mirror of https://github.com/apache/cloudstack.git
235 lines
6.4 KiB
Java
235 lines
6.4 KiB
Java
/**
|
|
* Copyright (C) 2010 Cloud.com, Inc. All rights reserved.
|
|
*
|
|
* This software is licensed under the GNU General Public License v3 or later.
|
|
*
|
|
* It is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or any later version.
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
package com.cloud.network.rules;
|
|
|
|
import java.util.Date;
|
|
import java.util.List;
|
|
import java.util.UUID;
|
|
|
|
import javax.persistence.Column;
|
|
import javax.persistence.DiscriminatorColumn;
|
|
import javax.persistence.DiscriminatorType;
|
|
import javax.persistence.Entity;
|
|
import javax.persistence.EnumType;
|
|
import javax.persistence.Enumerated;
|
|
import javax.persistence.GeneratedValue;
|
|
import javax.persistence.GenerationType;
|
|
import javax.persistence.Id;
|
|
import javax.persistence.Inheritance;
|
|
import javax.persistence.InheritanceType;
|
|
import javax.persistence.Table;
|
|
import javax.persistence.Transient;
|
|
|
|
import com.cloud.network.dao.FirewallRulesCidrsDaoImpl;
|
|
import com.cloud.utils.component.ComponentLocator;
|
|
import com.cloud.utils.db.GenericDao;
|
|
import com.cloud.utils.net.NetUtils;
|
|
|
|
@Entity
|
|
@Table(name="firewall_rules")
|
|
@Inheritance(strategy=InheritanceType.JOINED)
|
|
@DiscriminatorColumn(name="purpose", discriminatorType=DiscriminatorType.STRING, length=32)
|
|
public class FirewallRuleVO implements FirewallRule {
|
|
protected final FirewallRulesCidrsDaoImpl _firewallRulesCidrsDao = ComponentLocator.inject(FirewallRulesCidrsDaoImpl.class);
|
|
|
|
@Id
|
|
@GeneratedValue(strategy=GenerationType.IDENTITY)
|
|
@Column(name="id")
|
|
long id;
|
|
|
|
@GeneratedValue(strategy=GenerationType.AUTO)
|
|
@Column(name=GenericDao.XID_COLUMN)
|
|
String xId;
|
|
|
|
@Column(name="domain_id", updatable=false)
|
|
long domainId;
|
|
|
|
@Column(name="account_id", updatable=false)
|
|
long accountId;
|
|
|
|
@Column(name="ip_address_id", updatable=false)
|
|
long sourceIpAddressId;
|
|
|
|
@Column(name="start_port", updatable=false)
|
|
Integer sourcePortStart;
|
|
|
|
@Column(name="end_port", updatable=false)
|
|
Integer sourcePortEnd;
|
|
|
|
@Column(name="protocol", updatable=false)
|
|
String protocol = NetUtils.TCP_PROTO;
|
|
|
|
@Enumerated(value=EnumType.STRING)
|
|
@Column(name="purpose")
|
|
Purpose purpose;
|
|
|
|
@Enumerated(value=EnumType.STRING)
|
|
@Column(name="state")
|
|
State state;
|
|
|
|
@Column(name=GenericDao.CREATED_COLUMN)
|
|
Date created;
|
|
|
|
@Column(name="network_id")
|
|
long networkId;
|
|
|
|
@Column(name="icmp_code")
|
|
Integer icmpCode;
|
|
|
|
@Column(name="icmp_type")
|
|
Integer icmpType;
|
|
|
|
@Column(name="related")
|
|
Long related;
|
|
|
|
// This is a delayed load value. If the value is null,
|
|
// then this field has not been loaded yet.
|
|
// Call firewallrules dao to load it.
|
|
@Transient
|
|
List<String> sourceCidrs;
|
|
|
|
|
|
public void setSourceCidrList(List<String> sourceCidrs) {
|
|
this.sourceCidrs=sourceCidrs;
|
|
}
|
|
|
|
@Override
|
|
public List<String> getSourceCidrList() {
|
|
if (sourceCidrs == null && purpose == Purpose.Firewall) {
|
|
return _firewallRulesCidrsDao.getSourceCidrs(id);
|
|
}
|
|
return sourceCidrs;
|
|
}
|
|
|
|
@Override
|
|
public long getAccountId() {
|
|
return accountId;
|
|
}
|
|
|
|
@Override
|
|
public long getDomainId() {
|
|
return domainId;
|
|
}
|
|
|
|
@Override
|
|
public long getId() {
|
|
return id;
|
|
}
|
|
|
|
@Override
|
|
public String getXid() {
|
|
return xId;
|
|
}
|
|
|
|
@Override
|
|
public long getSourceIpAddressId() {
|
|
return sourceIpAddressId;
|
|
}
|
|
|
|
@Override
|
|
public Integer getSourcePortStart() {
|
|
return sourcePortStart;
|
|
}
|
|
|
|
@Override
|
|
public Integer getSourcePortEnd() {
|
|
return sourcePortEnd;
|
|
}
|
|
|
|
@Override
|
|
public String getProtocol() {
|
|
return protocol;
|
|
}
|
|
|
|
public void setState(State state) {
|
|
this.state = state;
|
|
}
|
|
|
|
@Override
|
|
public Purpose getPurpose() {
|
|
return purpose;
|
|
}
|
|
|
|
@Override
|
|
public State getState() {
|
|
return state;
|
|
}
|
|
|
|
@Override
|
|
public long getNetworkId() {
|
|
return networkId;
|
|
}
|
|
|
|
public Date getCreated() {
|
|
return created;
|
|
}
|
|
|
|
protected FirewallRuleVO() {
|
|
}
|
|
|
|
public FirewallRuleVO(String xId, long ipAddressId, Integer portStart, Integer portEnd, String protocol, long networkId, long accountId, long domainId, Purpose purpose, List<String> sourceCidrs, Integer icmpCode, Integer icmpType, Long related) {
|
|
this.xId = xId;
|
|
if (xId == null) {
|
|
this.xId = UUID.randomUUID().toString();
|
|
}
|
|
this.accountId = accountId;
|
|
this.domainId = domainId;
|
|
this.sourceIpAddressId = ipAddressId;
|
|
this.sourcePortStart = portStart;
|
|
this.sourcePortEnd = portEnd;
|
|
this.protocol = protocol;
|
|
this.purpose = purpose;
|
|
this.networkId = networkId;
|
|
this.state = State.Staged;
|
|
this.icmpCode = icmpCode;
|
|
this.icmpType = icmpType;
|
|
this.sourceCidrs = sourceCidrs;
|
|
|
|
if (related != null) {
|
|
assert (purpose == Purpose.Firewall) : "related field can be set for rule of purpose " + Purpose.Firewall + " only";
|
|
}
|
|
|
|
this.related = related;
|
|
}
|
|
|
|
public FirewallRuleVO(String xId, long ipAddressId, int port, String protocol, long networkId, long accountId, long domainId, Purpose purpose, List<String> sourceCidrs, Integer icmpCode, Integer icmpType, Long related) {
|
|
this(xId, ipAddressId, port, port, protocol, networkId, accountId, domainId, purpose, sourceCidrs, icmpCode, icmpType, related);
|
|
}
|
|
|
|
@Override
|
|
public String toString() {
|
|
return new StringBuilder("Rule[").append(id).append("-").append(purpose).append("-").append(state).append("]").toString();
|
|
}
|
|
|
|
@Override
|
|
public Integer getIcmpCode() {
|
|
return icmpCode;
|
|
}
|
|
|
|
@Override
|
|
public Integer getIcmpType() {
|
|
return icmpType;
|
|
}
|
|
|
|
@Override
|
|
public Long getRelated() {
|
|
return related;
|
|
}
|
|
|
|
}
|