libipt_CLUSTERIP.c revision 37963e0e357b31b6378cc711a7ca54dad5f7f921
1/* Shared library add-on to iptables to add CLUSTERIP target support. 2 * (C) 2003 by Harald Welte <laforge@gnumonks.org> 3 * 4 * Development of this code was funded by SuSE AG, http://www.suse.com/ 5 */ 6#include <stdio.h> 7#include <string.h> 8#include <stdlib.h> 9#include <getopt.h> 10 11#if defined(__GLIBC__) && __GLIBC__ == 2 12#include <net/ethernet.h> 13#else 14#include <linux/if_ether.h> 15#endif 16 17#include <iptables.h> 18#include <linux/netfilter_ipv4/ip_tables.h> 19#include <linux/netfilter_ipv4/ipt_CLUSTERIP.h> 20 21static void 22help(void) 23{ 24 printf( 25"CLUSTERIP target v%s options:\n" 26" --new Create a new ClusterIP\n" 27" --hashmode <mode> Specify hashing mode\n" 28" sourceip\n" 29" sourceip-sourceport\n" 30" sourceip-sourceport-destport\n" 31" --clustermac <mac> Set clusterIP MAC address\n" 32" --total-nodes <num> Set number of total nodes in cluster\n" 33" --local-node <num> Set the local node number\n" 34" --hash-init\n" 35"\n", 36IPTABLES_VERSION); 37} 38 39static struct option opts[] = { 40 { "new", 0, 0, '1' }, 41 { "hashmode", 1, 0, '2' }, 42 { "clustermac", 1, 0, '3' }, 43 { "total-nodes", 1, 0, '4' }, 44 { "local-node", 1, 0, '5' }, 45 { 0 } 46}; 47 48static void 49init(struct ipt_entry_target *t, unsigned int *nfcache) 50{ 51} 52 53static void 54parse_mac(const char *mac, char *macbuf) 55{ 56 unsigned int i = 0; 57 58 if (strlen(mac) != ETH_ALEN*3-1) 59 exit_error(PARAMETER_PROBLEM, "Bad mac address `%s'", mac); 60 61 for (i = 0; i < ETH_ALEN; i++) { 62 long number; 63 char *end; 64 65 number = strtol(mac + i*3, &end, 16); 66 67 if (end == mac + i*3 + 2 68 && number >= 0 69 && number <= 255) 70 macbuf[i] = number; 71 else 72 exit_error(PARAMETER_PROBLEM, 73 "Bad mac address `%s'", mac); 74 } 75} 76 77#define PARAM_NEW 0x0001 78#define PARAM_HMODE 0x0002 79#define PARAM_MAC 0x0004 80#define PARAM_TOTALNODE 0x0008 81#define PARAM_LOCALNODE 0x0010 82 83static int 84parse(int c, char **argv, int invert, unsigned int *flags, 85 const struct ipt_entry *entry, 86 struct ipt_entry_target **target) 87{ 88 struct ipt_clusterip_tgt_info *cipinfo 89 = (struct ipt_clusterip_tgt_info *)(*target)->data; 90 91 switch (c) { 92 unsigned int num; 93 case '1': 94 cipinfo->flags |= CLUSTERIP_FLAG_NEW; 95 if (*flags & PARAM_NEW) 96 exit_error(PARAMETER_PROBLEM, "Can only specify `--new' once\n"); 97 *flags |= PARAM_NEW; 98 break; 99 case '2': 100 if (!(*flags & PARAM_NEW)) 101 exit_error(PARAMETER_PROBLEM, "Can only specify hashmode combined with `--new'\n"); 102 if (*flags & PARAM_HMODE) 103 exit_error(PARAMETER_PROBLEM, "Can only specify hashmode once\n"); 104 if (!strcmp(optarg, "sourceip")) 105 cipinfo->hash_mode = CLUSTERIP_HASHMODE_SIP; 106 else if (!strcmp(optarg, "sourceip-sourceport")) 107 cipinfo->hash_mode = CLUSTERIP_HASHMODE_SIP_SPT; 108 else if (!strcmp(optarg, "sourceip-sourceport-destport")) 109 cipinfo->hash_mode = CLUSTERIP_HASHMODE_SIP_SPT_DPT; 110 else 111 exit_error(PARAMETER_PROBLEM, "Unknown hashmode `%s'\n", 112 optarg); 113 *flags |= PARAM_HMODE; 114 break; 115 case '3': 116 if (!(*flags & PARAM_NEW)) 117 exit_error(PARAMETER_PROBLEM, "Can only specify MAC combined with `--new'\n"); 118 if (*flags & PARAM_MAC) 119 exit_error(PARAMETER_PROBLEM, "Can only specify MAC once\n"); 120 parse_mac(optarg, cipinfo->clustermac); 121 if (!(cipinfo->clustermac[0] & 0x01)) 122 exit_error(PARAMETER_PROBLEM, "MAC has to be a multicast ethernet address\n"); 123 *flags |= PARAM_MAC; 124 break; 125 case '4': 126 if (!(*flags & PARAM_NEW)) 127 exit_error(PARAMETER_PROBLEM, "Can only specify node number combined with `--new'\n"); 128 if (*flags & PARAM_TOTALNODE) 129 exit_error(PARAMETER_PROBLEM, "Can only specify total node number once\n"); 130 if (string_to_number(optarg, 1, CLUSTERIP_MAX_NODES, &num) < 0) 131 exit_error(PARAMETER_PROBLEM, "Unable to parse `%s'\n", optarg); 132 cipinfo->num_total_nodes = (u_int16_t)num; 133 *flags |= PARAM_TOTALNODE; 134 break; 135 case '5': 136 if (!(*flags & PARAM_NEW)) 137 exit_error(PARAMETER_PROBLEM, "Can only specify node number combined with `--new'\n"); 138 if (*flags & PARAM_LOCALNODE) 139 exit_error(PARAMETER_PROBLEM, "Can only specify local node number once\n"); 140 if (string_to_number(optarg, 1, CLUSTERIP_MAX_NODES, &num) < 0) 141 exit_error(PARAMETER_PROBLEM, "Unable to parse `%s'\n", optarg); 142 cipinfo->num_local_nodes = 1; 143 cipinfo->local_nodes[0] = (u_int16_t)num; 144 *flags |= PARAM_LOCALNODE; 145 break; 146 default: 147 return 0; 148 } 149 150 return 1; 151} 152 153static void 154final_check(unsigned int flags) 155{ 156 if (flags == 0) 157 return; 158 159 if (flags == (PARAM_NEW|PARAM_HMODE|PARAM_MAC|PARAM_TOTALNODE|PARAM_LOCALNODE)) 160 return; 161 162 exit_error(PARAMETER_PROBLEM, "CLUSTERIP target: Invalid parameter combination\n"); 163} 164 165static char *hashmode2str(enum clusterip_hashmode mode) 166{ 167 char *retstr; 168 switch (mode) { 169 case CLUSTERIP_HASHMODE_SIP: 170 retstr = "sourceip"; 171 break; 172 case CLUSTERIP_HASHMODE_SIP_SPT: 173 retstr = "sourceip-sourceport"; 174 break; 175 case CLUSTERIP_HASHMODE_SIP_SPT_DPT: 176 retstr = "sourceip-sourceport-destport"; 177 break; 178 default: 179 retstr = "unknown-error"; 180 break; 181 } 182 return retstr; 183} 184 185static char *mac2str(const u_int8_t mac[ETH_ALEN]) 186{ 187 static char buf[ETH_ALEN*3]; 188 sprintf(buf, "%02X:%02X:%02X:%02X:%02X:%02X", 189 mac[0], mac[1], mac[2], mac[3], mac[4], mac[5]); 190 return buf; 191} 192 193 194/* Prints out the targinfo. */ 195static void 196print(const struct ipt_ip *ip, 197 const struct ipt_entry_target *target, 198 int numeric) 199{ 200 const struct ipt_clusterip_tgt_info *cipinfo = 201 (const struct ipt_clusterip_tgt_info *)target->data; 202 203 if (!cipinfo->flags & CLUSTERIP_FLAG_NEW) { 204 printf("CLUSTERIP"); 205 return; 206 } 207 208 printf("CLUSTERIP hashmode=%s clustermac=%s total_nodes=%u local_node=%u ", 209 hashmode2str(cipinfo->hash_mode), 210 mac2str(cipinfo->clustermac), 211 cipinfo->num_total_nodes, 212 cipinfo->local_nodes[0]); 213} 214 215/* Saves the union ipt_targinfo in parsable form to stdout. */ 216static void 217save(const struct ipt_ip *ip, const struct ipt_entry_target *target) 218{ 219 /* 220 const struct ipt_connmark_target_info *markinfo = 221 (const struct ipt_connmark_target_info *)target->data; 222 223 switch (markinfo->mode) { 224 case IPT_CONNMARK_SET: 225 printf("--set-mark 0x%lx ", markinfo->mark); 226 break; 227 case IPT_CONNMARK_SAVE: 228 printf("--save-mark "); 229 break; 230 case IPT_CONNMARK_RESTORE: 231 printf("--restore-mark "); 232 break; 233 default: 234 printf("ERROR: UNKNOWN CONNMARK MODE "); 235 break; 236 } 237 */ 238} 239 240static struct iptables_target clusterip = { 241 .next = NULL, 242 .name = "CLUSTERIP", 243 .version = IPTABLES_VERSION, 244 .size = IPT_ALIGN(sizeof(struct ipt_clusterip_tgt_info)), 245 .userspacesize = IPT_ALIGN(sizeof(struct ipt_clusterip_tgt_info)), 246 .help = &help, 247 .init = &init, 248 .parse = &parse, 249 .final_check = &final_check, 250 .print = &print, 251 .save = &save, 252 .extra_opts = opts 253}; 254 255void _init(void) 256{ 257 register_target(&clusterip); 258} 259