Attachment 292034 Details for Bug 429154 – modified 3.0.3-41 network-bridge script

modified 3.0.3-41 network-bridge script

network-bridge (text/plain), 9.45 KB, created by Vince Worthington on 2008-01-17 17:42:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Vince Worthington

Created: 2008-01-17 17:42:21 UTC

Size: 9.45 KB

patch

obsolete

>#!/bin/sh
>#============================================================================
># Default Xen network start/stop script.
># Xend calls a network script when it starts.
># The script name to use is defined in /etc/xen/xend-config.sxp
># in the network-script field.
>#
># This script creates a bridge (default xenbr${vifnum}), adds a device
># (default eth${vifnum}) to it, copies the IP addresses from the device
># to the bridge and adjusts the routes accordingly.
>#
># If all goes well, this should ensure that networking stays up.
># However, some configurations are upset by this, especially
># NFS roots. If the bridged setup does not meet your needs,
># configure a different script, for example using routing instead.
>#
># Usage:
>#
># network-bridge (start|stop|status) {VAR=VAL}*
>#
># Vars:
>#
># vifnum     Virtual device number to use (default 0). Numbers >=8
>#            require the netback driver to have nloopbacks set to a
>#            higher value than its default of 8.
># bridge     The bridge to use (default xenbr${vifnum}).
># netdev     The interface to add to the bridge (default eth${vifnum}).
># antispoof  Whether to use iptables to prevent spoofing (default no).
>#
># Internal Vars:
># pdev="p${netdev}"
># vdev="veth${vifnum}"
># vif0="vif0.${vifnum}"
>#
># start:
># Creates the bridge
># Copies the IP and MAC addresses from netdev to vdev
># Renames netdev to be pdev 
># Renames vdev to be netdev 
># Enslaves pdev, vdev to bridge
>#
># stop:
># Removes netdev from the bridge
># Transfers addresses, routes from netdev to pdev
># Renames netdev to vdev
># Renames pdev to netdev 
># Deletes bridge
>#
># status:
># Print addresses, interfaces, routes
>#
>#============================================================================
>
>
>dir=$(dirname "$0")
>. "$dir/xen-script-common.sh"
>. "$dir/xen-network-common.sh"
>
>findCommand "$@"
>evalVariables "$@"
>
>vifnum=${vifnum:-$(ip route list | awk '/^default / { print $NF }' | sed 's/^[^0-9]*//')}
>vifnum=${vifnum:-0}
>bridge=${bridge:-xenbr${vifnum}}
>netdev=${netdev:-eth${vifnum}}
>antispoof=${antispoof:-no}
>
>pdev="p${netdev}"
>vdev="veth${vifnum}"
>vif0="vif0.${vifnum}"
>addr_pfx=
>
>get_ip_info() {
>    addr_pfx=`ip addr show dev $1 | sed -n 's/^ *inet $.*$ [^ ]*$/\1/p'`
>    gateway=`ip route show dev $1 | fgrep default | sed 's/default via //'`
>}
>    
>is_bonding() {
>    [ -f "/sys/class/net/$1/bonding/slaves" ]
>}
>
>is_ifup() {
>    ip link show dev $1 | awk '{ exit $3 !~ /[<,]UP[,>]/ }'
>}
>
>do_ifup() {
>    if ! ifup $1 || ! is_ifup $1 ; then
>        if [ -n "${addr_pfx}" ] ; then
>            # use the info from get_ip_info()
>            ip addr flush $1
>            ip addr add ${addr_pfx} dev $1
>            ip link set dev $1 up
>            [ ${gateway} ] && ip route add default via ${gateway}
>        fi
>    fi
>}
>
># Usage: transfer_addrs src dst
># Copy all IP addresses (including aliases) from device $src to device $dst.
>transfer_addrs () {
>    local src=$1
>    local dst=$2
>    # Don't bother if $dst already has IP addresses.
>    if ip addr show dev ${dst} | egrep -q '^ *inet ' ; then
>        return
>    fi
>    # Address lines start with 'inet' and have the device in them.
>    # Replace 'inet' with 'ip addr add' and change the device name $src
>    # to 'dev $src'.
>    ip addr show dev ${src} | egrep '^ *inet ' | sed -e "
>s/inet/ip addr add/
>s@$[0-9]\+\.[0-9]\+\.[0-9]\+\.[0-9]\+/[0-9]\+$@\1@
>s/${src}/dev ${dst}/
>" | sh -e
>    # Remove automatic routes on destination device
>    ip route list | sed -ne "
>/dev ${dst}$ \|$$/ {
>  s/^/ip route del /
>  p
>}" | sh -e
>}
>
># Usage: transfer_routes src dst
># Get all IP routes to device $src, delete them, and
># add the same routes to device $dst.
># The original routes have to be deleted, otherwise adding them
># for $dst fails (duplicate routes).
>transfer_routes () {
>    local src=$1
>    local dst=$2
>    # List all routes and grep the ones with $src in.
>    # Stick 'ip route del' on the front to delete.
>    # Change $src to $dst and use 'ip route add' to add.
>    ip route list | sed -ne "
>/dev ${src}$ \|$$/ {
>  h
>  s/^/ip route del /
>  P
>  g
>  s/${src}/${dst}/
>  s/^/ip route add /
>  P
>  d
>}" | sh -e
>}
>
>
>##
># link_exists interface
>#
># Returns 0 if the interface named exists (whether up or down), 1 otherwise.
>#
>link_exists()
>{
>    if ip link show "$1" >/dev/null 2>/dev/null
>    then
>        return 0
>    else
>        return 1
>    fi
>}
>
># Set the default forwarding policy for $dev to drop.
># Allow forwarding to the bridge.
>antispoofing () {
>    iptables -P FORWARD DROP
>    iptables -F FORWARD
>    iptables -A FORWARD -m physdev --physdev-in ${pdev} -j ACCEPT
>    iptables -A FORWARD -m physdev --physdev-in ${vif0} -j ACCEPT
>}
>
># Usage: show_status dev bridge
># Print ifconfig and routes.
>show_status () {
>    local dev=$1
>    local bridge=$2
>    
>    echo '============================================================'
>    ip addr show ${dev}
>    ip addr show ${bridge}
>    echo ' '
>    brctl show ${bridge}
>    echo ' '
>    ip route list
>    echo ' '
>    route -n
>    echo '============================================================'
>}
>
>is_network_root () {
>    local rootfs=$(awk '{ if ($1 !~ /^[ \t]*#/ && $2 == "/") { print $3; }}' /etc/mtab)
>    local rootopts=$(awk '{ if ($1 !~ /^[ \t]*#/ && $2 == "/") { print $4; }}' /etc/mtab)
>
>    [[ "$rootfs" =~ "^nfs" ]] || [[ "$rootopts" =~ "_netdev" ]] && return 0 || return 1
>}
>
>op_start () {
>    if [ "${bridge}" = "null" ] ; then
>	return
>    fi
>
>    if is_network_root ; then
>        [ -x /usr/bin/logger ] && /usr/bin/logger "network-bridge: bridging not supported on network root; not starting"
>        return
>    fi
>
>    if ! link_exists "$vdev"; then
>        if link_exists "$pdev"; then
>            # The device is already up.
>            return
>        else
>            echo "
>Link $vdev is missing.
>This may be because you have reached the limit of the number of interfaces
>that the loopback driver supports.  If the loopback driver is a module, you
>may raise this limit by passing it as a parameter (nloopbacks=<N>); if the
>driver is compiled statically into the kernel, then you may set the parameter
>using loopback.nloopbacks=<N> on the domain 0 kernel command line.
>" >&2
>            exit 1
>        fi
>    fi
>
>    create_bridge ${bridge}
>
>    if link_exists "$vdev"; then
>	mac=`ip link show ${netdev} | grep 'link\/ether' | sed -e 's/.*ether $..:..:..:..:..:..$.*/\1/'`
>	preiftransfer ${netdev}
>	transfer_addrs ${netdev} ${vdev}
>	if is_bonding ${netdev} || ! ifdown ${netdev}; then
>	    # Remember the IP details if necessary.
>	    get_ip_info ${netdev}
>	    ip link set ${netdev} down
>	    ip addr flush ${netdev}
>	fi
>	ip link set ${netdev} name ${pdev}
>	ip link set ${vdev} name ${netdev}
>
>	setup_bridge_port ${pdev}
>	setup_bridge_port ${vif0}
>	ip link set ${netdev} addr ${mac} arp on
>
>	ip link set ${bridge} up
>	add_to_bridge  ${bridge} ${vif0}
>	add_to_bridge2 ${bridge} ${pdev}
>	do_ifup ${netdev}
>    else
>	# old style without ${vdev}
>	transfer_addrs  ${netdev} ${bridge}
>	transfer_routes ${netdev} ${bridge}
>    fi
>
>    if [ ${antispoof} = 'yes' ] ; then
>	antispoofing
>    fi
>}
>
>op_stop () {
>    if [ "${bridge}" = "null" ]; then
>	return
>    fi
>    if ! link_exists "$bridge"; then
>	return
>    fi
>
>    if link_exists "$pdev"; then
>	ip link set dev ${vif0} down
>	mac=`ip link show ${netdev} | grep 'link\/ether' | sed -e 's/.*ether $..:..:..:..:..:..$.*/\1/'`
>	# if pdev is a bond interface and we are using arp monitoring on it, we need
>	# to delete the scope host master IP from it now:
>	if is_bonding ${pdev} ; then
>	    # are we using arp monitoring? We should have at least one arp_ip_target
>	    # if we are..
>	    if [ `cat /sys/class/net/${pdev}/bonding/arp_ip_target` != "" ] ; then
>		# get IP address info from pdev
>		get_ip_info ${pdev}
>		ip addr del ${addr_pfx} dev ${pdev}
>	    fi
>	fi
>	transfer_addrs ${netdev} ${pdev}
>	if ! ifdown ${netdev}; then
>	    get_ip_info ${netdev}
>	fi
>	ip link set ${netdev} down arp off
>	ip link set ${netdev} addr fe:ff:ff:ff:ff:ff
>	ip link set ${pdev} down
>	ip addr flush ${netdev}
>	ip link set ${pdev} addr ${mac} arp on
>
>	brctl delif ${bridge} ${pdev}
>	brctl delif ${bridge} ${vif0}
>	ip link set ${bridge} down
>
>	ip link set ${netdev} name ${vdev}
>	ip link set ${pdev} name ${netdev}
>	do_ifup ${netdev}
>    else
>	transfer_routes ${bridge} ${netdev}
>	ip link set ${bridge} down
>    fi
>    brctl delbr ${bridge}
>}
>
># adds $dev to $bridge but waits for $dev to be in running state first
>add_to_bridge2() {
>    local bridge=$1
>    local dev=$2
>    local maxtries=10
>
>    echo -n "Waiting for ${dev} to negotiate link."
>    ip link set ${dev} up
>    for i in `seq ${maxtries}` ; do
>	if ifconfig ${dev} | grep -q RUNNING ; then
>	    break
>	else
>	    echo -n '.'
>	    sleep 1
>	fi
>    done
>
>    if [ ${i} -eq ${maxtries} ] ; then echo '(link isnt in running state)' ; fi
>
>    # is the dev a bond device?  If so, is bonding driver using arp monitoring
>    # to check link status?  If so, we need a master address on the pdev or our
>    # arp requests will have 0.0.0.0 as tell address and link on the pdev will
>    # flap as a result.  Setting scope host should be enough without disrupting
>    # anything.
>    if is_bonding ${dev} ; then
>	# are we using arp monitoring?
>	if [ `cat /sys/class/net/${dev}/bonding/arp_ip_target` != "" ] ; then
>	    echo "adding address ${addr_pfx} as scope local address to ${dev}"
>	    ip addr add ${addr_pfx} dev $2 scope host
>	fi
>    fi
>
>    add_to_bridge ${bridge} ${dev}
>}
>
>case "$command" in
>    start)
>	op_start
>	;;
>    
>    stop)
>	op_stop
>	;;
>
>    status)
>	show_status ${netdev} ${bridge}
>	;;
>
>    *)
>	echo "Unknown command: $command" >&2
>	echo 'Valid commands are: start, stop, status' >&2
>	exit 1
>esac

Actions: View

Attachments on bug 429154: 292029 | 292034 | 292542 | 293521 | 293522 | 325247 | 328011