PVE/Network/SDN/SubnetPlugin.pm

   1 package PVE::Network::SDN::SubnetPlugin;
   2
   3 use strict;
   4 use warnings;
   5
   6 use PVE::Cluster qw(cfs_read_file cfs_write_file cfs_lock_file);
   7 use base qw(PVE::SectionConfig);
   8 use PVE::JSONSchema qw(get_standard_option);
   9 use PVE::Exception qw(raise raise_param_exc);
  10 use Net::Subnet qw(subnet_matcher);
  11 use PVE::Network::SDN::Vnets;
  12 use PVE::Network::SDN::Ipams;
  13
  14 PVE::Cluster::cfs_register_file('sdn/subnets.cfg',
  15                                  sub { __PACKAGE__->parse_config(@_); },
  16                                  sub { __PACKAGE__->write_config(@_); });
  17
  18 PVE::JSONSchema::register_standard_option('pve-sdn-subnet-id', {
  19     description => "The SDN subnet object identifier.",
  20     type => 'string', format => 'pve-sdn-subnet-id',
  21     type => 'string'
  22 });
  23
  24 PVE::JSONSchema::register_format('pve-sdn-subnet-id', \&parse_sdn_subnet_id);
  25 sub parse_sdn_subnet_id {
  26     my ($id, $noerr) = @_;
  27
  28     my $cidr = $id =~ s/-/\//r;
  29
  30     if (!(PVE::JSONSchema::pve_verify_cidrv4($cidr, 1) ||
  31           PVE::JSONSchema::pve_verify_cidrv6($cidr, 1)))
  32     {
  33         return undef if $noerr;
  34         die "value does not look like a valid CIDR network\n";
  35     }
  36     return $id;
  37 }
  38
  39 my $defaultData = {
  40
  41     propertyList => {
  42         subnet => get_standard_option('pve-sdn-subnet-id',
  43             { completion => \&PVE::Network::SDN::Subnets::complete_sdn_subnet }),
  44     },
  45 };
  46
  47 sub type {
  48     return 'subnet';
  49 }
  50
  51 sub private {
  52     return $defaultData;
  53 }
  54
  55 sub properties {
  56     return {
  57         vnet => {
  58             type => 'string',
  59             description => "associated vnet",
  60         },
  61         gateway => {
  62             type => 'string', format => 'ip',
  63             description => "Subnet Gateway: Will be assign on vnet for layer3 zones",
  64         },
  65         snat => {
  66             type => 'boolean',
  67             description => "enable masquerade for this subnet if pve-firewall",
  68         },
  69 #       #cloudinit, dhcp options
  70 #        routes => {
  71 #            type => 'string',
  72 #            description => "static routes [network=<network>:gateway=<ip>,network=<network>:gateway=<ip>,... ]",
  73 #        },
  74         dnszoneprefix => {
  75             type => 'string', format => 'dns-name',
  76             description => "dns domain zone prefix  ex: 'adm' -> <hostname>.adm.mydomain.com",
  77         },
  78     };
  79 }
  80
  81 sub options {
  82     return {
  83         vnet => { optional => 0 },
  84         gateway => { optional => 1 },
  85 #       routes => { optional => 1 },
  86         snat => { optional => 1 },
  87         dnszoneprefix => { optional => 1 },
  88     };
  89 }
  90
  91 sub on_update_hook {
  92     my ($class, $zone, $subnetid, $subnet, $old_subnet) = @_;
  93
  94     my $cidr = $subnetid =~ s/-/\//r;
  95     my $subnet_matcher = subnet_matcher($cidr);
  96
  97     my $vnetid = $subnet->{vnet};
  98     my $gateway = $subnet->{gateway};
  99     my $ipam = $zone->{ipam};
 100     my $dns = $zone->{dns};
 101     my $dnszone = $zone->{dnszone};
 102     my $reversedns = $zone->{reversedns};
 103
 104     my $old_gateway = $old_subnet->{gateway} if $old_subnet;
 105
 106     if($vnetid) {
 107         my $vnet = PVE::Network::SDN::Vnets::get_vnet($vnetid);
 108         raise_param_exc({ vnet => "$vnetid don't exist"}) if !$vnet;
 109         raise_param_exc({ vnet => "you can't add a subnet on a vlanaware vnet"}) if $vnet->{vlanaware};
 110     }
 111
 112     my ($ip, $mask) = split(/\//, $cidr);
 113     #for /32 pointopoint, we allow gateway outside the subnet
 114     raise_param_exc({ gateway => "$gateway is not in subnet $subnetid"}) if $gateway && !$subnet_matcher->($gateway) && $mask != 32;
 115
 116     if ($ipam) {
 117         my $ipam_cfg = PVE::Network::SDN::Ipams::config();
 118         my $plugin_config = $ipam_cfg->{ids}->{$ipam};
 119         my $plugin = PVE::Network::SDN::Ipams::Plugin->lookup($plugin_config->{type});
 120         $plugin->add_subnet($plugin_config, $subnetid, $subnet);
 121
 122         #delete on removal
 123         if (!defined($gateway) && $old_gateway) {
 124             eval {
 125                 PVE::Network::SDN::Subnets::del_ip($zone, $subnetid, $old_subnet, $old_gateway);
 126             };
 127             warn if $@;
 128         }
 129         if(!$old_gateway || $gateway && $gateway ne $old_gateway) {
 130             PVE::Network::SDN::Subnets::add_ip($zone, $subnetid, $subnet, $gateway);
 131         }
 132
 133         #delete old ip after update
 134         if($gateway && $old_gateway && $gateway ne $old_gateway) {
 135             eval {
 136                 PVE::Network::SDN::Subnets::del_ip($zone, $subnetid, $old_subnet, $old_gateway);
 137             };
 138             warn if $@;
 139         }
 140     }
 141 }
 142
 143 sub on_delete_hook {
 144     my ($class, $subnetid, $subnet_cfg, $vnet_cfg) = @_;
 145
 146     return;
 147 }
 148
 149 1;