mirror of https://github.com/k3s-io/k3s
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
252 lines
8.5 KiB
252 lines
8.5 KiB
package goStrongswanVici
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"time"
|
|
)
|
|
|
|
const (
|
|
EVENT_IKE_UPDOWN = "ike-updown"
|
|
EVENT_IKE_REKEY = "ike-rekey"
|
|
EVENT_CHILD_UPDOWN = "child-updown"
|
|
EVENT_CHILD_REKEY = "child-rekey"
|
|
)
|
|
|
|
type EventIkeSAUpDown struct {
|
|
Child_sas map[string]*EventChildSAUpDown `json:"child-sas"`
|
|
Dh_group string `json:"dh-group"`
|
|
Encr_keysize string `json:"encr-keysize"`
|
|
Encr_alg string `json:"encr-alg"`
|
|
Established string `json:"established"`
|
|
Initiator_spi string `json:"initiator-spi"`
|
|
Integ_alg string `json:"integ-alg"`
|
|
Local_id string `json:"local-id"`
|
|
Local_host string `json:"local-host"`
|
|
Local_port string `json:"local-port"`
|
|
Nat_any string `json:"nat-any"`
|
|
Nat_remote string `json:"nat-remote"`
|
|
Prf_alg string `json:"prf-alg"`
|
|
Rekey_time string `json:"rekey-time"`
|
|
Remote_id string `json:"remote-id"`
|
|
Remote_host string `json:"remote-host"`
|
|
Remote_port string `json:"remote-port"`
|
|
Responder_spi string `json:"responder-spi"`
|
|
State string `json:"state"`
|
|
Task_Active []string `json:"tasks-active"`
|
|
Uniqueid string `json:"uniqueid"`
|
|
Version string `json:"version"`
|
|
}
|
|
|
|
type EventChildSAUpDown struct {
|
|
Bytes_in string `json:"bytes-in"`
|
|
Bytes_out string `json:"bytes-out"`
|
|
Encap string `json:"encap"`
|
|
Encr_alg string `json:"encr-alg"`
|
|
Encr_keysize string `json:"encr-keysize"`
|
|
Integ_alg string `json:"integ-alg"`
|
|
Install_time string `json:"install-time"`
|
|
Life_time string `json:"life-time"`
|
|
Local_ts []string `json:"local-ts"`
|
|
Mode string `json:"mode"`
|
|
Name string `json:"name"`
|
|
Protocol string `json:"protocol"`
|
|
Packets_out string `json:"packets-out"`
|
|
Packets_in string `json:"packets-in"`
|
|
Rekey_time string `json:"rekey-time"`
|
|
Remote_ts []string `json:"remote-ts"`
|
|
Reqid string `json:"reqid"`
|
|
Spi_in string `json:"spi-in"`
|
|
Spi_out string `json:"spi-out"`
|
|
State string `json:"state"`
|
|
UniqueId string `json:"uniqueid"`
|
|
}
|
|
|
|
type EventIkeRekeyPair struct {
|
|
New EventIkeRekeySA `json:"new"`
|
|
Old EventIkeRekeySA `json:"old"`
|
|
}
|
|
|
|
type EventIkeRekeySA struct {
|
|
Child_sas map[string]*EventChildRekeyPair `json:"child-sas"`
|
|
Dh_group string `json:"dh-group"`
|
|
Encr_alg string `json:"encr-alg"`
|
|
Encr_keysize string `json:"encr-keysize"`
|
|
Established string `json:"established"`
|
|
Initiator_spi string `json:"initiator-spi"`
|
|
Integ_alg string `json:"integ-alg"`
|
|
Local_host string `json:"local-host"`
|
|
Local_port string `json:"local-port"`
|
|
Local_id string `json:"local-id"`
|
|
Nat_any string `json:"nat-any"`
|
|
Nat_remote string `json:"nat-remote"`
|
|
Prf_alg string `json:"prf-alg"`
|
|
Rekey_time string `json:"rekey-time"`
|
|
Remote_id string `json:"remote-id"`
|
|
Remote_host string `json:"remote-host"`
|
|
Remote_port string `json:"remote-port"`
|
|
Responder_spi string `json:"responder-spi"`
|
|
State string `json:"state"`
|
|
Task_Active []string `json:"tasks-active"`
|
|
Task_Passive []string `json:"tasks-passive"`
|
|
Uniqueid string `json:"uniqueid"`
|
|
Version string `json:"version"`
|
|
}
|
|
|
|
type EventChildRekeyPair struct {
|
|
New EventChildRekeySA `json:"new"`
|
|
Old EventChildRekeySA `json:"old"`
|
|
}
|
|
|
|
type EventChildRekeySA struct {
|
|
Bytes_in string `json:"bytes-in"`
|
|
Bytes_out string `json:"bytes-out"`
|
|
Encap string `json:"encap"`
|
|
Encr_alg string `json:"encr-alg"`
|
|
Encr_keysize string `json:"encr-keysize"`
|
|
Integ_alg string `json:"integ-alg"`
|
|
Install_time string `json:"install-time"`
|
|
Life_time string `json:"life-time"`
|
|
Local_ts []string `json:"local-ts"`
|
|
Mode string `json:"mode"`
|
|
Name string `json:"name"`
|
|
Packets_in string `json:"packets-in"`
|
|
Packets_out string `json:"packets-out"`
|
|
Protocol string `json:"protocol"`
|
|
Remote_ts []string `json:"remote-ts"`
|
|
Rekey_time string `json:"rekey-time"`
|
|
Reqid string `json:"reqid"`
|
|
Spi_in string `json:"spi-in"`
|
|
Spi_out string `json:"spi-out"`
|
|
State string `json:"state"`
|
|
Use_in string `json:"use-in"`
|
|
Use_out string `json:"use-out"`
|
|
UniqueId string `json:"uniqueid"`
|
|
}
|
|
|
|
type EventIkeUpDown struct {
|
|
Up bool
|
|
Ike map[string]*EventIkeSAUpDown
|
|
}
|
|
|
|
type EventIkeRekey struct {
|
|
Ike map[string]*EventIkeRekeyPair
|
|
}
|
|
|
|
type EventChildRekey struct {
|
|
Ike map[string]*EventIkeRekeySA
|
|
}
|
|
|
|
type EventChildUpDown struct {
|
|
Up bool
|
|
Ike map[string]*EventIkeSAUpDown
|
|
}
|
|
|
|
type EventIkeSa struct {
|
|
IkeSa
|
|
TasksActive []string `json:"tasks-active"`
|
|
}
|
|
|
|
type EventInfo struct {
|
|
Up bool
|
|
Ike map[string]*EventIkeSa
|
|
}
|
|
|
|
func prettyprint(b []byte) string {
|
|
var out bytes.Buffer
|
|
json.Indent(&out, b, "", " ")
|
|
return string(out.Bytes())
|
|
}
|
|
|
|
type monitorCallBack func(event string, info interface{})
|
|
|
|
|
|
func handleIkeUpDown(eventName string, callback monitorCallBack, response map[string]interface{}) {
|
|
event := &EventIkeUpDown{}
|
|
event.Ike = map[string]*EventIkeSAUpDown{}
|
|
//we need to marshall all ikes manual because json uses connections names as key
|
|
for name := range response {
|
|
value := response[name]
|
|
if name == "up" {
|
|
event.Up = true
|
|
} else {
|
|
sa := &EventIkeSAUpDown{}
|
|
ConvertFromGeneral(value, sa)
|
|
event.Ike[name] = sa
|
|
}
|
|
}
|
|
callback(eventName, event)
|
|
}
|
|
|
|
func handleIkeRekey(eventName string, callback monitorCallBack, response map[string]interface{}) {
|
|
event := &EventIkeRekey{}
|
|
event.Ike = map[string]*EventIkeRekeyPair{}
|
|
//we need to marshall all ikes manual because json uses connections names as key
|
|
for name := range response {
|
|
value := response[name]
|
|
sa := &EventIkeRekeyPair{}
|
|
ConvertFromGeneral(value, sa)
|
|
event.Ike[name] = sa
|
|
}
|
|
callback(eventName, event)
|
|
}
|
|
|
|
func handleChildUpDown(eventName string, callback monitorCallBack, response map[string]interface{}) {
|
|
event := &EventChildUpDown{}
|
|
event.Ike = map[string]*EventIkeSAUpDown{}
|
|
//we need to marshall all ikes manual because json uses connections names as key
|
|
for name := range response {
|
|
value := response[name]
|
|
if name == "up" {
|
|
event.Up = true
|
|
} else {
|
|
sa := &EventIkeSAUpDown{}
|
|
ConvertFromGeneral(value, sa)
|
|
event.Ike[name] = sa
|
|
}
|
|
}
|
|
callback(eventName, event)
|
|
}
|
|
|
|
func handleChildRekey(eventName string, callback monitorCallBack, response map[string]interface{}) {
|
|
event := &EventChildRekey{}
|
|
event.Ike = map[string]*EventIkeRekeySA{}
|
|
//we need to marshall all ikes manual because json uses connections names as key
|
|
for name := range response {
|
|
value := response[name]
|
|
sa := &EventIkeRekeySA{}
|
|
ConvertFromGeneral(value, sa)
|
|
event.Ike[name] = sa
|
|
}
|
|
callback(eventName, event)
|
|
}
|
|
|
|
func (c *ClientConn) MonitorSA(callback monitorCallBack,watchdog time.Duration) (err error) {
|
|
//register event
|
|
c.RegisterEvent(EVENT_CHILD_UPDOWN, func(response map[string]interface{}) {
|
|
//dumpResponse(response)
|
|
handleChildUpDown(EVENT_CHILD_UPDOWN, callback, response)
|
|
})
|
|
c.RegisterEvent(EVENT_CHILD_REKEY, func(response map[string]interface{}) {
|
|
//dumpResponse(response)
|
|
handleChildRekey(EVENT_CHILD_REKEY, callback, response)
|
|
})
|
|
c.RegisterEvent(EVENT_IKE_UPDOWN, func(response map[string]interface{}) {
|
|
//dumpResponse(response)
|
|
handleIkeUpDown(EVENT_IKE_UPDOWN, callback, response)
|
|
})
|
|
c.RegisterEvent(EVENT_IKE_REKEY, func(response map[string]interface{}) {
|
|
//dumpResponse(response)
|
|
handleIkeRekey(EVENT_IKE_REKEY, callback, response)
|
|
})
|
|
|
|
for {
|
|
time.Sleep(watchdog)
|
|
//collect some daemon stats to see if connection is alive
|
|
if _, err := c.Stats(); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
return nil
|
|
}
|