Make versioning of IP protocols more modular.

[people/stevee/network.git] / hooks / zones / bridge.configs / ipv4-static

#!/bin/bash
###############################################################################
#                                                                             #
# IPFire.org - A linux based firewall                                         #
# Copyright (C) 2010  Michael Tremer & Christian Schmidt                      #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

. /lib/network/header-config

HOOK_SETTINGS="HOOK ADDRESS PREFIX GATEWAY"

function _check() {
	assert isset ADDRESS
	assert isinteger PREFIX

	if [ ${PREFIX} -gt 30 ]; then
		error "PREFIX is greater than 30."
		exit ${EXIT_ERROR}
	fi
}

function _create() {
	local zone=${1}
	shift

	while [ $# -gt 0 ]; do
		case "${1}" in
			--address=*)
				ADDRESS=${1#--address=}
				;;
			--netmask=*)
				NETMASK=${1#--netmask=}
				;;
			--prefix=*)
				PREFIX=${1#--prefix=}
				;;
			--gateway=*)
				GATEWAY=${1#--gateway=}
				;;
		esac
		shift
	done

	if [ -z "${PREFIX}" -a -n "${NETMASK}" ]; then
		PREFIX=$(ipv4_mask_to_cidr ${NETMASK})
	fi

	# XXX maybe we can add some hashing to identify a configuration again
	config_write $(zone_dir ${zone})/configs/${HOOK}.$(uuid) ${HOOK_SETTINGS}

	exit ${EXIT_OK}
}

function _up() {
	local zone=${1}
	local config=${2}
	shift 2

	if ! device_exists ${zone}; then
		error "Zone '${zone}' doesn't exist."
		exit ${EXIT_ERROR}
	fi

	config_read $(zone_dir ${zone})/configs/${config}

	if ! zone_has_ipv4 ${zone} ${ADDRESS}/${PREFIX}; then
		if ipv4_detect_duplicate ${zone} ${ADDRESS}; then
			error_log "Duplicate address detected on zone '${zone}' (${ADDRESS})."
			error_log "Cannot continue."
			exit ${EXIT_ERROR}
		fi

		ip addr add ${ADDRESS}/${PREFIX} dev ${zone}

		# Announce our new address to the neighbours
		ipv4_update_neighbours ${zone} ${ADDRESS}
	fi

	if zone_is_nonlocal ${zone} && [ -n "${GATEWAY}" ]; then
		# Save configuration
		red_db_set ${zone} type "${HOOK}"
		red_db_set ${zone} local-ip-address ${ADDRESS}/${PREFIX}
		red_db_set ${zone} remote-ip-address ${GATEWAY}
		
		red_db_set ${zone} active 1
		red_routing_update ${zone}
	fi

	exit ${EXIT_OK}
}

function _down() {
	local zone=${1}
	local config=${2}
	shift 2

	if ! device_exists ${zone}; then
		error "Zone '${zone}' doesn't exist."
		exit ${EXIT_ERROR}
	fi
	
	config_read $(zone_dir ${zone})/configs/${config}

	if zone_has_ipv4 ${zone} ${ADDRESS}/${PREFIX}; then
		ip addr del ${ADDRESS}/${PREFIX} dev ${zone}
	fi

	exit ${EXIT_OK}
}

function _status() {
	local zone=${1}
	local config=${2}
	shift 2

	if ! device_exists ${zone}; then
		error "Zone '${zone}' doesn't exist."
		exit ${EXIT_ERROR}
	fi
	
	config_read $(zone_dir ${zone})/configs/${config}

	printf "        %10s - " "${HOOK}"
	if zone_has_ipv4 ${zone} ${ADDRESS}/${PREFIX}; then
		echo -ne "${COLOUR_ENABLED}ENABLED ${COLOUR_NORMAL}"
	else
		echo -ne "${COLOUR_DISABLED}DISABLED${COLOUR_NORMAL}"
	fi
	echo " - ${ADDRESS}/${PREFIX}"

	if [ -n "${GATEWAY}" ]; then
		echo "          Gateway: ${GATEWAY}"
	fi

	exit ${EXIT_OK}
}

function ipv4_mask_to_cidr() {
	local mask=0

	local field
	for field in $(tr '.' ' ' <<<${1}); do
		mask=$(( $(( ${mask} << 8 )) | ${field} ))
	done

	local cidr=0
	local x=$(( 128 << 24 )) # 0x80000000

	while [ $(( ${x} & ${mask} )) -ne 0 ]; do
		[ ${mask} -eq ${x} ] && mask=0 || mask=$(( ${mask} << 1 ))
		cidr=$((${cidr} + 1))
	done

	if [ $(( ${mask} & 2147483647 )) -ne 0 ]; then # 2147483647 = 0x7fffffff
		echo "Invalid net mask: $1" >&2
	else
		echo ${cidr}
	fi
}

run $@