holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Implement explicit provider routing

Browse Source
This commit is contained in:
Tom Eastep 2010-11-16 20:38:54 -08:00
parent 4ca1098e3e
commit 71eb783fcd
2 changed files with 75 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

70
Shorewall/Perl/Shorewall/Providers.pm
View File

@ -20,8 +20,8 @@
# along with this program; if not, write to the Free Software # along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
# This module deals with the /etc/shorewall/providers and # This module deals with the /etc/shorewall/providers,
# /etc/shorewall/route_rules files. # /etc/shorewall/route_rules and /etc/shorewall/routes files.
# #
package Shorewall::Providers; package Shorewall::Providers;
require Exporter; require Exporter;
@ -35,7 +35,7 @@ use strict;
our @ISA = qw(Exporter); our @ISA = qw(Exporter);
our @EXPORT = qw( setup_providers @routemarked_interfaces handle_stickiness handle_optional_interfaces ); our @EXPORT = qw( setup_providers @routemarked_interfaces handle_stickiness handle_optional_interfaces );
our @EXPORT_OK = qw( initialize lookup_provider ); our @EXPORT_OK = qw( initialize lookup_provider );
our $VERSION = '4.4_14'; our $VERSION = '4.4_15';
use constant { LOCAL_TABLE => 255, use constant { LOCAL_TABLE => 255,
MAIN_TABLE => 254, MAIN_TABLE => 254,
@ -641,6 +641,54 @@ sub add_an_rtrule( ) {
progress_message " Routing rule \"$currentline\" $done"; progress_message " Routing rule \"$currentline\" $done";
} }
sub add_a_route( ) {
my ( $provider, $dest, $gateway ) = split_line 2, 3, 'routes file';
our $current_if;
unless ( $providers{$provider} ) {
my $found = 0;
if ( "\L$provider" =~ /^(0x[a-f0-9]+|0[0-7]*|[0-9]*)$/ ) {
my $provider_number = numeric_value $provider;
for ( keys %providers ) {
if ( $providers{$_}{number} == $provider_number ) {
$provider = $_;
$found = 1;
last;
}
}
}
fatal_error "Unknown provider ($provider)" unless $found;
}
validate_net ( $dest, 1 );
validate_address ( $gateway, 1 ) if $gateway ne '-';
my ( $optional, $number , $physical ) = ( $providers{$provider}{optional} , $providers{$provider}{number}, $providers{$provider}{physical} );
if ( $providers{$provider}{optional} ) {
my $base = uc chain_base( $physical );
finish_current_if if $base ne $current_if;
start_new_if ( $base ) unless $current_if;
} else {
finish_current_if;
}
if ( $gateway ne '-' ) {
emit( "if ! qt \$IP route -4 add $dest via $gateway dev $physical table $number; then",
" run_ip route add $dest via $gateway table $number",
"fi" );
} else {
emit( "run_ip route add $dest dev $physical table $number" );
}
progress_message " Route \"$currentline\" $done";
}
# #
# This probably doesn't belong here but looking forward to the day when we get Shorewall out of the routing business, # This probably doesn't belong here but looking forward to the day when we get Shorewall out of the routing business,
# it makes sense to keep all of the routing code together # it makes sense to keep all of the routing code together
@ -773,7 +821,21 @@ sub setup_providers() {
if ( $providers ) { if ( $providers ) {
finish_providers; finish_providers;
my $fn = open_file 'route_rules'; my $fn = open_file 'routes';
if ( $fn ) {
our $current_if = '';
first_entry "$doing $fn...";
emit '';
add_a_route while read_a_line;
finish_current_if;
}
$fn = open_file 'route_rules';
if ( $fn ) { if ( $fn ) {
our $current_if = ''; our $current_if = '';

8
Shorewall/configfiles/routes Normal file
View File

@ -0,0 +1,8 @@
#
# Shorewall version 4 - routes File
#
# For information about entries in this file, type "man shorewall-routes"
#
# For additional information, see http://www.shorewall.net/MultiISP.html
##############################################################################
#PROVIDER DEST GATEWAY