Rm Rn Rb R` R# R> RG Rd t _find_tablet
_modify_rulesR$ R, R; R1 R? ( R RD t cmdRe t
all_tablest _errt all_linest
table_nameRh t startt end( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRo ^ s"
c C sk t | d k r d Sy | j d | d } Wn t k
rE d SX| | j d | d } | | f S( Ni i s *%si t COMMITi ( i i ( i i ( RK t indexR: ( R t linesR| R} R~ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRv z s
c sU | j } t | j } | j | j } | j | sX d d | d d g } | } n g | D] } t | k r_ | ^ q_ } g }
g } t j rt j
t j } g | D] } | j | r« | ^ q« }
x? |
D]7 } g | D]$ } | j | j k rà | ^ qà } qÓ W|
}
n t j
r¥t j
t j
} g | D] } | j | r9| ^ q9}
x? |
D]7 } g | D]$ } | j | j k rn| ^ qn} qaW|
} n t } d } xN t | D]@ \ } } | së| j d rþt } qþq¾| j d s¾Pq¾q¾W| sd } n |
} g } x| D]ý } t | } | j r| j d rg| j d d
d
} n g | D]$ } | j | j k rn| ^ qn} g | D]$ } | j | j k r| ^ q} | rît | d } t | } n t | } | j | | g 7} q$| | g 7} q$W| | 7} t | } | | | | +g | D] } d | f ^ qO| | | +g | D] } d
t | f ^ qv| | | +| j d } | | | | +t f d } f d } t | } | j t | | } t | | } t | } | j j x D] } j | q:W| S( Ns #Generated by novat *R s #Completed by novai t :i t [t ]i iÿÿÿÿs :%s - [0:0]s :%s-%s - [0:0]c sY | j d r( | j d d d } n | j } | k rD t S j | t Sd S( NR R
i ( RC R> t stripR$ R/ R# ( t line( t
seen_lines( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _weed_out_duplicatesé s
c s | j d rr | j d d } | j d d } | j } x¾ D]# } | | k rH j | t SqH Wn | j d r| j d d d } | j } x\ D]Q } t | } | j d d d } | j } | | k rª j | t Sqª Wn t S( NR i s - [i R R
R9 ( RC R> R R3 R$ RM R# ( R R R t rule_str( R+ R' ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _weed_out_removesô s&
( R* t sortedR) R+ R& R' R Rm t iptables_top_regexRI RJ t searchR t iptables_bottom_regexR$ t enumerateRC R# RM R R> t listR R( t reverseRU t clearR3 ( R t
current_linesRh R| R* R) R& t
fake_tableR t
new_filtert top_rulest bottom_rulesRN t temp_filterR RD t seen_chainst rules_indexR t our_rulest bot_rulest
dup_filtert dupR- t commit_indexR R ( ( R+ R' R sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRw s
(
( (
(
$
$
$'
N( R R! R" t NoneR Ri Rk R, Rj R
t synchronizedR# Ro Rv Rw ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRT ï s ?
t wc C s) t | | } | j | Wd QXd S( N( t opent write( t filet datat modet f( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt
write_to_file% s c C sL y3 t d | } | j } | | k SWd QXWn t k
rG t SXd S( së Ensure that the cmdline for a pid seems sane
Because pids are recycled, blindly killing by pid is something to
avoid. This provides the ability to include a substring that is
expected in the cmdline as a safety check.
s /proc/%d/cmdlineN( R¤ t readt EnvironmentErrorR$ ( t pidRL R© t cmdline( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt is_pid_cmdline_correct* s
c C se t j d k r9 t j d j d d t j t j f n t j d j d d t j t j d S( s$ Create forwarding rule for metadata.s 127.0.0.1RV R\ sZ -s 0.0.0.0/0 -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination %s:%ssU -s 0.0.0.0/0 -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports %sN( Rm t
metadata_hostt iptables_managerRa RB t
metadata_portRj ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt metadata_forward9 s c C s@ t j | j d k r$ | d k s0 | d k r4 d Sd | Sd S( Ni s 127.0.0.1s ::1s -m addrtype --dst-type LOCALs -d %s( t netaddrt IPAddresst version( t ip( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _iptables_destK s $ c C sv d t j t t j f } t j t j j d k rQ t j d j d | n t j
d j d | t j d S( s+ Create the filter accept rule for metadata.s% -p tcp -m tcp --dport %s %s -j ACCEPTi RU R[ N( Rm R² R¸ R° R´ Rµ R¶ R± Ra RB Rb Rj ( R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt metadata_acceptS s c C s© t j r¥ | r- t j r$ t j } q6 g } n d g } x_ | D]W } d | | t j f } | r} t j r} | d t j 7} n t j d j d | q= Wt j n d S( Ns 0.0.0.0/0s" -s %s -d %s -j SNAT --to-source %ss -o %sRV R^ ( Rm t routing_source_ipt force_snat_ranget public_interfaceR± Ra RB Rj ( t ip_ranget is_externalt
snat_ranget
dest_rangeR ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt
add_snat_rulea s
c C sæ t | | g } | rG x+ t j D] } | j d | | f q# Wn | r] t | d n t j d j d d | t j f x2 t j D]' } t j d j d d | | f q Wt j d j d d i | d 6 t j
d S( s! Basic networking setup goes here.sO PREROUTING -p ipv4 --ip-src %s --ip-dst %s -j redirect --redirect-target ACCEPTRV R] s -s %s -d %s/32 -j ACCEPTs -s %s -d %s -j ACCEPTsA -s %(range)s -d %(range)s -m conntrack ! --ctstate DNAT -j ACCEPTt rangeN( RÁ Rm R» R@ t ensure_ebtables_rulesR± Ra RB R° t dmz_cidrRj ( R½ R¾ R& R¿ t dmz( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt init_hosts s&
c
C sV t d d | d d | d t | d t d t \ } } | rR t j d | n d S( Nt arpings -Us -As -Is -cRs t check_exit_codes arping error for IP %s( R_ RM R# R$ R1 R? ( R· t devicet countt outt err( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt send_arp_for_ip s c
C sj t d d d t | d d | d t d d d d
g t j rf t j d k rf t | | t j n d S( s Bind IP to public interface.R· t addrR/ s /32t devRs RÈ i i iþ N( R_ RM R# Rm t send_arp_for_hat send_arp_for_ha_countRÍ ( t floating_ipRÉ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt bind_floating_ip s
c
C s< t d d d t | d d | d t d d d d
g d S( s) Unbind a public IP from public interface.R· RÎ t dels /32RÏ Rs RÈ i i iþ N( R_ RM R# ( RÒ RÉ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt unbind_floating_ip¨ s c C s8 t d d d d d d d d d t d
d d d
g d S( s Sets up local metadata IP.R· RÎ R/ s 169.254.169.254/32t scopet linkRÏ t loRs RÈ i i iþ N( R_ R# ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt ensure_metadata_ip¯ s c C sq t j d j d d | t j d j d d | | | f t j d j d d | | | f t j d S( s" Sets up forwarding rules for vlan.RU RX s# -d %s -p udp --dport 1194 -j ACCEPTRV R\ s, -d %s -p udp --dport %s -j DNAT --to %s:1194RY N( R± Ra RB Rj ( t public_ipt portt
private_ip( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt ensure_vpn_forward¶ s c C sÁ d | } t j d j | } | rS t d } t j | i | d 6| d 6 n x7 t | | | D]# \ } } t j d j | | qf Wt j | | d k r½ t t
| | n d S( s# Ensure floating IP forwarding rule.s .*\s+%s(/32|\s+|$)RV s9 Removed %(num)d duplicate rules for floating IP %(float)st numt floatt bridgeN( R± Ra RQ R
R1 R2 t floating_forward_rulesRB Rj RÃ t floating_ebtables_rules( RÒ t fixed_ipRÉ t networkRN RO t msgR R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt ensure_floating_forwardÇ s
!
c C sn x7 t | | | D]# \ } } t j d j | | q Wt j | | d k rj t t | | n d S( s" Remove forwarding for floating IP.RV Rà N( Rá R± Ra RE Rj t remove_ebtables_rulesRâ ( RÒ Rã RÉ Rä R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt remove_floating_forwardÖ s
c C s" d | d | | d f g d f S( s. Makes sure only in-network traffic is bridged.sa PREROUTING --logical-in %s -p ipv4 --ip-src %s ! --ip-dst %s -j redirect --redirect-target ACCEPTRà t cidrRV ( ( Rã Rä ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRâ ß s c C sà g } d | | f } | rU | j d | d | f | j d | d | f n | j d | f | j d d | | f f | j d d | | f f | j d d | | f f | S(
Ns -s %s -j SNAT --to %ss
float-snats -d %ss -o %sR\ s -d %s -j DNAT --to %sRY R] s8 -s %s -m conntrack --ctstate DNAT -j SNAT --to-source %s( R@ ( RÒ Rã RÉ R& R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRá æ s c
C sZ y) t d d d | d t d d d g Wn* t j k
rU t j t d | n Xd S( Nt conntracks -Ds -rRs RÈ i i s' Error deleting conntrack entries for %s( R_ R# R t ProcessExecutionErrorR1 R R ( Rã ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt clean_conntrackø s
c C sQ d } t d d | \ } } | j d k rM t d d d | d t n d S( Ns net.ipv4.ip_forwardt sysctls -nt 1s -ws %s=1Rs ( R_ R R# ( t
sysctl_keyt stdoutt stderr( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _enable_ipv4_forwarding s t lock_gatewayRq c
C s | s
d St y | j j } Wn( t k
rK | d j d d } n Xd | d | f } | d | d g g } g } t d d d
d | d d
\ } } x | j d D]
} | j } | r° | d d k r° | d d! k rø | d d !}
n
| d d !}
| j |
|
d | k r5| j |
q5q° q° W| sT| d d | k rÉg } t d d d
d | } | rò| \ } } xk | j d D]W } | j } | rd | k r| j | t d d d | d d | d t qqWn x9 | D]1 }
t d t d d d d g t d |
| qùWx9 | D]1 }
t d t d d d d g t d |
| q5Wx' | D] } t d d d d t | qqWt
j rÉt
j d k rÉt
| d | t
j qÉn t
j rþt d d d d d | d d | d t n d S(" NRé t /i s %s/%st dhcp_servert brdt broadcastR· RÎ t showRÏ RÖ t globals
i t inetiþÿÿÿt secondaryt dynamici iÿÿÿÿt routet viaRÔ Rs RÈ iþ R/ s -ft inet6t changet cidr_v6( s secondarys dynamic( Rò Ré t prefixlent AttributeErrort
rpartitionR_ R> R@ R# t _ip_bridge_cmdRm RÐ RÑ RÍ Rn (
RÏ t network_reft prefixt full_ipt
new_ip_paramst
old_ip_paramsRË RÌ R t fieldst ip_paramst
old_routest result( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt initialize_gateway_device s`
)
)
c C st g } d } | d r" t j } n xB t j j | | d | D]% } | j r> | j t | q> q> Wd j | S( s< Return a network's hosts config in dnsmasq leasefile format.t
multi_hostt hosts
N(
R¡ Rm R R t FixedIPListt get_by_networkt leasedR@ t _host_leaseR; ( t contextR t hostsR t fixedip( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt get_dhcp_leasesB s
c C st g } t } xU | D]M } | j r | j j | k rc | j t | | j | j j qc q q Wd j | S( s/ Get network's hosts config in dhcp-host format.s
( R( t allocatedt virtual_interfacet addressR@ t
_host_dhcpR/ R; ( R R t fixedipsR t macsR ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt get_dhcp_hostsS s
c C sR g } x< t j j | | D]% } | j r | j t | q q Wd j | S( s( Get network's DNS hosts in hosts format.s
( R R R R R@ t _host_dnsR; ( R R R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt
get_dns_hosts_ s
c C sx t j d } xZ d d g D]L } xC d d g D]5 } i | d 6| d 6| d 6} | j d d
| q- Wq Wt j d S( s. Allow DHCP and DNS traffic through to dnsmasq.RU iC i5 t udpt tcpRÏ RÛ t protoR[ s? -i %(dev)s -p %(proto)s -m %(proto)s --dport %(port)s -j ACCEPTN( R± Ra RB Rj ( RÏ Rh RÛ R% t args( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _add_dnsmasq_accept_rulesh s
c C sx t j d } xZ d d g D]L } xC d d g D]5 } i | d 6| d 6| d 6} | j d d
| q- Wq Wt j d S( s7 Remove DHCP and DNS traffic allowed through to dnsmasq.RU iC i5 R# R$ RÏ RÛ R% R[ s? -i %(dev)s -p %(proto)s -m %(proto)s --dport %(port)s -j ACCEPTN( R± Ra RE Rj ( RÏ Rh RÛ R% R& ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _remove_dnsmasq_accept_rulest s
c C s/ t j d } | j d d | t j d S( NRW R] s: -o %s -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill( R± Ra RB Rj ( RÏ Rh ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _add_dhcp_mangle_rule s
c C s/ t j d } | j d d | t j d S( NRW R] s: -o %s -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill( R± Ra RE Rj ( RÏ Rh ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _remove_dhcp_mangle_rule s
c C sÅ | d } | d r5 | d p$ t j r5 | d } n g } t j r¢ xq | D]P } | j rK | j } | j r
| j t | | q | j t | qK qK Wn | j t d | d j | S( s/ Get network's hosts config in dhcp-opts format.t gatewayR t
share_addressRõ s
N(
Rm t share_dhcp_addresst use_single_default_gatewayR t virtual_interface_idt
default_routeR@ t _host_dhcp_optsR¡ R; ( R R R R+ R R t vif_id( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt
get_dhcp_opts s
c C sb t | r^ y t j d | | | d t Wq^ t j k
rZ t j d | d | q^ Xn d S( Nt dhcp_releaseRs R t mac_address( t
device_existsR
R` R# R Rë R t NetworkDhcpReleaseFailed( RÏ R R5 ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt release_dhcp© s c C sv t | d } d } | d r+ t j } n t j j | | d | } t | t | | | t | | | | d S( Nt confR R (
t
_dhcp_fileR¡ Rm R R R R Rª R t restart_dhcp( R RÏ R t conffileR R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt update_dhcp³ s
c C ss t | d } d } | d r+ t j } n t j j | | d | } t | t | | t | | | | d S( NR R R (
R: R¡ Rm R R R R Rª R" R; ( R RÏ R t hostsfileR R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt
update_dns¿ s
c C s t | } | ri t | d } t | | j d d rV t d d | d t qi t j d | n t | t | d S( NR9 Rô iÿÿÿÿt kills -9Rs s% Pid %d is stale, skip killing dnsmasq(
t _dnsmasq_pid_forR: R¯ R> R_ R# R1 R? R( R* ( RÏ R R< ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt kill_dhcpË s
t
dnsmasq_startc C sÅ t | d } t | d } t | t | | | t j | d t | t j | d t | } | rù t | | j d d ræ y( t d d | d t
t | d SWqö t k
râ } t
j t d
| qö Xqù t
j d | n d d
t j t j d t | d d d d d t j d t | d d t | d d | d d d | d | d | d t j f d t t j | d d t | d d! t j d" d# g } t j rã| j d$ t j n t j } t j rH| j d% r | j | j d% n | j d& rH| j | j d& qHn | d' ro| j d( t | d) n | r
| j d* n x | D] }
| j d+ |
qWt d t
| t | d S(, sµ (Re)starts a dnsmasq server for a given network.
If a dnsmasq instance is already running then send a HUP
signal causing it to reload, otherwise spawn a new instance.
R9 t optsi¤ Rô iÿÿÿÿR@ s -HUPRs Ns kill -HUP dnsmasq threw %ss$ Pid %d is stale, relaunching dnsmasqt envs CONFIG_FILE=%ss
NETWORK_ID=%st idt dnsmasqs --strict-orders --bind-interfacess --conf-file=%ss
--pid-file=%sR s --dhcp-optsfile=%ss --listen-address=%sRõ s --except-interface=los$ --dhcp-range=set:%s,%s,static,%s,%sst labelt
dhcp_startt netmasks --dhcp-lease-max=%sRé s --dhcp-hostsfile=%ss --dhcp-script=%ss
--no-hostss --leasefile-ros --domain=%st dns1t dns2R s --addn-hosts=%sR s --no-resolvs --server=%s(! R: Rª R3 R t chmodR) RA R¯ R> R_ R# R' t ExceptionR1 t errorR R? R t dumpsRm t dhcpbridge_flagfileRM t dnsmasq_config_filet dhcp_lease_timeRK R´ t IPNetworkt
dhcpbridget dhcp_domainR@ t
dns_servert use_network_dns_serverst get( R RÏ R R R< t optsfileR t excRx t dns_serversRW ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR; Û sj
t radvd_startc C sý t | d } d | | d f } t | | t j | d t | } | rº t | | r§ y t d | d t Wq· t k
r£ } t j
t d | q· Xqº t j d | n d d
d t | d d d t | d
g } t d t | d S( NR9 s¡
interface %s
{
AdvSendAdvert on;
MinRtrAdvInterval 3;
MaxRtrAdvInterval 10;
prefix %s
{
AdvOnLink on;
AdvAutonomous on;
};
};
R i¤ R@ Rs s killing radvd threw %ss" Pid %d is stale, relaunching radvdt radvds -Cs %ss -pR (
t _ra_fileRª R RM t _ra_pid_forR¯ R_ R# RN R1 RO R R? ( R RÏ R R< t conf_strR R[ Rx ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt update_ra) s
c C sQ t j } t j | j } d | t j | j j | j | j j
pL d f S( s8 Return a host string for an address in leasefile format.s
%d %s %s %s *R ( R t utcnowt calendart timegmt utctimetupleRm RS R R t instancet hostname( R t timestampt seconds_since_epoch( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR Q s
c C s d | S( Ns NW-%s( ( R2 ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _host_dhcp_network[ s c C s¸ | j j } t | d k rY t j t d | | j j d d | j j d } n t j r t | j } d | j
j | t j | j | f Sd | j
j | t j | j f Sd S( s8 Return a host string for an address in dhcp-host format.i? s! hostname %s too long, truncating.i t -iÄÿÿÿs %s,%s.%s,%s,net:%ss %s,%s.%s,%sN(
Rg Rh RK R1 R2 R
Rm R. Rk R/ R R RV ( R Rh t net( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR _ s c C s d | j | j j t j f S( Ns %s %s.%s( R Rg Rh Rm RV ( R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR! w s c C s\ g } | d k r( | j t | n | j d | rO | j d | n d j | S( s Return an empty gateway option.t 3s %st ,N( R¡ R@ Rk R; ( R2 R+ t values( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR1 } s
c O sC t j r/ t j d d j t t | d St j | | Sd S( s/ Wrapper around utils._execute for fake_network.s FAKE NET: %sR9 t fakei N( s fakei ( Rm t fake_networkR1 R? R; R< RM R
R` ( Rx t kwargs( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR_ s "c C s t j j d | S( s Check if ethernet device exists.s /sys/class/net/%s( R R t exists( RÉ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR6 s c C s0 t j t j t j j d t j | | f S( sE Return path to a pid, leases, hosts or conf file for a bridge/device.s
%s/nova-%s.%s( R t ensure_treeRm t
networks_pathR R t abspath( RÏ t kind( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR: s c C s0 t j t j t j j d t j | | f S( s6 Return path to a pid or conf file for a bridge/device.s %s/nova-ra-%s.%s( R Ru Rm Rv R R Rw ( RÏ Rx ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR_ s c C so t | d } t j j | rk y, t | d } t | j SWd QXWqk t t f k
rg d SXn d S( s¹ Returns the pid for prior dnsmasq instance for a bridge/device.
Returns None if no pid file exists.
If machine has rebooted pid might be incorrect (caller should check).
R R5 N(
R: R R Rt R¤ t intR« R: t IOErrorR¡ ( RÏ t pid_fileR© ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRA § s c C sP t | d } t j j | rL t | d } t | j SWd QXn d S( s· Returns the pid for prior radvd instance for a bridge/device.
Returns None if no pid file exists.
If machine has rebooted pid might be incorrect (caller should check).
R R5 N( R_ R R Rt R¤ Ry R« ( RÏ R{ R© ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR` ¹ s c C s3 d d | g } | j | | j d | g | S( s1 Build commands to add/del IPs to bridges/devices.R· RÎ RÏ ( t extend( t actiont paramsRÉ Rx ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR È s
c
C s> | r: t j d d d | d | d t d d d d g n d
S( s Set the device MTU.R· R× R( t mtuRs RÈ i i iþ N( R
R` R# ( RÏ R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _set_device_mtuÐ s c C sµ x | | g D] } t | q
Wt j d d d | d d d d | d t xb | | g D]T } t j d d d | d
d t t j d d d | d d d t t | | qY Wd
S( sp Create a pair of veth devices with the specified names,
deleting any previous devices with those names.
R· R× R/ t typet vetht peerR- Rs R( t upt promisct onN( t delete_net_devR
R` R# R ( t dev1_namet dev2_nameR RÏ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _create_veth_pairØ s c C s~ d d t j g | } y t j d t | SWnI t k
ry } t j t d i | d 6| d 6 t j
d | n Xd S( Ns ovs-vsctls --timeout=%sRs s3 Unable to execute %(cmd)s. Exception: %(exception)sRx R t inner_exception( Rm t ovs_vsctl_timeoutR
R` R# RN R1 RO R R t OvsConfigurationFailure( R& t full_argst e( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt
_ovs_vsctlè s c C s` d d d | d d | | d d d | d | d d | d
| g } | r\ | d | g 7} n | S( Ns --s --if-existss del-ports add-portR( t Interfaces external-ids:iface-id=%ss external-ids:iface-status=actives external-ids:attached-mac=%ss external-ids:vm-uuid=%ss type=%s( ( Rà RÏ t iface_idt mact instance_idt interface_typeRx ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _create_ovs_vif_cmdò s
c C s` t t | | | | | | | t j k r> t | | n t j d i | d 6| d 6 d S( NsG MTU not set on %(interface_name)s interface of type %(interface_type)s.t interface_nameR ( R R t
network_modelt OVS_VHOSTUSER_INTERFACE_TYPER R1 R? ( Rà RÏ R R R R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt create_ovs_vif_port s
c C s0 t d d d | | g | r, t | n d S( Ns --s --if-existss del-port( R R ( Rà RÏ t
delete_dev( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt delete_ovs_vif_port s c C s t j d d | d t d S( Ns ivs-ctls add-portRs ( R
R` R# ( RÏ R R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt create_ivs_vif_port s c C s9 t j d d | d t t j d d d | d t d S( Ns ivs-ctls del-portRs R· R× t delete( R
R` R# ( RÏ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt delete_ivs_vif_port s c
C sã t | sß y5 t j d d d | d d d t d d d d
g Wn0 t j k
rs t j d d d
| d t n X| r® t j d d d | d | d t d d d d
g n t j d d d | d d t d d d d
g n d S( NR· t tuntapR/ R¨ t tapRs RÈ i i iþ t tunctls -bs -tR× R( R R ( R6 R
R` R# R Rë ( RÏ R5 ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt create_tap_dev" s c C sp t | sl t j d d | d | d | d t t | t j d d d | d d t d
d d d
g n d S( Ns fp-vdevR/ s
--sockpaths
--sockmodeRs R· R× R( R RÈ i i iþ ( R6 R
R` R# R ( RÏ t sockpatht sockmode( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt
create_fp_dev2 s
c C s, t | r( t j d d | d t n d S( Ns fp-vdevRÔ Rs ( R6 R
R` R# ( RÏ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt
delete_fp_dev; s c C s t | r y? t j d d d | d t d d d d g t j d | Wq t j k
r t j t j
t d
| Wd QXq Xn d S( s* Delete a network device only if it exists.R· R× R Rs RÈ i i iþ s Net device removed: '%s's Failed removing net device: '%s'N( R6 R
R` R# R1 R? R Rë R t save_and_reraise_exceptionRO R ( RÏ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR @ s
c C s t | r y< t j d d d | d d t t j d d | d t Wq t j k
r t j t j t
d | Wd QXq Xn d S(
s Delete a network bridge.R· R× R( t downRs t brctlt delbrs# Failed removing bridge device: '%s'N( R6 R
R` R# R Rë R R¨ R1 RO R ( RÏ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt delete_bridge_devL s
c C s t s t j t j a n t S( N( t interface_driverR t
import_objectRm t linuxnet_interface_driver( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _get_interface_driver_ s c C s t j | | | S( N( R° t plug( Rä R5 R+ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR± g s c C s t j | S( N( R° t unplug( Rä ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR² k s c C s t j | S( N( R° t get_dev( Rä ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR³ o s t LinuxNetInterfaceDriverc B s) e Z d Z d Z d Z d Z RS( s^ Abstract class that defines generic network host API
for all Linux interface drivers.
c C s
t d S( s( Create Linux device, return device name.N( t NotImplementedError( R Rä R5 ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR± x s c C s
t d S( s) Destroy Linux device, return device name.N( Rµ ( R Rä ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR² | s c C s
t d S( s Get device name.N( Rµ ( R Rä ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR³ s ( R R! R" R± R² R³ ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR´ s s t LinuxBridgeInterfaceDriverc B sø e Z e d Z e d Z d Z e d d d d Z e d Z e e
j d d e d d d d Z e e
j d d e d Z
e e
j d d e d e e d
Z e e
j d d e e e d Z RS(
c C sÊ | j d } | d k rd t j p+ | d } t j | | d | | | | j d d | } n- t j pt | d } t j | d | | | | d s¤ t j r¸ t | | d n t
j | d S( Nt vlant bridge_interfaceRà R s vlan%sR, Rõ ( RY R¡ Rm t vlan_interfaceR¶ t ensure_vlan_bridget flat_interfacet
ensure_bridgeR- t isolate_dhcp_addressR± Rj ( R Rä R5 R+ R· t iface( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR± s(
c C s¡ | j d } | d k r< d | } t j | | d n' t j pL | d } t j | d | | d sv t j r t | | d n t j
| j | S( NR· s vlan%sRà R¸ R, Rõ ( RY R¡ R¶ t remove_vlan_bridgeRm R» t
remove_bridgeR- t remove_isolate_dhcp_addressR± Rj R³ ( R Rä R+ R· R¾ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR² ¡ s
c C s | d S( NRà ( ( R Rä ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR³ ² s c C s/ t j | | | | } t j | | | | S( s3 Create a vlan and bridge unless they already exist.( R¶ t ensure_vlanR¼ ( t vlan_numRà R¸ t net_attrsR5 R t interface( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRº µ s
c C s t j | t j | d S( s Delete a bridge and vlan.N( R¶ RÀ t remove_vlan( RÃ Rà ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR¿ À s
t lock_vlanRq c C sè | d k r d | } n t | s× t j d | t d d d d | d | d d d | d
t d d d
d g | r© t d d d | d | d
t d d d
d g n t d d d | d d
t d d d
d g n t | | | S( s' Create a vlan unless it already exists.s vlan%ss Starting VLAN interface %sR· R× R/ R- R R· RF Rs RÈ i i iþ R( R R N( R¡ R6 R1 R? R_ R# R ( RÃ R¸ R5 R RÅ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRÂ Æ s
c C s d | } t | d S( s Delete a vlan.s vlan%sN( R ( RÃ R¹ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRÆ à s
t lock_bridgec C sè t | sÉ t j d | t d d | d t d t \ } } | rx | d | k rx t d | } t j | n t d d | d d t t d d
| d d t t d d
d | d d t n | rgt j d i | d 6| d 6 t d d | | d t d t \ } } | rR| d | | f k rRt d | } t j | n t j
s¡t j | } | t j
d d } t d d
d | d | d t n t d d
d | d d t d t \ } } g }
t d d d d | \ } } x^ | j d D]M } | j } | rÿd | k rÿ|
j | t d d d d t | qÿqÿWt d d d d | d d \ } } xà | j d D]² } | j } | r| d d k r| d! d. k rÌ| d$ d! !}
n
| d$ d% !}
t d t d d d& d' g t d |
| d% t d t d d d& d' g t d( |
| qqWx* |
D] } t d d d( d t | qAWn | rät j d) } | r§x^ t | D] } | j | qWqä| j d* d+ | t j f | j d* d, | t j f n d- S(/ sÒ Create a bridge unless it already exists.
:param interface: the interface to create the bridge on.
:param net_attrs: dictionary with attributes used to create bridge.
:param gateway: whether or not the bridge is a gateway.
:param filtering: whether or not to create filters on the bridge.
If net_attrs is set, it will add the net_attrs['gateway'] to the bridge
using net_attrs['broadcast'] and net_attrs['cidr']. It will also add
the ip_v6 address specified in net_attrs['cidr_v6'] if use_ipv6 is set.
The code will attempt to move any IPs that already exist on the
interface onto the bridge and reset the default gateway if necessary.
s Starting Bridge %sRª t addbrRÈ Rs sA device %s already exists; can't create bridge with the same name
s Failed to add bridge: %st setfdi t stpt offR· R× R( R s3 Adding interface %(interface)s to bridge %(bridge)sRÅ Rà t addifsJ device %s is already a member of a bridge; can't enslave it to bridge %s.
s Failed to add interface: %sRÎ R Rý Rø RÏ s
Rþ RÔ RÖ Rù Rú iþÿÿÿRû Rü i iÿÿÿÿi iþ R/ RU RX s --in-interface %s -j %ss --out-interface %s -j %sN( s secondarys dynamic( R6 R1 R? R_ R$ R# R R t
NovaExceptionRm Rr t netifacest ifaddressest AF_LINKR> R@ R R± Ra t get_gateway_rulesRB t iptables_drop_action( Rà RÅ RÄ R+ t filteringRË RÌ Rå t interface_addrst
interface_macR
R R R~ t ipv4_filterR ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR¼ ç sz
),
c C sÑ t | s d S| rà t j d } | rP x t | D] } | j | q6 Wqà d g } t j d k r{ | j t j n xE | D]: } | j d d | | f | j d d | | f q Wn t | d S( s Delete a bridge.NRU t DROPRX s --in-interface %s -j %ss --out-interface %s -j %s( R6 R± Ra RÒ RE Rm RÓ R@ R¬ ( Rà R+ RÔ R× R t drop_actionst drop_action( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRÀ L s$
N( R R! R# R± R² R³ t staticmethodR¡ Rº R¿ R
R¢ RÂ RÆ R¼ RÀ ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR¶ s( !bc sK | j d t } d } t j } d } x | | k rFt j | } | d 7} y t d d g | | WnÕ t j k
r> t f d | D r | | k rÏ | rÏ t j
t d d j | q;t j
t d i d j | d 6| d
6 t
j | qC| r7t j
t d d j | qCd Sq* Xd Sq* Wd S( NRÈ s Multiple ebtables programsi i c 3 s | ] } | j k Vq d S( N( Rñ ( t .0RO ( R[ ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pys <genexpr> s s %s failed. Not Retrying.R9 s7 %(cmd)s failed. Sleeping %(time)s seconds before retry.Rx t time( s Multiple ebtables programs( t popR# Rm t ebtables_exec_attemptst ebtables_retry_intervalR_ R Rë t anyR1 R2 R
R; RÝ t sleep( Rx Rs RÈ t
retry_stringsRt RÊ Râ ( ( R[ sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt _exec_ebtablesr s,
t ebtablesRU c C sd x] | D]U } d d d | d g | j } t d t d t | d | d <t d t | q Wd S( NRå s --concurrents -ts -DRÈ Rs s -Ii ( R> Rä R$ R# ( R& Rh R Rx ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRÃ s
c C sJ xC | D]; } d d d | d g | j } t d t d t | q Wd S( NRå s --concurrents -ts -DRÈ Rs ( R> Rä R$ R# ( R& Rh R Rx ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRç ¨ s
c C sd g } | j d | | f | j d | | f | j d | | j d | t | d S( Ns* INPUT -p ARP -i %s --arp-ip-dst %s -j DROPs+ OUTPUT -p ARP -o %s --arp-ip-src %s -j DROPsK FORWARD -p IPv4 -i %s --ip-protocol udp --ip-destination-port 67:68 -j DROPsK FORWARD -p IPv4 -o %s --ip-protocol udp --ip-destination-port 67:68 -j DROP( R@ RÃ ( RÅ R R& ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR½ ¯ s c C sd g } | j d | | f | j d | | f | j d | | j d | t | d S( Ns* INPUT -p ARP -i %s --arp-ip-dst %s -j DROPs+ OUTPUT -p ARP -o %s --arp-ip-src %s -j DROPsK FORWARD -p IPv4 -i %s --ip-protocol udp --ip-destination-port 67:68 -j DROPsK FORWARD -p IPv4 -o %s --ip-protocol udp --ip-destination-port 67:68 -j DROP( R@ Rç ( RÅ R R& ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRÁ À s c C sñ t j } d | k r3 d d | f d d | f g Sg } xT t j D]I } | rC | j d d | | f f | j d d | | f f qC qC W| j d d | | f f | j d d | t j f f | j d d | t j f f | S( Nt allRX s -i %s -j ACCEPTs -o %s -j ACCEPTs -i %s -o %s -j ACCEPTs -i %s -j %ss -o %s -j %s( Rm t forward_bridge_interfaceR@ RÓ ( Rà t
interfacesR& R¾ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRÒ Ñ s"
t LinuxOVSInterfaceDriverc B s& e Z e d Z d Z d Z RS( c C s | j | } t | st j } t d d d | | d d d | d d d d | d | d d d | d d d d | d | g t d
d d | d | d
t t | | j d t d
d d | d d
t | sYt d d | d d
t t d d | d | d
t t j
d j d d | t j f t j
d j d d | t j f qx+ t
| D] } t j
d j | qfWn | S( Ns --s --may-exists add-portR( R s
type=internals external-ids:iface-id=%ss external-ids:iface-status=actives external-ids:attached-mac=%sR· R× R Rs R R s ovs-ofctls add-flows priority=1,actions=drops1 udp,tp_dst=67,dl_dst=%s,priority=2,actions=normalRU RX s --in-interface %s -j %ss --out-interface %s -j %s( R³ R6 Rm t linuxnet_ovs_integration_bridgeR R_ R# R RY R± Ra RB RÓ RÒ ( R Rä R5 R+ RÏ Rà R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR± è s> c C s5 | j | } t j } t d d d | | g | S( Ns --s --if-existss del-port( R³ Rm Rê R ( R Rä RÏ Rà ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR² s c C s d t | d d d ! } | S( Ns gw-t uuidi i ( RM ( R Rä RÏ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR³ s ( R R! R# R± R² R³ ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRé æ s & t! NeutronLinuxBridgeInterfaceDriverc B s; e Z d Z d Z e d Z d Z d Z d Z RS( t brqs gw-c
C sç | j | } | j | } | sp t j d j d d | t j f t j d j d d | t j f | Sx( t | D] } t j d j | q} Wt | | t | sãt
j d | t j
d d | d t t j
d d | t d
d t t j
d d | d d t t j
d
d d | d | d t d d
d d g t j
d
d d | d d t d d
d d g t
j d | d | d | d j d d f } t j
d
d d | d | d t d d
d d g n | S( NRU RX s --in-interface %s -j %ss --out-interface %s -j %ss Starting bridge %s Rª RÉ Rs RÊ i RË RÌ R· R× R( R RÈ i iþ R s Done starting bridge %ss %s/%sRõ Ré Rô R/ RÏ ( R³ t
get_bridgeR± Ra RB Rm RÓ RÒ R£ R6 R1 R? R
R` R# RM R ( R Rä R5 R+ RÏ Rà R R ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR± s8
"
c C s1 | j | } t | s d St | | Sd S( N( R³ R6 R¡ R ( R Rä RÏ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR² E s
c C s" | j t | d d d ! } | S( NRë i i ( t GATEWAY_INTERFACE_PREFIXRM ( R Rä RÏ ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyR³ M s c C s" | j t | d d d ! } | S( NRë i i ( t BRIDGE_NAME_PREFIXRM ( R Rä Rà ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRî Q s ( R R! Rð Rï R# R± R² R³ Rî ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyRì s & i c C s· t j | d t } t j | } t j | } d d d g } | d k rT d n d } t j d d d | d
| d | d | d
t d |
t j d d d | | d
t d | d S( Nt pf_interfacei i iþ R R© R· R× R( t vfR R· Rs RÈ ( t pci_utilst get_ifname_by_pci_addressR# t get_vf_num_by_pci_addressR
R` ( t pci_addrt mac_addrR· t pf_ifnamet vf_ifnamet vf_numt exit_codet
port_state( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt set_vf_interface_vlanY s (} R" Rd R R RI RÝ R´ RÏ t oslo_concurrencyR t oslo_logR t loggingt oslo_serializationR t
oslo_utilsR R R R RG t nova.conft novaR t nova.i18nR R R
t nova.networkR R R t nova.pciR
Ró t getLoggerR R1 R9 Rm R R t objectR R% RT Rª R¯ R³ R¸ R¹ R$ RÁ RÆ RÍ RÓ RÕ RÙ RÝ Ræ Rè Râ Rá Rì Rò R¢ R# R R R R" R' R( R) R* R3 R8 R= R? RB R; Rb R Rk R R! R¡ R1 R_ R6 R: R_ RA R` R R R R R R R R R R£ R¦ R§ R R¬ R R° R± R² R³ R´ R¶ Rä RÃ Rç R½ RÁ RÒ Ré Rì R± Rý ( ( ( sK /home/tvault/.virtenv/lib/python2.7/site-packages/nova/network/linux_net.pyt <module> sÖ ÿ 7 !
;
N(
ì - 4<