Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
k3s
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Registry
Registry
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Jacklull
k3s
Commits
7e661012
Commit
7e661012
authored
Jul 26, 2018
by
hangaoshuai
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
refactor some hard code in pkg/util/ipset/ipset.go
parent
9e0c4a60
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
52 additions
and
56 deletions
+52
-56
ipset.go
pkg/util/ipset/ipset.go
+52
-56
No files found.
pkg/util/ipset/ipset.go
View file @
7e661012
...
@@ -52,7 +52,7 @@ type Interface interface {
...
@@ -52,7 +52,7 @@ type Interface interface {
GetVersion
()
(
string
,
error
)
GetVersion
()
(
string
,
error
)
}
}
// IPSetCmd represents the ipset util.
We use ipset command for ipset execute.
// IPSetCmd represents the ipset util. We use ipset command for ipset execute.
const
IPSetCmd
=
"ipset"
const
IPSetCmd
=
"ipset"
// EntryMemberPattern is the regular expression pattern of ipset member list.
// EntryMemberPattern is the regular expression pattern of ipset member list.
...
@@ -72,7 +72,7 @@ var EntryMemberPattern = "(?m)^(.*\n)*Members:\n"
...
@@ -72,7 +72,7 @@ var EntryMemberPattern = "(?m)^(.*\n)*Members:\n"
// ipset version output is similar to "v6.10".
// ipset version output is similar to "v6.10".
var
VersionPattern
=
"v[0-9]+
\\
.[0-9]+"
var
VersionPattern
=
"v[0-9]+
\\
.[0-9]+"
// IPSet implements an Interface to a
n
set.
// IPSet implements an Interface to a set.
type
IPSet
struct
{
type
IPSet
struct
{
// Name is the set name.
// Name is the set name.
Name
string
Name
string
...
@@ -123,6 +123,28 @@ func (set *IPSet) Validate() bool {
...
@@ -123,6 +123,28 @@ func (set *IPSet) Validate() bool {
return
true
return
true
}
}
//setIPSetDefaults sets some IPSet fields if not present to their default values.
func
(
set
*
IPSet
)
setIPSetDefaults
()
{
// Setting default values if not present
if
set
.
HashSize
==
0
{
set
.
HashSize
=
1024
}
if
set
.
MaxElem
==
0
{
set
.
MaxElem
=
65536
}
// Default protocol is IPv4
if
set
.
HashFamily
==
""
{
set
.
HashFamily
=
ProtocolFamilyIPV4
}
// Default ipset type is "hash:ip,port"
if
len
(
set
.
SetType
)
==
0
{
set
.
SetType
=
HashIPPort
}
if
len
(
set
.
PortRange
)
==
0
{
set
.
PortRange
=
DefaultPortRange
}
}
// Entry represents a ipset entry.
// Entry represents a ipset entry.
type
Entry
struct
{
type
Entry
struct
{
// IP is the entry's IP. The IP address protocol corresponds to the HashFamily of IPSet.
// IP is the entry's IP. The IP address protocol corresponds to the HashFamily of IPSet.
...
@@ -150,31 +172,13 @@ func (e *Entry) Validate(set *IPSet) bool {
...
@@ -150,31 +172,13 @@ func (e *Entry) Validate(set *IPSet) bool {
}
}
switch
e
.
SetType
{
switch
e
.
SetType
{
case
HashIPPort
:
case
HashIPPort
:
// set default protocol to tcp if empty
//check if IP and Protocol of Entry is valid.
if
len
(
e
.
Protocol
)
==
0
{
if
valid
:=
e
.
checkIPandProtocol
(
set
);
!
valid
{
e
.
Protocol
=
ProtocolTCP
}
if
net
.
ParseIP
(
e
.
IP
)
==
nil
{
glog
.
Errorf
(
"Error parsing entry %v ip address %v for ipset %v"
,
e
,
e
.
IP
,
set
)
return
false
}
if
valid
:=
validateProtocol
(
e
.
Protocol
);
!
valid
{
return
false
return
false
}
}
case
HashIPPortIP
:
case
HashIPPortIP
:
// set default protocol to tcp if empty
//check if IP and Protocol of Entry is valid.
if
len
(
e
.
Protocol
)
==
0
{
if
valid
:=
e
.
checkIPandProtocol
(
set
);
!
valid
{
e
.
Protocol
=
ProtocolTCP
}
if
net
.
ParseIP
(
e
.
IP
)
==
nil
{
glog
.
Errorf
(
"Error parsing entry %v ip address %v for ipset %v"
,
e
,
e
.
IP
,
set
)
return
false
}
if
valid
:=
validateProtocol
(
e
.
Protocol
);
!
valid
{
return
false
return
false
}
}
...
@@ -184,23 +188,14 @@ func (e *Entry) Validate(set *IPSet) bool {
...
@@ -184,23 +188,14 @@ func (e *Entry) Validate(set *IPSet) bool {
return
false
return
false
}
}
case
HashIPPortNet
:
case
HashIPPortNet
:
// set default protocol to tcp if empty
//check if IP and Protocol of Entry is valid.
if
len
(
e
.
Protocol
)
==
0
{
if
valid
:=
e
.
checkIPandProtocol
(
set
);
!
valid
{
e
.
Protocol
=
ProtocolTCP
}
if
net
.
ParseIP
(
e
.
IP
)
==
nil
{
glog
.
Errorf
(
"Error parsing entry %v ip address %v for ipset %v"
,
e
,
e
.
IP
,
set
)
return
false
}
if
valid
:=
validateProtocol
(
e
.
Protocol
);
!
valid
{
return
false
return
false
}
}
// Net can not be empty for `hash:ip,port,net` type ip set
// Net can not be empty for `hash:ip,port,net` type ip set
if
_
,
ipNet
,
_
:=
net
.
ParseCIDR
(
e
.
Net
);
ipNet
==
nil
{
if
_
,
ipNet
,
err
:=
net
.
ParseCIDR
(
e
.
Net
);
ipNet
==
nil
{
glog
.
Errorf
(
"Error parsing entry %v ip net %v for ipset %v
"
,
e
,
e
.
Net
,
set
)
glog
.
Errorf
(
"Error parsing entry %v ip net %v for ipset %v
, error: %v"
,
e
,
e
.
Net
,
set
,
err
)
return
false
return
false
}
}
case
BitmapPort
:
case
BitmapPort
:
...
@@ -246,6 +241,23 @@ func (e *Entry) String() string {
...
@@ -246,6 +241,23 @@ func (e *Entry) String() string {
return
""
return
""
}
}
// checkIPandProtocol checks if IP and Protocol of Entry is valid.
func
(
e
*
Entry
)
checkIPandProtocol
(
set
*
IPSet
)
bool
{
// set default protocol to tcp if empty
if
len
(
e
.
Protocol
)
==
0
{
e
.
Protocol
=
ProtocolTCP
}
else
if
!
validateProtocol
(
e
.
Protocol
)
{
return
false
}
if
net
.
ParseIP
(
e
.
IP
)
==
nil
{
glog
.
Errorf
(
"Error parsing entry %v ip address %v for ipset %v"
,
e
,
e
.
IP
,
set
)
return
false
}
return
true
}
type
runner
struct
{
type
runner
struct
{
exec
utilexec
.
Interface
exec
utilexec
.
Interface
}
}
...
@@ -257,26 +269,10 @@ func New(exec utilexec.Interface) Interface {
...
@@ -257,26 +269,10 @@ func New(exec utilexec.Interface) Interface {
}
}
}
}
// CreateSet creates a new set,
it will ignore error when the set already exists if ignoreExistErr=true.
// CreateSet creates a new set, it will ignore error when the set already exists if ignoreExistErr=true.
func
(
runner
*
runner
)
CreateSet
(
set
*
IPSet
,
ignoreExistErr
bool
)
error
{
func
(
runner
*
runner
)
CreateSet
(
set
*
IPSet
,
ignoreExistErr
bool
)
error
{
// Setting default values if not present
// sets some IPSet fields if not present to their default values.
if
set
.
HashSize
==
0
{
set
.
setIPSetDefaults
()
set
.
HashSize
=
1024
}
if
set
.
MaxElem
==
0
{
set
.
MaxElem
=
65536
}
// Default protocol is IPv4
if
set
.
HashFamily
==
""
{
set
.
HashFamily
=
ProtocolFamilyIPV4
}
// Default ipset type is "hash:ip,port"
if
len
(
set
.
SetType
)
==
0
{
set
.
SetType
=
HashIPPort
}
if
len
(
set
.
PortRange
)
==
0
{
set
.
PortRange
=
DefaultPortRange
}
// Validate ipset before creating
// Validate ipset before creating
valid
:=
set
.
Validate
()
valid
:=
set
.
Validate
()
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment