VPC : create/destroy network usage chain

This commit is contained in:
anthony 2012-06-29 15:51:45 -07:00
parent 700ce361ff
commit f25ee3844e
2 changed files with 10 additions and 4 deletions

View File

@ -19,7 +19,12 @@ unplug_nic() {
# remove usage
sudo iptables -t mangle -F NETWORK_STATS_$dev 2>/dev/null
sudo iptables -t mangle -D POSTROUTING -o $dev -j NETWORK_STATS_$dev 2>/dev/null
sudo iptables -t mangle -D POSTROUTING -i $dev -j NETWORK_STATS_$dev 2>/dev/null
rule=$(iptables-save | grep NETWORK_STATS_$dev | grep "\-A")
if [ $? -eq 0 ]
then
rule=$(echo $rule | sed 's/\-A/\-D/')
sudo iptables $rule
fi
sudo iptables -t mangle -X NETWORK_STATS_$dev 2>/dev/null
}

View File

@ -71,9 +71,9 @@ desetup_dnsmasq() {
setup_usage() {
sudo iptables -t mangle -N NETWORK_STATS_$dev
sudo iptables -t mangle -A POSTROUTING -o $dev -j NETWORK_STATS_$dev
sudo iptables -t mangle -A POSTROUTING -i $dev -j NETWORK_STATS_$dev
sudo iptables -t mangle -A POSTROUTING -s $subnet/$mask -j NETWORK_STATS_$dev
sudo iptables -t mangle -A NETWORK_STATS_$dev -o $dev ! -s $vpccidr
sudo iptables -t mangle -A NETWORK_STATS_$dev -i $dev ! -d $vpccidr
sudo iptables -t mangle -A NETWORK_STATS_$dev -s $subnet/$mask ! -d $vpccidr
}
create_guest_network() {
@ -90,6 +90,7 @@ create_guest_network() {
local tableName="Table_$dev"
sudo ip route add $subnet/$mask dev $dev table $tableName proto static
sudo iptables -t mangle -A PREROUTING -i $dev -m state --state ESTABLISHED,RELATED -j CONNMARK --restore-mark
setup_usage
setup_dnsmasq
}
@ -151,7 +152,7 @@ do
esac
done
vpccidr=getVPCcidr
vpccidr=$(getVPCcidr)
if [ "$Cflag$Dflag$dflag" != "11" ]
then