mirror of https://github.com/apache/cloudstack.git
368 lines
15 KiB
Java
368 lines
15 KiB
Java
// Copyright 2012 Citrix Systems, Inc. Licensed under the
|
|
// Apache License, Version 2.0 (the "License"); you may not use this
|
|
// file except in compliance with the License. Citrix Systems, Inc.
|
|
// reserves all rights not expressly granted by the License.
|
|
// You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//
|
|
// Automatically generated by addcopyright.py at 04/03/2012
|
|
package com.cloud.network.element;
|
|
|
|
|
|
import java.util.HashMap;
|
|
import java.util.List;
|
|
import java.util.Map;
|
|
import java.util.Set;
|
|
|
|
import javax.ejb.Local;
|
|
|
|
import org.apache.log4j.Logger;
|
|
|
|
import com.cloud.dc.DataCenter;
|
|
import com.cloud.deploy.DeployDestination;
|
|
import com.cloud.exception.ConcurrentOperationException;
|
|
import com.cloud.exception.InsufficientCapacityException;
|
|
import com.cloud.exception.ResourceUnavailableException;
|
|
import com.cloud.network.Network;
|
|
import com.cloud.network.Network.Capability;
|
|
import com.cloud.network.Network.Provider;
|
|
import com.cloud.network.Network.Service;
|
|
import com.cloud.network.NetworkService;
|
|
import com.cloud.network.PublicIpAddress;
|
|
import com.cloud.network.router.VirtualRouter;
|
|
import com.cloud.network.router.VirtualRouter.Role;
|
|
import com.cloud.network.router.VpcVirtualNetworkApplianceManager;
|
|
import com.cloud.network.rules.FirewallRule;
|
|
import com.cloud.network.rules.NetworkACL;
|
|
import com.cloud.network.vpc.Vpc;
|
|
import com.cloud.network.vpc.VpcManager;
|
|
import com.cloud.offering.NetworkOffering;
|
|
import com.cloud.utils.component.Inject;
|
|
import com.cloud.utils.exception.CloudRuntimeException;
|
|
import com.cloud.vm.DomainRouterVO;
|
|
import com.cloud.vm.NicProfile;
|
|
import com.cloud.vm.ReservationContext;
|
|
import com.cloud.vm.VirtualMachine;
|
|
import com.cloud.vm.VirtualMachine.Type;
|
|
import com.cloud.vm.VirtualMachineProfile;
|
|
|
|
/**
|
|
* @author Alena Prokharchyk
|
|
*/
|
|
@Local(value = NetworkElement.class)
|
|
public class VpcVirtualRouterElement extends VirtualRouterElement implements VpcProvider, NetworkACLServiceProvider{
|
|
private static final Logger s_logger = Logger.getLogger(VpcVirtualRouterElement.class);
|
|
@Inject
|
|
NetworkService _ntwkService;
|
|
@Inject
|
|
VpcManager _vpcMgr;
|
|
@Inject
|
|
VpcVirtualNetworkApplianceManager _vpcRouterMgr;
|
|
|
|
|
|
private static final Map<Service, Map<Capability, String>> capabilities = setCapabilities();
|
|
|
|
|
|
@Override
|
|
protected boolean canHandle(Network network, Service service) {
|
|
Long physicalNetworkId = _networkMgr.getPhysicalNetworkId(network);
|
|
if (physicalNetworkId == null) {
|
|
return false;
|
|
}
|
|
|
|
if (network.getVpcId() == null) {
|
|
return false;
|
|
}
|
|
|
|
if (!_networkMgr.isProviderEnabledInPhysicalNetwork(physicalNetworkId, Network.Provider.VPCVirtualRouter.getName())) {
|
|
return false;
|
|
}
|
|
|
|
if (service == null) {
|
|
if (!_networkMgr.isProviderForNetwork(getProvider(), network.getId())) {
|
|
s_logger.trace("Element " + getProvider().getName() + " is not a provider for the network " + network);
|
|
return false;
|
|
}
|
|
} else {
|
|
if (!_networkMgr.isProviderSupportServiceInNetwork(network.getId(), service, getProvider())) {
|
|
s_logger.trace("Element " + getProvider().getName() + " doesn't support service " + service.getName()
|
|
+ " in the network " + network);
|
|
return false;
|
|
} else if (service == Service.Firewall) {
|
|
//todo - get capability here
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
@Override
|
|
public boolean implementVpc(Vpc vpc, DeployDestination dest, ReservationContext context) throws ConcurrentOperationException,
|
|
ResourceUnavailableException, InsufficientCapacityException {
|
|
|
|
Map<VirtualMachineProfile.Param, Object> params = new HashMap<VirtualMachineProfile.Param, Object>(1);
|
|
params.put(VirtualMachineProfile.Param.ReProgramGuestNetworks, true);
|
|
|
|
_vpcRouterMgr.deployVirtualRouterInVpc(vpc, dest, _accountMgr.getAccount(vpc.getAccountId()), params);
|
|
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
public boolean shutdownVpc(Vpc vpc) throws ConcurrentOperationException, ResourceUnavailableException {
|
|
List<DomainRouterVO> routers = _routerDao.listRoutersByVpcId(vpc.getId());
|
|
if (routers == null || routers.isEmpty()) {
|
|
return true;
|
|
}
|
|
boolean result = true;
|
|
for (DomainRouterVO router : routers) {
|
|
result = result && (_routerMgr.destroyRouter(router.getId()) != null);
|
|
}
|
|
return result;
|
|
}
|
|
|
|
@Override
|
|
public boolean implement(Network network, NetworkOffering offering, DeployDestination dest, ReservationContext context)
|
|
throws ResourceUnavailableException, ConcurrentOperationException,
|
|
InsufficientCapacityException {
|
|
|
|
Long vpcId = network.getVpcId();
|
|
if (vpcId == null) {
|
|
s_logger.warn("Network " + network + " is not associated with any VPC");
|
|
return false;
|
|
}
|
|
|
|
Vpc vpc = _vpcMgr.getActiveVpc(vpcId);
|
|
if (vpc == null) {
|
|
s_logger.warn("Unable to find Enabled VPC by id " + vpcId);
|
|
return false;
|
|
}
|
|
|
|
Map<VirtualMachineProfile.Param, Object> params = new HashMap<VirtualMachineProfile.Param, Object>(1);
|
|
params.put(VirtualMachineProfile.Param.ReProgramGuestNetworks, true);
|
|
|
|
List<DomainRouterVO> routers = _vpcRouterMgr.deployVirtualRouterInVpc(vpc, dest, _accountMgr.getAccount(vpc.getAccountId()), params);
|
|
if ((routers == null) || (routers.size() == 0)) {
|
|
throw new ResourceUnavailableException("Can't find at least one running router!",
|
|
DataCenter.class, network.getDataCenterId());
|
|
}
|
|
|
|
for (VirtualRouter router : routers) {
|
|
//Add router to guest network
|
|
if (!_networkMgr.isVmPartOfNetwork(router.getId(), network.getId())) {
|
|
if (!_vpcRouterMgr.addVpcRouterToGuestNetwork(router, network, false)) {
|
|
throw new CloudRuntimeException("Failed to add VPC router " + router + " to guest network " + network);
|
|
} else {
|
|
s_logger.debug("Successfully added VPC router " + router + " to guest network " + network);
|
|
}
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
public boolean prepare(Network network, NicProfile nic, VirtualMachineProfile<? extends VirtualMachine> vm,
|
|
DeployDestination dest, ReservationContext context)
|
|
throws ConcurrentOperationException, InsufficientCapacityException, ResourceUnavailableException {
|
|
|
|
Long vpcId = network.getVpcId();
|
|
if (vpcId == null) {
|
|
s_logger.warn("Network " + network + " is not associated with any VPC");
|
|
return false;
|
|
}
|
|
|
|
Vpc vpc = _vpcMgr.getActiveVpc(vpcId);
|
|
if (vpc == null) {
|
|
s_logger.warn("Unable to find Enabled VPC by id " + vpcId);
|
|
return false;
|
|
}
|
|
|
|
if (vm.getType() == Type.User) {
|
|
Map<VirtualMachineProfile.Param, Object> params = new HashMap<VirtualMachineProfile.Param, Object>(1);
|
|
params.put(VirtualMachineProfile.Param.ReProgramGuestNetworks, true);
|
|
List<DomainRouterVO> routers = _vpcRouterMgr.deployVirtualRouterInVpc(vpc, dest,
|
|
_accountMgr.getAccount(vpc.getAccountId()), params);
|
|
if ((routers == null) || (routers.size() == 0)) {
|
|
throw new ResourceUnavailableException("Can't find at least one running router!",
|
|
DataCenter.class, network.getDataCenterId());
|
|
}
|
|
for (VirtualRouter router : routers) {
|
|
//Add router to guest network if needed
|
|
if (!_networkMgr.isVmPartOfNetwork(router.getId(), network.getId())) {
|
|
if (!_vpcRouterMgr.addVpcRouterToGuestNetwork(router, network, false)) {
|
|
throw new CloudRuntimeException("Failed to add VPC router " + router + " to guest network " + network);
|
|
} else {
|
|
s_logger.debug("Successfully added VPC router " + router + " to guest network " + network);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
public boolean shutdown(Network network, ReservationContext context, boolean cleanup)
|
|
throws ConcurrentOperationException, ResourceUnavailableException {
|
|
boolean success = true;
|
|
Long vpcId = network.getVpcId();
|
|
if (vpcId == null) {
|
|
s_logger.debug("Network " + network + " doesn't belong to any vpc, so skipping unplug nic part");
|
|
return success;
|
|
}
|
|
|
|
List<? extends VirtualRouter> routers = _routerDao.listRoutersByVpcId(vpcId);
|
|
for (VirtualRouter router : routers) {
|
|
//1) Check if router is already a part of the network
|
|
if (!_ntwkService.isVmPartOfNetwork(router.getId(), network.getId())) {
|
|
s_logger.debug("Router " + router + " is not a part the network " + network);
|
|
continue;
|
|
}
|
|
//2) Call unplugNics in the network service
|
|
success = success && _vpcRouterMgr.removeRouterFromGuestNetwork(router, network, false);
|
|
if (!success) {
|
|
s_logger.warn("Failed to unplug nic in network " + network + " for virtual router " + router);
|
|
} else {
|
|
s_logger.debug("Successfully unplugged nic in network " + network + " for virtual router " + router);
|
|
}
|
|
}
|
|
|
|
return success;
|
|
}
|
|
|
|
@Override
|
|
public boolean destroy(Network config) throws ConcurrentOperationException, ResourceUnavailableException {
|
|
boolean success = true;
|
|
Long vpcId = config.getVpcId();
|
|
if (vpcId == null) {
|
|
s_logger.debug("Network " + config + " doesn't belong to any vpc, so skipping unplug nic part");
|
|
return success;
|
|
}
|
|
|
|
List<? extends VirtualRouter> routers = _routerDao.listRoutersByVpcId(vpcId);
|
|
for (VirtualRouter router : routers) {
|
|
//1) Check if router is already a part of the network
|
|
if (!_ntwkService.isVmPartOfNetwork(router.getId(), config.getId())) {
|
|
s_logger.debug("Router " + router + " is not a part the network " + config);
|
|
continue;
|
|
}
|
|
//2) Call unplugNics in the network service
|
|
success = success && _vpcRouterMgr.removeRouterFromGuestNetwork(router, config, false);
|
|
if (!success) {
|
|
s_logger.warn("Failed to unplug nic in network " + config + " for virtual router " + router);
|
|
} else {
|
|
s_logger.debug("Successfully unplugged nic in network " + config + " for virtual router " + router);
|
|
}
|
|
}
|
|
|
|
return success;
|
|
}
|
|
|
|
@Override
|
|
public Provider getProvider() {
|
|
return Provider.VPCVirtualRouter;
|
|
}
|
|
|
|
private static Map<Service, Map<Capability, String>> setCapabilities() {
|
|
Map<Service, Map<Capability, String>> capabilities = VirtualRouterElement.capabilities;
|
|
|
|
Map<Capability, String> sourceNatCapabilities = capabilities.get(Service.SourceNat);
|
|
sourceNatCapabilities.put(Capability.RedundantRouter, "false");
|
|
capabilities.put(Service.SourceNat, sourceNatCapabilities);
|
|
|
|
Map<Capability, String> vpnCapabilities = capabilities.get(Service.Vpn);
|
|
vpnCapabilities.put(Capability.VpnTypes, "s2svpn");
|
|
capabilities.put(Service.Vpn, vpnCapabilities);
|
|
|
|
Map<Capability, String> firewallCapabilities = capabilities.get(Service.Firewall);
|
|
firewallCapabilities.put(Capability.FirewallType, "percidr");
|
|
capabilities.put(Service.Firewall, firewallCapabilities);
|
|
|
|
return capabilities;
|
|
}
|
|
|
|
@Override
|
|
public Map<Service, Map<Capability, String>> getCapabilities() {
|
|
return capabilities;
|
|
}
|
|
|
|
@Override
|
|
public boolean createPrivateGateway() {
|
|
//TODO - add implementation here
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
public boolean createVpnGateway() {
|
|
//TODO - add implementation here
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
public boolean deletePrivateGateway() {
|
|
//TODO - add implementation here
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
public boolean deleteVpnGateway() {
|
|
//TODO - add implementation here
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
protected List<DomainRouterVO> getRouters(Network network, DeployDestination dest) {
|
|
return _vpcMgr.getVpcRouters(network.getVpcId());
|
|
}
|
|
|
|
@Override
|
|
public boolean applyIps(Network network, List<? extends PublicIpAddress> ipAddress, Set<Service> services)
|
|
throws ResourceUnavailableException {
|
|
boolean canHandle = true;
|
|
for (Service service : services) {
|
|
if (!canHandle(network, service)) {
|
|
canHandle = false;
|
|
break;
|
|
}
|
|
}
|
|
if (canHandle) {
|
|
List<DomainRouterVO> routers = getRouters(network, null);
|
|
if (routers == null || routers.isEmpty()) {
|
|
s_logger.debug(this.getName() + " element doesn't need to associate ip addresses on the backend; VPC virtual " +
|
|
"router doesn't exist in the network " + network.getId());
|
|
return true;
|
|
}
|
|
|
|
return _vpcRouterMgr.associateIP(network, ipAddress, routers);
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
@Override
|
|
public boolean applyNetworkACLs(Network config, List<? extends FirewallRule> rules) throws ResourceUnavailableException {
|
|
if (canHandle(config, Service.Firewall)) {
|
|
List<DomainRouterVO> routers = _routerDao.listByNetworkAndRole(config.getId(), Role.VIRTUAL_ROUTER);
|
|
if (routers == null || routers.isEmpty()) {
|
|
s_logger.debug("Virtual router elemnt doesn't need to apply firewall rules on the backend; virtual " +
|
|
"router doesn't exist in the network " + config.getId());
|
|
return true;
|
|
}
|
|
|
|
if (!_vpcRouterMgr.applyNetworkACLs(config, (List<NetworkACL>)rules, routers)) {
|
|
throw new CloudRuntimeException("Failed to apply firewall rules in network " + config.getId());
|
|
} else {
|
|
return true;
|
|
}
|
|
} else {
|
|
return true;
|
|
}
|
|
}
|
|
}
|