void/ZeroTierOne
2
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-06-05 03:53:44 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

More postgres stuff.

Browse source
This commit is contained in:
Adam Ierymenko 2022-12-09 17:34:15 -05:00
parent 567b6027ae
commit c133fd0d1c
2 changed files with 125 additions and 75 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
controller/src/model/network.rs
View file

@ -31,9 +31,9 @@ pub struct Ipv6AssignMode {
#[derive(Clone, PartialEq, Eq, Serialize, Deserialize, PartialOrd, Ord, Hash, Debug)]
pub struct IpAssignmentPool {
#[serde(rename = "ipRangeStart")]
ip_range_start: InetAddress,
pub ip_range_start: InetAddress,
#[serde(rename = "ipRangeEnd")]
ip_range_end: InetAddress,
pub ip_range_end: InetAddress,
}
/// Virtual network configuration.

114
controller/src/postgresdatabase.rs
View file

@ -1,4 +1,4 @@
use std::collections::HashMap;
use std::collections::{BTreeMap, BTreeSet, HashMap};
use std::ops::Deref;
use std::str::FromStr;
use std::sync::{Arc, Mutex};
@ -12,6 +12,7 @@ use tokio_postgres::{Client, Statement};
use zerotier_crypto::verified::Verified;
use zerotier_network_hypervisor::vl1::{Address, Identity, InetAddress, NodeStorage};
use zerotier_network_hypervisor::vl2::networkconfig::IpRoute;
use zerotier_network_hypervisor::vl2::rule::Rule;
use zerotier_network_hypervisor::vl2::NetworkId;
@ -22,7 +23,7 @@ use zerotier_utils::tokio::sync::broadcast::{channel, Receiver, Sender};
use zerotier_utils::tokio::task::JoinHandle;
use crate::database::*;
use crate::model::{Member, Network, RequestLogItem};
use crate::model::{IpAssignmentPool, Member, Network, RequestLogItem};
const RECONNECT_RATE_LIMIT: tokio::time::Duration = tokio::time::Duration::from_millis(250);
@ -41,9 +42,9 @@ SELECT
(CASE WHEN n.sso_enabled THEN o.client_id ELSE NULL END) as client_id,
(CASE WHEN n.sso_enabled THEN o.authorization_endpoint ELSE NULL END) as authorization_endpoint,
d.domain,
d.servers,
ARRAY(SELECT CONCAT(host(ip_range_start),'|', host(ip_range_end)) FROM ztc_network_assignment_pool WHERE network_id = n.id) AS assignment_pool,
ARRAY(SELECT CONCAT(host(address),'/',bits::text,'|',COALESCE(host(via), 'NULL')) FROM ztc_network_route WHERE network_id = n.id) AS routes
ARRAY_TO_STRING(d.servers, ',', '*'),
ARRAY_TO_STRING(ARRAY(SELECT CONCAT(host(ip_range_start),'|', host(ip_range_end)) FROM ztc_network_assignment_pool WHERE network_id = n.id), ',', '*') AS assignment_pool,
ARRAY_TO_STRING(ARRAY(SELECT CONCAT(host(address),'/',bits::text,'|',COALESCE(host(via), 'NULL')) FROM ztc_network_route WHERE network_id = n.id), ',', '*') AS routes
FROM
ztc_network n
LEFT OUTER JOIN ztc_org o ON o.owner_id = n.owner_id
@ -239,24 +240,88 @@ impl Database for PostgresDatabase {
let mut client_id: Option<&str> = nw.get(10);
let mut authorization_endpoint: Option<&str> = nw.get(11);
let mut domain: Option<&str> = nw.get(12);
let mut servers: Option<&str> = nw.get(13);
let mut assignment_pool: Option<&str> = nw.get(14);
let mut routes: Option<&str> = nw.get(15);
let mut servers_csv: Option<&str> = nw.get(13);
let mut assignment_pool_csv: Option<&str> = nw.get(14);
let mut routes_csv: Option<&str> = nw.get(15);
filter_null_string(&mut capabilities);
filter_null_string(&mut rules);
filter_null_string(&mut client_id);
filter_null_string(&mut authorization_endpoint);
filter_null_string(&mut domain);
filter_null_string(&mut servers);
filter_null_string(&mut assignment_pool);
filter_null_string(&mut routes);
filter_null_string(&mut servers_csv);
filter_null_string(&mut assignment_pool_csv);
filter_null_string(&mut routes_csv);
let mut rules = if let Some(rules) = rules {
serde_json::from_str::<Vec<Rule>>(rules)?
Ok(Some(Network {
id,
name: name.to_string(),
multicast_limit: if multicast_limit < 0 {
None
} else {
Vec::new()
};
Some(multicast_limit.min(u32::MAX as i64) as u32)
},
enable_broadcast: Some(enable_broadcast),
v4_assign_mode: Some(serde_json::from_str(v4_assign_mode)?),
v6_assign_mode: Some(serde_json::from_str(v6_assign_mode)?),
ip_assignment_pools: {
let mut ip_assignment_pools = BTreeSet::new();
if let Some(assignment_pool_csv) = assignment_pool_csv {
for p in assignment_pool_csv.split(',') {
if let Some((start, end)) = p.split_once('|') {
if let Ok(start) = InetAddress::from_str(start) {
if let Ok(end) = InetAddress::from_str(end) {
ip_assignment_pools.insert(IpAssignmentPool { ip_range_start: start, ip_range_end: end });
}
}
}
}
}
ip_assignment_pools
},
ip_routes: {
let mut ip_routes = BTreeSet::new();
if let Some(routes_csv) = routes_csv {
for r in routes_csv.split(',') {
if let Some((cidr, via)) = r.split_once('|') {
if let Ok(cidr) = InetAddress::from_str(cidr) {
ip_routes.insert(IpRoute {
target: cidr,
via: if via == "NULL" {
None
} else {
if let Ok(via) = InetAddress::from_str(via) {
Some(via)
} else {
None
}
},
flags: None,
metric: None,
});
}
}
}
}
ip_routes
},
dns: {
let mut dns = BTreeMap::new();
if let Some(domain) = domain {
if let Some(servers_csv) = servers_csv {
let mut servers = BTreeSet::new();
for s in servers_csv.split(',') {
if let Ok(s) = InetAddress::from_str(s) {
servers.insert(s);
}
}
dns.insert(domain.trim().to_string(), servers);
}
}
dns
},
rules: if let Some(rules) = rules {
let mut rules = serde_json::from_str::<Vec<Rule>>(rules)?;
// Capabilities are being deprecated in V2 as they are complex and rarely used. To handle networks
// that have them configured (there aren't many) we translate them into special portions of the
@ -298,31 +363,16 @@ impl Database for PostgresDatabase {
}
}
if base_rules.is_empty() {
rules.push(Rule::action_accept());
} else {
for r in base_rules.drain(..) {
rules.push(r);
}
}
}
}
Ok(Some(Network {
id,
name: name.to_string(),
multicast_limit: if multicast_limit < 0 || multicast_limit > (u32::MAX as i64) {
None
Some(rules)
} else {
Some(multicast_limit as u32)
None
},
enable_broadcast: Some(enable_broadcast),
v4_assign_mode: Some(serde_json::from_str(v4_assign_mode)?),
v6_assign_mode: Some(serde_json::from_str(v6_assign_mode)?),
ip_assignment_pools: todo!(),
ip_routes: todo!(),
dns: todo!(),
rules: todo!(),
credential_ttl: None,
min_supported_version: None,
mtu: if mtu < 0 || mtu > (u16::MAX as i32) {