##! Cluster support for the NetControl framework. @load ./main @load base/frameworks/cluster module NetControl; export { ## This is the event used to transport add_rule calls to the manager. global cluster_netcontrol_add_rule: event(r: Rule); ## This is the event used to transport remove_rule calls to the manager. global cluster_netcontrol_remove_rule: event(id: string); ## This is the event used to transport delete_rule calls to the manager. global cluster_netcontrol_delete_rule: event(id: string); } ## Workers need ability to forward commands to manager. redef Cluster::worker2manager_events += /NetControl::cluster_netcontrol_(add|remove|delete)_rule/; ## Workers need to see the result events from the manager. redef Cluster::manager2worker_events += /NetControl::rule_(added|removed|timeout|error|exists|new|destroyed)/; function activate(p: PluginState, priority: int) { # we only run the activate function on the manager. if ( Cluster::local_node_type() != Cluster::MANAGER ) return; activate_impl(p, priority); } global local_rule_count: count = 1; function add_rule(r: Rule) : string { if ( Cluster::local_node_type() == Cluster::MANAGER ) return add_rule_impl(r); else { if ( r$id == "" ) r$id = cat(Cluster::node, ":", ++local_rule_count); event NetControl::cluster_netcontrol_add_rule(r); return r$id; } } function delete_rule(id: string) : bool { if ( Cluster::local_node_type() == Cluster::MANAGER ) return delete_rule_impl(id); else { event NetControl::cluster_netcontrol_delete_rule(id); return T; # well, we can't know here. So - just hope... } } function remove_rule(id: string) : bool { if ( Cluster::local_node_type() == Cluster::MANAGER ) return remove_rule_impl(id); else { event NetControl::cluster_netcontrol_remove_rule(id); return T; # well, we can't know here. So - just hope... } } @if ( Cluster::local_node_type() == Cluster::MANAGER ) event NetControl::cluster_netcontrol_delete_rule(id: string) { delete_rule_impl(id); } event NetControl::cluster_netcontrol_add_rule(r: Rule) { add_rule_impl(r); } event NetControl::cluster_netcontrol_remove_rule(id: string) { remove_rule_impl(id); } event rule_expire(r: Rule, p: PluginState) &priority=-5 { rule_expire_impl(r, p); } event rule_exists(r: Rule, p: PluginState, msg: string &default="") &priority=5 { rule_added_impl(r, p, T, msg); if ( r?$expire && r$expire > 0secs && ! p$plugin$can_expire ) schedule r$expire { rule_expire(r, p) }; } event rule_added(r: Rule, p: PluginState, msg: string &default="") &priority=5 { rule_added_impl(r, p, F, msg); if ( r?$expire && r$expire > 0secs && ! p$plugin$can_expire ) schedule r$expire { rule_expire(r, p) }; } event rule_removed(r: Rule, p: PluginState, msg: string &default="") &priority=-5 { rule_removed_impl(r, p, msg); } event rule_timeout(r: Rule, i: FlowInfo, p: PluginState) &priority=-5 { rule_timeout_impl(r, i, p); } event rule_error(r: Rule, p: PluginState, msg: string &default="") &priority=-5 { rule_error_impl(r, p, msg); } @endif # Workers use the events to keep track in their local state tables @if ( Cluster::local_node_type() != Cluster::MANAGER ) event rule_new(r: Rule) &priority=5 { if ( r$id in rules ) return; rules[r$id] = r; add_subnet_entry(r); } event rule_destroyed(r: Rule) &priority=5 { if ( r$id !in rules ) return; remove_subnet_entry(r); delete rules[r$id]; } @endif