pax_global_header 0000666 0000000 0000000 00000000064 14326712445 0014522 g ustar 00root root 0000000 0000000 52 comment=5c45f5d51a832de9dbcf7b5153f2cde8fb9dc302
nftlb-1.0.7/ 0000775 0000000 0000000 00000000000 14326712445 0012634 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/.gitignore 0000664 0000000 0000000 00000000273 14326712445 0014626 0 ustar 00root root 0000000 0000000 # Generated by autoconf/configure/automake
*.m4
Makefile
Makefile.in
stamp-h1
config.h.in
config.h.in~
config.log
config.status
configure
autom4te.cache
build-aux/
libnftables.pc
libtool
nftlb-1.0.7/LICENSE 0000664 0000000 0000000 00000103330 14326712445 0013641 0 ustar 00root root 0000000 0000000 GNU AFFERO GENERAL PUBLIC LICENSE
Version 3, 19 November 2007
Copyright (C) 2007 Free Software Foundation, Inc.
Copyright (C)
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as published
by the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU Affero General Public License for more details.
You should have received a copy of the GNU Affero General Public License
along with this program. If not, see },
{ },
{ ... }
],
"addresses" : [
{ },
{ },
{ ... }
],
"policies" : [
{ },
{ },
{ ... }
]
}
```
Where every farm object has the following attributes:
```
{
"name" : "", *Name of the service (required)*
"family": "", *Family of the virtual service (ipv4 by default)*
"virtual-addr": "", *IP address for the virtual service (OBSOLETE)*
"virtual-ports": "", *Port list separated by commas or ranges separated by a hyphen*
"source-addr": "", *Source IP address instead of masquerading*
"mode": "", *Topology to be implemented (required)*
"protocol": "", *Protocol to be used by the virtual service (tcp by default)*
"scheduler": "", *Scheduler to be used (round robin by default)*
"sched-param": "", *Hash input parameters (none by default)*
"persistence": "", *Configured stickiness between client and backend (none by default)*
"persist-ttl": "", *Stickiness timeout in seconds (60 by default)*
"helper": "", *L7 helper to be used (none by default)*
"log": "", *Enable logging (none by default)*
"log-prefix": "", *Farm log prefix (default "TYPE-FNAME")*
"log-rtlimit": "[/]", *Security logs rate limit (0/second by default)*
"mark": "", *Set mark mask for the farm (none by default)*
"priority": "", *Priority availability for backends > 0 (1 by default)*
"limits-ttl": "", *Timeout of banned client due to limit protections (120 seconds by default)*
"new-rtlimit": "[/]", *Number of new connections per service (0/second by default)*
"new-rtlimit-burst": "", *Number of burst packets (disabled by default)*
"new-rtlimit-log-prefix": "", *Farm new rtlimit log prefix (default "KNAME-TYPE-FNAME")*
"rst-rtlimit": "[/]", *Number of tcp resets allowed (0/second by default)*
"rst-rtlimit-burst": "", *Number of burst RST packets (disabled by default)*
"rst-rtlimit-log-prefix": "", *Farm reset rtlimit log prefix (default "KNAME-TYPE-FNAME")*
"est-connlimit": "", *Number of established connections allowed (disabled by default)*
"est-connlimit-log-prefix": "", *Farm established connlimit log prefix (default "KNAME-TYPE-FNAME")*
"tcp-strict": "", *Option to avoid bogus TCP attacks (disabled by default)*
"tcp-strict-log-prefix": "", *Farm TCP strict log prefix (default "KNAME-TYPE-FNAME")*
"verdict": "", *Verdict to apply when a limit or blacklist/whitelist matches (log and default verdict per list type by default)*
"flow-offload": "", *Option to enable flow offload (disabled by default)*
"intra-connect": "", *Option to enable connectivity from the local machine (disabled by default)*
"queue": "", *Number of the queue to send the packets to userspace (disabled by default)*
"state": "", *Set the status of the virtual service (up by default)*
"addresses" : [ *List of addresses*
{},
{},
{...}
],
"backends" : [ *List of backends*
{},
{},
{...}
],
"sessions" : [ *List of static sessions. It requires persistence enabled.*
{
{},
{},
{...}
],
"policies" : [ *List of policies*
{
"name" : "",
},
{...}
]
}
```
Where every address object has the following attributes:
```
{
"name" : "", *Name of the address (required)*
"family": "", *Family of the address (ipv4 by default)*
"ip-addr": "", *IP address*
"ports": "", *Port list separated by commas or ranges separated by a hyphen*
"protocol": "", *Protocol to be used by the address (tcp by default)*
"verdict": "", *Verdict to apply when a limit or blacklist/whitelist matches (log and default verdict per list type by default)*
"log-prefix": "", *Address log prefix (default "TYPE-FNAME")*
"log-rtlimit": "[/]", *Security logs rate limit per second (0/second by default)*
}
```
Where every backend object has the following attributes:
```
{
"name" : "", *Name of the backend (required)*
"ip-addr": "", *IP address for the backend (required)*
"port": "", *Backend port to redirect the connections*
"source-addr": "", *Source IP address for a certain backend instead of masquerading or virtual service source address*
"weight": "", *Weight of the backend (1 by default)*
"priority": "", *Priority availability for the backend > 0 (1 by default)*
"mark": "", *Set mark mask for the backend (none by default)*
"est-connlimit": "", *Number of established connections allowed per backend (disabled by default)*
"est-connlimit-log-prefix": "", *Backend established connections log prefix (default "KNAME-FNAME-BNAME")*
"state": "", *Set the status of the backend (up by default)*
}
```
Where every session object has the following attributes:
```
{
"client" : "", *Client with the same format than persistence configuration*
"backend": "", *Backend ID to set a stickyness between client and backend*
"expiration": "" *Dynamic sessions timeout. Static sessions doesn't include this attribute*
}
```
Where every policy object has the following attributes:
```
{
"name" : "", *Name of the policy (required)*
"type": "", *Policy type*
"family": "", *Family of the policy (ipv4 by default)*
"log-prefix": "", *Policy established connections log prefix (default "KNAME-TYPE-PNAME-FNAME")*
"elements" : [ *List of IPs or networks*
{
"data" : ""
},
{...}
]
}
```
You can find some examples in the *tests/* folder.
### API examples
Once launched nftlb you can manage it through the API.
Virtual service listing.
```
curl -H "Key: " http://:5555/farms
```
Setup a new virtual service.
```
curl -H "Key: " -X POST http://:5555/farms -d "@tests/008_snat_ipv4_all_rr.json"
```
Add a new backend into a virtual service.
```
curl -H "Key: " -X POST http://:5555/farms -d '{"farms" : [ { "name" : "myfarm", "backends" : [ { "name" : "mynewbck", "ip-addr" : "192.168.0.150", "state" : "up" } ] } ] }'
```
Delete a virtual service.
```
curl -H "Key: " -X DELETE http://:5555/farms/lb01
```
Delete a backend of a virtual service.
```
curl -H "Key: " -X DELETE http://:5555/farms/lb01/backends/bck1
```
Get the static and dynamic sessions.
```
curl -H "Key: " -X GET http://:5555/farms/lb01/sessions
```
Addresses listing.
```
curl -H "Key: " http://:5555/addresses
```
Addresses listing.
```
curl -H "Key: " http://:5555/addresses
```
Create a new address.
```
curl -H "Key: " -X POST http://:5555/addresses -d '{ "addresses" : [ { "name" : "myaddr", "family": "ipv4", "ip-addr" : "192.168.0.150", "ports": "8080", "protocol": "tcp" } ] }'
```
Assign an address to a farm.
```
curl -H "Key: " -X POST http://:5555/farms -d '{ "farms" : [ { "name" : "myfarm", "addresses" : [ { "name" : "myaddr" } ] } ] }'
```
Delete an address.
```
curl -H "Key: " -X DELETE http://:5555/addresses/myaddr
```
Delete an assigned address.
```
curl -H "Key: " -X DELETE http://:5555/farms/myfarm/addresses/myaddr
```
Delete an address.
```
curl -H "Key: " -X DELETE http://:5555/addresses/myaddr
```
## How it works
nftlb uses the nftables infrastructure to build virtual services, from user to kernel side. In that regard, the expressions **numgen** (with its **random** and **inc** modes) and **hash** (say **jhash** and **symhash**) allows to distribute traffic among several backends among other properties. More information:
[https://wiki.nftables.org/wiki-nftables/index.php/Load_balancing](https://wiki.nftables.org/wiki-nftables/index.php/Load_balancing)
[https://www.netfilter.org/projects/nftables/manpage.html](https://www.netfilter.org/projects/nftables/manpage.html)
This software creates the required tables named **nftlb** which are exclusive to the nftlb service and should not be managed manually. Ex: ip nftlb, ip6 nftlb, netdev nftlb...
The integration of nftlb with custom firewall rules are possible creating separated tables and playing with chain priorities. More information:
[https://www.zevenet.com/knowledge-base_category/nftlb/](https://www.zevenet.com/knowledge-base_category/nftlb/)
## Support
Please refer to the [netfilter users mailing list](http://netfilter.org/mailinglists.html#ml-user)
nftlb-1.0.7/configure.ac 0000664 0000000 0000000 00000001375 14326712445 0015130 0 ustar 00root root 0000000 0000000 AC_INIT([nftlb], [1.0.7], [netfilter-devel@vger.kernel.org])
AC_CONFIG_AUX_DIR([build-aux])
AC_CONFIG_MACRO_DIR([m4])
AM_INIT_AUTOMAKE([-Wall foreign subdir-objects
tar-pax no-dist-gzip dist-bzip2 1.6])
dnl kernel style compile messages
m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
AC_PROG_CC
AC_PROG_MKDIR_P
AM_PROG_AR
AM_PROG_LIBTOOL
AC_PROG_INSTALL
AC_PROG_LN_S
AC_PROG_SED
PKG_CHECK_MODULES([LIBNFTABLES], [libnftables >= 0.9])
PKG_CHECK_MODULES([LIBJSON], [jansson >= 2.3])
PKG_CHECK_MODULES([LIBMNL], [libmnl >= 1.0.4])
AC_CHECK_HEADER([ev.h], [EVENTINC="-include ev.h"],
[AC_CHECK_HEADER([libev/ev.h],
[EVENTINC="-include libev/ev.h"],
[AC_MSG_ERROR([ev.h not found])])])
AC_CONFIG_FILES([Makefile src/Makefile])
AC_OUTPUT
nftlb-1.0.7/include/ 0000775 0000000 0000000 00000000000 14326712445 0014257 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/include/addresses.h 0000664 0000000 0000000 00000005073 14326712445 0016412 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#define ETHER_HDRLEN 14
#define IP4_HDRLEN 20
#define IP6_HDRLEN 40
#define ICMP_HDRLEN 8
#define ICMP_DATALEN 4
uint16_t checksum(uint16_t *addr, int len);
uint16_t icmp6_checksum(struct ip6_hdr iphdr, struct icmp6_hdr icmp6hdr, uint8_t *payload, int payloadlen);
#endif /* _CHECKSUM_H_ */
nftlb-1.0.7/include/config.h 0000664 0000000 0000000 00000017042 14326712445 0015701 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
int loop_init(void);
int loop_run(void);
struct ev_loop *get_loop(void);
struct ev_io *events_get_ntlnk(void);
struct ev_io *events_create_ntlnk(void);
void events_delete_ntlnk(void);
struct ev_io *events_get_srv(void);
struct ev_io *events_create_srv(void);
void events_delete_srv(void);
#endif /* _EVENTS_H_ */
nftlb-1.0.7/include/farmaddress.h 0000664 0000000 0000000 00000003730 14326712445 0016726 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#define prefetch(x) ((void)0)
#define LIST_POISON1 ((void *)0x12345678)
#define LIST_POISON2 ((void *)0x87654321)
/*
* Simple doubly linked list implementation.
*
* Some of the internal functions ("__xxx") are useful when
* manipulating whole lists rather than single entries, as
* sometimes we already know the next/prev entries and we can
* generate better code by using them directly rather than
* using the generic single-entry routines.
*/
struct list_head {
struct list_head *next, *prev;
};
#define LIST_HEAD_INIT(name) { &(name), &(name) }
#define LIST_HEAD(name) \
struct list_head name = LIST_HEAD_INIT(name)
#define container_of(ptr, type, member) ({ \
typeof( ((type *)0)->member ) *__mptr = (ptr); \
(type *)( (void *)__mptr - offsetof(type,member) );})
static inline void init_list_head(struct list_head *list)
{
list->next = list;
list->prev = list;
}
/*
* Insert a new entry between two known consecutive entries.
*
* This is only for internal list manipulation where we know
* the prev/next entries already!
*/
static inline void __list_add(struct list_head *new,
struct list_head *prev,
struct list_head *next)
{
next->prev = new;
new->next = next;
new->prev = prev;
prev->next = new;
}
/**
* list_add - add a new entry
* @new: new entry to be added
* @head: list head to add it after
*
* Insert a new entry after the specified head.
* This is good for implementing stacks.
*/
static inline void list_add(struct list_head *new, struct list_head *head)
{
__list_add(new, head, head->next);
}
/**
* list_add_tail - add a new entry
* @new: new entry to be added
* @head: list head to add it before
*
* Insert a new entry before the specified head.
* This is useful for implementing queues.
*/
static inline void list_add_tail(struct list_head *new, struct list_head *head)
{
__list_add(new, head->prev, head);
}
/*
* Delete a list entry by making the prev/next entries
* point to each other.
*
* This is only for internal list manipulation where we know
* the prev/next entries already!
*/
static inline void __list_del(struct list_head * prev, struct list_head * next)
{
next->prev = prev;
prev->next = next;
}
/**
* list_del - deletes entry from list.
* @entry: the element to delete from the list.
* Note: list_empty() on entry does not return true after this, the entry is
* in an undefined state.
*/
static inline void list_del(struct list_head *entry)
{
__list_del(entry->prev, entry->next);
entry->next = LIST_POISON1;
entry->prev = LIST_POISON2;
}
/**
* list_replace - replace old entry by new one
* @old : the element to be replaced
* @new : the new element to insert
*
* If @old was empty, it will be overwritten.
*/
static inline void list_replace(struct list_head *old,
struct list_head *new)
{
new->next = old->next;
new->next->prev = new;
new->prev = old->prev;
new->prev->next = new;
}
static inline void list_replace_init(struct list_head *old,
struct list_head *new)
{
list_replace(old, new);
init_list_head(old);
}
/**
* list_del_init - deletes entry from list and reinitialize it.
* @entry: the element to delete from the list.
*/
static inline void list_del_init(struct list_head *entry)
{
__list_del(entry->prev, entry->next);
init_list_head(entry);
}
/**
* list_move - delete from one list and add as another's head
* @list: the entry to move
* @head: the head that will precede our entry
*/
static inline void list_move(struct list_head *list, struct list_head *head)
{
__list_del(list->prev, list->next);
list_add(list, head);
}
/**
* list_move_tail - delete from one list and add as another's tail
* @list: the entry to move
* @head: the head that will follow our entry
*/
static inline void list_move_tail(struct list_head *list,
struct list_head *head)
{
__list_del(list->prev, list->next);
list_add_tail(list, head);
}
/**
* list_is_last - tests whether @list is the last entry in list @head
* @list: the entry to test
* @head: the head of the list
*/
static inline int list_is_last(const struct list_head *list,
const struct list_head *head)
{
return list->next == head;
}
/**
* list_empty - tests whether a list is empty
* @head: the list to test.
*/
static inline int list_empty(const struct list_head *head)
{
return head->next == head;
}
/**
* list_empty_careful - tests whether a list is empty and not being modified
* @head: the list to test
*
* Description:
* tests whether a list is empty _and_ checks that no other CPU might be
* in the process of modifying either member (next or prev)
*
* NOTE: using list_empty_careful() without synchronization
* can only be safe if the only activity that can happen
* to the list entry is list_del_init(). Eg. it cannot be used
* if another CPU could re-list_add() it.
*/
static inline int list_empty_careful(const struct list_head *head)
{
struct list_head *next = head->next;
return (next == head) && (next == head->prev);
}
/**
* list_is_singular - tests whether a list has just one entry.
* @head: the list to test.
*/
static inline int list_is_singular(const struct list_head *head)
{
return !list_empty(head) && (head->next == head->prev);
}
static inline void __list_cut_position(struct list_head *list,
struct list_head *head, struct list_head *entry)
{
struct list_head *new_first = entry->next;
list->next = head->next;
list->next->prev = list;
list->prev = entry;
entry->next = list;
head->next = new_first;
new_first->prev = head;
}
/**
* list_cut_position - cut a list into two
* @list: a new list to add all removed entries
* @head: a list with entries
* @entry: an entry within head, could be the head itself
* and if so we won't cut the list
*
* This helper moves the initial part of @head, up to and
* including @entry, from @head to @list. You should
* pass on @entry an element you know is on @head. @list
* should be an empty list or a list you do not care about
* losing its data.
*
*/
static inline void list_cut_position(struct list_head *list,
struct list_head *head, struct list_head *entry)
{
if (list_empty(head))
return;
if (list_is_singular(head) &&
(head->next != entry && head != entry))
return;
if (entry == head)
init_list_head(list);
else
__list_cut_position(list, head, entry);
}
static inline void __list_splice(const struct list_head *list,
struct list_head *prev,
struct list_head *next)
{
struct list_head *first = list->next;
struct list_head *last = list->prev;
first->prev = prev;
prev->next = first;
last->next = next;
next->prev = last;
}
/**
* list_splice - join two lists, this is designed for stacks
* @list: the new list to add.
* @head: the place to add it in the first list.
*/
static inline void list_splice(const struct list_head *list,
struct list_head *head)
{
if (!list_empty(list))
__list_splice(list, head, head->next);
}
/**
* list_splice_tail - join two lists, each list being a queue
* @list: the new list to add.
* @head: the place to add it in the first list.
*/
static inline void list_splice_tail(struct list_head *list,
struct list_head *head)
{
if (!list_empty(list))
__list_splice(list, head->prev, head);
}
/**
* list_splice_init - join two lists and reinitialise the emptied list.
* @list: the new list to add.
* @head: the place to add it in the first list.
*
* The list at @list is reinitialised
*/
static inline void list_splice_init(struct list_head *list,
struct list_head *head)
{
if (!list_empty(list)) {
__list_splice(list, head, head->next);
init_list_head(list);
}
}
/**
* list_splice_tail_init - join two lists and reinitialise the emptied list
* @list: the new list to add.
* @head: the place to add it in the first list.
*
* Each of the lists is a queue.
* The list at @list is reinitialised
*/
static inline void list_splice_tail_init(struct list_head *list,
struct list_head *head)
{
if (!list_empty(list)) {
__list_splice(list, head->prev, head);
init_list_head(list);
}
}
/**
* list_entry - get the struct for this entry
* @ptr: the &struct list_head pointer.
* @type: the type of the struct this is embedded in.
* @member: the name of the list_struct within the struct.
*/
#define list_entry(ptr, type, member) \
container_of(ptr, type, member)
/**
* list_first_entry - get the first element from a list
* @ptr: the list head to take the element from.
* @type: the type of the struct this is embedded in.
* @member: the name of the list_struct within the struct.
*
* Note, that list is expected to be not empty.
*/
#define list_first_entry(ptr, type, member) \
list_entry((ptr)->next, type, member)
/**
* list_for_each_entry - iterate over list of given type
* @pos: the type * to use as a loop cursor.
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*/
#define list_for_each_entry(pos, head, member) \
for (pos = list_entry((head)->next, typeof(*pos), member); \
prefetch(pos->member.next), &pos->member != (head); \
pos = list_entry(pos->member.next, typeof(*pos), member))
/**
* list_for_each_entry_reverse - iterate backwards over list of given type.
* @pos: the type * to use as a loop cursor.
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*/
#define list_for_each_entry_reverse(pos, head, member) \
for (pos = list_entry((head)->prev, typeof(*pos), member); \
prefetch(pos->member.prev), &pos->member != (head); \
pos = list_entry(pos->member.prev, typeof(*pos), member))
/**
* list_prepare_entry - prepare a pos entry for use in list_for_each_entry_continue()
* @pos: the type * to use as a start point
* @head: the head of the list
* @member: the name of the list_struct within the struct.
*
* Prepares a pos entry for use as a start point in list_for_each_entry_continue().
*/
#define list_prepare_entry(pos, head, member) \
((pos) ? : list_entry(head, typeof(*pos), member))
/**
* list_for_each_entry_continue - continue iteration over list of given type
* @pos: the type * to use as a loop cursor.
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*
* Continue to iterate over list of given type, continuing after
* the current position.
*/
#define list_for_each_entry_continue(pos, head, member) \
for (pos = list_entry(pos->member.next, typeof(*pos), member); \
prefetch(pos->member.next), &pos->member != (head); \
pos = list_entry(pos->member.next, typeof(*pos), member))
/**
* list_for_each_entry_continue_reverse - iterate backwards from the given point
* @pos: the type * to use as a loop cursor.
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*
* Start to iterate over list of given type backwards, continuing after
* the current position.
*/
#define list_for_each_entry_continue_reverse(pos, head, member) \
for (pos = list_entry(pos->member.prev, typeof(*pos), member); \
prefetch(pos->member.prev), &pos->member != (head); \
pos = list_entry(pos->member.prev, typeof(*pos), member))
/**
* list_for_each_entry_from - iterate over list of given type from the current point
* @pos: the type * to use as a loop cursor.
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*
* Iterate over list of given type, continuing from current position.
*/
#define list_for_each_entry_from(pos, head, member) \
for (; prefetch(pos->member.next), &pos->member != (head); \
pos = list_entry(pos->member.next, typeof(*pos), member))
/**
* list_for_each_entry_safe - iterate over list of given type safe against removal of list entry
* @pos: the type * to use as a loop cursor.
* @n: another type * to use as temporary storage
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*/
#define list_for_each_entry_safe(pos, n, head, member) \
for (pos = list_entry((head)->next, typeof(*pos), member), \
n = list_entry(pos->member.next, typeof(*pos), member); \
&pos->member != (head); \
pos = n, n = list_entry(n->member.next, typeof(*n), member))
/**
* list_for_each_entry_safe_continue
* @pos: the type * to use as a loop cursor.
* @n: another type * to use as temporary storage
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*
* Iterate over list of given type, continuing after current point,
* safe against removal of list entry.
*/
#define list_for_each_entry_safe_continue(pos, n, head, member) \
for (pos = list_entry(pos->member.next, typeof(*pos), member), \
n = list_entry(pos->member.next, typeof(*pos), member); \
&pos->member != (head); \
pos = n, n = list_entry(n->member.next, typeof(*n), member))
/**
* list_for_each_entry_safe_from
* @pos: the type * to use as a loop cursor.
* @n: another type * to use as temporary storage
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*
* Iterate over list of given type from current point, safe against
* removal of list entry.
*/
#define list_for_each_entry_safe_from(pos, n, head, member) \
for (n = list_entry(pos->member.next, typeof(*pos), member); \
&pos->member != (head); \
pos = n, n = list_entry(n->member.next, typeof(*n), member))
/**
* list_for_each_entry_safe_reverse
* @pos: the type * to use as a loop cursor.
* @n: another type * to use as temporary storage
* @head: the head for your list.
* @member: the name of the list_struct within the struct.
*
* Iterate backwards over list of given type, safe against removal
* of list entry.
*/
#define list_for_each_entry_safe_reverse(pos, n, head, member) \
for (pos = list_entry((head)->prev, typeof(*pos), member), \
n = list_entry(pos->member.prev, typeof(*pos), member); \
&pos->member != (head); \
pos = n, n = list_entry(n->member.prev, typeof(*n), member))
/*
* Double linked lists with a single pointer list head.
* Mostly useful for hash tables where the two pointer list head is
* too wasteful.
* You lose the ability to access the tail in O(1).
*/
struct hlist_head {
struct hlist_node *first;
};
struct hlist_node {
struct hlist_node *next, **pprev;
};
#define HLIST_HEAD_INIT { .first = NULL }
#define HLIST_HEAD(name) struct hlist_head name = { .first = NULL }
#define init_hlist_head(ptr) ((ptr)->first = NULL)
static inline void init_hlist_node(struct hlist_node *h)
{
h->next = NULL;
h->pprev = NULL;
}
static inline int hlist_unhashed(const struct hlist_node *h)
{
return !h->pprev;
}
static inline int hlist_empty(const struct hlist_head *h)
{
return !h->first;
}
static inline void __hlist_del(struct hlist_node *n)
{
struct hlist_node *next = n->next;
struct hlist_node **pprev = n->pprev;
*pprev = next;
if (next)
next->pprev = pprev;
}
static inline void hlist_del(struct hlist_node *n)
{
__hlist_del(n);
n->next = LIST_POISON1;
n->pprev = LIST_POISON2;
}
static inline void hlist_del_init(struct hlist_node *n)
{
if (!hlist_unhashed(n)) {
__hlist_del(n);
init_hlist_node(n);
}
}
static inline void hlist_add_head(struct hlist_node *n, struct hlist_head *h)
{
struct hlist_node *first = h->first;
n->next = first;
if (first)
first->pprev = &n->next;
h->first = n;
n->pprev = &h->first;
}
/* next must be != NULL */
static inline void hlist_add_before(struct hlist_node *n,
struct hlist_node *next)
{
n->pprev = next->pprev;
n->next = next;
next->pprev = &n->next;
*(n->pprev) = n;
}
static inline void hlist_add_after(struct hlist_node *n,
struct hlist_node *next)
{
next->next = n->next;
n->next = next;
next->pprev = &n->next;
if(next->next)
next->next->pprev = &next->next;
}
#define hlist_entry(ptr, type, member) container_of(ptr,type,member)
#define hlist_for_each(pos, head) \
for (pos = (head)->first; pos && ({ prefetch(pos->next); 1; }); \
pos = pos->next)
#define hlist_for_each_safe(pos, n, head) \
for (pos = (head)->first; pos && ({ n = pos->next; 1; }); \
pos = n)
/**
* hlist_for_each_entry - iterate over list of given type
* @tpos: the type * to use as a loop cursor.
* @pos: the &struct hlist_node to use as a loop cursor.
* @head: the head for your list.
* @member: the name of the hlist_node within the struct.
*/
#define hlist_for_each_entry(tpos, pos, head, member) \
for (pos = (head)->first; \
pos && ({ prefetch(pos->next); 1;}) && \
({ tpos = hlist_entry(pos, typeof(*tpos), member); 1;}); \
pos = pos->next)
/**
* hlist_for_each_entry_continue - iterate over a hlist continuing after current point
* @tpos: the type * to use as a loop cursor.
* @pos: the &struct hlist_node to use as a loop cursor.
* @member: the name of the hlist_node within the struct.
*/
#define hlist_for_each_entry_continue(tpos, pos, member) \
for (pos = (pos)->next; \
pos && ({ prefetch(pos->next); 1;}) && \
({ tpos = hlist_entry(pos, typeof(*tpos), member); 1;}); \
pos = pos->next)
/**
* hlist_for_each_entry_from - iterate over a hlist continuing from current point
* @tpos: the type * to use as a loop cursor.
* @pos: the &struct hlist_node to use as a loop cursor.
* @member: the name of the hlist_node within the struct.
*/
#define hlist_for_each_entry_from(tpos, pos, member) \
for (; pos && ({ prefetch(pos->next); 1;}) && \
({ tpos = hlist_entry(pos, typeof(*tpos), member); 1;}); \
pos = pos->next)
/**
* hlist_for_each_entry_safe - iterate over list of given type safe against removal of list entry
* @tpos: the type * to use as a loop cursor.
* @pos: the &struct hlist_node to use as a loop cursor.
* @n: another &struct hlist_node to use as temporary storage
* @head: the head for your list.
* @member: the name of the hlist_node within the struct.
*/
#define hlist_for_each_entry_safe(tpos, pos, n, head, member) \
for (pos = (head)->first; \
pos && ({ n = pos->next; 1; }) && \
({ tpos = hlist_entry(pos, typeof(*tpos), member); 1;}); \
pos = n)
#endif
nftlb-1.0.7/include/network.h 0000664 0000000 0000000 00000002622 14326712445 0016123 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
*/
#ifndef LIB_NFTABLES_H
#define LIB_NFTABLES_H
#define _GNU_SOURCE
#include
#include
#include
#ifdef __cplusplus
extern "C" {
#endif
struct nft_ctx;
enum nft_debug_level {
NFT_DEBUG_SCANNER = 0x1,
NFT_DEBUG_PARSER = 0x2,
NFT_DEBUG_EVALUATION = 0x4,
NFT_DEBUG_NETLINK = 0x8,
NFT_DEBUG_MNL = 0x10,
NFT_DEBUG_PROTO_CTX = 0x20,
NFT_DEBUG_SEGTREE = 0x40,
};
/**
* Possible flags to pass to nft_ctx_new()
*/
#define NFT_CTX_DEFAULT 0
struct nft_ctx *nft_ctx_new(uint32_t flags);
void nft_ctx_free(struct nft_ctx *ctx);
bool nft_ctx_get_dry_run(struct nft_ctx *ctx);
void nft_ctx_set_dry_run(struct nft_ctx *ctx, bool dry);
enum {
NFT_CTX_OUTPUT_REVERSEDNS = (1 << 0),
NFT_CTX_OUTPUT_SERVICE = (1 << 1),
NFT_CTX_OUTPUT_STATELESS = (1 << 2),
NFT_CTX_OUTPUT_HANDLE = (1 << 3),
NFT_CTX_OUTPUT_JSON = (1 << 4),
NFT_CTX_OUTPUT_ECHO = (1 << 5),
NFT_CTX_OUTPUT_GUID = (1 << 6),
NFT_CTX_OUTPUT_NUMERIC_PROTO = (1 << 7),
NFT_CTX_OUTPUT_NUMERIC_PRIO = (1 << 8),
NFT_CTX_OUTPUT_NUMERIC_SYMBOL = (1 << 9),
NFT_CTX_OUTPUT_NUMERIC_ALL = (NFT_CTX_OUTPUT_NUMERIC_PROTO |
NFT_CTX_OUTPUT_NUMERIC_PRIO |
NFT_CTX_OUTPUT_NUMERIC_SYMBOL),
};
unsigned int nft_ctx_output_get_flags(struct nft_ctx *ctx);
void nft_ctx_output_set_flags(struct nft_ctx *ctx, unsigned int flags);
unsigned int nft_ctx_output_get_debug(struct nft_ctx *ctx);
void nft_ctx_output_set_debug(struct nft_ctx *ctx, unsigned int mask);
FILE *nft_ctx_set_output(struct nft_ctx *ctx, FILE *fp);
int nft_ctx_buffer_output(struct nft_ctx *ctx);
int nft_ctx_unbuffer_output(struct nft_ctx *ctx);
const char *nft_ctx_get_output_buffer(struct nft_ctx *ctx);
FILE *nft_ctx_set_error(struct nft_ctx *ctx, FILE *fp);
int nft_ctx_buffer_error(struct nft_ctx *ctx);
int nft_ctx_unbuffer_error(struct nft_ctx *ctx);
const char *nft_ctx_get_error_buffer(struct nft_ctx *ctx);
int nft_ctx_add_include_path(struct nft_ctx *ctx, const char *path);
void nft_ctx_clear_include_paths(struct nft_ctx *ctx);
int nft_run_cmd_from_buffer(struct nft_ctx *nft, const char *buf);
int nft_run_cmd_from_filename(struct nft_ctx *nft, const char *filename);
#ifdef __cplusplus
} /* extern "C" */
#endif
#endif /* LIB_NFTABLES_H */
nftlb-1.0.7/include/nftst.h 0000664 0000000 0000000 00000004366 14326712445 0015577 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#define DEFAULT_BUFFER_SIZE 4096
#define EXTRA_SIZE 1024
struct sbuffer {
int size;
int next;
char *data;
};
int get_buf_size(struct sbuffer *buf);
char * get_buf_next(struct sbuffer *buf);
char * get_buf_data(struct sbuffer *buf);
int resize_buf(struct sbuffer *buf, int times);
int create_buf(struct sbuffer *buf);
int clean_buf(struct sbuffer *buf);
int reset_buf(struct sbuffer *buf);
int isempty_buf(struct sbuffer *buf);
int concat_buf_va(struct sbuffer *buf, int len, char *fmt, va_list args);
int concat_buf(struct sbuffer *buf, char *fmt, ...);
#endif /* _SBUFFER_H_ */
nftlb-1.0.7/include/server.h 0000664 0000000 0000000 00000002067 14326712445 0015743 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#define NFTLB_LOG_LEVEL_DEFAULT LOG_NOTICE
#define NFTLB_LOG_OUTPUT_DEFAULT VALUE_LOG_OUTPUT_SYSLOG
#define NFTLB_LOG_OUTPUT_SYSLOG (1 << 0)
#define NFTLB_LOG_OUTPUT_STDOUT (1 << 1)
#define NFTLB_LOG_OUTPUT_STDERR (1 << 2)
enum log_output {
VALUE_LOG_OUTPUT_SYSLOG,
VALUE_LOG_OUTPUT_STDOUT,
VALUE_LOG_OUTPUT_STDERR,
VALUE_LOG_OUTPUT_SYSOUT,
VALUE_LOG_OUTPUT_SYSERR,
};
void tools_snprintf(char *strdst, int size, char *strsrc);
void tools_log_set_level(int loglevel);
void tools_log_set_output(int output);
int tools_printlog(int loglevel, char *fmt, ...);
int tools_log_get_level(void);
#endif /* _TOOLS_H_ */
nftlb-1.0.7/m4/ 0000775 0000000 0000000 00000000000 14326712445 0013154 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/m4/.gitignore 0000664 0000000 0000000 00000000024 14326712445 0015140 0 ustar 00root root 0000000 0000000 /lt*.m4
/libtool.m4
nftlb-1.0.7/src/ 0000775 0000000 0000000 00000000000 14326712445 0013423 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/src/.gitignore 0000664 0000000 0000000 00000000021 14326712445 0015404 0 ustar 00root root 0000000 0000000 *.o
nftlb
.deps/
nftlb-1.0.7/src/Makefile.am 0000664 0000000 0000000 00000000657 14326712445 0015467 0 ustar 00root root 0000000 0000000 include $(top_srcdir)/Make_global.am
sbin_PROGRAMS = nftlb
nftlb_SOURCES = config.c \
main.c \
sbuffer.c \
objects.c \
farms.c \
backends.c \
nft.c \
events.c \
network.c \
server.c \
policies.c \
elements.c \
farmpolicy.c \
sessions.c \
checksum.c \
tools.c \
addresses.c \
farmaddress.c \
addresspolicy.c \
nftst.c
nftlb_LDADD = ${LIBNFTABLES_LIBS} ${LIBJSON_LIBS} ${LIBMNL_LIBS} -lev
nftlb-1.0.7/src/addresses.c 0000664 0000000 0000000 00000035147 14326712445 0015556 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include
#include "addresses.h"
#include "farms.h"
#include "backends.h"
#include "policies.h"
#include "addresspolicy.h"
#include "objects.h"
#include "network.h"
#include "config.h"
#include "nft.h"
#include "tools.h"
struct address * address_create(char *name)
{
struct list_head *addresses = obj_get_addresses();
struct address *paddress = (struct address *)malloc(sizeof(struct address));
if (!paddress) {
tools_printlog(LOG_ERR, "Address memory allocation error");
return NULL;
}
obj_set_attribute_string(name, &paddress->name);
paddress->fqdn = DEFAULT_FQDN;
paddress->iface = DEFAULT_IFNAME;
paddress->iethaddr = DEFAULT_ETHADDR;
paddress->ifidx = DEFAULT_IFIDX;
paddress->ipaddr = DEFAULT_VIRTADDR;
paddress->ports = DEFAULT_VIRTPORTS;
paddress->family = DEFAULT_FAMILY;
paddress->protocol = DEFAULT_PROTO;
paddress->action = DEFAULT_ACTION;
paddress->verdict = DEFAULT_VERDICT;
paddress->logprefix = DEFAULT_LOG_LOGPREFIX_ADDRESS;
paddress->logrtlimit = DEFAULT_LOG_RTLIMIT;
paddress->logrtlimit_unit = DEFAULT_RTLIMIT_UNIT;
paddress->policies_action = ACTION_NONE;
init_list_head(&paddress->policies);
paddress->policies_used = 0;
paddress->used = 0;
paddress->nft_chains = 0;
paddress->nports = 0;
list_add_tail(&paddress->list, addresses);
obj_set_total_addresses(obj_get_total_addresses() + 1);
return paddress;
}
int address_delete(struct address *paddress)
{
if (!paddress)
return 0;
tools_printlog(LOG_DEBUG, "%s():%d: deleting address %s",
__FUNCTION__, __LINE__, paddress->name);
list_del(&paddress->list);
if (paddress->name && strcmp(paddress->name, "") != 0)
free(paddress->name);
if (paddress->fqdn && strcmp(paddress->fqdn, "") != 0)
free(paddress->fqdn);
if (paddress->iface && strcmp(paddress->iface, "") != 0)
free(paddress->iface);
if (paddress->iethaddr && strcmp(paddress->iethaddr, "") != 0)
free(paddress->iethaddr);
if (paddress->ipaddr && strcmp(paddress->ipaddr, "") != 0)
free(paddress->ipaddr);
if (paddress->ports && strcmp(paddress->ports, "") != 0)
free(paddress->ports);
if (paddress->logprefix && strcmp(paddress->logprefix, DEFAULT_LOG_LOGPREFIX_ADDRESS) != 0)
free(paddress->logprefix);
free(paddress);
obj_set_total_addresses(obj_get_total_addresses() - 1);
return 0;
}
static void address_get_range_ports(const char *ptr, int *first, int *last)
{
sscanf(ptr, "%d-%d[^,]", first, last);
}
int address_search_array_port(struct address *a, int port)
{
if (a->port_list[port-1])
return 1;
return 0;
}
static void address_add_array_port(struct address *a, int port)
{
if (!a->port_list[port-1]) {
a->nports++;
a->port_list[port-1] = 1;
}
}
static int address_get_array_ports(struct address *a)
{
int index = 0;
char *ptr;
int iport, new;
int last = 0;
a->nports = 0;
memset(a->port_list, 0, NFTLB_MAX_PORTS * sizeof(int));
ptr = a->ports;
while (ptr != NULL && *ptr != '\0') {
last = new = 0;
address_get_range_ports(ptr, &new, &last);
if (last == 0)
last = new;
if (new > last)
goto next;
for (iport = new; iport <= last; iport++)
address_add_array_port(a, iport);
next:
ptr = strchr(ptr, ',');
if (ptr != NULL)
ptr++;
}
return index;
}
int address_set_ports(struct address *a, char *new_value)
{
if (strcmp(new_value, "0") != 0) {
if (strcmp(a->ports, DEFAULT_VIRTPORTS) != 0)
free(a->ports);
obj_set_attribute_string(new_value, &a->ports);
}
if (strcmp(new_value, "") == 0)
a->protocol = VALUE_PROTO_ALL;
address_get_array_ports(a);
return 0;
}
void address_print(struct address *a)
{
char buf[100] = {};
tools_printlog(LOG_DEBUG," [address] ");
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NAME, a->name);
if (a->fqdn)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_FQDN, a->fqdn);
if (a->iface)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IFACE, a->iface);
if (a->iethaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IETHADDR, a->iethaddr);
tools_printlog(LOG_DEBUG," *[ifidx] %d", a->ifidx);
if (a->ipaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IPADDR, a->ipaddr);
if (a->ports)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_PORTS, a->ports);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_FAMILY, obj_print_family(a->family));
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_PROTO, obj_print_proto(a->protocol));
obj_print_verdict(a->verdict, (char *)buf);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_VERDICT, buf);
if (a->logprefix)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_LOGPREFIX, a->logprefix);
obj_print_rtlimit(buf, a->logrtlimit, a->logrtlimit_unit);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_LOG_RTLIMIT, buf);
tools_printlog(LOG_DEBUG," *[used] %d", a->used);
tools_printlog(LOG_DEBUG," *[%s] %d", CONFIG_KEY_ACTION, a->action);
tools_printlog(LOG_DEBUG," *[policies_action] %d", a->policies_action);
tools_printlog(LOG_DEBUG," *[nft_chains] %x", a->nft_chains);
if (a->policies_used > 0)
addresspolicy_s_print(a);
}
static int address_set_iface_info(struct address *a)
{
unsigned char ether[ETH_HW_ADDR_LEN];
char streth[ETH_HW_STR_LEN] = {};
char if_str[IFNAMSIZ];
int if_index;
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: address %s set interface info for interface", __FUNCTION__, __LINE__, a->name);
if (a->iface && strcmp(a->iface, IFACE_LOOPBACK) == 0) {
tools_printlog(LOG_DEBUG, "%s():%d: address %s doesn't require input netinfo, loopback interface", __FUNCTION__, __LINE__, a->name);
a->ifidx = 0;
return 0;
}
ret = net_get_local_ifname_per_vip(a->ipaddr, if_str);
if (ret != 0) {
tools_printlog(LOG_ERR, "%s():%d: inbound interface not found with IP %s by address %s", __FUNCTION__, __LINE__, a->ipaddr, a->name);
return -1;
}
if (a->iface)
free(a->iface);
obj_set_attribute_string(if_str, &a->iface);
net_strim_netface(a->iface);
if_index = if_nametoindex(a->iface);
if (if_index == 0) {
tools_printlog(LOG_ERR, "%s():%d: index of the inbound interface %s in address %s not found", __FUNCTION__, __LINE__, a->iface, a->name);
return -1;
}
a->ifidx = if_index;
net_get_local_ifinfo((unsigned char **)ðer, a->iface);
net_strim_netface(a->iface);
sprintf(streth, "%02x:%02x:%02x:%02x:%02x:%02x", ether[0],
ether[1], ether[2], ether[3], ether[4], ether[5]);
if (a->iethaddr)
free(a->iethaddr);
obj_set_attribute_string(streth, &a->iethaddr);
return 0;
}
int address_set_protocol(struct address *a, int new_value)
{
int old_value = a->protocol;
syslog(LOG_DEBUG, "%s():%d: address %s old protocol %d new protocol %d", __FUNCTION__, __LINE__, a->name, old_value, new_value);
a->protocol = new_value;
return PARSER_OK;
}
static int address_set_verdict(struct address *a, int new_value)
{
int old_value = a->verdict;
tools_printlog(LOG_DEBUG, "%s():%d: address %s old verdict %d new verdict %d", __FUNCTION__, __LINE__, a->name, old_value, new_value);
if (new_value == VALUE_VERDICT_NONE)
return 1;
a->verdict = new_value;
return 0;
}
int address_set_netinfo(struct address *a)
{
tools_printlog(LOG_DEBUG, "%s():%d: address %s", __FUNCTION__, __LINE__, a->name);
address_set_iface_info(a);
farm_s_set_oface_info(a);
return 0;
}
int address_changed(struct config_pair *c)
{
struct address *a = obj_get_current_address();
if (!a)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: address %s with param %d", __FUNCTION__, __LINE__, a->name, c->key);
switch (c->key) {
case KEY_NAME:
return 1;
break;
case KEY_FQDN:
return !obj_equ_attribute_string(a->fqdn, c->str_value);
break;
case KEY_IFACE:
return !obj_equ_attribute_string(a->iface, c->str_value);
break;
case KEY_IETHADDR:
return !obj_equ_attribute_string(a->iethaddr, c->str_value);
break;
case KEY_FAMILY:
return !obj_equ_attribute_int(a->family, c->int_value);
break;
case KEY_IPADDR:
return !obj_equ_attribute_string(a->ipaddr, c->str_value);
break;
case KEY_PORTS:
return !obj_equ_attribute_string(a->ports, c->str_value);
break;
case KEY_PROTO:
return !obj_equ_attribute_int(a->protocol, c->int_value);
break;
case KEY_VERDICT:
return !obj_equ_attribute_int(a->verdict, c->int_value);
break;
case KEY_LOGPREFIX:
return !obj_equ_attribute_string(a->logprefix, c->str_value);
break;
case KEY_ACTION:
return !obj_equ_attribute_int(a->action, c->int_value);
break;
default:
break;
}
return 0;
}
void address_s_print(void)
{
struct list_head *addresses = obj_get_addresses();
struct address *a;
list_for_each_entry(a, addresses, list)
address_print(a);
}
struct address * address_lookup_by_name(const char *name)
{
struct list_head *addresses = obj_get_addresses();
struct address *a;
list_for_each_entry(a, addresses, list) {
if (strcmp(a->name, name) == 0)
return a;
}
return NULL;
}
int address_pre_actionable(struct config_pair *c)
{
struct address *a = obj_get_current_address();
if (!a)
return -1;
return ACTION_START;
}
int address_pos_actionable(struct config_pair *c)
{
struct address *a = obj_get_current_address();
if (!a)
return -1;
return 0;
}
int address_set_attribute(struct config_pair *c)
{
struct address *a = obj_get_current_address();
int ret = PARSER_FAILED;
if (c->key != KEY_NAME && !a) {
tools_printlog(LOG_INFO, "%s():%d: address UNKNOWN", __FUNCTION__, __LINE__);
return PARSER_OBJ_UNKNOWN;
}
switch (c->key) {
case KEY_NAME:
a = address_lookup_by_name(c->str_value);
if (!a) {
a = address_create(c->str_value);
if (!a)
return PARSER_FAILED;
}
obj_set_current_address(a);
ret = PARSER_OK;
break;
case KEY_FQDN:
if (strcmp(a->fqdn, DEFAULT_FQDN) != 0)
free(a->fqdn);
ret = obj_set_attribute_string(c->str_value, &a->fqdn);
break;
case KEY_IFACE:
if (a->iface)
free(a->iface);
ret = obj_set_attribute_string(c->str_value, &a->iface);
net_strim_netface(a->iface);
break;
case KEY_FAMILY:
a->family = c->int_value;
ret = PARSER_OK;
break;
case KEY_ETHADDR:
if (a->iethaddr)
free(a->iethaddr);
ret = obj_set_attribute_string(c->str_value, &a->iethaddr);
break;
case KEY_IETHADDR:
if (a->iethaddr)
free(a->iethaddr);
ret = obj_set_attribute_string(c->str_value, &a->iethaddr);
address_set_netinfo(a);
break;
case KEY_IPADDR:
if (strcmp(a->ipaddr, DEFAULT_VIRTADDR) != 0)
free(a->ipaddr);
ret = obj_set_attribute_string(c->str_value, &a->ipaddr);
address_set_netinfo(a);
break;
case KEY_PORTS:
ret = address_set_ports(a, c->str_value);
break;
case KEY_PROTO:
ret = address_set_protocol(a, c->int_value);
break;
case KEY_VERDICT:
if (!address_set_verdict(a, c->int_value))
return PARSER_OK;
break;
case KEY_LOGPREFIX:
if (strcmp(a->logprefix, DEFAULT_LOG_LOGPREFIX) != 0)
free(a->logprefix);
ret = obj_set_attribute_string(c->str_value, &a->logprefix);
break;
case KEY_ACTION:
ret = address_set_action(a, c->int_value);
break;
case KEY_USED:
ret = PARSER_OK;
break;
default:
return PARSER_STRUCT_FAILED;
}
return ret;
}
int address_not_used(struct address *a)
{
return (!a->policies_used && !a->used);
}
int address_set_action(struct address *a, int action)
{
tools_printlog(LOG_DEBUG, "%s():%d: address %s action is %d - new action %d", __FUNCTION__, __LINE__, a->name, a->action, action);
if (a->action == action)
return 0;
if (action == ACTION_DELETE) {
if (!farm_s_lookup_address_action(a->name, action))
address_delete(a);
return 1;
}
if (action == ACTION_STOP)
farm_s_lookup_address_action(a->name, action);
if (a->action > action)
a->action = action;
return 1;
}
int address_s_set_action(int action)
{
struct list_head *addresses = obj_get_addresses();
struct address *a, *next;
list_for_each_entry_safe(a, next, addresses, list)
address_set_action(a, action);
return 0;
}
int address_no_port(struct address *a)
{
if (obj_equ_attribute_string(a->ports, DEFAULT_VIRTPORTS))
return 1;
return 0;
}
int address_no_ipaddr(struct address *a)
{
if (obj_equ_attribute_string(a->ipaddr, DEFAULT_VIRTADDR))
return 1;
return 0;
}
int address_rulerize(struct address *a)
{
tools_printlog(LOG_DEBUG, "%s():%d: rulerize address %s", __FUNCTION__, __LINE__, a->name);
address_print(a);
if (a->used) {
tools_printlog(LOG_INFO, "%s():%d: address %s won't be rulerized", __FUNCTION__, __LINE__, a->name);
return 0;
}
return nft_rulerize_address(a);
}
int address_s_rulerize(void)
{
struct list_head *addresses = obj_get_addresses();
struct address *a, *next;
int ret = 0;
int output = 0;
tools_printlog(LOG_DEBUG, "%s():%d: rulerize addresses", __FUNCTION__, __LINE__);
list_for_each_entry_safe(a, next, addresses, list) {
ret = address_rulerize(a);
output = output || ret;
}
return output;
}
int address_needs_policies(struct address *a)
{
return (a->policies_used > 0) || (a->policies_action != ACTION_NONE);
}
int address_s_lookup_policy_action(char *name, int action)
{
struct list_head *addresses = obj_get_addresses();
struct address *a, *next;
tools_printlog(LOG_DEBUG, "%s():%d: name %s action %d", __FUNCTION__, __LINE__, name, action);
list_for_each_entry_safe(a, next, addresses, list)
addresspolicy_s_lookup_policy_action(a, name, action);
return 0;
}
int address_validate_iface(struct address *a)
{
tools_printlog(LOG_DEBUG, "%s():%d: validating inbound address interface of %s", __FUNCTION__, __LINE__, a->name);
if (!a || !a->iface || obj_equ_attribute_string(a->iface, ""))
return 1;
return 0;
}
int address_validate_iether(struct address *a)
{
tools_printlog(LOG_DEBUG, "%s():%d: validating inbound address ether of %s", __FUNCTION__, __LINE__, a->name);
if (!a || !a->iethaddr || obj_equ_attribute_string(a->iethaddr, ""))
return 1;
return 0;
}
int address_s_clean_nft_chains(void)
{
struct list_head *addresses = obj_get_addresses();
struct address *a, *next;
if (!addresses)
return 0;
list_for_each_entry_safe(a, next, addresses, list)
a->nft_chains = 0;
return 0;
}
nftlb-1.0.7/src/addresspolicy.c 0000664 0000000 0000000 00000011471 14326712445 0016440 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include "addresspolicy.h"
#include "objects.h"
#include "network.h"
#include "tools.h"
static struct addresspolicy * addresspolicy_create(struct address *a, struct policy *p)
{
struct addresspolicy *ap = (struct addresspolicy *)malloc(sizeof(struct addresspolicy));
if (!ap) {
tools_printlog(LOG_ERR, "address policy memory allocation error");
return NULL;
}
tools_printlog(LOG_DEBUG, "%s():%d: address %s", __FUNCTION__, __LINE__, a->name);
ap->address = a;
ap->policy = p;
ap->action = DEFAULT_ACTION;
p->used++;
a->policies_action = DEFAULT_ACTION;
if (a->policies_used > 0 && a->action == ACTION_RELOAD)
a->policies_action = ACTION_RELOAD;
a->policies_used++;
list_add_tail(&ap->list, &a->policies);
return ap;
}
static int addresspolicy_delete(struct addresspolicy *ap)
{
if (!ap)
return 0;
list_del(&ap->list);
if (ap->address->policies_used > 0)
ap->address->policies_used--;
if (ap->policy->used > 0)
ap->policy->used--;
ap->address->policies_action = ACTION_STOP;
free(ap);
return 0;
}
void addresspolicy_s_print(struct address *a)
{
struct addresspolicy *ap;
list_for_each_entry(ap, &a->policies, list) {
tools_printlog(LOG_DEBUG," [policy] ");
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NAME, ap->policy->name);
tools_printlog(LOG_DEBUG," *[%s] %d", CONFIG_KEY_ACTION, ap->action);
}
}
struct addresspolicy * addresspolicy_lookup_by_name(struct address *a, const char *name)
{
struct addresspolicy *ap;
list_for_each_entry(ap, &a->policies, list) {
if (strcmp(ap->policy->name, name) == 0)
return ap;
}
return NULL;
}
int addresspolicy_set_action(struct addresspolicy *ap, int action)
{
if ((action == ACTION_DELETE) || (action == ACTION_STOP)) {
addresspolicy_delete(ap);
return 1;
}
if (ap->action > action) {
ap->action = action;
ap->address->policies_action = ACTION_RELOAD;
return 1;
}
return 0;
}
int addresspolicy_s_set_action(struct address *a, int action)
{
struct addresspolicy *ap, *next;
list_for_each_entry_safe(ap, next, &a->policies, list)
addresspolicy_set_action(ap, action);
return 0;
}
int addresspolicy_s_delete(struct address *a)
{
struct addresspolicy *ap, *next;
list_for_each_entry_safe(ap, next, &a->policies, list)
addresspolicy_delete(ap);
return 0;
}
int addresspolicy_s_lookup_policy_action(struct address *a, char *name, int action)
{
struct addresspolicy *ap;
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: address %s action is %d - new action %d", __FUNCTION__, __LINE__, a->name, a->action, action);
ap = addresspolicy_lookup_by_name(a, name);
if (ap)
ret = addresspolicy_set_action(ap, action);
if (ret)
address_set_action(a, ACTION_RELOAD);
return 0;
}
int addresspolicy_set_attribute(struct config_pair *c)
{
struct addresspolicy *ap = obj_get_current_addresspolicy();
struct address *a = obj_get_current_address();
struct policy *p;
if (!a)
return PARSER_OBJ_UNKNOWN;
switch (c->key) {
case KEY_NAME:
p = policy_lookup_by_name(c->str_value);
if (!p)
return -1;
ap = addresspolicy_lookup_by_name(a, c->str_value);
if (ap)
return 0;
ap = addresspolicy_create(a, p);
obj_set_current_addresspolicy(ap);
break;
default:
return PARSER_STRUCT_FAILED;
}
return PARSER_OK;
}
int addresspolicy_pre_actionable(struct config_pair *c)
{
struct address *a = obj_get_current_address();
if (!a)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pre actionable address policy for address %s", __FUNCTION__, __LINE__, a->name);
address_set_action(a, ACTION_RELOAD);
address_rulerize(a);
return 0;
}
int addresspolicy_pos_actionable(struct config_pair *c)
{
struct addresspolicy *ap = obj_get_current_addresspolicy();
struct address *a = obj_get_current_address();
if (!ap || !a)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable address policy %s for address %s with param %d", __FUNCTION__, __LINE__, ap->policy->name, a->name, c->key);
address_set_action(a, ACTION_RELOAD);
return 0;
}
nftlb-1.0.7/src/backends.c 0000664 0000000 0000000 00000063071 14326712445 0015350 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include
#include "backends.h"
#include "farms.h"
#include "farmaddress.h"
#include "objects.h"
#include "network.h"
#include "sessions.h"
#include "tools.h"
#define BACKEND_MARK_MIN 0x00000001
#define BACKEND_MARK_MAX 0x00000FFF
static int backend_gen_next_mark(void)
{
struct list_head *farms = obj_get_farms();
struct farm *f;
struct backend *b;
int mark = BACKEND_MARK_MIN;
int found = 0;
for (mark = BACKEND_MARK_MIN; mark <= BACKEND_MARK_MAX; mark++) {
found = 0;
list_for_each_entry(f, farms, list) {
list_for_each_entry(b, &f->backends, list) {
if (mark == b->mark) {
found = 1;
continue;
}
}
if (found)
continue;
}
if (!found)
return mark;
}
return DEFAULT_MARK;
}
static struct backend * backend_create(struct farm *f, char *name)
{
struct backend *b = (struct backend *)malloc(sizeof(struct backend));
if (!b) {
tools_printlog(LOG_ERR, "Backend memory allocation error");
return NULL;
}
b->parent = f;
obj_set_attribute_string(name, &b->name);
b->fqdn = DEFAULT_FQDN;
b->ethaddr = DEFAULT_ETHADDR;
b->oface = DEFAULT_IFNAME;
b->ofidx = DEFAULT_IFIDX;
b->ipaddr = DEFAULT_IPADDR;
b->port = DEFAULT_PORT;
b->srcaddr = DEFAULT_SRCADDR;
b->weight = DEFAULT_WEIGHT;
b->priority = DEFAULT_PRIORITY;
b->mark = backend_gen_next_mark();
b->estconnlimit = DEFAULT_ESTCONNLIMIT;
b->estconnlimit_logprefix = DEFAULT_B_ESTCONNLIMIT_LOGPREFIX;
b->state = DEFAULT_BACKEND_STATE;
b->action = DEFAULT_ACTION;
b->parent->bcks_have_port = 0;
list_add_tail(&b->list, &f->backends);
f->total_bcks++;
return b;
}
static int backend_delete_node(struct backend *b)
{
list_del(&b->list);
if (b->name)
free(b->name);
if (b->fqdn && strcmp(b->fqdn, "") != 0)
free(b->fqdn);
if (b->oface && strcmp(b->oface, "") != 0)
free(b->oface);
if (b->ipaddr && strcmp(b->ipaddr, "") != 0)
free(b->ipaddr);
if (b->ethaddr && strcmp(b->ethaddr, "") != 0)
free(b->ethaddr);
if (b->port && strcmp(b->port, "") != 0)
free(b->port);
if (b->srcaddr && strcmp(b->srcaddr, "") != 0)
free(b->srcaddr);
if (b->estconnlimit_logprefix && strcmp(b->estconnlimit_logprefix, DEFAULT_B_ESTCONNLIMIT_LOGPREFIX) != 0)
free(b->estconnlimit_logprefix);
free(b);
return 0;
}
static int backend_below_prio(struct backend *b)
{
struct farm *f = b->parent;
tools_printlog(LOG_DEBUG, "%s():%d: backend %s state is %s and priority %d <= farm prio %d",
__FUNCTION__, __LINE__, b->name, obj_print_state(b->state), b->priority, f->priority);
return (b->priority <= f->priority);
}
static int backend_s_set_ports(struct farm *f)
{
struct backend *b;
tools_printlog(LOG_DEBUG, "%s():%d: finding backends with port for %s", __FUNCTION__, __LINE__, f->name);
list_for_each_entry(b, &f->backends, list) {
if (strcmp(b->port, DEFAULT_PORT) == 0) {
f->bcks_have_port = 0;
return 0;
}
}
f->bcks_have_port = 1;
return 1;
}
static int backend_delete(struct backend *b)
{
if (!b)
return 0;
struct farm *f = b->parent;
backend_set_action(b, ACTION_STOP);
session_backend_action(f, b, ACTION_STOP);
if (backend_below_prio(b)) {
backend_s_gen_priority(f, ACTION_DELETE);
obj_rulerize(OBJ_START);
}
session_backend_action(f, b, ACTION_DELETE);
backend_delete_node(b);
backend_s_set_ports(f);
if (backend_s_gen_priority(f, ACTION_DELETE)) {
farm_set_action(f, ACTION_RELOAD);
farmaddress_s_set_action(f, ACTION_RELOAD);
obj_rulerize(OBJ_START);
}
return 0;
}
void backend_s_print(struct farm *f)
{
struct backend *b;
list_for_each_entry(b, &f->backends, list) {
tools_printlog(LOG_DEBUG," [backend] ");
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NAME, b->name);
if (b->fqdn)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_FQDN, b->fqdn);
if (b->oface)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_OFACE, b->oface);
tools_printlog(LOG_DEBUG," *[ofidx] %d", b->ofidx);
if (b->ipaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IPADDR, b->ipaddr);
if (b->ethaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_ETHADDR, b->ethaddr);
if (b->port)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_PORT, b->port);
if (b->srcaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_SRCADDR, b->srcaddr);
tools_printlog(LOG_DEBUG," [%s] 0x%x", CONFIG_KEY_MARK, b->mark);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_ESTCONNLIMIT, b->estconnlimit);
if (b->estconnlimit_logprefix && strcmp(b->estconnlimit_logprefix, DEFAULT_B_ESTCONNLIMIT_LOGPREFIX) != 0)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_ESTCONNLIMIT_LOGPREFIX, b->estconnlimit_logprefix);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_WEIGHT, b->weight);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_PRIORITY, b->priority);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_STATE, obj_print_state(b->state));
tools_printlog(LOG_DEBUG," *[%s] %d", CONFIG_KEY_ACTION, b->action);
}
}
struct backend * backend_lookup_by_key(struct farm *f, int key, const char *name, int value)
{
struct backend *b;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s key %d name %s value %d", __FUNCTION__, __LINE__, f->name, key, name, value);
list_for_each_entry(b, &f->backends, list) {
switch (key) {
case KEY_NAME:
if (strcmp(b->name, name) == 0)
return b;
break;
case KEY_MARK:
if (value == backend_get_mark(b))
return b;
break;
case KEY_ETHADDR:
if (b->ethaddr && strcmp(b->ethaddr, name) == 0)
return b;
break;
case KEY_IPADDR:
if (b->ipaddr && strcmp(b->ipaddr, name) == 0)
return b;
break;
default:
return NULL;
}
}
return NULL;
}
static int backend_set_ipaddr_from_ether(struct backend *b)
{
struct farm *f = b->parent;
struct farmaddress *fa;
struct address *a;
int ret = -1;
unsigned char dst_ethaddr[ETH_HW_ADDR_LEN];
unsigned char src_ethaddr[ETH_HW_ADDR_LEN];
char streth[ETH_HW_STR_LEN] = {};
int *oface;
char **source_ip;
if (!farm_is_ingress_mode(f) || (f->state != VALUE_STATE_UP && f->state != VALUE_STATE_CONFERR))
return 0;
fa = farmaddress_get_first(f);
if (!fa) {
tools_printlog(LOG_INFO, "%s():%d: no farm address configured in %s", __FUNCTION__, __LINE__, f->name);
return -1;
}
a = fa->address;
if (a->iethaddr == DEFAULT_ETHADDR ||
b->ipaddr == DEFAULT_IPADDR ||
fa->farm->ofidx == DEFAULT_IFIDX)
return -1;
sscanf(a->iethaddr, "%hhx:%hhx:%hhx:%hhx:%hhx:%hhx", &src_ethaddr[0], &src_ethaddr[1], &src_ethaddr[2], &src_ethaddr[3], &src_ethaddr[4], &src_ethaddr[5]);
oface = &a->ifidx;
source_ip = &(a->ipaddr);
if (f->srcaddr != DEFAULT_SRCADDR)
source_ip = &f->srcaddr;
ret = net_get_neigh_ether((unsigned char **) &dst_ethaddr, src_ethaddr, a->family, *source_ip, b->ipaddr, *oface);
if (ret != 0) {
oface = &f->ofidx;
if (b->ofidx != DEFAULT_IFIDX)
oface = &b->ofidx;
if (f->srcaddr != DEFAULT_SRCADDR)
source_ip = &f->srcaddr;
if (b->srcaddr != DEFAULT_SRCADDR)
source_ip = &b->srcaddr;
ret = net_get_neigh_ether((unsigned char **) &dst_ethaddr, src_ethaddr, a->family, *source_ip, b->ipaddr, *oface);
}
if (ret == 0) {
sprintf(streth, "%02x:%02x:%02x:%02x:%02x:%02x", dst_ethaddr[0],
dst_ethaddr[1], dst_ethaddr[2], dst_ethaddr[3], dst_ethaddr[4], dst_ethaddr[5]);
tools_printlog(LOG_DEBUG, "%s():%d: discovered ether address for %s is %s", __FUNCTION__, __LINE__, b->name, streth);
if (b->ethaddr)
free(b->ethaddr);
obj_set_attribute_string(streth, &b->ethaddr);
}
return ret;
}
static int backend_set_weight(struct backend *b, int new_value)
{
struct farm *f = b->parent;
int old_value = b->weight;
tools_printlog(LOG_DEBUG, "%s():%d: current value is %d, but new value will be %d",
__FUNCTION__, __LINE__, old_value, new_value);
b->weight = new_value;
if (backend_is_available(b))
f->total_weight += (b->weight-old_value);
return 0;
}
static int backend_set_estconnlimit(struct backend *b, int new_value)
{
int old_value = b->estconnlimit;
tools_printlog(LOG_DEBUG, "%s():%d: current value is %d, but new value will be %d",
__FUNCTION__, __LINE__, old_value, new_value);
if (new_value == old_value)
return 0;
b->estconnlimit = new_value;
return 0;
}
static void backend_s_update_counters(struct farm *f)
{
struct backend *bp, *next;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s", __FUNCTION__, __LINE__, f->name);
f->bcks_available = 0;
f->bcks_usable = 0;
f->total_weight = 0;
list_for_each_entry_safe(bp, next, &f->backends, list) {
if (backend_is_available(bp)) {
f->bcks_available++;
f->total_weight += bp->weight;
}
if (backend_is_usable(bp))
f->bcks_usable++;
}
}
static int backend_set_priority(struct backend *b, int new_value)
{
int old_value = b->priority;
tools_printlog(LOG_DEBUG, "%s():%d: current value is %d, but new value will be %d",
__FUNCTION__, __LINE__, old_value, new_value);
if (new_value <= 0)
return -1;
b->priority = new_value;
backend_s_gen_priority(b->parent, ACTION_RELOAD);
return 0;
}
static int backend_s_set_srcaddr(struct farm *f)
{
struct backend *b;
tools_printlog(LOG_DEBUG, "%s():%d: finding backends with srouce address for %s", __FUNCTION__, __LINE__, f->name);
list_for_each_entry(b, &f->backends, list) {
if (b->srcaddr && strcmp(b->srcaddr, "") != 0) {
f->bcks_have_srcaddr = 1;
return 1;
}
}
f->bcks_have_srcaddr = 0;
return 0;
}
static int backend_set_mark(struct backend *b, int new_value)
{
int old_value = b->mark;
if (new_value < BACKEND_MARK_MIN || new_value > BACKEND_MARK_MAX)
return 0;
tools_printlog(LOG_DEBUG, "%s():%d: current value is %d, but new value will be %d",
__FUNCTION__, __LINE__, old_value, new_value);
b->mark = new_value;
return 0;
}
static int backend_set_port(struct backend *b, char *new_value)
{
char *old_value = b->port;
tools_printlog(LOG_DEBUG, "%s():%d: current value is %s, but new value will be %s",
__FUNCTION__, __LINE__, old_value, new_value);
if (strcmp(b->port, DEFAULT_PORT) != 0)
free(b->port);
obj_set_attribute_string(new_value, &b->port);
if (b->parent->bcks_have_port) {
if (strcmp(b->port, DEFAULT_PORT) == 0)
b->parent->bcks_have_port = 0;
} else
backend_s_set_ports(b->parent);
return 0;
}
static int backend_set_srcaddr(struct backend *b, char *new_value)
{
char *old_value = b->srcaddr;
tools_printlog(LOG_DEBUG, "%s():%d: current value is %s, but new value will be %s",
__FUNCTION__, __LINE__, old_value, new_value);
if (b->srcaddr)
free(b->srcaddr);
obj_set_attribute_string(new_value, &b->srcaddr);
if (b->srcaddr && strcmp(b->srcaddr, "") != 0)
b->parent->bcks_have_srcaddr = 1;
else
backend_s_set_srcaddr(b->parent);
return 0;
}
static int backend_set_ifinfo(struct backend *b)
{
struct farm *f = b->parent;
char if_str[IFNAMSIZ];
int if_index;
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: backend %s set interface info", __FUNCTION__, __LINE__, b->name);
if (!farm_is_ingress_mode(f) || (f->state != VALUE_STATE_UP && f->state != VALUE_STATE_CONFERR))
return 0;
if (f->oface && strcmp(f->oface, IFACE_LOOPBACK) == 0) {
tools_printlog(LOG_DEBUG, "%s():%d: backend %s in farm %s doesn't require output netinfo, loopback interface", __FUNCTION__, __LINE__, b->name, f->name);
f->ofidx = 0;
return 0;
}
if (!b || b->ipaddr == DEFAULT_IPADDR) {
tools_printlog(LOG_ERR, "%s():%d: there is no backend yet in the farm %s", __FUNCTION__, __LINE__, f->name);
return 0;
}
ret = net_get_local_ifidx_per_remote_host(b->ipaddr, &if_index);
if (ret == -1) {
tools_printlog(LOG_ERR, "%s():%d: unable to get the outbound interface to %s for the backend %s in farm %s", __FUNCTION__, __LINE__, b->ipaddr, b->name, f->name);
return -1;
}
if (f->ofidx == -1)
f->ofidx = if_index;
if (f->ofidx != if_index) {
f->bcks_have_if = 1;
b->ofidx = if_index;
}
if (if_indextoname(if_index, if_str) == NULL) {
tools_printlog(LOG_ERR, "%s():%d: unable to get the outbound interface name with index %d required by the backend %s in farm %s", __FUNCTION__, __LINE__, if_index, b->name, f->name);
return -1;
}
if (!f->oface) {
obj_set_attribute_string(if_str, &f->oface);
net_strim_netface(f->oface);
return 0;
}
if (f->oface && strcmp(f->oface, if_str) != 0) {
free(b->oface);
obj_set_attribute_string(if_str, &b->oface);
net_strim_netface(b->oface);
}
return 0;
}
static int backend_set_ipaddr(struct backend *b, char *new_value)
{
char *old_value = b->ipaddr;
int netconfig;
tools_printlog(LOG_DEBUG, "%s():%d: current value is %s, but new value will be %s",
__FUNCTION__, __LINE__, old_value, new_value);
if (b->ipaddr)
free(b->ipaddr);
if (b->ethaddr)
free(b->ethaddr);
obj_set_attribute_string(new_value, &b->ipaddr);
obj_set_attribute_string("", &b->ethaddr);
netconfig = (backend_set_ifinfo(b) == 0 && backend_set_ipaddr_from_ether(b) == 0);
if (old_value == DEFAULT_IPADDR)
return 0;
if (netconfig) {
if (b->state == VALUE_STATE_CONFERR)
backend_set_state(b, VALUE_STATE_UP);
} else
backend_set_state(b, VALUE_STATE_CONFERR);
return 0;
}
int backend_is_usable(struct backend *b)
{
tools_printlog(LOG_DEBUG, "%s():%d: backend %s state is %s and priority %d",
__FUNCTION__, __LINE__, b->name, obj_print_state(b->state), b->priority);
return ((b->state == VALUE_STATE_UP || b->state == VALUE_STATE_OFF) && backend_below_prio(b));
}
int backend_no_port(struct backend *b)
{
if (obj_equ_attribute_string(b->port, DEFAULT_PORT))
return 1;
return 0;
}
int backend_changed(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
struct backend *b = obj_get_current_backend();
if (!f || !b)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s backend %s with param %d", __FUNCTION__, __LINE__, f->name, b->name, c->key);
switch (c->key) {
case KEY_NAME:
return 1;
break;
case KEY_NEWNAME:
return !obj_equ_attribute_string(b->name, c->str_value);
break;
case KEY_FQDN:
return !obj_equ_attribute_string(b->fqdn, c->str_value);
break;
case KEY_IPADDR:
return !obj_equ_attribute_string(b->ipaddr, c->str_value);
break;
case KEY_ETHADDR:
return !obj_equ_attribute_string(b->ethaddr, c->str_value);
break;
case KEY_PORT:
return !obj_equ_attribute_string(b->port, c->str_value);
break;
case KEY_SRCADDR:
return !obj_equ_attribute_string(b->srcaddr, c->str_value);
break;
case KEY_WEIGHT:
return !obj_equ_attribute_int(b->weight, c->int_value);
break;
case KEY_PRIORITY:
return !obj_equ_attribute_int(b->priority, c->int_value);
break;
case KEY_MARK:
return !obj_equ_attribute_int(b->mark, c->int_value);
break;
case KEY_STATE:
return !obj_equ_attribute_int(b->state, c->int_value);
break;
case KEY_ACTION:
return !obj_equ_attribute_int(b->action, c->int_value);
break;
case KEY_ESTCONNLIMIT:
return !obj_equ_attribute_int(b->estconnlimit, c->int_value);
break;
case KEY_ESTCONNLIMIT_LOGPREFIX:
return !obj_equ_attribute_string(b->estconnlimit_logprefix, c->str_value);
break;
default:
break;
}
return 0;
}
int backend_validate(struct backend *b)
{
struct farm *f = b->parent;
tools_printlog(LOG_DEBUG, "%s():%d: validating backend %s of farm %s",
__FUNCTION__, __LINE__, b->name, f->name);
if (farm_is_ingress_mode(f) &&
(!b->ethaddr || strcmp(b->ethaddr, "") == 0))
return 0;
if (!b->ipaddr || strcmp(b->ipaddr, "") == 0)
return 0;
return 1;
}
int backend_is_available(struct backend *b)
{
tools_printlog(LOG_DEBUG, "%s():%d: backend %s state is %s and priority %d",
__FUNCTION__, __LINE__, b->name, obj_print_state(b->state), b->priority);
return (backend_validate(b) && (b->state == VALUE_STATE_UP) && backend_below_prio(b));
}
int backend_set_action(struct backend *b, int action)
{
int is_actionated = 0;
tools_printlog(LOG_DEBUG, "%s():%d: bck %s action %d state %d - new action %d",
__FUNCTION__, __LINE__, b->name, b->action, b->state, action);
if (action == ACTION_DELETE) {
backend_delete(b);
return 1;
}
if (action == ACTION_STOP) {
if (backend_is_available(b)) {
b->action = action;
is_actionated = 1;
}
backend_set_state(b, VALUE_STATE_DOWN);
return is_actionated;
}
if (action == ACTION_START) {
if (!backend_is_available(b)) {
b->action = action;
is_actionated = 1;
}
backend_set_state(b, VALUE_STATE_UP);
return is_actionated;
}
if (b->action > action) {
b->action = action;
return 1;
}
return is_actionated;
}
int backend_s_set_action(struct farm *f, int action)
{
struct backend *b, *next;
list_for_each_entry_safe(b, next, &f->backends, list)
backend_set_action(b, action);
return 0;
}
int backend_s_delete(struct farm *f)
{
struct backend *b, *next;
list_for_each_entry_safe(b, next, &f->backends, list)
backend_delete_node(b);
f->total_bcks = 0;
f->bcks_available = 0;
f->bcks_usable = 0;
f->total_weight = 0;
f->bcks_have_if = 0;
return 0;
}
int backend_s_validate(struct farm *f)
{
struct backend *b, *next;
int valid = 0;
list_for_each_entry_safe(b, next, &f->backends, list) {
valid = backend_validate(b);
if (b->state == VALUE_STATE_CONFERR && valid)
backend_set_state(b, VALUE_STATE_UP);
}
return 0;
}
int backend_set_attribute(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
struct backend *b = obj_get_current_backend();
if (!f || (c->key != KEY_NAME && !b))
return PARSER_OBJ_UNKNOWN;
switch (c->key) {
case KEY_NAME:
b = backend_lookup_by_key(f, KEY_NAME, c->str_value, 0);
if (!b) {
b = backend_create(f, c->str_value);
if (!b)
return -1;
}
obj_set_current_backend(b);
break;
case KEY_NEWNAME:
free(b->name);
obj_set_attribute_string(c->str_value, &b->name);
break;
case KEY_FQDN:
if (strcmp(b->fqdn, DEFAULT_FQDN) != 0)
free(b->fqdn);
obj_set_attribute_string(c->str_value, &b->fqdn);
break;
case KEY_IPADDR:
backend_set_ipaddr(b, c->str_value);
break;
case KEY_ETHADDR:
if (b->ethaddr)
free(b->ethaddr);
obj_set_attribute_string(c->str_value, &b->ethaddr);
break;
case KEY_PORT:
backend_set_port(b, c->str_value);
break;
case KEY_SRCADDR:
backend_set_srcaddr(b, c->str_value);
break;
case KEY_WEIGHT:
backend_set_weight(b, c->int_value);
break;
case KEY_PRIORITY:
backend_set_priority(b, c->int_value);
break;
case KEY_MARK:
backend_set_mark(b, c->int_value);
break;
case KEY_STATE:
if (c->int_value == VALUE_STATE_CONFERR)
backend_set_state(b, VALUE_STATE_UP);
else
backend_set_state(b, c->int_value);
break;
case KEY_ESTCONNLIMIT:
backend_set_estconnlimit(b, c->int_value);
break;
case KEY_ACTION:
backend_set_action(b, c->int_value);
break;
case KEY_ESTCONNLIMIT_LOGPREFIX:
if (strcmp(b->estconnlimit_logprefix, DEFAULT_B_ESTCONNLIMIT_LOGPREFIX) != 0)
free(b->estconnlimit_logprefix);
obj_set_attribute_string(c->str_value, &b->estconnlimit_logprefix);
break;
default:
return -1;
}
return PARSER_OK;
}
int backend_set_state(struct backend *b, int new_value)
{
int old_value = b->state;
struct farm *f = b->parent;
tools_printlog(LOG_DEBUG, "%s():%d: backend %s current value is %s, but new value will be %s",
__FUNCTION__, __LINE__, b->name, obj_print_state(old_value), obj_print_state(new_value));
if (new_value == VALUE_STATE_UP) {
if (!backend_validate(b)) {
new_value = VALUE_STATE_CONFERR;
}
if (!backend_below_prio(b))
new_value = VALUE_STATE_AVAIL;
}
if (old_value == new_value)
return 0;
b->state = new_value;
switch (new_value) {
case VALUE_STATE_CONFERR:
if (old_value == VALUE_STATE_UP)
b->action = ACTION_STOP;
break;
case VALUE_STATE_OFF:
if (old_value == VALUE_STATE_UP)
b->action = ACTION_STOP;
if (old_value == VALUE_STATE_DOWN)
b->action = ACTION_START;
break;
case VALUE_STATE_AVAIL:
if (old_value == VALUE_STATE_UP)
b->action = ACTION_STOP;
return 0;
case VALUE_STATE_UP:
if (f->persistence != VALUE_META_NONE)
session_backend_action(f, b, ACTION_START);
if (old_value == VALUE_STATE_OFF)
b->action = ACTION_RELOAD;
else
b->action = ACTION_START;
break;
case VALUE_STATE_DOWN:
if (old_value == VALUE_STATE_UP || old_value == VALUE_STATE_OFF)
b->action = ACTION_STOP;
break;
default:
break;
}
if (b->action != ACTION_NONE) {
farm_set_action(f, ACTION_RELOAD);
backend_s_gen_priority(f, ACTION_NONE);
}
return 0;
}
int backend_s_set_ether_by_ipaddr(struct farm *f, const char *ip_bck, char *ether_bck)
{
struct backend *b;
int changed = 0;
list_for_each_entry(b, &f->backends, list) {
if (strcmp(b->ipaddr, ip_bck) != 0)
continue;
tools_printlog(LOG_DEBUG, "%s():%d: backend with ip address %s found", __FUNCTION__, __LINE__, ip_bck);
if (!b->ethaddr || (b->ethaddr && strcmp(b->ethaddr, ether_bck) != 0)) {
if (f->persistence != VALUE_META_NONE)
session_get_timed(f);
if (b->ethaddr)
free(b->ethaddr);
obj_set_attribute_string(ether_bck, &b->ethaddr);
changed = 1;
if (f->persistence != VALUE_META_NONE) {
session_backend_action(f, b, ACTION_RELOAD);
farm_set_action(f, ACTION_RELOAD);
obj_rulerize(OBJ_START);
session_s_delete(f, SESSION_TYPE_TIMED);
}
tools_printlog(LOG_INFO, "%s():%d: ether address changed for backend %s with %s", __FUNCTION__, __LINE__, b->name, ether_bck);
}
}
return changed;
}
static void backend_set_netinfo(struct backend *b)
{
if (backend_set_ifinfo(b) == 0 && backend_set_ipaddr_from_ether(b) == 0) {
if (b->state == VALUE_STATE_CONFERR)
backend_set_state(b, VALUE_STATE_UP);
} else
backend_set_state(b, VALUE_STATE_CONFERR);
}
int backend_s_set_netinfo(struct farm *f)
{
struct backend *b;
int changed = 0;
tools_printlog(LOG_DEBUG, "%s():%d: finding backends for %s", __FUNCTION__, __LINE__, f->name);
list_for_each_entry(b, &f->backends, list) {
if (backend_validate(b))
continue;
backend_set_netinfo(b);
}
return changed;
}
struct backend * backend_get_first(struct farm *f)
{
if (list_empty(&f->backends))
return NULL;
return list_first_entry(&f->backends, struct backend, list);
}
int bck_pre_actionable(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
struct backend *b = obj_get_current_backend();
if (!f || !b)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pre actionable backend %s of farm %s with param %d", __FUNCTION__, __LINE__, b->name, f->name, c->key);
// changing priority of a down backend could affect others, force a farm restart
if (b->state != VALUE_STATE_UP && b->state != VALUE_STATE_CONFERR && c->key == KEY_PRIORITY) {
farm_set_action(f, ACTION_STOP);
farmaddress_s_set_action(f, ACTION_STOP);
farm_rulerize(f);
return ACTION_FLUSH;
}
if (b->state != VALUE_STATE_UP && c->key != KEY_STATE)
return ACTION_NONE;
switch (c->key) {
case KEY_NAME:
break;
case KEY_ETHADDR:
case KEY_IPADDR:
case KEY_SRCADDR:
case KEY_MARK:
case KEY_PRIORITY:
case KEY_ESTCONNLIMIT:
if (backend_set_action(b, ACTION_STOP)) {
farm_set_action(f, ACTION_RELOAD);
farmaddress_s_set_action(f, ACTION_RELOAD);
farm_rulerize(f);
}
return ACTION_START;
break;
case KEY_PORT:
case KEY_STATE:
case KEY_WEIGHT:
case KEY_ESTCONNLIMIT_LOGPREFIX:
return ACTION_RELOAD;
break;
default:
break;
}
return ACTION_NONE;
}
int bck_pos_actionable(struct config_pair *c, int action)
{
struct farm *f = obj_get_current_farm();
struct backend *b = obj_get_current_backend();
if (!f || !b)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable backend %s of farm %s with param %d action %d", __FUNCTION__, __LINE__, b->name, f->name, c->key, action);
switch (action) {
case ACTION_START:
if (backend_set_action(b, ACTION_START)) {
farm_set_action(f, ACTION_RELOAD);
farmaddress_s_set_action(f, ACTION_RELOAD);
farm_rulerize(f);
}
break;
case ACTION_RELOAD:
farm_set_action(f, ACTION_RELOAD);
break;
case ACTION_FLUSH:
farm_set_action(f, ACTION_START);
farm_rulerize(f);
break;
default:
break;
}
return 0;
}
int backend_s_gen_priority(struct farm *f, int action)
{
struct backend *b, *next;
int are_down;
int old_prio = f->priority;
int new_prio = DEFAULT_PRIORITY;
do {
are_down = 0;
list_for_each_entry_safe(b, next, &f->backends, list)
if (b->priority == new_prio && b->state != VALUE_STATE_UP && b->state != VALUE_STATE_AVAIL)
are_down++;
new_prio += are_down;
} while (are_down);
f->priority = new_prio;
list_for_each_entry_safe(b, next, &f->backends, list) {
if (b->state == VALUE_STATE_UP || b->state == VALUE_STATE_AVAIL)
backend_set_state(b, VALUE_STATE_UP);
}
backend_s_update_counters(f);
return f->priority != old_prio;
}
int backend_get_mark(struct backend *b)
{
int mark = b->mark;
if (b->srcaddr && strcmp(b->srcaddr, "") != 0)
mark |= b->parent->mark;
else
mark |= farm_get_mark(b->parent);
return mark;
}
int backend_s_check_have_iface(struct farm *f)
{
struct backend *b, *next;
list_for_each_entry_safe(b, next, &f->backends, list) {
if (b->ofidx == DEFAULT_IFIDX)
continue;
if (f->ofidx != b->ofidx)
return 1;
}
return 0;
}
nftlb-1.0.7/src/checksum.c 0000664 0000000 0000000 00000007640 14326712445 0015400 0 ustar 00root root 0000000 0000000 /* Copyright (C) 2011-2015 P.D. Buchan (pdbuchan@yahoo.com)
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see
#include
#include
#include "checksum.h"
uint16_t checksum (uint16_t *addr, int len)
{
int count = len;
register uint32_t sum = 0;
uint16_t answer = 0;
// Sum up 2-byte values until none or only one byte left.
while (count > 1) {
sum += *(addr++);
count -= 2;
}
// Add left-over byte, if any.
if (count > 0) {
sum += *(uint8_t *) addr;
}
// Fold 32-bit sum into 16 bits; we lose information by doing this,
// increasing the chances of a collision.
// sum = (lower 16 bits) + (upper 16 bits shifted right 16 bits)
while (sum >> 16) {
sum = (sum & 0xffff) + (sum >> 16);
}
// Checksum is one's compliment of sum.
answer = ~sum;
return (answer);
}
// Build IPv6 ICMP pseudo-header and call checksum function (Section 8.1 of RFC 2460).
uint16_t icmp6_checksum (struct ip6_hdr iphdr, struct icmp6_hdr icmp6hdr, uint8_t *payload, int payloadlen)
{
char buf[IP_MAXPACKET];
char *ptr;
int chksumlen = 0;
int i;
ptr = &buf[0]; // ptr points to beginning of buffer buf
// Copy source IP address into buf (128 bits)
memcpy (ptr, &iphdr.ip6_src.s6_addr, sizeof (iphdr.ip6_src.s6_addr));
ptr += sizeof (iphdr.ip6_src);
chksumlen += sizeof (iphdr.ip6_src);
// Copy destination IP address into buf (128 bits)
memcpy (ptr, &iphdr.ip6_dst.s6_addr, sizeof (iphdr.ip6_dst.s6_addr));
ptr += sizeof (iphdr.ip6_dst.s6_addr);
chksumlen += sizeof (iphdr.ip6_dst.s6_addr);
// Copy Upper Layer Packet length into buf (32 bits).
// Should not be greater than 65535 (i.e., 2 bytes).
*ptr = 0; ptr++;
*ptr = 0; ptr++;
*ptr = (ICMP_HDRLEN + payloadlen) / 256;
ptr++;
*ptr = (ICMP_HDRLEN + payloadlen) % 256;
ptr++;
chksumlen += 4;
// Copy zero field to buf (24 bits)
*ptr = 0; ptr++;
*ptr = 0; ptr++;
*ptr = 0; ptr++;
chksumlen += 3;
// Copy next header field to buf (8 bits)
memcpy (ptr, &iphdr.ip6_nxt, sizeof (iphdr.ip6_nxt));
ptr += sizeof (iphdr.ip6_nxt);
chksumlen += sizeof (iphdr.ip6_nxt);
// Copy ICMPv6 type to buf (8 bits)
memcpy (ptr, &icmp6hdr.icmp6_type, sizeof (icmp6hdr.icmp6_type));
ptr += sizeof (icmp6hdr.icmp6_type);
chksumlen += sizeof (icmp6hdr.icmp6_type);
// Copy ICMPv6 code to buf (8 bits)
memcpy (ptr, &icmp6hdr.icmp6_code, sizeof (icmp6hdr.icmp6_code));
ptr += sizeof (icmp6hdr.icmp6_code);
chksumlen += sizeof (icmp6hdr.icmp6_code);
// Copy ICMPv6 ID to buf (16 bits)
memcpy (ptr, &icmp6hdr.icmp6_id, sizeof (icmp6hdr.icmp6_id));
ptr += sizeof (icmp6hdr.icmp6_id);
chksumlen += sizeof (icmp6hdr.icmp6_id);
// Copy ICMPv6 sequence number to buff (16 bits)
memcpy (ptr, &icmp6hdr.icmp6_seq, sizeof (icmp6hdr.icmp6_seq));
ptr += sizeof (icmp6hdr.icmp6_seq);
chksumlen += sizeof (icmp6hdr.icmp6_seq);
// Copy ICMPv6 checksum to buf (16 bits)
// Zero, since we don't know it yet.
*ptr = 0; ptr++;
*ptr = 0; ptr++;
chksumlen += 2;
// Copy ICMPv6 payload to buf
memcpy (ptr, payload, payloadlen * sizeof (uint8_t));
ptr += payloadlen;
chksumlen += payloadlen;
// Pad to the next 16-bit boundary
for (i=0; i
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include
#include
#include
#include "config.h"
#include "farms.h"
#include "backends.h"
#include "farmpolicy.h"
#include "policies.h"
#include "elements.h"
#include "sessions.h"
#include "addresses.h"
#include "farmaddress.h"
#include "addresspolicy.h"
#include "tools.h"
#define CONFIG_MAXBUF 4096
#define CONFIG_OUTBUF_SIZE 1024
static int config_json(json_t *element, int level, int source, int key, int apply_action);
struct config_pair c;
unsigned int continue_obj = 0;
char config_outbuf[CONFIG_OUTBUF_SIZE] = { 0 };
static void init_pair(struct config_pair *c)
{
c->level = -1;
c->key = -1;
c->str_value = NULL;
c->int_value = -1;
c->int_value2 = -1;
c->action = ACTION_START;
}
static void config_dump_int(char *buf, int value)
{
sprintf(buf, "%d", value);
}
static void config_dump_hex(char *buf, int value)
{
sprintf(buf, "0x%x", value);
}
static int config_value_family(const char *value)
{
if (strcmp(value, CONFIG_VALUE_FAMILY_IPV4) == 0)
return VALUE_FAMILY_IPV4;
if (strcmp(value, CONFIG_VALUE_FAMILY_IPV6) == 0)
return VALUE_FAMILY_IPV6;
if (strcmp(value, CONFIG_VALUE_FAMILY_INET) == 0)
return VALUE_FAMILY_INET;
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_FAMILY, CONFIG_VALUE_FAMILY_IPV4);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_FAMILY, CONFIG_VALUE_FAMILY_IPV4);
return VALUE_FAMILY_IPV4;
}
static int config_value_mode(const char *value)
{
if (strcmp(value, CONFIG_VALUE_MODE_SNAT) == 0)
return VALUE_MODE_SNAT;
if (strcmp(value, CONFIG_VALUE_MODE_DNAT) == 0)
return VALUE_MODE_DNAT;
if (strcmp(value, CONFIG_VALUE_MODE_DSR) == 0)
return VALUE_MODE_DSR;
if (strcmp(value, CONFIG_VALUE_MODE_STLSDNAT) == 0)
return VALUE_MODE_STLSDNAT;
if (strcmp(value, CONFIG_VALUE_MODE_LOCAL) == 0)
return VALUE_MODE_LOCAL;
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_MODE, CONFIG_VALUE_MODE_SNAT);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_MODE, CONFIG_VALUE_MODE_SNAT);
return VALUE_MODE_SNAT;
}
static int config_value_proto(const char *value)
{
if (strcmp(value, CONFIG_VALUE_PROTO_TCP) == 0)
return VALUE_PROTO_TCP;
if (strcmp(value, CONFIG_VALUE_PROTO_UDP) == 0)
return VALUE_PROTO_UDP;
if (strcmp(value, CONFIG_VALUE_PROTO_SCTP) == 0)
return VALUE_PROTO_SCTP;
if (strcmp(value, CONFIG_VALUE_PROTO_ALL) == 0)
return VALUE_PROTO_ALL;
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_PROTO, CONFIG_VALUE_PROTO_TCP);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_PROTO, CONFIG_VALUE_PROTO_TCP);
return VALUE_PROTO_TCP;
}
static int config_value_sched(const char *value)
{
if (strcmp(value, CONFIG_VALUE_SCHED_RR) == 0)
return VALUE_SCHED_RR;
if (strcmp(value, CONFIG_VALUE_SCHED_WEIGHT) == 0)
return VALUE_SCHED_WEIGHT;
if (strcmp(value, CONFIG_VALUE_SCHED_HASH) == 0)
return VALUE_SCHED_HASH;
if (strcmp(value, CONFIG_VALUE_SCHED_SYMHASH) == 0)
return VALUE_SCHED_SYMHASH;
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_SCHED, CONFIG_VALUE_SCHED_RR);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_SCHED, CONFIG_VALUE_SCHED_RR);
return VALUE_SCHED_RR;
}
static int config_value_meta(const char *value)
{
int mask = 0;
if (strstr(value, CONFIG_VALUE_META_NONE) != NULL) {
mask = VALUE_META_NONE;
return mask;
}
if (strstr(value, CONFIG_VALUE_META_SRCIP) != NULL)
mask |= VALUE_META_SRCIP;
if (strstr(value, CONFIG_VALUE_META_DSTIP) != NULL)
mask |= VALUE_META_DSTIP;
if (strstr(value, CONFIG_VALUE_META_SRCPORT) != NULL)
mask |= VALUE_META_SRCPORT;
if (strstr(value, CONFIG_VALUE_META_DSTPORT) != NULL)
mask |= VALUE_META_DSTPORT;
if (strstr(value, CONFIG_VALUE_META_SRCMAC) != NULL)
mask |= VALUE_META_SRCMAC;
if (strstr(value, CONFIG_VALUE_META_DSTMAC) != NULL)
mask |= VALUE_META_DSTMAC;
if (mask == 0) {
config_set_output(". Parsing unknown value '%s', using default '%s'", value, CONFIG_VALUE_META_NONE);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_VALUE_META_NONE);
}
return mask;
}
static int config_value_helper(const char *value)
{
if (strcmp(value, CONFIG_VALUE_HELPER_NONE) == 0)
return VALUE_HELPER_NONE;
if (strcmp(value, CONFIG_VALUE_HELPER_FTP) == 0)
return VALUE_HELPER_FTP;
if (strcmp(value, CONFIG_VALUE_HELPER_PPTP) == 0)
return VALUE_HELPER_PPTP;
if (strcmp(value, CONFIG_VALUE_HELPER_SIP) == 0)
return VALUE_HELPER_SIP;
if (strcmp(value, CONFIG_VALUE_HELPER_SNMP) == 0)
return VALUE_HELPER_SNMP;
if (strcmp(value, CONFIG_VALUE_HELPER_TFTP) == 0)
return VALUE_HELPER_TFTP;
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_HELPER, CONFIG_VALUE_HELPER_NONE);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_HELPER, CONFIG_VALUE_HELPER_NONE);
return VALUE_HELPER_NONE;
}
static int config_value_log(const char *value)
{
int logmask = 0;
if (strstr(value, CONFIG_VALUE_LOG_NONE) != NULL) {
logmask = VALUE_LOG_NONE;
return logmask;
}
if (strstr(value, CONFIG_VALUE_LOG_INPUT) != NULL)
logmask |= VALUE_LOG_INPUT;
if (strstr(value, CONFIG_VALUE_LOG_FORWARD) != NULL)
logmask |= VALUE_LOG_FORWARD;
if (strstr(value, CONFIG_VALUE_LOG_OUTPUT) != NULL)
logmask |= VALUE_LOG_OUTPUT;
if (logmask == 0) {
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_LOG, CONFIG_VALUE_LOG_NONE);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_LOG, CONFIG_VALUE_LOG_NONE);
}
return logmask;
}
static int config_value_switch(const char *value)
{
if (strcmp(value, CONFIG_VALUE_SWITCH_ON) == 0)
return VALUE_SWITCH_ON;
else
return VALUE_SWITCH_OFF;
config_set_output(". Parsing unknown value '%s', using default '%s'", value, CONFIG_VALUE_SWITCH_OFF);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_VALUE_SWITCH_OFF);
return VALUE_SWITCH_OFF;
}
static int config_value_state(const char *value)
{
if (strcmp(value, CONFIG_VALUE_STATE_UP) == 0)
return VALUE_STATE_UP;
if (strcmp(value, CONFIG_VALUE_STATE_DOWN) == 0)
return VALUE_STATE_DOWN;
if (strcmp(value, CONFIG_VALUE_STATE_OFF) == 0)
return VALUE_STATE_OFF;
if (strcmp(value, CONFIG_VALUE_STATE_CONFERR) == 0)
return VALUE_STATE_CONFERR;
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_STATE, CONFIG_VALUE_STATE_UP);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_STATE, CONFIG_VALUE_STATE_UP);
return VALUE_STATE_UP;
}
static int config_value_action(const char *value)
{
if (strcmp(value, CONFIG_VALUE_ACTION_STOP) == 0)
return ACTION_STOP;
if (strcmp(value, CONFIG_VALUE_ACTION_DELETE) == 0)
return ACTION_DELETE;
if (strcmp(value, CONFIG_VALUE_ACTION_START) == 0)
return ACTION_START;
if (strcmp(value, CONFIG_VALUE_ACTION_RELOAD) == 0)
return ACTION_RELOAD;
if (strcmp(value, CONFIG_VALUE_ACTION_FLUSH) == 0)
return ACTION_FLUSH;
return ACTION_NONE;
}
static int config_value_type(const char *value)
{
if (strcmp(value, CONFIG_VALUE_POLICIES_TYPE_BL) == 0)
return VALUE_TYPE_DENY;
if (strcmp(value, CONFIG_VALUE_POLICIES_TYPE_WL) == 0)
return VALUE_TYPE_ALLOW;
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_TYPE, CONFIG_VALUE_POLICIES_TYPE_BL);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_TYPE, CONFIG_VALUE_POLICIES_TYPE_BL);
return VALUE_TYPE_DENY;
}
static int config_value_verdict(const char *value)
{
int verdictmask = VALUE_VERDICT_NONE;
if (strstr(value, CONFIG_VALUE_VERDICT_LOG) != NULL)
verdictmask |= VALUE_VERDICT_LOG;
if (strstr(value, CONFIG_VALUE_VERDICT_DROP) != NULL)
verdictmask |= VALUE_VERDICT_DROP;
if (strstr(value, CONFIG_VALUE_VERDICT_ACCEPT) != NULL)
verdictmask |= VALUE_VERDICT_ACCEPT;
if (verdictmask == VALUE_VERDICT_NONE) {
config_set_output(". Parsing unknown value '%s' in '%s'", value, CONFIG_KEY_VERDICT);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_VERDICT);
return VALUE_VERDICT_NONE;
}
return verdictmask;
}
static int config_value_route(const char *value)
{
if (strcmp(value, CONFIG_VALUE_ROUTE_IN) == 0)
return VALUE_ROUTE_IN;
if (strcmp(value, CONFIG_VALUE_ROUTE_OUT) == 0)
return VALUE_ROUTE_OUT;
config_set_output(". Parsing unknown value '%s' in '%s', using default '%s'", value, CONFIG_KEY_ROUTE, CONFIG_VALUE_ROUTE_IN);
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s', using default '%s'", __FUNCTION__, __LINE__, value, CONFIG_KEY_ROUTE, CONFIG_VALUE_ROUTE_IN);
return VALUE_ROUTE_IN;
}
static int config_value_ratelimit(int key, int *int_value, int *int_unit, const char *value)
{
char str_unit[100];
sscanf(value, "%d%*[/]%99[a-zA-Z]", int_value, str_unit);
if (str_unit[0] == '\001' || strcmp(str_unit, "") == 0)
*int_unit = DEFAULT_RTLIMIT_UNIT;
else if (strcmp(str_unit, CONFIG_VALUE_UNIT_SECOND) == 0)
*int_unit = VALUE_UNIT_SECOND;
else if (strcmp(str_unit, CONFIG_VALUE_UNIT_MINUTE) == 0)
*int_unit = VALUE_UNIT_MINUTE;
else if (strcmp(str_unit, CONFIG_VALUE_UNIT_HOUR) == 0)
*int_unit = VALUE_UNIT_HOUR;
else if (strcmp(str_unit, CONFIG_VALUE_UNIT_DAY) == 0)
*int_unit = VALUE_UNIT_DAY;
else if (strcmp(str_unit, CONFIG_VALUE_UNIT_WEEK) == 0)
*int_unit = VALUE_UNIT_WEEK;
else {
config_set_output(". Parsing unknown value '%s' in '%s'", value, obj_print_key(key));
tools_printlog(LOG_ERR, "%s():%d: parsing unknown value '%s' in '%s'", __FUNCTION__, __LINE__, value, obj_print_key(key));
return PARSER_VALID_FAILED;
}
return PARSER_OK;
}
static int config_value(const char *value)
{
int ret = PARSER_VALID_FAILED;
int new_int_value;
switch(c.key) {
case KEY_FAMILY:
c.int_value = config_value_family(value);
ret = PARSER_OK;
break;
case KEY_MODE:
c.int_value = config_value_mode(value);
ret = PARSER_OK;
break;
case KEY_PROTO:
c.int_value = config_value_proto(value);
ret = PARSER_OK;
break;
case KEY_SCHED:
c.int_value = config_value_sched(value);
ret = PARSER_OK;
break;
case KEY_SCHEDPARAM:
case KEY_PERSISTENCE:
c.int_value = config_value_meta(value);
ret = PARSER_OK;
break;
case KEY_HELPER:
c.int_value = config_value_helper(value);
ret = PARSER_OK;
break;
case KEY_LOG:
c.int_value = config_value_log(value);
ret = PARSER_OK;
break;
case KEY_MARK:
c.int_value = (int)strtol(value, NULL, 16);
ret = PARSER_OK;
break;
case KEY_STATE:
c.int_value = config_value_state(value);
ret = PARSER_OK;
break;
case KEY_WEIGHT:
case KEY_PRIORITY:
new_int_value = atoi(value);
if (new_int_value >= 1) {
c.int_value = new_int_value;
ret = PARSER_OK;
break;
}
config_set_output(". Invalid value of key '%s' must be >=1", obj_print_key(c.key));
tools_printlog(LOG_ERR, "%s():%d: invalid value of key '%s' must be >=1", __FUNCTION__, __LINE__, obj_print_key(c.key));
break;
case KEY_RESPONSETTL:
case KEY_PERSISTTM:
case KEY_LIMITSTTL:
case KEY_NEWRTLIMITBURST:
case KEY_RSTRTLIMITBURST:
case KEY_ESTCONNLIMIT:
case KEY_TIMEOUT:
new_int_value = atoi(value);
if (new_int_value >= 0) {
c.int_value = new_int_value;
ret = PARSER_OK;
break;
}
config_set_output(". Invalid value of key '%s' must be >=0", obj_print_key(c.key));
tools_printlog(LOG_ERR, "%s():%d: invalid value of key '%s' must be >=0", __FUNCTION__, __LINE__, obj_print_key(c.key));
break;
case KEY_NEWRTLIMIT:
case KEY_RSTRTLIMIT:
case KEY_LOG_RTLIMIT:
ret = config_value_ratelimit(c.key, &c.int_value, &c.int_value2, (char *)value);
break;
case KEY_QUEUE:
new_int_value = atoi(value);
if (new_int_value >= -1) {
c.int_value = new_int_value;
ret = PARSER_OK;
break;
}
config_set_output(". Invalid value of key '%s' must be >=-1", obj_print_key(c.key));
tools_printlog(LOG_ERR, "%s():%d: invalid value of key '%s' must be >=-1", __FUNCTION__, __LINE__, obj_print_key(c.key));
break;
case KEY_ACTION:
c.int_value = config_value_action(value);
ret = PARSER_OK;
break;
case KEY_TCPSTRICT:
case KEY_FLOWOFFLOAD:
case KEY_INTRACONNECT:
c.int_value = config_value_switch(value);
ret = PARSER_OK;
break;
case KEY_TYPE:
c.int_value = config_value_type(value);
ret = PARSER_OK;
break;
case KEY_VERDICT:
c.int_value = config_value_verdict(value);
ret = PARSER_OK;
break;
case KEY_NAME:
case KEY_NEWNAME:
case KEY_IPADDR:
case KEY_CLIENT:
case KEY_BACKEND:
case KEY_DATA:
if (strcmp(value, "") == 0) {
config_set_output(". Key '%s' cannot be empty", obj_print_key(c.key));
tools_printlog(LOG_ERR, "%s():%d: key '%s' cannot be empty", __FUNCTION__, __LINE__, obj_print_key(c.key));
break;
}
/* fallthrough */
case KEY_IFACE:
case KEY_OFACE:
case KEY_ETHADDR:
case KEY_VIRTADDR:
case KEY_VIRTPORTS:
case KEY_PORTS:
case KEY_SRCADDR:
case KEY_PORT:
case KEY_LOGPREFIX:
case KEY_NEWRTLIMIT_LOGPREFIX:
case KEY_RSTRTLIMIT_LOGPREFIX:
case KEY_ESTCONNLIMIT_LOGPREFIX:
case KEY_TCPSTRICT_LOGPREFIX:
c.str_value = (char *)value;
ret = PARSER_OK;
break;
case KEY_USED:
case KEY_COUNTER_PACKETS:
case KEY_COUNTER_BYTES:
ret = PARSER_IGNORE;
break;
case KEY_ROUTE:
c.int_value = config_value_route(value);
ret = PARSER_OK;
break;
default:
config_set_output(". Unknown parsed key with index '%d'", c.key);
tools_printlog(LOG_ERR, "%s():%d: unknown parsed key with index '%d'", __FUNCTION__, __LINE__, c.key);
ret = PARSER_OBJ_UNKNOWN;
break;
}
return ret;
}
static int config_key(const char *key)
{
if (strcmp(key, CONFIG_KEY_FARMS) == 0)
return KEY_FARMS;
if (strcmp(key, CONFIG_KEY_NAME) == 0)
return KEY_NAME;
if (strcmp(key, CONFIG_KEY_NEWNAME) == 0)
return KEY_NEWNAME;
if (strcmp(key, CONFIG_KEY_FQDN) == 0)
return KEY_FQDN;
if (strcmp(key, CONFIG_KEY_IFACE) == 0)
return KEY_IFACE;
if (strcmp(key, CONFIG_KEY_OFACE) == 0)
return KEY_OFACE;
if (strcmp(key, CONFIG_KEY_FAMILY) == 0)
return KEY_FAMILY;
if (strcmp(key, CONFIG_KEY_ETHADDR) == 0)
return KEY_ETHADDR;
if (strcmp(key, CONFIG_KEY_IETHADDR) == 0)
return KEY_IETHADDR;
if (strcmp(key, CONFIG_KEY_OETHADDR) == 0)
return KEY_OETHADDR;
if (strcmp(key, CONFIG_KEY_VIRTADDR) == 0)
return KEY_VIRTADDR;
if (strcmp(key, CONFIG_KEY_VIRTPORTS) == 0)
return KEY_VIRTPORTS;
if (strcmp(key, CONFIG_KEY_IPADDR) == 0)
return KEY_IPADDR;
if (strcmp(key, CONFIG_KEY_SRCADDR) == 0)
return KEY_SRCADDR;
if (strcmp(key, CONFIG_KEY_PORT) == 0)
return KEY_PORT;
if (strcmp(key, CONFIG_KEY_MODE) == 0)
return KEY_MODE;
if (strcmp(key, CONFIG_KEY_RESPONSETTL) == 0)
return KEY_RESPONSETTL;
if (strcmp(key, CONFIG_KEY_PROTO) == 0)
return KEY_PROTO;
if (strcmp(key, CONFIG_KEY_SCHED) == 0)
return KEY_SCHED;
if (strcmp(key, CONFIG_KEY_SCHEDPARAM) == 0)
return KEY_SCHEDPARAM;
if (strcmp(key, CONFIG_KEY_PERSIST) == 0)
return KEY_PERSISTENCE;
if (strcmp(key, CONFIG_KEY_PERSISTTM) == 0)
return KEY_PERSISTTM;
if (strcmp(key, CONFIG_KEY_HELPER) == 0)
return KEY_HELPER;
if (strcmp(key, CONFIG_KEY_LOG) == 0)
return KEY_LOG;
if (strcmp(key, CONFIG_KEY_LOGPREFIX) == 0)
return KEY_LOGPREFIX;
if (strcmp(key, CONFIG_KEY_LOG_RTLIMIT) == 0)
return KEY_LOG_RTLIMIT;
if (strcmp(key, CONFIG_KEY_MARK) == 0)
return KEY_MARK;
if (strcmp(key, CONFIG_KEY_STATE) == 0)
return KEY_STATE;
if (strcmp(key, CONFIG_KEY_BCKS) == 0)
return KEY_BCKS;
if (strcmp(key, CONFIG_KEY_WEIGHT) == 0)
return KEY_WEIGHT;
if (strcmp(key, CONFIG_KEY_PRIORITY) == 0)
return KEY_PRIORITY;
if (strcmp(key, CONFIG_KEY_ACTION) == 0)
return KEY_ACTION;
if (strcmp(key, CONFIG_KEY_LIMITSTTL) == 0)
return KEY_LIMITSTTL;
if (strcmp(key, CONFIG_KEY_NEWRTLIMIT) == 0)
return KEY_NEWRTLIMIT;
if (strcmp(key, CONFIG_KEY_NEWRTLIMITBURST) == 0)
return KEY_NEWRTLIMITBURST;
if (strcmp(key, CONFIG_KEY_NEWRTLIMIT_LOGPREFIX) == 0)
return KEY_NEWRTLIMIT_LOGPREFIX;
if (strcmp(key, CONFIG_KEY_RSTRTLIMIT) == 0)
return KEY_RSTRTLIMIT;
if (strcmp(key, CONFIG_KEY_RSTRTLIMITBURST) == 0)
return KEY_RSTRTLIMITBURST;
if (strcmp(key, CONFIG_KEY_RSTRTLIMIT_LOGPREFIX) == 0)
return KEY_RSTRTLIMIT_LOGPREFIX;
if (strcmp(key, CONFIG_KEY_ESTCONNLIMIT) == 0)
return KEY_ESTCONNLIMIT;
if (strcmp(key, CONFIG_KEY_ESTCONNLIMIT_LOGPREFIX) == 0)
return KEY_ESTCONNLIMIT_LOGPREFIX;
if (strcmp(key, CONFIG_KEY_TCPSTRICT) == 0)
return KEY_TCPSTRICT;
if (strcmp(key, CONFIG_KEY_TCPSTRICT_LOGPREFIX) == 0)
return KEY_TCPSTRICT_LOGPREFIX;
if (strcmp(key, CONFIG_KEY_QUEUE) == 0)
return KEY_QUEUE;
if (strcmp(key, CONFIG_KEY_FLOWOFFLOAD) == 0)
return KEY_FLOWOFFLOAD;
if (strcmp(key, CONFIG_KEY_POLICIES) == 0)
return KEY_POLICIES;
if (strcmp(key, CONFIG_KEY_TYPE) == 0)
return KEY_TYPE;
if (strcmp(key, CONFIG_KEY_VERDICT) == 0)
return KEY_VERDICT;
if (strcmp(key, CONFIG_KEY_TIMEOUT) == 0)
return KEY_TIMEOUT;
if (strcmp(key, CONFIG_KEY_ELEMENTS) == 0)
return KEY_ELEMENTS;
if (strcmp(key, CONFIG_KEY_DATA) == 0)
return KEY_DATA;
if (strcmp(key, CONFIG_KEY_TIME) == 0)
return KEY_TIME;
if (strcmp(key, CONFIG_KEY_SESSIONS) == 0)
return KEY_SESSIONS;
if (strcmp(key, CONFIG_KEY_CLIENT) == 0)
return KEY_CLIENT;
if (strcmp(key, CONFIG_KEY_BACKEND) == 0)
return KEY_BACKEND;
if (strcmp(key, CONFIG_KEY_USED) == 0)
return KEY_USED;
if (strcmp(key, CONFIG_KEY_INTRACONNECT) == 0)
return KEY_INTRACONNECT;
if (strcmp(key, CONFIG_KEY_ADDRESSES) == 0)
return KEY_ADDRESSES;
if (strcmp(key, CONFIG_KEY_PORTS) == 0)
return KEY_PORTS;
if (strcmp(key, CONFIG_KEY_ROUTE) == 0)
return KEY_ROUTE;
if (strcmp(key, CONFIG_KEY_COUNTER_PACKETS) == 0)
return KEY_COUNTER_PACKETS;
if (strcmp(key, CONFIG_KEY_COUNTER_BYTES) == 0)
return KEY_COUNTER_BYTES;
config_set_output(". Unknown key '%s'", key);
tools_printlog(LOG_ERR, "%s():%d: unknown key '%s'", __FUNCTION__, __LINE__, key);
return -1;
}
static int jump_config_value(int level, int key)
{
if (
(key == KEY_FARMS && level != LEVEL_INIT) ||
(key == KEY_BCKS && level != LEVEL_FARMS) ||
(key == KEY_POLICIES && level != LEVEL_INIT && level != LEVEL_FARMS && level != LEVEL_ADDRESSES) ||
(key == KEY_ADDRESSES && level != LEVEL_FARMS && level != LEVEL_INIT) ||
(key == KEY_SESSIONS && level != LEVEL_FARMS) ||
(key == KEY_ELEMENTS && level != LEVEL_POLICIES))
return -1;
return 0;
}
static int config_json_object(json_t *element, int level, int source, int apply_action)
{
const char *key;
json_t *value;
int ret = PARSER_OK;
json_object_foreach(element, key, value) {
c.level = level;
ret = config_key(key);
if (ret == -1)
return ret;
c.key = ret;
if (jump_config_value(level, c.key) == 0) {
ret = config_json(value, level, source, c.key, apply_action);
if (ret) {
tools_printlog(LOG_ERR, "%s():%d: error parsing object in level %d", __FUNCTION__, __LINE__, c.level);
return ret;
}
}
}
return ret;
}
static int config_json_array(json_t *element, int level, int source, int apply_action)
{
size_t size = json_array_size(element);
size_t i;
int ret = PARSER_OK;
for (i = 0; i < size && ret == PARSER_OK; i++) {
ret = config_json(json_array_get(element, i), level, source, -1, apply_action);
}
return ret;
}
static int config_json_string(json_t *element, int level, int source, int apply_action)
{
int ret;
ret = config_value(json_string_value(element));
if (ret == PARSER_IGNORE)
return 0;
if (ret != PARSER_OK)
return ret;
tools_printlog(LOG_DEBUG, "%s():%d: %d(level) %d(key) %s(value) %d(value) %d(value2) apply_action %d", __FUNCTION__, __LINE__, c.level, c.key, c.str_value, c.int_value, c.int_value2, apply_action);
ret = obj_set_attribute(&c, source, apply_action);
init_pair(&c);
return ret;
}
static int config_json(json_t *element, int level, int source, int key, int apply_action)
{
int ret = PARSER_OK;
tools_printlog(LOG_DEBUG, "%s():%d: %d(level) %d(source)", __FUNCTION__, __LINE__, level, source);
switch (json_typeof(element)) {
case JSON_OBJECT:
ret = config_json_object(element, level, source, apply_action);
break;
case JSON_ARRAY:
if (level == LEVEL_INIT && key == KEY_FARMS)
level = LEVEL_FARMS;
if (level == LEVEL_INIT && key == KEY_POLICIES)
level = LEVEL_POLICIES;
if (level == LEVEL_INIT && key == KEY_ADDRESSES)
level = LEVEL_ADDRESSES;
if (level == LEVEL_FARMS && key == KEY_BCKS)
level = LEVEL_BCKS;
if (level == LEVEL_FARMS && key == KEY_ADDRESSES)
level = LEVEL_FARMADDRESS;
if (level == LEVEL_FARMS && key == KEY_SESSIONS)
level = LEVEL_SESSIONS;
if (level == LEVEL_FARMS && key == KEY_POLICIES)
level = LEVEL_FARMPOLICY;
if (level == LEVEL_POLICIES && key == KEY_ELEMENTS)
level = LEVEL_ELEMENTS;
if (level == LEVEL_ADDRESSES && key == KEY_POLICIES)
level = LEVEL_ADDRESSPOLICY;
ret = config_json_array(element, level, source, apply_action);
if (level == LEVEL_FARMS || level == LEVEL_POLICIES || level == LEVEL_ADDRESSES)
level = LEVEL_INIT;
if (level == LEVEL_BCKS || level == LEVEL_FARMPOLICY || level == LEVEL_SESSIONS || level == LEVEL_FARMADDRESS)
level = LEVEL_FARMS;
if (level == LEVEL_ELEMENTS)
level = LEVEL_POLICIES;
if (level == LEVEL_ADDRESSPOLICY)
level = LEVEL_ADDRESSES;
break;
case JSON_STRING:
ret = config_json_string(element, level, source, apply_action);
break;
default:
tools_printlog(LOG_ERR, "Configuration file unknown element type %d", json_typeof(element));
}
return ret;
}
void config_pair_init(struct config_pair *c)
{
if (!c)
return;
init_pair(c);
}
int config_file(const char *file)
{
FILE *fd;
json_error_t error;
json_t *root;
int ret = PARSER_OK;
fd = fopen(file, "r");
if (fd == NULL) {
tools_printlog(LOG_ERR, "Error open configuration file %s", file);
return PARSER_FAILED;
}
root = json_loadf(fd, JSON_ALLOW_NUL, &error);
if (root) {
ret = config_json(root, LEVEL_INIT, CONFIG_SRC_FILE, -1, ACTION_START);
json_decref(root);
} else {
tools_printlog(LOG_ERR, "Configuration file error '%s' on line %d: %s", file, error.line, error.text);
ret = PARSER_STRUCT_FAILED;
}
fclose(fd);
return ret;
}
char *config_get_output(void)
{
return config_outbuf;
}
void config_delete_output(void)
{
config_outbuf[0] = '\0';
}
void config_set_output(char *fmt, ...)
{
int len;
va_list args;
len = strlen(config_outbuf);
va_start(args, fmt);
len = vsnprintf(config_outbuf + len, CONFIG_OUTBUF_SIZE - len + 1, fmt, args);
va_end(args);
}
int config_buffer(const char *buf, int apply_action)
{
json_error_t error;
json_t *root;
int ret = PARSER_OK;
tools_printlog(LOG_NOTICE, "%s():%d: payload %d : %s", __FUNCTION__, __LINE__, (int)strlen(buf), buf);
root = json_loadb(buf, strlen(buf), JSON_ALLOW_NUL, &error);
if (root) {
ret = config_json(root, LEVEL_INIT, CONFIG_SRC_BUFFER, -1, apply_action);
json_decref(root);
} else {
tools_printlog(LOG_ERR, "Configuration error on line %d: %s", error.line, error.text);
ret = PARSER_STRUCT_FAILED;
}
return ret;
}
static void add_dump_obj(json_t *obj, const char *name, char *value)
{
if (value == NULL)
return;
json_object_set_new(obj, name, json_string(value));
}
static int add_dump_elements(json_t *obj, struct policy *p);
static struct json_t *add_dump_list(json_t *obj, const char *objname, int object,
struct list_head *head, char *name)
{
struct farm *f;
struct backend *b;
struct farmpolicy *fp;
struct policy *p;
struct element *e;
struct farmaddress *fa;
struct address *a = NULL;
struct addresspolicy *ap;
struct session *s;
json_t *jarray;
json_t *item;
char value[10];
char buf[100] = {};
if (continue_obj)
jarray = obj;
else
jarray = json_array();
switch (object) {
case LEVEL_FARMS:
list_for_each_entry(f, head, list) {
if (name != NULL && (strcmp(name, "") != 0) && (strcmp(f->name, name) != 0))
continue;
fa = farmaddress_get_first(f);
if (fa)
a = fa->address;
item = json_object();
add_dump_obj(item, CONFIG_KEY_NAME, f->name);
if (a) {
add_dump_obj(item, CONFIG_KEY_FAMILY, obj_print_family(a->family));
add_dump_obj(item, CONFIG_KEY_VIRTADDR, a->ipaddr);
add_dump_obj(item, CONFIG_KEY_VIRTPORTS, a->ports);
}
if (f->srcaddr)
add_dump_obj(item, CONFIG_KEY_SRCADDR, f->srcaddr);
else
add_dump_obj(item, CONFIG_KEY_SRCADDR, "");
add_dump_obj(item, CONFIG_KEY_MODE, obj_print_mode(f->mode));
if (f->mode == VALUE_MODE_STLSDNAT) {
config_dump_int(value, f->responsettl);
add_dump_obj(item, CONFIG_KEY_RESPONSETTL, value);
}
if (a)
add_dump_obj(item, CONFIG_KEY_PROTO, obj_print_proto(a->protocol));
add_dump_obj(item, CONFIG_KEY_SCHED, obj_print_sched(f->scheduler));
obj_print_meta(f->schedparam, (char *)buf);
add_dump_obj(item, CONFIG_KEY_SCHEDPARAM, buf);
obj_print_meta(f->persistence, (char *)buf);
add_dump_obj(item, CONFIG_KEY_PERSIST, buf);
config_dump_int(value, f->persistttl);
add_dump_obj(item, CONFIG_KEY_PERSISTTM, value);
add_dump_obj(item, CONFIG_KEY_HELPER, obj_print_helper(f->helper));
obj_print_log(f->log, (char *)buf);
add_dump_obj(item, CONFIG_KEY_LOG, buf);
if (f->logprefix && strcmp(f->logprefix, DEFAULT_LOG_LOGPREFIX) != 0)
add_dump_obj(item, CONFIG_KEY_LOGPREFIX, f->logprefix);
obj_print_rtlimit(buf, f->logrtlimit, f->logrtlimit_unit);
add_dump_obj(item, CONFIG_KEY_LOG_RTLIMIT, buf);
config_dump_hex(value, f->mark);
add_dump_obj(item, CONFIG_KEY_MARK, value);
config_dump_int(value, f->priority);
add_dump_obj(item, CONFIG_KEY_PRIORITY, value);
add_dump_obj(item, CONFIG_KEY_STATE, obj_print_state(f->state));
config_dump_int(value, f->limitsttl);
add_dump_obj(item, CONFIG_KEY_LIMITSTTL, value);
obj_print_rtlimit(buf, f->newrtlimit, f->newrtlimit_unit);
add_dump_obj(item, CONFIG_KEY_NEWRTLIMIT, buf);
config_dump_int(value, f->newrtlimitbst);
add_dump_obj(item, CONFIG_KEY_NEWRTLIMITBURST, value);
if (f->newrtlimit_logprefix && strcmp(f->newrtlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
add_dump_obj(item, CONFIG_KEY_NEWRTLIMIT_LOGPREFIX, f->newrtlimit_logprefix);
obj_print_rtlimit(buf, f->rstrtlimit, f->newrtlimit_unit);
add_dump_obj(item, CONFIG_KEY_RSTRTLIMIT, buf);
config_dump_int(value, f->rstrtlimitbst);
add_dump_obj(item, CONFIG_KEY_RSTRTLIMITBURST, value);
if (f->rstrtlimit_logprefix && strcmp(f->rstrtlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
add_dump_obj(item, CONFIG_KEY_RSTRTLIMIT_LOGPREFIX, f->rstrtlimit_logprefix);
config_dump_int(value, f->estconnlimit);
add_dump_obj(item, CONFIG_KEY_ESTCONNLIMIT, value);
if (f->estconnlimit_logprefix && strcmp(f->estconnlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
add_dump_obj(item, CONFIG_KEY_ESTCONNLIMIT_LOGPREFIX, f->estconnlimit_logprefix);
add_dump_obj(item, CONFIG_KEY_TCPSTRICT, obj_print_switch(f->tcpstrict));
if (f->tcpstrict_logprefix && strcmp(f->tcpstrict_logprefix, DEFAULT_LOGPREFIX) != 0)
add_dump_obj(item, CONFIG_KEY_TCPSTRICT_LOGPREFIX, f->tcpstrict_logprefix);
config_dump_int(value, f->queue);
add_dump_obj(item, CONFIG_KEY_QUEUE, value);
obj_print_verdict(f->verdict, (char *)buf);
add_dump_obj(item, CONFIG_KEY_VERDICT, buf);
if (f->flow_offload)
add_dump_obj(item, CONFIG_KEY_FLOWOFFLOAD, obj_print_switch(f->flow_offload));
if (f->intra_connect)
add_dump_obj(item, CONFIG_KEY_INTRACONNECT, obj_print_switch(f->intra_connect));
add_dump_list(item, CONFIG_KEY_ADDRESSES, LEVEL_FARMADDRESS, &f->addresses, NULL);
add_dump_list(item, CONFIG_KEY_BCKS, LEVEL_BCKS, &f->backends, NULL);
add_dump_list(item, CONFIG_KEY_POLICIES, LEVEL_FARMPOLICY, &f->policies, NULL);
if (f->total_static_sessions != 0)
add_dump_list(item, CONFIG_KEY_SESSIONS, LEVEL_SESSIONS, &f->static_sessions, NULL);
json_array_append_new(jarray, item);
a = NULL;
}
break;
case LEVEL_BCKS:
list_for_each_entry(b, head, list) {
item = json_object();
add_dump_obj(item, CONFIG_KEY_NAME, b->name);
add_dump_obj(item, CONFIG_KEY_IPADDR, b->ipaddr);
add_dump_obj(item, CONFIG_KEY_PORT, b->port);
add_dump_obj(item, CONFIG_KEY_SRCADDR, b->srcaddr);
config_dump_int(value, b->weight);
add_dump_obj(item, CONFIG_KEY_WEIGHT, value);
config_dump_int(value, b->priority);
add_dump_obj(item, CONFIG_KEY_PRIORITY, value);
config_dump_hex(value, b->mark);
add_dump_obj(item, CONFIG_KEY_MARK, value);
config_dump_int(value, b->estconnlimit);
add_dump_obj(item, CONFIG_KEY_ESTCONNLIMIT, value);
if (b->estconnlimit_logprefix && strcmp(b->estconnlimit_logprefix, DEFAULT_B_ESTCONNLIMIT_LOGPREFIX) != 0)
add_dump_obj(item, CONFIG_KEY_ESTCONNLIMIT_LOGPREFIX, b->estconnlimit_logprefix);
add_dump_obj(item, CONFIG_KEY_STATE, obj_print_state(b->state));
json_array_append_new(jarray, item);
}
break;
case LEVEL_FARMPOLICY:
list_for_each_entry(fp, head, list) {
item = json_object();
add_dump_obj(item, CONFIG_KEY_NAME, fp->policy->name);
json_array_append_new(jarray, item);
}
break;
case LEVEL_POLICIES:
list_for_each_entry(p, head, list) {
if (name != NULL && (strcmp(name, "") != 0) && (strcmp(p->name, name) != 0))
continue;
item = json_object();
add_dump_obj(item, CONFIG_KEY_NAME, p->name);
add_dump_obj(item, CONFIG_KEY_FAMILY, obj_print_family(p->family));
add_dump_obj(item, CONFIG_KEY_TYPE, obj_print_policy_type(p->type));
add_dump_obj(item, CONFIG_KEY_ROUTE, obj_print_policy_route(p->route));
config_dump_int(value, p->timeout);
add_dump_obj(item, CONFIG_KEY_TIMEOUT, value);
if (p->logprefix && strcmp(p->logprefix, DEFAULT_POLICY_LOGPREFIX) != 0)
add_dump_obj(item, CONFIG_KEY_LOGPREFIX, p->logprefix);
config_dump_int(value, p->used);
add_dump_obj(item, CONFIG_KEY_USED, value);
add_dump_elements(item, p);
json_array_append_new(jarray, item);
}
break;
case LEVEL_FARMADDRESS:
list_for_each_entry(fa, head, list) {
item = json_object();
add_dump_obj(item, CONFIG_KEY_NAME, fa->address->name);
add_dump_obj(item, CONFIG_KEY_FAMILY, obj_print_family(fa->address->family));
add_dump_obj(item, CONFIG_KEY_IPADDR, fa->address->ipaddr);
add_dump_obj(item, CONFIG_KEY_PORTS, fa->address->ports);
add_dump_obj(item, CONFIG_KEY_PROTO, obj_print_proto(fa->address->protocol));
config_dump_int(value, fa->address->used);
add_dump_obj(item, CONFIG_KEY_USED, value);
json_array_append_new(jarray, item);
}
break;
case LEVEL_ADDRESSES:
list_for_each_entry(a, head, list) {
if (name != NULL && (strcmp(name, "") != 0) && (strcmp(a->name, name) != 0))
continue;
item = json_object();
add_dump_obj(item, CONFIG_KEY_NAME, a->name);
add_dump_obj(item, CONFIG_KEY_FAMILY, obj_print_family(a->family));
add_dump_obj(item, CONFIG_KEY_IPADDR, a->ipaddr);
add_dump_obj(item, CONFIG_KEY_PORTS, a->ports);
add_dump_obj(item, CONFIG_KEY_PROTO, obj_print_proto(a->protocol));
obj_print_verdict(a->verdict, (char *)buf);
add_dump_obj(item, CONFIG_KEY_VERDICT, buf);
if (a->logprefix && strcmp(a->logprefix, DEFAULT_LOG_LOGPREFIX_ADDRESS) != 0)
add_dump_obj(item, CONFIG_KEY_LOGPREFIX, a->logprefix);
obj_print_rtlimit(buf, a->logrtlimit, a->logrtlimit_unit);
add_dump_obj(item, CONFIG_KEY_LOG_RTLIMIT, buf);
config_dump_int(value, a->used);
add_dump_obj(item, CONFIG_KEY_USED, value);
add_dump_list(item, CONFIG_KEY_POLICIES, LEVEL_ADDRESSPOLICY, &a->policies, NULL);
json_array_append_new(jarray, item);
}
break;
case LEVEL_ADDRESSPOLICY:
list_for_each_entry(ap, head, list) {
item = json_object();
add_dump_obj(item, CONFIG_KEY_NAME, ap->policy->name);
json_array_append_new(jarray, item);
}
break;
case LEVEL_ELEMENTS:
list_for_each_entry(e, head, list) {
item = json_object();
add_dump_obj(item, CONFIG_KEY_DATA, e->data);
if (e->time)
add_dump_obj(item, CONFIG_KEY_TIME, e->time);
add_dump_obj(item, CONFIG_KEY_COUNTER_PACKETS, e->counter_pkts);
add_dump_obj(item, CONFIG_KEY_COUNTER_BYTES, e->counter_bytes);
json_array_append_new(jarray, item);
}
break;
case LEVEL_SESSIONS:
list_for_each_entry(s, head, list) {
item = json_object();
add_dump_obj(item, CONFIG_KEY_CLIENT, s->client);
if (!s->bck)
add_dump_obj(item, CONFIG_KEY_BACKEND, UNDEFINED_VALUE);
else
add_dump_obj(item, CONFIG_KEY_BACKEND, s->bck->name);
if (s->expiration)
add_dump_obj(item, CONFIG_KEY_EXPIRATION, s->expiration);
json_array_append_new(jarray, item);
}
break;
default:
return NULL;
}
if (!continue_obj) {
json_object_set_new(obj, objname, jarray);
return jarray;
}
return NULL;
}
static int add_dump_elements(json_t *jdata, struct policy *p)
{
element_get_list(p);
add_dump_list(jdata, CONFIG_KEY_ELEMENTS, LEVEL_ELEMENTS, &p->elements, NULL);
element_s_delete(p);
return 0;
}
int config_print_farms(char **buf, char *name)
{
struct list_head *farms = obj_get_farms();
json_t *jdata;
struct farm *f;
if (name && strcmp(name, "") != 0) {
f = farm_lookup_by_name(name);
if (!f)
return -1;
}
jdata = json_object();
add_dump_list(jdata, CONFIG_KEY_FARMS, LEVEL_FARMS, farms, name);
free(*buf);
*buf = json_dumps(jdata, JSON_INDENT(8));
json_decref(jdata);
if (*buf == NULL)
return -1;
return 0;
}
int config_print_farm_sessions(char **buf, char *name)
{
json_t *jdata = json_object();
json_t *jdata_cont;
struct farm *f;
if (!name || strcmp(name, "") == 0)
return PARSER_STRUCT_FAILED;
f = farm_lookup_by_name(name);
if (!f)
return PARSER_OBJ_UNKNOWN;
jdata_cont = add_dump_list(jdata, CONFIG_KEY_SESSIONS, LEVEL_SESSIONS, &f->static_sessions, name);
continue_obj = 1;
session_get_timed(f);
add_dump_list(jdata_cont, CONFIG_KEY_SESSIONS, LEVEL_SESSIONS, &f->timed_sessions, name);
continue_obj = 0;
free(*buf);
*buf = json_dumps(jdata, JSON_INDENT(8));
json_decref(jdata);
session_s_delete(f, SESSION_TYPE_TIMED);
if (*buf == NULL)
return PARSER_FAILED;
return PARSER_OK;
}
int config_print_policies(char **buf, char *name)
{
struct list_head *policies = obj_get_policies();
json_t* jdata = json_object();
add_dump_list(jdata, CONFIG_KEY_POLICIES, LEVEL_POLICIES, policies, name);
free(*buf);
*buf = json_dumps(jdata, JSON_INDENT(8));
json_decref(jdata);
if (*buf == NULL)
return PARSER_FAILED;
return PARSER_OK;
}
int config_set_farm_action(const char *name, const char *value)
{
struct farm *f;
if (!name || strcmp(name, "") == 0)
return (farm_s_set_action(config_value_action(value)) >= 0) ? PARSER_OK : PARSER_FAILED;
f = farm_lookup_by_name(name);
if (!f) {
config_set_output(". Unknown farm '%s'", name);
return PARSER_OBJ_UNKNOWN;
}
return (farm_set_action(f, config_value_action(value)) >= 0) ? PARSER_OK : PARSER_FAILED;
}
int config_set_session_backend_action(const char *fname, const char *bname, const char *value)
{
struct farm *f;
struct backend *b;
int ret = 0;
if (!fname || strcmp(fname, "") == 0)
return PARSER_STRUCT_FAILED;
if (!bname || strcmp(bname, "") == 0)
return PARSER_STRUCT_FAILED;
f = farm_lookup_by_name(fname);
if (!f) {
config_set_output(". Unknown farm '%s'", fname);
return PARSER_OBJ_UNKNOWN;
}
if (f->persistence == VALUE_META_NONE) {
config_set_output(". Farm '%s' without session persistence", fname);
return PARSER_VALID_FAILED;
}
b = backend_lookup_by_key(f, KEY_NAME, bname, 0);
if (!b) {
config_set_output(". Unknown backend '%s' in farm '%s'", bname, fname);
return PARSER_OBJ_UNKNOWN;
}
session_get_timed(f);
if (config_value_action(value) == ACTION_DELETE) {
ret = session_backend_action(f, b, ACTION_STOP);
farm_set_action(f, ACTION_RELOAD);
obj_rulerize(OBJ_START);
}
ret = session_backend_action(f, b, config_value_action(value));
session_s_delete(f, SESSION_TYPE_TIMED);
return ret;
}
int config_set_backend_action(const char *fname, const char *bname, const char *value)
{
struct farm *f;
struct backend *b;
int ret = 0;
if (!fname || strcmp(fname, "") == 0)
return PARSER_STRUCT_FAILED;
f = farm_lookup_by_name(fname);
if (!f) {
config_set_output(". Unknown farm '%s'", fname);
return PARSER_OBJ_UNKNOWN;
}
session_get_timed(f);
if (!bname || strcmp(bname, "") == 0) {
ret = backend_s_set_action(f, config_value_action(value));
goto out;
}
b = backend_lookup_by_key(f, KEY_NAME, bname, 0);
if (!b) {
config_set_output(". Unknown backend '%s' in farm '%s'", bname, fname);
session_s_delete(f, SESSION_TYPE_TIMED);
return PARSER_OBJ_UNKNOWN;
}
ret = backend_set_action(b, config_value_action(value));
out:
session_s_delete(f, SESSION_TYPE_TIMED);
return (ret >= 0) ? PARSER_OK : PARSER_FAILED;
}
int config_set_session_action(const char *fname, const char *sname, const char *value)
{
struct farm *f;
struct session *s = NULL;
char name[255] = { 0 };
char *c;
int ret = -1;
int timed = 0;
int action = config_value_action(value);
if (!fname || strcmp(fname, "") == 0) {
config_set_output(". Please select a valid farm");
return PARSER_STRUCT_FAILED;
}
f = farm_lookup_by_name(fname);
if (!f) {
config_set_output(". Unknown farm '%s'", fname);
return PARSER_OBJ_UNKNOWN;
}
if (!sname || strcmp(sname, "") == 0) {
ret = session_s_set_action(f, NULL, action);
goto apply;
}
/* Traduce URL to plain text */
sprintf(name, "%s", sname);
for (c = name; (c = strchr(c, '_')); ++c)
*c = ' ';
s = session_lookup_by_key(f, SESSION_TYPE_STATIC, KEY_CLIENT, name);
if (s) {
ret = session_set_action(s, SESSION_TYPE_STATIC, action);
goto apply;
}
if (action == ACTION_STOP) {
timed = 1;
session_get_timed(f);
s = session_lookup_by_key(f, SESSION_TYPE_TIMED, KEY_CLIENT, name);
if (s) {
ret = session_set_action(s, SESSION_TYPE_TIMED, action);
goto apply;
}
return PARSER_OK;
}
config_set_output(". Unknown session '%s' in farm '%s'", sname, fname);
return PARSER_OBJ_UNKNOWN;
apply:
if (ret > 0) {
config_set_farm_action(fname, CONFIG_VALUE_ACTION_RELOAD);
obj_rulerize(OBJ_START);
}
if (timed) {
session_s_delete(f, SESSION_TYPE_TIMED);
return PARSER_OK;
}
if (action != ACTION_STOP)
return PARSER_OK;
if (!s)
return (session_s_set_action(f, NULL, ACTION_DELETE) >= 0) ? PARSER_OK : PARSER_FAILED;
return (session_set_action(s, SESSION_TYPE_STATIC, ACTION_DELETE) >= 0) ? PARSER_OK : PARSER_FAILED;
}
int config_set_fpolicy_action(const char *fname, const char *fpname, const char *value)
{
struct farm *f;
struct farmpolicy *fp;
if (!fname || strcmp(fname, "") == 0) {
config_set_output(". Please select a valid farm");
return PARSER_STRUCT_FAILED;
}
f = farm_lookup_by_name(fname);
if (!f) {
config_set_output(". Unknown farm '%s'", fname);
return PARSER_OBJ_UNKNOWN;
}
if (!fpname || strcmp(fpname, "") == 0)
return farmpolicy_s_set_action(f, config_value_action(value));
fp = farmpolicy_lookup_by_name(f, fpname);
if (!fp) {
config_set_output(". Unknown farm policy '%s' in farm '%s'", fpname, fname);
return PARSER_OBJ_UNKNOWN;
}
farmpolicy_set_action(fp, config_value_action(value));
return PARSER_OK;
}
int config_check_policy(const char *name)
{
struct policy *p;
if (!name || strcmp(name, "") == 0)
return PARSER_OBJ_UNKNOWN;
p = policy_lookup_by_name(name);
if (!p) {
config_set_output(". Unknown policy '%s'", name);
return PARSER_OBJ_UNKNOWN;
}
return PARSER_OK;
}
int config_set_policy_action(const char *name, const char *value)
{
struct policy *p;
if (!name || strcmp(name, "") == 0)
return (policy_s_set_action(config_value_action(value)) >= 0) ? PARSER_OK : PARSER_FAILED;
p = policy_lookup_by_name(name);
if (!p) {
config_set_output(". Unknown policy '%s'", name);
return PARSER_OBJ_UNKNOWN;
}
return (policy_set_action(p, config_value_action(value)) >= 0) ? PARSER_OK : PARSER_FAILED;
}
int config_set_element_action(const char *pname, const char *edata, const char *value)
{
struct policy *p;
struct element *e;
if (!pname || strcmp(pname, "") == 0) {
config_set_output(". Please select a valid policy");
return PARSER_STRUCT_FAILED;
}
p = policy_lookup_by_name(pname);
if (!p) {
config_set_output(". Unknown policy '%s'", pname);
return PARSER_OBJ_UNKNOWN;
}
if (!edata || strcmp(edata, "") == 0)
return (element_s_set_action(p, config_value_action(value)) >= 0) ? PARSER_OK : PARSER_FAILED;
e = element_lookup_by_name(p, edata);
if (!e) {
config_set_output(". Unknown element '%s' in policy '%s'", edata, pname);
return PARSER_OBJ_UNKNOWN;
}
return (element_set_action(e, config_value_action(value)) >= 0) ? PARSER_OK : PARSER_FAILED;
}
int config_get_elements(const char *pname)
{
struct policy *p;
p = policy_lookup_by_name(pname);
if (!p) {
config_set_output(". Unknown policy '%s'", pname);
return PARSER_OBJ_UNKNOWN;
}
return element_get_list(p);
}
int config_delete_elements(const char *pname)
{
struct policy *p;
p = policy_lookup_by_name(pname);
if (!p) {
config_set_output(". Unknown policy '%s'", pname);
return PARSER_OBJ_UNKNOWN;
}
return element_s_delete(p);
}
void config_print_response(char **buf, char *fmt, ...)
{
int len = 0;
va_list args;
len = sprintf(*buf, "{\"response\": \"");
va_start(args, fmt);
len += vsprintf(*buf + len, fmt, args);
va_end(args);
sprintf(*buf + len, "\"}");
}
int config_set_address_action(const char *name, const char *value)
{
struct address *a;
if (!name || strcmp(name, "") == 0)
return (address_s_set_action(config_value_action(value)) >= 0) ? PARSER_OK : PARSER_FAILED;
a = address_lookup_by_name(name);
if (!a) {
config_set_output(". Unknown address '%s'", name);
return PARSER_OBJ_UNKNOWN;
}
return (address_set_action(a, config_value_action(value)) >= 0) ? PARSER_OK : PARSER_FAILED;
}
int config_set_farmaddress_action(const char *fname, const char *faname, const char *value)
{
struct farm *f;
struct farmaddress *fa;
if (!fname || strcmp(fname, "") == 0) {
config_set_output(". Please select a valid farm");
return PARSER_STRUCT_FAILED;
}
f = farm_lookup_by_name(fname);
if (!f) {
config_set_output(". Unknown farm '%s'", fname);
return PARSER_OBJ_UNKNOWN;
}
if (!faname || strcmp(faname, "") == 0)
return farmaddress_s_set_action(f, config_value_action(value));
fa = farmaddress_lookup_by_name(f, faname);
if (!fa) {
config_set_output(". Unknown farm address '%s' in farm '%s'", faname, fname);
return PARSER_OBJ_UNKNOWN;
}
farmaddress_set_action(fa, config_value_action(value));
return 0;
}
int config_print_addresses(char **buf, char *name)
{
struct list_head *addresses = obj_get_addresses();
json_t* jdata = json_object();
add_dump_list(jdata, CONFIG_KEY_ADDRESSES, LEVEL_ADDRESSES, addresses, name);
*buf = json_dumps(jdata, JSON_INDENT(8));
json_decref(jdata);
if (*buf == NULL)
return -1;
return 0;
}
nftlb-1.0.7/src/elements.c 0000664 0000000 0000000 00000015047 14326712445 0015412 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include "elements.h"
#include "policies.h"
#include "objects.h"
#include "tools.h"
#include "nft.h"
static struct element * element_create(struct policy *p, char *data, char *time, char *counter_pkts, char *counter_bytes)
{
struct element *e = (struct element *)malloc(sizeof(struct element));
if (!e) {
tools_printlog(LOG_ERR, "element memory allocation error");
return NULL;
}
e->policy = p;
obj_set_attribute_string(data, &e->data);
e->action = ACTION_START;
e->time = DEFAULT_ELEMENT_TIME;
if (time && strcmp(time, "") != 0)
obj_set_attribute_string(time, &e->time);
obj_set_attribute_string(counter_pkts, &e->counter_pkts);
obj_set_attribute_string(counter_bytes, &e->counter_bytes);
list_add_tail(&e->list, &p->elements);
p->total_elem++;
return e;
}
static int element_delete_node(struct element *e)
{
list_del(&e->list);
if (e->data)
free(e->data);
if (e->time)
free(e->time);
if (e->counter_pkts)
free(e->counter_pkts);
if (e->counter_bytes)
free(e->counter_bytes);
free(e);
return 0;
}
static int element_delete(struct element *e)
{
if (!e)
return 0;
struct policy *p = e->policy;
p->total_elem--;
policy_set_action(p, ACTION_RELOAD);
element_delete_node(e);
return 0;
}
static int nft_parse_elements(struct policy *p, const char *buf)
{
char *ini_ptr = NULL;
char *fin_ptr = NULL, *fin1_ptr = NULL;
char elem_addr[100] = {0};
char elem_time[100] = {0};
char elem_pkts[100] = {0};
char elem_bytes[100] = {0};
ini_ptr = strstr(buf, "elements = { ");
if (ini_ptr == NULL)
return 0;
ini_ptr += 13;
new_element:
fin_ptr = strstr(ini_ptr, ",");
if ((fin1_ptr = strstr(ini_ptr, " ")) != NULL) {
if (!fin_ptr || (fin1_ptr < fin_ptr))
fin_ptr = fin1_ptr;
}
tools_snprintf(elem_addr, fin_ptr - ini_ptr, ini_ptr);
fin_ptr += 1;
ini_ptr = fin_ptr;
if ((fin_ptr = strstr(ini_ptr, " bytes ")) != NULL) {
ini_ptr += 16;
tools_snprintf(elem_pkts, fin_ptr - ini_ptr, ini_ptr);
ini_ptr += 8;
if ((fin_ptr = strstr(ini_ptr, ",")) != NULL || (fin_ptr = strstr(ini_ptr, " ")) != NULL) {
tools_snprintf(elem_bytes, fin_ptr - ini_ptr, ini_ptr);
ini_ptr = ++fin_ptr;
}
} else {
tools_snprintf(elem_pkts, 3, DEFAULT_COUNTER);
tools_snprintf(elem_bytes, 3, DEFAULT_COUNTER);
fin_ptr = ini_ptr;
}
if (p->timeout)
element_create(p, elem_addr, elem_time, elem_pkts, elem_bytes);
else
element_create(p, elem_addr, NULL, elem_pkts, elem_bytes);
while (*fin_ptr == '\n' || *fin_ptr == '\t' || *fin_ptr == ' ')
fin_ptr++;
if (*fin_ptr != '}' && *fin_ptr != '\0') {
ini_ptr = fin_ptr;
goto new_element;
}
return 0;
}
void element_s_print(struct policy *p)
{
struct element *e;
list_for_each_entry(e, &p->elements, list) {
tools_printlog(LOG_DEBUG," [element] ");
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_DATA, e->data);
if (p->timeout && e->time && strcmp(e->time, "") != 0)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_TIME, e->time);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_COUNTER_PACKETS, e->counter_pkts);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_COUNTER_BYTES, e->counter_bytes);
tools_printlog(LOG_DEBUG," *[action] %d", e->action);
}
}
struct element * element_lookup_by_name(struct policy *p, const char *data)
{
struct element *e;
list_for_each_entry(e, &p->elements, list) {
if (strcmp(e->data, data) == 0)
return e;
}
return NULL;
}
int element_set_action(struct element *e, int action)
{
tools_printlog(LOG_DEBUG, "%s():%d: element %s action is %d - new action %d", __FUNCTION__, __LINE__, e->data, e->action, action);
if (action == ACTION_DELETE) {
element_delete(e);
return 1;
}
if (e->action != action) {
e->action = action;
return 1;
}
return 0;
}
int element_s_set_action(struct policy *p, int action)
{
struct element *e, *next;
if (action == ACTION_STOP) {
policy_set_action(p, ACTION_FLUSH);
return 0;
}
list_for_each_entry_safe(e, next, &p->elements, list)
element_set_action(e, action);
return 0;
}
int element_s_delete(struct policy *p)
{
struct element *e, *next;
list_for_each_entry_safe(e, next, &p->elements, list)
element_delete(e);
p->total_elem = 0;
return 0;
}
int element_set_attribute(struct config_pair *c, int apply_action)
{
struct policy *p = obj_get_current_policy();
struct element *e = obj_get_current_element();
if (!p || (c->key != KEY_DATA && !e))
return PARSER_OBJ_UNKNOWN;
switch (c->key) {
case KEY_DATA:
e = element_create(p, c->str_value, NULL, DEFAULT_COUNTER, DEFAULT_COUNTER);
if (!e)
return -1;
obj_set_current_element(e);
break;
case KEY_TIME:
if (e->time)
free(e->time);
obj_set_attribute_string(c->str_value, &e->time);
break;
case KEY_ACTION:
element_set_action(e, c->int_value);
break;
default:
return -1;
}
return 0;
}
int element_pos_actionable(struct config_pair *c, int apply_action)
{
struct policy *p = obj_get_current_policy();
struct element *e = obj_get_current_element();
if (!p || !e)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable element %s of policy %s with param %d", __FUNCTION__, __LINE__, e->data, p->name, c->key);
switch (c->key) {
case KEY_DATA:
if (apply_action != ACTION_START) {
element_set_action(e, apply_action);
policy_set_action(p, ACTION_RELOAD);
}
break;
default:
policy_set_action(p, ACTION_RELOAD);
break;
}
return 0;
}
int element_get_list(struct policy *p)
{
const char *buf;
struct nftst *n = nftst_create_from_policy(p);
tools_printlog(LOG_DEBUG, "%s():%d: policy %s", __FUNCTION__, __LINE__, p->name);
nft_get_rules_buffer(&buf, KEY_POLICIES, n);
p->total_elem = 0;
nft_parse_elements(p, buf);
nft_del_rules_buffer(buf);
element_s_print(p);
nftst_delete(n);
return 0;
}
nftlb-1.0.7/src/events.c 0000664 0000000 0000000 00000003421 14326712445 0015073 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
struct events_stct {
struct ev_loop *loop;
struct ev_io *srv_accept;
struct ev_io *net_ntlnk;
};
static struct events_stct st_ev;
int loop_init(void)
{
st_ev.loop = ev_default_loop(0);
return 0;
}
int loop_run(void)
{
while (1)
ev_loop(st_ev.loop, 0);
return 0;
}
struct ev_loop *get_loop(void)
{
return st_ev.loop;
}
struct ev_io *events_get_ntlnk(void)
{
return st_ev.net_ntlnk;
}
struct ev_io *events_create_ntlnk(void)
{
st_ev.net_ntlnk = (struct ev_io *)malloc(sizeof(struct ev_io));
return st_ev.net_ntlnk;
}
void events_delete_ntlnk(void)
{
if (st_ev.net_ntlnk)
free(st_ev.net_ntlnk);
}
struct ev_io *events_get_srv(void)
{
return st_ev.srv_accept;
}
struct ev_io *events_create_srv(void)
{
st_ev.srv_accept = (struct ev_io *)malloc(sizeof(struct ev_io));
return st_ev.srv_accept;
}
void events_delete_srv(void)
{
if (st_ev.srv_accept)
free(st_ev.srv_accept);
}
nftlb-1.0.7/src/farmaddress.c 0000664 0000000 0000000 00000021214 14326712445 0016062 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include "farmaddress.h"
#include "addresses.h"
#include "farms.h"
#include "objects.h"
#include "network.h"
#include "tools.h"
static struct farmaddress * farmaddress_create(struct farm *f, struct address *a)
{
struct farmaddress *fa = (struct farmaddress *)malloc(sizeof(struct farmaddress));
if (!fa) {
tools_printlog(LOG_ERR, "Farm address memory allocation error");
return NULL;
}
fa->farm = f;
fa->address = a;
fa->action = DEFAULT_ACTION;
f->addresses_used++;
list_add_tail(&fa->list, &f->addresses);
a->used++;
if (f->policies_used)
f->policies_action = ACTION_START;
return fa;
}
static int farmaddress_delete(struct farmaddress *fa)
{
if (!fa)
return 0;
list_del(&fa->list);
if (fa->farm->addresses_used > 0)
fa->farm->addresses_used--;
if (fa->address->used > 0)
fa->address->used--;
if (address_not_used(fa->address))
address_delete(fa->address);
free(fa);
return 0;
}
void farmaddress_s_print(struct farm *f)
{
struct farmaddress *fa;
struct address *a;
list_for_each_entry(fa, &f->addresses, list) {
a = fa->address;
tools_printlog(LOG_DEBUG," [address] ");
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NAME, fa->address->name);
tools_printlog(LOG_DEBUG," *[%s] %d", CONFIG_KEY_ACTION, fa->action);
if (a->iface)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IFACE, a->iface);
if (a->iethaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IETHADDR, a->iethaddr);
tools_printlog(LOG_DEBUG," *[ifidx] %d", a->ifidx);
if (a->ipaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IPADDR, a->ipaddr);
if (a->ports)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_PORTS, a->ports);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_FAMILY, obj_print_family(a->family));
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_PROTO, obj_print_proto(a->protocol));
tools_printlog(LOG_DEBUG," *[policies_action] %d", a->policies_action);
}
}
struct farmaddress * farmaddress_lookup_by_name(struct farm *f, const char *name)
{
struct farmaddress *fa;
list_for_each_entry(fa, &f->addresses, list) {
if (strcmp(fa->address->name, name) == 0)
return fa;
}
return NULL;
}
int farmaddress_set_action(struct farmaddress *fa, int action)
{
struct farm *f = fa->farm;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s address %s action %d", __FUNCTION__, __LINE__, fa->farm->name, fa->address->ipaddr, action);
if (action == ACTION_DELETE) {
farmaddress_delete(fa);
return 1;
}
if (fa->action != action) {
fa->action = action;
if (action != ACTION_RELOAD && f->policies_used) {
f->policies_action = action;
fa->address->policies_action = action;
}
return 1;
}
return 0;
}
int farmaddress_s_set_action(struct farm *f, int action)
{
struct farmaddress *fa, *next;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s", __FUNCTION__, __LINE__, f->name);
list_for_each_entry_safe(fa, next, &f->addresses, list)
if (fa->action > action)
farmaddress_set_action(fa, action);
return 0;
}
int farmaddress_s_delete(struct farm *f)
{
struct farmaddress *fa, *next;
list_for_each_entry_safe(fa, next, &f->addresses, list)
farmaddress_delete(fa);
return 0;
}
int farmaddress_s_lookup_address_action(struct farm *f, char *name, int action)
{
struct farmaddress *fa;
int ret = 0;
fa = farmaddress_lookup_by_name(f, name);
if (fa)
ret = farmaddress_set_action(fa, action);
if (ret)
f->action = ACTION_RELOAD;
return ret;
}
static int farmaddress_set_default_addr_name(char *fa_name, char *prefix)
{
struct address *a;
int i = 0;
sprintf(fa_name, "%s-addr", prefix);
a = address_lookup_by_name(fa_name);
if (!a)
return 0;
do {
sprintf(fa_name, "%s-addr-%d", prefix, i);
a = address_lookup_by_name(fa_name);
i++;
} while (a);
return 0;
}
int farmaddress_create_default(struct config_pair *c)
{
char fa_name[300];
struct farm *f = obj_get_current_farm();
struct farmaddress *fa;
struct address *a;
if (!f)
return 1;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s", __FUNCTION__, __LINE__, f->name);
fa = farmaddress_get_first(f);
if (fa) {
obj_set_current_farmaddress(fa);
return 0;
}
farmaddress_set_default_addr_name(fa_name, f->name);
a = address_create(fa_name);
if (!a)
return -1;
obj_set_current_address(a);
fa = farmaddress_lookup_by_name(f, fa_name);
if (!fa)
fa = farmaddress_create(f, a);
obj_set_current_farmaddress(fa);
return 0;
}
int farmaddress_set_attribute(struct config_pair *c)
{
struct farmaddress *fa = obj_get_current_farmaddress();
struct farm *f = obj_get_current_farm();
struct address *a;
if (!f) {
tools_printlog(LOG_INFO, "%s():%d: farm UNKNOWN", __FUNCTION__, __LINE__);
return PARSER_OBJ_UNKNOWN;
}
switch (c->key) {
case KEY_NAME:
a = address_lookup_by_name(c->str_value);
if (!a) {
a = address_create(c->str_value);
if (!a)
return -1;
}
obj_set_current_address(a);
fa = farmaddress_lookup_by_name(f, c->str_value);
if (fa)
return 0;
fa = farmaddress_create(f, a);
obj_set_current_farmaddress(fa);
return PARSER_OK;
break;
default:
return address_set_attribute(c);
}
return PARSER_OK;
}
int farmaddress_pre_actionable(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
if (!f)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pre actionable farm address for farm %s action %d", __FUNCTION__, __LINE__, f->name, f->action);
return farm_set_action(f, ACTION_RELOAD);
}
int farmaddress_pos_actionable(struct config_pair *c)
{
struct farmaddress *fa = obj_get_current_farmaddress();
struct farm *f = obj_get_current_farm();
if (!fa || !f)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable farm address %s for farm %s with param %d", __FUNCTION__, __LINE__, fa->address->name, f->name, c->key);
return farm_set_action(f, ACTION_RELOAD);
}
int farmaddress_s_validate_iface(struct farm *f)
{
struct farmaddress *fa;
int anyvalid = 0;
tools_printlog(LOG_DEBUG, "%s():%d: validating input farm addresses interface of %s", __FUNCTION__, __LINE__, f->name);
list_for_each_entry(fa, &f->addresses, list) {
if (address_validate_iface(fa->address) || address_validate_iether(fa->address)) {
fa->action = ACTION_NONE;
continue;
}
anyvalid |= 1;
}
return anyvalid;
}
int farmaddress_s_validate_helper(struct farm *f, int new_value)
{
struct farmaddress *fa;
tools_printlog(LOG_DEBUG, "%s():%d: validating input farm address proto for new helper of %s", __FUNCTION__, __LINE__, f->name);
if (new_value == VALUE_HELPER_NONE)
return PARSER_OK;
list_for_each_entry(fa, &f->addresses, list) {
if ((new_value == VALUE_HELPER_FTP || new_value == VALUE_HELPER_PPTP) && (fa->address->protocol != VALUE_PROTO_TCP))
return PARSER_VALID_FAILED;
if ((new_value == VALUE_HELPER_TFTP || new_value == VALUE_HELPER_SNMP) && (fa->address->protocol != VALUE_PROTO_UDP))
return PARSER_VALID_FAILED;
if (new_value == VALUE_HELPER_SIP && fa->address->protocol == VALUE_PROTO_SCTP)
return PARSER_VALID_FAILED;
}
return PARSER_OK;
}
int farmaddress_s_set_attribute(struct farm *f, struct config_pair *c)
{
struct farmaddress *fa;
list_for_each_entry(fa, &f->addresses, list)
farmaddress_set_attribute(c);
return 1;
}
struct farmaddress * farmaddress_get_first(struct farm *f)
{
if (!f || list_empty(&f->addresses))
return NULL;
return list_first_entry(&f->addresses, struct farmaddress, list);
}
int farmaddress_rename_default(struct config_pair *c)
{
char fa_name[300];
struct farm *f = obj_get_current_farm();
struct farmaddress *fa;
struct address *a;
if (!f)
return 1;
fa = farmaddress_get_first(f);
if (!fa || !fa->address)
return 1;
a = fa->address;
if (!strstr(a->name, "-addr"))
return 1;
free(a->name);
farmaddress_set_default_addr_name(fa_name, c->str_value);
obj_set_attribute_string(fa_name, &a->name);
return 0;
}
nftlb-1.0.7/src/farmpolicy.c 0000664 0000000 0000000 00000012365 14326712445 0015743 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include "farmpolicy.h"
#include "farms.h"
#include "farmaddress.h"
#include "objects.h"
#include "network.h"
#include "tools.h"
static struct farmpolicy * farmpolicy_create(struct farm *f, struct policy *p)
{
struct farmpolicy *fp = (struct farmpolicy *)malloc(sizeof(struct farmpolicy));
if (!fp) {
tools_printlog(LOG_ERR, "Farm Policy memory allocation error");
return NULL;
}
fp->farm = f;
fp->policy = p;
fp->action = DEFAULT_ACTION;
p->used++;
f->policies_action = DEFAULT_ACTION;
if (f->policies_used > 0 && f->action == ACTION_RELOAD)
f->policies_action = ACTION_RELOAD;
f->policies_used++;
list_add_tail(&fp->list, &f->policies);
return fp;
}
static int farmpolicy_delete(struct farmpolicy *fp)
{
if (!fp)
return 0;
list_del(&fp->list);
if (fp->farm->policies_used > 0)
fp->farm->policies_used--;
if (fp->policy->used > 0)
fp->policy->used--;
free(fp);
return 0;
}
void farmpolicy_s_print(struct farm *f)
{
struct farmpolicy *fp;
list_for_each_entry(fp, &f->policies, list) {
tools_printlog(LOG_DEBUG," [policy] ");
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NAME, fp->policy->name);
tools_printlog(LOG_DEBUG," *[%s] %d", CONFIG_KEY_ACTION, fp->action);
}
}
struct farmpolicy * farmpolicy_lookup_by_name(struct farm *f, const char *name)
{
struct farmpolicy *fp;
list_for_each_entry(fp, &f->policies, list) {
if (strcmp(fp->policy->name, name) == 0)
return fp;
}
return NULL;
}
int farmpolicy_set_action(struct farmpolicy *fp, int action)
{
struct farm *f = fp->farm;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s action %d", __FUNCTION__, __LINE__, fp->farm->name, action);
if (action == ACTION_DELETE) {
farmpolicy_delete(fp);
farmaddress_s_set_action(f, ACTION_RELOAD);
return 1;
}
if (fp->action > action) {
fp->action = action;
fp->policy->action = ACTION_RELOAD;
// deactivate policies if it's the only one used
if (f->policies_used == 1 && fp->action == ACTION_STOP)
f->policies_action = action;
else
f->policies_action = ACTION_RELOAD;
farmaddress_s_set_action(f, ACTION_RELOAD);
return 1;
}
return 0;
}
int farmpolicy_s_set_action(struct farm *f, int action)
{
struct farmpolicy *fp, *next;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s action %d", __FUNCTION__, __LINE__, f->name, action);
list_for_each_entry_safe(fp, next, &f->policies, list)
farmpolicy_set_action(fp, action);
f->policies_action = action;
return 0;
}
int farmpolicy_s_delete(struct farm *f)
{
struct farmpolicy *fp, *next;
list_for_each_entry_safe(fp, next, &f->policies, list)
farmpolicy_delete(fp);
return 0;
}
int farmpolicy_s_lookup_policy_action(struct farm *f, char *name, int action)
{
struct farmpolicy *fp;
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: looking for policy %s in farm %s", __FUNCTION__, __LINE__, name, f->name);
fp = farmpolicy_lookup_by_name(f, name);
if (fp)
ret = farmpolicy_set_action(fp, action);
if (ret) {
farm_set_action(f, ACTION_RELOAD);
farmaddress_s_set_action(f, ACTION_RELOAD);
}
return 0;
}
int farmpolicy_set_attribute(struct config_pair *c)
{
struct farmpolicy *fp = obj_get_current_farmpolicy();
struct farm *f = obj_get_current_farm();
struct policy *p;
if (!f)
return PARSER_OBJ_UNKNOWN;
switch (c->key) {
case KEY_NAME:
p = policy_lookup_by_name(c->str_value);
if (!p) {
config_set_output(". Unknown policy '%s'", c->str_value);
return PARSER_OBJ_UNKNOWN;
}
fp = farmpolicy_lookup_by_name(f, c->str_value);
if (fp)
return 0;
fp = farmpolicy_create(f, p);
obj_set_current_farmpolicy(fp);
break;
default:
return PARSER_STRUCT_FAILED;
}
return PARSER_OK;
}
int farmpolicy_pre_actionable(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
if (!f)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pre actionable farm policy for farm %s", __FUNCTION__, __LINE__, f->name);
farm_set_action(f, ACTION_RELOAD);
farmaddress_s_set_action(f, ACTION_RELOAD);
farm_rulerize(f);
return 0;
}
int farmpolicy_pos_actionable(struct config_pair *c)
{
struct farmpolicy *fp = obj_get_current_farmpolicy();
struct farm *f = obj_get_current_farm();
if (!fp || !f)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable farm policy %s for farm %s with param %d", __FUNCTION__, __LINE__, fp->policy->name, f->name, c->key);
farm_set_action(f, ACTION_RELOAD);
farmaddress_s_set_action(f, ACTION_RELOAD);
return 0;
}
nftlb-1.0.7/src/farms.c 0000664 0000000 0000000 00000117276 14326712445 0014715 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include
#include "farms.h"
#include "backends.h"
#include "sessions.h"
#include "farmpolicy.h"
#include "farmaddress.h"
#include "objects.h"
#include "config.h"
#include "nft.h"
#include "network.h"
#include "tools.h"
#include "nftst.h"
static struct farm * farm_create(char *name)
{
struct list_head *farms = obj_get_farms();
struct farm *pfarm = (struct farm *)malloc(sizeof(struct farm));
if (!pfarm) {
tools_printlog(LOG_ERR, "Farm memory allocation error");
return NULL;
}
obj_set_attribute_string(name, &pfarm->name);
pfarm->fqdn = DEFAULT_FQDN;
pfarm->oface = DEFAULT_IFNAME;
pfarm->oethaddr = DEFAULT_ETHADDR;
pfarm->ofidx = DEFAULT_IFIDX;
pfarm->srcaddr = DEFAULT_SRCADDR;
pfarm->mode = DEFAULT_MODE;
pfarm->responsettl = DEFAULT_RESPONSETTL;
pfarm->scheduler = DEFAULT_SCHED;
pfarm->schedparam = DEFAULT_SCHEDPARAM;
pfarm->persistence = DEFAULT_PERSIST;
pfarm->persistttl = DEFAULT_PERSISTTM;
pfarm->helper = DEFAULT_HELPER;
pfarm->log = DEFAULT_LOG;
pfarm->logprefix = DEFAULT_LOG_LOGPREFIX;
pfarm->logrtlimit = DEFAULT_LOG_RTLIMIT;
pfarm->logrtlimit_unit = DEFAULT_RTLIMIT_UNIT;
pfarm->mark = DEFAULT_MARK;
pfarm->state = DEFAULT_FARM_STATE;
pfarm->action = DEFAULT_ACTION;
pfarm->reload_action = VALUE_RLD_NONE;
init_list_head(&pfarm->backends);
init_list_head(&pfarm->policies);
pfarm->total_weight = 0;
pfarm->priority = DEFAULT_PRIORITY;
pfarm->limitsttl = DEFAULT_LIMITSTTL;
pfarm->newrtlimit = DEFAULT_NEWRTLIMIT;
pfarm->newrtlimit_unit = DEFAULT_RTLIMIT_UNIT;
pfarm->newrtlimitbst = DEFAULT_RTLIMITBURST;
pfarm->newrtlimit_logprefix = DEFAULT_LOGPREFIX;
pfarm->rstrtlimit = DEFAULT_RSTRTLIMIT;
pfarm->rstrtlimit_unit = DEFAULT_RTLIMIT_UNIT;
pfarm->rstrtlimitbst = DEFAULT_RTLIMITBURST;
pfarm->rstrtlimit_logprefix = DEFAULT_LOGPREFIX;
pfarm->estconnlimit = DEFAULT_ESTCONNLIMIT;
pfarm->estconnlimit_logprefix = DEFAULT_LOGPREFIX;
pfarm->tcpstrict = DEFAULT_TCPSTRICT;
pfarm->tcpstrict_logprefix = DEFAULT_LOGPREFIX;
pfarm->queue = DEFAULT_QUEUE;
pfarm->verdict = DEFAULT_VERDICT;
pfarm->flow_offload = DEFAULT_FLOWOFFLOAD;
pfarm->intra_connect = DEFAULT_INTRACONNECT;
pfarm->total_bcks = 0;
pfarm->bcks_available = 0;
pfarm->bcks_usable = 0;
pfarm->bcks_have_port = 0;
pfarm->bcks_have_srcaddr = 0;
pfarm->bcks_have_if = 0;
pfarm->policies_used = 0;
pfarm->policies_action = ACTION_NONE;
pfarm->nft_chains = 0;
init_list_head(&pfarm->static_sessions);
pfarm->total_static_sessions = 0;
init_list_head(&pfarm->timed_sessions);
pfarm->total_timed_sessions = 0;
list_add_tail(&pfarm->list, farms);
obj_set_total_farms(obj_get_total_farms() + 1);
init_list_head(&pfarm->addresses);
pfarm->addresses_used = 0;
return pfarm;
}
static int farm_delete(struct farm *pfarm)
{
if (!pfarm)
return 0;
tools_printlog(LOG_DEBUG, "%s():%d: deleting farm %s", __FUNCTION__, __LINE__, pfarm->name);
backend_s_delete(pfarm);
farmpolicy_s_delete(pfarm);
farmaddress_s_delete(pfarm);
list_del(&pfarm->list);
if (pfarm->name && strcmp(pfarm->name, "") != 0)
free(pfarm->name);
if (pfarm->fqdn && strcmp(pfarm->fqdn, "") != 0)
free(pfarm->fqdn);
if (pfarm->oface && strcmp(pfarm->oface, "") != 0)
free(pfarm->oface);
if (pfarm->oethaddr && strcmp(pfarm->oethaddr, "") != 0)
free(pfarm->oethaddr);
if (pfarm->logprefix && strcmp(pfarm->logprefix, DEFAULT_LOG_LOGPREFIX) != 0)
free(pfarm->logprefix);
if (pfarm->newrtlimit_logprefix && strcmp(pfarm->newrtlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
free(pfarm->newrtlimit_logprefix);
if (pfarm->rstrtlimit_logprefix && strcmp(pfarm->rstrtlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
free(pfarm->rstrtlimit_logprefix);
if (pfarm->estconnlimit_logprefix && strcmp(pfarm->estconnlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
free(pfarm->estconnlimit_logprefix);
if (pfarm->tcpstrict_logprefix && strcmp(pfarm->tcpstrict_logprefix, DEFAULT_LOGPREFIX) != 0)
free(pfarm->tcpstrict_logprefix);
free(pfarm);
obj_set_total_farms(obj_get_total_farms() - 1);
return 0;
}
static int farm_validate_oface(struct farm *f)
{
tools_printlog(LOG_DEBUG, "%s():%d: validating output farm interface of %s", __FUNCTION__, __LINE__, f->name);
if (!f->oface || obj_equ_attribute_string(f->oface, "") ||
!f->oethaddr || obj_equ_attribute_string(f->oethaddr, ""))
return 0;
return 1;
}
static int farm_validate_helper_protocol(struct farm *f)
{
struct farmaddress *fa, *next;
list_for_each_entry_safe(fa, next, &f->addresses, list) {
if (fa->address->protocol == VALUE_PROTO_ALL) {
if ((f->helper != VALUE_HELPER_NONE && f->helper != VALUE_HELPER_SIP))
return 0;
continue;
}
if (fa->address->protocol == VALUE_PROTO_TCP) {
if ((f->helper != VALUE_HELPER_NONE && f->helper != VALUE_HELPER_FTP && f->helper != VALUE_HELPER_PPTP && f->helper != VALUE_HELPER_SIP))
return 0;
continue;
}
if (fa->address->protocol == VALUE_PROTO_UDP) {
if ((f->helper != VALUE_HELPER_NONE && f->helper != VALUE_HELPER_TFTP && f->helper != VALUE_HELPER_SNMP && f->helper != VALUE_HELPER_SIP))
return 0;
continue;
}
}
return 1;
}
static int farm_validate(struct farm *f)
{
tools_printlog(LOG_DEBUG, "%s():%d: validating farm %s", __FUNCTION__, __LINE__, f->name);
if (!farm_validate_helper_protocol(f)) {
tools_printlog(LOG_WARNING, "Farm %s doesn't validate helper protocol", f->name);
config_set_output(". Farm '%s' doesn't validate helper protocol", f->name);
return 0;
}
if (farm_needs_policies(f) && !farmaddress_s_validate_iface(f)) {
tools_printlog(LOG_WARNING, "Farm %s doesn't validate policy and input interface", f->name);
return 0;
}
if ((farm_is_ingress_mode(f) || farm_needs_flowtable(f)) &&
(!farmaddress_s_validate_iface(f) ||
!farm_validate_oface(f))) {
tools_printlog(LOG_WARNING, "Farm %s doesn't validate ingress mode or flowtable and interfaces", f->name);
return 0;
}
return 1;
}
int farm_is_available(struct farm *f)
{
tools_printlog(LOG_DEBUG, "%s():%d: farm %s state is %s",
__FUNCTION__, __LINE__, f->name, obj_print_state(f->state));
return (f->state == VALUE_STATE_UP) && farm_validate(f);
}
static int farm_s_update_dsr_counter(void)
{
struct list_head *farms = obj_get_farms();
struct farm *f;
int dsrcount = 0;
int curcount = obj_get_dsr_counter();
tools_printlog(LOG_DEBUG, "%s():%d: updating dsr counter", __FUNCTION__, __LINE__);
list_for_each_entry(f, farms, list) {
if (farm_is_ingress_mode(f) && (f->state == VALUE_STATE_UP || f->state == VALUE_STATE_CONFERR))
dsrcount++;
}
if (dsrcount != curcount)
tools_printlog(LOG_DEBUG, "%s():%d: farm dsr counter becomes %d", __FUNCTION__, __LINE__, dsrcount);
obj_set_dsr_counter(dsrcount);
return dsrcount;
}
static void farm_manage_eventd(void)
{
farm_s_update_dsr_counter();
if (obj_get_dsr_counter() && !net_get_event_enabled()) {
net_eventd_init();
}
if (!obj_get_dsr_counter() && net_get_event_enabled()) {
net_eventd_stop();
}
}
int farm_has_source_address(struct farm *f)
{
return (f->srcaddr != DEFAULT_SRCADDR && !obj_equ_attribute_string(f->srcaddr, "")) ||
f->bcks_have_srcaddr;
}
int farm_needs_flowtable(struct farm *f)
{
return f->flow_offload;
}
int farm_needs_intraconnect(struct farm *f)
{
return f->intra_connect;
}
static int farm_set_netinfo(struct farm *f)
{
tools_printlog(LOG_DEBUG, "%s():%d: farm %s", __FUNCTION__, __LINE__, f->name);
if (f->state != VALUE_STATE_UP) {
tools_printlog(LOG_INFO, "%s():%d: farm %s doesn't require low level network info", __FUNCTION__, __LINE__, f->name);
return -1;
}
if (farm_is_ingress_mode(f) &&
farm_set_oface_info(f) == 0 ) {
f->bcks_have_if = backend_s_check_have_iface(f);
farm_manage_eventd();
backend_s_set_netinfo(f);
}
if (farm_needs_flowtable(f)) {
farm_set_oface_info(f);
f->bcks_have_if = backend_s_check_have_iface(f);
}
return 0;
}
extern int masquerade_mark;
static int farm_set_mark(struct farm *f, int new_value)
{
int old_value = f->mark;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s old mark %d new mark %d", __FUNCTION__, __LINE__, f->name, old_value, new_value);
if (f->mode != VALUE_MODE_DNAT && f->mode != VALUE_MODE_SNAT && f->mode != VALUE_MODE_LOCAL) {
tools_printlog(LOG_INFO, "%s():%d: mark for farm %s not available for the current mode %d", __FUNCTION__, __LINE__, f->name, f->mode);
return 0;
}
if (new_value & masquerade_mark) {
tools_printlog(LOG_ERR, "%s():%d: mark 0x%x for farm %s conflicts with the POSTROUTING mark 0x%x", __FUNCTION__, __LINE__, f->mark, f->name, masquerade_mark);
return 0;
}
f->mark = new_value;
return 0;
}
static int farm_set_state(struct farm *f, int new_value)
{
int old_value = f->state;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s old state %d new state %d", __FUNCTION__, __LINE__, f->name, old_value, new_value);
// farm doesn't allow 'available' state
if (new_value == VALUE_STATE_AVAIL)
new_value = VALUE_STATE_UP;
if (new_value == VALUE_STATE_CONFERR) {
f->state = new_value;
farm_set_action(f, ACTION_NONE);
return 0;
}
if (old_value != VALUE_STATE_UP &&
new_value == VALUE_STATE_UP) {
farm_set_action(f, ACTION_START);
f->state = new_value;
farm_set_netinfo(f);
return 0;
}
if (old_value == VALUE_STATE_UP &&
new_value != VALUE_STATE_UP) {
farm_set_action(f, ACTION_STOP);
}
f->state = new_value;
farm_manage_eventd();
return 0;
}
static int farm_set_mode(struct farm *f, int new_value)
{
int old_value = f->mode;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s old mode %d new mode %d", __FUNCTION__, __LINE__, f->name, old_value, new_value);
if (old_value != new_value) {
f->mode = new_value;
farm_set_netinfo(f);
backend_s_validate(f);
}
return 0;
}
static int farm_set_sched(struct farm *f, int new_value)
{
int old_value = f->scheduler;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s old scheduler %d new scheduler %d", __FUNCTION__, __LINE__, f->name, old_value, new_value);
f->scheduler = new_value;
if (f->scheduler == VALUE_SCHED_HASH && f->schedparam == VALUE_META_NONE) {
f->schedparam = VALUE_META_SRCIP;
}
if (f->scheduler != VALUE_SCHED_HASH) {
f->schedparam = VALUE_META_NONE;
}
return 0;
}
static int farm_set_persistence(struct farm *f, int new_value)
{
int old_value = f->persistence;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s old persistence %d new persistence %d", __FUNCTION__, __LINE__, f->name, old_value, new_value);
session_s_delete(f, SESSION_TYPE_STATIC);
f->persistence = new_value;
return 0;
}
static int farm_set_verdict(struct farm *f, int new_value)
{
int old_value = f->verdict;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s old verdict %d new verdict %d", __FUNCTION__, __LINE__, f->name, old_value, new_value);
if (new_value == VALUE_VERDICT_NONE)
return 1;
f->verdict = new_value;
farmpolicy_s_set_action(f, ACTION_RELOAD);
farmaddress_s_set_action(f, ACTION_RELOAD);
return 0;
}
static void farm_print(struct farm *f)
{
char buf[100] = {};
struct farmaddress *fa = farmaddress_get_first(f);
struct address *a = NULL;
if (fa)
a = fa->address;
tools_printlog(LOG_DEBUG," [farm] ");
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NAME, f->name);
if (f->fqdn)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_FQDN, f->fqdn);
if (f->oface)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_OFACE, f->oface);
if (f->oethaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_OETHADDR, f->oethaddr);
tools_printlog(LOG_DEBUG," *[ofidx] %d", f->ofidx);
if (a) {
if (a->iface)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IFACE, a->iface);
if (a->iethaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_IETHADDR, a->iethaddr);
tools_printlog(LOG_DEBUG," *[ifidx] %d", a->ifidx);
if (a->ipaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_VIRTADDR, a->ipaddr);
if (a->ports)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_VIRTPORTS, a->ports);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_FAMILY, obj_print_family(a->family));
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_PROTO, obj_print_proto(a->protocol));
}
if (f->srcaddr)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_SRCADDR, f->srcaddr);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_MODE, obj_print_mode(f->mode));
if (f->mode == VALUE_MODE_STLSDNAT)
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_RESPONSETTL, f->responsettl);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_SCHED, obj_print_sched(f->scheduler));
obj_print_meta(f->schedparam, (char *)buf);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_SCHEDPARAM, buf);
obj_print_meta(f->persistence, (char *)buf);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_PERSIST, buf);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_PERSISTTM, f->persistttl);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_HELPER, obj_print_helper(f->helper));
obj_print_log(f->log, (char *)buf);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_LOG, buf);
if (f->logprefix)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_LOGPREFIX, f->logprefix);
obj_print_rtlimit(buf, f->logrtlimit, f->logrtlimit_unit);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_LOG_RTLIMIT, buf);
tools_printlog(LOG_DEBUG," [%s] 0x%x", CONFIG_KEY_MARK, f->mark);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_STATE, obj_print_state(f->state));
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_PRIORITY, f->priority);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_LIMITSTTL, f->limitsttl);
obj_print_rtlimit(buf, f->newrtlimit, f->newrtlimit_unit);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NEWRTLIMIT, buf);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_NEWRTLIMITBURST, f->newrtlimitbst);
if (f->newrtlimit_logprefix)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NEWRTLIMIT_LOGPREFIX, f->newrtlimit_logprefix);
obj_print_rtlimit(buf, f->rstrtlimit, f->rstrtlimit_unit);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_RSTRTLIMIT, buf);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_RSTRTLIMITBURST, f->rstrtlimitbst);
if (f->rstrtlimit_logprefix)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_RSTRTLIMIT_LOGPREFIX, f->rstrtlimit_logprefix);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_ESTCONNLIMIT, f->estconnlimit);
if (f->estconnlimit_logprefix)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_ESTCONNLIMIT_LOGPREFIX, f->estconnlimit_logprefix);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_TCPSTRICT, obj_print_switch(f->tcpstrict));
if (f->tcpstrict_logprefix)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_TCPSTRICT_LOGPREFIX, f->tcpstrict_logprefix);
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_QUEUE, f->queue);
obj_print_verdict(f->verdict, (char *)buf);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_VERDICT, buf);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_FLOWOFFLOAD, obj_print_switch(f->flow_offload));
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_INTRACONNECT, obj_print_switch(f->intra_connect));
tools_printlog(LOG_DEBUG," *[total_weight] %d", f->total_weight);
tools_printlog(LOG_DEBUG," *[total_bcks] %d", f->total_bcks);
tools_printlog(LOG_DEBUG," *[bcks_available] %d", f->bcks_available);
tools_printlog(LOG_DEBUG," *[bcks_usable] %d", f->bcks_usable);
tools_printlog(LOG_DEBUG," *[bcks_have_port] %d", f->bcks_have_port);
tools_printlog(LOG_DEBUG," *[bcks_have_srcaddr] %d", f->bcks_have_srcaddr);
tools_printlog(LOG_DEBUG," *[bcks_have_if] %d", f->bcks_have_if);
tools_printlog(LOG_DEBUG," *[policies_action] %d", f->policies_action);
tools_printlog(LOG_DEBUG," *[policies_used] %d", f->policies_used);
tools_printlog(LOG_DEBUG," *[total_static_sessions] %d", f->total_static_sessions);
tools_printlog(LOG_DEBUG," *[total_timed_sessions] %d", f->total_timed_sessions);
tools_printlog(LOG_DEBUG," *[nft_chains] %x", f->nft_chains);
tools_printlog(LOG_DEBUG," *[addresses_used] %d", f->addresses_used);
tools_printlog(LOG_DEBUG," *[reload_action] %x", f->reload_action);
tools_printlog(LOG_DEBUG," *[%s] %d", CONFIG_KEY_ACTION, f->action);
if (f->addresses_used > 0)
farmaddress_s_print(f);
if (f->total_bcks > 0)
backend_s_print(f);
if (f->policies_used > 0)
farmpolicy_s_print(f);
if (f->total_static_sessions || f->total_timed_sessions)
session_s_print(f);
}
static int farm_set_limitsttl(struct farm *f, int new_value)
{
if (f->limitsttl == new_value)
return PARSER_OK;
f->limitsttl = new_value;
return PARSER_OK;
}
static int farm_set_newrtlimit(struct farm *f, int new_value, int new_unit)
{
if (f->newrtlimit == new_value && f->newrtlimit_unit == new_unit)
return PARSER_OK;
f->newrtlimit = new_value;
f->newrtlimit_unit = new_unit;
if (f->mode == VALUE_MODE_DSR || f->mode == VALUE_MODE_STLSDNAT)
return PARSER_OK;
if (new_value == 0)
f->reload_action |= VALUE_RLD_NEWRTLIMIT_STOP;
else
f->reload_action |= VALUE_RLD_NEWRTLIMIT_START;
return PARSER_OK;
}
static int farm_set_rstrtlimit(struct farm *f, int new_value, int new_unit)
{
if (f->rstrtlimit == new_value)
return PARSER_OK;
f->rstrtlimit = new_value;
f->rstrtlimit_unit = new_unit;
if (f->mode == VALUE_MODE_DSR || f->mode == VALUE_MODE_STLSDNAT)
return PARSER_OK;
if (new_value == 0)
f->reload_action |= VALUE_RLD_RSTRTLIMIT_STOP;
else
f->reload_action |= VALUE_RLD_RSTRTLIMIT_START;
return PARSER_OK;
}
static int farm_set_estconnlimit(struct farm *f, int new_value)
{
if (f->estconnlimit == new_value)
return PARSER_OK;
f->estconnlimit = new_value;
if (f->mode == VALUE_MODE_DSR || f->mode == VALUE_MODE_STLSDNAT)
return PARSER_OK;
if (new_value == 0)
f->reload_action |= VALUE_RLD_ESTCONNLIMIT_STOP;
else
f->reload_action |= VALUE_RLD_ESTCONNLIMIT_START;
return PARSER_OK;
}
static int farm_set_tcpstrict(struct farm *f, int new_value)
{
f->tcpstrict = new_value;
if (f->mode == VALUE_MODE_DSR || f->mode == VALUE_MODE_STLSDNAT)
return PARSER_OK;
if (new_value == VALUE_SWITCH_OFF)
f->reload_action |= VALUE_RLD_TCPSTRICT_STOP;
else
f->reload_action |= VALUE_RLD_TCPSTRICT_START;
return PARSER_OK;
}
static int farm_set_queue(struct farm *f, int new_value)
{
f->queue = new_value;
if (f->mode == VALUE_MODE_DSR || f->mode == VALUE_MODE_STLSDNAT)
return PARSER_OK;
if (new_value == -1)
f->reload_action |= VALUE_RLD_QUEUE_STOP;
else
f->reload_action |= VALUE_RLD_QUEUE_START;
return PARSER_OK;
}
static int farm_set_helper(struct farm *f, int new_value)
{
int old_value = f->helper;
syslog(LOG_DEBUG, "%s():%d: farm %s old helper %d new helper %d", __FUNCTION__, __LINE__, f->name, old_value, new_value);
if (farmaddress_s_validate_helper(f, new_value))
return PARSER_VALID_FAILED;
f->helper = new_value;
return PARSER_OK;
}
int farm_changed(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
struct farmaddress *fa = obj_get_current_farmaddress();
if (!f)
return -1;
if (!fa)
fa = farmaddress_get_first(f);
tools_printlog(LOG_DEBUG, "%s():%d: farm %s with param %d", __FUNCTION__, __LINE__, f->name, c->key);
switch (c->key) {
case KEY_NAME:
return 1;
break;
case KEY_NEWNAME:
return !obj_equ_attribute_string(f->name, c->str_value);
break;
case KEY_FQDN:
return !obj_equ_attribute_string(f->fqdn, c->str_value);
break;
case KEY_ETHADDR:
return 1;
break;
case KEY_IETHADDR:
if (!fa) return 1;
return !obj_equ_attribute_string(fa->address->iethaddr, c->str_value);
break;
case KEY_IFACE:
if (!fa) return 1;
return !obj_equ_attribute_string(fa->address->iface, c->str_value);
break;
case KEY_VIRTADDR:
if (!fa) return 1;
return !obj_equ_attribute_string(fa->address->ipaddr, c->str_value);
break;
case KEY_FAMILY:
if (!fa) return 1;
return !obj_equ_attribute_int(fa->address->family, c->int_value);
break;
case KEY_VIRTPORTS:
if (!fa) return 1;
return !obj_equ_attribute_string(fa->address->ports, c->str_value);
break;
case KEY_PROTO:
if (!fa) return 1;
return !obj_equ_attribute_int(fa->address->protocol, c->int_value);
break;
case KEY_OETHADDR:
return !obj_equ_attribute_string(f->oethaddr, c->str_value);
break;
case KEY_OFACE:
return !obj_equ_attribute_string(f->oface, c->str_value);
break;
case KEY_SRCADDR:
return !obj_equ_attribute_string(f->srcaddr, c->str_value);
break;
case KEY_MODE:
return !obj_equ_attribute_int(f->mode, c->int_value);
break;
case KEY_RESPONSETTL:
return !obj_equ_attribute_int(f->responsettl, c->int_value);
break;
case KEY_SCHED:
return !obj_equ_attribute_int(f->scheduler, c->int_value);
break;
case KEY_SCHEDPARAM:
return !obj_equ_attribute_int(f->schedparam, c->int_value);
break;
case KEY_PERSISTENCE:
return !obj_equ_attribute_int(f->persistence, c->int_value);
break;
case KEY_PERSISTTM:
return !obj_equ_attribute_int(f->persistttl, c->int_value);
break;
case KEY_HELPER:
return !obj_equ_attribute_int(f->helper, c->int_value);
break;
case KEY_LOG:
return !obj_equ_attribute_int(f->log, c->int_value);
break;
case KEY_LOGPREFIX:
return !obj_equ_attribute_string(f->logprefix, c->str_value);
break;
case KEY_LOG_RTLIMIT:
return !obj_equ_attribute_int(f->logrtlimit, c->int_value) ||
!obj_equ_attribute_int(f->logrtlimit_unit, c->int_value2);
break;
case KEY_MARK:
return !obj_equ_attribute_int(f->mark, c->int_value);
break;
case KEY_STATE:
return !obj_equ_attribute_int(f->state, c->int_value);
break;
case KEY_ACTION:
return !obj_equ_attribute_int(f->action, c->int_value);
break;
case KEY_LIMITSTTL:
return !obj_equ_attribute_int(f->limitsttl, c->int_value);
break;
case KEY_NEWRTLIMIT:
return !obj_equ_attribute_int(f->newrtlimit, c->int_value) ||
!obj_equ_attribute_int(f->newrtlimit_unit, c->int_value2);
break;
case KEY_NEWRTLIMITBURST:
return !obj_equ_attribute_int(f->newrtlimitbst, c->int_value);
break;
case KEY_RSTRTLIMIT:
return !obj_equ_attribute_int(f->rstrtlimit, c->int_value) ||
!obj_equ_attribute_int(f->rstrtlimit_unit, c->int_value2);
break;
case KEY_RSTRTLIMITBURST:
return !obj_equ_attribute_int(f->rstrtlimitbst, c->int_value);
break;
case KEY_ESTCONNLIMIT:
return !obj_equ_attribute_int(f->estconnlimit, c->int_value);
break;
case KEY_TCPSTRICT:
return !obj_equ_attribute_int(f->tcpstrict, c->int_value);
break;
case KEY_QUEUE:
return !obj_equ_attribute_int(f->queue, c->int_value);
break;
case KEY_VERDICT:
return !obj_equ_attribute_int(f->verdict, c->int_value);
break;
case KEY_FLOWOFFLOAD:
return !obj_equ_attribute_int(f->flow_offload, c->int_value);
break;
case KEY_NEWRTLIMIT_LOGPREFIX:
return !obj_equ_attribute_string(f->newrtlimit_logprefix, c->str_value);
break;
case KEY_RSTRTLIMIT_LOGPREFIX:
return !obj_equ_attribute_string(f->rstrtlimit_logprefix, c->str_value);
break;
case KEY_ESTCONNLIMIT_LOGPREFIX:
return !obj_equ_attribute_string(f->estconnlimit_logprefix, c->str_value);
break;
case KEY_TCPSTRICT_LOGPREFIX:
return !obj_equ_attribute_string(f->tcpstrict_logprefix, c->str_value);
break;
case KEY_INTRACONNECT:
return !obj_equ_attribute_int(f->intra_connect, c->int_value);
break;
default:
break;
}
return 0;
}
int farm_actionable(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
if (!f)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s with param %d", __FUNCTION__, __LINE__, f->name, c->key);
switch (c->key) {
case KEY_NEWRTLIMIT:
case KEY_NEWRTLIMITBURST:
case KEY_RSTRTLIMIT:
case KEY_RSTRTLIMITBURST:
case KEY_ESTCONNLIMIT:
case KEY_TCPSTRICT:
case KEY_QUEUE:
case KEY_FLOWOFFLOAD:
case KEY_NEWRTLIMIT_LOGPREFIX:
case KEY_RSTRTLIMIT_LOGPREFIX:
case KEY_ESTCONNLIMIT_LOGPREFIX:
case KEY_TCPSTRICT_LOGPREFIX:
if (farm_is_ingress_mode(f))
return 0;
break;
default:
break;
}
return 1;
}
int farm_set_priority(struct farm *f, int new_value)
{
int old_value = f->priority;
tools_printlog(LOG_DEBUG, "%s():%d: current value is %d, but new value will be %d",
__FUNCTION__, __LINE__, old_value, new_value);
if (new_value <= 0)
return -1;
f->priority = new_value;
return 0;
}
void farm_s_print(void)
{
struct list_head *farms = obj_get_farms();
struct farm *f;
if (!farms)
return;
list_for_each_entry(f, farms, list)
farm_print(f);
}
struct farm * farm_lookup_by_name(const char *name)
{
struct list_head *farms = obj_get_farms();
struct farm *f;
list_for_each_entry(f, farms, list) {
if (strcmp(f->name, name) == 0)
return f;
}
return NULL;
}
int farm_is_ingress_mode(struct farm *f)
{
return (f->mode == VALUE_MODE_DSR || f->mode == VALUE_MODE_STLSDNAT);
}
int farm_needs_policies(struct farm *f)
{
return (f->policies_used > 0) || (f->policies_action != ACTION_NONE);
}
struct farm * farm_get_first(void)
{
struct list_head *farms = obj_get_farms();
return list_first_entry(farms, struct farm, list);
}
int farm_set_oface_info(struct farm *f)
{
unsigned char ether[ETH_HW_ADDR_LEN];
char streth[ETH_HW_STR_LEN] = {};
char if_str[IFNAMSIZ];
struct backend *b;
char **ether_addr;
int if_index;
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s set interface info for interface", __FUNCTION__, __LINE__, f->name);
if (!(farm_is_ingress_mode(f) ||
farm_needs_flowtable(f))) {
tools_printlog(LOG_DEBUG, "%s():%d: farm %s doesn't require netinfo", __FUNCTION__, __LINE__, f->name);
return 0;
}
if (f->oface && strcmp(f->oface, IFACE_LOOPBACK) == 0) {
tools_printlog(LOG_DEBUG, "%s():%d: farm %s doesn't require output netinfo, loopback interface", __FUNCTION__, __LINE__, f->name);
f->ofidx = 0;
return 0;
}
ether_addr = &f->oethaddr;
b = backend_get_first(f);
if (!b || b->ipaddr == DEFAULT_IPADDR) {
tools_printlog(LOG_DEBUG, "%s():%d: there is no backend yet in the farm %s", __FUNCTION__, __LINE__, f->name);
return 0;
}
ret = net_get_local_ifidx_per_remote_host(b->ipaddr, &if_index);
if (ret == -1) {
tools_printlog(LOG_ERR, "%s():%d: unable to get the outbound interface to %s for the farm %s", __FUNCTION__, __LINE__, b->ipaddr, f->name);
return -1;
}
f->ofidx = if_index;
if (if_indextoname(if_index, if_str) == NULL) {
tools_printlog(LOG_ERR, "%s():%d: unable to get the outbound interface name with index %d required by the farm %s", __FUNCTION__, __LINE__, if_index, f->name);
return -1;
}
if (f->oface)
free(f->oface);
obj_set_attribute_string(if_str, &f->oface);
net_strim_netface(f->oface);
net_get_local_ifinfo((unsigned char **)ðer, f->oface);
sprintf(streth, "%02x:%02x:%02x:%02x:%02x:%02x", ether[0],
ether[1], ether[2], ether[3], ether[4], ether[5]);
if (f->oethaddr)
free(f->oethaddr);
obj_set_attribute_string(streth, ether_addr);
return 0;
}
int farm_pre_actionable(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
if (!f)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pre actionable farm %s with param %d", __FUNCTION__, __LINE__, f->name, c->key);
switch (c->key) {
case KEY_NAME:
break;
case KEY_NEWNAME:
case KEY_FAMILY:
case KEY_VIRTADDR:
case KEY_VIRTPORTS:
case KEY_SRCADDR:
case KEY_MODE:
case KEY_RESPONSETTL:
case KEY_PROTO:
case KEY_PERSISTENCE:
case KEY_PERSISTTM:
case KEY_FLOWOFFLOAD:
case KEY_LOG:
case KEY_HELPER:
case KEY_INTRACONNECT:
case KEY_LIMITSTTL:
if (farm_set_action(f, ACTION_STOP))
farm_rulerize(f);
break;
default:
break;
}
return ACTION_START;
}
int farm_pos_actionable(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
if (!f)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable farm %s with param %d", __FUNCTION__, __LINE__, f->name, c->key);
switch (c->key) {
case KEY_NAME:
break;
case KEY_NEWNAME:
case KEY_FAMILY:
case KEY_VIRTADDR:
case KEY_VIRTPORTS:
case KEY_SRCADDR:
case KEY_MODE:
case KEY_RESPONSETTL:
case KEY_PROTO:
case KEY_PERSISTENCE:
case KEY_PERSISTTM:
case KEY_FLOWOFFLOAD:
case KEY_LOG:
case KEY_HELPER:
case KEY_INTRACONNECT:
case KEY_LIMITSTTL:
farm_set_action(f, ACTION_START);
break;
case KEY_STATE:
break;
case KEY_VERDICT:
case KEY_LOG_RTLIMIT:
default:
farm_set_action(f, ACTION_RELOAD);
return 0;
}
return 0;
}
int farm_set_attribute(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
struct farmaddress *fa = obj_get_current_farmaddress();
struct address *a;
struct farm *nf;
int ret = PARSER_FAILED;
if (c->key != KEY_NAME && !f)
return PARSER_OBJ_UNKNOWN;
switch (c->key) {
case KEY_NAME:
f = farm_lookup_by_name(c->str_value);
if (!f) {
f = farm_create(c->str_value);
if (!f)
return PARSER_FAILED;
}
obj_set_current_farm(f);
obj_set_current_farmaddress(NULL);
obj_set_current_farmpolicy(NULL);
ret = PARSER_OK;
break;
case KEY_NEWNAME:
nf = farm_lookup_by_name(c->str_value);
if (!nf) {
farmaddress_rename_default(c);
free(f->name);
obj_set_attribute_string(c->str_value, &f->name);
}
ret = PARSER_OK;
break;
case KEY_FQDN:
if (strcmp(f->fqdn, DEFAULT_FQDN) != 0)
free(f->fqdn);
ret = obj_set_attribute_string(c->str_value, &f->fqdn);
break;
case KEY_IFACE:
farmaddress_create_default(c);
fa = obj_get_current_farmaddress();
a = fa->address;
if (a->iface)
free(a->iface);
ret = obj_set_attribute_string(c->str_value, &a->iface);
net_strim_netface(a->iface);
address_set_netinfo(a);
break;
case KEY_OFACE:
if (f->oface)
free(f->oface);
ret = obj_set_attribute_string(c->str_value, &f->oface);
net_strim_netface(f->oface);
farm_set_netinfo(f);
break;
case KEY_FAMILY:
farmaddress_create_default(c);
fa = obj_get_current_farmaddress();
a = fa->address;
a->family = c->int_value;
ret = PARSER_OK;
break;
case KEY_ETHADDR:
farmaddress_create_default(c);
fa = obj_get_current_farmaddress();
a = fa->address;
if (a->iethaddr)
free(a->iethaddr);
if (f->oethaddr)
free(f->oethaddr);
ret = obj_set_attribute_string(c->str_value, &a->iethaddr) ||
obj_set_attribute_string(c->str_value, &f->oethaddr);
break;
case KEY_IETHADDR:
farmaddress_create_default(c);
fa = obj_get_current_farmaddress();
a = fa->address;
if (a->iethaddr)
free(a->iethaddr);
ret = obj_set_attribute_string(c->str_value, &a->iethaddr);
break;
case KEY_OETHADDR:
if (f->oethaddr)
free(f->oethaddr);
ret = obj_set_attribute_string(c->str_value, &f->oethaddr);
break;
case KEY_VIRTADDR:
farmaddress_create_default(c);
fa = obj_get_current_farmaddress();
a = fa->address;
if (strcmp(a->ipaddr, DEFAULT_VIRTADDR) != 0)
free(a->ipaddr);
ret = obj_set_attribute_string(c->str_value, &a->ipaddr);
address_set_netinfo(a);
break;
case KEY_VIRTPORTS:
farmaddress_create_default(c);
fa = obj_get_current_farmaddress();
a = fa->address;
ret = address_set_ports(a, c->str_value);
break;
case KEY_SRCADDR:
if (f->srcaddr)
free(f->srcaddr);
ret = obj_set_attribute_string(c->str_value, &f->srcaddr);
break;
case KEY_MODE:
ret = farm_set_mode(f, c->int_value);
break;
case KEY_RESPONSETTL:
f->responsettl = c->int_value;
ret = PARSER_OK;
break;
case KEY_PROTO:
farmaddress_create_default(c);
fa = obj_get_current_farmaddress();
a = fa->address;
ret = address_set_protocol(a, c->int_value);
break;
case KEY_SCHED:
ret = farm_set_sched(f, c->int_value);
break;
case KEY_SCHEDPARAM:
f->schedparam = c->int_value;
ret = PARSER_OK;
break;
case KEY_PERSISTENCE:
ret = farm_set_persistence(f, c->int_value);
break;
case KEY_PERSISTTM:
f->persistttl = c->int_value;
ret = PARSER_OK;
break;
case KEY_PRIORITY:
farm_set_priority(f, c->int_value);
ret = PARSER_OK;
break;
case KEY_HELPER:
ret = farm_set_helper(f, c->int_value);
break;
case KEY_LOG:
f->log = c->int_value;
ret = PARSER_OK;
break;
case KEY_MARK:
ret = farm_set_mark(f, c->int_value);
break;
case KEY_STATE:
if (c->int_value != VALUE_STATE_CONFERR)
ret = farm_set_state(f, c->int_value);
else
ret = PARSER_OK;
break;
case KEY_ACTION:
ret = farm_set_action(f, c->int_value);
break;
case KEY_LIMITSTTL:
ret = farm_set_limitsttl(f, c->int_value);
break;
case KEY_NEWRTLIMIT:
ret = farm_set_newrtlimit(f, c->int_value, c->int_value2);
break;
case KEY_NEWRTLIMITBURST:
f->newrtlimitbst = c->int_value;
ret = PARSER_OK;
break;
case KEY_RSTRTLIMIT:
ret = farm_set_rstrtlimit(f, c->int_value, c->int_value2);
break;
case KEY_RSTRTLIMITBURST:
f->rstrtlimitbst = c->int_value;
ret = PARSER_OK;
break;
case KEY_ESTCONNLIMIT:
ret = farm_set_estconnlimit(f, c->int_value);
break;
case KEY_TCPSTRICT:
ret = farm_set_tcpstrict(f, c->int_value);
ret = PARSER_OK;
break;
case KEY_QUEUE:
ret = farm_set_queue(f, c->int_value);
ret = PARSER_OK;
break;
case KEY_VERDICT:
if (!farm_set_verdict(f, c->int_value))
return PARSER_OK;
break;
case KEY_FLOWOFFLOAD:
f->flow_offload = c->int_value;
farm_set_netinfo(f);
ret = PARSER_OK;
break;
case KEY_LOGPREFIX:
if (strcmp(f->logprefix, DEFAULT_LOG_LOGPREFIX) != 0)
free(f->logprefix);
ret = obj_set_attribute_string(c->str_value, &f->logprefix);
break;
case KEY_LOG_RTLIMIT:
f->logrtlimit = c->int_value;
f->logrtlimit_unit = c->int_value2;
if (farm_needs_policies(f)) {
f->policies_action = ACTION_RELOAD;
farmpolicy_s_set_action(f, ACTION_RELOAD);
}
ret = PARSER_OK;
break;
case KEY_NEWRTLIMIT_LOGPREFIX:
if (strcmp(f->newrtlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
free(f->newrtlimit_logprefix);
ret = obj_set_attribute_string(c->str_value, &f->newrtlimit_logprefix);
break;
case KEY_RSTRTLIMIT_LOGPREFIX:
if (strcmp(f->rstrtlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
free(f->rstrtlimit_logprefix);
ret = obj_set_attribute_string(c->str_value, &f->rstrtlimit_logprefix);
break;
case KEY_ESTCONNLIMIT_LOGPREFIX:
if (strcmp(f->estconnlimit_logprefix, DEFAULT_LOGPREFIX) != 0)
free(f->estconnlimit_logprefix);
ret = obj_set_attribute_string(c->str_value, &f->estconnlimit_logprefix);
break;
case KEY_TCPSTRICT_LOGPREFIX:
if (strcmp(f->tcpstrict_logprefix, DEFAULT_LOGPREFIX) != 0)
free(f->tcpstrict_logprefix);
ret = obj_set_attribute_string(c->str_value, &f->tcpstrict_logprefix);
break;
case KEY_INTRACONNECT:
f->intra_connect = c->int_value;
ret = PARSER_OK;
break;
default:
return PARSER_STRUCT_FAILED;
}
return ret;
}
int farm_set_action(struct farm *f, int action)
{
tools_printlog(LOG_DEBUG, "%s():%d: farm %s action is %d - new action %d state %d", __FUNCTION__, __LINE__, f->name, f->action, action, f->state);
int force = 0;
if (action == ACTION_STOP && f->state == VALUE_STATE_CONFERR) {
f->policies_action = ACTION_NONE;
if (farm_validate(f)) {
f->state = VALUE_STATE_UP;
}
force = 1;
}
if (action == ACTION_STOP && f->state != VALUE_STATE_UP)
return 0;
if (action == ACTION_RELOAD && f->state != VALUE_STATE_UP && f->state != VALUE_STATE_CONFERR)
action = ACTION_START;
if (action != ACTION_NONE && action != ACTION_RELOAD && f->policies_used != 0)
f->policies_action = action;
if (action == ACTION_DELETE) {
farm_delete(f);
return 1;
}
if (f->action > action || force) {
backend_s_gen_priority(f, ACTION_RELOAD);
farm_manage_eventd();
f->action = action;
farm_set_netinfo(f);
backend_s_validate(f);
if (action == ACTION_STOP || action == ACTION_START)
farmaddress_s_set_action(f, action);
return 1;
}
return 0;
}
int farm_s_set_action(int action)
{
struct list_head *farms = obj_get_farms();
struct farm *f, *next;
list_for_each_entry_safe(f, next, farms, list)
farm_set_action(f, action);
return 0;
}
int farm_s_set_reload_start(int action)
{
struct list_head *farms = obj_get_farms();
struct farm *f, *next;
list_for_each_entry_safe(f, next, farms, list)
if (f->state == VALUE_STATE_UP)
farm_set_action(f, ACTION_START);
return 0;
}
int farm_s_clean_nft_chains(void)
{
struct list_head *farms = obj_get_farms();
struct farm *f, *next;
if (!farms)
return 0;
list_for_each_entry_safe(f, next, farms, list)
f->nft_chains = 0;
return 0;
}
int farm_get_masquerade(struct farm *f)
{
int masq = ((f->mode == VALUE_MODE_SNAT || f->mode == VALUE_MODE_LOCAL) && (f->srcaddr == DEFAULT_SRCADDR || strcmp(f->srcaddr, "") == 0));
tools_printlog(LOG_DEBUG, "%s():%d: farm %s masquerade %d", __FUNCTION__, __LINE__, f->name, masq);
return masq;
}
void farm_s_set_backend_ether_by_oifidx(int interface_idx, const char * ip_bck, char * ether_bck)
{
struct list_head *farms = obj_get_farms();
struct farm *f;
tools_printlog(LOG_DEBUG, "%s():%d: updating farms with backends ip address %s and ether address %s", __FUNCTION__, __LINE__, ip_bck, ether_bck);
list_for_each_entry(f, farms, list) {
tools_printlog(LOG_DEBUG, "%s():%d: farm with oifidx %d found", __FUNCTION__, __LINE__, interface_idx);
if (!farm_validate(f)) {
tools_printlog(LOG_INFO, "%s():%d: farm %s doesn't validate", __FUNCTION__, __LINE__, f->name);
farm_set_state(f, VALUE_STATE_CONFERR);
continue;
}
if (backend_s_set_ether_by_ipaddr(f, ip_bck, ether_bck)) {
f->ofidx = interface_idx;
farm_set_action(f, ACTION_RELOAD);
farm_rulerize(f);
}
}
}
int farm_s_lookup_policy_action(char *name, int action)
{
struct list_head *farms = obj_get_farms();
struct farm *f, *next;
tools_printlog(LOG_DEBUG, "%s():%d: policy %s action %d", __FUNCTION__, __LINE__, name, action);
list_for_each_entry_safe(f, next, farms, list)
farmpolicy_s_lookup_policy_action(f, name, action);
return 0;
}
int farm_s_lookup_address_action(char *name, int action)
{
struct list_head *farms = obj_get_farms();
struct farm *f, *next;
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: address %s action %d", __FUNCTION__, __LINE__, name, action);
list_for_each_entry_safe(f, next, farms, list)
ret |= farmaddress_s_lookup_address_action(f, name, action);
return ret;
}
int farm_rulerize(struct farm *f)
{
tools_printlog(LOG_DEBUG, "%s():%d: rulerize farm %s action %d", __FUNCTION__, __LINE__, f->name, f->action);
farm_print(f);
if (f->action == ACTION_NONE)
return 0;
if (f->state == VALUE_STATE_CONFERR && farm_validate(f))
farm_set_state(f, VALUE_STATE_UP);
if (((f->action == ACTION_START || f->action == ACTION_RELOAD) && !farm_is_available(f)) ||
(f->state == VALUE_STATE_CONFERR)) {
tools_printlog(LOG_INFO, "%s():%d: farm %s won't be rulerized", __FUNCTION__, __LINE__, f->name);
if (f->state == VALUE_STATE_UP)
farm_set_state(f, VALUE_STATE_CONFERR);
f->action = ACTION_NONE;
return 0;
}
return nft_rulerize_farms(f);
}
int farm_s_rulerize(void)
{
struct list_head *farms = obj_get_farms();
struct farm *f, *next;
int ret = 0;
int output = 0;
tools_printlog(LOG_DEBUG, "%s():%d: rulerize everything", __FUNCTION__, __LINE__);
list_for_each_entry_safe(f, next, farms, list) {
ret = farm_rulerize(f);
output = output || ret;
}
return output;
}
int farm_get_mark(struct farm *f)
{
int mark = f->mark;
if (farm_get_masquerade(f))
mark |= masquerade_mark;
return mark;
}
void farm_s_set_oface_info(struct address *a)
{
struct list_head *farms = obj_get_farms();
struct farm *f, *next;
struct farmaddress *fa;
if (!a->iface)
return;
list_for_each_entry_safe(f, next, farms, list) {
if (f->ofidx != DEFAULT_IFIDX)
continue;
fa = farmaddress_lookup_by_name(f, a->name);
if (fa) {
if (a->iface)
obj_set_attribute_string(a->iface, &f->oface);
if (a->iethaddr)
obj_set_attribute_string(a->iethaddr, &f->oethaddr);
f->ofidx = a->ifidx;
}
}
}
nftlb-1.0.7/src/main.c 0000664 0000000 0000000 00000014155 14326712445 0014521 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include
#include
#include
#include
#include "config.h"
#include "objects.h"
#include "server.h"
#include "events.h"
#include "network.h"
#include "nft.h"
#include "tools.h"
#define NFTLB_SERVER_MODE 0
#define NFTLB_FG_MODE 0
#define NFTLB_BG_MODE 1
#define NFTLB_EXIT_MODE 1
#define NFTLB_NFT_SERIALIZE 0
#define NFTLB_SERVER_KEY_VAR "NFTLB_SERVER_KEY"
unsigned int serialize = NFTLB_NFT_SERIALIZE;
int masquerade_mark = NFTLB_MASQUERADE_MARK_DEFAULT;
static void print_usage(const char *prog_name)
{
fprintf(stderr,
"%s, nftables load balancer - Version %s\n"
"(c) 2018 by Laura Garcia \n"
"Usage: %s\n"
" [ -h | --help ] Show this help\n"
" [ -l | --log ] Set the syslog level\n"
" [ -L | --log-output ] Set the daemon logs output\n"
" [ -c | --config ] Launch with the given configuration file\n"
" [ -k | --key ] Set the authentication key, otherwise it'll be generated\n"
" [ -e | --exit ] Don't execute the server\n"
" [ -d | --daemon ] Run in daemon mode\n"
" [ -6 | --ipv6 ] Enable IPv6 listening port\n"
" [ -H | --host ] Set the host for the listening port\n"
" [ -P | --port ] Set the port for the listening port\n"
" [ -S | --serial ] Serialize nft commands\n"
" [ -m | --masquerade-mark ] Set masquerade mark in hex\n"
, prog_name, VERSION, prog_name);
}
static const struct option options[] = {
{ .name = "help", .has_arg = 0, .val = 'h' },
{ .name = "log", .has_arg = 1, .val = 'l' },
{ .name = "log-output", .has_arg = 1, .val = 'L' },
{ .name = "config", .has_arg = 1, .val = 'c' },
{ .name = "key", .has_arg = 1, .val = 'k' },
{ .name = "exit", .has_arg = 0, .val = 'e' },
{ .name = "daemon", .has_arg = 0, .val = 'd' },
{ .name = "ipv6", .has_arg = 0, .val = '6' },
{ .name = "host", .has_arg = 1, .val = 'H' },
{ .name = "port", .has_arg = 1, .val = 'P' },
{ .name = "serial", .has_arg = 0, .val = 'S' },
{ .name = "masquerade-mark", .has_arg = 1, .val = 'm' },
{ NULL },
};
static void nftlb_sighandler(int signo)
{
tools_printlog(LOG_INFO, "shutting down %s, bye", PACKAGE);
server_fini();
exit(EXIT_SUCCESS);
}
static void nftlb_trace() {
void *buffer[255];
char **str;
int i, level;
const int calls = backtrace(buffer, sizeof(buffer) / sizeof(void *));
tools_printlog(LOG_ERR, "SIGSEGV/SIGABRT received!");
backtrace_symbols_fd(buffer, calls, 1);
str = backtrace_symbols(buffer, calls);
if (!str) {
tools_printlog(LOG_ERR, "No backtrace strings found!");
exit(EXIT_FAILURE);
}
for (i = 0; i < calls; i++)
tools_printlog(LOG_ERR, "%s", str[i]);
free(str);
level = tools_log_get_level();
tools_log_set_level(LOG_DEBUG);
obj_print();
tools_log_set_level(level);
if (!obj_recovery())
exit(EXIT_FAILURE);
}
static int main_process(const char *config, int mode)
{
objects_init();
if (nft_check_tables())
nft_reset();
loop_init();
if (config && config_file(config) != 0)
return EXIT_FAILURE;
if (tools_log_get_level() > NFTLB_LOG_LEVEL_DEFAULT)
obj_print();
obj_rulerize(OBJ_START);
if (mode == NFTLB_EXIT_MODE)
return EXIT_SUCCESS;
if (server_init() != 0) {
tools_printlog(LOG_ERR, "Cannot start server-ev: %s\n", strerror(errno));
return EXIT_FAILURE;
}
loop_run();
return EXIT_SUCCESS;
}
int main(int argc, char *argv[])
{
int c;
int mode = NFTLB_SERVER_MODE;
int run_mode = NFTLB_FG_MODE;
int loglevel = NFTLB_LOG_LEVEL_DEFAULT;
int logoutput = NFTLB_LOG_OUTPUT_DEFAULT;
const char *config = NULL;
pid_t pid;
char *_server_key;
while ((c = getopt_long(argc, argv, "hl:L:c:k:ed6H:P:Sm:", options, NULL)) != -1) {
switch (c) {
case 'h':
print_usage(argv[0]);
return EXIT_SUCCESS;
case 'l':
loglevel = atoi(optarg);
break;
case 'L':
logoutput = atoi(optarg);
break;
case 'c':
config = optarg;
break;
case 'k':
server_set_key(optarg);
sprintf(optarg, "%*s", (int)strlen(optarg) - 1, " ");
break;
case 'e':
mode = NFTLB_EXIT_MODE;
break;
case 'd':
run_mode = NFTLB_BG_MODE;
break;
case '6':
server_set_ipv6();
break;
case 'H':
server_set_host(optarg);
break;
case 'P':
server_set_port(optarg);
break;
case 'S':
serialize = 1;
break;
case 'm':
masquerade_mark = (int)strtol(optarg, NULL, 16);
break;
default:
tools_printlog(LOG_ERR, "Unknown option -%c", optopt);
return EXIT_FAILURE;
}
}
if (signal(SIGINT, nftlb_sighandler) == SIG_ERR ||
signal(SIGTERM, nftlb_sighandler) == SIG_ERR ||
signal(SIGPIPE, SIG_IGN) == SIG_ERR ||
signal(SIGABRT, nftlb_trace) == SIG_ERR ||
signal(SIGSEGV, nftlb_trace) == SIG_ERR) {
tools_printlog(LOG_ERR, "Error assigning signals");
return EXIT_FAILURE;
}
if ((_server_key = getenv(NFTLB_SERVER_KEY_VAR)) != NULL && strlen(_server_key) > 0)
server_set_key(_server_key);
tools_log_set_level(loglevel);
tools_log_set_output(logoutput);
if (run_mode) {
pid = fork();
if (pid == -1) {
tools_printlog(LOG_ERR, "Daemon mode aborted: %s", strerror(errno));
return EXIT_FAILURE;
} else if (pid == 0) {
main_process(config, mode);
} else {
return EXIT_SUCCESS;
}
} else {
main_process(config, mode);
}
return EXIT_SUCCESS;
}
nftlb-1.0.7/src/network.c 0000664 0000000 0000000 00000050702 14326712445 0015264 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include "network.h"
#include "events.h"
#include "farms.h"
#include "checksum.h"
#include "tools.h"
#define ARP_TABLE_RETRY_SLEEP 1000
#define ICMP_PROTO 1
#define ICMP_PACKETSIZE 64
#define IP_ADDR_LEN 4
#define IP6_ADDR_LEN 16
#define ETH_ADDR_LEN 14
#define GET_INET_LEN(family) ((family == AF_INET6) ? IP6_ADDR_LEN : IP_ADDR_LEN)
#define GET_INET_STRLEN(family) ((family == AF_INET6) ? INET6_ADDRSTRLEN : INET_ADDRSTRLEN)
#define GET_AF_INET(family) ((family == VALUE_FAMILY_IPV6) ? AF_INET6 : AF_INET)
static int net_event_enabled;
struct net_io {
ev_io *io;
struct rtgenmsg *rt;
struct nlmsghdr *nlh;
};
static struct net_io io_handle;
struct mnl_socket *nl;
struct icmp_packet
{
struct icmphdr icmphdr;
char data[ICMP_PACKETSIZE - sizeof(struct icmphdr)];
};
struct icmpv6_packet
{
struct ip6_hdr iphdr;
struct icmp6_hdr icmphdr;
uint8_t data[ICMP_DATALEN];
};
struct ntl_data {
unsigned char family;
struct in6_addr *src_ipaddr;
unsigned char src_ethaddr[ETH_HW_ADDR_LEN];
struct in6_addr *dst_ipaddr;
unsigned char dst_ethaddr[ETH_HW_ADDR_LEN];
int oifidx;
};
struct ntl_request {
struct mnl_socket *nl;
struct nlmsghdr *nlh;
struct rtgenmsg *rt;
struct rtmsg *rtm;
unsigned int portid;
int msgtype;
char *buf;
void *cb;
void *data;
};
static int net_cmp_ip(struct in6_addr *ip1, struct in6_addr *ip2, int size)
{
int i = 0;
for(i = 0; i < size; ++i) {
if (ip1->s6_addr[i] != ip2->s6_addr[i])
return -1;
}
return 0;
}
static int net_get_addr_family(char *vip)
{
if (strstr(vip, ":"))
return AF_INET6;
else
return AF_INET;
}
static int send_ping(void *data)
{
struct ntl_data *sdata = data;
struct sockaddr_ll device;
struct sockaddr *pdevice;
struct icmp_packet pckt4;
struct icmpv6_packet pckt6;
struct sockaddr_in remote_addr;
ssize_t ret = 0;
int sock;
int frame_len_v6 = ETHER_HDRLEN + IP6_HDRLEN + ICMP_HDRLEN + ICMP_DATALEN;
uint8_t frame_v6[frame_len_v6];
int frame_len_v4 = ETHER_HDRLEN + IP4_HDRLEN + ICMP_HDRLEN + ICMP_DATALEN;
int *frame_len;
uint8_t *frame;
tools_printlog(LOG_DEBUG, "%s():%d: sending ping", __FUNCTION__, __LINE__);
if (sdata->family == AF_INET6) {
frame_len = &frame_len_v6;
frame = frame_v6;
memset(&device, 0, sizeof(device));
device.sll_ifindex = sdata->oifidx;
device.sll_family = PF_PACKET;
memcpy(device.sll_addr, sdata->src_ethaddr, ETH_HW_ADDR_LEN * sizeof(uint8_t));
device.sll_halen = 6;
frame_v6[0] = 0xff;
frame_v6[1] = 0xff;
frame_v6[2] = 0xff;
frame_v6[3] = 0xff;
frame_v6[4] = 0xff;
frame_v6[5] = 0xff;
frame_v6[6] = (uint8_t)sdata->src_ethaddr[0];
frame_v6[7] = (uint8_t)sdata->src_ethaddr[1];
frame_v6[8] = (uint8_t)sdata->src_ethaddr[2];
frame_v6[9] = (uint8_t)sdata->src_ethaddr[3];
frame_v6[10] = (uint8_t)sdata->src_ethaddr[4];
frame_v6[11] = (uint8_t)sdata->src_ethaddr[5];
frame_v6[12] = ETH_P_IPV6 / 256;
frame_v6[13] = ETH_P_IPV6 % 256;
pckt6.iphdr.ip6_flow = htonl((6 << 28) | (0 << 20) | 0);
pckt6.iphdr.ip6_plen = htons(ICMP_HDRLEN + 4);
pckt6.iphdr.ip6_nxt = IPPROTO_ICMPV6;
pckt6.iphdr.ip6_hops = 255;
memcpy(&pckt6.iphdr.ip6_src, sdata->src_ipaddr, sizeof(struct in6_addr));
memcpy(&pckt6.iphdr.ip6_dst, sdata->dst_ipaddr, sizeof(struct in6_addr));
pckt6.icmphdr.icmp6_type = ICMP6_ECHO_REQUEST;
pckt6.icmphdr.icmp6_code = 0;
pckt6.icmphdr.icmp6_id = htons(1000);
pckt6.icmphdr.icmp6_seq = htons(0);
pckt6.data[0] = 'H';
pckt6.data[1] = 'o';
pckt6.data[2] = 'l';
pckt6.data[3] = 'a';
pckt6.icmphdr.icmp6_cksum = 0;
pckt6.icmphdr.icmp6_cksum = icmp6_checksum(pckt6.iphdr, pckt6.icmphdr, pckt6.data, ICMP_DATALEN);
memcpy(frame_v6 + ETHER_HDRLEN, &pckt6.iphdr, IP6_HDRLEN * sizeof(uint8_t));
memcpy(frame_v6 + ETHER_HDRLEN + IP6_HDRLEN, &pckt6.icmphdr, ICMP_HDRLEN * sizeof(uint8_t));
memcpy(frame_v6 + ETHER_HDRLEN + IP6_HDRLEN + ICMP_HDRLEN, pckt6.data, ICMP_DATALEN * sizeof(uint8_t));
pdevice = (struct sockaddr *) &device;
sock = socket(PF_PACKET, SOCK_RAW, IPPROTO_ICMPV6);
} else {
bzero(&remote_addr, sizeof(remote_addr));
remote_addr.sin_family = sdata->family;
remote_addr.sin_port = 0;
memcpy(&remote_addr.sin_addr.s_addr, &sdata->dst_ipaddr->s6_addr, GET_INET_LEN(sdata->family) * sizeof(uint8_t));
bzero(&pckt4, sizeof(pckt4));
pckt4.icmphdr.type = ICMP_ECHO;
pckt4.icmphdr.un.echo.id = 1;
bzero(pckt4.data, ICMP_PACKETSIZE - sizeof(struct icmphdr));
pckt4.icmphdr.un.echo.sequence = 1;
frame_len_v4 = sizeof(pckt4);
frame = (uint8_t *)&pckt4;
frame_len = &frame_len_v4;
pdevice = (struct sockaddr *)&remote_addr;
sock = socket(PF_INET, SOCK_RAW, ICMP_PROTO);
}
if (sock < 0) {
tools_printlog(LOG_ERR, "%s():%d: open socket error", __FUNCTION__, __LINE__);
ret = -1;
goto out;
}
if (sendto(sock, frame, *frame_len, 0, pdevice, sizeof(device)) <= 0) {
tools_printlog(LOG_ERR, "%s():%d: sendto error", __FUNCTION__, __LINE__);
ret = -1;
}
out:
if (ret && sock > 0) {
tools_printlog(LOG_DEBUG, "%s():%d: cleanup socket", __FUNCTION__, __LINE__);
close(sock);
}
return ret;
}
static int data_attr_neigh_cb(const struct nlattr *attr, void *data)
{
const struct nlattr **tb = data;
int type = mnl_attr_get_type(attr);
tools_printlog(LOG_DEBUG, "%s():%d: launched cb neighbour", __FUNCTION__, __LINE__);
if (mnl_attr_type_valid(attr, NDA_MAX) < 0)
return MNL_CB_OK;
switch(type) {
case NDA_DST:
case NDA_LLADDR:
if (mnl_attr_validate(attr, MNL_TYPE_BINARY) < 0) {
tools_printlog(LOG_ERR, "%s():%d: mnl_attr_validate error", __FUNCTION__, __LINE__);
return MNL_CB_ERROR;
}
break;
default:
return MNL_CB_ERROR;
}
tb[type] = attr;
return MNL_CB_OK;
}
static int data_getdst_neigh_cb(const struct nlmsghdr *nlh, void *data)
{
struct nlattr *tb[NDA_MAX + 1] = {};
struct ndmsg *ndm = mnl_nlmsg_get_payload(nlh);
struct in6_addr *ipaddr;
void *ethaddr;
char out[INET6_ADDRSTRLEN];
struct ntl_data *sdata = data;
int matches = 0;
tools_printlog(LOG_DEBUG, "%s():%d: getting ethernet address destination", __FUNCTION__, __LINE__);
mnl_attr_parse(nlh, sizeof(*ndm), data_attr_neigh_cb, tb);
if (!tb[NDA_DST])
return MNL_CB_OK;
ipaddr = mnl_attr_get_payload(tb[NDA_DST]);
inet_ntop(sdata->family, ipaddr, out, GET_INET_LEN(sdata->family));
matches = (net_cmp_ip(ipaddr, sdata->dst_ipaddr, GET_INET_LEN(sdata->family)) == 0);
if (matches &&
((ndm->ndm_state & NUD_REACHABLE) || (ndm->ndm_state & NUD_PERMANENT) || (ndm->ndm_state & NUD_STALE))) {
mnl_attr_parse(nlh, sizeof(*ndm), data_attr_neigh_cb, tb);
if (tb[NDA_LLADDR]) {
ethaddr = mnl_attr_get_payload(tb[NDA_LLADDR]);
memcpy(&sdata->dst_ethaddr, ethaddr, 6);
tools_printlog(LOG_INFO, "%s():%d: get ether address index=%d family=%d dst=%s eth=%02x:%02x:%02x:%02x:%02x:%02x sts=%d",
__FUNCTION__, __LINE__,
ndm->ndm_ifindex, ndm->ndm_family, out, sdata->dst_ethaddr[0],
sdata->dst_ethaddr[1], sdata->dst_ethaddr[2], sdata->dst_ethaddr[3],
sdata->dst_ethaddr[4], sdata->dst_ethaddr[5], ndm->ndm_state);
}
return MNL_CB_STOP;
}
return MNL_CB_OK;
}
static int data_route_attr_cb(const struct nlattr *attr, void *data)
{
const struct nlattr **tb = data;
int type = mnl_attr_get_type(attr);
tools_printlog(LOG_DEBUG, "%s():%d: route netlink attr", __FUNCTION__, __LINE__);
if (mnl_attr_type_valid(attr, RTA_MAX) < 0)
return MNL_CB_OK;
tb[type] = attr;
return MNL_CB_OK;
}
static int data_getdst_route_cb(const struct nlmsghdr *nlh, void *data)
{
struct nlattr *tb[RTA_MAX + 1] = {};
struct rtmsg *rm = mnl_nlmsg_get_payload(nlh);
struct ntl_data *sdata = data;
tools_printlog(LOG_DEBUG, "%s():%d: getting interface route destination", __FUNCTION__, __LINE__);
mnl_attr_parse(nlh, sizeof(*rm), data_route_attr_cb, tb);
if (tb[RTA_OIF]) {
sdata->oifidx = mnl_attr_get_u32(tb[RTA_OIF]);
tools_printlog(LOG_INFO, "%s():%d: get routing interface to destination is %u", __FUNCTION__, __LINE__, sdata->oifidx);
return MNL_CB_STOP;
}
return MNL_CB_STOP;
}
static int ntl_request(struct ntl_request *ntl)
{
int ret, out = 0;
tools_printlog(LOG_DEBUG, "%s():%d: launch netlink request", __FUNCTION__, __LINE__);
ntl->nl = mnl_socket_open(NETLINK_ROUTE);
if (ntl->nl == NULL) {
tools_printlog(LOG_ERR, "%s():%d: mnl_socket_open error", __FUNCTION__, __LINE__);
return -1;
}
if (mnl_socket_bind(ntl->nl, 0, MNL_SOCKET_AUTOPID) < 0) {
tools_printlog(LOG_ERR, "%s():%d: mnl_socket_bind error", __FUNCTION__, __LINE__);
return -1;
}
ntl->portid = mnl_socket_get_portid(ntl->nl);
if (mnl_socket_sendto(ntl->nl, ntl->nlh, ntl->nlh->nlmsg_len) < 0) {
tools_printlog(LOG_ERR, "%s():%d: mnl_socket_sendto error", __FUNCTION__, __LINE__);
return -1;
}
ret = mnl_socket_recvfrom(ntl->nl, ntl->buf, MNL_SOCKET_BUFFER_SIZE);
while (ret > 0) {
ret = mnl_cb_run(ntl->buf, ret, ntl->nlh->nlmsg_seq, ntl->portid, ntl->cb, ntl->data);
if (ret <= MNL_CB_STOP) {
out = 0 | out;
goto end;
} else {
out = -1;
}
ret = mnl_socket_recvfrom(ntl->nl, ntl->buf, MNL_SOCKET_BUFFER_SIZE);
}
if (ret == -1) {
tools_printlog(LOG_ERR, "%s():%d: mnl_socket_recvfrom error", __FUNCTION__, __LINE__);
ret = -1;
}
end:
mnl_socket_close(ntl->nl);
return out;
}
int net_get_neigh_ether(unsigned char **dst_ethaddr, unsigned char *src_ethaddr, unsigned char family, char *src_ipaddr, char *dst_ipaddr, int outdev)
{
struct ntl_request ntl;
struct ntl_data *data;
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: source mac address %s source ip address %s destination ip address %s iface %d", __FUNCTION__, __LINE__, src_ethaddr, src_ipaddr, dst_ipaddr, outdev);
ntl.buf = (char *) malloc(MNL_SOCKET_BUFFER_SIZE);
ntl.nlh = mnl_nlmsg_put_header(ntl.buf);
ntl.nlh->nlmsg_type = RTM_GETNEIGH;
ntl.nlh->nlmsg_flags = NLM_F_REQUEST | NLM_F_DUMP;
ntl.nlh->nlmsg_seq = time(NULL);
ntl.rt = mnl_nlmsg_put_extra_header(ntl.nlh, sizeof(struct rtgenmsg));
ntl.rt->rtgen_family = GET_AF_INET(family);
ntl.cb = data_getdst_neigh_cb;
tools_printlog(LOG_DEBUG, "%s():%d: source ether is %02x:%02x:%02x:%02x:%02x:%02x",
__FUNCTION__, __LINE__, src_ethaddr[0], src_ethaddr[1], src_ethaddr[2],
src_ethaddr[3], src_ethaddr[4], src_ethaddr[5]);
data = (struct ntl_data *)calloc(1, sizeof(struct ntl_data));
if (!data) {
tools_printlog(LOG_ERR, "%s():%d: memory allocation error", __FUNCTION__, __LINE__);
return -1;
}
ntl.data = (void *)data;
data->dst_ipaddr = (struct in6_addr *)calloc(1, sizeof(struct in6_addr));
if (!data->dst_ipaddr){
tools_printlog(LOG_ERR, "%s():%d: memory allocation error", __FUNCTION__, __LINE__);
return -1;
}
data->family = GET_AF_INET(family);
if (inet_pton(data->family, dst_ipaddr, data->dst_ipaddr) <= 0) {
tools_printlog(LOG_ERR, "%s():%d: network translation error for %s", __FUNCTION__, __LINE__, dst_ipaddr);
return -1;
}
data->oifidx = outdev;
ret = ntl_request(&ntl);
if (ret != 0) {
ret = -1;
tools_printlog(LOG_DEBUG, "%s():%d: not found, send ping to %s", __FUNCTION__, __LINE__, dst_ipaddr);
data->src_ipaddr = (struct in6_addr *)calloc(1, sizeof(struct in6_addr));
if (!data->src_ipaddr){
tools_printlog(LOG_ERR, "%s():%d: memory allocation error", __FUNCTION__, __LINE__);
return ret;
}
if (inet_pton(data->family, src_ipaddr, data->src_ipaddr) <= 0) {
tools_printlog(LOG_ERR, "%s():%d: network translation error for %s", __FUNCTION__, __LINE__, src_ipaddr);
return ret;
}
memcpy(data->src_ethaddr, src_ethaddr, ETH_HW_ADDR_LEN);
send_ping(data);
free(data->src_ipaddr);
}
memcpy(dst_ethaddr, data->dst_ethaddr, ETH_HW_ADDR_LEN);
free(ntl.buf);
free(data->dst_ipaddr);
free(data);
return ret;
}
int net_get_local_ifidx_per_remote_host(char *dst_ipaddr, int *outdev)
{
struct ntl_request ntl;
struct ntl_data *data;
struct sockaddr_in6 addr;
int ipv = net_get_addr_family(dst_ipaddr);
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: dst ip address is %s", __FUNCTION__, __LINE__, dst_ipaddr);
ntl.buf = (char *) malloc(MNL_SOCKET_BUFFER_SIZE);
ntl.nlh = mnl_nlmsg_put_header(ntl.buf);
ntl.nlh->nlmsg_type = RTM_GETROUTE;
ntl.nlh->nlmsg_flags = NLM_F_REQUEST;
ntl.nlh->nlmsg_seq = time(NULL);
ntl.rtm = mnl_nlmsg_put_extra_header(ntl.nlh, sizeof(struct rtmsg));
ntl.rtm->rtm_family = ipv;
ntl.rtm->rtm_dst_len = GET_INET_LEN(ipv);
ntl.rtm->rtm_src_len = 0;
ntl.rtm->rtm_tos = 0;
ntl.rtm->rtm_protocol = RTPROT_UNSPEC;
ntl.rtm->rtm_table = RT_TABLE_UNSPEC;
ntl.rtm->rtm_type = RTN_UNSPEC;
ntl.rtm->rtm_scope = RT_SCOPE_UNIVERSE;
ntl.rtm->rtm_flags = RTM_F_LOOKUP_TABLE;
data = (struct ntl_data *)calloc(1, sizeof(struct ntl_data));
if (!data) {
tools_printlog(LOG_ERR, "%s():%d: memory allocation error", __FUNCTION__, __LINE__);
return -1;
}
data->dst_ipaddr = (struct in6_addr *)calloc(1, sizeof(struct in6_addr));
if (!data->dst_ipaddr){
tools_printlog(LOG_ERR, "%s():%d: memory allocation error", __FUNCTION__, __LINE__);
return -1;
}
ntl.cb = data_getdst_route_cb;
ntl.data = (void *)data;
data->family = ipv;
if (!inet_pton(ipv, dst_ipaddr, &(addr.sin6_addr.s6_addr))) {
tools_printlog(LOG_ERR, "%s():%d: network translation error for %s", __FUNCTION__, __LINE__, dst_ipaddr);
return -1;
}
mnl_attr_put(ntl.nlh, RTA_DST, GET_INET_LEN(ipv), &(addr.sin6_addr));
ret = ntl_request(&ntl);
if (ret != 0) {
tools_printlog(LOG_ERR, "%s():%d: not found route to %s", __FUNCTION__, __LINE__, dst_ipaddr);
return -1;
}
tools_printlog(LOG_DEBUG, "%s():%d: found route to %s via %d", __FUNCTION__, __LINE__, dst_ipaddr, data->oifidx);
*outdev = data->oifidx;
free(ntl.buf);
free(data->dst_ipaddr);
free(data);
return ret;
}
int net_get_local_ifinfo(unsigned char **ether, const char *indev)
{
int ret = -1;
struct ifreq ifr;
int sd;
tools_printlog(LOG_DEBUG, "%s():%d: netlink get local interface info for %s", __FUNCTION__, __LINE__, indev);
sd = socket(AF_PACKET, SOCK_RAW, IPPROTO_RAW);
if (sd <= 0) {
tools_printlog(LOG_ERR, "%s():%d: open socket error", __FUNCTION__, __LINE__);
goto out;
}
strcpy(ifr.ifr_name, indev);
if (ioctl(sd, SIOCGIFHWADDR, &ifr) == -1) {
tools_printlog(LOG_ERR, "%s():%d: ioctl SIOCGIFHWADDR error", __FUNCTION__, __LINE__);
goto out;
}
memcpy(ether, ifr.ifr_hwaddr.sa_data, ETH_HW_ADDR_LEN * sizeof(unsigned char));
ret = 0;
out:
if (sd > 0)
close(sd);
return ret;
}
int net_get_local_ifname_per_vip(char *strvip, char *outdev)
{
struct sockaddr_storage addr;
int ipv;
int found = 0;
struct sockaddr_in *ipaddr;
struct sockaddr_in6 *ipaddr6;
struct ifaddrs *ifaddrs, *ifaddr;
tools_printlog(LOG_DEBUG, "%s():%d: netlink get local interface name for %s", __FUNCTION__, __LINE__, strvip);
if (!strvip || strcmp(strvip, "") == 0) {
tools_printlog(LOG_ERR, "%s():%d: vip is not set yet", __FUNCTION__, __LINE__);
return -1;
}
ipv = net_get_addr_family(strvip);
if (getifaddrs(&ifaddrs) == -1) {
tools_printlog(LOG_ERR, "%s():%d: cannot get interfaces list", __FUNCTION__, __LINE__);
return -1;
}
for (ifaddr = ifaddrs; ifaddr != NULL && !found; ifaddr = ifaddr->ifa_next) {
if (ifaddr->ifa_addr == NULL) continue;
switch (ipv) {
case AF_INET6:
if (ifaddr->ifa_addr->sa_family != AF_INET6)
continue;
ipaddr6 = (struct sockaddr_in6 *)ifaddr->ifa_addr;
inet_pton(AF_INET6, strvip, &((struct sockaddr_in6 *) &addr)->sin6_addr);
if (net_cmp_ip(&((struct sockaddr_in6 *) &addr)->sin6_addr, &(ipaddr6->sin6_addr), IP6_ADDR_LEN) == 0) {
found = 1;
strcpy(outdev, ifaddr->ifa_name);
}
break;
case AF_INET:
if (ifaddr->ifa_addr->sa_family != AF_INET)
continue;
ipaddr = (struct sockaddr_in *)ifaddr->ifa_addr;
inet_pton(AF_INET, strvip, &((struct sockaddr_in *) &addr)->sin_addr);
if (((struct sockaddr_in *) &addr)->sin_addr.s_addr == ipaddr->sin_addr.s_addr) {
found = 1;
strcpy(outdev, ifaddr->ifa_name);
}
break;
}
}
freeifaddrs(ifaddrs);
tools_printlog(LOG_DEBUG, "%s():%d: netlink get local interface name is %s", __FUNCTION__, __LINE__, outdev);
return !found;
}
static int data_getev_cb(const struct nlmsghdr *nlh, void *data)
{
struct nlattr *tb[NDA_MAX + 1] = {};
struct ndmsg *ndm = mnl_nlmsg_get_payload(nlh);
struct in6_addr *ipaddr;
char str_ipaddr[INET6_ADDRSTRLEN] = { 0 };
void *ethaddr;
unsigned char dst_ethaddr[ETH_HW_ADDR_LEN];
char streth[ETH_HW_STR_LEN] = {};
tools_printlog(LOG_DEBUG, "%s():%d: netlink read new info", __FUNCTION__, __LINE__);
if (nlh->nlmsg_type != RTM_NEWNEIGH)
return MNL_CB_STOP;
mnl_attr_parse(nlh, sizeof(*ndm), data_attr_neigh_cb, tb);
if (tb[NDA_DST]) {
ipaddr = mnl_attr_get_payload(tb[NDA_DST]);
inet_ntop(ndm->ndm_family, ipaddr, str_ipaddr, GET_INET_STRLEN(ndm->ndm_family));
}
if (tb[NDA_LLADDR]) {
ethaddr = mnl_attr_get_payload(tb[NDA_LLADDR]);
memcpy(dst_ethaddr, ethaddr, ETH_HW_ADDR_LEN);
sprintf(streth, "%02x:%02x:%02x:%02x:%02x:%02x", dst_ethaddr[0], dst_ethaddr[1],
dst_ethaddr[2], dst_ethaddr[3], dst_ethaddr[4], dst_ethaddr[5]);
if ((ndm->ndm_state & NUD_REACHABLE) || (ndm->ndm_state & NUD_PERMANENT) || (ndm->ndm_state & NUD_STALE))
farm_s_set_backend_ether_by_oifidx(ndm->ndm_ifindex, str_ipaddr, streth);
tools_printlog(LOG_DEBUG, "%s():%d: [NEW NEIGH] family=%u ifindex=%u state=%u dstaddr=%s macaddr=%s",
__FUNCTION__, __LINE__, ndm->ndm_family, ndm->ndm_ifindex, ndm->ndm_state, str_ipaddr,
streth);
}
return MNL_CB_STOP;
}
static void ntlk_cb(struct ev_loop *loop, struct ev_io *watcher, int revents)
{
char buf[MNL_SOCKET_BUFFER_SIZE];
int ret, out;
tools_printlog(LOG_DEBUG, "%s():%d: netlink callback executed", __FUNCTION__, __LINE__);
ret = mnl_socket_recvfrom(nl, buf, sizeof(buf));
while (ret > 0) {
ret = mnl_cb_run(buf, ret, 0, 0, data_getev_cb, NULL);
if (ret <= MNL_CB_STOP) {
out = 0 | out;
return;
} else {
out = -1;
}
ret = mnl_socket_recvfrom(nl, buf, sizeof(buf));
}
if (ret == -1) {
tools_printlog(LOG_ERR, "%s():%d: netlink error", __FUNCTION__, __LINE__);
ret = -1;
}
}
int net_eventd_init(void)
{
char buf[MNL_SOCKET_BUFFER_SIZE];
int sock;
struct ev_loop *st_ev_loop = get_loop();
tools_printlog(LOG_DEBUG, "%s():%d: net eventd launched", __FUNCTION__, __LINE__);
io_handle.io = events_create_ntlnk();
io_handle.nlh = mnl_nlmsg_put_header(buf);
io_handle.nlh->nlmsg_type = RTM_GETNEIGH;
io_handle.nlh->nlmsg_flags = NLM_F_REQUEST | NLM_F_DUMP;
io_handle.nlh->nlmsg_seq = time(NULL);
io_handle.rt = mnl_nlmsg_put_extra_header(io_handle.nlh, sizeof(struct rtgenmsg));
io_handle.rt->rtgen_family = AF_INET;
nl = mnl_socket_open(NETLINK_ROUTE);
if (nl == NULL) {
tools_printlog(LOG_ERR, "%s():%d: mnl_socket_open error", __FUNCTION__, __LINE__);
return -1;
}
sock = mnl_socket_get_fd(nl);
if (mnl_socket_bind(nl, RTM_GETNEIGH, MNL_SOCKET_AUTOPID) < 0) {
tools_printlog(LOG_ERR, "%s():%d: mnl_socket_bind error", __FUNCTION__, __LINE__);
return -1;
}
ev_io_init(io_handle.io, ntlk_cb, sock, EV_READ);
ev_io_start(st_ev_loop, io_handle.io);
net_event_enabled = 1;
return 0;
}
int net_eventd_stop(void)
{
struct ev_loop *st_ev_loop = get_loop();
tools_printlog(LOG_DEBUG, "%s():%d: net eventd stopped", __FUNCTION__, __LINE__);
ev_io_stop(st_ev_loop, io_handle.io);
mnl_socket_close(nl);
if (io_handle.io)
free(io_handle.io);
net_event_enabled = 0;
return 0;
}
int net_get_event_enabled(void)
{
tools_printlog(LOG_DEBUG, "%s():%d: net eventd is %d", __FUNCTION__, __LINE__, net_event_enabled);
return net_event_enabled;
}
int net_strim_netface(char *name)
{
char *ptr;
if ((ptr = strstr(name, ":")) != NULL) {
*ptr = '\0';
return 1;
}
return 0;
}
nftlb-1.0.7/src/nft.c 0000664 0000000 0000000 00000344750 14326712445 0014373 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include
#define NFTLB_MAX_CMD 2048
#define NFTLB_MAX_IFACES 100
#define NFTLB_MAX_PORTS 65535
#define NFTLB_MAX_OBJ_NAME 256
#define NFTLB_MAX_OBJ_DEVICE 16
#define NFTLB_MAX_OBJ_PROTO 11
#define NFTLB_TABLE_NAME "nftlb"
#define NFTLB_TABLE_PREROUTING "prerouting"
#define NFTLB_TABLE_POSTROUTING "postrouting"
#define NFTLB_TABLE_INGRESS "ingress"
#define NFTLB_TABLE_INGRESS_DNAT "ingress-dnat"
#define NFTLB_TABLE_FILTER "filter"
#define NFTLB_TABLE_FORWARD "forward"
#define NFTLB_TABLE_OUT_FILTER "output-filter"
#define NFTLB_TABLE_OUT_NAT "output-nat"
#define NFTLB_TYPE_NONE ""
#define NFTLB_TYPE_NAT "nat"
#define NFTLB_TYPE_FILTER "filter"
#define NFTLB_TYPE_NETDEV "netdev"
#define NFTLB_TYPE_FWD "forward"
#define NFTLB_HOOK_PREROUTING "prerouting"
#define NFTLB_HOOK_POSTROUTING "postrouting"
#define NFTLB_HOOK_INGRESS "ingress"
#define NFTLB_HOOK_FORWARD "forward"
#define NFTLB_HOOK_OUTPUT "output"
#define NFTLB_PREROUTING_PRIO -100
#define NFTLB_POSTROUTING_PRIO 100
#define NFTLB_FLOWTABLE_BASE_PRIO 50
#define NFTLB_INGRESS_PRIO 101
#define NFTLB_INGRESS_DNAT_PRIO 100
#define NFTLB_FILTER_PRIO -150
#define NFTLB_RAW_PRIO -300
#define NFTLB_IPV4_PROTOCOL "protocol"
#define NFTLB_IPV6_PROTOCOL "nexthdr"
#define NFTLB_UDP_PROTO "udp"
#define NFTLB_TCP_PROTO "tcp"
#define NFTLB_SCTP_PROTO "sctp"
#define NFTLB_UDP_SERVICES_MAP "udp-services"
#define NFTLB_TCP_SERVICES_MAP "tcp-services"
#define NFTLB_SCTP_SERVICES_MAP "sctp-services"
#define NFTLB_IP_SERVICES_MAP "services"
#define NFTLB_PROTO_SERVICES_MAP "proto-services"
#define NFTLB_PORT_SERVICES_MAP "port-services"
#define NFTLB_UDP_SERVICES6_MAP "udp-services6"
#define NFTLB_TCP_SERVICES6_MAP "tcp-services6"
#define NFTLB_SCTP_SERVICES6_MAP "sctp-services6"
#define NFTLB_IP_SERVICES6_MAP "services6"
#define NFTLB_PROTO_SERVICES6_MAP "proto-services6"
#define NFTLB_PORT_SERVICES6_MAP "port-services6"
#define NFTLB_MAP_KEY_TYPE 0
#define NFTLB_MAP_KEY_RULE 1
#define NFTLB_MAP_TYPE_IPV4 "ipv4_addr"
#define NFTLB_MAP_TYPE_IPV6 "ipv6_addr"
#define NFTLB_MAP_TYPE_INETSRV "inet_service"
#define NFTLB_MAP_TYPE_MAC "ether_addr"
#define NFTLB_MAP_TYPE_MARK "mark"
#define NFTLB_MAP_TYPE_PROTO "inet_proto"
#define NFTLB_IPV4_FAMILY 0
#define NFTLB_IPV6_FAMILY 1
#define NFTLB_NETDEV_FAMILY 2
#define NFTLB_IPV4_FAMILY_STR "ip"
#define NFTLB_IPV6_FAMILY_STR "ip6"
#define NFTLB_NETDEV_FAMILY_STR "netdev"
#define NFTLB_IP_ACTIVE (1 << 0)
#define NFTLB_PROTO_IP_PORT_ACTIVE (1 << 1)
#define NFTLB_PROTO_IP_ACTIVE (1 << 2)
#define NFTLB_PROTO_PORT_ACTIVE (1 << 3)
#define NFTLB_MARK_ACTIVE (1 << 4)
#define NFTLB_TABLE_IP_ACTIVE (1 << 5)
#define NFTLB_TABLE_IP6_ACTIVE (1 << 6)
#define NFTLB_TABLE_NETDEV_ACTIVE (1 << 7)
#define NFTLB_NFT_DADDR "daddr"
#define NFTLB_NFT_DPORT "dport"
#define NFTLB_NFT_SADDR "saddr"
#define NFTLB_NFT_SPORT "sport"
#define NFTLB_NFT_VERDICT_NONE ""
#define NFTLB_NFT_VERDICT_DROP "drop"
#define NFTLB_NFT_VERDICT_ACCEPT "accept"
#define NFTLB_NFT_PREFIX_POLICY_BL "BL"
#define NFTLB_NFT_PREFIX_POLICY_WL "WL"
#define NFTLB_NFT_ACTION_ADD "add"
#define NFTLB_NFT_ACTION_DEL "delete"
#define NFTLB_NFT_ACTION_FLUSH "flush"
#define NFTLB_F_CHAIN_ING_FILTER (1 << 0)
#define NFTLB_F_CHAIN_ING_DNAT (1 << 1)
#define NFTLB_F_CHAIN_PRE_FILTER (1 << 2)
#define NFTLB_F_CHAIN_PRE_DNAT (1 << 3)
#define NFTLB_F_CHAIN_FWD_FILTER (1 << 4)
#define NFTLB_F_CHAIN_POS_SNAT (1 << 5)
#define NFTLB_F_CHAIN_OUT_FILTER (1 << 6)
#define NFTLB_F_CHAIN_OUT_DNAT (1 << 7)
#define NFTLB_CHECK_AVAIL 0
#define NFTLB_CHECK_USABLE 1
extern unsigned int serialize;
extern int masquerade_mark;
struct nft_ctx *ctx = NULL;
int nftlb_flowtable_prio = NFTLB_FLOWTABLE_BASE_PRIO;
enum chain_counter_position {
NFTLB_F_CHAIN_ING_FILTER_POS,
NFTLB_F_CHAIN_ING_DNAT_POS,
NFTLB_F_CHAIN_PRE_FILTER_POS,
NFTLB_F_CHAIN_PRE_DNAT_POS,
NFTLB_F_CHAIN_FWD_FILTER_POS,
NFTLB_F_CHAIN_POS_SNAT_POS,
NFTLB_F_CHAIN_OUT_FILTER_POS,
NFTLB_F_CHAIN_OUT_DNAT_POS,
NFTLB_F_CHAIN_MAX,
};
enum map_modes {
BCK_MAP_NONE,
BCK_MAP_IPADDR,
BCK_MAP_ETHADDR,
BCK_MAP_WEIGHT,
BCK_MAP_MARK,
BCK_MAP_IPADDR_PORT,
BCK_MAP_NAME,
BCK_MAP_SRCIPADDR,
BCK_MAP_BCK_IPADDR,
BCK_MAP_BCK_MARK,
BCK_MAP_BCK_IPADDR_F_PORT,
BCK_MAP_BCK_BF_SRCIPADDR,
BCK_MAP_BCK_ID,
BCK_MAP_OFACE,
BCK_MAP_PROTO_IPADDR_PORT,
BCK_MAP_BCK_PROTO_IPADDR_F_PORT,
BCK_MAP_PROTO_IPADDR,
BCK_MAP_PROTO_PORT,
BCK_MAP_PORT,
};
struct if_base_rule {
char *ifname;
unsigned int rules_v4;
unsigned int rules_v6;
};
struct if_base_rule_list {
struct if_base_rule *interfaces[NFTLB_MAX_IFACES];
int n_interfaces;
};
struct nft_chain_srv_family_counters {
unsigned int proto_ip_port_cnt;
unsigned int proto_port_cnt;
unsigned int proto_ip_cnt;
unsigned int bckmark_cnt;
};
struct nft_chain_srv_counters {
struct nft_chain_srv_family_counters ipv4_counters;
struct nft_chain_srv_family_counters ipv6_counters;
};
struct nft_chain_srv_counters service_counters[NFTLB_F_CHAIN_MAX];
static int get_chain_pos_counter(int type)
{
if (type & NFTLB_F_CHAIN_ING_FILTER)
return NFTLB_F_CHAIN_ING_FILTER_POS;
else if (type & NFTLB_F_CHAIN_PRE_FILTER)
return NFTLB_F_CHAIN_PRE_FILTER_POS;
else if (type & NFTLB_F_CHAIN_PRE_DNAT)
return NFTLB_F_CHAIN_PRE_DNAT_POS;
else if (type & NFTLB_F_CHAIN_FWD_FILTER)
return NFTLB_F_CHAIN_FWD_FILTER_POS;
else if (type & NFTLB_F_CHAIN_POS_SNAT)
return NFTLB_F_CHAIN_POS_SNAT_POS;
else if (type & NFTLB_F_CHAIN_ING_DNAT)
return NFTLB_F_CHAIN_ING_DNAT_POS;
else if (type & NFTLB_F_CHAIN_OUT_FILTER)
return NFTLB_F_CHAIN_OUT_FILTER_POS;
else if (type & NFTLB_F_CHAIN_OUT_DNAT)
return NFTLB_F_CHAIN_OUT_DNAT_POS;
else
return -1;
}
static unsigned int *get_service_counter(int type, unsigned int structure, int family)
{
struct nft_chain_srv_family_counters *service_cnt;
unsigned int *counter;
if (family == VALUE_FAMILY_IPV6)
service_cnt = &service_counters[get_chain_pos_counter(type)].ipv6_counters;
else
service_cnt = &service_counters[get_chain_pos_counter(type)].ipv4_counters;
if (structure & NFTLB_PROTO_PORT_ACTIVE)
counter = &(service_cnt->proto_port_cnt);
else if (structure & NFTLB_PROTO_IP_ACTIVE)
counter = &(service_cnt->proto_ip_cnt);
else if (structure & NFTLB_PROTO_IP_PORT_ACTIVE)
counter = &(service_cnt->proto_ip_port_cnt);
else
counter = &(service_cnt->bckmark_cnt);
return counter;
}
static unsigned int get_rules_needed(struct address *a)
{
unsigned int ret = 0;
if (address_no_port(a))
ret |= NFTLB_IP_ACTIVE | NFTLB_PROTO_IP_ACTIVE;
else if (address_no_ipaddr(a))
ret |= NFTLB_IP_ACTIVE | NFTLB_PROTO_PORT_ACTIVE;
else if (!address_no_port(a) && !address_no_ipaddr(a))
ret |= NFTLB_IP_ACTIVE | NFTLB_PROTO_IP_PORT_ACTIVE;
return ret;
}
static void update_service_counters(struct address *a, int type, int structure, int family, int qty, int action)
{
unsigned int *counter;
if ((type & NFTLB_F_CHAIN_POS_SNAT) && structure)
counter = get_service_counter(type, NFTLB_IP_ACTIVE | NFTLB_MARK_ACTIVE, family);
else
counter = get_service_counter(type, get_rules_needed(a), family);
if (action == ACTION_START || action == ACTION_RELOAD) {
*counter += qty;
} else if ((action == ACTION_STOP || action == ACTION_DELETE) && ((int)*counter >= qty)) {
*counter -= qty;
}
}
static char * get_chain_print_pos(int pos)
{
if (pos == NFTLB_F_CHAIN_ING_FILTER_POS)
return "NFTLB_F_CHAIN_ING_FILTER";
if (pos == NFTLB_F_CHAIN_PRE_FILTER_POS)
return "NFTLB_F_CHAIN_PRE_FILTER";
if (pos == NFTLB_F_CHAIN_PRE_DNAT_POS)
return "NFTLB_F_CHAIN_PRE_DNAT";
if (pos == NFTLB_F_CHAIN_FWD_FILTER_POS)
return "NFTLB_F_CHAIN_FWD_FILTER";
if (pos == NFTLB_F_CHAIN_POS_SNAT_POS)
return "NFTLB_F_CHAIN_POS_SNAT";
if (pos == NFTLB_F_CHAIN_ING_DNAT_POS)
return "NFTLB_F_CHAIN_ING_DNAT";
if (pos == NFTLB_F_CHAIN_OUT_FILTER_POS)
return "NFTLB_F_CHAIN_OUT_FILTER";
if (pos == NFTLB_F_CHAIN_OUT_DNAT_POS)
return "NFTLB_F_CHAIN_OUT_DNAT";
else
return "UNKNOWN";
}
static void print_service_counters(void)
{
int i;
for (i = 0; i < NFTLB_F_CHAIN_MAX; i++) {
tools_printlog(LOG_DEBUG, "%s(): [%s]", __FUNCTION__, get_chain_print_pos(i));
tools_printlog(LOG_DEBUG, "%s(): ipv4_counters.proto_ip_port_cnt = %d", __FUNCTION__, service_counters[i].ipv4_counters.proto_ip_port_cnt);
tools_printlog(LOG_DEBUG, "%s(): ipv4_counters.proto_port_cnt = %d", __FUNCTION__, service_counters[i].ipv4_counters.proto_port_cnt);
tools_printlog(LOG_DEBUG, "%s(): ipv4_counters.proto_ip_cnt = %d", __FUNCTION__, service_counters[i].ipv4_counters.proto_ip_cnt);
tools_printlog(LOG_DEBUG, "%s(): ipv4_counters.bckmark_cnt = %d", __FUNCTION__, service_counters[i].ipv4_counters.bckmark_cnt);
tools_printlog(LOG_DEBUG, "%s(): ipv6_counters.proto_ip_port_cnt = %d", __FUNCTION__, service_counters[i].ipv6_counters.proto_ip_port_cnt);
tools_printlog(LOG_DEBUG, "%s(): ipv6_counters.proto_port_cnt = %d", __FUNCTION__, service_counters[i].ipv6_counters.proto_port_cnt);
tools_printlog(LOG_DEBUG, "%s(): ipv6_counters.proto_ip_cnt = %d", __FUNCTION__, service_counters[i].ipv6_counters.proto_ip_cnt);
tools_printlog(LOG_DEBUG, "%s(): ipv6_counters.bckmark_cnt = %d", __FUNCTION__, service_counters[i].ipv6_counters.bckmark_cnt);
}
}
struct nft_base_rules {
unsigned int tables;
unsigned int dnat_rules_v4;
unsigned int dnat_rules_v6;
unsigned int snat_rules_v4;
unsigned int snat_rules_v6;
unsigned int filter_rules_v4;
unsigned int filter_rules_v6;
unsigned int fwd_rules_v4;
unsigned int fwd_rules_v6;
unsigned int out_filter_rules_v4;
unsigned int out_filter_rules_v6;
unsigned int out_nat_rules_v4;
unsigned int out_nat_rules_v6;
unsigned int ndv_ingress_policies;
struct if_base_rule_list ndv_ingress_rules;
struct if_base_rule_list ndv_ingress_dnat_rules;
};
struct nft_base_rules nft_base_rules;
static void print_nft_base_rules(void)
{
tools_printlog(LOG_DEBUG, "%s(): table ip = %d", __FUNCTION__, nft_base_rules.tables & NFTLB_TABLE_IP_ACTIVE);
tools_printlog(LOG_DEBUG, "%s(): table ip6 = %d", __FUNCTION__, nft_base_rules.tables & NFTLB_TABLE_IP6_ACTIVE);
tools_printlog(LOG_DEBUG, "%s(): table netdev = %d", __FUNCTION__, nft_base_rules.tables & NFTLB_TABLE_NETDEV_ACTIVE);
tools_printlog(LOG_DEBUG, "%s(): dnat_rules_v4 = %d", __FUNCTION__, nft_base_rules.dnat_rules_v4);
tools_printlog(LOG_DEBUG, "%s(): snat_rules_v4 = %d", __FUNCTION__, nft_base_rules.snat_rules_v4);
tools_printlog(LOG_DEBUG, "%s(): filter_rules_v4 = %d", __FUNCTION__, nft_base_rules.filter_rules_v4);
tools_printlog(LOG_DEBUG, "%s(): fwd_rules_v4 = %d", __FUNCTION__, nft_base_rules.fwd_rules_v4);
tools_printlog(LOG_DEBUG, "%s(): out_filter_rules_v4 = %d", __FUNCTION__, nft_base_rules.out_filter_rules_v4);
tools_printlog(LOG_DEBUG, "%s(): out_nat_rules_v4 = %d", __FUNCTION__, nft_base_rules.out_nat_rules_v4);
tools_printlog(LOG_DEBUG, "%s(): dnat_rules_v6 = %d", __FUNCTION__, nft_base_rules.dnat_rules_v6);
tools_printlog(LOG_DEBUG, "%s(): snat_rules_v6 = %d", __FUNCTION__, nft_base_rules.snat_rules_v6);
tools_printlog(LOG_DEBUG, "%s(): filter_rules_v6 = %d", __FUNCTION__, nft_base_rules.filter_rules_v6);
tools_printlog(LOG_DEBUG, "%s(): fwd_rules_v6 = %d", __FUNCTION__, nft_base_rules.fwd_rules_v6);
tools_printlog(LOG_DEBUG, "%s(): out_filter_rules_v6 = %d", __FUNCTION__, nft_base_rules.out_filter_rules_v6);
tools_printlog(LOG_DEBUG, "%s(): out_nat_rules_v6 = %d", __FUNCTION__, nft_base_rules.out_nat_rules_v6);
tools_printlog(LOG_DEBUG, "%s(): ndv_ingress_policies = %d", __FUNCTION__, nft_base_rules.ndv_ingress_policies);
tools_printlog(LOG_DEBUG, "%s(): ndv_ingress_rules = %d", __FUNCTION__, nft_base_rules.ndv_ingress_rules.n_interfaces);
tools_printlog(LOG_DEBUG, "%s(): ndv_ingress_dnat_rules = %d", __FUNCTION__, nft_base_rules.ndv_ingress_dnat_rules.n_interfaces);
}
static int reset_ndv_base(struct if_base_rule_list *ndv_if_rules)
{
int i;
for (i = 0; i < ndv_if_rules->n_interfaces; i++) {
if (!ndv_if_rules->interfaces[i])
break;
if (ndv_if_rules->interfaces[i]->ifname)
free(ndv_if_rules->interfaces[i]->ifname);
if (ndv_if_rules->interfaces[i])
free(ndv_if_rules->interfaces[i]);
}
ndv_if_rules->n_interfaces = 0;
return 0;
}
static void clean_rules_counters(void)
{
reset_ndv_base(&nft_base_rules.ndv_ingress_rules);
reset_ndv_base(&nft_base_rules.ndv_ingress_dnat_rules);
nft_base_rules.dnat_rules_v4 = 0;
nft_base_rules.dnat_rules_v6 = 0;
nft_base_rules.filter_rules_v4 = 0;
nft_base_rules.filter_rules_v6 = 0;
nft_base_rules.fwd_rules_v4 = 0;
nft_base_rules.fwd_rules_v6 = 0;
nft_base_rules.snat_rules_v4 = 0;
nft_base_rules.snat_rules_v6 = 0;
nft_base_rules.out_filter_rules_v4 = 0;
nft_base_rules.out_filter_rules_v6 = 0;
nft_base_rules.out_nat_rules_v4 = 0;
nft_base_rules.out_nat_rules_v6 = 0;
nft_base_rules.tables = 0;
}
static struct if_base_rule * get_ndv_base(struct if_base_rule_list *ndv_if_rules, char *ifname)
{
int i;
for (i = 0; i < ndv_if_rules->n_interfaces; i++) {
if (strcmp(ndv_if_rules->interfaces[i]->ifname, ifname) == 0)
return ndv_if_rules->interfaces[i];
}
return NULL;
}
static struct if_base_rule * add_ndv_base(struct if_base_rule_list *ndv_if_rules, char *ifname)
{
struct if_base_rule *ifentry;
if (ndv_if_rules->n_interfaces == NFTLB_MAX_IFACES) {
tools_printlog(LOG_ERR, "%s():%d: maximum number of interfaces reached", __FUNCTION__, __LINE__);
return NULL;
}
ifentry = (struct if_base_rule *)malloc(sizeof(struct if_base_rule));
if (!ifentry) {
tools_printlog(LOG_ERR, "%s():%d: unable to allocate interface struct for %s", __FUNCTION__, __LINE__, ifname);
return NULL;
}
ndv_if_rules->interfaces[ndv_if_rules->n_interfaces] = ifentry;
ndv_if_rules->n_interfaces++;
ifentry->ifname = (char *)malloc(strlen(ifname));
if (!ifentry->ifname) {
tools_printlog(LOG_ERR, "%s():%d: unable to allocate interface name for %s", __FUNCTION__, __LINE__, ifname);
return NULL;
}
sprintf(ifentry->ifname, "%s", ifname);
ifentry->rules_v4 = 0;
ifentry->rules_v6 = 0;
return ifentry;
}
static int del_ndv_base(struct if_base_rule_list *ndv_if_rules, char *ifname)
{
struct if_base_rule *ifentry;
ifentry = get_ndv_base(ndv_if_rules, ifname);
if (!ifentry)
return 1;
free(ifentry->ifname);
free(ifentry);
if (ndv_if_rules->n_interfaces > 0)
return ndv_if_rules->n_interfaces--;
return 0;
}
static int exec_cmd_open(char *cmd, const char **out, int error_output)
{
int error;
if (strlen(cmd) == 0 || strcmp(cmd, "") == 0)
return 0;
tools_printlog(LOG_NOTICE, "nft command exec : %s", cmd);
ctx = nft_ctx_new(0);
nft_ctx_buffer_error(ctx);
if (out != NULL)
nft_ctx_buffer_output(ctx);
error = nft_run_cmd_from_buffer(ctx, cmd);
if (error && error_output) {
tools_printlog(LOG_ERR, "nft command error : %s", nft_ctx_get_error_buffer(ctx));
obj_recovery();
}
if (out != NULL)
*out = nft_ctx_get_output_buffer(ctx);
return error;
}
static void exec_cmd_close(const char *out)
{
if (ctx == NULL)
return;
if (out != NULL)
nft_ctx_unbuffer_output(ctx);
nft_ctx_unbuffer_error(ctx);
nft_ctx_free(ctx);
ctx = NULL;
}
static int exec_cmd(char *cmd)
{
int error;
error = exec_cmd_open(cmd, NULL, 1);
exec_cmd_close(NULL);
return error;
}
static int exec_cmd_unbuffered(struct sbuffer *buf)
{
int error;
error = exec_cmd(get_buf_data(buf));
reset_buf(buf);
return error;
}
static void concat_exec_cmd(struct sbuffer *buf, char *fmt, ...)
{
int len;
va_list args;
va_start(args, fmt);
len = vsnprintf(0, 0, fmt, args);
va_end(args);
va_start(args, fmt);
concat_buf_va(buf, len, fmt, args);
va_end(args);
if (serialize)
exec_cmd_unbuffered(buf);
}
static char * print_nft_mode_service(int mode, int family)
{
if (family == VALUE_FAMILY_IPV6) {
if (mode & NFTLB_PROTO_IP_ACTIVE)
return NFTLB_IP_SERVICES6_MAP;
else if (mode & NFTLB_PROTO_PORT_ACTIVE)
return NFTLB_PORT_SERVICES6_MAP;
else
return NFTLB_PROTO_SERVICES6_MAP;
} else {
if (mode & NFTLB_PROTO_IP_ACTIVE)
return NFTLB_IP_SERVICES_MAP;
else if (mode & NFTLB_PROTO_PORT_ACTIVE)
return NFTLB_PORT_SERVICES_MAP;
else
return NFTLB_PROTO_SERVICES_MAP;
}
}
static int get_address_service_mode(struct address *a)
{
if (address_no_port(a))
return NFTLB_PROTO_IP_ACTIVE;
else if (address_no_ipaddr(a))
return NFTLB_PROTO_PORT_ACTIVE;
else
return NFTLB_PROTO_IP_PORT_ACTIVE;
}
static char * print_nft_family_type(int family)
{
switch (family) {
case VALUE_FAMILY_IPV6:
return NFTLB_MAP_TYPE_IPV6;
default:
return NFTLB_MAP_TYPE_IPV4;
}
}
static char * print_nft_family(int family)
{
switch (family) {
case VALUE_FAMILY_NETDEV:
return NFTLB_NETDEV_FAMILY_STR;
case VALUE_FAMILY_IPV6:
return NFTLB_IPV6_FAMILY_STR;
default:
return NFTLB_IPV4_FAMILY_STR;
}
}
static char * print_nft_family_protocol(int family)
{
switch (family) {
case VALUE_FAMILY_IPV6:
return NFTLB_IPV6_PROTOCOL;
default:
return NFTLB_IPV4_PROTOCOL;
}
}
static char * print_nft_table_family(int family, unsigned int type)
{
if (family == VALUE_FAMILY_NETDEV || type & NFTLB_F_CHAIN_ING_FILTER || type & NFTLB_F_CHAIN_ING_DNAT)
return NFTLB_NETDEV_FAMILY_STR;
else if (family == VALUE_FAMILY_IPV6)
return NFTLB_IPV6_FAMILY_STR;
else
return NFTLB_IPV4_FAMILY_STR;
}
static char * print_nft_protocol(int protocol)
{
switch (protocol) {
case VALUE_PROTO_UDP:
return NFTLB_UDP_PROTO;
case VALUE_PROTO_SCTP:
return NFTLB_SCTP_PROTO;
default:
return NFTLB_TCP_PROTO;
}
}
static char * print_nft_verdict(int verdict, int type)
{
if (type == VALUE_TYPE_ALLOW && verdict & VALUE_VERDICT_ACCEPT)
return NFTLB_NFT_VERDICT_ACCEPT;
else
if (type == VALUE_TYPE_DENY && verdict & VALUE_VERDICT_DROP)
return NFTLB_NFT_VERDICT_DROP;
return NFTLB_NFT_VERDICT_NONE;
}
static char * print_nft_prefix_policy(enum type type)
{
if (type == VALUE_TYPE_ALLOW)
return NFTLB_NFT_PREFIX_POLICY_WL;
else
return NFTLB_NFT_PREFIX_POLICY_BL;
}
static unsigned int * get_rules_applied(int type, int family, char *iface)
{
unsigned int * ret = NULL;
struct if_base_rule *if_base;
if (type & NFTLB_F_CHAIN_ING_FILTER) {
if_base = get_ndv_base(&nft_base_rules.ndv_ingress_rules, iface);
if (!if_base)
if_base = add_ndv_base(&nft_base_rules.ndv_ingress_rules, iface);
if (!if_base)
return ret;
if (family == VALUE_FAMILY_IPV4)
ret = &if_base->rules_v4;
if (family == VALUE_FAMILY_IPV6)
ret = &if_base->rules_v6;
} else if (type & NFTLB_F_CHAIN_ING_DNAT) {
if_base = get_ndv_base(&nft_base_rules.ndv_ingress_dnat_rules, iface);
if (!if_base)
if_base = add_ndv_base(&nft_base_rules.ndv_ingress_dnat_rules, iface);
if (!if_base)
return ret;
if (family == VALUE_FAMILY_IPV4)
ret = &if_base->rules_v4;
if (family == VALUE_FAMILY_IPV6)
ret = &if_base->rules_v6;
} else if (type & NFTLB_F_CHAIN_PRE_DNAT) {
if (family == VALUE_FAMILY_IPV4)
ret = &nft_base_rules.dnat_rules_v4;
if (family == VALUE_FAMILY_IPV6)
ret = &nft_base_rules.dnat_rules_v6;
} else if (type & NFTLB_F_CHAIN_PRE_FILTER) {
if (family == VALUE_FAMILY_IPV4)
ret = &nft_base_rules.filter_rules_v4;
if (family == VALUE_FAMILY_IPV6)
ret = &nft_base_rules.filter_rules_v6;
} else if (type & NFTLB_F_CHAIN_FWD_FILTER) {
if (family == VALUE_FAMILY_IPV4)
ret = &nft_base_rules.fwd_rules_v4;
if (family == VALUE_FAMILY_IPV6)
ret = &nft_base_rules.fwd_rules_v6;
} else if (type & NFTLB_F_CHAIN_POS_SNAT) {
if (family == VALUE_FAMILY_IPV4)
ret = &nft_base_rules.snat_rules_v4;
if (family == VALUE_FAMILY_IPV6)
ret = &nft_base_rules.snat_rules_v6;
} else if (type & NFTLB_F_CHAIN_OUT_FILTER) {
if (family == VALUE_FAMILY_IPV4)
ret = &nft_base_rules.out_filter_rules_v4;
if (family == VALUE_FAMILY_IPV6)
ret = &nft_base_rules.out_filter_rules_v6;
} else if (type & NFTLB_F_CHAIN_OUT_DNAT) {
if (family == VALUE_FAMILY_IPV4)
ret = &nft_base_rules.out_nat_rules_v4;
if (family == VALUE_FAMILY_IPV6)
ret = &nft_base_rules.out_nat_rules_v6;
}
return ret;
}
static void logprefix_replace(char *buf, char *token, char *value)
{
char tmp[NFTLB_MAX_OBJ_NAME] = { 0 };
char *ptr = buf;
char *tmpptr = tmp;
while (*ptr != '\0') {
if (strncmp(token, ptr, strlen(token)) == 0) {
strcat(tmpptr, value);
ptr += strlen(token);
tmpptr += strlen(value);
}
*tmpptr = *ptr;
ptr++;
tmpptr++;
}
*tmpptr = '\0';
sprintf(buf, "%s", tmp);
}
static void print_log_format(char *buf, int key, int type, struct nftst *n)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
struct backend *b = nftst_get_backend(n);
struct policy *p = nftst_get_policy(n);
if (!f && !a)
return;
switch (key) {
case KEY_LOGPREFIX:
if (p) {
sprintf(buf, "%s", p->logprefix);
logprefix_replace(buf, "KNAME", "policy");
if (f)
logprefix_replace(buf, "FNAME", f->name);
if (a)
logprefix_replace(buf, "ANAME", a->name);
logprefix_replace(buf, "PNAME", p->name);
logprefix_replace(buf, "TYPE", print_nft_prefix_policy(p->type));
return;
}
if (f) {
sprintf(buf, "%s", f->logprefix);
logprefix_replace(buf, "FNAME", f->name);
}
if (a) {
sprintf(buf, "%s", a->logprefix);
logprefix_replace(buf, "ANAME", a->name);
}
logprefix_replace(buf, "KNAME", CONFIG_KEY_LOG);
if ((a || (f->log & VALUE_LOG_INPUT)) && ((type & NFTLB_F_CHAIN_ING_FILTER) || (type & NFTLB_F_CHAIN_PRE_FILTER) || (type & NFTLB_F_CHAIN_PRE_DNAT)))
logprefix_replace(buf, "TYPE", "IN");
else if ((f->log & VALUE_LOG_FORWARD) && (type & NFTLB_F_CHAIN_FWD_FILTER))
logprefix_replace(buf, "TYPE", "FWD");
else if ((f->log & VALUE_LOG_OUTPUT) && ((type & NFTLB_F_CHAIN_POS_SNAT) || (type & NFTLB_F_CHAIN_ING_DNAT)))
logprefix_replace(buf, "TYPE", "OUT");
break;
case KEY_NEWRTLIMIT_LOGPREFIX:
sprintf(buf, "%s", f->newrtlimit_logprefix);
logprefix_replace(buf, "KNAME", CONFIG_KEY_NEWRTLIMIT);
if (f)
logprefix_replace(buf, "FNAME", f->name);
if (a)
logprefix_replace(buf, "ANAME", a->name);
break;
case KEY_RSTRTLIMIT_LOGPREFIX:
sprintf(buf, "%s", f->rstrtlimit_logprefix);
logprefix_replace(buf, "KNAME", CONFIG_KEY_RSTRTLIMIT);
if (f)
logprefix_replace(buf, "FNAME", f->name);
if (a)
logprefix_replace(buf, "ANAME", a->name);
break;
case KEY_ESTCONNLIMIT_LOGPREFIX:
if (b) {
sprintf(buf, "%s", b->estconnlimit_logprefix);
logprefix_replace(buf, "KNAME", CONFIG_KEY_ESTCONNLIMIT);
logprefix_replace(buf, "BNAME", b->name);
if (f)
logprefix_replace(buf, "FNAME", f->name);
if (a)
logprefix_replace(buf, "ANAME", a->name);
return;
}
sprintf(buf, "%s", f->estconnlimit_logprefix);
logprefix_replace(buf, "KNAME", CONFIG_KEY_ESTCONNLIMIT);
if (f)
logprefix_replace(buf, "FNAME", f->name);
if (a)
logprefix_replace(buf, "ANAME", a->name);
break;
case KEY_TCPSTRICT_LOGPREFIX:
sprintf(buf, "%s", f->tcpstrict_logprefix);
logprefix_replace(buf, "KNAME", CONFIG_KEY_TCPSTRICT);
if (f)
logprefix_replace(buf, "FNAME", f->name);
if (a)
logprefix_replace(buf, "ANAME", a->name);
break;
default:
break;
}
}
static int need_filter(struct farm *f)
{
return (!farm_is_ingress_mode(f));
}
static int need_forward(struct farm *f)
{
return ((f->log & VALUE_LOG_FORWARD) || farm_needs_flowtable(f));
}
static int need_output(struct farm *f)
{
return farm_needs_intraconnect(f);
}
static unsigned int get_stage_by_farm_mode(struct farm *f)
{
if (f->mode == VALUE_MODE_DSR)
return NFTLB_F_CHAIN_ING_FILTER;
else if (f->mode == VALUE_MODE_STLSDNAT)
return NFTLB_F_CHAIN_ING_DNAT;
else
return NFTLB_F_CHAIN_PRE_FILTER;
}
static void get_chain_name(char *chain, char *name, int type)
{
if (type & NFTLB_F_CHAIN_ING_FILTER)
snprintf(chain, NFTLB_MAX_OBJ_NAME, "%s", name);
else if (type & NFTLB_F_CHAIN_PRE_FILTER)
snprintf(chain, NFTLB_MAX_OBJ_NAME, "%s-%s", NFTLB_TYPE_FILTER, name);
else if (type & NFTLB_F_CHAIN_PRE_DNAT)
snprintf(chain, NFTLB_MAX_OBJ_NAME, "%s-%s", NFTLB_TYPE_NAT, name);
else if (type & NFTLB_F_CHAIN_FWD_FILTER)
snprintf(chain, NFTLB_MAX_OBJ_NAME, "%s-%s", NFTLB_TYPE_FWD, name);
else if (type & NFTLB_F_CHAIN_ING_DNAT)
snprintf(chain, NFTLB_MAX_OBJ_NAME, "%s-back", name);
else if (type & NFTLB_F_CHAIN_OUT_FILTER)
snprintf(chain, NFTLB_MAX_OBJ_NAME, "%s-%s", NFTLB_TYPE_FILTER, name);
else if (type & NFTLB_F_CHAIN_OUT_DNAT)
snprintf(chain, NFTLB_MAX_OBJ_NAME, "%s-%s", NFTLB_TYPE_NAT, name);
}
static void get_flowtable_name(char *name, struct farm *f)
{
snprintf(name, NFTLB_MAX_OBJ_NAME, "ft-%s", f->name);
}
static void get_nft_name_service(char *name, int srv_mode, char *trailing, int type, int family)
{
if (type & NFTLB_F_CHAIN_ING_FILTER)
sprintf(name, "%s%s", print_nft_mode_service(srv_mode, family), trailing);
else if (type & NFTLB_F_CHAIN_PRE_FILTER)
sprintf(name, "%s-%s%s", NFTLB_TYPE_FILTER, print_nft_mode_service(srv_mode, family), trailing);
else if (type & NFTLB_F_CHAIN_PRE_DNAT)
sprintf(name, "%s-%s%s", NFTLB_TYPE_NAT, print_nft_mode_service(srv_mode, family), trailing);
else if (type & NFTLB_F_CHAIN_FWD_FILTER)
sprintf(name, "%s-%s%s", NFTLB_TYPE_FWD, print_nft_mode_service(srv_mode, family), trailing);
else if (type & NFTLB_F_CHAIN_POS_SNAT)
sprintf(name, "%s-back%s", print_nft_mode_service(NFTLB_PROTO_IP_ACTIVE, family), trailing);
else if (type & NFTLB_F_CHAIN_ING_DNAT)
sprintf(name, "%s-dnat%s", print_nft_mode_service(srv_mode, family), trailing);
else if (type & NFTLB_F_CHAIN_OUT_FILTER)
sprintf(name, "%s-%s%s", NFTLB_TABLE_OUT_FILTER, print_nft_mode_service(srv_mode, family), trailing);
else if (type & NFTLB_F_CHAIN_OUT_DNAT)
sprintf(name, "%s-%s%s", NFTLB_TABLE_OUT_NAT, print_nft_mode_service(srv_mode, family), trailing);
}
static void get_address_service(char *name, struct address *a, int type, int family, int key_mode)
{
char trailing[NFTLB_MAX_OBJ_NAME];
if (type & NFTLB_F_CHAIN_ING_FILTER || type & NFTLB_F_CHAIN_ING_DNAT) {
sprintf(trailing, "-%s", a->iface);
get_nft_name_service(name, get_address_service_mode(a), trailing, type, family);
}
else if (type & NFTLB_F_CHAIN_POS_SNAT && (key_mode == BCK_MAP_BCK_ID || key_mode == BCK_MAP_BCK_MARK))
get_nft_name_service(name, get_address_service_mode(a), "-m", type, family);
else
get_nft_name_service(name, get_address_service_mode(a), "", type, family);
}
static int nft_table_handler(struct sbuffer *buf, char *str_family, int action)
{
int old_serial = serialize;
serialize = 1;
switch (action) {
case ACTION_RELOAD:
concat_exec_cmd(buf, " ; flush table %s %s", str_family, NFTLB_TABLE_NAME);
break;
case ACTION_START:
concat_exec_cmd(buf, " ; add table %s %s", str_family, NFTLB_TABLE_NAME);
break;
case ACTION_STOP:
case ACTION_DELETE:
concat_exec_cmd(buf, " ; delete table %s %s", str_family, NFTLB_TABLE_NAME);
break;
default:
break;
}
serialize = old_serial;
return 0;
}
static int nft_chain_handler(struct sbuffer *buf, char *str_family, char *chain, char *str_type, char *hook, char *str_device, int priority, int action)
{
switch (action) {
case ACTION_RELOAD:
concat_exec_cmd(buf, " ; flush chain %s %s %s", str_family, NFTLB_TABLE_NAME, chain);
break;
case ACTION_START:
concat_buf(buf, " ; add chain %s %s %s", str_family, NFTLB_TABLE_NAME, chain);
if (!obj_equ_attribute_string(str_type, "") && !obj_equ_attribute_string(hook, "")) {
concat_buf(buf, " { type %s hook %s", str_type, hook);
if (!obj_equ_attribute_string(str_device, ""))
concat_buf(buf, " device %s", str_device);
concat_buf(buf, " priority %d ;}", priority);
}
concat_exec_cmd(buf, "");
break;
case ACTION_STOP:
case ACTION_DELETE:
concat_exec_cmd(buf, " ; delete chain %s %s %s", str_family, NFTLB_TABLE_NAME, chain);
break;
default:
break;
}
return 0;
}
static int run_nftst_rules_gen_chain(struct sbuffer *buf, struct nftst *n, int family, int type, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
get_chain_name(chain, nftst_get_name(n), type);
switch (action) {
case ACTION_RELOAD:
if ((nftst_get_chains(n) & type) == 0)
action = ACTION_START;
break;
case ACTION_START:
if (nftst_get_chains(n) & type)
action = ACTION_RELOAD;
break;
case ACTION_DELETE:
case ACTION_STOP:
if ((nftst_get_chains(n) & type) == 0)
action = ACTION_NONE;
break;
default:
break;
}
// output uses the same farm chains than prerouting-filter and prerouting-nat
if (type == NFTLB_F_CHAIN_OUT_FILTER || type == NFTLB_F_CHAIN_OUT_DNAT)
return 0;
switch (action) {
case ACTION_RELOAD:
case ACTION_START:
nft_chain_handler(buf, print_nft_table_family(family, type), chain, NULL, NULL, NULL, 0, action);
nftst_set_chains(n, nftst_get_chains(n) | type);
break;
case ACTION_DELETE:
case ACTION_STOP:
if ((f && f->addresses_used == 1) ||
(!f && a)){
nft_chain_handler(buf, print_nft_table_family(family, type), chain, NULL, NULL, NULL, 0, action);
nftst_set_chains(n, nftst_get_chains(n) & ~type);
}
break;
default:
break;
}
return 0;
}
static int run_base_chain_set_meta_mark(struct sbuffer *buf, int type, char *chain_family, char *base_chain)
{
if (type & NFTLB_F_CHAIN_PRE_FILTER)
concat_exec_cmd(buf, " ; add rule %s %s %s meta mark 0x0 meta mark set ct mark", chain_family, NFTLB_TABLE_NAME, base_chain);
if (type & NFTLB_F_CHAIN_PRE_DNAT)
concat_exec_cmd(buf, " ; add rule %s %s %s ct state new meta mark 0x0 meta mark set ct mark", chain_family, NFTLB_TABLE_NAME, base_chain);
return 0;
}
static int run_base_chain_postrouting_masquerade(struct sbuffer *buf, int type, char *chain_family)
{
if (type & NFTLB_F_CHAIN_POS_SNAT) {
concat_exec_cmd(buf, " ; add rule %s %s %s ct mark 0x0 ct mark set meta mark", chain_family, NFTLB_TABLE_NAME, NFTLB_TABLE_POSTROUTING);
concat_exec_cmd(buf, " ; add rule %s %s %s ct mark and 0x%x == 0x%x masquerade", chain_family, NFTLB_TABLE_NAME, NFTLB_TABLE_POSTROUTING, masquerade_mark, masquerade_mark);
}
return 0;
}
static int run_base_chain_postrouting_bckmark(struct sbuffer *buf, char *service, int type, int family)
{
if (~type & NFTLB_F_CHAIN_POS_SNAT)
return 0;
concat_exec_cmd(buf, " ; add map %s %s %s { type %s : %s ;}", print_nft_family(family), NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_MARK, print_nft_family_type(family));
concat_exec_cmd(buf, " ; add rule %s %s %s snat to ct mark map @%s", print_nft_family(family), NFTLB_TABLE_NAME, NFTLB_TABLE_POSTROUTING, service);
return 1;
}
static int run_farm_rules_gen_meta_param(struct sbuffer *buf, int protocol, int family, int param, int type)
{
int items = 0;
if ((param & VALUE_META_NONE) ||
(param & VALUE_META_SRCIP)) {
(type == NFTLB_MAP_KEY_TYPE) ? concat_buf(buf, " %s", print_nft_family_type(family)) : concat_buf(buf, " %s saddr", print_nft_family(family));
items++;
}
if (param & VALUE_META_DSTIP) {
if (items)
concat_buf(buf, " .");
(type == NFTLB_MAP_KEY_TYPE) ? concat_buf(buf, " %s", print_nft_family_type(family)) : concat_buf(buf, " %s daddr", print_nft_family(family));
items++;
}
if (param & VALUE_META_SRCPORT) {
if (items)
concat_buf(buf, " .");
(type == NFTLB_MAP_KEY_TYPE) ? concat_buf(buf, " inet_service") : concat_buf(buf, " %s sport", print_nft_protocol(protocol));
items++;
}
if (param & VALUE_META_DSTPORT) {
if (items)
concat_buf(buf, " .");
(type == NFTLB_MAP_KEY_TYPE) ? concat_buf(buf, " inet_service") : concat_buf(buf, " %s dport", print_nft_protocol(protocol));
items++;
}
if (param & VALUE_META_SRCMAC) {
if (items)
concat_buf(buf, " .");
(type == NFTLB_MAP_KEY_TYPE) ? concat_buf(buf, " ether_addr") : concat_buf(buf, " ether saddr");
items++;
}
if (param & VALUE_META_DSTMAC) {
if (items)
concat_buf(buf, " .");
(type == NFTLB_MAP_KEY_TYPE) ? concat_buf(buf, " ether_addr") : concat_buf(buf, " ether daddr");
}
if (param & VALUE_META_MARK) {
if (items)
concat_buf(buf, " .");
concat_buf(buf, " mark");
}
return 0;
}
static void run_farm_map(struct sbuffer *buf, struct address *a, int family, unsigned int stage, char *mapname, int key, int data, int timeout, int action)
{
switch (action) {
case ACTION_START:
concat_buf(buf, " ; add map %s %s %s { type ", print_nft_table_family(family, stage), NFTLB_TABLE_NAME, mapname);
run_farm_rules_gen_meta_param(buf, a->protocol, family, key, NFTLB_MAP_KEY_TYPE);
concat_buf(buf, " :");
run_farm_rules_gen_meta_param(buf, a->protocol, family, data, NFTLB_MAP_KEY_TYPE);
concat_buf(buf, ";");
if (timeout != -1)
concat_buf(buf, " timeout %ds;", timeout);
concat_exec_cmd(buf, " }");
break;
case ACTION_DELETE:
case ACTION_STOP:
concat_exec_cmd(buf, " ; delete map %s %s %s", print_nft_table_family(family, stage), NFTLB_TABLE_NAME, mapname);
break;
case ACTION_RELOAD:
default:
break;
}
}
static int run_base_table(struct sbuffer *buf, int type, int family, int action)
{
char *chain_family = print_nft_table_family(family, type);
if (action == ACTION_STOP || action == ACTION_DELETE) {
// delete ip and ip6 based nftlb tables
if ((type & NFTLB_F_CHAIN_PRE_DNAT || type & NFTLB_F_CHAIN_PRE_FILTER) &&
((nft_base_rules.tables & NFTLB_TABLE_IP_ACTIVE && family == VALUE_FAMILY_IPV4 && (nft_base_rules.dnat_rules_v4 == 0 && nft_base_rules.filter_rules_v4 == 0)) ||
(nft_base_rules.tables & NFTLB_TABLE_IP6_ACTIVE && family == VALUE_FAMILY_IPV6 && (nft_base_rules.dnat_rules_v6 == 0 && nft_base_rules.filter_rules_v6 == 0)))) {
if (family == VALUE_FAMILY_IPV4)
nft_base_rules.tables &= ~NFTLB_TABLE_IP_ACTIVE;
if (family == VALUE_FAMILY_IPV6)
nft_base_rules.tables &= ~NFTLB_TABLE_IP6_ACTIVE;
nft_table_handler(buf, chain_family, ACTION_DELETE);
}
if (type & NFTLB_F_CHAIN_ING_FILTER && (nft_base_rules.tables & NFTLB_TABLE_NETDEV_ACTIVE) &&
nft_base_rules.ndv_ingress_policies == 0 && nft_base_rules.ndv_ingress_rules.n_interfaces == 0 && nft_base_rules.ndv_ingress_dnat_rules.n_interfaces == 0) {
nft_base_rules.tables &= ~NFTLB_TABLE_NETDEV_ACTIVE;
nft_table_handler(buf, chain_family, ACTION_DELETE);
}
}
if (action == ACTION_RELOAD || action == ACTION_START) {
if ((type & NFTLB_F_CHAIN_PRE_DNAT || type & NFTLB_F_CHAIN_PRE_FILTER) &&
((~nft_base_rules.tables & NFTLB_TABLE_IP_ACTIVE && family == VALUE_FAMILY_IPV4 && (nft_base_rules.dnat_rules_v4 == 0 && nft_base_rules.filter_rules_v4 == 0)) ||
(~nft_base_rules.tables & NFTLB_TABLE_IP6_ACTIVE && family == VALUE_FAMILY_IPV6 && (nft_base_rules.dnat_rules_v6 == 0 && nft_base_rules.filter_rules_v6 == 0)))) {
if (family == VALUE_FAMILY_IPV4)
nft_base_rules.tables |= NFTLB_TABLE_IP_ACTIVE;
if (family == VALUE_FAMILY_IPV6)
nft_base_rules.tables |= NFTLB_TABLE_IP6_ACTIVE;
nft_table_handler(buf, chain_family, ACTION_START);
}
if (type & NFTLB_F_CHAIN_ING_FILTER && ~nft_base_rules.tables & NFTLB_TABLE_NETDEV_ACTIVE &&
nft_base_rules.ndv_ingress_rules.n_interfaces == 0 &&
nft_base_rules.ndv_ingress_dnat_rules.n_interfaces == 0) {
nft_base_rules.tables |= NFTLB_TABLE_NETDEV_ACTIVE;
nft_table_handler(buf, chain_family, ACTION_START);
}
}
return 0;
}
static int run_base_chain(struct sbuffer *buf, struct nftst *n, int type, int family, unsigned int rules_needed, int action)
{
char service[NFTLB_MAX_OBJ_NAME-2] = { 0 };
char servicem[NFTLB_MAX_OBJ_NAME] = { 0 };
char base_chain[NFTLB_MAX_OBJ_NAME] = { 0 };
char chain_device[NFTLB_MAX_OBJ_DEVICE] = { 0 };
char trailing[NFTLB_MAX_OBJ_NAME] = { 0 };
char *chain_type;
char *chain_hook;
char *chain_family;
int chain_prio;
unsigned int *base_rules;
unsigned int *base_rules_t;
struct if_base_rule_list *if_base_list = &nft_base_rules.ndv_ingress_rules;
struct address *a = nftst_get_address(n);
struct farm *f = nftst_get_farm(n);
tools_printlog(LOG_DEBUG, "%s():%d: chain %s - action %d", __FUNCTION__, __LINE__, get_chain_print_pos(get_chain_pos_counter(type)), action);
get_address_service(service, a, type, family, BCK_MAP_NONE);
get_address_service(servicem, a, NFTLB_F_CHAIN_POS_SNAT, family, BCK_MAP_BCK_MARK);
chain_family = print_nft_table_family(family, type);
if (type & NFTLB_F_CHAIN_ING_FILTER) {
base_rules = get_rules_applied(type, family, a->iface);
if (!base_rules)
return 1;
chain_prio = NFTLB_INGRESS_PRIO;
chain_type = NFTLB_TYPE_FILTER;
chain_hook = NFTLB_HOOK_INGRESS;
snprintf(chain_device, NFTLB_MAX_OBJ_DEVICE, "%s", a->iface);
snprintf(base_chain, NFTLB_MAX_OBJ_NAME, "%s-%s", NFTLB_TABLE_INGRESS, a->iface);
snprintf(trailing, NFTLB_MAX_OBJ_NAME, "-%s", a->iface);
} else if (type & NFTLB_F_CHAIN_ING_DNAT) {
if (!f)
return 0;
base_rules = get_rules_applied(type, family, f->oface);
if (!base_rules)
return 1;
if_base_list = &nft_base_rules.ndv_ingress_dnat_rules;
chain_prio = NFTLB_INGRESS_DNAT_PRIO;
chain_type = NFTLB_TYPE_FILTER;
chain_hook = NFTLB_HOOK_INGRESS;
snprintf(chain_device, NFTLB_MAX_OBJ_DEVICE, "%s", f->oface);
snprintf(base_chain, NFTLB_MAX_OBJ_NAME, "%s-dnat-%s", NFTLB_TABLE_INGRESS, chain_device);
snprintf(trailing, NFTLB_MAX_OBJ_NAME, "-%s", f->oface);
} else if (type & NFTLB_F_CHAIN_PRE_FILTER) {
base_rules = get_rules_applied(type, family, "");
chain_prio = NFTLB_FILTER_PRIO;
snprintf(base_chain, NFTLB_MAX_OBJ_NAME, "%s", NFTLB_TABLE_FILTER);
chain_type = NFTLB_TYPE_FILTER;
chain_hook = NFTLB_HOOK_PREROUTING;
} else if (type & NFTLB_F_CHAIN_PRE_DNAT) {
base_rules = get_rules_applied(type, family, "");
chain_prio = NFTLB_PREROUTING_PRIO;
snprintf(base_chain, NFTLB_MAX_OBJ_NAME, "%s", NFTLB_TABLE_PREROUTING);
chain_type = NFTLB_TYPE_NAT;
chain_hook = NFTLB_HOOK_PREROUTING;
} else if (type & NFTLB_F_CHAIN_POS_SNAT) {
base_rules = get_rules_applied(type, family, "");
chain_prio = NFTLB_POSTROUTING_PRIO;
snprintf(base_chain, NFTLB_MAX_OBJ_NAME, "%s", NFTLB_TABLE_POSTROUTING);
chain_type = NFTLB_TYPE_NAT;
chain_hook = NFTLB_HOOK_POSTROUTING;
} else if (type & NFTLB_F_CHAIN_FWD_FILTER) {
base_rules = get_rules_applied(type, family, "");
chain_prio = NFTLB_PREROUTING_PRIO;
snprintf(base_chain, NFTLB_MAX_OBJ_NAME, "%s", NFTLB_TABLE_FORWARD);
chain_type = NFTLB_TYPE_FILTER;
chain_hook = NFTLB_HOOK_FORWARD;
} else if (type & NFTLB_F_CHAIN_OUT_FILTER) {
base_rules = get_rules_applied(type, family, "");
chain_prio = NFTLB_FILTER_PRIO;
snprintf(base_chain, NFTLB_MAX_OBJ_NAME, "%s", NFTLB_TABLE_OUT_FILTER);
chain_type = NFTLB_TYPE_FILTER;
chain_hook = NFTLB_HOOK_OUTPUT;
} else if (type & NFTLB_F_CHAIN_OUT_DNAT) {
base_rules = get_rules_applied(type, family, "");
chain_prio = NFTLB_PREROUTING_PRIO;
snprintf(base_chain, NFTLB_MAX_OBJ_NAME, "%s", NFTLB_TABLE_OUT_NAT);
chain_type = NFTLB_TYPE_NAT;
chain_hook = NFTLB_HOOK_OUTPUT;
} else
return 1;
if (action == ACTION_STOP || action == ACTION_DELETE) {
// If any chain type counter is 0, then reload chain rules and deactivate the usage flag
if (((*base_rules & NFTLB_PROTO_IP_PORT_ACTIVE) && *get_service_counter(type, NFTLB_PROTO_IP_PORT_ACTIVE, family) == 0) ||
((*base_rules & NFTLB_PROTO_PORT_ACTIVE) && *get_service_counter(type, NFTLB_PROTO_PORT_ACTIVE, family) == 0) ||
((*base_rules & NFTLB_PROTO_IP_ACTIVE) && *get_service_counter(type, NFTLB_PROTO_IP_ACTIVE, family) == 0) ||
((*base_rules & NFTLB_MARK_ACTIVE) && *get_service_counter(type, NFTLB_MARK_ACTIVE, family) == 0)) {
nft_chain_handler(buf, chain_family, base_chain, NULL, NULL, NULL, 0, ACTION_RELOAD);
run_base_chain_set_meta_mark(buf, type, chain_family, base_chain);
run_farm_map(buf, a, family, type, service, 0, 0, 0, ACTION_DELETE);
*base_rules &= ~NFTLB_PROTO_IP_PORT_ACTIVE & ~NFTLB_PROTO_PORT_ACTIVE & ~NFTLB_PROTO_IP_ACTIVE & ~NFTLB_MARK_ACTIVE;
}
if ((*get_service_counter(type, NFTLB_PROTO_IP_PORT_ACTIVE, family) == 0) &&
(*get_service_counter(type, NFTLB_PROTO_PORT_ACTIVE, family) == 0) &&
(*get_service_counter(type, NFTLB_PROTO_IP_ACTIVE, family) == 0) &&
(*get_service_counter(type, NFTLB_MARK_ACTIVE, family) == 0)) {
// for prerouting stage, do not remove the chain if postrouting is being used
if (type & NFTLB_F_CHAIN_PRE_DNAT && (
(*get_service_counter(NFTLB_F_CHAIN_POS_SNAT, NFTLB_PROTO_IP_PORT_ACTIVE, family) != 0) ||
(*get_service_counter(NFTLB_F_CHAIN_POS_SNAT, NFTLB_PROTO_PORT_ACTIVE, family) != 0) ||
(*get_service_counter(NFTLB_F_CHAIN_POS_SNAT, NFTLB_PROTO_IP_ACTIVE, family) != 0) ||
(*get_service_counter(NFTLB_F_CHAIN_POS_SNAT, NFTLB_MARK_ACTIVE, family) != 0)))
return 0;
if (type & NFTLB_F_CHAIN_POS_SNAT)
return 0;
*base_rules &= ~NFTLB_IP_ACTIVE;
nft_chain_handler(buf, chain_family, base_chain, NULL, NULL, NULL, 0, ACTION_DELETE);
if (type & NFTLB_F_CHAIN_ING_FILTER || type & NFTLB_F_CHAIN_ING_DNAT)
del_ndv_base(if_base_list, a->iface);
// in prerouting stage, apply the same action to prerouting
if (type & NFTLB_F_CHAIN_PRE_DNAT) {
nft_chain_handler(buf, chain_family, NFTLB_TABLE_POSTROUTING, NULL, NULL, NULL, 0, ACTION_DELETE);
run_farm_map(buf, a, family, type, servicem, 0, 0, 0, ACTION_DELETE);
base_rules_t = get_rules_applied(NFTLB_F_CHAIN_POS_SNAT, family, "");
*base_rules_t &= ~NFTLB_IP_ACTIVE & ~NFTLB_PROTO_IP_PORT_ACTIVE & ~NFTLB_PROTO_PORT_ACTIVE & ~NFTLB_PROTO_IP_ACTIVE & ~NFTLB_MARK_ACTIVE;
}
return 0;
}
rules_needed = *base_rules;
if (*get_service_counter(type, NFTLB_PROTO_IP_PORT_ACTIVE, family) != 0)
rules_needed |= NFTLB_PROTO_IP_PORT_ACTIVE;
if (*get_service_counter(type, NFTLB_PROTO_PORT_ACTIVE, family) != 0)
rules_needed |= NFTLB_PROTO_PORT_ACTIVE;
if (*get_service_counter(type, NFTLB_PROTO_IP_ACTIVE, family) != 0)
rules_needed |= NFTLB_PROTO_IP_ACTIVE;
if (*get_service_counter(type, NFTLB_MARK_ACTIVE, family) != 0)
rules_needed |= NFTLB_MARK_ACTIVE;
}
if ((rules_needed & NFTLB_IP_ACTIVE) && !(*base_rules & NFTLB_IP_ACTIVE)) {
nft_chain_handler(buf, chain_family, base_chain, chain_type, chain_hook, chain_device, chain_prio, ACTION_START);
run_base_chain_set_meta_mark(buf, type, chain_family, base_chain);
if (type & NFTLB_F_CHAIN_POS_SNAT) {
get_nft_name_service(servicem, NFTLB_PROTO_IP_PORT_ACTIVE, "-m", type, family);
run_base_chain_postrouting_masquerade(buf, type, chain_family);
run_base_chain_postrouting_bckmark(buf, servicem, type, family);
}
*base_rules |= NFTLB_IP_ACTIVE;
}
if ((rules_needed & NFTLB_PROTO_IP_PORT_ACTIVE) && !(*base_rules & NFTLB_PROTO_IP_PORT_ACTIVE)) {
get_nft_name_service(service, NFTLB_PROTO_IP_PORT_ACTIVE, trailing, type, family);
if (type & NFTLB_F_CHAIN_POS_SNAT) {
} else if (type & NFTLB_F_CHAIN_ING_DNAT) {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s . %s . %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_PROTO, print_nft_family_type(family), NFTLB_MAP_TYPE_INETSRV);
concat_exec_cmd(buf, " ; add rule %s %s %s %s %s . %s saddr . th sport vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, print_nft_family(family), print_nft_family_protocol(family), print_nft_family(family), service);
*base_rules |= NFTLB_PROTO_IP_PORT_ACTIVE;
} else if (type & NFTLB_F_CHAIN_FWD_FILTER) {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_MARK);
concat_exec_cmd(buf, " ; add rule %s %s %s ct mark vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, service);
*base_rules |= NFTLB_PROTO_IP_PORT_ACTIVE;
} else {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s . %s . %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_PROTO, print_nft_family_type(family), NFTLB_MAP_TYPE_INETSRV);
concat_exec_cmd(buf, " ; add rule %s %s %s %s %s . %s daddr . th dport vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, print_nft_family(family), print_nft_family_protocol(family), print_nft_family(family), service);
*base_rules |= NFTLB_PROTO_IP_PORT_ACTIVE;
}
}
if ((rules_needed & NFTLB_PROTO_PORT_ACTIVE) && !(*base_rules & NFTLB_PROTO_PORT_ACTIVE)) {
get_nft_name_service(service, NFTLB_PROTO_PORT_ACTIVE, trailing, type, family);
if (type & NFTLB_F_CHAIN_POS_SNAT) {
} else if (type & NFTLB_F_CHAIN_ING_DNAT) {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s . %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_PROTO, NFTLB_MAP_TYPE_INETSRV);
concat_exec_cmd(buf, " ; add rule %s %s %s %s %s . th sport vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, print_nft_family(family), print_nft_family_protocol(family), service);
*base_rules |= NFTLB_PROTO_PORT_ACTIVE;
} else if (type & NFTLB_F_CHAIN_FWD_FILTER) {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_MARK);
concat_exec_cmd(buf, " ; add rule %s %s %s ct mark vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, service);
*base_rules |= NFTLB_PROTO_PORT_ACTIVE;
} else {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s . %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_PROTO, NFTLB_MAP_TYPE_INETSRV);
concat_exec_cmd(buf, " ; add rule %s %s %s %s %s . th dport vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, print_nft_family(family), print_nft_family_protocol(family), service);
*base_rules |= NFTLB_PROTO_PORT_ACTIVE;
}
}
if ((rules_needed & NFTLB_PROTO_IP_ACTIVE) && !(*base_rules & NFTLB_PROTO_IP_ACTIVE)) {
get_nft_name_service(service, NFTLB_PROTO_IP_ACTIVE, trailing, type, family);
if (type & NFTLB_F_CHAIN_POS_SNAT) {
} else if (type & NFTLB_F_CHAIN_ING_DNAT) {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s . %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_PROTO, print_nft_family_type(family));
concat_exec_cmd(buf, " ; add rule %s %s %s %s %s . %s saddr vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, print_nft_family(family), print_nft_family_protocol(family), print_nft_family(family), service);
*base_rules |= NFTLB_PROTO_IP_ACTIVE;
} else if (type & NFTLB_F_CHAIN_FWD_FILTER) {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_MARK);
concat_exec_cmd(buf, " ; add rule %s %s %s ct mark vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, service);
*base_rules |= NFTLB_PROTO_IP_ACTIVE;
} else {
concat_exec_cmd(buf, " ; add map %s %s %s { type %s . %s : verdict ;}", chain_family, NFTLB_TABLE_NAME, service, NFTLB_MAP_TYPE_PROTO, print_nft_family_type(family));
concat_exec_cmd(buf, " ; add rule %s %s %s %s %s . %s daddr vmap @%s", chain_family, NFTLB_TABLE_NAME, base_chain, print_nft_family(family), print_nft_family_protocol(family), print_nft_family(family), service);
*base_rules |= NFTLB_PROTO_IP_ACTIVE;
}
}
return 0;
}
static int run_nftst_rules_gen_srv_data(char **buf, struct nftst *n, char *chain, enum map_modes data_mode)
{
struct farm *f = nftst_get_farm(n);
struct backend *b = nftst_get_backend(n);
switch (data_mode) {
case BCK_MAP_SRCIPADDR:
if (f)
sprintf(*buf, ": %s ", f->srcaddr);
break;
case BCK_MAP_NAME:
sprintf(*buf, ": goto %s ", chain);
break;
case BCK_MAP_BCK_BF_SRCIPADDR:
if (b && b->srcaddr && b->srcaddr != DEFAULT_SRCADDR && strcmp(b->srcaddr, "") != 0)
sprintf(*buf, ": %s ", b->srcaddr);
else if (f && f->srcaddr != DEFAULT_SRCADDR && strcmp(f->srcaddr, "") != 0)
sprintf(*buf, ": %s ", f->srcaddr);
break;
default:
break;
}
return 0;
}
static int run_nftst_rules_gen_srv_map(struct sbuffer *buf, struct nftst *n, int family, int type, int proto, int action, enum map_modes key_mode, enum map_modes data_mode)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
char action_str[NFTLB_MAX_OBJ_NAME] = { 0 };
char key_str[NFTLB_MAX_OBJ_NAME] = { 0 };
char *data_str = NULL;
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
char service[NFTLB_MAX_OBJ_NAME] = { 0 };
char protocol[NFTLB_MAX_OBJ_PROTO] = { 0 };
char *nft_family = print_nft_table_family(family, type);
struct backend *b;
int nports = a->nports;
int iport = 1;
int bckmark;
int output = 0;
int first_port = 1;
int structure = 0;
data_str = calloc(1, 255);
if (!data_str) {
tools_printlog(LOG_ERR, "%s():%d: memory allocation error", __FUNCTION__, __LINE__);
return -1;
}
switch (action) {
case ACTION_RELOAD:
case ACTION_START:
sprintf(action_str, "add");
break;
case ACTION_STOP:
case ACTION_DELETE:
sprintf(action_str, "delete");
break;
default:
return -1;
break;
}
get_chain_name(chain, nftst_get_name(n), type);
get_address_service(service, nftst_get_address(n), type, nftst_get_family(n), BCK_MAP_NONE);
snprintf(protocol, NFTLB_MAX_OBJ_PROTO, "%s", print_nft_protocol(proto));
switch (key_mode) {
case BCK_MAP_IPADDR:
run_nftst_rules_gen_srv_data((char **) &data_str, n, chain, data_mode);
concat_exec_cmd(buf, " ; %s element %s %s %s { %s %s}", action_str, nft_family, NFTLB_TABLE_NAME, service, a->ipaddr, data_str);
output++;
break;
case BCK_MAP_PROTO_IPADDR:
run_nftst_rules_gen_srv_data((char **) &data_str, n, chain, data_mode);
concat_exec_cmd(buf, " ; %s element %s %s %s { %s . %s %s}", action_str, nft_family, NFTLB_TABLE_NAME, service, protocol, a->ipaddr, data_str);
output++;
break;
case BCK_MAP_IPADDR_PORT:
run_nftst_rules_gen_srv_data((char **) &data_str, n, chain, data_mode);
if (nports == 0)
break;
concat_buf(buf, " ; %s element %s %s %s { ", action_str, nft_family, NFTLB_TABLE_NAME, service);
while (iport <= NFTLB_MAX_PORTS && nports > 0)
{
if (!address_search_array_port(a, iport)) { iport++; continue; }
concat_buf(buf, "%s . %d %s", a->ipaddr, iport, data_str);
if (nports != 1)
concat_buf(buf, ", ");
output++;
iport++;
nports--;
}
concat_exec_cmd(buf, " }");
break;
case BCK_MAP_PROTO_IPADDR_PORT:
run_nftst_rules_gen_srv_data((char **) &data_str, n, chain, data_mode);
if (nports == 0)
break;
concat_buf(buf, " ; %s element %s %s %s { ", action_str, nft_family, NFTLB_TABLE_NAME, service);
while (iport <= NFTLB_MAX_PORTS && nports > 0)
{
if (!address_search_array_port(a, iport)) { iport++; continue; }
concat_buf(buf, "%s . %s . %d %s", protocol, a->ipaddr, iport, data_str);
if (nports != 1)
concat_buf(buf, ", ");
output++;
iport++;
nports--;
}
concat_exec_cmd(buf, " }");
break;
case BCK_MAP_PROTO_PORT:
run_nftst_rules_gen_srv_data((char **) &data_str, n, chain, data_mode);
if (nports == 0)
break;
concat_buf(buf, " ; %s element %s %s %s { ", action_str, nft_family, NFTLB_TABLE_NAME, service);
while (iport <= NFTLB_MAX_PORTS && nports > 0)
{
if (!address_search_array_port(a, iport)) { iport++; continue; }
if (nports != 1)
concat_buf(buf, ", ");
concat_buf(buf, "%s . %d %s", protocol, iport, data_str);
output++;
iport++;
nports--;
}
concat_exec_cmd(buf, " }");
break;
default:
nports = (nftst_get_proto(n) == VALUE_PROTO_ALL) ? 1 : a->nports;
if (nports == 0)
break;
while (iport <= NFTLB_MAX_PORTS && nports > 0)
{
if (!address_search_array_port(a, iport) && nftst_get_proto(n) != VALUE_PROTO_ALL) { iport++; continue; }
list_for_each_entry(b, &f->backends, list) {
if (!backend_validate(b))
continue;
get_address_service(service, a, type, nftst_get_family(n), key_mode);
bckmark = backend_get_mark(b);
if (type == NFTLB_F_CHAIN_POS_SNAT && bckmark & masquerade_mark)
continue;
structure = 0;
if ((key_mode == BCK_MAP_BCK_ID || key_mode == BCK_MAP_BCK_MARK) && bckmark != DEFAULT_MARK) {
if (!first_port) { continue; }
snprintf(key_str, NFTLB_MAX_OBJ_NAME, "0x%x", bckmark);
structure = NFTLB_MARK_ACTIVE;
} else if ((key_mode == BCK_MAP_BCK_ID || key_mode == BCK_MAP_BCK_PROTO_IPADDR_F_PORT) && backend_no_port(b)) {
snprintf(key_str, NFTLB_MAX_OBJ_NAME, "%s . %s . %d", protocol, b->ipaddr, iport);
structure = NFTLB_PROTO_IP_PORT_ACTIVE;
} else if ((key_mode == BCK_MAP_BCK_ID || key_mode == BCK_MAP_BCK_PROTO_IPADDR_F_PORT) && !backend_no_port(b)) {
snprintf(key_str, NFTLB_MAX_OBJ_NAME, "%s . %s . %s", protocol, b->ipaddr, b->port);
structure = NFTLB_PROTO_IP_PORT_ACTIVE;
} else if ((key_mode == BCK_MAP_BCK_ID || key_mode == BCK_MAP_BCK_IPADDR_F_PORT) && backend_no_port(b)) {
snprintf(key_str, NFTLB_MAX_OBJ_NAME, "%s . %d", b->ipaddr, iport);
structure = NFTLB_PROTO_PORT_ACTIVE;
} else if (key_mode == BCK_MAP_BCK_ID && !backend_no_port(b)) {
if (!first_port) { continue; }
snprintf(key_str, NFTLB_MAX_OBJ_NAME, "%s . %s", b->ipaddr, b->port);
structure = NFTLB_PROTO_PORT_ACTIVE;
} else if (key_mode == BCK_MAP_BCK_ID || key_mode == BCK_MAP_BCK_IPADDR) {
if (!first_port) { continue; }
snprintf(key_str, NFTLB_MAX_OBJ_NAME, "%s", b->ipaddr);
structure = NFTLB_PROTO_IP_ACTIVE;
} else
if (!first_port) { continue; }
nftst_set_backend(n, b);
run_nftst_rules_gen_srv_data((char **) &data_str, n, chain, data_mode);
if (b->action == ACTION_STOP || b->action == ACTION_DELETE || b->action == ACTION_RELOAD) {
if (action == ACTION_START)
continue;
concat_exec_cmd(buf, " ; delete element %s %s %s { %s }", nft_family, NFTLB_TABLE_NAME, service, key_str);
update_service_counters(a, type, structure, family, 1, ACTION_DELETE);
}
if(!backend_is_usable(b))
continue;
if (action == ACTION_RELOAD && b->action == ACTION_NONE)
continue;
concat_exec_cmd(buf, " ; %s element %s %s %s { %s %s}", action_str, nft_family, NFTLB_TABLE_NAME, service, key_str, data_str);
update_service_counters(a, type, structure, family, 1, action);
output++;
}
nftst_set_backend(n, NULL);
iport++;
first_port = 0;
nports--;
continue;
}
break;
}
if (data_str)
free(data_str);
return output;
}
static void run_nftst_rules_gen_srv_map_by_type(struct sbuffer *buf, struct nftst *n, int type, int family, int protocol, int action)
{
struct address *a = nftst_get_address(n);
int elements = 0;
tools_printlog(LOG_DEBUG, "%s():%d: ", __FUNCTION__, __LINE__);
if (type & NFTLB_F_CHAIN_ING_FILTER)
elements = run_nftst_rules_gen_srv_map(buf, n, family, type, protocol, action, address_no_port(a) ? BCK_MAP_PROTO_IPADDR : (address_no_ipaddr(a) ? BCK_MAP_PROTO_PORT : BCK_MAP_PROTO_IPADDR_PORT), BCK_MAP_NAME);
else if (type & NFTLB_F_CHAIN_PRE_FILTER)
elements = run_nftst_rules_gen_srv_map(buf, n, family, type, protocol, action, address_no_port(a) ? BCK_MAP_PROTO_IPADDR : (address_no_ipaddr(a) ? BCK_MAP_PROTO_PORT : BCK_MAP_PROTO_IPADDR_PORT), BCK_MAP_NAME);
else if (type & NFTLB_F_CHAIN_PRE_DNAT)
elements = run_nftst_rules_gen_srv_map(buf, n, family, type, protocol, action, address_no_port(a) ? BCK_MAP_PROTO_IPADDR : (address_no_ipaddr(a) ? BCK_MAP_PROTO_PORT : BCK_MAP_PROTO_IPADDR_PORT), BCK_MAP_NAME);
else if (type & NFTLB_F_CHAIN_FWD_FILTER)
elements = run_nftst_rules_gen_srv_map(buf, n, family, type, protocol, action, BCK_MAP_BCK_MARK, BCK_MAP_NAME);
else if (type & NFTLB_F_CHAIN_POS_SNAT)
elements = run_nftst_rules_gen_srv_map(buf, n, family, type, protocol, action, BCK_MAP_BCK_ID, BCK_MAP_BCK_BF_SRCIPADDR);
else if (type & NFTLB_F_CHAIN_ING_DNAT)
elements = run_nftst_rules_gen_srv_map(buf, n, family, type, protocol, action, address_no_port(a) ? BCK_MAP_PROTO_IPADDR : (address_no_ipaddr(a) ? BCK_MAP_PROTO_PORT : BCK_MAP_BCK_PROTO_IPADDR_F_PORT), BCK_MAP_NAME);
else if (type & NFTLB_F_CHAIN_OUT_FILTER)
elements = run_nftst_rules_gen_srv_map(buf, n, family, type, protocol, action, address_no_port(a) ? BCK_MAP_PROTO_IPADDR : (address_no_ipaddr(a) ? BCK_MAP_PROTO_PORT : BCK_MAP_PROTO_IPADDR_PORT), BCK_MAP_NAME);
else if (type & NFTLB_F_CHAIN_OUT_DNAT)
elements = run_nftst_rules_gen_srv_map(buf, n, family, type, protocol, action, address_no_port(a) ? BCK_MAP_PROTO_IPADDR : (address_no_ipaddr(a) ? BCK_MAP_PROTO_PORT : BCK_MAP_PROTO_IPADDR_PORT), BCK_MAP_NAME);
else
return;
if (elements && (~type & NFTLB_F_CHAIN_POS_SNAT) && (~type & NFTLB_F_CHAIN_FWD_FILTER))
update_service_counters(a, type, family, 0, elements, action);
}
static void run_nftst_rules_gen_srv_map_by_protocol(struct sbuffer *buf, struct nftst *n, int type, int family, int action)
{
tools_printlog(LOG_DEBUG, "%s():%d: ", __FUNCTION__, __LINE__);
if (nftst_get_proto(n) != VALUE_PROTO_ALL || (type & NFTLB_F_CHAIN_FWD_FILTER) || (type & NFTLB_F_CHAIN_POS_SNAT)) {
run_nftst_rules_gen_srv_map_by_type(buf, n, type, family, nftst_get_proto(n), action);
} else {
run_nftst_rules_gen_srv_map_by_type(buf, n, type, family, VALUE_PROTO_TCP, action);
run_nftst_rules_gen_srv_map_by_type(buf, n, type, family, VALUE_PROTO_UDP, action);
run_nftst_rules_gen_srv_map_by_type(buf, n, type, family, VALUE_PROTO_SCTP, action);
}
}
static void run_nftst_rules_gen_vsrv(struct sbuffer *buf, struct nftst *n, int type, int family, int srv_action, int action)
{
tools_printlog(LOG_DEBUG, "%s():%d: pos %d", __FUNCTION__, __LINE__, get_chain_pos_counter(type));
if (srv_action == ACTION_NONE)
srv_action = action;
switch (srv_action) {
case ACTION_RELOAD:
run_nftst_rules_gen_chain(buf, n, family, type, action);
break;
case ACTION_START:
run_nftst_rules_gen_chain(buf, n, family, type, action);
run_nftst_rules_gen_srv_map_by_protocol(buf, n, type, family, srv_action);
break;
case ACTION_DELETE:
case ACTION_STOP:
run_nftst_rules_gen_srv_map_by_protocol(buf, n, type, family, srv_action);
run_nftst_rules_gen_chain(buf, n, family, type, action);
break;
default:
break;
}
return;
}
static int run_farm_snat(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
tools_printlog(LOG_DEBUG, "%s():%d: ", __FUNCTION__, __LINE__);
if (f->mode != VALUE_MODE_SNAT && f->mode != VALUE_MODE_LOCAL)
return 0;
switch (action) {
case ACTION_RELOAD:
case ACTION_START:
run_nftst_rules_gen_srv_map_by_protocol(buf, n, NFTLB_F_CHAIN_POS_SNAT, family, action);
break;
case ACTION_STOP:
case ACTION_DELETE:
if ((family == VALUE_FAMILY_IPV4 && nft_base_rules.snat_rules_v4) || (family == VALUE_FAMILY_IPV6 && nft_base_rules.snat_rules_v6))
run_nftst_rules_gen_srv_map_by_protocol(buf, n, NFTLB_F_CHAIN_POS_SNAT, family, action);
break;
}
return 0;
}
static int run_farm_rules_gen_sched(struct sbuffer *buf, struct nftst *n, int family)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
switch (f->scheduler) {
case VALUE_SCHED_RR:
concat_buf(buf, " numgen inc mod %d", f->total_weight);
break;
case VALUE_SCHED_WEIGHT:
concat_buf(buf, " numgen random mod %d", f->total_weight);
break;
case VALUE_SCHED_HASH:
concat_buf(buf, " jhash");
run_farm_rules_gen_meta_param(buf, a->protocol, family, f->schedparam, NFTLB_MAP_KEY_RULE);
concat_buf(buf, " mod %d", f->total_weight);
break;
case VALUE_SCHED_SYMHASH:
concat_buf(buf, " symhash mod %d", f->total_weight);
break;
default:
return -1;
}
return 0;
}
static int get_nftst_first_port(struct nftst *n)
{
struct address *a = nftst_get_address(n);
int iport = 0;
if (nftst_get_proto(n) == VALUE_PROTO_ALL || a->nports == 0)
return 0;
while (iport <= NFTLB_MAX_PORTS && a->nports > 0) {
if (a->port_list[iport])
return ++iport;
iport++;
}
return 0;
}
static int run_farm_rules_gen_bck_map(struct sbuffer *buf, struct nftst *n, enum map_modes key_mode, enum map_modes data_mode, int usable)
{
struct farm *f = nftst_get_farm(n);
struct backend *b;
int i = 0;
int last = 0;
int new;
int port;
concat_buf(buf, " map {");
list_for_each_entry(b, &f->backends, list) {
if (usable == NFTLB_CHECK_USABLE && !backend_is_usable(b))
continue;
if (usable == NFTLB_CHECK_AVAIL && !backend_is_available(b))
continue;
if (data_mode == BCK_MAP_PORT && backend_no_port(b))
continue;
if (i != 0)
concat_buf(buf, ",");
switch (key_mode) {
case BCK_MAP_MARK:
concat_buf(buf, " 0x%x", backend_get_mark(b));
break;
case BCK_MAP_IPADDR:
concat_buf(buf, " %s", b->ipaddr);
break;
case BCK_MAP_WEIGHT:
new = last + b->weight - 1;
concat_buf(buf, " %d", last);
if (new != last)
concat_buf(buf, "-%d", new);
last = new + 1;
break;
case BCK_MAP_ETHADDR:
concat_buf(buf, " %s", b->ethaddr);
break;
default:
break;
}
concat_buf(buf, ":");
switch (data_mode) {
case BCK_MAP_MARK:
concat_buf(buf, " 0x%x", backend_get_mark(b));
break;
case BCK_MAP_ETHADDR:
concat_buf(buf, " %s", b->ethaddr);
break;
case BCK_MAP_IPADDR_PORT:
if (backend_no_port(b)) {
port = get_nftst_first_port(n);
concat_buf(buf, " %s . %d", b->ipaddr, port);
} else
concat_buf(buf, " %s . %s", b->ipaddr, b->port);
break;
case BCK_MAP_PORT:
concat_buf(buf, " %s", b->port);
break;
case BCK_MAP_IPADDR:
concat_buf(buf, " %s", b->ipaddr);
break;
case BCK_MAP_OFACE:
if (b->oface)
concat_buf(buf, " %s", b->oface);
else
concat_buf(buf, " %s", f->oface);
break;
default:
break;
}
i++;
}
concat_buf(buf, " }");
if (i == 0)
return -1;
return 0;
}
static void run_farm_helper(struct sbuffer *buf, struct farm *f, int family, int action, char *protocol)
{
switch (action) {
case ACTION_START:
concat_exec_cmd(buf, " ; add ct helper %s %s %s-%s { type \"%s\" protocol %s ; } ;", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, obj_print_helper(f->helper), protocol, obj_print_helper(f->helper), protocol);
break;
case ACTION_DELETE:
case ACTION_STOP:
concat_exec_cmd(buf, " ; delete ct helper %s %s %s-%s ; ", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, obj_print_helper(f->helper), protocol);
break;
case ACTION_RELOAD:
default:
break;
}
}
static int run_farm_log_prefix(struct sbuffer *buf, struct farm *f, int key, int type, int action)
{
char logprefix_str[NFTLB_MAX_OBJ_NAME] = { 0 };
struct nftst *n;
if (f->log == VALUE_LOG_NONE)
return 0;
if (f->log & key) {
n = nftst_create_from_farm(f);
print_log_format(logprefix_str, KEY_LOGPREFIX, type, n);
concat_buf(buf, " log prefix \"%s\"", logprefix_str);
}
return 0;
}
static int run_farm_gen_log_rules(struct sbuffer *buf, struct farm *f, int family, char * chain, int key, int type, int action)
{
if (f->log == VALUE_LOG_NONE)
return 0;
if (f->log & key) {
concat_buf(buf, " ; add rule %s %s %s", print_nft_table_family(family, type), NFTLB_TABLE_NAME, chain);
run_farm_log_prefix(buf,f, key, type, action);
concat_exec_cmd(buf, "");
}
return 0;
}
static int run_farm_rules_filter_helper(struct sbuffer *buf, struct nftst *n, int family, char *chain, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
char protocol[NFTLB_MAX_OBJ_NAME] = {0};
if (!(f->helper != DEFAULT_HELPER && (f->mode == VALUE_MODE_SNAT || f->mode == VALUE_MODE_LOCAL || f->mode == VALUE_MODE_DNAT)))
return 0;
if (a->protocol == VALUE_PROTO_TCP || a->protocol == VALUE_PROTO_ALL) {
sprintf(protocol, "tcp");
run_farm_helper(buf, f, family, action, protocol);
if (action == ACTION_START || action == ACTION_RELOAD)
concat_exec_cmd(buf, " ; add rule %s %s %s %s %s %s ct helper set %s-%s", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), print_nft_family_protocol(family), protocol, obj_print_helper(f->helper), protocol);
}
if (a->protocol == VALUE_PROTO_UDP || a->protocol == VALUE_PROTO_ALL) {
sprintf(protocol, "udp");
run_farm_helper(buf, f, family, action, protocol);
if (action == ACTION_START || action == ACTION_RELOAD)
concat_exec_cmd(buf, " ; add rule %s %s %s %s %s %s ct helper set %s-%s", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), print_nft_family_protocol(family), protocol, obj_print_helper(f->helper), protocol);
}
return 0;
}
static int run_farm_sessions_map(struct sbuffer *buf, struct nftst *n, int stype, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
char map_str[NFTLB_MAX_OBJ_NAME] = { 0 };
int ttl = 0;
if (f->persistence == VALUE_META_NONE)
return 0;
if (stype == SESSION_TYPE_STATIC)
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "static-sessions-%s", f->name);
else {
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "persist-%s", f->name);
ttl = f->persistttl;
}
if (f->mode == VALUE_MODE_DSR)
run_farm_map(buf, a, family, NFTLB_F_CHAIN_ING_FILTER, map_str, f->persistence, VALUE_META_DSTMAC, ttl, action);
else if (f->mode == VALUE_MODE_STLSDNAT)
run_farm_map(buf, a, family, NFTLB_F_CHAIN_ING_FILTER, map_str, f->persistence, VALUE_META_DSTIP, ttl, action);
else
run_farm_map(buf, a, family, NFTLB_F_CHAIN_PRE_FILTER, map_str, f->persistence, VALUE_META_MARK, ttl, action);
return 0;
}
static int run_farm_manage_sessions(struct sbuffer *buf, struct farm *f, int stype, int family, int action)
{
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
char map_str[NFTLB_MAX_OBJ_NAME] = { 0 };
char *client;
struct session *s;
struct list_head *sessions;
if (action != ACTION_START && action != ACTION_RELOAD)
return 0;
if (f->persistence == VALUE_META_NONE)
return 0;
if (f->bcks_usable == 0)
return 0;
if ((action != ACTION_START && action != ACTION_RELOAD))
return 0;
get_chain_name(chain, f->name, NFTLB_F_CHAIN_ING_FILTER);
if (stype == SESSION_TYPE_STATIC) {
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "static-sessions-%s", f->name);
sessions = &f->static_sessions;
} else {
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "persist-%s", f->name);
sessions = &f->timed_sessions;
}
list_for_each_entry(s, sessions, list) {
client = (char *) malloc(255);
if (!client) {
tools_printlog(LOG_ERR, "%s():%d: unable to allocate parsed client %s for farm %s", __FUNCTION__, __LINE__, s->client, f->name);
continue;
}
if (session_get_client(s, &client)) {
if ((action == ACTION_RELOAD && (s->action == ACTION_STOP || s->action == ACTION_DELETE)) || s->action == ACTION_RELOAD)
concat_exec_cmd(buf, " ; delete element %s %s %s { %s }", print_nft_table_family(family, get_stage_by_farm_mode(f)), NFTLB_TABLE_NAME, map_str, client);
if (f->mode == VALUE_MODE_DSR) {
if ((action == ACTION_START || s->action == ACTION_START || s->action == ACTION_RELOAD) && s->bck && s->bck->ethaddr != DEFAULT_ETHADDR && backend_is_available(s->bck)) {
if (stype == SESSION_TYPE_TIMED && s->expiration)
concat_exec_cmd(buf, " ; add element %s %s %s { %s expires %s : %s }", print_nft_table_family(family, get_stage_by_farm_mode(f)), NFTLB_TABLE_NAME, map_str, client, s->expiration, s->bck->ethaddr);
else
concat_exec_cmd(buf, " ; add element %s %s %s { %s : %s }", print_nft_table_family(family, get_stage_by_farm_mode(f)), NFTLB_TABLE_NAME, map_str, client, s->bck->ethaddr);
}
} else if (f->mode == VALUE_MODE_STLSDNAT) {
if ((action == ACTION_START || s->action == ACTION_START || s->action == ACTION_RELOAD) && s->bck && s->bck->ipaddr != DEFAULT_IPADDR && backend_is_available(s->bck)) {
if (stype == SESSION_TYPE_TIMED && s->expiration)
concat_exec_cmd(buf, " ; add element %s %s %s { %s expires %s : %s }", print_nft_table_family(family, get_stage_by_farm_mode(f)), NFTLB_TABLE_NAME, map_str, client, s->expiration, s->bck->ipaddr);
else
concat_exec_cmd(buf, " ; add element %s %s %s { %s : %s }", print_nft_table_family(family, get_stage_by_farm_mode(f)), NFTLB_TABLE_NAME, map_str, client, s->bck->ipaddr);
}
} else {
if ((action == ACTION_START || s->action == ACTION_START || s->action == ACTION_RELOAD) && s->bck && s->bck->mark != DEFAULT_MARK && backend_is_available(s->bck)) {
if (stype == SESSION_TYPE_TIMED && s->expiration)
concat_exec_cmd(buf, " ; add element %s %s %s { %s expires %s : 0x%x }", print_nft_table_family(family, get_stage_by_farm_mode(f)), NFTLB_TABLE_NAME, map_str, client, s->expiration, backend_get_mark(s->bck));
else
concat_exec_cmd(buf, " ; add element %s %s %s { %s : 0x%x }", print_nft_table_family(family, get_stage_by_farm_mode(f)), NFTLB_TABLE_NAME, map_str, client, backend_get_mark(s->bck));
}
}
}
free(client);
s->action = ACTION_NONE;
}
return 0;
}
static int run_farm_rules_update_sessions(struct sbuffer *buf, struct nftst *n, int family, char *chain, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
char map_str[NFTLB_MAX_OBJ_NAME] = { 0 };
if (f->persistence == VALUE_META_NONE || f->total_bcks == 0)
return 0;
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "persist-%s", f->name);
if (action != ACTION_START && action != ACTION_RELOAD)
return 0;
switch (f->mode) {
case VALUE_MODE_DSR:
concat_buf(buf, " update @%s { ", map_str);
run_farm_rules_gen_meta_param(buf, a->protocol, family, f->persistence, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " : ");
run_farm_rules_gen_meta_param(buf, a->protocol, family, VALUE_META_DSTMAC, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " }");
break;
case VALUE_MODE_STLSDNAT:
concat_buf(buf, " update @%s { ", map_str);
run_farm_rules_gen_meta_param(buf, a->protocol, family, f->persistence, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " : ");
run_farm_rules_gen_meta_param(buf, a->protocol, family, VALUE_META_DSTIP, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " }");
break;
default:
if (farm_get_masquerade(f))
concat_buf(buf, " ; add rule %s %s %s ct mark != { 0x00000000, %u } update @%s { ", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, masquerade_mark, map_str);
else
concat_buf(buf, " ; add rule %s %s %s ct mark != 0x00000000 update @%s { ", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, map_str);
run_farm_rules_gen_meta_param(buf, a->protocol, family, f->persistence, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " : ct mark }");
break;
}
return 0;
}
static int run_farm_rules_check_sessions(struct sbuffer *buf, struct nftst *n, int stype, int family, int type, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
char map_str[NFTLB_MAX_OBJ_NAME] = { 0 };
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
if (f->persistence == VALUE_META_NONE || f->total_bcks == 0)
return 0;
if (action != ACTION_START && action != ACTION_RELOAD)
return 0;
if (stype == SESSION_TYPE_STATIC)
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "static-sessions-%s", f->name);
else
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "persist-%s", f->name);
get_chain_name(chain, f->name, type);
switch (f->mode) {
case VALUE_MODE_DSR:
get_chain_name(chain, f->name, NFTLB_F_CHAIN_ING_FILTER);
concat_buf(buf, " ; add rule %s %s %s ether daddr set", print_nft_table_family(family, NFTLB_F_CHAIN_ING_FILTER), NFTLB_TABLE_NAME, chain);
run_farm_rules_gen_meta_param(buf, a->protocol, family, f->persistence, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " map @%s ether saddr set %s", map_str, a->iethaddr);
if (stype == SESSION_TYPE_TIMED)
run_farm_rules_update_sessions(buf, n, family, chain, action);
concat_buf(buf, " fwd to");
if (f->bcks_have_if) {
concat_buf(buf, " ether daddr");
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_ETHADDR, BCK_MAP_OFACE, NFTLB_CHECK_AVAIL);
} else
concat_buf(buf, " %s", f->oface);
concat_exec_cmd(buf, "");
break;
case VALUE_MODE_STLSDNAT:
get_chain_name(chain, f->name, NFTLB_F_CHAIN_ING_FILTER);
concat_buf(buf, " ; add rule %s %s %s %s daddr set", print_nft_table_family(family, NFTLB_F_CHAIN_ING_FILTER), NFTLB_TABLE_NAME, chain, print_nft_family(family));
run_farm_rules_gen_meta_param(buf, a->protocol, family, f->persistence, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " map @%s ether daddr set %s daddr", map_str, print_nft_family(family));
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_IPADDR, BCK_MAP_ETHADDR, NFTLB_CHECK_AVAIL);
if (f->bcks_have_port) {
concat_buf(buf, " th dport set ether daddr");
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_ETHADDR, BCK_MAP_PORT, NFTLB_CHECK_AVAIL);
}
concat_buf(buf, " ether saddr set %s", f->oethaddr);
if (stype == SESSION_TYPE_TIMED)
run_farm_rules_update_sessions(buf, n, family, chain, action);
concat_buf(buf, " fwd to");
if (f->bcks_have_if) {
concat_buf(buf, " ether daddr");
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_ETHADDR, BCK_MAP_OFACE, NFTLB_CHECK_AVAIL);
} else
concat_buf(buf, " %s", f->oface);
concat_exec_cmd(buf, "");
break;
default:
get_chain_name(chain, f->name, NFTLB_F_CHAIN_PRE_FILTER);
if (stype == SESSION_TYPE_STATIC) {
concat_buf(buf, " ; add rule %s %s %s ct mark set", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain);
run_farm_rules_gen_meta_param(buf, a->protocol, family, f->persistence, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " map @%s accept", map_str);
} else {
concat_buf(buf, " ; add rule %s %s %s ct state new ct mark set", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain);
run_farm_rules_gen_meta_param(buf, a->protocol, family, f->persistence, NFTLB_MAP_KEY_RULE);
concat_exec_cmd(buf, " map @%s", map_str);
}
break;
}
return 0;
}
static void run_farm_meter(struct sbuffer *buf, struct farm *f, int table_family, int family, int type, char *name, int action)
{
switch (action) {
case ACTION_START:
concat_buf(buf, " ; add set %s %s %s { type %s ; flags dynamic ; ", print_nft_table_family(table_family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, name, print_nft_family_type(family));
if (type == KEY_ELEMENTS)
concat_buf(buf, "counter ; ");
// ct count doesn't require timeout as it is implemented implicitly
if (type != KEY_ESTCONNLIMIT &&
f->limitsttl)
concat_buf(buf, "timeout %ds; ", f->limitsttl);
concat_exec_cmd(buf, "} ;");
break;
case ACTION_STOP:
concat_exec_cmd(buf, " ; delete set %s %s %s ; ", print_nft_table_family(table_family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, name);
break;
default:
break;
}
}
static int run_farm_log_rate_limit(struct sbuffer *buf, struct nftst *n)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
char rtlimit_str[NFTLB_MAX_OBJ_NAME] = { 0 };
if ((f && !f->logrtlimit) || (a && !a->logrtlimit))
return 0;
if (f) {
obj_print_rtlimit(rtlimit_str, f->logrtlimit, f->logrtlimit_unit);
concat_buf(buf, " limit rate %s", rtlimit_str);
}
if (a) {
obj_print_rtlimit(rtlimit_str, a->logrtlimit, a->logrtlimit_unit);
concat_buf(buf, " limit rate %s", rtlimit_str);
}
return 0;
}
static void run_farm_rules_log_and_verdict(struct sbuffer *buf, struct nftst *n, int logrt, int flags, int verdict, int key, int chain)
{
char logprefix_str[NFTLB_MAX_OBJ_NAME] = { 0 };
if (flags & VALUE_VERDICT_LOG) {
if (logrt) {
concat_buf(buf, " jump {");
run_farm_log_rate_limit(buf, n);
}
print_log_format(logprefix_str, key, chain, n);
concat_buf(buf, " log prefix \"%s\"", logprefix_str);
if (logrt) {
concat_buf(buf, " ;");
}
}
concat_buf(buf, " %s", print_nft_verdict(flags, verdict));
if (flags & VALUE_VERDICT_LOG && logrt)
concat_buf(buf, "; }");
concat_exec_cmd(buf, "");
}
static int run_farm_rules_filter_policies(struct sbuffer *buf, struct farm *f, int family, char *chain, int action)
{
char meter_str[NFTLB_MAX_OBJ_NAME] = { 0 };
char burst_str[NFTLB_MAX_OBJ_NAME] = { 0 };
struct nftst *n = nftst_create_from_farm(f);
char rtlimit_str[NFTLB_MAX_OBJ_NAME] = { 0 };
if ((action == ACTION_START || action == ACTION_RELOAD) && f->tcpstrict == VALUE_SWITCH_ON) {
concat_buf(buf, " ; add rule %s %s %s ct state invalid",
print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain);
run_farm_rules_log_and_verdict(buf, n, f->logrtlimit, f->verdict, VALUE_TYPE_DENY, KEY_TCPSTRICT_LOGPREFIX, NFTLB_F_CHAIN_PRE_FILTER);
}
snprintf(meter_str, NFTLB_MAX_OBJ_NAME, "%s-%s", CONFIG_KEY_NEWRTLIMIT, f->name);
if ((action == ACTION_START && f->newrtlimit != DEFAULT_NEWRTLIMIT) || (action == ACTION_RELOAD && f->reload_action & VALUE_RLD_NEWRTLIMIT_START))
run_farm_meter(buf, f, family, family, KEY_NEWRTLIMIT, meter_str, ACTION_START);
if (((action == ACTION_STOP || action == ACTION_DELETE) && f->newrtlimit != DEFAULT_NEWRTLIMIT) || (action == ACTION_RELOAD && f->reload_action & VALUE_RLD_NEWRTLIMIT_STOP))
run_farm_meter(buf, f, family, family, KEY_NEWRTLIMIT, meter_str, ACTION_STOP);
if ((action == ACTION_START || action == ACTION_RELOAD) && f->newrtlimit != DEFAULT_NEWRTLIMIT) {
if (f->newrtlimitbst != DEFAULT_RTLIMITBURST)
snprintf(burst_str, NFTLB_MAX_OBJ_NAME, "burst %d packets ", f->newrtlimitbst);
//~ concat_buf(buf, " ; add rule %s %s %s ct state new add @%s { %s saddr limit rate over %s %s counter }",
obj_print_rtlimit(rtlimit_str, f->newrtlimit, f->newrtlimit_unit);
concat_buf(buf, " ; add rule %s %s %s ct state new add @%s { %s saddr limit rate over %s %s }",
print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, meter_str, print_nft_family(family), rtlimit_str, burst_str);
run_farm_rules_log_and_verdict(buf, n, f->logrtlimit, f->verdict, VALUE_TYPE_DENY, KEY_NEWRTLIMIT_LOGPREFIX, NFTLB_F_CHAIN_PRE_FILTER);
}
snprintf(meter_str, NFTLB_MAX_OBJ_NAME, "%s-%s", CONFIG_KEY_RSTRTLIMIT, f->name);
if ((action == ACTION_START && f->rstrtlimit != DEFAULT_RSTRTLIMIT) || (action == ACTION_RELOAD && f->reload_action & VALUE_RLD_RSTRTLIMIT_START))
run_farm_meter(buf, f, family, family, KEY_RSTRTLIMIT, meter_str, ACTION_START);
if (((action == ACTION_STOP || action == ACTION_DELETE) && f->rstrtlimit != DEFAULT_RSTRTLIMIT) || (action == ACTION_RELOAD && f->reload_action & VALUE_RLD_RSTRTLIMIT_STOP))
run_farm_meter(buf, f, family, family, KEY_RSTRTLIMIT, meter_str, ACTION_STOP);
if ((action == ACTION_START || action == ACTION_RELOAD) && f->rstrtlimit != DEFAULT_RSTRTLIMIT) {
if (f->rstrtlimitbst != DEFAULT_RTLIMITBURST)
snprintf(burst_str, NFTLB_MAX_OBJ_NAME, "burst %d packets ", f->rstrtlimitbst);
//~ concat_buf(buf, " ; add rule %s %s %s tcp flags rst add @%s { %s saddr limit rate over %s %s counter }",
obj_print_rtlimit(rtlimit_str, f->rstrtlimit, f->rstrtlimit_unit);
concat_buf(buf, " ; add rule %s %s %s tcp flags rst add @%s { %s saddr limit rate over %s %s }",
print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, meter_str, print_nft_family(family), rtlimit_str, burst_str);
run_farm_rules_log_and_verdict(buf, n, f->logrtlimit, f->verdict, VALUE_TYPE_DENY, KEY_RSTRTLIMIT_LOGPREFIX, NFTLB_F_CHAIN_PRE_FILTER);
}
snprintf(meter_str, NFTLB_MAX_OBJ_NAME, "%s-%s", CONFIG_KEY_ESTCONNLIMIT, f->name);
if ((action == ACTION_START && f->estconnlimit != DEFAULT_ESTCONNLIMIT) || (action == ACTION_RELOAD && f->reload_action & VALUE_RLD_ESTCONNLIMIT_START))
run_farm_meter(buf, f, family, family, KEY_ESTCONNLIMIT, meter_str, ACTION_START);
if (((action == ACTION_STOP || action == ACTION_DELETE) && f->estconnlimit != DEFAULT_ESTCONNLIMIT) || (action == ACTION_RELOAD && f->reload_action & VALUE_RLD_ESTCONNLIMIT_STOP))
run_farm_meter(buf, f, family, family, KEY_ESTCONNLIMIT, meter_str, ACTION_STOP);
if ((action == ACTION_START || action == ACTION_RELOAD) && f->estconnlimit != DEFAULT_ESTCONNLIMIT) {
//~ concat_buf(buf, " ; add rule %s %s %s ct state new add @%s { %s saddr ct count over %d counter }",
concat_buf(buf, " ; add rule %s %s %s ct state new add @%s { %s saddr ct count over %d }",
print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, meter_str, print_nft_family(family), f->estconnlimit);
run_farm_rules_log_and_verdict(buf, n, f->logrtlimit, f->verdict, VALUE_TYPE_DENY, KEY_ESTCONNLIMIT_LOGPREFIX, NFTLB_F_CHAIN_PRE_FILTER);
}
if ((action == ACTION_START || action == ACTION_RELOAD) && f->queue != DEFAULT_QUEUE)
concat_exec_cmd(buf, " ; add rule %s %s %s tcp flags syn queue num %d bypass",
print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, f->queue);
return 0;
}
static int run_farm_rules_gen_limits_per_bck(struct sbuffer *buf, struct farm *f, int family, char *chain, int action)
{
struct backend *b;
struct nftst *n = nftst_create_from_farm(f);
list_for_each_entry(b, &f->backends, list) {
if (b->estconnlimit == 0)
continue;
if ((b->action == ACTION_STOP && !backend_is_usable(b)) || (action == ACTION_STOP || action == ACTION_DELETE))
continue;
nftst_set_backend(n, b);
concat_buf(buf, " ; add rule %s %s %s ct mark 0x%x ct count over %d",
print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, backend_get_mark(b), b->estconnlimit);
run_farm_rules_log_and_verdict(buf, n, f->logrtlimit, f->verdict, VALUE_TYPE_DENY, KEY_ESTCONNLIMIT_LOGPREFIX, NFTLB_F_CHAIN_PRE_FILTER);
}
return 0;
}
static int run_farm_rules_filter_marks(struct sbuffer *buf, struct nftst *n, int family, char *chain, int action)
{
struct farm *f = nftst_get_farm(n);
struct backend *b;
int mark = farm_get_mark(f);
if (action == ACTION_START || action == ACTION_RELOAD) {
if (f->bcks_available) {
concat_buf(buf, " ; add rule %s %s %s ct state new ct mark 0x0 ct mark set", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain);
if (f->scheduler == VALUE_SCHED_SYMHASH && f->bcks_available == 1) { // FIXME: Control bug in nftables
list_for_each_entry(b, &f->backends, list) {
if (!backend_is_available(b))
continue;
concat_buf(buf, " 0x%x", backend_get_mark(b));
}
} else {
if (run_farm_rules_gen_sched(buf, n, family) == -1)
return -1;
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_WEIGHT, BCK_MAP_MARK, NFTLB_CHECK_AVAIL);
}
run_farm_rules_gen_limits_per_bck(buf, f, family, chain, action);
} else if (mark != DEFAULT_MARK) {
concat_buf(buf, " ; add rule %s %s %s ct state new ct mark 0x0 ct mark set 0x%x", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_FILTER), NFTLB_TABLE_NAME, chain, mark);
}
} else if (action == ACTION_STOP || action == ACTION_DELETE || (action == ACTION_RELOAD && f->bcks_usable == 0)) {
run_farm_rules_gen_limits_per_bck(buf, f, family, chain, action);
}
concat_exec_cmd(buf, "");
return 0;
}
static int run_farm_rules_filter(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
int need = need_filter(f);
int naction = nftst_get_action(n);
if (!need && f->reload_action == VALUE_RLD_NONE)
return 0;
get_chain_name(chain, f->name, NFTLB_F_CHAIN_PRE_FILTER);
if (action == ACTION_RELOAD && need && (STATEFUL_RLD_START(f->reload_action)))
action = ACTION_RELOAD;
if (action == ACTION_RELOAD && !need && (STATEFUL_RLD_STOP(f->reload_action)))
action = ACTION_STOP;
switch (action) {
case ACTION_START:
case ACTION_RELOAD:
run_base_table(buf, NFTLB_F_CHAIN_PRE_FILTER, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_PRE_FILTER, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_PRE_FILTER, family, naction, action);
run_farm_rules_filter_policies(buf, f, family, chain, action);
if (f->mode != VALUE_MODE_LOCAL) {
run_farm_rules_filter_helper(buf, n, family, chain, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_STATIC, family, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_TIMED, family, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_STATIC, family, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_TIMED, family, action);
run_farm_rules_check_sessions(buf, n, SESSION_TYPE_STATIC, family, NFTLB_F_CHAIN_PRE_FILTER, action);
run_farm_rules_check_sessions(buf, n, SESSION_TYPE_TIMED, family, NFTLB_F_CHAIN_PRE_FILTER, action);
run_farm_rules_filter_marks(buf, n, family, chain, action);
run_farm_rules_update_sessions(buf, n, family, chain, action);
}
break;
case ACTION_DELETE:
case ACTION_STOP:
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_PRE_FILTER, family, naction, action);
if (f->mode != VALUE_MODE_LOCAL) {
run_farm_sessions_map(buf, n, SESSION_TYPE_STATIC, family, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_TIMED, family, action);
run_farm_rules_filter_marks(buf, n, family, chain, action);
run_farm_rules_filter_helper(buf, n, family, chain, action);
}
run_farm_rules_filter_policies(buf, f, family, chain, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_PRE_FILTER, family, get_rules_needed(a), action);
break;
default:
break;
}
return 0;
}
static int get_farm_interfaces(struct nftst *n, char *list)
{
struct backend *b;
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
int number = 0;
char *p = NULL;
if (a->iface) {
strcat(list, a->iface);
number++;
}
if (f->oface && !(p = strstr(list, f->oface))) {
if (number)
strcat(list, ", ");
strcat(list, f->oface);
number++;
}
list_for_each_entry(b, &f->backends, list) {
if (b->oface && !(p = strstr(list, b->oface))) {
if (number)
strcat(list, ", ");
strcat(list, b->oface);
number++;
}
}
return number;
}
static void run_farm_flowtable(struct sbuffer *buf, struct nftst *n, int family, char *name, int action)
{
char interfaces[NFTLB_MAX_OBJ_NAME] = { 0 };
struct farm *f = nftst_get_farm(n);
if (!farm_needs_flowtable(f) || !get_farm_interfaces(n, interfaces))
return;
switch (action) {
case ACTION_START:
concat_exec_cmd(buf, " ; add flowtable %s %s %s { hook %s priority %d ; devices = { %s } ; } ;", print_nft_table_family(family, NFTLB_F_CHAIN_FWD_FILTER), NFTLB_TABLE_NAME, name, NFTLB_HOOK_INGRESS, nftlb_flowtable_prio++, interfaces);
break;
case ACTION_STOP:
case ACTION_DELETE:
concat_exec_cmd(buf, " ; delete flowtable %s %s %s ; ", print_nft_table_family(family, NFTLB_F_CHAIN_FWD_FILTER), NFTLB_TABLE_NAME, name);
nftlb_flowtable_prio--;
break;
default:
break;
}
return;
}
static void run_farm_gen_flowtable_rules(struct sbuffer *buf, struct nftst *n, int family, char *chain, char *name, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
if (!farm_needs_flowtable(f) || !a->iface)
return;
concat_exec_cmd(buf, " ; add rule %s %s %s flow add @%s", print_nft_table_family(family, NFTLB_F_CHAIN_FWD_FILTER), NFTLB_TABLE_NAME, chain, name);
return;
}
static int run_farm_rules_forward(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
int naction = nftst_get_action(n);
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
char flowtable[NFTLB_MAX_OBJ_NAME] = { 0 };
if (!need_forward(f))
return 0;
get_chain_name(chain, f->name, NFTLB_F_CHAIN_FWD_FILTER);
get_flowtable_name(flowtable, f);
switch (action) {
case ACTION_START:
run_base_table(buf, NFTLB_F_CHAIN_FWD_FILTER, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_FWD_FILTER, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_FWD_FILTER, family, naction, action);
run_farm_gen_log_rules(buf, f, family, chain, VALUE_LOG_FORWARD, NFTLB_F_CHAIN_FWD_FILTER, action);
run_farm_flowtable(buf, n, family, flowtable, action);
run_farm_gen_flowtable_rules(buf, n, family, chain, flowtable, action);
break;
case ACTION_RELOAD:
run_base_table(buf, NFTLB_F_CHAIN_FWD_FILTER, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_FWD_FILTER, family, get_rules_needed(a), action);
run_nftst_rules_gen_chain(buf, n, family, NFTLB_F_CHAIN_FWD_FILTER, ACTION_RELOAD);
run_nftst_rules_gen_srv_map_by_protocol(buf, n, NFTLB_F_CHAIN_FWD_FILTER, family, ACTION_RELOAD);
run_farm_gen_log_rules(buf, f, family, chain, VALUE_LOG_FORWARD, NFTLB_F_CHAIN_FWD_FILTER, action);
run_farm_gen_flowtable_rules(buf, n, family, chain, flowtable, action);
break;
case ACTION_DELETE:
case ACTION_STOP:
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_FWD_FILTER, family, naction, action);
run_farm_flowtable(buf, n, family, flowtable, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_FWD_FILTER, family, get_rules_needed(a), action);
break;
default:
break;
}
return 0;
}
static int run_farm_rules_output(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
int naction = nftst_get_action(n);
if (!need_output(f))
return 0;
switch (action) {
case ACTION_START:
run_base_chain(buf, n, NFTLB_F_CHAIN_OUT_FILTER, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_OUT_FILTER, family, naction, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_OUT_DNAT, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_OUT_DNAT, family, naction, action);
break;
case ACTION_RELOAD:
run_base_chain(buf, n, NFTLB_F_CHAIN_OUT_FILTER, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_OUT_FILTER, family, naction, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_OUT_DNAT, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_OUT_DNAT, family, naction, action);
break;
case ACTION_DELETE:
case ACTION_STOP:
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_OUT_FILTER, family, naction, action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_OUT_DNAT, family, naction, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_OUT_FILTER, family, get_rules_needed(a), action);
run_base_chain(buf, n, NFTLB_F_CHAIN_OUT_DNAT, family, get_rules_needed(a), action);
break;
default:
break;
}
return 0;
}
static int run_farm_rules_ingress_policies(struct sbuffer *buf, struct farm *f, char *chain, int action)
{
struct farmpolicy *fp;
char meter_str[NFTLB_MAX_OBJ_NAME] = { 0 };
struct nftst *n = nftst_create_from_farm(f);
list_for_each_entry(fp, &f->policies, list) {
nftst_set_policy(n, fp->policy);
snprintf(meter_str, NFTLB_MAX_OBJ_NAME, "%s-%s-cnt", fp->policy->name, f->name);
if ((fp->action == ACTION_RELOAD && f->policies_action == ACTION_RELOAD) ||
(action == ACTION_START && f->policies_action != ACTION_RELOAD) ||
(action == ACTION_RELOAD && f->policies_action == ACTION_START) ||
(fp->action == ACTION_START && f->policies_action == ACTION_RELOAD)) {
run_farm_meter(buf, f, VALUE_FAMILY_NETDEV, fp->policy->family, KEY_ELEMENTS, meter_str, ACTION_START);
nftst_set_policy(n, fp->policy);
} else if (((action == ACTION_STOP || action == ACTION_DELETE) && f->policies_action != ACTION_RELOAD) ||
(action == ACTION_RELOAD && f->policies_action == ACTION_STOP) ||
(fp->action == ACTION_STOP && f->policies_action == ACTION_RELOAD)) {
run_farm_meter(buf, f, VALUE_FAMILY_NETDEV, fp->policy->family, KEY_ELEMENTS, meter_str, ACTION_STOP);
}
if ((fp->action == ACTION_NONE && (f->policies_action == ACTION_RELOAD || f->policies_action == ACTION_START)) ||
(fp->action == ACTION_START && (f->policies_action == ACTION_RELOAD || f->policies_action == ACTION_START)) ||
(fp->action == ACTION_RELOAD && f->policies_action == ACTION_RELOAD)) {
concat_buf(buf, " ; add rule %s %s %s %s saddr @%s add @%s { %s saddr }",
NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, chain, print_nft_family(fp->policy->family), fp->policy->name, meter_str, print_nft_family(fp->policy->family));
run_farm_rules_log_and_verdict(buf, n, f->logrtlimit, f->verdict, fp->policy->type, KEY_LOGPREFIX, NFTLB_F_CHAIN_ING_FILTER);
}
fp->action = ACTION_NONE;
}
return 0;
}
static int run_nftst_rules_ingress_policies(struct sbuffer *buf, struct nftst *n, char *chain, int action)
{
struct address *a = nftst_get_address(n);
struct addresspolicy *ap;
if (a->policies_action != ACTION_START && a->policies_action != ACTION_RELOAD && action != ACTION_RELOAD)
return 0;
list_for_each_entry(ap, &a->policies, list) {
concat_buf(buf, " ; add rule %s %s %s %s saddr @%s",
NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, chain, print_nft_family(ap->policy->family), ap->policy->name);
run_farm_rules_log_and_verdict(buf, n, a->logrtlimit, a->verdict, ap->policy->type, KEY_LOGPREFIX, NFTLB_F_CHAIN_ING_FILTER);
ap->action = ACTION_NONE;
}
return 0;
}
static void get_farm_rules_nat_params(struct sbuffer *buf, int family, int mode)
{
switch (mode) {
case BCK_MAP_IPADDR_PORT:
concat_buf(buf, " %s addr . port", print_nft_family(family));
break;
default:
break;
}
}
static int run_farm_rules_gen_nat(struct sbuffer *buf, struct nftst *n, int family, int type, int action)
{
struct farm *f = nftst_get_farm(n);
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
char map_str[NFTLB_MAX_OBJ_NAME] = { 0 };
int bck_map_data = BCK_MAP_IPADDR;
if (f->bcks_usable == 0)
return 0;
get_chain_name(chain, f->name, type);
switch (f->mode) {
case VALUE_MODE_DSR:
run_farm_rules_check_sessions(buf, n, SESSION_TYPE_STATIC, family, NFTLB_F_CHAIN_ING_FILTER, action);
run_farm_rules_check_sessions(buf, n, SESSION_TYPE_TIMED, family, NFTLB_F_CHAIN_ING_FILTER, action);
if (f->bcks_available) {
concat_buf(buf, " ; add rule %s %s %s", print_nft_table_family(family, NFTLB_F_CHAIN_ING_FILTER), NFTLB_TABLE_NAME, chain);
run_farm_log_prefix(buf, f, VALUE_LOG_INPUT, NFTLB_F_CHAIN_ING_FILTER, ACTION_START);
// TODO: support of different output interfaces per backend during saddr
concat_buf(buf, " ether saddr set %s ether daddr set", f->oethaddr);
run_farm_rules_gen_sched(buf, n, family);
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_WEIGHT, BCK_MAP_ETHADDR, NFTLB_CHECK_AVAIL);
run_farm_rules_update_sessions(buf, n, family, chain, action);
run_farm_log_prefix(buf, f, VALUE_LOG_OUTPUT, NFTLB_F_CHAIN_ING_DNAT, ACTION_START);
concat_buf(buf, " fwd to");
if (f->bcks_have_if) {
concat_buf(buf, " ether daddr");
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_ETHADDR, BCK_MAP_OFACE, NFTLB_CHECK_AVAIL);
} else
concat_buf(buf, " %s", f->oface);
}
concat_exec_cmd(buf, "");
break;
case VALUE_MODE_STLSDNAT:
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "map-%s-back", f->name);
concat_exec_cmd(buf, " ; add rule %s %s %s update @%s { %s saddr : ether saddr }", print_nft_table_family(family, NFTLB_F_CHAIN_ING_FILTER), NFTLB_TABLE_NAME, chain, map_str, print_nft_family(family));
run_farm_rules_check_sessions(buf, n, SESSION_TYPE_STATIC, family, NFTLB_F_CHAIN_ING_FILTER, action);
run_farm_rules_check_sessions(buf, n, SESSION_TYPE_TIMED, family, NFTLB_F_CHAIN_ING_FILTER, action);
if (f->bcks_available) {
concat_buf(buf, " ; add rule %s %s %s", print_nft_table_family(family, NFTLB_F_CHAIN_ING_FILTER), NFTLB_TABLE_NAME, chain);
run_farm_log_prefix(buf, f, VALUE_LOG_INPUT, NFTLB_F_CHAIN_ING_FILTER, ACTION_START);
concat_buf(buf, " %s daddr set", print_nft_family(family));
run_farm_rules_gen_sched(buf, n, family);
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_WEIGHT, BCK_MAP_IPADDR, NFTLB_CHECK_AVAIL);
concat_buf(buf, " ether daddr set %s daddr", print_nft_family(family));
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_IPADDR, BCK_MAP_ETHADDR, NFTLB_CHECK_AVAIL);
if (f->bcks_have_port) {
concat_buf(buf, " th dport set ether daddr");
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_ETHADDR, BCK_MAP_PORT, NFTLB_CHECK_AVAIL);
}
// TODO: support of different output interfaces per backend during saddr
concat_buf(buf, " ether saddr set %s", f->oethaddr);
run_farm_rules_update_sessions(buf, n, family, chain, action);
run_farm_log_prefix(buf, f, VALUE_LOG_OUTPUT, NFTLB_F_CHAIN_ING_DNAT, ACTION_START);
concat_buf(buf, " fwd to");
if (f->bcks_have_if) {
concat_buf(buf, " ether daddr");
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_ETHADDR, BCK_MAP_OFACE, NFTLB_CHECK_AVAIL);
} else {
concat_buf(buf, " %s", f->oface);
}
}
concat_exec_cmd(buf, "");
break;
default:
run_farm_gen_log_rules(buf, f, family, chain, VALUE_LOG_INPUT, NFTLB_F_CHAIN_PRE_DNAT, ACTION_START);
concat_buf(buf, " ; add rule %s %s %s", print_nft_table_family(family, NFTLB_F_CHAIN_PRE_DNAT), NFTLB_TABLE_NAME, chain);
if (nftst_get_proto(n) != VALUE_PROTO_ALL)
concat_buf(buf, " %s %s %s", print_nft_family(family), print_nft_family_protocol(family), print_nft_protocol(nftst_get_proto(n)));
concat_buf(buf, " dnat");
if (f->bcks_have_port && nftst_get_proto(n) != VALUE_PROTO_ALL)
bck_map_data = BCK_MAP_IPADDR_PORT;
get_farm_rules_nat_params(buf, family, bck_map_data);
concat_buf(buf, " to ct mark");
run_farm_rules_gen_bck_map(buf, n, BCK_MAP_MARK, bck_map_data, NFTLB_CHECK_USABLE);
concat_exec_cmd(buf, "");
break;
}
return 0;
}
static int run_nftst_ingress_policies(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
int naction = nftst_get_action(n);
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
if ((f && !farm_needs_policies(f)) ||
(!f && a && !address_needs_policies(a)) ||
(f && !farm_is_ingress_mode(f) && naction == ACTION_NONE))
return 0;
get_chain_name(chain, nftst_get_name(n), NFTLB_F_CHAIN_ING_FILTER);
switch (action) {
case ACTION_START:
if ((f && !farm_is_ingress_mode(f)) || a) {
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, family, ACTION_START);
run_base_chain(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, get_rules_needed(a), ACTION_START);
if ((f && f->policies_used > 1) || (a && a->policies_used > 1))
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_FILTER, VALUE_FAMILY_NETDEV, ACTION_RELOAD, ACTION_RELOAD);
else
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_FILTER, VALUE_FAMILY_NETDEV, ACTION_START, ACTION_START);
}
if (f)
run_farm_rules_ingress_policies(buf, f, chain, action);
else if (a)
run_nftst_rules_ingress_policies(buf, n, chain, action);
break;
case ACTION_RELOAD:
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_FILTER, VALUE_FAMILY_NETDEV, ACTION_RELOAD, ACTION_RELOAD);
if (f)
run_farm_rules_ingress_policies(buf, f, chain, action);
else if (a)
run_nftst_rules_ingress_policies(buf, n, chain, action);
break;
case ACTION_DELETE:
case ACTION_STOP:
if ((f && !farm_is_ingress_mode(f)) || a) {
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_FILTER, VALUE_FAMILY_NETDEV, ACTION_STOP, ACTION_STOP);
run_base_chain(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, get_rules_needed(a), ACTION_STOP);
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, family, ACTION_STOP);
}
if (f && f->addresses_used <= 1)
run_farm_rules_ingress_policies(buf, f, chain, action);
else if (a)
run_nftst_rules_ingress_policies(buf, n, chain, action);
break;
default:
break;
}
return 0;
}
static int run_farm_dsr(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
int naction = nftst_get_action(n);
switch (action) {
case ACTION_RELOAD:
case ACTION_START:
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, naction, action);
run_nftst_ingress_policies(buf, n, family, ACTION_RELOAD);
run_farm_sessions_map(buf, n, SESSION_TYPE_STATIC, family, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_TIMED, family, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_STATIC, family, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_TIMED, family, action);
run_farm_rules_gen_nat(buf, n, family, NFTLB_F_CHAIN_ING_FILTER, action);
break;
case ACTION_DELETE:
case ACTION_STOP:
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, naction, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_STATIC, family, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_TIMED, family, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_STATIC, family, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_TIMED, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, get_rules_needed(a), action);
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, family, action);
run_nftst_ingress_policies(buf, n, family, f->policies_action);
break;
default:
break;
}
return 0;
}
static int run_farm_stlsnat(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
int naction = nftst_get_action(n);
char chain[NFTLB_MAX_OBJ_NAME] = { 0 };
char map_str[NFTLB_MAX_OBJ_NAME] = { 0 };
snprintf(map_str, NFTLB_MAX_OBJ_NAME, "map-%s-back", f->name);
get_chain_name(chain, f->name, NFTLB_F_CHAIN_ING_DNAT);
switch (action) {
case ACTION_RELOAD:
case ACTION_START:
run_nftst_ingress_policies(buf, n, family, f->policies_action);
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_ING_DNAT, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_DNAT, family, naction, action);
run_farm_map(buf, a, family, NFTLB_F_CHAIN_ING_DNAT, map_str, VALUE_META_SRCIP, VALUE_META_SRCMAC, f->persistttl, action);
concat_exec_cmd(buf, " ; add rule %s %s %s %s saddr set %s ether saddr set %s ether daddr set %s daddr map @%s fwd to %s", print_nft_table_family(family, NFTLB_F_CHAIN_ING_DNAT), NFTLB_TABLE_NAME, chain, print_nft_family(family), a->ipaddr, a->iethaddr, print_nft_family(family), map_str, a->iface);
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, naction, action);
run_nftst_ingress_policies(buf, n, family, f->policies_action);
run_farm_sessions_map(buf, n, SESSION_TYPE_STATIC, family, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_TIMED, family, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_STATIC, family, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_TIMED, family, action);
run_farm_rules_gen_nat(buf, n, family, NFTLB_F_CHAIN_ING_FILTER, action);
break;
case ACTION_DELETE:
case ACTION_STOP:
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_DNAT, family, naction, action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, naction, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_STATIC, family, action);
run_farm_manage_sessions(buf, f, SESSION_TYPE_TIMED, family, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_STATIC, family, action);
run_farm_sessions_map(buf, n, SESSION_TYPE_TIMED, family, action);
run_farm_map(buf, a, family, NFTLB_F_CHAIN_ING_DNAT, map_str, VALUE_META_SRCIP, VALUE_META_SRCMAC, f->persistttl, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_ING_DNAT, family, get_rules_needed(a), action);
run_base_chain(buf, n, NFTLB_F_CHAIN_ING_FILTER, family, get_rules_needed(a), action);
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, family, action);
run_nftst_ingress_policies(buf, n, family, f->policies_action);
break;
default:
break;
}
return 0;
}
static int run_farm_nat(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
int naction = nftst_get_action(n);
tools_printlog(LOG_DEBUG, "%s():%d: ", __FUNCTION__, __LINE__);
switch (action) {
case ACTION_RELOAD:
case ACTION_START:
run_farm_rules_filter(buf, n, family, action);
run_nftst_ingress_policies(buf, n, family, f->policies_action);
run_base_table(buf, NFTLB_F_CHAIN_PRE_DNAT, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_PRE_DNAT, family, get_rules_needed(a), action);
run_base_chain(buf, n, NFTLB_F_CHAIN_POS_SNAT, family, get_rules_needed(a), action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_PRE_DNAT, family, naction, action);
run_farm_rules_gen_nat(buf, n, family, NFTLB_F_CHAIN_PRE_DNAT, action);
run_farm_rules_forward(buf, n, family, action);
run_farm_rules_output(buf, n, family, action);
run_farm_snat(buf, n, family, action);
break;
case ACTION_DELETE:
case ACTION_STOP:
run_farm_rules_forward(buf, n, family, action);
run_farm_rules_output(buf, n, family, action);
run_farm_rules_filter(buf, n, family, action);
run_farm_snat(buf, n, family, action);
run_nftst_rules_gen_vsrv(buf, n, NFTLB_F_CHAIN_PRE_DNAT, family, naction, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_PRE_DNAT, family, get_rules_needed(a), action);
run_base_chain(buf, n, NFTLB_F_CHAIN_POS_SNAT, family, get_rules_needed(a), action);
run_base_table(buf, NFTLB_F_CHAIN_PRE_DNAT, family, action);
run_nftst_ingress_policies(buf, n, family, f->policies_action);
break;
default:
break;
}
return 0;
}
static int run_farm_local(struct sbuffer *buf, struct nftst *n, int family, int action)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
switch (action) {
case ACTION_RELOAD:
case ACTION_START:
if (farm_has_source_address(f)) {
run_base_table(buf, NFTLB_F_CHAIN_PRE_DNAT, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_PRE_DNAT, family, get_rules_needed(a), action);
run_base_chain(buf, n, NFTLB_F_CHAIN_POS_SNAT, family, get_rules_needed(a), action);
run_farm_snat(buf, n, family, action);
}
run_farm_rules_filter(buf, n, family, action);
run_nftst_ingress_policies(buf, n, family, f->policies_action);
run_farm_rules_forward(buf, n, family, action);
run_farm_rules_output(buf, n, family, action);
break;
case ACTION_DELETE:
case ACTION_STOP:
run_farm_rules_forward(buf, n, family, action);
run_farm_rules_output(buf, n, family, action);
run_farm_rules_filter(buf, n, family, action);
if (farm_has_source_address(f)) {
run_farm_snat(buf, n, family, action);
run_base_chain(buf, n, NFTLB_F_CHAIN_PRE_DNAT, family, get_rules_needed(a), action);
run_base_chain(buf, n, NFTLB_F_CHAIN_POS_SNAT, family, get_rules_needed(a), action);
}
run_base_table(buf, NFTLB_F_CHAIN_PRE_DNAT, family, action);
run_nftst_ingress_policies(buf, n, family, f->policies_action);
break;
default:
break;
}
return 0;
}
static int run_farm_rules(struct sbuffer *buf, struct nftst *n, int family)
{
struct farm *f = nftst_get_farm(n);
int action = nftst_get_action(n);
if (f->action == ACTION_RELOAD && action == ACTION_NONE)
action = ACTION_RELOAD;
switch (f->mode) {
case VALUE_MODE_STLSDNAT:
run_farm_stlsnat(buf, n, family, action);
break;
case VALUE_MODE_DSR:
run_farm_dsr(buf, n, family, action);
break;
case VALUE_MODE_LOCAL:
run_farm_local(buf, n, family, action);
break;
default:
run_farm_nat(buf, n, family, action);
}
return 0;
}
int nft_reset(void)
{
struct sbuffer buf;
int ret = 0;
create_buf(&buf);
if (nft_base_rules.dnat_rules_v4 ||
nft_base_rules.snat_rules_v4 ||
nft_base_rules.filter_rules_v4 ||
nft_base_rules.fwd_rules_v4 ||
nft_base_rules.out_filter_rules_v4 ||
nft_base_rules.out_nat_rules_v4)
nft_table_handler(&buf, print_nft_family(VALUE_FAMILY_IPV4), ACTION_DELETE);
if (nft_base_rules.dnat_rules_v6 ||
nft_base_rules.snat_rules_v6 ||
nft_base_rules.filter_rules_v6 ||
nft_base_rules.fwd_rules_v6 ||
nft_base_rules.out_filter_rules_v6 ||
nft_base_rules.out_nat_rules_v6)
nft_table_handler(&buf, print_nft_family(VALUE_FAMILY_IPV6), ACTION_DELETE);
if (nft_base_rules.ndv_ingress_rules.n_interfaces ||
nft_base_rules.ndv_ingress_dnat_rules.n_interfaces ||
nft_base_rules.ndv_ingress_policies)
nft_table_handler(&buf, print_nft_family(VALUE_FAMILY_NETDEV), ACTION_DELETE);
exec_cmd(get_buf_data(&buf));
clean_buf(&buf);
clean_rules_counters();
farm_s_clean_nft_chains();
address_s_clean_nft_chains();
return ret;
}
int nft_check_tables(void)
{
char cmd[NFTLB_MAX_OBJ_NAME] = { 0 };
const char *buf;
snprintf(cmd, NFTLB_MAX_OBJ_NAME, "list table %s %s", NFTLB_IPV4_FAMILY_STR, NFTLB_TABLE_NAME);
if (exec_cmd_open(cmd, &buf, 0) == 0)
nft_base_rules.dnat_rules_v4 = 1;
exec_cmd_close(buf);
snprintf(cmd, NFTLB_MAX_OBJ_NAME, "list table %s %s", NFTLB_IPV6_FAMILY_STR, NFTLB_TABLE_NAME);
if (exec_cmd_open(cmd, &buf, 0) == 0)
nft_base_rules.dnat_rules_v6 = 1;
exec_cmd_close(buf);
snprintf(cmd, NFTLB_MAX_OBJ_NAME, "list table %s %s", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME);
if (exec_cmd_open(cmd, &buf, 0) == 0)
nft_base_rules.ndv_ingress_rules.n_interfaces = 1;
exec_cmd_close(buf);
return nft_base_rules.dnat_rules_v4 ||
nft_base_rules.dnat_rules_v6 ||
nft_base_rules.ndv_ingress_rules.n_interfaces;
}
static int run_set_elements(struct sbuffer *buf, struct policy *p)
{
struct element *e;
int index = 0;
if (!p->total_elem)
return 0;
switch (p->action) {
case ACTION_START:
list_for_each_entry(e, &p->elements, list) {
if (index)
concat_buf(buf, ", %s", e->data);
else {
index++;
concat_buf(buf, " ; add element %s %s %s { %s", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, p->name, e->data);
}
e->action = ACTION_NONE;
}
if (index)
concat_exec_cmd(buf, " }");
break;
case ACTION_FLUSH:
concat_exec_cmd(buf, " ; flush set %s %s %s", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, p->name);
/* fallthrough */
case ACTION_RELOAD:
list_for_each_entry(e, &p->elements, list) {
if (e->action != ACTION_START)
continue;
if (index)
concat_buf(buf, ", %s", e->data);
else {
index++;
concat_buf(buf, " ; add element %s %s %s { %s", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, p->name, e->data);
}
e->action = ACTION_NONE;
}
if (index)
concat_exec_cmd(buf, " }");
index = 0;
list_for_each_entry(e, &p->elements, list) {
if (e->action != ACTION_DELETE && e->action != ACTION_STOP)
continue;
if (index)
concat_buf(buf, ", %s", e->data);
else {
index++;
concat_buf(buf, " ; delete element %s %s %s { %s", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, p->name, e->data);
}
e->action = ACTION_NONE;
}
if (index)
concat_exec_cmd(buf, " }");
break;
case ACTION_DELETE:
case ACTION_STOP:
list_for_each_entry(e, &p->elements, list) {
if (index)
concat_buf(buf, ", %s", e->data);
else {
index++;
concat_buf(buf, " ; delete element %s %s %s { %s", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, p->name, e->data);
}
e->action = ACTION_NONE;
}
if (index)
concat_exec_cmd(buf, " }");
break;
default:
break;
}
return 0;
}
static int run_set_farm_policies(struct sbuffer *buf, struct policy *p)
{
struct list_head *farms = obj_get_farms();
struct farm *f, *next;
struct farmpolicy *fp;
char meter_str[NFTLB_MAX_OBJ_NAME] = { 0 };
if (!p->used)
return 0;
list_for_each_entry_safe(f, next, farms, list) {
fp = farmpolicy_lookup_by_name(f, p->name);
if (!fp)
continue;
snprintf(meter_str, NFTLB_MAX_OBJ_NAME, "%s-%s-cnt", p->name, f->name);
switch (p->action) {
case ACTION_FLUSH:
concat_exec_cmd(buf, " ; flush set %s %s %s", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, meter_str);
break;
case ACTION_STOP:
case ACTION_DELETE:
case ACTION_START:
default:
break;
}
}
return 0;
}
static int run_policy_set(struct sbuffer *buf, struct policy *p)
{
switch (p->action) {
case ACTION_START:
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, VALUE_FAMILY_NETDEV, ACTION_START);
concat_exec_cmd(buf, " ; add set %s %s %s { type %s ; flags interval ; auto-merge ; counter ; }", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, p->name, print_nft_family_type(p->family));
nft_base_rules.ndv_ingress_policies++;
run_set_elements(buf, p);
break;
case ACTION_RELOAD:
run_set_elements(buf, p);
break;
case ACTION_FLUSH:
run_set_elements(buf, p);
run_set_farm_policies(buf, p);
break;
case ACTION_STOP:
case ACTION_DELETE:
concat_exec_cmd(buf, " ; delete set %s %s %s", NFTLB_NETDEV_FAMILY_STR, NFTLB_TABLE_NAME, p->name);
if (nft_base_rules.ndv_ingress_policies > 0)
nft_base_rules.ndv_ingress_policies--;
if (nft_base_rules.ndv_ingress_policies == 0)
run_base_table(buf, NFTLB_F_CHAIN_ING_FILTER, VALUE_FAMILY_NETDEV, ACTION_DELETE);
break;
case ACTION_NONE:
default:
break;
}
p->action = ACTION_NONE;
print_service_counters();
print_nft_base_rules();
return 0;
}
int nft_rulerize_policies(struct policy *p)
{
struct sbuffer buf;
int ret = 0;
create_buf(&buf);
run_policy_set(&buf, p);
exec_cmd(get_buf_data(&buf));
clean_buf(&buf);
return ret;
}
int nft_get_rules_buffer(const char **buf, int key, struct nftst *n)
{
struct farm *f = nftst_get_farm(n);
struct address *a = nftst_get_address(n);
struct policy *p = nftst_get_policy(n);
char cmd[NFTLB_MAX_OBJ_NAME] = { 0 };
int error = 0;
switch (key) {
case KEY_SESSIONS:
if (!f || !a)
return error;
snprintf(cmd, NFTLB_MAX_OBJ_NAME, "list map %s nftlb persist-%s", print_nft_table_family(a->family, get_stage_by_farm_mode(f)), f->name);
break;
case KEY_POLICIES:
if (!p)
return error;
snprintf(cmd, NFTLB_MAX_OBJ_NAME, "list set netdev nftlb %s", p->name);
break;
default:
return 0;
break;
}
error = exec_cmd_open(cmd, buf, 0);
return error;
}
void nft_del_rules_buffer(const char *buf)
{
exec_cmd_close(buf);
}
static int run_address_rules(struct sbuffer *buf, struct nftst *n, int family)
{
struct address *a = nftst_get_address(n);
int action = nftst_get_action(n);
switch (action) {
case ACTION_RELOAD:
case ACTION_START:
run_nftst_ingress_policies(buf, n, family, a->policies_action);
break;
case ACTION_DELETE:
case ACTION_STOP:
run_nftst_ingress_policies(buf, n, family, a->policies_action);
break;
default:
break;
}
return 0;
}
static int run_nftst(struct sbuffer *buf, struct nftst *n)
{
if ((nftst_get_family(n) == VALUE_FAMILY_IPV4) || (nftst_get_family(n) == VALUE_FAMILY_INET)) {
if (nftst_has_farm(n))
run_farm_rules(buf, n, VALUE_FAMILY_IPV4);
else if (nftst_has_address(n))
run_address_rules(buf, n, VALUE_FAMILY_IPV4);
}
if ((nftst_get_family(n) == VALUE_FAMILY_IPV6) || (nftst_get_family(n) == VALUE_FAMILY_INET)) {
if (nftst_has_farm(n))
run_farm_rules(buf, n, VALUE_FAMILY_IPV6);
else if (nftst_has_address(n))
run_address_rules(buf, n, VALUE_FAMILY_IPV6);
}
return 0;
}
int nft_rulerize_address(struct address *a)
{
struct sbuffer buf;
int ret = 0;
struct nftst *n = nftst_create_from_address(a);
if (!n)
return ret;
create_buf(&buf);
ret = run_nftst(&buf, n);
exec_cmd(get_buf_data(&buf));
clean_buf(&buf);
nftst_actions_done(n);
nftst_delete(n);
return ret;
}
int nft_rulerize_farms(struct farm *f)
{
struct farmaddress *fa;
struct nftst *n = nftst_create_from_farm(f);
struct sbuffer buf;
int ret = 0;
create_buf(&buf);
list_for_each_entry(fa, &f->addresses, list) {
nftst_set_address(n, fa->address);
nftst_set_action(n, fa->action);
run_nftst(&buf, n);
}
exec_cmd(get_buf_data(&buf));
clean_buf(&buf);
nftst_actions_done(n);
nftst_delete(n);
print_service_counters();
print_nft_base_rules();
return ret;
}
nftlb-1.0.7/src/nftst.c 0000664 0000000 0000000 00000010324 14326712445 0014725 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include "nftst.h"
#include "backends.h"
#include "tools.h"
#include "list.h"
static struct nftst *nftst_create(void)
{
struct nftst *n = (struct nftst *)malloc(sizeof(struct nftst));
if (!n) {
tools_printlog(LOG_ERR, "nft struct memory allocation error");
return NULL;
}
return n;
}
struct nftst *nftst_create_from_farm(struct farm *f)
{
struct nftst *n = nftst_create();
if (!n)
return NULL;
n->farm = f;
n->address = NULL;
n->backend = NULL;
n->policy = NULL;
n->action = f->action;
return n;
}
struct nftst *nftst_create_from_farmaddress(struct farmaddress *fa)
{
struct nftst *n = nftst_create();
if (!n)
return NULL;
n->farm = fa->farm;
n->address = fa->address;
n->backend = NULL;
n->policy = NULL;
n->action = fa->action;
return n;
}
struct nftst *nftst_create_from_address(struct address *a)
{
struct nftst *n = nftst_create();
if (!n)
return NULL;
n->farm = NULL;
n->address = a;
n->backend = NULL;
n->policy = NULL;
n->action = a->action;
return n;
}
struct nftst *nftst_create_from_policy(struct policy *p)
{
struct nftst *n = nftst_create();
if (!n)
return NULL;
n->farm = NULL;
n->address = NULL;
n->backend = NULL;
n->policy = p;
n->action = p->action;
return n;
}
void nftst_delete(struct nftst *n)
{
if (n)
free(n);
}
void nftst_set_farm(struct nftst *n, struct farm *f)
{
n->farm = f;
}
struct farm *nftst_get_farm(struct nftst *n)
{
return n->farm;
}
void nftst_set_address(struct nftst *n, struct address *a)
{
n->address = a;
}
struct address *nftst_get_address(struct nftst *n)
{
return n->address;
}
void nftst_set_backend(struct nftst *n, struct backend *b)
{
n->backend = b;
}
struct backend *nftst_get_backend(struct nftst *n)
{
return n->backend;
}
void nftst_set_action(struct nftst *n, int action)
{
n->action = action;
}
int nftst_get_action(struct nftst *n)
{
return n->action;
}
void nftst_set_policy(struct nftst *n, struct policy *p)
{
n->policy = p;
}
struct policy *nftst_get_policy(struct nftst *n)
{
return n->policy;
}
int nftst_get_family(struct nftst *n)
{
if (n->address)
return n->address->family;
return -1;
}
int nftst_get_proto(struct nftst *n)
{
if (n->address)
return n->address->protocol;
return -1;
}
char *nftst_get_name(struct nftst *n)
{
if (n->farm)
return n->farm->name;
if (n->address)
return n->address->name;
return NULL;
}
int nftst_get_chains(struct nftst *n)
{
if (n->farm)
return n->farm->nft_chains;
if (n->address)
return n->address->nft_chains;
return -1;
}
void nftst_set_chains(struct nftst *n, int chains)
{
if (n->farm)
n->farm->nft_chains = chains;
if (n->address)
n->address->nft_chains = chains;
return;
}
int nftst_actions_done(struct nftst *n)
{
struct farm *f = n->farm;
struct address *a = n->address;
struct backend *b;
struct farmaddress *fa;
if (f) {
list_for_each_entry(b, &f->backends, list)
b->action = ACTION_NONE;
list_for_each_entry(fa, &f->addresses, list)
fa->action = ACTION_NONE;
f->action = ACTION_NONE;
f->reload_action = VALUE_RLD_NONE;
f->policies_action = ACTION_NONE;
}
if (a) {
a->action = ACTION_NONE;
a->policies_action = ACTION_NONE;
}
return 0;
}
int nftst_has_farm(struct nftst *n)
{
if (n->farm)
return 1;
return 0;
}
int nftst_has_address(struct nftst *n)
{
if (n->address)
return 1;
return 0;
}
int nftst_has_backend(struct nftst *n)
{
if (n->backend)
return 1;
return 0;
}
nftlb-1.0.7/src/objects.c 0000664 0000000 0000000 00000036555 14326712445 0015236 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#define MAX_OBJ_VALUE 50
#define MAX_OBJ_UNIT 20
struct obj_config current_obj;
struct list_head farms;
int total_farms = 0;
int dsr_counter = 0;
struct list_head policies;
int total_policies = 0;
struct list_head addresses;
int total_addresses = 0;
static unsigned int cmdtry = 0;
void objects_init(void)
{
init_list_head(&farms);
init_list_head(&policies);
init_list_head(&addresses);
}
struct list_head * obj_get_farms(void)
{
return &farms;
}
struct list_head * obj_get_policies(void)
{
return &policies;
}
struct list_head * obj_get_addresses(void)
{
return &addresses;
}
int obj_get_total_farms(void)
{
return total_farms;
}
void obj_set_total_farms(int new_value)
{
if (new_value >= 0)
total_farms = new_value;
}
int obj_get_total_policies(void)
{
return total_policies;
}
void obj_set_total_policies(int new_value)
{
if (new_value >= 0)
total_policies = new_value;
}
int obj_get_total_addresses(void)
{
return total_addresses;
}
void obj_set_total_addresses(int new_value)
{
if (new_value >= 0)
total_addresses = new_value;
}
int obj_get_dsr_counter(void)
{
tools_printlog(LOG_DEBUG, "%s():%d: current dsr counter is %d", __FUNCTION__, __LINE__, dsr_counter);
return dsr_counter;
}
void obj_set_dsr_counter(int new_value)
{
tools_printlog(LOG_DEBUG, "%s():%d: new dsr counter is %d", __FUNCTION__, __LINE__, new_value);
if (new_value >= 0)
dsr_counter = new_value;
}
static void obj_config_init(void)
{
config_pair_init(current_obj.c);
current_obj.fptr = NULL;
current_obj.bptr = NULL;
current_obj.fpptr = NULL;
current_obj.pptr = NULL;
current_obj.eptr = NULL;
current_obj.sptr = NULL;
current_obj.aptr = NULL;
current_obj.faptr = NULL;
}
struct obj_config * obj_get_current_object(void)
{
return ¤t_obj;
}
struct farm * obj_get_current_farm(void)
{
return current_obj.fptr;
}
struct backend * obj_get_current_backend(void)
{
return current_obj.bptr;
}
struct policy * obj_get_current_policy(void)
{
return current_obj.pptr;
}
struct farmpolicy * obj_get_current_farmpolicy(void)
{
return current_obj.fpptr;
}
struct element * obj_get_current_element(void)
{
return current_obj.eptr;
}
struct session * obj_get_current_session(void)
{
return current_obj.sptr;
}
struct address * obj_get_current_address(void)
{
return current_obj.aptr;
}
struct farmaddress * obj_get_current_farmaddress(void)
{
return current_obj.faptr;
}
struct addresspolicy * obj_get_current_addresspolicy(void)
{
return current_obj.apptr;
}
void obj_set_current_farm(struct farm *f)
{
current_obj.fptr = f;
}
void obj_set_current_backend(struct backend *b)
{
current_obj.bptr = b;
}
void obj_set_current_policy(struct policy *p)
{
current_obj.pptr = p;
}
void obj_set_current_farmpolicy(struct farmpolicy *fp)
{
current_obj.fpptr = fp;
}
void obj_set_current_element(struct element *e)
{
current_obj.eptr = e;
}
void obj_set_current_session(struct session *s)
{
current_obj.sptr = s;
}
void obj_set_current_address(struct address *a)
{
current_obj.aptr = a;
}
void obj_set_current_farmaddress(struct farmaddress *fa)
{
current_obj.faptr = fa;
}
void obj_set_current_addresspolicy(struct addresspolicy *ap)
{
current_obj.apptr = ap;
}
char * obj_print_key(int key)
{
switch (key) {
case KEY_FARMS:
return CONFIG_KEY_FARMS;
case KEY_NAME:
return CONFIG_KEY_NAME;
case KEY_NEWNAME:
return CONFIG_KEY_NEWNAME;
case KEY_FQDN:
return CONFIG_KEY_FQDN;
case KEY_IFACE:
return CONFIG_KEY_IFACE;
case KEY_OFACE:
return CONFIG_KEY_OFACE;
case KEY_FAMILY:
return CONFIG_KEY_FAMILY;
case KEY_ETHADDR:
return CONFIG_KEY_ETHADDR;
case KEY_IETHADDR:
return CONFIG_KEY_IETHADDR;
case KEY_OETHADDR:
return CONFIG_KEY_OETHADDR;
case KEY_VIRTADDR:
return CONFIG_KEY_VIRTADDR;
case KEY_VIRTPORTS:
return CONFIG_KEY_VIRTPORTS;
case KEY_IPADDR:
return CONFIG_KEY_IPADDR;
case KEY_SRCADDR:
return CONFIG_KEY_SRCADDR;
case KEY_PORT:
return CONFIG_KEY_PORT;
case KEY_MODE:
return CONFIG_KEY_MODE;
case KEY_RESPONSETTL:
return CONFIG_KEY_RESPONSETTL;
case KEY_PROTO:
return CONFIG_KEY_PROTO;
case KEY_SCHED:
return CONFIG_KEY_SCHED;
case KEY_SCHEDPARAM:
return CONFIG_KEY_SCHEDPARAM;
case KEY_PERSISTENCE:
return CONFIG_KEY_PERSIST;
case KEY_PERSISTTM:
return CONFIG_KEY_PERSISTTM;
case KEY_HELPER:
return CONFIG_KEY_HELPER;
case KEY_LOG:
return CONFIG_KEY_LOG;
case KEY_LOGPREFIX:
return CONFIG_KEY_LOGPREFIX;
case KEY_LOG_RTLIMIT:
return CONFIG_KEY_LOG_RTLIMIT;
case KEY_MARK:
return CONFIG_KEY_MARK;
case KEY_STATE:
return CONFIG_KEY_STATE;
case KEY_BCKS:
return CONFIG_KEY_BCKS;
case KEY_WEIGHT:
return CONFIG_KEY_WEIGHT;
case KEY_PRIORITY:
return CONFIG_KEY_PRIORITY;
case KEY_ACTION:
return CONFIG_KEY_ACTION;
case KEY_LIMITSTTL:
return CONFIG_KEY_LIMITSTTL;
case KEY_NEWRTLIMIT:
return CONFIG_KEY_NEWRTLIMIT;
case KEY_NEWRTLIMITBURST:
return CONFIG_KEY_NEWRTLIMITBURST;
case KEY_NEWRTLIMIT_LOGPREFIX:
return CONFIG_KEY_NEWRTLIMIT_LOGPREFIX;
case KEY_RSTRTLIMIT:
return CONFIG_KEY_RSTRTLIMIT;
case KEY_RSTRTLIMITBURST:
return CONFIG_KEY_RSTRTLIMITBURST;
case KEY_RSTRTLIMIT_LOGPREFIX:
return CONFIG_KEY_RSTRTLIMIT_LOGPREFIX;
case KEY_ESTCONNLIMIT:
return CONFIG_KEY_ESTCONNLIMIT;
case KEY_ESTCONNLIMIT_LOGPREFIX:
return CONFIG_KEY_ESTCONNLIMIT_LOGPREFIX;
case KEY_TCPSTRICT:
return CONFIG_KEY_TCPSTRICT;
case KEY_TCPSTRICT_LOGPREFIX:
return CONFIG_KEY_TCPSTRICT_LOGPREFIX;
case KEY_QUEUE:
return CONFIG_KEY_QUEUE;
case KEY_FLOWOFFLOAD:
return CONFIG_KEY_FLOWOFFLOAD;
case KEY_POLICIES:
return CONFIG_KEY_POLICIES;
case KEY_TYPE:
return CONFIG_KEY_TYPE;
case KEY_TIMEOUT:
return CONFIG_KEY_TIMEOUT;
case KEY_ELEMENTS:
return CONFIG_KEY_ELEMENTS;
case KEY_DATA:
return CONFIG_KEY_DATA;
case KEY_TIME:
return CONFIG_KEY_TIME;
case KEY_SESSIONS:
return CONFIG_KEY_SESSIONS;
case KEY_CLIENT:
return CONFIG_KEY_CLIENT;
case KEY_BACKEND:
return CONFIG_KEY_BACKEND;
case KEY_INTRACONNECT:
return CONFIG_KEY_INTRACONNECT;
default:
return NULL;
}
}
char * obj_print_family(int family)
{
switch (family) {
case VALUE_FAMILY_IPV4:
return CONFIG_VALUE_FAMILY_IPV4;
case VALUE_FAMILY_IPV6:
return CONFIG_VALUE_FAMILY_IPV6;
case VALUE_FAMILY_INET:
return CONFIG_VALUE_FAMILY_INET;
default:
return NULL;
}
}
char * obj_print_mode(int mode)
{
switch (mode) {
case VALUE_MODE_SNAT:
return CONFIG_VALUE_MODE_SNAT;
case VALUE_MODE_DNAT:
return CONFIG_VALUE_MODE_DNAT;
case VALUE_MODE_DSR:
return CONFIG_VALUE_MODE_DSR;
case VALUE_MODE_STLSDNAT:
return CONFIG_VALUE_MODE_STLSDNAT;
case VALUE_MODE_LOCAL:
return CONFIG_VALUE_MODE_LOCAL;
default:
return NULL;
}
}
char * obj_print_proto(int protocol)
{
switch (protocol) {
case VALUE_PROTO_TCP:
return CONFIG_VALUE_PROTO_TCP;
case VALUE_PROTO_UDP:
return CONFIG_VALUE_PROTO_UDP;
case VALUE_PROTO_SCTP:
return CONFIG_VALUE_PROTO_SCTP;
case VALUE_PROTO_ALL:
return CONFIG_VALUE_PROTO_ALL;
default:
return NULL;
}
}
int obj_print_rtlimit(char *buf, int value, int unit)
{
char *unit_str;
buf[0] = '\0';
switch (unit) {
case VALUE_UNIT_MINUTE:
unit_str = CONFIG_VALUE_UNIT_MINUTE;
break;
case VALUE_UNIT_HOUR:
unit_str = CONFIG_VALUE_UNIT_HOUR;
break;
case VALUE_UNIT_DAY:
unit_str = CONFIG_VALUE_UNIT_DAY;
break;
case VALUE_UNIT_WEEK:
unit_str = CONFIG_VALUE_UNIT_WEEK;
break;
case VALUE_UNIT_SECOND:
default:
unit_str = CONFIG_VALUE_UNIT_SECOND;
}
snprintf(buf, MAX_OBJ_VALUE, "%d/%s", value, unit_str);
return EXIT_SUCCESS;
}
char * obj_print_sched(int scheduler)
{
switch (scheduler) {
case VALUE_SCHED_RR:
return CONFIG_VALUE_SCHED_RR;
case VALUE_SCHED_WEIGHT:
return CONFIG_VALUE_SCHED_WEIGHT;
case VALUE_SCHED_HASH:
return CONFIG_VALUE_SCHED_HASH;
case VALUE_SCHED_SYMHASH:
return CONFIG_VALUE_SCHED_SYMHASH;
default:
return NULL;
}
}
void obj_print_meta(int param, char* buf)
{
buf[0] = '\0';
if (param == 0) {
sprintf(buf, "%s", CONFIG_VALUE_META_NONE);
return;
}
if (param & VALUE_META_SRCIP) {
strcat(buf, CONFIG_VALUE_META_SRCIP);
strcat(buf, " ");
}
if (param & VALUE_META_DSTIP) {
strcat(buf, CONFIG_VALUE_META_DSTIP);
strcat(buf, " ");
}
if (param & VALUE_META_SRCPORT) {
strcat(buf, CONFIG_VALUE_META_SRCPORT);
strcat(buf, " ");
}
if (param & VALUE_META_DSTPORT) {
strcat(buf, CONFIG_VALUE_META_DSTPORT);
strcat(buf, " ");
}
if (param & VALUE_META_SRCMAC) {
strcat(buf, CONFIG_VALUE_META_SRCMAC);
strcat(buf, " ");
}
if (param & VALUE_META_DSTMAC) {
strcat(buf, CONFIG_VALUE_META_DSTMAC);
strcat(buf, " ");
}
return;
}
char * obj_print_helper(int helper)
{
switch (helper) {
case VALUE_HELPER_NONE:
return CONFIG_VALUE_HELPER_NONE;
case VALUE_HELPER_FTP:
return CONFIG_VALUE_HELPER_FTP;
case VALUE_HELPER_PPTP:
return CONFIG_VALUE_HELPER_PPTP;
case VALUE_HELPER_SIP:
return CONFIG_VALUE_HELPER_SIP;
case VALUE_HELPER_SNMP:
return CONFIG_VALUE_HELPER_SNMP;
case VALUE_HELPER_TFTP:
return CONFIG_VALUE_HELPER_TFTP;
default:
return NULL;
}
}
void obj_print_log(int log, char* buf)
{
buf[0] = '\0';
if (log == 0) {
sprintf(buf, "%s", CONFIG_VALUE_LOG_NONE);
return;
}
if (log & VALUE_LOG_INPUT)
sprintf(buf, "%s ", CONFIG_VALUE_LOG_INPUT);
if (log & VALUE_LOG_FORWARD) {
strcat(buf, CONFIG_VALUE_LOG_FORWARD);
strcat(buf, " ");
}
if (log & VALUE_LOG_OUTPUT)
strcat(buf, CONFIG_VALUE_LOG_OUTPUT);
return;
}
char * obj_print_state(int state)
{
switch (state) {
case VALUE_STATE_UP:
return CONFIG_VALUE_STATE_UP;
case VALUE_STATE_DOWN:
return CONFIG_VALUE_STATE_DOWN;
case VALUE_STATE_OFF:
return CONFIG_VALUE_STATE_OFF;
case VALUE_STATE_CONFERR:
return CONFIG_VALUE_STATE_CONFERR;
case VALUE_STATE_AVAIL:
return CONFIG_VALUE_STATE_AVAIL;
default:
return NULL;
}
}
char * obj_print_switch(int state)
{
switch (state) {
case VALUE_SWITCH_ON:
return CONFIG_VALUE_SWITCH_ON;
case VALUE_SWITCH_OFF:
return CONFIG_VALUE_SWITCH_OFF;
default:
return NULL;
}
}
int obj_set_attribute(struct config_pair *c, int actionable, int apply_action)
{
int ret = 0;
int action = ACTION_NONE;
tools_printlog(LOG_DEBUG, "%s():%d: actionable is %d", __FUNCTION__, __LINE__, actionable);
switch (c->level) {
case LEVEL_FARMS:
if (!farm_changed(c))
return PARSER_OK;
actionable &= farm_actionable(c);
if (actionable)
action = farm_pre_actionable(c);
ret = farm_set_attribute(c);
if (actionable && ret == PARSER_OK && action != ACTION_NONE)
farm_pos_actionable(c);
break;
case LEVEL_BCKS:
if (!backend_changed(c))
return PARSER_OK;
if (actionable)
action = bck_pre_actionable(c);
ret = backend_set_attribute(c);
if (actionable && action != ACTION_NONE)
bck_pos_actionable(c, action);
break;
case LEVEL_SESSIONS:
if (actionable)
session_pre_actionable(c);
ret = session_set_attribute(c);
if (actionable)
session_pos_actionable(c);
break;
case LEVEL_FARMPOLICY:
if (actionable)
farmpolicy_pre_actionable(c);
ret = farmpolicy_set_attribute(c);
if (actionable)
farmpolicy_pos_actionable(c);
break;
case LEVEL_POLICIES:
if (!policy_changed(c))
return PARSER_OK;
if (actionable)
policy_pre_actionable(c);
ret = policy_set_attribute(c);
if (actionable)
policy_pos_actionable(c);
break;
case LEVEL_ELEMENTS:
ret = element_set_attribute(c, apply_action);
if (actionable)
element_pos_actionable(c, apply_action);
break;
case LEVEL_ADDRESSES:
if (!address_changed(c))
return PARSER_OK;
if (actionable)
address_pre_actionable(c);
ret = address_set_attribute(c);
if (actionable)
address_pos_actionable(c);
break;
case LEVEL_FARMADDRESS:
if (actionable)
action = farmaddress_pre_actionable(c);
ret = farmaddress_set_attribute(c);
if (actionable && action)
farmaddress_pos_actionable(c);
break;
case LEVEL_ADDRESSPOLICY:
if (actionable)
addresspolicy_pre_actionable(c);
ret = addresspolicy_set_attribute(c);
if (actionable)
addresspolicy_pos_actionable(c);
break;
default:
tools_printlog(LOG_ERR, "%s():%d: unknown level %d", __FUNCTION__, __LINE__, c->level);
return PARSER_STRUCT_FAILED;
}
return ret;
}
int obj_set_attribute_string(char *src, char **dst)
{
int size = strlen(src)+1;
*dst = (char *)malloc(size);
if (!*dst) {
tools_printlog(LOG_ERR, "Attribute memory allocation error");
return -1;
}
tools_snprintf(*dst, size-1, src);
return 0;
}
int obj_equ_attribute_string(char *stra, char *strb)
{
return (stra == strb ||
(stra == NULL && strcmp(strb, "") == 0) ||
(stra && strb && strcmp(stra, strb) == 0));
}
void obj_set_attribute_int(int *src, int value)
{
*src = value;
}
int obj_equ_attribute_int(int valuea, int valueb)
{
return valuea == valueb;
}
void obj_print(void)
{
farm_s_print();
policies_s_print();
}
int obj_rulerize(int mode)
{
int out = 0;
obj_config_init();
if (mode == OBJ_START_INV) {
out = farm_s_rulerize();
out = out + address_s_rulerize();
out = out + policy_s_rulerize();
} else {
out = policy_s_rulerize();
out = out + address_s_rulerize();
out = out + farm_s_rulerize();
}
return out;
}
char * obj_print_policy_type(int type)
{
switch (type) {
case VALUE_TYPE_DENY:
return CONFIG_VALUE_POLICIES_TYPE_BL;
case VALUE_TYPE_ALLOW:
return CONFIG_VALUE_POLICIES_TYPE_WL;
default:
return NULL;
}
}
char * obj_print_policy_route(int route)
{
switch (route) {
case VALUE_ROUTE_IN:
return CONFIG_VALUE_ROUTE_IN;
case VALUE_ROUTE_OUT:
return CONFIG_VALUE_ROUTE_OUT;
default:
return NULL;
}
}
void obj_print_verdict(int verdict, char* buf)
{
buf[0] = '\0';
if (verdict == VALUE_VERDICT_NONE) {
strcat(buf, CONFIG_VALUE_VERDICT_NONE);
return;
}
if (verdict & VALUE_VERDICT_LOG) {
strcat(buf, CONFIG_VALUE_VERDICT_LOG);
strcat(buf, " ");
}
if (verdict & VALUE_VERDICT_DROP) {
strcat(buf, CONFIG_VALUE_VERDICT_DROP);
strcat(buf, " ");
}
if (verdict & VALUE_VERDICT_ACCEPT)
strcat(buf, CONFIG_VALUE_VERDICT_ACCEPT);
return;
}
int obj_recovery(void)
{
int reload_err;
if (cmdtry)
return 0;
cmdtry++;
tools_printlog(LOG_ERR, "recovery in progress...");
nft_reset();
policy_s_set_action(ACTION_START);
farm_s_set_reload_start(ACTION_START);
reload_err = obj_rulerize(OBJ_START);
if (!reload_err) {
tools_printlog(LOG_ERR, "nft recovered...");
cmdtry = 0;
return 1;
} else
tools_printlog(LOG_ERR, "recovery not successful...");
return 0;
}
nftlb-1.0.7/src/policies.c 0000664 0000000 0000000 00000020244 14326712445 0015400 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include "policies.h"
#include "elements.h"
#include "objects.h"
#include "config.h"
#include "nft.h"
#include "tools.h"
static struct policy * policy_create(char *name)
{
struct list_head *policies = obj_get_policies();
struct policy *p = (struct policy *)malloc(sizeof(struct policy));
if (!p) {
tools_printlog(LOG_ERR, "Policy memory allocation error");
return NULL;
}
obj_set_attribute_string(name, &p->name);
p->type = DEFAULT_POLICY_TYPE;
p->route = DEFAULT_POLICY_ROUTE;
p->family = DEFAULT_FAMILY;
p->timeout = DEFAULT_POLICY_TIMEOUT;
p->used = 0;
p->logprefix = DEFAULT_POLICY_LOGPREFIX;
p->action = DEFAULT_ACTION;
init_list_head(&p->elements);
p->total_elem = 0;
list_add_tail(&p->list, policies);
obj_set_total_policies(obj_get_total_policies() + 1);
return p;
}
static int policy_delete(struct policy *p)
{
if (!p)
return 0;
list_del(&p->list);
if (p->name)
free(p->name);
if (p->logprefix && strcmp(p->logprefix, DEFAULT_POLICY_LOGPREFIX) != 0)
free(p->logprefix);
free(p);
obj_set_total_policies(obj_get_total_policies() - 1);
return 0;
}
static int policy_set_family(struct policy *p, int new_value)
{
int old_value = p->family;
tools_printlog(LOG_DEBUG, "%s():%d: policy %s old family %d new family %d", __FUNCTION__, __LINE__, p->name, old_value, new_value);
if (new_value != VALUE_FAMILY_IPV4 && new_value != VALUE_FAMILY_IPV6) {
tools_printlog(LOG_INFO, "%s():%d: family %d not supported for policies", __FUNCTION__, __LINE__, new_value);
return 0;
}
if (old_value == new_value) {
tools_printlog(LOG_DEBUG, "%s():%d: family %d without change for policy %s", __FUNCTION__, __LINE__, p->family, p->name);
return 0;
}
p->family = new_value;
return 0;
}
static int policy_set_type(struct policy *p, int new_value)
{
int old_value = p->type;
tools_printlog(LOG_DEBUG, "%s():%d: policy %s old type %d new type %d", __FUNCTION__, __LINE__, p->name, old_value, new_value);
p->type = new_value;
return 0;
}
void policy_print(struct policy *p)
{
tools_printlog(LOG_DEBUG," [policy] ");
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_NAME, p->name);
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_TYPE, obj_print_policy_type(p->type));
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_ROUTE, obj_print_policy_route(p->route));
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_FAMILY, obj_print_family(p->family));
tools_printlog(LOG_DEBUG," [%s] %d", CONFIG_KEY_TIMEOUT, p->timeout);
if (p->logprefix)
tools_printlog(LOG_DEBUG," [%s] %s", CONFIG_KEY_LOGPREFIX, p->logprefix);
tools_printlog(LOG_DEBUG," *[used] %d", p->used);
tools_printlog(LOG_DEBUG," *[total_elem] %d", p->total_elem);
tools_printlog(LOG_DEBUG," *[%s] %d", CONFIG_KEY_ACTION, p->action);
if (p->total_elem != 0)
element_s_print(p);
}
void policies_s_print(void)
{
struct list_head *policies = obj_get_policies();
struct policy *p;
if (!policies)
return;
list_for_each_entry(p, policies, list) {
policy_print(p);
}
}
struct policy * policy_lookup_by_name(const char *name)
{
struct list_head *policies = obj_get_policies();
struct policy *p;
list_for_each_entry(p, policies, list) {
if (strcmp(p->name, name) == 0)
return p;
}
return NULL;
}
int policy_changed(struct config_pair *c)
{
struct policy *p = obj_get_current_policy();
if (!p)
return -1;
syslog(LOG_DEBUG, "%s():%d: policy %s with param %d", __FUNCTION__, __LINE__, p->name, c->key);
switch (c->key) {
case KEY_NAME:
return 1;
break;
case KEY_TYPE:
return !obj_equ_attribute_int(p->type, c->int_value);
break;
case KEY_FAMILY:
return !obj_equ_attribute_int(p->family, c->int_value);
break;
case KEY_TIMEOUT:
return !obj_equ_attribute_int(p->timeout, c->int_value);
break;
case KEY_LOGPREFIX:
return !obj_equ_attribute_string(p->logprefix, c->str_value);
break;
default:
break;
}
return 0;
}
int policy_set_attribute(struct config_pair *c)
{
struct policy *p = obj_get_current_policy();
if (c->key != KEY_NAME && !p)
return PARSER_OBJ_UNKNOWN;
switch (c->key) {
case KEY_NAME:
p = policy_lookup_by_name(c->str_value);
if (!p) {
p = policy_create(c->str_value);
if (!p)
return -1;
policy_set_action(p, ACTION_START);
} else {
policy_set_action(p, ACTION_RELOAD);
}
obj_set_current_policy(p);
break;
case KEY_TYPE:
policy_set_type(p, c->int_value);
break;
case KEY_ROUTE:
p->route = c->int_value;
break;
case KEY_FAMILY:
policy_set_family(p, c->int_value);
break;
case KEY_TIMEOUT:
p->timeout = c->int_value;
break;
case KEY_ACTION:
policy_set_action(p, c->int_value);
break;
case KEY_LOGPREFIX:
if (strcmp(p->logprefix, DEFAULT_POLICY_LOGPREFIX) != 0)
free(p->logprefix);
obj_set_attribute_string(c->str_value, &p->logprefix);
break;
case KEY_USED:
break;
default:
return PARSER_STRUCT_FAILED;
}
return PARSER_OK;
}
int policy_set_action(struct policy *p, int action)
{
tools_printlog(LOG_DEBUG, "%s():%d: policy %s set action %d", __FUNCTION__, __LINE__, p->name, action);
if (p->action == action || (p->action == ACTION_START && action == ACTION_RELOAD))
return 0;
if (action == ACTION_DELETE) {
farm_s_lookup_policy_action(p->name, action);
policy_delete(p);
return 1;
}
if (action == ACTION_STOP || action == ACTION_RELOAD) {
farm_s_lookup_policy_action(p->name, action);
address_s_lookup_policy_action(p->name, action);
}
p->action = action;
return 1;
}
int policy_s_set_action(int action)
{
struct list_head *policies = obj_get_policies();
struct policy *p, *next;
list_for_each_entry_safe(p, next, policies, list)
policy_set_action(p, action);
return 0;
}
int policy_pre_actionable(struct config_pair *c)
{
struct policy *p = obj_get_current_policy();
if (!p)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable policy %s with param %d action is %d", __FUNCTION__, __LINE__, p->name, c->key, p->action);
switch (c->key) {
case KEY_NAME:
break;
case KEY_FAMILY:
case KEY_ROUTE:
case KEY_TIMEOUT:
policy_set_action(p, ACTION_STOP);
break;
case KEY_USED:
break;
case KEY_TYPE:
default:
policy_set_action(p, ACTION_RELOAD);
}
return 0;
}
int policy_pos_actionable(struct config_pair *c)
{
struct policy *p = obj_get_current_policy();
if (!p)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable policy %s with param %d action is %d", __FUNCTION__, __LINE__, p->name, c->key, p->action);
switch (c->key) {
case KEY_NAME:
break;
case KEY_FAMILY:
case KEY_TYPE:
case KEY_ROUTE:
case KEY_TIMEOUT:
policy_set_action(p, ACTION_START);
break;
case KEY_USED:
break;
default:
policy_set_action(p, ACTION_RELOAD);
}
return 0;
}
int policy_rulerize(struct policy *p)
{
int ret = 0;
tools_printlog(LOG_DEBUG, "%s():%d: rulerize policy %s", __FUNCTION__, __LINE__, p->name);
policy_print(p);
if (p->action == ACTION_NONE) {
tools_printlog(LOG_INFO, "%s():%d: policy %s won't be rulerized", __FUNCTION__, __LINE__, p->name);
return 0;
}
ret = nft_rulerize_policies(p);
element_s_delete(p);
return ret;
}
int policy_s_rulerize(void)
{
struct policy *p;
int ret = 0;
int output = 0;
tools_printlog(LOG_DEBUG, "%s():%d: rulerize all policies", __FUNCTION__, __LINE__);
struct list_head *policies = obj_get_policies();
list_for_each_entry(p, policies, list) {
ret = policy_rulerize(p);
output = output || ret;
}
return output;
}
nftlb-1.0.7/src/sbuffer.c 0000664 0000000 0000000 00000005121 14326712445 0015222 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include "sbuffer.h"
#include "tools.h"
int get_buf_size(struct sbuffer *buf)
{
return buf->size;
}
char * get_buf_next(struct sbuffer *buf)
{
return buf->data + buf->next;
}
int resize_buf(struct sbuffer *buf, int times)
{
char *pbuf;
int newsize;
if (times == 0)
return 0;
newsize = buf->size + (times * EXTRA_SIZE) + 1;
if (!buf->data)
return 1;
pbuf = (char *) realloc(buf->data, newsize);
if (!pbuf)
return 1;
buf->data = pbuf;
buf->size = newsize;
return 0;
}
int create_buf(struct sbuffer *buf)
{
buf->size = 0;
buf->next = 0;
buf->data = (char *) calloc(1, DEFAULT_BUFFER_SIZE);
if (!buf->data) {
return 1;
}
*buf->data = '\0';
buf->size = DEFAULT_BUFFER_SIZE;
return 0;
}
int isempty_buf(struct sbuffer *buf)
{
return (buf->data[0] == 0);
}
char *get_buf_data(struct sbuffer *buf)
{
return buf->data;
}
int clean_buf(struct sbuffer *buf)
{
if (buf->data)
free(buf->data);
buf->size = 0;
buf->next = 0;
return 0;
}
int reset_buf(struct sbuffer *buf)
{
buf->data[0] = 0;
buf->next = 0;
return 0;
}
int concat_buf_va(struct sbuffer *buf, int len, char *fmt, va_list args)
{
int times = 0;
char *pnext;
if (buf->next + len >= buf->size)
times = ((buf->next + len - buf->size) / EXTRA_SIZE) + 1;
if (resize_buf(buf, times)) {
tools_printlog(LOG_ERR, "Error resizing the buffer %d times from a size of %d!", times, buf->size);
return 1;
}
pnext = get_buf_next(buf);
vsnprintf(pnext, len + 1, fmt, args);
buf->next += len;
return 0;
}
int concat_buf(struct sbuffer *buf, char *fmt, ...)
{
int len;
va_list args;
va_start(args, fmt);
len = vsnprintf(0, 0, fmt, args);
va_end(args);
va_start(args, fmt);
concat_buf_va(buf, len, fmt, args);
va_end(args);
return 0;
}
nftlb-1.0.7/src/server.c 0000664 0000000 0000000 00000055371 14326712445 0015110 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include "server.h"
#include "config.h"
#include "nft.h"
#include "events.h"
#include "sbuffer.h"
#include "tools.h"
#define SRV_MAX_BUF 1024
#define SRV_MAX_HEADER 300
#define SRV_MAX_IDENT 200
#define SRV_KEY_LENGTH 16
#define SRV_PORT_DEF "5555"
#define STR_GET_ACTION "GET"
#define STR_POST_ACTION "POST"
#define STR_PUT_ACTION "PUT"
#define STR_DELETE_ACTION "DELETE"
#define STR_PATCH_ACTION "PATCH"
#define HTTP_PROTO "HTTP/1.1 "
#define HTTP_LINE_END "\r\n"
#define HTTP_HEADER_CONTENTLEN "Content-Length: "
#define HTTP_HEADER_KEY "Key: "
extern struct ev_io *srv_accept;
enum ws_methods {
WS_GET_ACTION,
WS_POST_ACTION,
WS_PUT_ACTION,
WS_DELETE_ACTION,
WS_PATCH_ACTION,
};
enum ws_responses {
WS_HTTP_500, // internal server error
WS_HTTP_400, // bad request
WS_HTTP_401, // unauthorized
WS_HTTP_404, // not found
WS_HTTP_200, // ok
};
struct nftlb_http_state {
enum ws_methods method;
char uri[SRV_MAX_IDENT];
char *body;
enum ws_responses status_code;
char *body_response;
};
static const char *ws_str_responses[] = {
HTTP_PROTO "500 Internal Server Error" HTTP_LINE_END,
HTTP_PROTO "400 Bad Request" HTTP_LINE_END,
HTTP_PROTO "401 Unauthorized" HTTP_LINE_END,
HTTP_PROTO "404 Not Found" HTTP_LINE_END,
HTTP_PROTO "200 OK" HTTP_LINE_END,
};
struct nftlb_server {
char *key;
int family;
char *host;
char *port;
int sd;
};
static struct nftlb_server nftserver = {
.family = AF_INET,
.host = NULL,
.port = NULL,
};
static int parse_to_http_status(int code)
{
switch (code) {
case PARSER_OK:
case PARSER_IDEM_VALUE:
return WS_HTTP_200;
case PARSER_STRUCT_FAILED:
case PARSER_VALID_FAILED:
return WS_HTTP_400;
case PARSER_OBJ_UNKNOWN:
return WS_HTTP_404;
case PARSER_FAILED:
default:
return WS_HTTP_500;
}
}
static int auth_key(const char *recvkey)
{
return (strcmp(nftserver.key, recvkey) == 0);
}
static int get_request(int fd, struct sbuffer *buf, struct nftlb_http_state *state)
{
char method[SRV_MAX_IDENT] = {0};
char strkey[SRV_MAX_IDENT] = {0};
int contlength = 0;
int times = 0;
int total_read_size = 0;
char *ptr;
int size;
int head;
int bytes_left;
int cont_100 = 0;
if ((ptr = strstr(get_buf_data(buf), "Key: ")) == NULL) {
state->status_code = WS_HTTP_401;
return -1;
}
sscanf(ptr, "Key: %199[^\r\n]", strkey);
if (!auth_key(strkey)) {
state->status_code = WS_HTTP_401;
return -1;
}
sscanf(get_buf_data(buf), "%199[^ ] %199[^ ] ", method, state->uri);
tools_printlog(LOG_NOTICE, "%s():%d: request: %s %s", __FUNCTION__, __LINE__, method, state->uri);
if (strncmp(method, STR_GET_ACTION, 4) == 0) {
state->method = WS_GET_ACTION;
} else if (strncmp(method, STR_POST_ACTION, 5) == 0) {
state->method = WS_POST_ACTION;
} else if (strncmp(method, STR_PUT_ACTION, 4) == 0) {
state->method = WS_PUT_ACTION;
} else if (strncmp(method, STR_DELETE_ACTION, 7) == 0) {
state->method = WS_DELETE_ACTION;
} else if (strncmp(method, STR_PATCH_ACTION, 6) == 0) {
state->method = WS_PATCH_ACTION;
} else {
state->status_code = parse_to_http_status(PARSER_STRUCT_FAILED);
return -1;
}
if (state->method == WS_GET_ACTION)
return 0;
state->body = strstr(get_buf_data(buf), "\r\n\r\n");
if (!state->body) {
tools_printlog(LOG_ERR, "Not found body section in the request");
state->status_code = parse_to_http_status(PARSER_STRUCT_FAILED);
return -1;
}
state->body += 4;
head = state->body - get_buf_data(buf);
if ((ptr = strstr(get_buf_data(buf), "Expect: 100-continue")) != NULL) {
cont_100 = 1;
send(fd, "HTTP/1.1 100 Continue\r\n\r\n", 25, 0);
}
if ((ptr = strstr(get_buf_data(buf), "Content-Length: ")) != NULL) {
sscanf(ptr, "Content-Length: %i[^\r\n]", &contlength);
if (head + contlength >= get_buf_size(buf))
times = ((head + contlength - get_buf_size(buf)) / EXTRA_SIZE) + 1;
if (times == 0)
goto receive;
if (resize_buf(buf, times)) {
tools_printlog(LOG_ERR, "Error resizing the buffer %d times from a size of %d!", times, get_buf_size(buf));
state->status_code = WS_HTTP_500;
return -1;
}
}
receive:
state->body = get_buf_data(buf) + head;
total_read_size = get_buf_next(buf) - state->body;
while ((total_read_size < contlength) || cont_100) {
cont_100 = 0;
bytes_left = EXTRA_SIZE;
if (contlength - total_read_size < EXTRA_SIZE)
bytes_left = contlength - total_read_size;
if (bytes_left <= 0)
goto final;
size = recv(fd, get_buf_next(buf), bytes_left, 0);
if (size <= 0)
goto final;
buf->next += size;
total_read_size += size;
}
final:
concat_buf(buf, "\0");
return 0;
}
static int init_http_state(struct nftlb_http_state *state)
{
state->body_response = malloc(SRV_MAX_BUF);
if (!state->body_response) {
state->status_code = parse_to_http_status(PARSER_STRUCT_FAILED);
return -1;
}
return 0;
}
static int fin_http_state(struct nftlb_http_state *state)
{
if (state->body_response)
free(state->body_response);
return 0;
}
static int send_get_response(struct nftlb_http_state *state)
{
char firstlevel[SRV_MAX_IDENT] = {0};
char secondlevel[SRV_MAX_IDENT] = {0};
char thirdlevel[SRV_MAX_IDENT] = {0};
char fourthlevel[SRV_MAX_IDENT] = {0};
int ret = PARSER_STRUCT_FAILED;
sscanf(state->uri, "/%199[^/]/%199[^/]/%199[^/]/%199[^\n]",
firstlevel, secondlevel, thirdlevel, fourthlevel);
if (strcmp(firstlevel, CONFIG_KEY_FARMS) == 0) {
if (strcmp(thirdlevel, CONFIG_KEY_SESSIONS) == 0)
ret = config_print_farm_sessions(&state->body_response, secondlevel);
else if (strcmp(thirdlevel, "") == 0)
ret = config_print_farms(&state->body_response, secondlevel);
} else if (strcmp(firstlevel, CONFIG_KEY_POLICIES) == 0)
ret = config_print_policies(&state->body_response, secondlevel);
else if (strcmp(firstlevel, CONFIG_KEY_ADDRESSES) == 0)
ret = config_print_addresses(&state->body_response, secondlevel);
state->status_code = parse_to_http_status(ret);
if (ret) {
config_print_response(&state->body_response, "%s%s", "invalid request",
config_get_output());
config_delete_output();
}
return 0;
}
static int send_delete_response(struct nftlb_http_state *state)
{
char firstlevel[SRV_MAX_IDENT] = {0};
char secondlevel[SRV_MAX_IDENT] = {0};
char thirdlevel[SRV_MAX_IDENT] = {0};
char fourthlevel[SRV_MAX_IDENT] = {0};
char fifthlevel[SRV_MAX_IDENT] = {0};
char message[SRV_MAX_IDENT] = {0};
int ret = PARSER_OK;
sscanf(state->uri, "/%199[^/]/%199[^/]/%199[^/]/%199[^/]/%199[^\n]",
firstlevel, secondlevel, thirdlevel, fourthlevel, fifthlevel);
if (strcmp(firstlevel, CONFIG_KEY_FARMS) != 0 &&
strcmp(firstlevel, CONFIG_KEY_POLICIES) != 0 &&
strcmp(firstlevel, CONFIG_KEY_ADDRESSES) != 0) {
snprintf(message, SRV_MAX_IDENT, "%s", "invalid request");
ret = PARSER_OBJ_UNKNOWN;
goto delete_end;
}
snprintf(message, SRV_MAX_IDENT, "%s", "success");
if (strlen(state->body) == 0) {
if (strcmp(firstlevel, CONFIG_KEY_FARMS) == 0 &&
strcmp(thirdlevel, CONFIG_KEY_BCKS) == 0 &&
strcmp(fifthlevel, CONFIG_KEY_SESSIONS) == 0) {
ret = config_set_session_backend_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_DELETE);
if (ret)
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting sessions from backend");
} else if (strcmp(firstlevel, CONFIG_KEY_FARMS) == 0 &&
strcmp(thirdlevel, CONFIG_KEY_BCKS) == 0) {
ret = config_set_backend_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_DELETE);
if (ret)
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting backend");
} else if (strcmp(firstlevel, CONFIG_KEY_FARMS) == 0 &&
strcmp(thirdlevel, CONFIG_KEY_SESSIONS) == 0) {
ret = config_set_session_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_STOP);
if (ret)
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting session");
} else if (strcmp(firstlevel, CONFIG_KEY_FARMS) == 0 &&
strcmp(thirdlevel, CONFIG_KEY_ADDRESSES) == 0) {
config_set_farm_action(secondlevel, CONFIG_VALUE_ACTION_RELOAD);
ret = config_set_farmaddress_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_STOP);
if (ret) {
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting farm address");
goto delete_end;
}
obj_rulerize(OBJ_START);
config_set_farmaddress_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_DELETE);
} else if (strcmp(firstlevel, CONFIG_KEY_FARMS) == 0 &&
strcmp(thirdlevel, CONFIG_KEY_POLICIES) == 0) {
config_set_farm_action(secondlevel, CONFIG_VALUE_ACTION_RELOAD);
ret = config_set_fpolicy_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_STOP);
if (ret) {
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting farm policy");
goto delete_end;
}
obj_rulerize(OBJ_START);
config_set_farm_action(secondlevel, CONFIG_VALUE_ACTION_RELOAD);
config_set_fpolicy_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_DELETE);
} else if (strcmp(firstlevel, CONFIG_KEY_POLICIES) == 0 &&
strcmp(thirdlevel, CONFIG_KEY_ELEMENTS) == 0) {
ret = config_get_elements(secondlevel);
if (ret) {
snprintf(message, SRV_MAX_IDENT, "%s", "could not get the policy elements");
goto delete_end;
}
// subnet support
if (strcmp(fifthlevel,"") != 0 &&
(strlen(fourthlevel) + strlen(fifthlevel) + 1 < SRV_MAX_IDENT)) {
strcat(fourthlevel, "/");
strcat(fourthlevel, fifthlevel);
}
ret = config_set_element_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_STOP);
if (ret) {
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting policy element");
config_delete_elements(secondlevel);
goto delete_end;
}
if (strcmp(fourthlevel, "") != 0) {
config_set_policy_action(secondlevel, CONFIG_VALUE_ACTION_RELOAD);
ret = config_set_element_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_STOP);
if (ret) {
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting policy element");
config_delete_elements(secondlevel);
goto delete_end;
}
} else {
config_set_policy_action(secondlevel, CONFIG_VALUE_ACTION_FLUSH);
config_set_element_action(secondlevel, fourthlevel, CONFIG_VALUE_ACTION_NONE);
}
obj_rulerize(OBJ_START);
config_delete_elements(secondlevel);
} else if (strcmp(firstlevel, CONFIG_KEY_FARMS) == 0 &&
strcmp(thirdlevel, "") == 0) {
ret = config_set_farm_action(secondlevel, CONFIG_VALUE_ACTION_STOP);
if (ret) {
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting farm");
goto delete_end;
}
obj_rulerize(OBJ_START);
config_set_farm_action(secondlevel, CONFIG_VALUE_ACTION_DELETE);
} else if (strcmp(firstlevel, CONFIG_KEY_POLICIES) == 0 &&
strcmp(thirdlevel, "") == 0) {
ret = config_set_policy_action(secondlevel, CONFIG_VALUE_ACTION_STOP);
if (ret) {
snprintf(message, SRV_MAX_IDENT, "%s", "error stopping policy");
goto delete_end;
}
obj_rulerize(OBJ_START_INV);
ret = config_set_policy_action(secondlevel, CONFIG_VALUE_ACTION_DELETE);
if (ret)
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting policy");
} else if (strcmp(firstlevel, CONFIG_KEY_ADDRESSES) == 0 &&
strcmp(thirdlevel, "") == 0) {
ret = config_set_address_action(secondlevel, CONFIG_VALUE_ACTION_STOP);
if (ret) {
snprintf(message, SRV_MAX_IDENT, "%s", "error stopping address");
goto delete_end;
}
obj_rulerize(OBJ_START_INV);
ret = config_set_address_action(secondlevel, CONFIG_VALUE_ACTION_DELETE);
if (ret)
snprintf(message, SRV_MAX_IDENT, "%s", "error deleting address");
} else {
snprintf(message, SRV_MAX_IDENT, "%s", "invalid request");
ret = PARSER_STRUCT_FAILED;
}
} else {
ret = config_buffer(state->body, ACTION_STOP);
switch (ret) {
case PARSER_OK:
break;
case PARSER_STRUCT_FAILED:
snprintf(message, SRV_MAX_IDENT, "%s", "the structure is invalid");
goto delete_end;
case PARSER_OBJ_UNKNOWN:
snprintf(message, SRV_MAX_IDENT, "%s", "the object to modify is unknown");
goto delete_end;
default:
snprintf(message, SRV_MAX_IDENT, "%s", "error parsing buffer");
goto delete_end;
}
if (obj_rulerize(OBJ_START)) {
snprintf(message, SRV_MAX_IDENT, "%s", "error generating rules");
ret = PARSER_FAILED;
}
}
delete_end:
config_print_response(&state->body_response, "%s%s", message, config_get_output());
config_delete_output();
state->status_code = parse_to_http_status(ret);
return 0;
}
static int send_post_response(struct nftlb_http_state *state)
{
char firstlevel[SRV_MAX_IDENT] = {0};
char message[SRV_MAX_IDENT] = {0};
int ret = 0;
sscanf(state->uri, "/%199[^\n]", firstlevel);
if ((strcmp(firstlevel, CONFIG_KEY_FARMS) != 0) &&
(strcmp(firstlevel, CONFIG_KEY_POLICIES) != 0) &&
(strcmp(firstlevel, CONFIG_KEY_ADDRESSES) != 0)) {
snprintf(message, SRV_MAX_IDENT, "%s", "invalid request");
ret = PARSER_OBJ_UNKNOWN;
goto post_end;
}
snprintf(message, SRV_MAX_IDENT, "%s", "success");
ret = config_buffer(state->body, ACTION_START);
switch (ret) {
case PARSER_OK:
break;
case PARSER_STRUCT_FAILED:
snprintf(message, SRV_MAX_IDENT, "%s", "the structure is invalid");
goto post_end;
case PARSER_OBJ_UNKNOWN:
snprintf(message, SRV_MAX_IDENT, "%s", "the object to modify is unknown");
goto post_end;
default:
snprintf(message, SRV_MAX_IDENT, "%s", "error parsing buffer");
goto post_end;
}
if (obj_rulerize(OBJ_START)) {
snprintf(message, SRV_MAX_IDENT, "%s", "error generating rules");
ret = PARSER_FAILED;
}
post_end:
config_print_response(&state->body_response, "%s%s", message, config_get_output());
config_delete_output();
state->status_code = parse_to_http_status(ret);
return 0;
}
static int send_patch_response(struct nftlb_http_state *state)
{
char firstlevel[SRV_MAX_IDENT] = {0};
char secondlevel[SRV_MAX_IDENT] = {0};
char thirdlevel[SRV_MAX_IDENT] = {0};
char message[SRV_MAX_IDENT] = {0};
int ret = 0;
sscanf(state->uri, "/%199[^/]/%199[^/]/%199[^\n]",
firstlevel, secondlevel, thirdlevel);
if ((strcmp(firstlevel, CONFIG_KEY_POLICIES) != 0) &&
(strcmp(thirdlevel, CONFIG_KEY_ELEMENTS) != 0)) {
snprintf(message, SRV_MAX_IDENT, "%s", "invalid request");
ret = PARSER_OBJ_UNKNOWN;
goto patch_end;
}
if (config_check_policy(secondlevel) != PARSER_OK) {
snprintf(message, SRV_MAX_IDENT, "%s", "the object to modify is unknown");
ret = PARSER_OBJ_UNKNOWN;
goto patch_end;
}
snprintf(message, SRV_MAX_IDENT, "%s", "success");
ret = config_buffer(state->body, ACTION_START);
switch (ret) {
case PARSER_OK:
break;
case PARSER_STRUCT_FAILED:
snprintf(message, SRV_MAX_IDENT, "%s", "the structure is invalid");
goto patch_end;
case PARSER_OBJ_UNKNOWN:
snprintf(message, SRV_MAX_IDENT, "%s", "the object to modify is unknown");
goto patch_end;
default:
snprintf(message, SRV_MAX_IDENT, "%s", "error parsing buffer");
goto patch_end;
}
config_set_policy_action(secondlevel, CONFIG_VALUE_ACTION_FLUSH);
if (obj_rulerize(OBJ_START)) {
snprintf(message, SRV_MAX_IDENT, "%s", "error generating rules");
ret = PARSER_FAILED;
}
patch_end:
config_print_response(&state->body_response, "%s%s", message, config_get_output());
config_delete_output();
state->status_code = parse_to_http_status(ret);
return 0;
}
static int send_response(struct nftlb_http_state *state)
{
switch (state->method) {
case WS_GET_ACTION:
return send_get_response(state);
case WS_POST_ACTION:
case WS_PUT_ACTION:
return send_post_response(state);
case WS_DELETE_ACTION:
return send_delete_response(state);
case WS_PATCH_ACTION:
return send_patch_response(state);
default:
return -1;
}
}
/* If client doesn't send us anything in 30 seconds, close connection. */
#define NFTLB_CLIENT_TIMEOUT 30
struct nftlb_client {
struct ev_io io;
struct ev_timer timer;
struct sockaddr_storage addr;
};
static char *nftlb_client_address(struct sockaddr_storage *addr, char *str)
{
unsigned short port;
if (!addr) {
str[0] = 0;
return str;
}
switch (addr->ss_family)
{
case AF_INET6:
port = htons(((struct sockaddr_in6 *)addr)->sin6_port);
sprintf(str,"%s:%hu",inet_ntop(addr->ss_family,
&(((struct sockaddr_in6 *)addr)->sin6_addr), str,
INET6_ADDRSTRLEN + 6),port);
break;
case AF_INET:
port = htons(((struct sockaddr_in *)addr)->sin_port);
sprintf(str,"%s:%hu",inet_ntop(addr->ss_family,
&(((struct sockaddr_in *)addr)->sin_addr), str,
INET6_ADDRSTRLEN + 6),port);
break;
default:
break;
}
return str;
}
static void nftlb_client_release(struct ev_loop *loop, struct nftlb_client *cli)
{
ev_io_stop(loop, &cli->io);
close(cli->io.fd);
free(cli);
}
static void nftlb_http_send_response(struct ev_io *io,
struct nftlb_http_state *state, int size)
{
char response[SRV_MAX_HEADER];
sprintf(response, "%s%s%d%s%s", ws_str_responses[state->status_code],
HTTP_HEADER_CONTENTLEN, size,
HTTP_LINE_END, HTTP_LINE_END);
send(io->fd, response, strlen(response), 0);
}
static void nftlb_read_cb(struct ev_loop *loop, struct ev_io *io, int revents)
{
struct sbuffer buf;
struct nftlb_http_state state;
struct nftlb_client *cli;
ssize_t size;
char cli_address[INET6_ADDRSTRLEN + 6]; //max address length + port length
if (EV_ERROR & revents) {
tools_printlog(LOG_ERR, "Server got invalid event from client read");
return;
}
cli = container_of(io, struct nftlb_client, io);
create_buf(&buf);
size = recv(io->fd, get_buf_data(&buf), DEFAULT_BUFFER_SIZE - 1, 0);
if (size < 0)
return;
buf.next = size;
if (size == 0) {
tools_printlog(LOG_DEBUG, "connection closed by client %s\n",
nftlb_client_address(&cli->addr, cli_address));
goto end_no_state;
}
if (init_http_state(&state))
goto end_no_state;
if (get_request(io->fd, &buf, &state) < 0) {
nftlb_http_send_response(io, &state, 0);
goto end;
}
if (send_response(&state) < 0) {
nftlb_http_send_response(io, &state, 0);
goto end;
}
nftlb_http_send_response(io, &state, strlen(state.body_response));
send(io->fd, state.body_response, strlen(state.body_response), 0);
tools_printlog(LOG_DEBUG, "connection closed by server %s\n",
nftlb_client_address(&cli->addr, cli_address));
end:
fin_http_state(&state);
end_no_state:
clean_buf(&buf);
ev_timer_stop(loop, &cli->timer);
nftlb_client_release(loop, cli);
return;
}
static void nftlb_timer_cb(struct ev_loop *loop, ev_timer *timer, int events)
{
struct nftlb_client *cli;
char cli_address[INET6_ADDRSTRLEN + 6]; //max address length + port length
cli = container_of(timer, struct nftlb_client, timer);
tools_printlog(LOG_ERR, "timeout for client %s\n",
nftlb_client_address(&cli->addr, cli_address));
nftlb_client_release(loop, cli);
}
static void accept_cb(struct ev_loop *loop, struct ev_io *io, int revents)
{
struct sockaddr_storage client_addr;
socklen_t addrlen = sizeof(client_addr);
struct nftlb_client *cli;
int client_sd;
if (EV_ERROR & revents) {
tools_printlog(LOG_ERR, "Server got an invalid event from client");
return;
}
client_sd = accept(io->fd, (struct sockaddr *)&client_addr, &addrlen);
if (client_sd < 0) {
tools_printlog(LOG_ERR, "Server accept error");
return;
}
cli = malloc(sizeof(struct nftlb_client));
if (!cli) {
tools_printlog(LOG_ERR, "No memory available to allocate new client");
return;
}
memcpy(&cli->addr, &client_addr, sizeof(cli->addr));
ev_io_init(&cli->io, nftlb_read_cb, client_sd, EV_READ);
ev_io_start(loop, &cli->io);
ev_timer_init(&cli->timer, nftlb_timer_cb, NFTLB_CLIENT_TIMEOUT, 0.);
ev_timer_start(loop, &cli->timer);
}
int server_init(void)
{
struct addrinfo hints = {};
struct addrinfo *result;
const char *host;
const char *port;
struct ev_loop *st_ev_loop = get_loop();
struct ev_io *st_ev_accept = events_create_srv();
int server_sd;
int yes = 1, s;
if (!nftserver.key)
server_set_key(NULL);
printf("Key: %s\n", nftserver.key);
if (nftserver.host == NULL)
switch(nftserver.family) {
case AF_INET:
host = "0.0.0.0";
break;
case AF_INET6:
host = "::";
break;
default:
host = INADDR_ANY;
break;
}
else
host = nftserver.host;
if (nftserver.port == NULL)
port = SRV_PORT_DEF;
else
port = nftserver.port;
hints.ai_family = AF_UNSPEC; /* Allow IPv4 or IPv6 */
hints.ai_socktype = SOCK_STREAM; /* Datagram socket */
hints.ai_flags = AI_PASSIVE; /* For wildcard IP address */
s = getaddrinfo(host, port, &hints, &result);
if (s != 0) {
tools_printlog(LOG_ERR, "getaddrinfo: %s\n", gai_strerror(s));
return -1;
}
server_sd = socket(result->ai_family, SOCK_STREAM, 0);
if (server_sd < 0) {
tools_printlog(LOG_ERR, "Server socket error");
return -1;
}
setsockopt(server_sd, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(int));
if (bind(server_sd, result->ai_addr, result->ai_addrlen) != 0) {
tools_printlog(LOG_ERR, "Server bind error");
freeaddrinfo(result);
return -1;
}
freeaddrinfo(result);
if (listen(server_sd, 2) < 0) {
tools_printlog(LOG_ERR, "Server listen error");
return -1;
}
nftserver.sd = server_sd;
ev_io_init(st_ev_accept, accept_cb, server_sd, EV_READ);
ev_io_start(st_ev_loop, st_ev_accept);
return 0;
}
void server_fini(void)
{
events_delete_srv();
close(nftserver.sd);
}
void server_set_host(const char *host)
{
nftserver.host = malloc(strlen(host)+1);
if (!nftserver.host) {
tools_printlog(LOG_ERR, "No memory available to allocate the server host");
return;
}
sprintf(nftserver.host, "%s", host);
}
void server_set_port(const char *port)
{
nftserver.port = malloc(strlen(port)+1);
if (!nftserver.port) {
tools_printlog(LOG_ERR, "No memory available to allocate the server port");
return;
}
sprintf(nftserver.port, "%s", port);
}
void server_set_key(char *key)
{
int i;
if (!nftserver.key) {
nftserver.key = (char *)malloc(SRV_MAX_IDENT);
if (!nftserver.key) {
tools_printlog(LOG_ERR, "No memory available to allocate the server key");
return;
}
}
if (!key) {
srand((unsigned int) time(0) + getpid());
for (i = 0; i < SRV_KEY_LENGTH; ++i)
nftserver.key[i] = rand() % 94 + 33;
nftserver.key[i] = '\0';
} else
snprintf(nftserver.key, SRV_MAX_IDENT, "%s", key);
}
void server_set_ipv6(void)
{
nftserver.family = AF_INET6;
}
nftlb-1.0.7/src/sessions.c 0000664 0000000 0000000 00000025562 14326712445 0015447 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include
#include "sessions.h"
#include "farms.h"
#include "farmaddress.h"
#include "objects.h"
#include "tools.h"
#include "nft.h"
static struct session * session_create(struct farm *f, int type, char *client, char *bck, char *expiration)
{
struct session *s;
struct backend *b;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s type %d client %s bck %s expiration %s", __FUNCTION__, __LINE__, f->name, type, client, bck, expiration);
if (!client || strcmp(client, "") == 0) {
tools_printlog(LOG_ERR, "%s():%d: missing data", __FUNCTION__, __LINE__);
return NULL;
}
s = (struct session *)malloc(sizeof(struct session));
if (!s) {
tools_printlog(LOG_ERR, "Session memory allocation error");
return NULL;
}
s->f = f;
obj_set_attribute_string(client, &s->client);
s->state = VALUE_STATE_OFF;
s->action = ACTION_NONE;
s->bck = NULL;
if (!bck || strcmp(bck, "") == 0 )
goto cont;
switch (f->mode) {
case VALUE_MODE_DNAT:
case VALUE_MODE_SNAT:
if ((b = backend_lookup_by_key(f, KEY_MARK, NULL, (int) strtol(bck, NULL, 16))) != NULL)
s->bck = b;
break;
case VALUE_MODE_DSR:
if ((b = backend_lookup_by_key(f, KEY_ETHADDR, bck, 0)) != NULL)
s->bck = b;
break;
case VALUE_MODE_STLSDNAT:
if ((b = backend_lookup_by_key(f, KEY_IPADDR, bck, 0)) != NULL)
s->bck = b;
break;
default:
break;
}
cont:
s->expiration = DEFAULT_SESSION_EXPIRATION;
if (type == SESSION_TYPE_TIMED) {
s->state = VALUE_STATE_UP;
list_add_tail(&s->list, &f->timed_sessions);
f->total_timed_sessions++;
obj_set_attribute_string(expiration, &s->expiration);
} else {
list_add_tail(&s->list, &f->static_sessions);
f->total_static_sessions++;
}
return s;
}
static int nft_parse_sessions(struct farm *f, const char *buf)
{
char *ini_ptr = NULL;
char *fin_ptr = NULL;
char elem_client[100] = {0};
char elem_exp[100] = {0};
char elem_bck[100] = {0};
int next, to_found;
ini_ptr = strstr(buf, "elements = { ");
if (ini_ptr == NULL)
return 0;
ini_ptr += 13;
new_session:
next = 0;
to_found = 0;
if ((fin_ptr = strstr(ini_ptr, " timeout ")) != NULL) {
tools_snprintf(elem_client, fin_ptr - ini_ptr, ini_ptr);
to_found = 1;
}
if ((fin_ptr = strstr(ini_ptr, " expires ")) != NULL) {
if (!to_found)
tools_snprintf(elem_client, fin_ptr - ini_ptr, ini_ptr);
fin_ptr += 9;
ini_ptr = fin_ptr;
} else
return 0;
if ((fin_ptr = strstr(ini_ptr, " : ")) != NULL) {
tools_snprintf(elem_exp, fin_ptr - ini_ptr, ini_ptr);
fin_ptr += 3;
ini_ptr = fin_ptr;
} else
return 0;
if ((fin_ptr = strstr(ini_ptr, ",")) != NULL) {
next = 1;
} else {
if ((fin_ptr = strstr(ini_ptr, " ")) == NULL)
return 0;
}
tools_snprintf(elem_bck, fin_ptr - ini_ptr, ini_ptr);
fin_ptr += 1;
ini_ptr = fin_ptr;
session_create(f, SESSION_TYPE_TIMED, elem_client, elem_bck, elem_exp);
while (*fin_ptr == '\n' || *fin_ptr == '\t' || *fin_ptr == ' ') {
fin_ptr++;
}
if (next && (*fin_ptr != '}' || *fin_ptr != '\0')) {
ini_ptr = fin_ptr;
goto new_session;
}
return 0;
}
static int session_delete_node(struct session *s, int type)
{
tools_printlog(LOG_DEBUG, "%s():%d: client %s", __FUNCTION__, __LINE__, s->client);
list_del(&s->list);
if (type == SESSION_TYPE_STATIC)
s->f->total_static_sessions--;
else
s->f->total_timed_sessions--;
if (s->client)
free(s->client);
if (s->expiration)
free(s->expiration);
free(s);
return 0;
}
int session_set_action(struct session *s, int type, int action)
{
tools_printlog(LOG_DEBUG, "%s():%d: session %s action is %d - new action %d", __FUNCTION__, __LINE__, s->client, s->action, action);
if (s->action == action)
return 0;
if (action == ACTION_DELETE) {
session_delete_node(s, type);
return 1;
}
if ((action == ACTION_STOP || action == ACTION_DELETE) && s->state == VALUE_STATE_UP) {
s->action = action;
s->state = VALUE_STATE_OFF;
return 1;
}
if (action == ACTION_START && s->state != VALUE_STATE_UP && s->bck != NULL) {
s->action = action;
s->state = VALUE_STATE_UP;
return 1;
}
if (action == ACTION_RELOAD && s->state == VALUE_STATE_UP && s->bck != NULL) {
s->action = action;
}
return 0;
}
struct session * session_lookup_by_key(struct farm *f, int type, int key, const char *name)
{
struct session *s;
struct list_head *sessions;
if (type == SESSION_TYPE_TIMED)
sessions = &f->timed_sessions;
else
sessions = &f->static_sessions;
list_for_each_entry(s, sessions, list) {
switch (key) {
case KEY_CLIENT:
if (strcmp(s->client, name) == 0)
return s;
break;
default:
return NULL;
}
}
return NULL;
}
int session_s_delete(struct farm *f, int type)
{
struct list_head *sessions;
struct session *s;
struct session *next;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s type %d", __FUNCTION__, __LINE__, f->name, type);
if (type == SESSION_TYPE_TIMED)
sessions = &f->timed_sessions;
else
sessions = &f->static_sessions;
list_for_each_entry_safe(s, next, sessions, list)
session_delete_node(s, type);
return 0;
}
int session_s_set_action(struct farm *f, struct backend *b, int action)
{
struct session *s, *next;
int ret = 0;
if (f->total_static_sessions != 0)
list_for_each_entry_safe(s, next, &f->static_sessions, list)
if (!b || (b && s->bck == b))
ret += session_set_action(s, SESSION_TYPE_STATIC, action);
if (f->total_timed_sessions != 0)
list_for_each_entry_safe(s, next, &f->timed_sessions, list)
if (!b || (b && s->bck == b))
ret += session_set_action(s, SESSION_TYPE_TIMED, action);
return ret;
}
void session_s_print(struct farm *f)
{
struct session *s;
list_for_each_entry(s, &f->static_sessions, list) {
tools_printlog(LOG_DEBUG," [session] ");
tools_printlog(LOG_DEBUG," [client] %s", s->client);
if (!s->bck)
tools_printlog(LOG_DEBUG," [backend] %s", UNDEFINED_VALUE);
else
tools_printlog(LOG_DEBUG," [backend] %s", s->bck->name);
tools_printlog(LOG_DEBUG," *[state] %s", obj_print_state(s->state));
tools_printlog(LOG_DEBUG," *[action] %d", s->action);
}
list_for_each_entry(s, &f->timed_sessions, list) {
tools_printlog(LOG_DEBUG," [session] ");
tools_printlog(LOG_DEBUG," [client] %s", s->client);
if (!s->bck)
tools_printlog(LOG_DEBUG," [backend] %s", UNDEFINED_VALUE);
else
tools_printlog(LOG_DEBUG," [backend] %s", s->bck->name);
tools_printlog(LOG_DEBUG," [expiration] %s", s->expiration);
tools_printlog(LOG_DEBUG," *[state] %s", obj_print_state(s->state));
tools_printlog(LOG_DEBUG," *[action] %d", s->action);
}
}
int session_get_timed(struct farm *f)
{
struct farmaddress *fa;
struct nftst *n = nftst_create_from_farm(f);
const char *buf;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s", __FUNCTION__, __LINE__, f->name);
f->total_timed_sessions = 0;
list_for_each_entry(fa, &f->addresses, list) {
nftst_set_address(n, fa->address);
nftst_set_action(n, fa->action);
nft_get_rules_buffer(&buf, KEY_SESSIONS, n);
nft_parse_sessions(f, buf);
nft_del_rules_buffer(buf);
}
session_s_print(f);
nftst_delete(n);
return 0;
}
int session_get_client(struct session *s, char **parsed)
{
sprintf(*parsed, "%s", s->client);
return 1;
}
int session_backend_action(struct farm *f, struct backend *b, int action)
{
struct session *s, *next;
int hastimed = f->total_timed_sessions;
tools_printlog(LOG_DEBUG, "%s():%d: farm %s backend %s action %d", __FUNCTION__, __LINE__, f->name, b->name, action);
if (f->total_static_sessions != 0) {
list_for_each_entry_safe(s, next, &f->static_sessions, list) {
if (s->bck &&
(((f->mode == VALUE_MODE_DNAT || f->mode == VALUE_MODE_SNAT || f->mode == VALUE_MODE_LOCAL) && backend_get_mark(b) == backend_get_mark(s->bck)) ||
((f->mode == VALUE_MODE_DSR || f->mode == VALUE_MODE_STLSDNAT) && b == s->bck)))
session_set_action(s, SESSION_TYPE_STATIC, action);
}
}
if (!hastimed)
session_get_timed(f);
if (f->total_timed_sessions != 0) {
list_for_each_entry_safe(s, next, &f->timed_sessions, list) {
if (s->bck &&
((farm_is_ingress_mode(f) && b == s->bck) ||
obj_equ_attribute_int(backend_get_mark(b), backend_get_mark(s->bck)))) {
session_set_action(s, SESSION_TYPE_TIMED, action);
}
}
}
if (!hastimed)
session_s_delete(f, SESSION_TYPE_TIMED);
return 0;
}
int session_set_attribute(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
struct session *s = obj_get_current_session();
struct backend *b = obj_get_current_backend();
if (!f || (c->key != KEY_CLIENT && !s))
return PARSER_OBJ_UNKNOWN;
switch (c->key) {
case KEY_CLIENT:
s = session_lookup_by_key(f, SESSION_TYPE_STATIC, KEY_CLIENT, c->str_value);
if (!s) {
s = session_create(f, SESSION_TYPE_STATIC, c->str_value, NULL, NULL);
if (!s)
return PARSER_FAILED;
}
obj_set_current_session(s);
break;
case KEY_BACKEND:
b = backend_lookup_by_key(f, KEY_NAME, c->str_value, 0);
if (!b)
return PARSER_OBJ_UNKNOWN;
s->bck = b;
if (session_set_action(s, SESSION_TYPE_STATIC, ACTION_START))
farm_set_action(f, ACTION_RELOAD);
break;
default:
return -1;
}
return PARSER_OK;
}
int session_pre_actionable(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
struct session *s = obj_get_current_session();
if (!f || !s)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pre actionable session farm %s", __FUNCTION__, __LINE__, f->name);
switch (c->key) {
case KEY_CLIENT:
break;
case KEY_BACKEND:
if (session_set_action(s, SESSION_TYPE_STATIC, ACTION_STOP)) {
farm_set_action(f, ACTION_RELOAD);
farm_rulerize(f);
}
break;
default:
break;
}
return 0;
}
int session_pos_actionable(struct config_pair *c)
{
struct farm *f = obj_get_current_farm();
struct session *s = obj_get_current_session();
if (!f || !s)
return -1;
tools_printlog(LOG_DEBUG, "%s():%d: pos actionable session %s of farm %s with param %d", __FUNCTION__, __LINE__, s->client, f->name, c->key);
switch (c->key) {
case KEY_CLIENT:
break;
case KEY_BACKEND:
if (session_set_action(s, SESSION_TYPE_STATIC, ACTION_START)) {
farm_set_action(f, ACTION_RELOAD);
farm_rulerize(f);
}
break;
default:
break;
}
return 0;
}
nftlb-1.0.7/src/tools.c 0000664 0000000 0000000 00000004362 14326712445 0014734 0 ustar 00root root 0000000 0000000 /*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see
#include
#include "tools.h"
int log_output;
int log_level;
void tools_snprintf(char *strdst, int size, char *strsrc)
{
for (int i = 0; i < size; i++) {
strdst[i] = *(strsrc + i);
}
strdst[size] = '\0';
}
void tools_log_set_level(int loglevel)
{
log_level = loglevel;
setlogmask(LOG_UPTO(loglevel));
}
int tools_log_get_level(void)
{
return log_level;
}
void tools_log_set_output(int output)
{
switch (output) {
case VALUE_LOG_OUTPUT_STDOUT:
log_output = NFTLB_LOG_OUTPUT_STDOUT;
break;
case VALUE_LOG_OUTPUT_STDERR:
log_output = NFTLB_LOG_OUTPUT_STDERR;
break;
case VALUE_LOG_OUTPUT_SYSOUT:
log_output = NFTLB_LOG_OUTPUT_SYSLOG | NFTLB_LOG_OUTPUT_STDOUT;
break;
case VALUE_LOG_OUTPUT_SYSERR:
log_output = NFTLB_LOG_OUTPUT_SYSLOG | NFTLB_LOG_OUTPUT_STDERR;
break;
case VALUE_LOG_OUTPUT_SYSLOG:
default:
log_output = NFTLB_LOG_OUTPUT_SYSLOG;
}
return;
}
int tools_printlog(int loglevel, char *fmt, ...)
{
va_list args;
if (log_output & NFTLB_LOG_OUTPUT_STDOUT && loglevel <= log_level) {
va_start(args, fmt);
vfprintf(stdout, fmt, args);
fprintf(stdout, "\n");
va_end(args);
}
if (log_output & NFTLB_LOG_OUTPUT_STDERR && loglevel <= log_level) {
va_start(args, fmt);
vfprintf(stderr, fmt, args);
fprintf(stderr, "\n");
va_end(args);
}
if (log_output & NFTLB_LOG_OUTPUT_SYSLOG) {
va_start(args, fmt);
vsyslog(loglevel, fmt, args);
va_end(args);
}
return 0;
}
nftlb-1.0.7/tests/ 0000775 0000000 0000000 00000000000 14326712445 0013776 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/001_snat_ipv4_tcp_weight/ 0000775 0000000 0000000 00000000000 14326712445 0020502 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/001_snat_ipv4_tcp_weight/input.json 0000664 0000000 0000000 00000000775 14326712445 0022545 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/001_snat_ipv4_tcp_weight/output.nft 0000664 0000000 0000000 00000002267 14326712445 0022562 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/002_snat_ipv4_tcp_weight_serial/ 0000775 0000000 0000000 00000000000 14326712445 0022042 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/002_snat_ipv4_tcp_weight_serial/input.json 0000664 0000000 0000000 00000000627 14326712445 0024101 0 ustar 00root root 0000000 0000000 { "farms" : [ { "name" : "lb01", "family" : "ipv4", "virtual-addr" : "192.168.0.100", "virtual-ports" : "80", "mode" : "snat", "protocol" : "tcp", "scheduler" : "weight", "state" : "up", "backends" : [ { "name" : "bck0", "ip-addr" : "192.168.0.10", "weight" : "5", "priority" : "1", "state" : "up" }, { "name" : "bck1", "ip-addr" : "192.168.0.12", "weight" : "5", "priority" : "1", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/002_snat_ipv4_tcp_weight_serial/output.nft 0000664 0000000 0000000 00000002267 14326712445 0024122 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.12 }
}
}
nftlb-1.0.7/tests/003_snat_ipv4_tcp_weight_multi/ 0000775 0000000 0000000 00000000000 14326712445 0021716 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/003_snat_ipv4_tcp_weight_multi/input.json 0000664 0000000 0000000 00000001743 14326712445 0023755 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
},
{
"name" : "lb02",
"family" : "ipv4",
"virtual-addr" : "192.168.0.101",
"virtual-ports" : "82",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "rr",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.12",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.13",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/003_snat_ipv4_tcp_weight_multi/output.nft 0000664 0000000 0000000 00000003027 14326712445 0023771 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01,
tcp . 192.168.0.101 . 82 : goto filter-lb02 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01,
tcp . 192.168.0.101 . 82 : goto nat-lb02 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
chain filter-lb02 {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000003, 5-9 : 0x00000004 }
}
chain nat-lb02 {
ip protocol tcp dnat to ct mark map { 0x00000003 : 192.168.0.12, 0x00000004 : 192.168.0.13 }
}
}
nftlb-1.0.7/tests/004_dsr_ipv4_tcp_hash/ 0000775 0000000 0000000 00000000000 14326712445 0017764 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/004_dsr_ipv4_tcp_hash/input.json 0000664 0000000 0000000 00000001300 14326712445 0022010 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/004_dsr_ipv4_tcp_hash/output.nft 0000664 0000000 0000000 00000000731 14326712445 0022036 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/005_dsr_ipv6_udp_rr/ 0000775 0000000 0000000 00000000000 14326712445 0017471 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/005_dsr_ipv6_udp_rr/input.json 0000664 0000000 0000000 00000001303 14326712445 0021520 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv6",
"virtual-addr" : "2001:db8:0:1:1:1:1:1",
"ether-addr" : "01:01:01:01:01:01",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "udp",
"scheduler" : "rr",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "2001:db8:0:1:1:1:1:2",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "2001:db8:0:1:1:1:1:3",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"iface" : "lo",
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/005_dsr_ipv6_udp_rr/output.nft 0000664 0000000 0000000 00000000737 14326712445 0021551 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services6-lo {
type inet_proto . ipv6_addr . inet_service : verdict
elements = { udp . 2001:db8:0:1:1:1:1:1 . 80 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip6 nexthdr . ip6 daddr . th dport vmap @proto-services6-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set numgen inc mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/006_dsr_ipv46_tcp_udp_hash_weight_multi/ 0000775 0000000 0000000 00000000000 14326712445 0023505 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/006_dsr_ipv46_tcp_udp_hash_weight_multi/input.json 0000664 0000000 0000000 00000002555 14326712445 0025546 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.1.22",
"ether-addr" : "01:01:01:01:01:01",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "2001:db8:0:1:1:1:1:2",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "2001:db8:0:1:1:1:1:3",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"iface" : "lo",
"oface" : "lo"
},
{
"name" : "lb02",
"family" : "ipv6",
"iface" : "lo",
"oface" : "lo",
"virtual-addr" : "2001:db8:0:1:1:1:1:1",
"ether-addr" : "01:01:01:01:01:04",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "udp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "2001:db8:0:1:1:1:1:2",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "2001:db8:0:1:1:1:1:3",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"iface" : "lo",
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/006_dsr_ipv46_tcp_udp_hash_weight_multi/output.nft 0000664 0000000 0000000 00000001510 14326712445 0025553 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.22 . 80 : goto lb01 }
}
map proto-services6-lo {
type inet_proto . ipv6_addr . inet_service : verdict
elements = { udp . 2001:db8:0:1:1:1:1:1 . 80 : goto lb02 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
ip6 nexthdr . ip6 daddr . th dport vmap @proto-services6-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
chain lb02 {
ether saddr set 01:01:01:01:01:04 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/007_snat_ipv4_tcp_weight_prio/ 0000775 0000000 0000000 00000000000 14326712445 0021541 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/007_snat_ipv4_tcp_weight_prio/input.json 0000664 0000000 0000000 00000002221 14326712445 0023570 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "192.168.0.12",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck3",
"ip-addr" : "192.168.0.13",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck4",
"ip-addr" : "192.168.0.14",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck5",
"ip-addr" : "192.168.0.15",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck6",
"ip-addr" : "192.168.0.16",
"weight" : "5",
"priority" : "2",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/007_snat_ipv4_tcp_weight_prio/output.nft 0000664 0000000 0000000 00000002425 14326712445 0023615 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000004, 15-19 : 0x80000006 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11, 0x80000004 : 192.168.0.13, 0x80000006 : 192.168.0.15 }
}
}
nftlb-1.0.7/tests/008_snat_ipv4_all_rr/ 0000775 0000000 0000000 00000000000 14326712445 0017627 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/008_snat_ipv4_all_rr/input.json 0000664 0000000 0000000 00000002207 14326712445 0021662 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"mode" : "snat",
"protocol" : "all",
"scheduler" : "rr",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "192.168.0.12",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck3",
"ip-addr" : "192.168.0.13",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck4",
"ip-addr" : "192.168.0.14",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck5",
"ip-addr" : "192.168.0.15",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck6",
"ip-addr" : "192.168.0.16",
"weight" : "5",
"priority" : "2",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/008_snat_ipv4_all_rr/output.nft 0000664 0000000 0000000 00000002550 14326712445 0021702 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.0.100 : goto filter-lb01,
udp . 192.168.0.100 : goto filter-lb01,
sctp . 192.168.0.100 : goto filter-lb01 }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.0.100 : goto nat-lb01,
udp . 192.168.0.100 : goto nat-lb01,
sctp . 192.168.0.100 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000004, 15-19 : 0x80000006 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11, 0x80000004 : 192.168.0.13, 0x80000006 : 192.168.0.15 }
}
}
nftlb-1.0.7/tests/009_snat_ipv4_multiport_symhash/ 0000775 0000000 0000000 00000000000 14326712445 0022150 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/009_snat_ipv4_multiport_symhash/input.json 0000664 0000000 0000000 00000002225 14326712445 0024203 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80,81",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "symhash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "192.168.0.12",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck3",
"ip-addr" : "192.168.0.13",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck4",
"ip-addr" : "192.168.0.14",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck5",
"ip-addr" : "192.168.0.15",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck6",
"ip-addr" : "192.168.0.16",
"weight" : "5",
"priority" : "2",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/009_snat_ipv4_multiport_symhash/output.nft 0000664 0000000 0000000 00000002566 14326712445 0024232 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01,
tcp . 192.168.0.100 . 81 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01,
tcp . 192.168.0.100 . 81 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set symhash mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000004, 15-19 : 0x80000006 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11, 0x80000004 : 192.168.0.13, 0x80000006 : 192.168.0.15 }
}
}
nftlb-1.0.7/tests/010_dsr_ipv4_multiport_tcp_symhash/ 0000775 0000000 0000000 00000000000 14326712445 0022631 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/010_dsr_ipv4_multiport_tcp_symhash/input.json 0000664 0000000 0000000 00000001306 14326712445 0024663 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80-88",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "symhash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/010_dsr_ipv4_multiport_tcp_symhash/output.nft 0000664 0000000 0000000 00000001502 14326712445 0024700 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01,
tcp . 192.168.0.100 . 81 : goto lb01,
tcp . 192.168.0.100 . 82 : goto lb01,
tcp . 192.168.0.100 . 83 : goto lb01,
tcp . 192.168.0.100 . 84 : goto lb01,
tcp . 192.168.0.100 . 85 : goto lb01,
tcp . 192.168.0.100 . 86 : goto lb01,
tcp . 192.168.0.100 . 87 : goto lb01,
tcp . 192.168.0.100 . 88 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set symhash mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/011_dnat_ipv4_multiportlist_symhash/ 0000775 0000000 0000000 00000000000 14326712445 0023016 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/011_dnat_ipv4_multiportlist_symhash/input.json 0000664 0000000 0000000 00000002236 14326712445 0025053 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80-88,90-95,96",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "symhash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "192.168.0.12",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck3",
"ip-addr" : "192.168.0.13",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck4",
"ip-addr" : "192.168.0.14",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck5",
"ip-addr" : "192.168.0.15",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck6",
"ip-addr" : "192.168.0.16",
"weight" : "5",
"priority" : "2",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/011_dnat_ipv4_multiportlist_symhash/output.nft 0000664 0000000 0000000 00000005430 14326712445 0025071 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01,
tcp . 192.168.0.100 . 81 : goto filter-lb01,
tcp . 192.168.0.100 . 82 : goto filter-lb01,
tcp . 192.168.0.100 . 83 : goto filter-lb01,
tcp . 192.168.0.100 . 84 : goto filter-lb01,
tcp . 192.168.0.100 . 85 : goto filter-lb01,
tcp . 192.168.0.100 . 86 : goto filter-lb01,
tcp . 192.168.0.100 . 87 : goto filter-lb01,
tcp . 192.168.0.100 . 88 : goto filter-lb01,
tcp . 192.168.0.100 . 90 : goto filter-lb01,
tcp . 192.168.0.100 . 91 : goto filter-lb01,
tcp . 192.168.0.100 . 92 : goto filter-lb01,
tcp . 192.168.0.100 . 93 : goto filter-lb01,
tcp . 192.168.0.100 . 94 : goto filter-lb01,
tcp . 192.168.0.100 . 95 : goto filter-lb01,
tcp . 192.168.0.100 . 96 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01,
tcp . 192.168.0.100 . 81 : goto nat-lb01,
tcp . 192.168.0.100 . 82 : goto nat-lb01,
tcp . 192.168.0.100 . 83 : goto nat-lb01,
tcp . 192.168.0.100 . 84 : goto nat-lb01,
tcp . 192.168.0.100 . 85 : goto nat-lb01,
tcp . 192.168.0.100 . 86 : goto nat-lb01,
tcp . 192.168.0.100 . 87 : goto nat-lb01,
tcp . 192.168.0.100 . 88 : goto nat-lb01,
tcp . 192.168.0.100 . 90 : goto nat-lb01,
tcp . 192.168.0.100 . 91 : goto nat-lb01,
tcp . 192.168.0.100 . 92 : goto nat-lb01,
tcp . 192.168.0.100 . 93 : goto nat-lb01,
tcp . 192.168.0.100 . 94 : goto nat-lb01,
tcp . 192.168.0.100 . 95 : goto nat-lb01,
tcp . 192.168.0.100 . 96 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set symhash mod 20 map { 0-4 : 0x00000001, 5-9 : 0x00000002, 10-14 : 0x00000004, 15-19 : 0x00000006 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11, 0x00000004 : 192.168.0.13, 0x00000006 : 192.168.0.15 }
}
}
nftlb-1.0.7/tests/012_dnat_ipv4_tcp_hash/ 0000775 0000000 0000000 00000000000 14326712445 0020121 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/012_dnat_ipv4_tcp_hash/input.json 0000664 0000000 0000000 00000000773 14326712445 0022162 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/012_dnat_ipv4_tcp_hash/output.nft 0000664 0000000 0000000 00000002270 14326712445 0022173 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/013_dnat_ipv4_tcp_weighted_rr/ 0000775 0000000 0000000 00000000000 14326712445 0021502 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/013_dnat_ipv4_tcp_weighted_rr/input.json 0000664 0000000 0000000 00000001612 14326712445 0023534 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.101",
"virtual-ports" : "80",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "2",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "1",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "192.168.0.12",
"weight" : "1",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck3",
"ip-addr" : "192.168.0.13",
"weight" : "2",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck4",
"ip-addr" : "192.168.0.14",
"weight" : "1",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/013_dnat_ipv4_tcp_weighted_rr/output.nft 0000664 0000000 0000000 00000002471 14326712445 0023557 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 7 map { 0-1 : 0x00000001, 2 : 0x00000002, 3 : 0x00000003, 4-5 : 0x00000004, 6 : 0x00000005 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11, 0x00000003 : 192.168.0.12, 0x00000004 : 192.168.0.13, 0x00000005 : 192.168.0.14 }
}
}
nftlb-1.0.7/tests/014_stlsdnat_ipv4_multiportlist_symhash/ 0000775 0000000 0000000 00000000000 14326712445 0023727 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/014_stlsdnat_ipv4_multiportlist_symhash/input.json 0000664 0000000 0000000 00000003016 14326712445 0025761 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.154",
"virtual-ports" : "80-88,90-95,96",
"mode" : "stlsdnat",
"protocol" : "tcp",
"scheduler" : "symhash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "192.168.0.12",
"ether-addr" : "04:04:04:04:04:04",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck3",
"ip-addr" : "192.168.0.13",
"ether-addr" : "05:05:05:05:05:05",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck4",
"ip-addr" : "192.168.0.14",
"ether-addr" : "06:06:06:06:06:06",
"weight" : "5",
"priority" : "2",
"state" : "up"
},
{
"name" : "bck5",
"ip-addr" : "192.168.0.15",
"ether-addr" : "07:07:07:07:07:07",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck6",
"ip-addr" : "192.168.0.16",
"ether-addr" : "08:08:08:08:08:08",
"weight" : "5",
"priority" : "2",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/014_stlsdnat_ipv4_multiportlist_symhash/output.nft 0000664 0000000 0000000 00000011761 14326712445 0026006 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 80 : goto lb01-back,
tcp . 192.168.0.11 . 80 : goto lb01-back,
tcp . 192.168.0.13 . 80 : goto lb01-back,
tcp . 192.168.0.15 . 80 : goto lb01-back,
tcp . 192.168.0.10 . 81 : goto lb01-back,
tcp . 192.168.0.11 . 81 : goto lb01-back,
tcp . 192.168.0.13 . 81 : goto lb01-back,
tcp . 192.168.0.15 . 81 : goto lb01-back,
tcp . 192.168.0.10 . 82 : goto lb01-back,
tcp . 192.168.0.11 . 82 : goto lb01-back,
tcp . 192.168.0.13 . 82 : goto lb01-back,
tcp . 192.168.0.15 . 82 : goto lb01-back,
tcp . 192.168.0.10 . 83 : goto lb01-back,
tcp . 192.168.0.11 . 83 : goto lb01-back,
tcp . 192.168.0.13 . 83 : goto lb01-back,
tcp . 192.168.0.15 . 83 : goto lb01-back,
tcp . 192.168.0.10 . 84 : goto lb01-back,
tcp . 192.168.0.11 . 84 : goto lb01-back,
tcp . 192.168.0.13 . 84 : goto lb01-back,
tcp . 192.168.0.15 . 84 : goto lb01-back,
tcp . 192.168.0.10 . 85 : goto lb01-back,
tcp . 192.168.0.11 . 85 : goto lb01-back,
tcp . 192.168.0.13 . 85 : goto lb01-back,
tcp . 192.168.0.15 . 85 : goto lb01-back,
tcp . 192.168.0.10 . 86 : goto lb01-back,
tcp . 192.168.0.11 . 86 : goto lb01-back,
tcp . 192.168.0.13 . 86 : goto lb01-back,
tcp . 192.168.0.15 . 86 : goto lb01-back,
tcp . 192.168.0.10 . 87 : goto lb01-back,
tcp . 192.168.0.11 . 87 : goto lb01-back,
tcp . 192.168.0.13 . 87 : goto lb01-back,
tcp . 192.168.0.15 . 87 : goto lb01-back,
tcp . 192.168.0.10 . 88 : goto lb01-back,
tcp . 192.168.0.11 . 88 : goto lb01-back,
tcp . 192.168.0.13 . 88 : goto lb01-back,
tcp . 192.168.0.15 . 88 : goto lb01-back,
tcp . 192.168.0.10 . 90 : goto lb01-back,
tcp . 192.168.0.11 . 90 : goto lb01-back,
tcp . 192.168.0.13 . 90 : goto lb01-back,
tcp . 192.168.0.15 . 90 : goto lb01-back,
tcp . 192.168.0.10 . 91 : goto lb01-back,
tcp . 192.168.0.11 . 91 : goto lb01-back,
tcp . 192.168.0.13 . 91 : goto lb01-back,
tcp . 192.168.0.15 . 91 : goto lb01-back,
tcp . 192.168.0.10 . 92 : goto lb01-back,
tcp . 192.168.0.11 . 92 : goto lb01-back,
tcp . 192.168.0.13 . 92 : goto lb01-back,
tcp . 192.168.0.15 . 92 : goto lb01-back,
tcp . 192.168.0.10 . 93 : goto lb01-back,
tcp . 192.168.0.11 . 93 : goto lb01-back,
tcp . 192.168.0.13 . 93 : goto lb01-back,
tcp . 192.168.0.15 . 93 : goto lb01-back,
tcp . 192.168.0.10 . 94 : goto lb01-back,
tcp . 192.168.0.11 . 94 : goto lb01-back,
tcp . 192.168.0.13 . 94 : goto lb01-back,
tcp . 192.168.0.15 . 94 : goto lb01-back,
tcp . 192.168.0.10 . 95 : goto lb01-back,
tcp . 192.168.0.11 . 95 : goto lb01-back,
tcp . 192.168.0.13 . 95 : goto lb01-back,
tcp . 192.168.0.15 . 95 : goto lb01-back,
tcp . 192.168.0.10 . 96 : goto lb01-back,
tcp . 192.168.0.11 . 96 : goto lb01-back,
tcp . 192.168.0.13 . 96 : goto lb01-back,
tcp . 192.168.0.15 . 96 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.154 . 80 : goto lb01,
tcp . 192.168.0.154 . 81 : goto lb01,
tcp . 192.168.0.154 . 82 : goto lb01,
tcp . 192.168.0.154 . 83 : goto lb01,
tcp . 192.168.0.154 . 84 : goto lb01,
tcp . 192.168.0.154 . 85 : goto lb01,
tcp . 192.168.0.154 . 86 : goto lb01,
tcp . 192.168.0.154 . 87 : goto lb01,
tcp . 192.168.0.154 . 88 : goto lb01,
tcp . 192.168.0.154 . 90 : goto lb01,
tcp . 192.168.0.154 . 91 : goto lb01,
tcp . 192.168.0.154 . 92 : goto lb01,
tcp . 192.168.0.154 . 93 : goto lb01,
tcp . 192.168.0.154 . 94 : goto lb01,
tcp . 192.168.0.154 . 95 : goto lb01,
tcp . 192.168.0.154 . 96 : goto lb01 }
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.154 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set symhash mod 20 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11, 10-14 : 192.168.0.13, 15-19 : 192.168.0.15 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03, 192.168.0.13 : 05:05:05:05:05:05, 192.168.0.15 : 07:07:07:07:07:07 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
}
}
nftlb-1.0.7/tests/015_stlsdnat_ipv4_tcp_hash/ 0000775 0000000 0000000 00000000000 14326712445 0021032 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/015_stlsdnat_ipv4_tcp_hash/input.json 0000664 0000000 0000000 00000001305 14326712445 0023063 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "stlsdnat",
"protocol" : "tcp",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/015_stlsdnat_ipv4_tcp_hash/output.nft 0000664 0000000 0000000 00000002272 14326712445 0023106 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 80 : goto lb01-back,
tcp . 192.168.0.11 . 80 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set jhash ip saddr mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
}
}
nftlb-1.0.7/tests/016_stlsdnat_ipv4_tcp_weighted_rr/ 0000775 0000000 0000000 00000000000 14326712445 0022413 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/016_stlsdnat_ipv4_tcp_weighted_rr/input.json 0000664 0000000 0000000 00000002421 14326712445 0024444 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.101",
"virtual-ports" : "80",
"mode" : "stlsdnat",
"protocol" : "tcp",
"scheduler" : "weight",
"iface" : "lo",
"oface" : "lo",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "2",
"priority" : "1",
"state" : "up",
"oface" : "lo"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "1",
"priority" : "1",
"state" : "up",
"oface" : "lo"
},
{
"name" : "bck2",
"ip-addr" : "192.168.0.12",
"ether-addr" : "04:04:04:04:04:04",
"weight" : "1",
"priority" : "1",
"state" : "up",
"oface" : "lo"
},
{
"name" : "bck3",
"ip-addr" : "192.168.0.13",
"ether-addr" : "05:05:05:05:05:05",
"weight" : "2",
"priority" : "1",
"state" : "up",
"oface" : "lo"
},
{
"name" : "bck4",
"ip-addr" : "192.168.0.14",
"ether-addr" : "06:06:06:06:06:06",
"weight" : "1",
"priority" : "1",
"state" : "up",
"oface" : "lo"
}
],
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/016_stlsdnat_ipv4_tcp_weighted_rr/output.nft 0000664 0000000 0000000 00000002754 14326712445 0024474 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 80 : goto lb01-back,
tcp . 192.168.0.11 . 80 : goto lb01-back,
tcp . 192.168.0.12 . 80 : goto lb01-back,
tcp . 192.168.0.13 . 80 : goto lb01-back,
tcp . 192.168.0.14 . 80 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 80 : goto lb01 }
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.56.101 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set numgen random mod 7 map { 0-1 : 192.168.0.10, 2 : 192.168.0.11, 3 : 192.168.0.12, 4-5 : 192.168.0.13, 6 : 192.168.0.14 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03, 192.168.0.12 : 04:04:04:04:04:04, 192.168.0.13 : 05:05:05:05:05:05, 192.168.0.14 : 06:06:06:06:06:06 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
}
}
nftlb-1.0.7/tests/017_snat_ipv4_tcp_ftp_weight/ 0000775 0000000 0000000 00000000000 14326712445 0021362 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/017_snat_ipv4_tcp_ftp_weight/input.json 0000664 0000000 0000000 00000001022 14326712445 0023407 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"helper" : "ftp",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/017_snat_ipv4_tcp_ftp_weight/output.nft 0000664 0000000 0000000 00000002441 14326712445 0023434 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper ftp-tcp {
type "ftp" protocol tcp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ip protocol tcp ct helper set "ftp-tcp"
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/018_dnat_ipv4_udp_sip_rr_multiport/ 0000775 0000000 0000000 00000000000 14326712445 0022623 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/018_dnat_ipv4_udp_sip_rr_multiport/input.json 0000664 0000000 0000000 00000001053 14326712445 0024654 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.154",
"virtual-ports" : "5060-5066",
"mode" : "dnat",
"protocol" : "udp",
"scheduler" : "rr",
"helper" : "sip",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.22",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.23",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/018_dnat_ipv4_udp_sip_rr_multiport/output.nft 0000664 0000000 0000000 00000003662 14326712445 0024703 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper sip-udp {
type "sip" protocol udp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.56.154 . 5060 : goto filter-lb01,
udp . 192.168.56.154 . 5061 : goto filter-lb01,
udp . 192.168.56.154 . 5062 : goto filter-lb01,
udp . 192.168.56.154 . 5063 : goto filter-lb01,
udp . 192.168.56.154 . 5064 : goto filter-lb01,
udp . 192.168.56.154 . 5065 : goto filter-lb01,
udp . 192.168.56.154 . 5066 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.56.154 . 5060 : goto nat-lb01,
udp . 192.168.56.154 . 5061 : goto nat-lb01,
udp . 192.168.56.154 . 5062 : goto nat-lb01,
udp . 192.168.56.154 . 5063 : goto nat-lb01,
udp . 192.168.56.154 . 5064 : goto nat-lb01,
udp . 192.168.56.154 . 5065 : goto nat-lb01,
udp . 192.168.56.154 . 5066 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ip protocol udp ct helper set "sip-udp"
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol udp dnat to ct mark map { 0x00000001 : 192.168.0.22, 0x00000002 : 192.168.0.23 }
}
}
nftlb-1.0.7/tests/019_dnat_ipv6_udp_tftp_rr/ 0000775 0000000 0000000 00000000000 14326712445 0020671 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/019_dnat_ipv6_udp_tftp_rr/input.json 0000664 0000000 0000000 00000001332 14326712445 0022722 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv6",
"iface" : "lo",
"oface" : "lo",
"virtual-addr" : "2001:db8:0:1:1:1:1:1",
"ether-addr" : "01:01:01:01:01:01",
"virtual-ports" : "69",
"mode" : "dnat",
"protocol" : "udp",
"helper" : "tftp",
"scheduler" : "rr",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "2001:db8:0:1:1:1:1:2",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "2001:db8:0:1:1:1:1:3",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/019_dnat_ipv6_udp_tftp_rr/output.nft 0000664 0000000 0000000 00000002511 14326712445 0022741 0 ustar 00root root 0000000 0000000 table ip6 nftlb {
ct helper tftp-udp {
type "tftp" protocol udp
l3proto ip6
}
map filter-proto-services6 {
type inet_proto . ipv6_addr . inet_service : verdict
elements = { udp . 2001:db8:0:1:1:1:1:1 . 69 : goto filter-lb01 }
}
map nat-proto-services6 {
type inet_proto . ipv6_addr . inet_service : verdict
elements = { udp . 2001:db8:0:1:1:1:1:1 . 69 : goto nat-lb01 }
}
map services6-back-m {
type mark : ipv6_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip6 nexthdr . ip6 daddr . th dport vmap @filter-proto-services6
}
chain filter-lb01 {
ip6 nexthdr udp ct helper set "tftp-udp"
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip6 nexthdr . ip6 daddr . th dport vmap @nat-proto-services6
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services6-back-m
}
chain nat-lb01 {
ip6 nexthdr udp dnat to ct mark map { 0x00000001 : 2001:db8:0:1:1:1:1:2, 0x00000002 : 2001:db8:0:1:1:1:1:3 }
}
}
nftlb-1.0.7/tests/020_snat_ipv4_tcp_rr_log/ 0000775 0000000 0000000 00000000000 14326712445 0020500 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/020_snat_ipv4_tcp_rr_log/input.json 0000664 0000000 0000000 00000001112 14326712445 0022525 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.1.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "rr",
"log" : "input forward output",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up",
"mark" : "0x200"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up",
"mark" : "0x201"
}
]
}
]
}
nftlb-1.0.7/tests/020_snat_ipv4_tcp_rr_log/output.nft 0000664 0000000 0000000 00000002774 14326712445 0022563 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
map forward-proto-services {
type mark : verdict
elements = { 0x80000200 : goto forward-lb01, 0x80000201 : goto forward-lb01 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x80000200, 5-9 : 0x80000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
log prefix "IN-lb01 "
ip protocol tcp dnat to ct mark map { 0x80000200 : 192.168.0.10, 0x80000201 : 192.168.0.11 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-lb01 {
log prefix "FWD-lb01 "
}
}
nftlb-1.0.7/tests/021_dsr_ipv4_tcp_hash_log/ 0000775 0000000 0000000 00000000000 14326712445 0020624 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/021_dsr_ipv4_tcp_hash_log/input.json 0000664 0000000 0000000 00000001324 14326712445 0022656 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"log" : "input",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/021_dsr_ipv4_tcp_hash_log/output.nft 0000664 0000000 0000000 00000000757 14326712445 0022706 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
log prefix "IN-lb01 " ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/022_dnat_ipv4_tcp_weight_farm_mark/ 0000775 0000000 0000000 00000000000 14326712445 0022505 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/022_dnat_ipv4_tcp_weight_farm_mark/input.json 0000664 0000000 0000000 00000001023 14326712445 0024533 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "weight",
"mark" : "0xdead",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/022_dnat_ipv4_tcp_weight_farm_mark/output.nft 0000664 0000000 0000000 00000002267 14326712445 0024565 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x0000dead, 5-9 : 0x0000deaf }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x0000dead : 192.168.0.10, 0x0000deaf : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/023_snat_ipv4_tcp_weight_farm_mark/ 0000775 0000000 0000000 00000000000 14326712445 0022525 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/023_snat_ipv4_tcp_weight_farm_mark/input.json 0000664 0000000 0000000 00000001023 14326712445 0024553 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"mark" : "0xdead",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/023_snat_ipv4_tcp_weight_farm_mark/output.nft 0000664 0000000 0000000 00000002267 14326712445 0024605 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x8000dead, 5-9 : 0x8000deaf }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x8000dead : 192.168.0.10, 0x8000deaf : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/024_snat_ipv4_tcp_weight_bck_mark/ 0000775 0000000 0000000 00000000000 14326712445 0022340 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/024_snat_ipv4_tcp_weight_bck_mark/input.json 0000664 0000000 0000000 00000001101 14326712445 0024363 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"mark" : "0xdead00",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "1",
"priority" : "1",
"mark" : "0x01",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "1",
"priority" : "1",
"mark" : "0x02",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/024_snat_ipv4_tcp_weight_bck_mark/output.nft 0000664 0000000 0000000 00000002262 14326712445 0024413 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x80dead01, 1 : 0x80dead02 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80dead01 : 192.168.0.10, 0x80dead02 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/025_dnat_ipv4_tcp_weight_bck_mark/ 0000775 0000000 0000000 00000000000 14326712445 0022322 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/025_dnat_ipv4_tcp_weight_bck_mark/input.json 0000664 0000000 0000000 00000001101 14326712445 0024345 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "weight",
"mark" : "0xdead00",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "1",
"priority" : "1",
"mark" : "0x01",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "1",
"priority" : "1",
"mark" : "0x02",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/025_dnat_ipv4_tcp_weight_bck_mark/output.nft 0000664 0000000 0000000 00000002262 14326712445 0024375 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x00dead01, 1 : 0x00dead02 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00dead01 : 192.168.0.10, 0x00dead02 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/026_snat_ipv4_tcp_weight_nomasq/ 0000775 0000000 0000000 00000000000 14326712445 0022067 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/026_snat_ipv4_tcp_weight_nomasq/input.json 0000664 0000000 0000000 00000001117 14326712445 0024121 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"source-addr" : "192.168.0.101",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"mark" : "0x200",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"mark" : "0x201",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/026_snat_ipv4_tcp_weight_nomasq/output.nft 0000664 0000000 0000000 00000002377 14326712445 0024151 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.0.101, 0x00000201 : 192.168.0.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000200, 5-9 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000200 : 192.168.0.10, 0x00000201 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/027_snat_ipv4_udp_weight_nomasq_multiport/ 0000775 0000000 0000000 00000000000 14326712445 0024211 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/027_snat_ipv4_udp_weight_nomasq_multiport/input.json 0000664 0000000 0000000 00000001122 14326712445 0026237 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80-82",
"source-addr" : "192.168.0.101",
"mode" : "snat",
"protocol" : "udp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"mark" : "0x200",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"mark" : "0x201",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/027_snat_ipv4_udp_weight_nomasq_multiport/output.nft 0000664 0000000 0000000 00000002715 14326712445 0026267 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.0.100 . 80 : goto filter-lb01,
udp . 192.168.0.100 . 81 : goto filter-lb01,
udp . 192.168.0.100 . 82 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.0.100 . 80 : goto nat-lb01,
udp . 192.168.0.100 . 81 : goto nat-lb01,
udp . 192.168.0.100 . 82 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.0.101, 0x00000201 : 192.168.0.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000200, 5-9 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol udp dnat to ct mark map { 0x00000200 : 192.168.0.10, 0x00000201 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/028_snat_ipv4_all_weight_nomasq/ 0000775 0000000 0000000 00000000000 14326712445 0022053 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/028_snat_ipv4_all_weight_nomasq/input.json 0000664 0000000 0000000 00000001064 14326712445 0024106 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"source-addr" : "192.168.0.101",
"mode" : "snat",
"protocol" : "all",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"mark" : "0x200",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"mark" : "0x201",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/028_snat_ipv4_all_weight_nomasq/output.nft 0000664 0000000 0000000 00000002525 14326712445 0024130 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.0.100 : goto filter-lb01,
udp . 192.168.0.100 : goto filter-lb01,
sctp . 192.168.0.100 : goto filter-lb01 }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.0.100 : goto nat-lb01,
udp . 192.168.0.100 : goto nat-lb01,
sctp . 192.168.0.100 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.0.101, 0x00000201 : 192.168.0.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000200, 5-9 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
dnat to ct mark map { 0x00000200 : 192.168.0.10, 0x00000201 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/029_dnat_ipv4_tcp_udp_multifarm_hash_params/ 0000775 0000000 0000000 00000000000 14326712445 0024424 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/029_dnat_ipv4_tcp_udp_multifarm_hash_params/input.json 0000664 0000000 0000000 00000002052 14326712445 0026455 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "hash",
"sched-param" : "dstip",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
},
{
"name" : "lb02",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "53",
"mode" : "dnat",
"protocol" : "udp",
"scheduler" : "hash",
"sched-param" : "srcip srcport srcmac",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/029_dnat_ipv4_tcp_udp_multifarm_hash_params/output.nft 0000664 0000000 0000000 00000003111 14326712445 0026471 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.0.100 . 53 : goto filter-lb02,
tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.0.100 . 53 : goto nat-lb02,
tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set jhash ip daddr mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
chain filter-lb02 {
ct state new ct mark 0x00000000 meta iiftype ether ct mark set jhash ip saddr . udp sport . ether saddr mod 10 map { 0-4 : 0x00000003, 5-9 : 0x00000004 }
}
chain nat-lb02 {
ip protocol udp dnat to ct mark map { 0x00000003 : 192.168.0.10, 0x00000004 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/030_snat_ipv4_tcp_weight_bck_mark_srcip_empty/ 0000775 0000000 0000000 00000000000 14326712445 0024753 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/030_snat_ipv4_tcp_weight_bck_mark_srcip_empty/input.json 0000664 0000000 0000000 00000001130 14326712445 0027000 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"source-addr" : "",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"mark" : "0xdead00",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "1",
"priority" : "1",
"mark" : "0x01",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "1",
"priority" : "1",
"mark" : "0x02",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/030_snat_ipv4_tcp_weight_bck_mark_srcip_empty/output.nft 0000664 0000000 0000000 00000002262 14326712445 0027026 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x80dead01, 1 : 0x80dead02 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80dead01 : 192.168.0.10, 0x80dead02 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/031_snat_ipv4_tcp_weight_newrtlimit/ 0000775 0000000 0000000 00000000000 14326712445 0022763 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/031_snat_ipv4_tcp_weight_newrtlimit/input.json 0000664 0000000 0000000 00000001026 14326712445 0025014 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"new-rtlimit" : "10",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/031_snat_ipv4_tcp_weight_newrtlimit/output.nft 0000664 0000000 0000000 00000002606 14326712445 0025040 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
set new-rtlimit-lb01 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new add @new-rtlimit-lb01 { ip saddr limit rate over 10/second } log prefix "new-rtlimit-lb01 " drop
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/032_snat_ipv4_tcp_weight_newrtlimit_burst/ 0000775 0000000 0000000 00000000000 14326712445 0024203 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/032_snat_ipv4_tcp_weight_newrtlimit_burst/input.json 0000664 0000000 0000000 00000001064 14326712445 0026236 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"new-rtlimit" : "10",
"new-rtlimit-burst" : "3",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/032_snat_ipv4_tcp_weight_newrtlimit_burst/output.nft 0000664 0000000 0000000 00000002626 14326712445 0026262 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
set new-rtlimit-lb01 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new add @new-rtlimit-lb01 { ip saddr limit rate over 10/second burst 3 packets } log prefix "new-rtlimit-lb01 " drop
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/033_snat_ipv4_tcp_weight_rstrtlimit/ 0000775 0000000 0000000 00000000000 14326712445 0023004 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/033_snat_ipv4_tcp_weight_rstrtlimit/input.json 0000664 0000000 0000000 00000001025 14326712445 0025034 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"rst-rtlimit" : "5",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/033_snat_ipv4_tcp_weight_rstrtlimit/output.nft 0000664 0000000 0000000 00000002606 14326712445 0025061 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
set rst-rtlimit-lb01 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
tcp flags rst add @rst-rtlimit-lb01 { ip saddr limit rate over 5/second } log prefix "rst-rtlimit-lb01 " drop
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/034_snat_ipv4_tcp_weight_estconnlimit/ 0000775 0000000 0000000 00000000000 14326712445 0023300 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/034_snat_ipv4_tcp_weight_estconnlimit/input.json 0000664 0000000 0000000 00000001030 14326712445 0025324 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"est-connlimit" : "20",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/034_snat_ipv4_tcp_weight_estconnlimit/output.nft 0000664 0000000 0000000 00000002556 14326712445 0025361 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
set est-connlimit-lb01 {
type ipv4_addr
size 65535
flags dynamic
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new add @est-connlimit-lb01 { ip saddr ct count over 20 } log prefix "est-connlimit-lb01 " drop
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/035_snat_ipv4_tcp_weight_tcpstrict/ 0000775 0000000 0000000 00000000000 14326712445 0022610 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/035_snat_ipv4_tcp_weight_tcpstrict/input.json 0000664 0000000 0000000 00000001025 14326712445 0024640 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"tcp-strict" : "on",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/035_snat_ipv4_tcp_weight_tcpstrict/output.nft 0000664 0000000 0000000 00000002355 14326712445 0024666 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state invalid log prefix "tcp-strict-lb01 " drop
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/036_snat_ipv4_tcp_weight_queue/ 0000775 0000000 0000000 00000000000 14326712445 0021716 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/036_snat_ipv4_tcp_weight_queue/input.json 0000664 0000000 0000000 00000001020 14326712445 0023741 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"queue" : "0",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/036_snat_ipv4_tcp_weight_queue/output.nft 0000664 0000000 0000000 00000002337 14326712445 0023774 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
tcp flags syn queue flags bypass to 0
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/037_policies/ 0000775 0000000 0000000 00000000000 14326712445 0016176 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/037_policies/input.json 0000664 0000000 0000000 00000001436 14326712445 0020234 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"type" : "blacklist",
"timeout" : "5",
"priority" : "2",
"elements" : [
{
"data" : "192.168.200.100"
},
{
"data" : "192.168.40.100/24"
}
]
}
],
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"policies" : [
{
"name" : "black001"
}
]
}
]
}
nftlb-1.0.7/tests/037_policies/output.nft 0000664 0000000 0000000 00000003566 14326712445 0020261 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 192.168.40.0/24 counter packets 0 bytes 0, 192.168.200.100 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
set black001-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @black001 add @black001-lb01-cnt { ip saddr } log prefix "policy-BL-black001-lb01 " drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/038_snat_ipv4_tcp_weight_persistence_srcip_srcport/ 0000775 0000000 0000000 00000000000 14326712445 0026074 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/038_snat_ipv4_tcp_weight_persistence_srcip_srcport/input.json 0000664 0000000 0000000 00000001230 14326712445 0030122 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip srcport",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"port" : "10",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"port" : "20",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/038_snat_ipv4_tcp_weight_persistence_srcip_srcport/output.nft 0000664 0000000 0000000 00000003113 14326712445 0030143 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : mark
}
map persist-lb01 {
type ipv4_addr . inet_service : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr . tcp sport map @static-sessions-lb01 accept
ct state new ct mark set ip saddr . tcp sport map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr . tcp sport : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/039_snat_ipv4_tcp_weight_bck_port/ 0000775 0000000 0000000 00000000000 14326712445 0022400 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/039_snat_ipv4_tcp_weight_bck_port/input.json 0000664 0000000 0000000 00000001133 14326712445 0024430 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"port" : "10",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"port" : "20",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/039_snat_ipv4_tcp_weight_bck_port/output.nft 0000664 0000000 0000000 00000002304 14326712445 0024450 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/040_snat_ipv4_tcp_weight_bck_estconnlimit/ 0000775 0000000 0000000 00000000000 14326712445 0024114 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/040_snat_ipv4_tcp_weight_bck_estconnlimit/input.json 0000664 0000000 0000000 00000001153 14326712445 0026146 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"est-connlimit" : "1",
"weight" : "1",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.20",
"est-connlimit" : "2",
"weight" : "2",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/040_snat_ipv4_tcp_weight_bck_estconnlimit/output.nft 0000664 0000000 0000000 00000002524 14326712445 0026170 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 3 map { 0 : 0x80000001, 1-2 : 0x80000002 }
ct mark 0x80000001 ct count over 1 log prefix "est-connlimit-lb01-bck0 " drop
ct mark 0x80000002 ct count over 2 log prefix "est-connlimit-lb01-bck1 " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.20 }
}
}
nftlb-1.0.7/tests/041_snat_ipv4_tcp_weight_bck_srcaddr/ 0000775 0000000 0000000 00000000000 14326712445 0023027 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/041_snat_ipv4_tcp_weight_bck_srcaddr/input.json 0000664 0000000 0000000 00000001265 14326712445 0025065 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"source-addr" : "192.168.1.100",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.2.10",
"source-addr" : "192.168.2.100",
"est-connlimit" : "1",
"weight" : "1",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.1.20",
"est-connlimit" : "2",
"weight" : "2",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/041_snat_ipv4_tcp_weight_bck_srcaddr/output.nft 0000664 0000000 0000000 00000002634 14326712445 0025105 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000001 : 192.168.2.100, 0x00000002 : 192.168.1.100 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 3 map { 0 : 0x00000001, 1-2 : 0x00000002 }
ct mark 0x00000001 ct count over 1 log prefix "est-connlimit-lb01-bck0 " drop
ct mark 0x00000002 ct count over 2 log prefix "est-connlimit-lb01-bck1 " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.2.10, 0x00000002 : 192.168.1.20 }
}
}
nftlb-1.0.7/tests/042_farm_backend_policies_logprefix/ 0000775 0000000 0000000 00000000000 14326712445 0022725 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/042_farm_backend_policies_logprefix/input.json 0000664 0000000 0000000 00000002136 14326712445 0024761 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"type" : "blacklist",
"timeout" : "5",
"log-prefix" : "[TYPE,FNAME,PNAME]",
"priority" : "2",
"elements" : [
{
"data" : "192.168.200.100"
},
{
"data" : "192.168.40.100/24"
}
]
}
],
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"log" : "input",
"log-prefix" : "[FNAME,TYPE]",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"mark" : "0x001",
"est-connlimit" : "20",
"est-connlimit-log-prefix" : "[KNAME,bck,FNAME,BNAME]",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"mark" : "0x002",
"est-connlimit" : "20",
"est-connlimit-log-prefix" : "[KNAME,bck,FNAME,BNAME]",
"state" : "up"
}
],
"policies" : [
{
"name" : "black001"
}
]
}
]
}
nftlb-1.0.7/tests/042_farm_backend_policies_logprefix/output.nft 0000664 0000000 0000000 00000004065 14326712445 0025003 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 192.168.40.0/24 counter packets 0 bytes 0, 192.168.200.100 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
set black001-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @black001 add @black001-lb01-cnt { ip saddr } log prefix "[BL,lb01,black001]" drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark 0x80000001 ct count over 20 log prefix "[est-connlimit,bck,lb01,bck0]" drop
ct mark 0x80000002 ct count over 20 log prefix "[est-connlimit,bck,lb01,bck1]" drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
log prefix "[lb01,IN]"
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/043_farm_backend_fwd_log/ 0000775 0000000 0000000 00000000000 14326712445 0020461 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/043_farm_backend_fwd_log/input.json 0000664 0000000 0000000 00000001423 14326712445 0022513 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"log" : "forward",
"log-prefix" : "[FNAME,TYPE]",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"mark" : "0x001",
"est-connlimit" : "20",
"est-connlimit-log-prefix" : "[KNAME,bck,FNAME,BNAME]",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"mark" : "0x002",
"est-connlimit" : "20",
"est-connlimit-log-prefix" : "[KNAME,bck,FNAME,BNAME]",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/043_farm_backend_fwd_log/output.nft 0000664 0000000 0000000 00000003214 14326712445 0022532 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
map forward-proto-services {
type mark : verdict
elements = { 0x80000001 : goto forward-lb01, 0x80000002 : goto forward-lb01 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark 0x80000001 ct count over 20 log prefix "[est-connlimit,bck,lb01,bck0]" drop
ct mark 0x80000002 ct count over 20 log prefix "[est-connlimit,bck,lb01,bck1]" drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-lb01 {
log prefix "[lb01,FWD]"
}
}
nftlb-1.0.7/tests/044_dsr_stlsdnat_multifarm/ 0000775 0000000 0000000 00000000000 14326712445 0021151 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/044_dsr_stlsdnat_multifarm/input.json 0000664 0000000 0000000 00000002562 14326712445 0023210 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
},
{
"name" : "lb02",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "81",
"mode" : "stlsdnat",
"protocol" : "tcp",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/044_dsr_stlsdnat_multifarm/output.nft 0000664 0000000 0000000 00000002611 14326712445 0023222 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01,
tcp . 192.168.0.100 . 81 : goto lb02 }
}
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 81 : goto lb02-back,
tcp . 192.168.0.11 . 81 : goto lb02-back }
}
map map-lb02-back {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb02-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb02-back fwd to "lo"
}
chain lb02 {
meta protocol ip update @map-lb02-back { ip saddr : ether saddr }
ip daddr set jhash ip saddr mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
}
}
nftlb-1.0.7/tests/045_local_proxy_with_policies/ 0000775 0000000 0000000 00000000000 14326712445 0021643 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/045_local_proxy_with_policies/input.json 0000664 0000000 0000000 00000001136 14326712445 0023676 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"type" : "blacklist",
"timeout" : "5",
"log-prefix" : "[TYPE,FNAME,PNAME]",
"priority" : "2",
"elements" : [
{
"data" : "192.168.200.100"
},
{
"data" : "192.168.40.100/24"
}
]
}
],
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"mode" : "local",
"protocol" : "tcp",
"scheduler" : "weight",
"log" : "input",
"log-prefix" : "[FNAME,TYPE]",
"state" : "up",
"policies" : [
{
"name" : "black001"
}
]
}
]
}
nftlb-1.0.7/tests/045_local_proxy_with_policies/output.nft 0000664 0000000 0000000 00000002074 14326712445 0023717 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 192.168.40.0/24 counter packets 0 bytes 0, 192.168.200.100 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
set black001-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @black001 add @black001-lb01-cnt { ip saddr } log prefix "[BL,lb01,black001]" drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
}
}
nftlb-1.0.7/tests/046_snat_ipv4_tcp_weight_static_sessions_srcip_srcport/ 0000775 0000000 0000000 00000000000 14326712445 0026764 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/046_snat_ipv4_tcp_weight_static_sessions_srcip_srcport/input.json 0000664 0000000 0000000 00000001615 14326712445 0031021 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip srcport",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"port" : "10",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"port" : "20",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
],
"sessions" : [
{
"client" : "192.168.44.4 . 95",
"backend" : "bck0"
},
{
"client" : "192.168.44.4 . 96",
"backend" : "bck1"
},
{
"client" : "192.168.44.4 . 97",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/046_snat_ipv4_tcp_weight_static_sessions_srcip_srcport/output.nft 0000664 0000000 0000000 00000003313 14326712445 0031035 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : mark
elements = { 192.168.44.4 . 95 : 0x80000001,
192.168.44.4 . 96 : 0x80000002,
192.168.44.4 . 97 : 0x80000002 }
}
map persist-lb01 {
type ipv4_addr . inet_service : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr . tcp sport map @static-sessions-lb01 accept
ct state new ct mark set ip saddr . tcp sport map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr . tcp sport : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/047_snat_ipv4_tcp_weight_static_sessions_srcip/ 0000775 0000000 0000000 00000000000 14326712445 0025211 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/047_snat_ipv4_tcp_weight_static_sessions_srcip/input.json 0000664 0000000 0000000 00000001566 14326712445 0027253 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"port" : "10",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"port" : "20",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
],
"sessions" : [
{
"client" : "192.168.44.4",
"backend" : "bck0"
},
{
"client" : "192.168.44.5",
"backend" : "bck1"
},
{
"client" : "192.168.44.6",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/047_snat_ipv4_tcp_weight_static_sessions_srcip/output.nft 0000664 0000000 0000000 00000003162 14326712445 0027264 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : mark
elements = { 192.168.44.4 : 0x80000001, 192.168.44.5 : 0x80000002,
192.168.44.6 : 0x80000002 }
}
map persist-lb01 {
type ipv4_addr : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr map @static-sessions-lb01 accept
ct state new ct mark set ip saddr map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/048_snat_ipv4_tcp_weight_flowoffload/ 0000775 0000000 0000000 00000000000 14326712445 0023077 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/048_snat_ipv4_tcp_weight_flowoffload/input.json 0000664 0000000 0000000 00000001204 14326712445 0025126 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"flow-offload" : "on",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"port" : "10",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"port" : "20",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
],
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/048_snat_ipv4_tcp_weight_flowoffload/output.nft 0000664 0000000 0000000 00000003056 14326712445 0025154 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
map forward-proto-services {
type mark : verdict
elements = { 0x80000001 : goto forward-lb01, 0x80000002 : goto forward-lb01 }
}
flowtable ft-lb01 {
hook ingress priority 50
devices = { lo }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-lb01 {
flow add @ft-lb01
}
}
nftlb-1.0.7/tests/049_snat_ipv4_ipv6_tcp_weight/ 0000775 0000000 0000000 00000000000 14326712445 0021462 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/049_snat_ipv4_ipv6_tcp_weight/input.json 0000664 0000000 0000000 00000002003 14326712445 0023507 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01v4",
"family" : "ipv4",
"virtual-addr" : "129.187.204.211",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "129.187.204.48",
"weight" : "1",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
}
]
},
{
"name": "lb01v6",
"family": "ipv6",
"virtual-addr": "2001:4ca0:4101::81:bb:cc:d3",
"virtual-ports": "80",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"state": "up",
"backends": [
{
"name": "bck0",
"ip-addr": "2001:4ca0:4101::81:bb:cc:30",
"weight": "1",
"priority": "1",
"mark": "0x0000002",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/049_snat_ipv4_ipv6_tcp_weight/output.nft 0000664 0000000 0000000 00000004533 14326712445 0023540 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 129.187.204.211 . 80 : goto filter-lb01v4 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 129.187.204.211 . 80 : goto nat-lb01v4 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01v4 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x80000001 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01v4 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 129.187.204.48 }
}
}
table ip6 nftlb {
map filter-proto-services6 {
type inet_proto . ipv6_addr . inet_service : verdict
elements = { tcp . 2001:4ca0:4101:0:81:bb:cc:d3 . 80 : goto filter-lb01v6 }
}
map nat-proto-services6 {
type inet_proto . ipv6_addr . inet_service : verdict
elements = { tcp . 2001:4ca0:4101:0:81:bb:cc:d3 . 80 : goto nat-lb01v6 }
}
map services6-back-m {
type mark : ipv6_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip6 nexthdr . ip6 daddr . th dport vmap @filter-proto-services6
}
chain filter-lb01v6 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip6 nexthdr . ip6 daddr . th dport vmap @nat-proto-services6
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services6-back-m
}
chain nat-lb01v6 {
ip6 nexthdr tcp dnat to ct mark map { 0x80000002 : 2001:4ca0:4101:0:81:bb:cc:30 }
}
}
nftlb-1.0.7/tests/050_policies_ipv6/ 0000775 0000000 0000000 00000000000 14326712445 0017135 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/050_policies_ipv6/input.json 0000664 0000000 0000000 00000001451 14326712445 0021170 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"type" : "blacklist",
"family" : "ipv6",
"priority" : "1",
"elements" : [
{
"data" : "2001:4ca0:4101:0:81:bb:cc:30"
},
{
"data" : "2001:db8::/32"
}
]
}
],
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"policies" : [
{
"name" : "black001"
}
]
}
]
}
nftlb-1.0.7/tests/050_policies_ipv6/output.nft 0000664 0000000 0000000 00000003613 14326712445 0021211 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv6_addr
flags interval
counter
auto-merge
elements = { 2001:db8::/32 counter packets 0 bytes 0,
2001:4ca0:4101:0:81:bb:cc:30 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
set black001-lb01-cnt {
type ipv6_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip6 saddr @black001 add @black001-lb01-cnt { ip6 saddr } log prefix "policy-BL-black001-lb01 " drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/051_dsr_ipv4_tcp_weight_static_sessions_srcip_srcport/ 0000775 0000000 0000000 00000000000 14326712445 0026603 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/051_dsr_ipv4_tcp_weight_static_sessions_srcip_srcport/input.json 0000664 0000000 0000000 00000001765 14326712445 0030646 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip srcport",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"port" : "10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"port" : "20",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"sessions" : [
{
"client" : "192.168.44.4 . 95",
"backend" : "bck0"
},
{
"client" : "192.168.44.4 . 96",
"backend" : "bck1"
},
{
"client" : "192.168.44.4 . 97",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/051_dsr_ipv4_tcp_weight_static_sessions_srcip_srcport/output.nft 0000664 0000000 0000000 00000002222 14326712445 0030652 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
elements = { 192.168.44.4 . 95 : 02:02:02:02:02:02,
192.168.44.4 . 96 : 03:03:03:03:03:03,
192.168.44.4 . 97 : 03:03:03:03:03:03 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/052_stlsdnat_ipv4_tcp_weight_static_sessions_srcip/ 0000775 0000000 0000000 00000000000 14326712445 0026074 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/052_stlsdnat_ipv4_tcp_weight_static_sessions_srcip/input.json 0000664 0000000 0000000 00000001743 14326712445 0030133 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "stlsdnat",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"port" : "10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"port" : "20",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"sessions" : [
{
"client" : "192.168.44.4",
"backend" : "bck0"
},
{
"client" : "192.168.44.5",
"backend" : "bck1"
},
{
"client" : "192.168.44.6",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/052_stlsdnat_ipv4_tcp_weight_static_sessions_srcip/output.nft 0000664 0000000 0000000 00000004200 14326712445 0030141 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ipv4_addr
elements = { 192.168.44.4 : 192.168.0.10, 192.168.44.5 : 192.168.0.11,
192.168.44.6 : 192.168.0.11 }
}
map persist-lb01 {
type ipv4_addr : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/053_empty_farms/ 0000775 0000000 0000000 00000000000 14326712445 0016713 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/053_empty_farms/input.json 0000664 0000000 0000000 00000000020 14326712445 0020735 0 ustar 00root root 0000000 0000000 { "farms": [] }
nftlb-1.0.7/tests/053_empty_farms/output.nft 0000664 0000000 0000000 00000000000 14326712445 0020752 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/054_dnat_ipv4_all_sip_ports/ 0000775 0000000 0000000 00000000000 14326712445 0021210 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/054_dnat_ipv4_all_sip_ports/input.json 0000664 0000000 0000000 00000001014 14326712445 0023236 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "",
"mode" : "dnat",
"protocol" : "udp",
"scheduler" : "rr",
"helper" : "sip",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/054_dnat_ipv4_all_sip_ports/output.nft 0000664 0000000 0000000 00000002310 14326712445 0023255 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper sip-udp {
type "sip" protocol udp
l3proto ip
}
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { udp . 192.168.0.100 : goto filter-lb01 }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { udp . 192.168.0.100 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-lb01 {
ip protocol udp ct helper set "sip-udp"
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol udp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/055_proto_all_helper_none/ 0000775 0000000 0000000 00000000000 14326712445 0020740 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/055_proto_all_helper_none/input.json 0000664 0000000 0000000 00000001021 14326712445 0022764 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.154",
"virtual-ports" : "5060",
"mode" : "dnat",
"protocol" : "all",
"scheduler" : "rr",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.22",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.23",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/055_proto_all_helper_none/output.nft 0000664 0000000 0000000 00000002606 14326712445 0023015 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.154 . 5060 : goto filter-lb01,
udp . 192.168.56.154 . 5060 : goto filter-lb01,
sctp . 192.168.56.154 . 5060 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.154 . 5060 : goto nat-lb01,
udp . 192.168.56.154 . 5060 : goto nat-lb01,
sctp . 192.168.56.154 . 5060 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
dnat to ct mark map { 0x00000001 : 192.168.0.22, 0x00000002 : 192.168.0.23 }
}
}
nftlb-1.0.7/tests/056_proto_all_helper_sip/ 0000775 0000000 0000000 00000000000 14326712445 0020575 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/056_proto_all_helper_sip/input.json 0000664 0000000 0000000 00000001046 14326712445 0022630 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.154",
"virtual-ports" : "5060",
"mode" : "dnat",
"protocol" : "all",
"scheduler" : "rr",
"helper" : "sip",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.22",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.23",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/056_proto_all_helper_sip/output.nft 0000664 0000000 0000000 00000003132 14326712445 0022645 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper sip-tcp {
type "sip" protocol tcp
l3proto ip
}
ct helper sip-udp {
type "sip" protocol udp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.154 . 5060 : goto filter-lb01,
udp . 192.168.56.154 . 5060 : goto filter-lb01,
sctp . 192.168.56.154 . 5060 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.154 . 5060 : goto nat-lb01,
udp . 192.168.56.154 . 5060 : goto nat-lb01,
sctp . 192.168.56.154 . 5060 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ip protocol tcp ct helper set "sip-tcp"
ip protocol udp ct helper set "sip-udp"
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
dnat to ct mark map { 0x00000001 : 192.168.0.22, 0x00000002 : 192.168.0.23 }
}
}
nftlb-1.0.7/tests/057_proto_tcp_helper_ftp/ 0000775 0000000 0000000 00000000000 14326712445 0020612 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/057_proto_tcp_helper_ftp/input.json 0000664 0000000 0000000 00000001046 14326712445 0022645 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.154",
"virtual-ports" : "5060",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "rr",
"helper" : "ftp",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.22",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.23",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/057_proto_tcp_helper_ftp/output.nft 0000664 0000000 0000000 00000002444 14326712445 0022667 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper ftp-tcp {
type "ftp" protocol tcp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.154 . 5060 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.154 . 5060 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ip protocol tcp ct helper set "ftp-tcp"
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.22, 0x00000002 : 192.168.0.23 }
}
}
nftlb-1.0.7/tests/058_proto_tcp_helper_sip/ 0000775 0000000 0000000 00000000000 14326712445 0020615 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/058_proto_tcp_helper_sip/input.json 0000664 0000000 0000000 00000001046 14326712445 0022650 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.154",
"virtual-ports" : "5060",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "rr",
"helper" : "sip",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.22",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.23",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/058_proto_tcp_helper_sip/output.nft 0000664 0000000 0000000 00000002444 14326712445 0022672 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper sip-tcp {
type "sip" protocol tcp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.154 . 5060 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.154 . 5060 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ip protocol tcp ct helper set "sip-tcp"
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.22, 0x00000002 : 192.168.0.23 }
}
}
nftlb-1.0.7/tests/059_proto_udp_helper_sip/ 0000775 0000000 0000000 00000000000 14326712445 0020620 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/059_proto_udp_helper_sip/input.json 0000664 0000000 0000000 00000001046 14326712445 0022653 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.154",
"virtual-ports" : "5060",
"mode" : "dnat",
"protocol" : "udp",
"scheduler" : "rr",
"helper" : "sip",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.22",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.23",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/059_proto_udp_helper_sip/output.nft 0000664 0000000 0000000 00000002444 14326712445 0022675 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper sip-udp {
type "sip" protocol udp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.56.154 . 5060 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.56.154 . 5060 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ip protocol udp ct helper set "sip-udp"
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol udp dnat to ct mark map { 0x00000001 : 192.168.0.22, 0x00000002 : 192.168.0.23 }
}
}
nftlb-1.0.7/tests/060_proto_sctp/ 0000775 0000000 0000000 00000000000 14326712445 0016557 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/060_proto_sctp/input.json 0000664 0000000 0000000 00000001022 14326712445 0020604 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.56.154",
"virtual-ports" : "5060",
"mode" : "dnat",
"protocol" : "sctp",
"scheduler" : "rr",
"priority" : "1",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.22",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.23",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/060_proto_sctp/output.nft 0000664 0000000 0000000 00000002275 14326712445 0020636 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { sctp . 192.168.56.154 . 5060 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { sctp . 192.168.56.154 . 5060 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol sctp dnat to ct mark map { 0x00000001 : 192.168.0.22, 0x00000002 : 192.168.0.23 }
}
}
nftlb-1.0.7/tests/061_snat_ipv4_tcp_weight_tcpstrict_with_logrtlimit/ 0000775 0000000 0000000 00000000000 14326712445 0026110 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/061_snat_ipv4_tcp_weight_tcpstrict_with_logrtlimit/input.json 0000664 0000000 0000000 00000001055 14326712445 0030143 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"log-rtlimit": "10",
"tcp-strict" : "on",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/061_snat_ipv4_tcp_weight_tcpstrict_with_logrtlimit/output.nft 0000664 0000000 0000000 00000002423 14326712445 0030162 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state invalid jump {
limit rate 10/second log prefix "tcp-strict-lb01 "
drop
}
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/062_snat_ipv4_tcp_weight_tcpstrict_with_logrtlimit_hour/ 0000775 0000000 0000000 00000000000 14326712445 0027146 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/062_snat_ipv4_tcp_weight_tcpstrict_with_logrtlimit_hour/input.json 0000664 0000000 0000000 00000001061 14326712445 0031176 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"log-rtlimit": "2/hour",
"tcp-strict" : "on",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/062_snat_ipv4_tcp_weight_tcpstrict_with_logrtlimit_hour/output.nft 0000664 0000000 0000000 00000002420 14326712445 0031215 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state invalid jump {
limit rate 2/hour log prefix "tcp-strict-lb01 "
drop
}
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/063_local_with_farm_srcaddr/ 0000775 0000000 0000000 00000000000 14326712445 0021222 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/063_local_with_farm_srcaddr/input.json 0000664 0000000 0000000 00000000764 14326712445 0023263 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"source-addr" : "127.0.0.1",
"mode" : "local",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.56.103",
"mark" : "0x200",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.56.104",
"mark" : "0x201",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/063_local_with_farm_srcaddr/output.nft 0000664 0000000 0000000 00000001726 14326712445 0023301 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1, 0x00000201 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
}
}
nftlb-1.0.7/tests/064_local_with_bck_srcaddr/ 0000775 0000000 0000000 00000000000 14326712445 0021035 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/064_local_with_bck_srcaddr/input.json 0000664 0000000 0000000 00000001030 14326712445 0023061 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"mode" : "local",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.56.103",
"mark" : "0x200",
"source-addr" : "127.0.0.2",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.56.104",
"mark" : "0x201",
"source-addr" : "127.0.0.3",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/064_local_with_bck_srcaddr/output.nft 0000664 0000000 0000000 00000001726 14326712445 0023114 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.2, 0x00000201 : 127.0.0.3 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
}
}
nftlb-1.0.7/tests/065_snat_ipv4_tcp_weight_estconnlimit_with_logrtlimit_hour/ 0000775 0000000 0000000 00000000000 14326712445 0027642 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/065_snat_ipv4_tcp_weight_estconnlimit_with_logrtlimit_hour/input.json 0000664 0000000 0000000 00000001064 14326712445 0031675 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"log-rtlimit": "2/hour",
"est-connlimit" : "10",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/065_snat_ipv4_tcp_weight_estconnlimit_with_logrtlimit_hour/output.nft 0000664 0000000 0000000 00000002621 14326712445 0031714 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
set est-connlimit-lb01 {
type ipv4_addr
size 65535
flags dynamic
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new add @est-connlimit-lb01 { ip saddr ct count over 10 } jump {
limit rate 2/hour log prefix "est-connlimit-lb01 "
drop
}
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x80000001 : 192.168.0.10, 0x80000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/ 0000775 0000000 0000000 00000000000 14326712445 0014547 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/001_creating_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0020546 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/001_creating_farm_lb01/data.json 0000664 0000000 0000000 00000001135 14326712445 0022352 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "200.1.1.1",
"virtual-ports" : "8080",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/001_creating_farm_lb01/nft.out 0000664 0000000 0000000 00000002304 14326712445 0022065 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/001_creating_farm_lb01/obj.out 0000664 0000000 0000000 00000005520 14326712445 0022053 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/001_creating_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022027 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/001_creating_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022065 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/002_deleting_backend_bck1/ 0000775 0000000 0000000 00000000000 14326712445 0021272 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/002_deleting_backend_bck1/nft.out 0000664 0000000 0000000 00000002217 14326712445 0022614 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x80000001 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80 }
}
}
nftlb-1.0.7/tests/api/002_deleting_backend_bck1/obj.out 0000664 0000000 0000000 00000004475 14326712445 0022607 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/002_deleting_backend_bck1/req.api 0000775 0000000 0000000 00000000055 14326712445 0022557 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01/backends/bck1"
nftlb-1.0.7/tests/api/002_deleting_backend_bck1/req.out 0000664 0000000 0000000 00000000027 14326712445 0022611 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/003_creating_backend_bck1/ 0000775 0000000 0000000 00000000000 14326712445 0021274 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/003_creating_backend_bck1/data.json 0000664 0000000 0000000 00000000373 14326712445 0023103 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"ip-addr" : "172.16.138.204",
"port" : "80",
"weight" : "5",
"mark" : "0x0000003",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/003_creating_backend_bck1/nft.out 0000664 0000000 0000000 00000002304 14326712445 0022613 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000003 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000003 : 172.16.138.204 . 80 }
}
}
nftlb-1.0.7/tests/api/003_creating_backend_bck1/obj.out 0000664 0000000 0000000 00000005520 14326712445 0022601 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/003_creating_backend_bck1/req.api 0000775 0000000 0000000 00000000051 14326712445 0022555 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/003_creating_backend_bck1/req.out 0000664 0000000 0000000 00000000027 14326712445 0022613 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/004_stopping_backend_bck1/ 0000775 0000000 0000000 00000000000 14326712445 0021344 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/004_stopping_backend_bck1/data.json 0000664 0000000 0000000 00000000177 14326712445 0023155 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "down"
}
]
}
]
}
nftlb-1.0.7/tests/api/004_stopping_backend_bck1/nft.out 0000664 0000000 0000000 00000002217 14326712445 0022666 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x80000001 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80 }
}
}
nftlb-1.0.7/tests/api/004_stopping_backend_bck1/obj.out 0000664 0000000 0000000 00000005522 14326712445 0022653 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/004_stopping_backend_bck1/req.api 0000775 0000000 0000000 00000000051 14326712445 0022625 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/004_stopping_backend_bck1/req.out 0000664 0000000 0000000 00000000027 14326712445 0022663 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/005_deleting_down_backend_bck1/ 0000775 0000000 0000000 00000000000 14326712445 0022324 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/005_deleting_down_backend_bck1/nft.out 0000664 0000000 0000000 00000002217 14326712445 0023646 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x80000001 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80 }
}
}
nftlb-1.0.7/tests/api/005_deleting_down_backend_bck1/obj.out 0000664 0000000 0000000 00000004475 14326712445 0023641 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/005_deleting_down_backend_bck1/req.api 0000775 0000000 0000000 00000000055 14326712445 0023611 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01/backends/bck1"
nftlb-1.0.7/tests/api/005_deleting_down_backend_bck1/req.out 0000664 0000000 0000000 00000000027 14326712445 0023643 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/006_deleting_everything/ 0000775 0000000 0000000 00000000000 14326712445 0021173 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/006_deleting_everything/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022501 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/006_deleting_everything/obj.out 0000664 0000000 0000000 00000000027 14326712445 0022475 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/006_deleting_everything/req.api 0000775 0000000 0000000 00000000032 14326712445 0022453 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/006_deleting_everything/req.out 0000664 0000000 0000000 00000000027 14326712445 0022512 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/007_creating_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0020554 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/007_creating_farm_lb01/data.json 0000664 0000000 0000000 00000001422 14326712445 0022357 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "200.1.1.1",
"virtual-ports" : "8080",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "172.16.138.204",
"port" : "80",
"weight" : "5",
"mark" : "0x0000003",
"priority" : "2",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/007_creating_farm_lb01/nft.out 0000664 0000000 0000000 00000002304 14326712445 0022073 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/007_creating_farm_lb01/obj.out 0000664 0000000 0000000 00000006552 14326712445 0022067 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/007_creating_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022035 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/007_creating_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022073 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/008_backend_bck1_down/ 0000775 0000000 0000000 00000000000 14326712445 0020454 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/008_backend_bck1_down/data.json 0000664 0000000 0000000 00000000177 14326712445 0022265 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "down"
}
]
}
]
}
nftlb-1.0.7/tests/api/008_backend_bck1_down/nft.out 0000664 0000000 0000000 00000002304 14326712445 0021773 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000003 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000003 : 172.16.138.204 . 80 }
}
}
nftlb-1.0.7/tests/api/008_backend_bck1_down/obj.out 0000664 0000000 0000000 00000006545 14326712445 0021771 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/008_backend_bck1_down/req.api 0000775 0000000 0000000 00000000051 14326712445 0021735 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/008_backend_bck1_down/req.out 0000664 0000000 0000000 00000000027 14326712445 0021773 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/009_creating_backend_bck3/ 0000775 0000000 0000000 00000000000 14326712445 0021304 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/009_creating_backend_bck3/data.json 0000664 0000000 0000000 00000000373 14326712445 0023113 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck3",
"ip-addr" : "172.16.138.205",
"port" : "80",
"weight" : "5",
"mark" : "0x0000004",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/009_creating_backend_bck3/nft.out 0000664 0000000 0000000 00000002372 14326712445 0022630 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 15 map { 0-4 : 0x80000001, 5-9 : 0x80000003, 10-14 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/009_creating_backend_bck3/obj.out 0000664 0000000 0000000 00000007570 14326712445 0022620 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/009_creating_backend_bck3/req.api 0000775 0000000 0000000 00000000051 14326712445 0022565 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/009_creating_backend_bck3/req.out 0000664 0000000 0000000 00000000027 14326712445 0022623 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/010_creating_backend_down_bck4/ 0000775 0000000 0000000 00000000000 14326712445 0022324 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/010_creating_backend_down_bck4/data.json 0000664 0000000 0000000 00000000375 14326712445 0024135 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck4",
"ip-addr" : "172.16.138.206",
"port" : "80",
"weight" : "5",
"mark" : "0x0000005",
"priority" : "1",
"state" : "down"
}
]
}
]
}
nftlb-1.0.7/tests/api/010_creating_backend_down_bck4/nft.out 0000664 0000000 0000000 00000002372 14326712445 0023650 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 15 map { 0-4 : 0x80000001, 5-9 : 0x80000003, 10-14 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/010_creating_backend_down_bck4/obj.out 0000664 0000000 0000000 00000010615 14326712445 0023632 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/010_creating_backend_down_bck4/req.api 0000775 0000000 0000000 00000000051 14326712445 0023605 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/010_creating_backend_down_bck4/req.out 0000664 0000000 0000000 00000000027 14326712445 0023643 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/011_starting_backend_bck2/ 0000775 0000000 0000000 00000000000 14326712445 0021333 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/011_starting_backend_bck2/data.json 0000664 0000000 0000000 00000000175 14326712445 0023142 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck2",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/011_starting_backend_bck2/nft.out 0000664 0000000 0000000 00000002372 14326712445 0022657 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 15 map { 0-4 : 0x80000001, 5-9 : 0x80000003, 10-14 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/011_starting_backend_bck2/obj.out 0000664 0000000 0000000 00000010615 14326712445 0022641 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/011_starting_backend_bck2/req.api 0000775 0000000 0000000 00000000051 14326712445 0022614 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/011_starting_backend_bck2/req.out 0000664 0000000 0000000 00000000027 14326712445 0022652 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/012_starting_backend_bck1/ 0000775 0000000 0000000 00000000000 14326712445 0021333 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/012_starting_backend_bck1/data.json 0000664 0000000 0000000 00000000175 14326712445 0023142 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/012_starting_backend_bck1/nft.out 0000664 0000000 0000000 00000002460 14326712445 0022655 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/012_starting_backend_bck1/obj.out 0000664 0000000 0000000 00000010613 14326712445 0022637 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/012_starting_backend_bck1/req.api 0000775 0000000 0000000 00000000051 14326712445 0022614 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/012_starting_backend_bck1/req.out 0000664 0000000 0000000 00000000027 14326712445 0022652 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/013_creating_farm_lb0/ 0000775 0000000 0000000 00000000000 14326712445 0020470 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/013_creating_farm_lb0/data.json 0000664 0000000 0000000 00000001134 14326712445 0022273 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb0",
"family" : "ipv4",
"virtual-addr" : "200.1.1.2",
"virtual-ports" : "8080",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.222",
"port" : "80",
"weight" : "5",
"mark" : "0x0000010",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.223",
"port" : "80",
"weight" : "5",
"mark" : "0x0000011",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/013_creating_farm_lb0/nft.out 0000664 0000000 0000000 00000003234 14326712445 0022012 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01,
tcp . 200.1.1.2 . 8080 : goto filter-lb0 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01,
tcp . 200.1.1.2 . 8080 : goto nat-lb0 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
chain filter-lb0 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000010, 5-9 : 0x80000011 }
}
chain nat-lb0 {
ip protocol tcp dnat ip to ct mark map { 0x80000010 : 172.16.138.222 . 80, 0x80000011 : 172.16.138.223 . 80 }
}
}
nftlb-1.0.7/tests/api/013_creating_farm_lb0/obj.out 0000664 0000000 0000000 00000016274 14326712445 0022005 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
},
{
"name": "lb0",
"family": "ipv4",
"virtual-addr": "200.1.1.2",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb0-addr",
"family": "ipv4",
"ip-addr": "200.1.1.2",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.222",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x10",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.223",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x11",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/013_creating_farm_lb0/req.api 0000775 0000000 0000000 00000000051 14326712445 0021751 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/013_creating_farm_lb0/req.out 0000664 0000000 0000000 00000000027 14326712445 0022007 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/014_stopping_farm_lb0/ 0000775 0000000 0000000 00000000000 14326712445 0020540 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/014_stopping_farm_lb0/data.json 0000664 0000000 0000000 00000000103 14326712445 0022336 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb0",
"state" : "down"
}
]
}
nftlb-1.0.7/tests/api/014_stopping_farm_lb0/nft.out 0000664 0000000 0000000 00000002460 14326712445 0022062 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/014_stopping_farm_lb0/obj.out 0000664 0000000 0000000 00000016276 14326712445 0022057 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
},
{
"name": "lb0",
"family": "ipv4",
"virtual-addr": "200.1.1.2",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "down",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb0-addr",
"family": "ipv4",
"ip-addr": "200.1.1.2",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.222",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x10",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.223",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x11",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/014_stopping_farm_lb0/req.api 0000775 0000000 0000000 00000000051 14326712445 0022021 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/014_stopping_farm_lb0/req.out 0000664 0000000 0000000 00000000027 14326712445 0022057 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/015_deleting_farm_lb0/ 0000775 0000000 0000000 00000000000 14326712445 0020471 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/015_deleting_farm_lb0/nft.out 0000664 0000000 0000000 00000002460 14326712445 0022013 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/015_deleting_farm_lb0/obj.out 0000664 0000000 0000000 00000010613 14326712445 0021775 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/015_deleting_farm_lb0/req.api 0000775 0000000 0000000 00000000036 14326712445 0021755 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb0"
nftlb-1.0.7/tests/api/015_deleting_farm_lb0/req.out 0000664 0000000 0000000 00000000027 14326712445 0022010 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/016_setting_policy_mylist/ 0000775 0000000 0000000 00000000000 14326712445 0021572 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/016_setting_policy_mylist/data.json 0000664 0000000 0000000 00000000211 14326712445 0023370 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "mylist",
"type" : "blacklist",
"elements" : [ {
"data" : "35.195.60.76"
}
]
}
]
}
nftlb-1.0.7/tests/api/016_setting_policy_mylist/nft.out 0000664 0000000 0000000 00000002711 14326712445 0023113 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/016_setting_policy_mylist/obj.out 0000664 0000000 0000000 00000001175 14326712445 0023101 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "mylist",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/016_setting_policy_mylist/req.api 0000775 0000000 0000000 00000000033 14326712445 0023053 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/016_setting_policy_mylist/req.out 0000664 0000000 0000000 00000000027 14326712445 0023111 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/017_changing_vip_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0022103 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/017_changing_vip_in_farm_lb01/data.json 0000664 0000000 0000000 00000000120 14326712445 0023700 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"virtual-addr" : "127.0.0.1"
}
]
}
nftlb-1.0.7/tests/api/017_changing_vip_in_farm_lb01/nft.out 0000664 0000000 0000000 00000002711 14326712445 0023424 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/017_changing_vip_in_farm_lb01/obj.out 0000664 0000000 0000000 00000010613 14326712445 0023407 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/017_changing_vip_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0023364 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/017_changing_vip_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0023422 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/018_adding_policy_mylist_into_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0024221 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/018_adding_policy_mylist_into_farm_lb01/data.json 0000664 0000000 0000000 00000000145 14326712445 0026025 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"policies" : [ {
"name" : "mylist"
}
]
}
]
}
nftlb-1.0.7/tests/api/018_adding_policy_mylist_into_farm_lb01/nft.out 0000664 0000000 0000000 00000003701 14326712445 0025542 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } log prefix "policy-BL-mylist-lb01 " drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/018_adding_policy_mylist_into_farm_lb01/obj.out 0000664 0000000 0000000 00000011041 14326712445 0025521 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/018_adding_policy_mylist_into_farm_lb01/req.api 0000775 0000000 0000000 00000000030 14326712445 0025477 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/018_adding_policy_mylist_into_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0025540 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/019_changing_source_address_of_bck2/ 0000775 0000000 0000000 00000000000 14326712445 0023370 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/019_changing_source_address_of_bck2/data.json 0000664 0000000 0000000 00000000220 14326712445 0025166 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck2",
"source-addr" : "192.168.105.189"
}
]
}
]
}
nftlb-1.0.7/tests/api/019_changing_source_address_of_bck2/nft.out 0000664 0000000 0000000 00000003757 14326712445 0024724 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } log prefix "policy-BL-mylist-lb01 " drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000003 : 192.168.105.189 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x00000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x00000003 : 172.16.138.204 . 80, 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/019_changing_source_address_of_bck2/obj.out 0000664 0000000 0000000 00000011153 14326712445 0024674 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"source-addr": "192.168.105.189",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/019_changing_source_address_of_bck2/req.api 0000775 0000000 0000000 00000000051 14326712445 0024651 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/019_changing_source_address_of_bck2/req.out 0000664 0000000 0000000 00000000027 14326712445 0024707 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/020_deleting_policy_mylist/ 0000775 0000000 0000000 00000000000 14326712445 0021703 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/020_deleting_policy_mylist/nft.out 0000664 0000000 0000000 00000002536 14326712445 0023231 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000003 : 192.168.105.189 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x00000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x00000003 : 172.16.138.204 . 80, 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/020_deleting_policy_mylist/obj.out 0000664 0000000 0000000 00000000032 14326712445 0023201 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/020_deleting_policy_mylist/req.api 0000775 0000000 0000000 00000000044 14326712445 0023166 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies/mylist"
nftlb-1.0.7/tests/api/020_deleting_policy_mylist/req.out 0000664 0000000 0000000 00000000027 14326712445 0023222 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/021_changing_backend_port_on_bck2/ 0000775 0000000 0000000 00000000000 14326712445 0023017 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/021_changing_backend_port_on_bck2/data.json 0000664 0000000 0000000 00000000174 14326712445 0024625 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck2",
"port" : "81"
}
]
}
]
}
nftlb-1.0.7/tests/api/021_changing_backend_port_on_bck2/nft.out 0000664 0000000 0000000 00000002536 14326712445 0024345 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000003 : 192.168.105.189 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x00000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x00000003 : 172.16.138.204 . 81, 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/021_changing_backend_port_on_bck2/obj.out 0000664 0000000 0000000 00000010725 14326712445 0024327 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "81",
"source-addr": "192.168.105.189",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/021_changing_backend_port_on_bck2/req.api 0000775 0000000 0000000 00000000051 14326712445 0024300 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/021_changing_backend_port_on_bck2/req.out 0000664 0000000 0000000 00000000027 14326712445 0024336 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/022_creating_local_vservice_lb02_with_limits/ 0000775 0000000 0000000 00000000000 14326712445 0025241 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/022_creating_local_vservice_lb02_with_limits/data.json 0000664 0000000 0000000 00000000234 14326712445 0027044 0 ustar 00root root 0000000 0000000 { "farms" : [ { "name" : "lb02", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "udp", "mode" : "dnat", "new-rtlimit" : "0" } ] }
nftlb-1.0.7/tests/api/022_creating_local_vservice_lb02_with_limits/nft.out 0000664 0000000 0000000 00000002770 14326712445 0026567 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto filter-lb02,
tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto nat-lb02,
tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000003 : 192.168.105.189 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x00000003, 15-19 : 0x80000004 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x00000003 : 172.16.138.204 . 81, 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000004 : 172.16.138.205 . 80 }
}
chain filter-lb02 {
}
chain nat-lb02 {
}
}
nftlb-1.0.7/tests/api/022_creating_local_vservice_lb02_with_limits/obj.out 0000664 0000000 0000000 00000014314 14326712445 0026547 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "81",
"source-addr": "192.168.105.189",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
},
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/022_creating_local_vservice_lb02_with_limits/req.api 0000775 0000000 0000000 00000000050 14326712445 0026521 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/022_creating_local_vservice_lb02_with_limits/req.out 0000664 0000000 0000000 00000000027 14326712445 0026560 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/023_setting_source_address_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0022513 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/023_setting_source_address_lb01/data.json 0000664 0000000 0000000 00000000111 14326712445 0024310 0 ustar 00root root 0000000 0000000 { "farms" : [ { "name" : "lb01", "source-addr" : "192.168.105.188" } ] }
nftlb-1.0.7/tests/api/023_setting_source_address_lb01/nft.out 0000664 0000000 0000000 00000003122 14326712445 0024031 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto filter-lb02,
tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto nat-lb02,
tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000001 : 192.168.105.188, 0x00000002 : 192.168.105.188, 0x00000003 : 192.168.105.189, 0x00000004 : 192.168.105.188 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter-lb02 {
}
chain nat-lb02 {
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x00000001, 5-9 : 0x00000002, 10-14 : 0x00000003, 15-19 : 0x00000004 }
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x00000001 : 172.16.138.202 . 80, 0x00000002 : 172.16.138.203 . 80, 0x00000003 : 172.16.138.204 . 81, 0x00000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/023_setting_source_address_lb01/obj.out 0000664 0000000 0000000 00000014333 14326712445 0024022 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "192.168.105.188",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "81",
"source-addr": "192.168.105.189",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
},
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/023_setting_source_address_lb01/req.api 0000775 0000000 0000000 00000000050 14326712445 0023773 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/023_setting_source_address_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0024032 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/024_setting_source_address_bck1/ 0000775 0000000 0000000 00000000000 14326712445 0022576 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/024_setting_source_address_bck1/data.json 0000664 0000000 0000000 00000000157 14326712445 0024405 0 ustar 00root root 0000000 0000000 { "farms" : [ { "name" : "lb01", "backends" : [ { "name" : "bck1", "source-addr" : "192.168.105.187" } ] } ] }
nftlb-1.0.7/tests/api/024_setting_source_address_bck1/nft.out 0000664 0000000 0000000 00000003122 14326712445 0024114 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto filter-lb02,
tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto nat-lb02,
tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000001 : 192.168.105.188, 0x00000002 : 192.168.105.187, 0x00000003 : 192.168.105.189, 0x00000004 : 192.168.105.188 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter-lb02 {
}
chain nat-lb02 {
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-4 : 0x00000001, 5-9 : 0x00000002, 10-14 : 0x00000003, 15-19 : 0x00000004 }
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x00000001 : 172.16.138.202 . 80, 0x00000002 : 172.16.138.203 . 80, 0x00000003 : 172.16.138.204 . 81, 0x00000004 : 172.16.138.205 . 80 }
}
}
nftlb-1.0.7/tests/api/024_setting_source_address_bck1/obj.out 0000664 0000000 0000000 00000014445 14326712445 0024111 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "192.168.105.188",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"source-addr": "192.168.105.187",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "81",
"source-addr": "192.168.105.189",
"weight": "5",
"priority": "2",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "172.16.138.205",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck4",
"ip-addr": "172.16.138.206",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "down"
}
],
"policies": []
},
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/024_setting_source_address_bck1/req.api 0000775 0000000 0000000 00000000050 14326712445 0024056 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/024_setting_source_address_bck1/req.out 0000664 0000000 0000000 00000000027 14326712445 0024115 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/025_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/025_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021426 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/025_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021422 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/025_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021400 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/025_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/026_creating_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0021456 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/026_creating_farm_newfarm/data.json 0000664 0000000 0000000 00000001417 14326712445 0023265 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "newfarm", "family": "ipv4", "virtual-addr": "127.0.0.1", "virtual-ports": "80", "source-addr": "", "mode": "snat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "none", "persist-ttl": "60", "helper": "none", "log": "none", "mark": "0x0", "priority": "1", "state": "up", "backends": [] } ]}
nftlb-1.0.7/tests/api/026_creating_farm_newfarm/nft.out 0000664 0000000 0000000 00000002047 14326712445 0023001 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/026_creating_farm_newfarm/obj.out 0000664 0000000 0000000 00000003424 14326712445 0022764 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/026_creating_farm_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0022737 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/026_creating_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022775 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/027_setting_up_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0022044 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/027_setting_up_farm_newfarm/data.json 0000664 0000000 0000000 00000000071 14326712445 0023646 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "state" : "up" } ] }
nftlb-1.0.7/tests/api/027_setting_up_farm_newfarm/nft.out 0000664 0000000 0000000 00000002047 14326712445 0023367 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/027_setting_up_farm_newfarm/obj.out 0000664 0000000 0000000 00000003424 14326712445 0023352 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/027_setting_up_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0023324 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/027_setting_up_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023363 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/028_setting_persistence_to_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0024447 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/028_setting_persistence_to_farm_newfarm/data.json 0000664 0000000 0000000 00000000102 14326712445 0026244 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "persistence" : "srcip" } ] }
nftlb-1.0.7/tests/api/028_setting_persistence_to_farm_newfarm/nft.out 0000664 0000000 0000000 00000002242 14326712445 0025767 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/028_setting_persistence_to_farm_newfarm/obj.out 0000664 0000000 0000000 00000003426 14326712445 0025757 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/028_setting_persistence_to_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0025727 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/028_setting_persistence_to_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0025766 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/029_setting_protocol_tcp_to_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0024633 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/029_setting_protocol_tcp_to_farm_newfarm/data.json 0000664 0000000 0000000 00000000122 14326712445 0026432 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "protocol" : "tcp" , "helper" : "none" } ] }
nftlb-1.0.7/tests/api/029_setting_protocol_tcp_to_farm_newfarm/nft.out 0000664 0000000 0000000 00000002242 14326712445 0026153 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/029_setting_protocol_tcp_to_farm_newfarm/obj.out 0000664 0000000 0000000 00000003426 14326712445 0026143 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/029_setting_protocol_tcp_to_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0026113 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/029_setting_protocol_tcp_to_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0026152 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/030_setting_persistence_ttl_to_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0025323 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/030_setting_persistence_ttl_to_farm_newfarm/data.json 0000664 0000000 0000000 00000000100 14326712445 0027116 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "persist-ttl" : "120" } ] }
nftlb-1.0.7/tests/api/030_setting_persistence_ttl_to_farm_newfarm/nft.out 0000664 0000000 0000000 00000002242 14326712445 0026643 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/030_setting_persistence_ttl_to_farm_newfarm/obj.out 0000664 0000000 0000000 00000003427 14326712445 0026634 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/030_setting_persistence_ttl_to_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0026603 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/030_setting_persistence_ttl_to_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0026642 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/031_setting_virtual_address_to_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0025310 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/031_setting_virtual_address_to_farm_newfarm/data.json 0000664 0000000 0000000 00000000107 14326712445 0027112 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "127.0.0.1" } ] }
nftlb-1.0.7/tests/api/031_setting_virtual_address_to_farm_newfarm/nft.out 0000664 0000000 0000000 00000002242 14326712445 0026630 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/031_setting_virtual_address_to_farm_newfarm/obj.out 0000664 0000000 0000000 00000003427 14326712445 0026621 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/031_setting_virtual_address_to_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0026570 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/031_setting_virtual_address_to_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0026627 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/032_setting_virtual_ports_to_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0025033 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/032_setting_virtual_ports_to_farm_newfarm/data.json 0000664 0000000 0000000 00000000101 14326712445 0026627 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-ports" : "80" } ] }
nftlb-1.0.7/tests/api/032_setting_virtual_ports_to_farm_newfarm/nft.out 0000664 0000000 0000000 00000002242 14326712445 0026353 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/032_setting_virtual_ports_to_farm_newfarm/obj.out 0000664 0000000 0000000 00000003427 14326712445 0026344 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/032_setting_virtual_ports_to_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0026313 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/032_setting_virtual_ports_to_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0026352 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/033_creating_backend_bck0_into_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0025053 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/033_creating_backend_bck0_into_farm_newfarm/data.json 0000664 0000000 0000000 00000000305 14326712445 0026655 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "backends" : [ { "name" : "bck0", "ip-addr" : "192.168.104.254", "port" : "80", "mark" : "0x200", "weight" : "1", "est-connlimit" : "0", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/033_creating_backend_bck0_into_farm_newfarm/nft.out 0000664 0000000 0000000 00000002751 14326712445 0026400 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x80000200 }
ct mark != { 0x00000000, 0x80000000 } update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/033_creating_backend_bck0_into_farm_newfarm/obj.out 0000664 0000000 0000000 00000004505 14326712445 0026362 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/033_creating_backend_bck0_into_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0026333 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/033_creating_backend_bck0_into_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0026372 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/034_setting_source_address_to_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0025125 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/034_setting_source_address_to_farm_newfarm/data.json 0000664 0000000 0000000 00000000112 14326712445 0026723 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "source-addr" : "192.168.104.22" } ] }
nftlb-1.0.7/tests/api/034_setting_source_address_to_farm_newfarm/nft.out 0000664 0000000 0000000 00000003006 14326712445 0026444 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/034_setting_source_address_to_farm_newfarm/obj.out 0000664 0000000 0000000 00000004523 14326712445 0026434 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/034_setting_source_address_to_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0026405 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/034_setting_source_address_to_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0026444 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/035_creating_backend_bck1_into_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0025056 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/035_creating_backend_bck1_into_farm_newfarm/data.json 0000664 0000000 0000000 00000000327 14326712445 0026664 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "backends" : [ { "name" : "bck1", "ip-addr" : "192.168.105.254", "port" : "80", "mark" : "0x201", "weight" : "1", "priority" : "1", "est-connlimit" : "0", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/035_creating_backend_bck1_into_farm_newfarm/nft.out 0000664 0000000 0000000 00000003126 14326712445 0026400 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22, 0x00000201 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x00000200, 1 : 0x00000201 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80, 0x00000201 : 192.168.105.254 . 80 }
}
}
nftlb-1.0.7/tests/api/035_creating_backend_bck1_into_farm_newfarm/obj.out 0000664 0000000 0000000 00000005551 14326712445 0026367 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.105.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/035_creating_backend_bck1_into_farm_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0026336 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/035_creating_backend_bck1_into_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0026375 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/036_change_proto_all_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0022156 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/036_change_proto_all_newfarm/data.json 0000664 0000000 0000000 00000000132 14326712445 0023756 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "127.0.1.1", "protocol" : "all" } ] }
nftlb-1.0.7/tests/api/036_change_proto_all_newfarm/nft.out 0000664 0000000 0000000 00000003405 14326712445 0023500 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.1.1 . 80 : goto filter-newfarm,
udp . 127.0.1.1 . 80 : goto filter-newfarm,
sctp . 127.0.1.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.1.1 . 80 : goto nat-newfarm,
udp . 127.0.1.1 . 80 : goto nat-newfarm,
sctp . 127.0.1.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22, 0x00000201 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x00000200, 1 : 0x00000201 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
dnat to ct mark map { 0x00000200 : 192.168.104.254, 0x00000201 : 192.168.105.254 }
}
}
nftlb-1.0.7/tests/api/036_change_proto_all_newfarm/obj.out 0000664 0000000 0000000 00000005551 14326712445 0023467 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.1.1",
"virtual-ports": "80",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.1.1",
"ports": "80",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.105.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/036_change_proto_all_newfarm/req.api 0000775 0000000 0000000 00000000050 14326712445 0023436 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/036_change_proto_all_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023475 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/037_remove_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0021161 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/037_remove_farm_newfarm/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022467 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/037_remove_farm_newfarm/obj.out 0000664 0000000 0000000 00000000027 14326712445 0022463 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/037_remove_farm_newfarm/req.api 0000775 0000000 0000000 00000000042 14326712445 0022442 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/newfarm"
nftlb-1.0.7/tests/api/037_remove_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022500 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/038_remove_farms/ 0000775 0000000 0000000 00000000000 14326712445 0017626 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/038_remove_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021134 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/038_remove_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021130 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/038_remove_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021106 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/038_remove_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021145 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/039_create_local_farm_newfarm_without_est_limit/ 0000775 0000000 0000000 00000000000 14326712445 0026137 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/039_create_local_farm_newfarm_without_est_limit/data.json 0000664 0000000 0000000 00000000241 14326712445 0027740 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "udp", "mode" : "dnat", "est-connlimit" : "0" } ] }
nftlb-1.0.7/tests/api/039_create_local_farm_newfarm_without_est_limit/nft.out 0000664 0000000 0000000 00000001772 14326712445 0027466 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/039_create_local_farm_newfarm_without_est_limit/obj.out 0000664 0000000 0000000 00000003434 14326712445 0027446 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/039_create_local_farm_newfarm_without_est_limit/req.api 0000775 0000000 0000000 00000000050 14326712445 0027417 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/039_create_local_farm_newfarm_without_est_limit/req.out 0000664 0000000 0000000 00000000027 14326712445 0027456 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/040_delete_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0021120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/040_delete_farm_newfarm/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022426 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/040_delete_farm_newfarm/obj.out 0000664 0000000 0000000 00000000027 14326712445 0022422 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/040_delete_farm_newfarm/req.api 0000775 0000000 0000000 00000000042 14326712445 0022401 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/newfarm"
nftlb-1.0.7/tests/api/040_delete_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/041_create_local_farm_newfarm_without_rst_limit/ 0000775 0000000 0000000 00000000000 14326712445 0026145 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/041_create_local_farm_newfarm_without_rst_limit/data.json 0000664 0000000 0000000 00000000237 14326712445 0027753 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "udp", "mode" : "dnat", "rst-rtlimit" : "0" } ] }
nftlb-1.0.7/tests/api/041_create_local_farm_newfarm_without_rst_limit/nft.out 0000664 0000000 0000000 00000001772 14326712445 0027474 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/041_create_local_farm_newfarm_without_rst_limit/obj.out 0000664 0000000 0000000 00000003434 14326712445 0027454 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/041_create_local_farm_newfarm_without_rst_limit/req.api 0000775 0000000 0000000 00000000050 14326712445 0027425 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/041_create_local_farm_newfarm_without_rst_limit/req.out 0000664 0000000 0000000 00000000027 14326712445 0027464 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/042_remove_farms/ 0000775 0000000 0000000 00000000000 14326712445 0017621 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/042_remove_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021127 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/042_remove_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021123 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/042_remove_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021101 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/042_remove_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021140 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/043_create_farm_newfarm_with_backend/ 0000775 0000000 0000000 00000000000 14326712445 0023626 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/043_create_farm_newfarm_with_backend/data.json 0000664 0000000 0000000 00000002511 14326712445 0025431 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "newfarm", "family": "ipv4", "virtual-addr": "192.168.105.189", "virtual-ports": "80", "source-addr": "192.168.104.22", "mode": "snat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "srcip ", "persist-ttl": "120", "helper": "none", "log": "none", "mark": "0x0", "priority": "1", "state": "up", "backends": [ { "name": "bck0", "ip-addr": "192.168.104.254", "port": "80", "weight": "1", "priority": "1", "mark": "0x200", "est-connlimit": "0", "state": "up" } ] } ]}
nftlb-1.0.7/tests/api/043_create_farm_newfarm_with_backend/nft.out 0000664 0000000 0000000 00000003022 14326712445 0025143 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/043_create_farm_newfarm_with_backend/obj.out 0000664 0000000 0000000 00000004537 14326712445 0025142 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/043_create_farm_newfarm_with_backend/req.api 0000775 0000000 0000000 00000000050 14326712445 0025106 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/043_create_farm_newfarm_with_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0025145 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/044_change_protocol_without_helper/ 0000775 0000000 0000000 00000000000 14326712445 0023426 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/044_change_protocol_without_helper/data.json 0000664 0000000 0000000 00000000122 14326712445 0025225 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "protocol" : "tcp" , "helper" : "none" } ] }
nftlb-1.0.7/tests/api/044_change_protocol_without_helper/nft.out 0000664 0000000 0000000 00000003022 14326712445 0024743 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/044_change_protocol_without_helper/obj.out 0000664 0000000 0000000 00000004537 14326712445 0024742 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/044_change_protocol_without_helper/req.api 0000775 0000000 0000000 00000000050 14326712445 0024706 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/044_change_protocol_without_helper/req.out 0000664 0000000 0000000 00000000027 14326712445 0024745 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/045_change_persistence_timeout/ 0000775 0000000 0000000 00000000000 14326712445 0022536 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/045_change_persistence_timeout/data.json 0000664 0000000 0000000 00000000100 14326712445 0024331 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "persist-ttl" : "120" } ] }
nftlb-1.0.7/tests/api/045_change_persistence_timeout/nft.out 0000664 0000000 0000000 00000003022 14326712445 0024053 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/045_change_persistence_timeout/obj.out 0000664 0000000 0000000 00000004537 14326712445 0024052 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/045_change_persistence_timeout/req.api 0000775 0000000 0000000 00000000050 14326712445 0024016 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/045_change_persistence_timeout/req.out 0000664 0000000 0000000 00000000027 14326712445 0024055 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/046_change_virtual_address/ 0000775 0000000 0000000 00000000000 14326712445 0021640 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/046_change_virtual_address/data.json 0000664 0000000 0000000 00000000115 14326712445 0023441 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189" } ] }
nftlb-1.0.7/tests/api/046_change_virtual_address/nft.out 0000664 0000000 0000000 00000003022 14326712445 0023155 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/046_change_virtual_address/obj.out 0000664 0000000 0000000 00000004537 14326712445 0023154 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/046_change_virtual_address/req.api 0000775 0000000 0000000 00000000050 14326712445 0023120 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/046_change_virtual_address/req.out 0000664 0000000 0000000 00000000027 14326712445 0023157 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/047_change_multi_port/ 0000775 0000000 0000000 00000000000 14326712445 0020644 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/047_change_multi_port/data.json 0000664 0000000 0000000 00000000110 14326712445 0022440 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-ports" : "9443,9444" } ] }
nftlb-1.0.7/tests/api/047_change_multi_port/nft.out 0000664 0000000 0000000 00000003213 14326712445 0022163 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/047_change_multi_port/obj.out 0000664 0000000 0000000 00000004555 14326712445 0022160 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "9443,9444",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "9443,9444",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/047_change_multi_port/req.api 0000775 0000000 0000000 00000000050 14326712445 0022124 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/047_change_multi_port/req.out 0000664 0000000 0000000 00000000027 14326712445 0022163 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/048_set_log_to_none/ 0000775 0000000 0000000 00000000000 14326712445 0020317 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/048_set_log_to_none/data.json 0000664 0000000 0000000 00000000070 14326712445 0022120 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "log" : "none" } ] }
nftlb-1.0.7/tests/api/048_set_log_to_none/nft.out 0000664 0000000 0000000 00000003213 14326712445 0021636 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/048_set_log_to_none/obj.out 0000664 0000000 0000000 00000004555 14326712445 0021633 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "9443,9444",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "9443,9444",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/048_set_log_to_none/req.api 0000775 0000000 0000000 00000000050 14326712445 0021577 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/048_set_log_to_none/req.out 0000664 0000000 0000000 00000000027 14326712445 0021636 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/049_change_scheduler_to_weight/ 0000775 0000000 0000000 00000000000 14326712445 0022477 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/049_change_scheduler_to_weight/data.json 0000664 0000000 0000000 00000000101 14326712445 0024273 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "scheduler" : "weight" } ] }
nftlb-1.0.7/tests/api/049_change_scheduler_to_weight/nft.out 0000664 0000000 0000000 00000003213 14326712445 0024016 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/049_change_scheduler_to_weight/obj.out 0000664 0000000 0000000 00000004555 14326712445 0024013 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "9443,9444",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "9443,9444",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/049_change_scheduler_to_weight/req.api 0000775 0000000 0000000 00000000050 14326712445 0023757 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/049_change_scheduler_to_weight/req.out 0000664 0000000 0000000 00000000027 14326712445 0024016 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/050_change_protocol_tcp_without_helper/ 0000775 0000000 0000000 00000000000 14326712445 0024271 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/050_change_protocol_tcp_without_helper/data.json 0000664 0000000 0000000 00000000122 14326712445 0026070 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "protocol" : "tcp" , "helper" : "none" } ] }
nftlb-1.0.7/tests/api/050_change_protocol_tcp_without_helper/nft.out 0000664 0000000 0000000 00000003213 14326712445 0025610 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/050_change_protocol_tcp_without_helper/obj.out 0000664 0000000 0000000 00000004555 14326712445 0025605 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "9443,9444",
"source-addr": "192.168.104.22",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "9443,9444",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/050_change_protocol_tcp_without_helper/req.api 0000775 0000000 0000000 00000000050 14326712445 0025551 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PUT"
URI="farms"
nftlb-1.0.7/tests/api/050_change_protocol_tcp_without_helper/req.out 0000664 0000000 0000000 00000000027 14326712445 0025610 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/051_setting_policy_blacklist_with_overlap/ 0000775 0000000 0000000 00000000000 14326712445 0025003 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/051_setting_policy_blacklist_with_overlap/data.json 0000664 0000000 0000000 00000000757 14326712445 0026620 0 ustar 00root root 0000000 0000000 {"policies" : [ { "name" : "blacklist", "elements" : [ { "data" : "103.15.28.215" }, { "data" : "103.208.220.122" }, { "data" : "103.208.220.226" }, { "data" : "103.234.220.195" }, { "data" : "103.234.220.197" }, { "data" : "103.236.201.110" }, { "data" : "103.236.201.88" }, { "data" : "103.28.52.93" }, { "data" : "103.28.53.138" }, { "data" : "103.75.190.11" }, { "data" : "104.192.0.58" }, { "data" : "104.194.228.240" }, { "data" : "104.196.43.128" }, { "data" : "103.15.28.0/24" } ] } ] }
nftlb-1.0.7/tests/api/051_setting_policy_blacklist_with_overlap/nft.out 0000664 0000000 0000000 00000004521 14326712445 0026325 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
table netdev nftlb {
set blacklist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 103.15.28.0/24 counter packets 0 bytes 0, 103.28.52.93 counter packets 0 bytes 0,
103.28.53.138 counter packets 0 bytes 0, 103.75.190.11 counter packets 0 bytes 0,
103.208.220.122 counter packets 0 bytes 0, 103.208.220.226 counter packets 0 bytes 0,
103.234.220.195 counter packets 0 bytes 0, 103.234.220.197 counter packets 0 bytes 0,
103.236.201.88 counter packets 0 bytes 0, 103.236.201.110 counter packets 0 bytes 0,
104.192.0.58 counter packets 0 bytes 0, 104.194.228.240 counter packets 0 bytes 0,
104.196.43.128 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/051_setting_policy_blacklist_with_overlap/obj.out 0000664 0000000 0000000 00000007262 14326712445 0026315 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "blacklist",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "103.15.28.0/24",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.28.52.93",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.28.53.138",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.75.190.11",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.208.220.122",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.208.220.226",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.234.220.195",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.234.220.197",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.236.201.88",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.236.201.110",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.192.0.58",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.194.228.240",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.196.43.128",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/051_setting_policy_blacklist_with_overlap/req.api 0000775 0000000 0000000 00000000054 14326712445 0026267 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="policies"
FILE="data.json"
nftlb-1.0.7/tests/api/051_setting_policy_blacklist_with_overlap/req.out 0000664 0000000 0000000 00000000027 14326712445 0026322 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/052_deleting_elements_of_blacklist/ 0000775 0000000 0000000 00000000000 14326712445 0023340 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/052_deleting_elements_of_blacklist/nft.out 0000664 0000000 0000000 00000003357 14326712445 0024670 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
table netdev nftlb {
set blacklist {
type ipv4_addr
flags interval
counter
auto-merge
}
}
nftlb-1.0.7/tests/api/052_deleting_elements_of_blacklist/obj.out 0000664 0000000 0000000 00000000546 14326712445 0024650 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "blacklist",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": []
}
]
} nftlb-1.0.7/tests/api/052_deleting_elements_of_blacklist/req.api 0000775 0000000 0000000 00000000060 14326712445 0024621 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies/blacklist/elements"
nftlb-1.0.7/tests/api/052_deleting_elements_of_blacklist/req.out 0000664 0000000 0000000 00000000027 14326712445 0024657 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/053_setting_policy_blacklist_with_overlap/ 0000775 0000000 0000000 00000000000 14326712445 0025005 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/053_setting_policy_blacklist_with_overlap/data.json 0000664 0000000 0000000 00000000757 14326712445 0026622 0 ustar 00root root 0000000 0000000 {"policies" : [ { "name" : "blacklist", "elements" : [ { "data" : "103.15.28.215" }, { "data" : "103.208.220.122" }, { "data" : "103.208.220.226" }, { "data" : "103.234.220.195" }, { "data" : "103.234.220.197" }, { "data" : "103.236.201.110" }, { "data" : "103.236.201.88" }, { "data" : "103.28.52.93" }, { "data" : "103.28.53.138" }, { "data" : "103.75.190.11" }, { "data" : "104.192.0.58" }, { "data" : "104.194.228.240" }, { "data" : "104.196.43.128" }, { "data" : "103.15.28.0/24" } ] } ] }
nftlb-1.0.7/tests/api/053_setting_policy_blacklist_with_overlap/nft.out 0000664 0000000 0000000 00000004521 14326712445 0026327 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
table netdev nftlb {
set blacklist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 103.15.28.0/24 counter packets 0 bytes 0, 103.28.52.93 counter packets 0 bytes 0,
103.28.53.138 counter packets 0 bytes 0, 103.75.190.11 counter packets 0 bytes 0,
103.208.220.122 counter packets 0 bytes 0, 103.208.220.226 counter packets 0 bytes 0,
103.234.220.195 counter packets 0 bytes 0, 103.234.220.197 counter packets 0 bytes 0,
103.236.201.88 counter packets 0 bytes 0, 103.236.201.110 counter packets 0 bytes 0,
104.192.0.58 counter packets 0 bytes 0, 104.194.228.240 counter packets 0 bytes 0,
104.196.43.128 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/053_setting_policy_blacklist_with_overlap/obj.out 0000664 0000000 0000000 00000007262 14326712445 0026317 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "blacklist",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "103.15.28.0/24",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.28.52.93",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.28.53.138",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.75.190.11",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.208.220.122",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.208.220.226",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.234.220.195",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.234.220.197",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.236.201.88",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.236.201.110",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.192.0.58",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.194.228.240",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.196.43.128",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/053_setting_policy_blacklist_with_overlap/req.api 0000775 0000000 0000000 00000000054 14326712445 0026271 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="policies"
FILE="data.json"
nftlb-1.0.7/tests/api/053_setting_policy_blacklist_with_overlap/req.out 0000664 0000000 0000000 00000000027 14326712445 0026324 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/054_deleting_element_103.15.28.0_24_of_blacklist/ 0000775 0000000 0000000 00000000000 14326712445 0024661 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/054_deleting_element_103.15.28.0_24_of_blacklist/nft.out 0000664 0000000 0000000 00000004437 14326712445 0026211 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
table netdev nftlb {
set blacklist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 103.28.52.93 counter packets 0 bytes 0, 103.28.53.138 counter packets 0 bytes 0,
103.75.190.11 counter packets 0 bytes 0, 103.208.220.122 counter packets 0 bytes 0,
103.208.220.226 counter packets 0 bytes 0, 103.234.220.195 counter packets 0 bytes 0,
103.234.220.197 counter packets 0 bytes 0, 103.236.201.88 counter packets 0 bytes 0,
103.236.201.110 counter packets 0 bytes 0, 104.192.0.58 counter packets 0 bytes 0,
104.194.228.240 counter packets 0 bytes 0, 104.196.43.128 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/054_deleting_element_103.15.28.0_24_of_blacklist/obj.out 0000664 0000000 0000000 00000006656 14326712445 0026201 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "blacklist",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "103.28.52.93",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.28.53.138",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.75.190.11",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.208.220.122",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.208.220.226",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.234.220.195",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.234.220.197",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.236.201.88",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "103.236.201.110",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.192.0.58",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.194.228.240",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "104.196.43.128",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/054_deleting_element_103.15.28.0_24_of_blacklist/req.api 0000775 0000000 0000000 00000000077 14326712445 0026152 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies/blacklist/elements/103.15.28.0/24"
nftlb-1.0.7/tests/api/054_deleting_element_103.15.28.0_24_of_blacklist/req.out 0000664 0000000 0000000 00000000027 14326712445 0026200 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/055_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020622 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/055_deleting_policies/nft.out 0000664 0000000 0000000 00000003213 14326712445 0022141 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto filter-newfarm,
tcp . 192.168.105.189 . 9444 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 9443 : goto nat-newfarm,
tcp . 192.168.105.189 . 9444 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.104.22 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/055_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022120 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/055_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022105 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/055_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022141 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/056_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020124 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/056_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021432 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/056_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021426 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/056_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021404 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/056_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021443 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/057_setting_stateless_dnat_farm/ 0000775 0000000 0000000 00000000000 14326712445 0022721 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/057_setting_stateless_dnat_farm/data.json 0000664 0000000 0000000 00000003731 14326712445 0024531 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "test1", "family": "ipv4", "virtual-addr": "127.0.0.1", "virtual-ports": "100", "ether-addr": "00:00:00:00:00:00", "mode": "stlsdnat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "none", "persist-ttl": "60", "helper": "none", "log": "none", "mark": "0x0", "priority": "1", "state": "up", "backends": [ { "name": "bck0", "ip-addr": "127.0.0.1", "port": "80", "ether-addr": "01:01:01:01:01:01", "weight": "1", "priority": "1", "mark": "0x200", "est-connlimit": "0", "state": "up" }, { "name": "bck1", "ip-addr": "127.0.1.1", "port": "80", "ether-addr": "02:02:02:02:02:02", "weight": "2", "priority": "1", "mark": "0x201", "est-connlimit": "0", "state": "up" } ] } ]}
nftlb-1.0.7/tests/api/057_setting_stateless_dnat_farm/nft.out 0000664 0000000 0000000 00000002365 14326712445 0024247 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto test1-back,
tcp . 127.0.1.1 . 80 : goto test1-back }
}
map map-test1-back {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 100 : goto test1 }
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain test1-back {
ip saddr set 127.0.0.1 ether saddr set 00:00:00:00:00:00 ether daddr set ip daddr map @map-test1-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain test1 {
meta protocol ip update @map-test1-back { ip saddr : ether saddr }
ip daddr set numgen random mod 3 map { 0 : 127.0.0.1, 1-2 : 127.0.1.1 } ether daddr set ip daddr map { 127.0.0.1 : 01:01:01:01:01:01, 127.0.1.1 : 02:02:02:02:02:02 } th dport set ether daddr map { 01:01:01:01:01:01 : 80, 02:02:02:02:02:02 : 80 } ether saddr set 00:00:00:00:00:00 fwd to "lo"
}
}
nftlb-1.0.7/tests/api/057_setting_stateless_dnat_farm/obj.out 0000664 0000000 0000000 00000005573 14326712445 0024236 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "test1",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "100",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "test1-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "100",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.1",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "127.0.1.1",
"port": "80",
"weight": "2",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/057_setting_stateless_dnat_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0024202 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/057_setting_stateless_dnat_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0024240 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/058_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020126 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/058_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021434 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/058_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021430 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/058_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021406 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/058_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021445 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/059_setting_empty_stateless_dnat_farm/ 0000775 0000000 0000000 00000000000 14326712445 0024141 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/059_setting_empty_stateless_dnat_farm/data.json 0000664 0000000 0000000 00000001355 14326712445 0025751 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "test1", "family": "ipv4", "virtual-addr": "127.0.0.1", "virtual-ports": "100", "ether-addr": "00:00:00:00:00:00", "mode": "stlsdnat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "none", "persist-ttl": "60", "helper": "none", "log": "none", "mark": "0x0", "priority": "1", "state": "up" } ]}
nftlb-1.0.7/tests/api/059_setting_empty_stateless_dnat_farm/nft.out 0000664 0000000 0000000 00000001425 14326712445 0025463 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
}
map map-test1-back {
type ipv4_addr : ether_addr
timeout 1m
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 100 : goto test1 }
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain test1-back {
ip saddr set 127.0.0.1 ether saddr set 00:00:00:00:00:00 ether daddr set ip daddr map @map-test1-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain test1 {
}
}
nftlb-1.0.7/tests/api/059_setting_empty_stateless_dnat_farm/obj.out 0000664 0000000 0000000 00000003503 14326712445 0025445 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "test1",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "100",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "test1-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "100",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/059_setting_empty_stateless_dnat_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0025422 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/059_setting_empty_stateless_dnat_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0025460 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/060_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020117 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/060_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021425 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/060_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021421 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/060_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021377 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/060_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021436 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/061_setting_new_farm_test1/ 0000775 0000000 0000000 00000000000 14326712445 0021610 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/061_setting_new_farm_test1/data.json 0000664 0000000 0000000 00000001416 14326712445 0023416 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "test1", "family": "ipv4", "virtual-addr": "172.16.1.1", "virtual-ports": "80", "source-addr": "", "mode": "snat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "none", "persist-ttl": "60", "helper": "none", "log": "none", "mark": "0x0", "priority": "1", "state": "up", "backends": [] } ]}
nftlb-1.0.7/tests/api/061_setting_new_farm_test1/nft.out 0000664 0000000 0000000 00000002041 14326712445 0023125 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.16.1.1 . 80 : goto filter-test1 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.16.1.1 . 80 : goto nat-test1 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-test1 {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-test1 {
}
}
nftlb-1.0.7/tests/api/061_setting_new_farm_test1/obj.out 0000664 0000000 0000000 00000003422 14326712445 0023114 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "test1",
"family": "ipv4",
"virtual-addr": "172.16.1.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "test1-addr",
"family": "ipv4",
"ip-addr": "172.16.1.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/061_setting_new_farm_test1/req.api 0000775 0000000 0000000 00000000051 14326712445 0023071 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/061_setting_new_farm_test1/req.out 0000664 0000000 0000000 00000000027 14326712445 0023127 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/062_setting_dnat_in_farm_test1/ 0000775 0000000 0000000 00000000000 14326712445 0022434 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/062_setting_dnat_in_farm_test1/data.json 0000664 0000000 0000000 00000000070 14326712445 0024235 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "test1", "mode" : "dnat" } ] }
nftlb-1.0.7/tests/api/062_setting_dnat_in_farm_test1/nft.out 0000664 0000000 0000000 00000001750 14326712445 0023757 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.16.1.1 . 80 : goto filter-test1 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.16.1.1 . 80 : goto nat-test1 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-test1 {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-test1 {
}
}
nftlb-1.0.7/tests/api/062_setting_dnat_in_farm_test1/obj.out 0000664 0000000 0000000 00000003422 14326712445 0023740 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "test1",
"family": "ipv4",
"virtual-addr": "172.16.1.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "test1-addr",
"family": "ipv4",
"ip-addr": "172.16.1.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/062_setting_dnat_in_farm_test1/req.api 0000775 0000000 0000000 00000000051 14326712445 0023715 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/062_setting_dnat_in_farm_test1/req.out 0000664 0000000 0000000 00000000027 14326712445 0023753 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/063_adding_backend_in_farm_test1/ 0000775 0000000 0000000 00000000000 14326712445 0022647 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/063_adding_backend_in_farm_test1/data.json 0000664 0000000 0000000 00000000272 14326712445 0024454 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "test1", "backends" : [ { "name" : "bck0", "ip-addr" : "127.0.0.2", "ether-addr" : "03:03:03:03:03:03", "port" : "80", "mark" : "0x200", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/063_adding_backend_in_farm_test1/nft.out 0000664 0000000 0000000 00000002212 14326712445 0024164 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.16.1.1 . 80 : goto filter-test1 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.16.1.1 . 80 : goto nat-test1 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-test1 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-test1 {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 127.0.0.2 . 80 }
}
}
nftlb-1.0.7/tests/api/063_adding_backend_in_farm_test1/obj.out 0000664 0000000 0000000 00000004472 14326712445 0024161 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "test1",
"family": "ipv4",
"virtual-addr": "172.16.1.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "test1-addr",
"family": "ipv4",
"ip-addr": "172.16.1.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.2",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/063_adding_backend_in_farm_test1/req.api 0000775 0000000 0000000 00000000051 14326712445 0024130 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/063_adding_backend_in_farm_test1/req.out 0000664 0000000 0000000 00000000027 14326712445 0024166 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/064_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020123 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/064_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021431 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/064_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021425 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/064_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021403 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/064_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021442 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/065_creating_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0020560 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/065_creating_farm_lb01/data.json 0000664 0000000 0000000 00000001230 14326712445 0022360 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip srcport",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"port" : "10",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"port" : "20",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/065_creating_farm_lb01/nft.out 0000664 0000000 0000000 00000003113 14326712445 0022076 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : mark
}
map persist-lb01 {
type ipv4_addr . inet_service : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr . tcp sport map @static-sessions-lb01 accept
ct state new ct mark set ip saddr . tcp sport map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr . tcp sport : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/065_creating_farm_lb01/obj.out 0000664 0000000 0000000 00000005532 14326712445 0022070 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/065_creating_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022041 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/065_creating_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022077 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/066_adding_static_sessions_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0024176 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/066_adding_static_sessions_in_farm_lb01/data.json 0000664 0000000 0000000 00000000444 14326712445 0026004 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.4 . 90",
"backend" : "bck0"
},
{
"client" : "192.168.44.5 . 91",
"backend" : "bck1"
},
{
"client" : "192.168.44.6 . 92",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/api/066_adding_static_sessions_in_farm_lb01/nft.out 0000664 0000000 0000000 00000003313 14326712445 0025516 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : mark
elements = { 192.168.44.4 . 90 : 0x80000001,
192.168.44.5 . 91 : 0x80000002,
192.168.44.6 . 92 : 0x80000002 }
}
map persist-lb01 {
type ipv4_addr . inet_service : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr . tcp sport map @static-sessions-lb01 accept
ct state new ct mark set ip saddr . tcp sport map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr . tcp sport : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/066_adding_static_sessions_in_farm_lb01/obj.out 0000664 0000000 0000000 00000006754 14326712445 0025515 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.4 . 90",
"backend": "bck0"
},
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/066_adding_static_sessions_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0025457 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/066_adding_static_sessions_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0025515 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/067_deleting_session_from_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0022342 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/067_deleting_session_from_lb01/nft.out 0000664 0000000 0000000 00000003243 14326712445 0023664 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : mark
elements = { 192.168.44.5 . 91 : 0x80000002,
192.168.44.6 . 92 : 0x80000002 }
}
map persist-lb01 {
type ipv4_addr . inet_service : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr . tcp sport map @static-sessions-lb01 accept
ct state new ct mark set ip saddr . tcp sport map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr . tcp sport : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/067_deleting_session_from_lb01/obj.out 0000664 0000000 0000000 00000006446 14326712445 0023657 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/067_deleting_session_from_lb01/req.api 0000775 0000000 0000000 00000000113 14326712445 0023622 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01/sessions/192.168.44.4_._90"
FILE="data.json"
nftlb-1.0.7/tests/api/067_deleting_session_from_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0023661 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/068_adding_static_sessions_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0024200 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/068_adding_static_sessions_in_farm_lb01/data.json 0000664 0000000 0000000 00000000220 14326712445 0025776 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.7 . 91",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/068_adding_static_sessions_in_farm_lb01/nft.out 0000664 0000000 0000000 00000003313 14326712445 0025520 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : mark
elements = { 192.168.44.5 . 91 : 0x80000002,
192.168.44.7 . 91 : 0x80000001,
192.168.44.6 . 92 : 0x80000002 }
}
map persist-lb01 {
type ipv4_addr . inet_service : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr . tcp sport map @static-sessions-lb01 accept
ct state new ct mark set ip saddr . tcp sport map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr . tcp sport : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/068_adding_static_sessions_in_farm_lb01/obj.out 0000664 0000000 0000000 00000006754 14326712445 0025517 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
},
{
"client": "192.168.44.7 . 91",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/068_adding_static_sessions_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0025461 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/068_adding_static_sessions_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0025517 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/069_change_session_structure_for_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0024746 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/069_change_session_structure_for_farm_lb01/data.json 0000664 0000000 0000000 00000000144 14326712445 0026551 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"persistence" : "srcip",
"persist-ttl" : "50"
}
]
}
nftlb-1.0.7/tests/api/069_change_session_structure_for_farm_lb01/nft.out 0000664 0000000 0000000 00000003011 14326712445 0026261 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : mark
}
map persist-lb01 {
type ipv4_addr : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr map @static-sessions-lb01 accept
ct state new ct mark set ip saddr map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/069_change_session_structure_for_farm_lb01/obj.out 0000664 0000000 0000000 00000005522 14326712445 0026255 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/069_change_session_structure_for_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0026227 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/069_change_session_structure_for_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0026265 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/070_adding_static_sessions_without_port_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0027020 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/070_adding_static_sessions_without_port_in_farm_lb01/data.json 0000664 0000000 0000000 00000000213 14326712445 0030620 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.8",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/070_adding_static_sessions_without_port_in_farm_lb01/nft.out 0000664 0000000 0000000 00000003064 14326712445 0030343 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : mark
elements = { 192.168.44.8 : 0x80000001 }
}
map persist-lb01 {
type ipv4_addr : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr map @static-sessions-lb01 accept
ct state new ct mark set ip saddr map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/070_adding_static_sessions_without_port_in_farm_lb01/obj.out 0000664 0000000 0000000 00000006123 14326712445 0030325 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/070_adding_static_sessions_without_port_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0030301 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/070_adding_static_sessions_without_port_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0030337 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/071_adding_static_sessions_without_port_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0027021 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/071_adding_static_sessions_without_port_in_farm_lb01/data.json 0000664 0000000 0000000 00000000644 14326712445 0030631 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.33",
"backend" : "bck0"
},
{
"client" : "192.168.44.34",
"backend" : "bck1"
},
{
"client" : "192.168.44.35",
"backend" : "bck0"
},
{
"client" : "192.168.44.36",
"backend" : "bck1"
},
{
"client" : "192.168.44.37",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/api/071_adding_static_sessions_without_port_in_farm_lb01/nft.out 0000664 0000000 0000000 00000003320 14326712445 0030337 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : mark
elements = { 192.168.44.8 : 0x80000001, 192.168.44.33 : 0x80000001,
192.168.44.34 : 0x80000002, 192.168.44.35 : 0x80000001,
192.168.44.36 : 0x80000002, 192.168.44.37 : 0x80000002 }
}
map persist-lb01 {
type ipv4_addr : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr map @static-sessions-lb01 accept
ct state new ct mark set ip saddr map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/071_adding_static_sessions_without_port_in_farm_lb01/obj.out 0000664 0000000 0000000 00000010035 14326712445 0030323 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
},
{
"client": "192.168.44.33",
"backend": "bck0"
},
{
"client": "192.168.44.34",
"backend": "bck1"
},
{
"client": "192.168.44.35",
"backend": "bck0"
},
{
"client": "192.168.44.36",
"backend": "bck1"
},
{
"client": "192.168.44.37",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/071_adding_static_sessions_without_port_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0030302 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/071_adding_static_sessions_without_port_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0030340 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/072_stopping_backend_bck1/ 0000775 0000000 0000000 00000000000 14326712445 0021351 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/072_stopping_backend_bck1/data.json 0000664 0000000 0000000 00000000177 14326712445 0023162 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "down"
}
]
}
]
}
nftlb-1.0.7/tests/api/072_stopping_backend_bck1/nft.out 0000664 0000000 0000000 00000003235 14326712445 0022674 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : mark
elements = { 192.168.44.8 : 0x80000001, 192.168.44.33 : 0x80000001,
192.168.44.34 : 0x80000002, 192.168.44.35 : 0x80000001,
192.168.44.36 : 0x80000002, 192.168.44.37 : 0x80000002 }
}
map persist-lb01 {
type ipv4_addr : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr map @static-sessions-lb01 accept
ct state new ct mark set ip saddr map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x80000001 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10 }
}
}
nftlb-1.0.7/tests/api/072_stopping_backend_bck1/obj.out 0000664 0000000 0000000 00000010037 14326712445 0022655 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "down"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
},
{
"client": "192.168.44.33",
"backend": "bck0"
},
{
"client": "192.168.44.34",
"backend": "bck1"
},
{
"client": "192.168.44.35",
"backend": "bck0"
},
{
"client": "192.168.44.36",
"backend": "bck1"
},
{
"client": "192.168.44.37",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/072_stopping_backend_bck1/req.api 0000775 0000000 0000000 00000000051 14326712445 0022632 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/072_stopping_backend_bck1/req.out 0000664 0000000 0000000 00000000027 14326712445 0022670 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/073_starting_backend_bck1/ 0000775 0000000 0000000 00000000000 14326712445 0021342 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/073_starting_backend_bck1/data.json 0000664 0000000 0000000 00000000175 14326712445 0023151 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/073_starting_backend_bck1/nft.out 0000664 0000000 0000000 00000003320 14326712445 0022660 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : mark
elements = { 192.168.44.8 : 0x80000001, 192.168.44.33 : 0x80000001,
192.168.44.34 : 0x80000002, 192.168.44.35 : 0x80000001,
192.168.44.36 : 0x80000002, 192.168.44.37 : 0x80000002 }
}
map persist-lb01 {
type ipv4_addr : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr map @static-sessions-lb01 accept
ct state new ct mark set ip saddr map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/073_starting_backend_bck1/obj.out 0000664 0000000 0000000 00000010035 14326712445 0022644 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
},
{
"client": "192.168.44.33",
"backend": "bck0"
},
{
"client": "192.168.44.34",
"backend": "bck1"
},
{
"client": "192.168.44.35",
"backend": "bck0"
},
{
"client": "192.168.44.36",
"backend": "bck1"
},
{
"client": "192.168.44.37",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/073_starting_backend_bck1/req.api 0000775 0000000 0000000 00000000051 14326712445 0022623 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/073_starting_backend_bck1/req.out 0000664 0000000 0000000 00000000027 14326712445 0022661 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/074_deleting_sessions_from_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0022523 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/074_deleting_sessions_from_lb01/nft.out 0000664 0000000 0000000 00000003011 14326712445 0024036 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : mark
}
map persist-lb01 {
type ipv4_addr : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr map @static-sessions-lb01 accept
ct state new ct mark set ip saddr map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/074_deleting_sessions_from_lb01/obj.out 0000664 0000000 0000000 00000005522 14326712445 0024032 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/074_deleting_sessions_from_lb01/req.api 0000775 0000000 0000000 00000000071 14326712445 0024006 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01/sessions"
FILE="data.json"
nftlb-1.0.7/tests/api/074_deleting_sessions_from_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0024042 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/075_adding_static_sessions_without_port_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0027025 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/075_adding_static_sessions_without_port_in_farm_lb01/data.json 0000664 0000000 0000000 00000000213 14326712445 0030625 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.8",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/075_adding_static_sessions_without_port_in_farm_lb01/nft.out 0000664 0000000 0000000 00000003064 14326712445 0030350 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : mark
elements = { 192.168.44.8 : 0x80000001 }
}
map persist-lb01 {
type ipv4_addr : mark
size 65535
timeout 50s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct mark set ip saddr map @static-sessions-lb01 accept
ct state new ct mark set ip saddr map @persist-lb01
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb01 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/075_adding_static_sessions_without_port_in_farm_lb01/obj.out 0000664 0000000 0000000 00000006123 14326712445 0030332 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/075_adding_static_sessions_without_port_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0030306 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/075_adding_static_sessions_without_port_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0030344 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/076_disable_persistence_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0023463 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/076_disable_persistence_in_farm_lb01/data.json 0000664 0000000 0000000 00000000112 14326712445 0025261 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"persistence" : "none"
}
]
}
nftlb-1.0.7/tests/api/076_disable_persistence_in_farm_lb01/nft.out 0000664 0000000 0000000 00000002304 14326712445 0025002 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/076_disable_persistence_in_farm_lb01/obj.out 0000664 0000000 0000000 00000005520 14326712445 0024770 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/076_disable_persistence_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0024744 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/076_disable_persistence_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0025002 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/077_enable_flow_offload_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0023424 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/077_enable_flow_offload_in_farm_lb01/data.json 0000664 0000000 0000000 00000000175 14326712445 0025233 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"virtual-addr" : "127.0.0.1",
"flow-offload" : "on",
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/api/077_enable_flow_offload_in_farm_lb01/nft.out 0000664 0000000 0000000 00000003056 14326712445 0024750 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
map forward-proto-services {
type mark : verdict
elements = { 0x80000001 : goto forward-lb01, 0x80000002 : goto forward-lb01 }
}
flowtable ft-lb01 {
hook ingress priority 50
devices = { lo }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-lb01 {
flow add @ft-lb01
}
}
nftlb-1.0.7/tests/api/077_enable_flow_offload_in_farm_lb01/obj.out 0000664 0000000 0000000 00000005566 14326712445 0024743 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"flow-offload": "on",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/077_enable_flow_offload_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0024705 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/077_enable_flow_offload_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0024743 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/078_disable_flow_offload_in_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0023602 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/078_disable_flow_offload_in_farm_lb01/data.json 0000664 0000000 0000000 00000000135 14326712445 0025405 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"flow-offload" : "off",
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/api/078_disable_flow_offload_in_farm_lb01/nft.out 0000664 0000000 0000000 00000002274 14326712445 0025127 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.10 . 10, 0x80000002 : 192.168.0.11 . 20 }
}
}
nftlb-1.0.7/tests/api/078_disable_flow_offload_in_farm_lb01/obj.out 0000664 0000000 0000000 00000005510 14326712445 0025106 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/078_disable_flow_offload_in_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0025063 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/078_disable_flow_offload_in_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0025121 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/079_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020131 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/079_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021437 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/079_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021433 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/079_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021411 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/079_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021450 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/080_creating_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0021425 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/080_creating_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000001400 14326712445 0023224 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip srcport",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"port" : "10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"port" : "20",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/api/080_creating_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000001775 14326712445 0022757 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/080_creating_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000005531 14326712445 0022734 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/080_creating_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022706 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/080_creating_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022744 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/081_adding_static_sessions_in_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0025043 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/081_adding_static_sessions_in_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000000444 14326712445 0026651 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.4 . 90",
"backend" : "bck0"
},
{
"client" : "192.168.44.5 . 91",
"backend" : "bck1"
},
{
"client" : "192.168.44.6 . 92",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/api/081_adding_static_sessions_in_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000002222 14326712445 0026361 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
elements = { 192.168.44.4 . 90 : 02:02:02:02:02:02,
192.168.44.5 . 91 : 03:03:03:03:03:03,
192.168.44.6 . 92 : 03:03:03:03:03:03 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/081_adding_static_sessions_in_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000006753 14326712445 0026361 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.4 . 90",
"backend": "bck0"
},
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/081_adding_static_sessions_in_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0026324 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/081_adding_static_sessions_in_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0026362 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/082_deleting_session_from_lb01_dsr/ 0000775 0000000 0000000 00000000000 14326712445 0023207 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/082_deleting_session_from_lb01_dsr/nft.out 0000664 0000000 0000000 00000002143 14326712445 0024527 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
elements = { 192.168.44.5 . 91 : 03:03:03:03:03:03,
192.168.44.6 . 92 : 03:03:03:03:03:03 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/082_deleting_session_from_lb01_dsr/obj.out 0000664 0000000 0000000 00000006445 14326712445 0024523 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/082_deleting_session_from_lb01_dsr/req.api 0000775 0000000 0000000 00000000113 14326712445 0024467 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01/sessions/192.168.44.4_._90"
FILE="data.json"
nftlb-1.0.7/tests/api/082_deleting_session_from_lb01_dsr/req.out 0000664 0000000 0000000 00000000027 14326712445 0024526 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/083_adding_static_sessions_in_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0025045 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/083_adding_static_sessions_in_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000000220 14326712445 0026643 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.7 . 91",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/083_adding_static_sessions_in_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000002222 14326712445 0026363 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
elements = { 192.168.44.5 . 91 : 03:03:03:03:03:03,
192.168.44.7 . 91 : 02:02:02:02:02:02,
192.168.44.6 . 92 : 03:03:03:03:03:03 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/083_adding_static_sessions_in_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000006753 14326712445 0026363 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
},
{
"client": "192.168.44.7 . 91",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/083_adding_static_sessions_in_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0026326 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/083_adding_static_sessions_in_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0026364 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/084_change_session_structure_for_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0025613 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/084_change_session_structure_for_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000000144 14326712445 0027416 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"persistence" : "srcip",
"persist-ttl" : "50"
}
]
}
nftlb-1.0.7/tests/api/084_change_session_structure_for_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000001605 14326712445 0027135 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ether_addr
}
map persist-lb01 {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether daddr set ip saddr map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether daddr set ip saddr map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/084_change_session_structure_for_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000005521 14326712445 0027121 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/084_change_session_structure_for_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0027074 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/084_change_session_structure_for_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0027132 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/085_change_session_structure_with_port_for_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0027713 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/085_change_session_structure_with_port_for_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000000156 14326712445 0031521 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"persistence" : "srcip . srcport",
"persist-ttl" : "50"
}
]
}
nftlb-1.0.7/tests/api/085_change_session_structure_with_port_for_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000001775 14326712445 0031245 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/085_change_session_structure_with_port_for_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000005531 14326712445 0031222 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/085_change_session_structure_with_port_for_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0031174 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/085_change_session_structure_with_port_for_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0031232 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/086_adding_static_sessions_without_port_in_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0027677 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/086_adding_static_sessions_without_port_in_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000000673 14326712445 0031511 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.8 . 80",
"backend" : "bck0"
},
{
"client" : "192.168.44.9 . 81",
"backend" : "bck1"
},
{
"client" : "192.168.44.10 . 82",
"backend" : "bck0"
},
{
"client" : "192.168.44.11 . 83",
"backend" : "bck1"
},
{
"client" : "192.168.44.12 . 84",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/086_adding_static_sessions_without_port_in_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000002363 14326712445 0031223 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
elements = { 192.168.44.8 . 80 : 02:02:02:02:02:02,
192.168.44.9 . 81 : 03:03:03:03:03:03,
192.168.44.10 . 82 : 02:02:02:02:02:02,
192.168.44.11 . 83 : 03:03:03:03:03:03,
192.168.44.12 . 84 : 02:02:02:02:02:02 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/086_adding_static_sessions_without_port_in_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000007572 14326712445 0031215 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8 . 80",
"backend": "bck0"
},
{
"client": "192.168.44.9 . 81",
"backend": "bck1"
},
{
"client": "192.168.44.10 . 82",
"backend": "bck0"
},
{
"client": "192.168.44.11 . 83",
"backend": "bck1"
},
{
"client": "192.168.44.12 . 84",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/086_adding_static_sessions_without_port_in_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0031160 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/086_adding_static_sessions_without_port_in_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0031216 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/087_stopping_backend_bck1_farm_dsr/ 0000775 0000000 0000000 00000000000 14326712445 0023234 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/087_stopping_backend_bck1_farm_dsr/data.json 0000664 0000000 0000000 00000000177 14326712445 0025045 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "down"
}
]
}
]
}
nftlb-1.0.7/tests/api/087_stopping_backend_bck1_farm_dsr/nft.out 0000664 0000000 0000000 00000002331 14326712445 0024553 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
elements = { 192.168.44.8 . 80 : 02:02:02:02:02:02,
192.168.44.9 . 81 : 03:03:03:03:03:03,
192.168.44.10 . 82 : 02:02:02:02:02:02,
192.168.44.11 . 83 : 03:03:03:03:03:03,
192.168.44.12 . 84 : 02:02:02:02:02:02 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 5 map { 0-4 : 02:02:02:02:02:02 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/087_stopping_backend_bck1_farm_dsr/obj.out 0000664 0000000 0000000 00000007574 14326712445 0024554 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "down"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8 . 80",
"backend": "bck0"
},
{
"client": "192.168.44.9 . 81",
"backend": "bck1"
},
{
"client": "192.168.44.10 . 82",
"backend": "bck0"
},
{
"client": "192.168.44.11 . 83",
"backend": "bck1"
},
{
"client": "192.168.44.12 . 84",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/087_stopping_backend_bck1_farm_dsr/req.api 0000775 0000000 0000000 00000000051 14326712445 0024515 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/087_stopping_backend_bck1_farm_dsr/req.out 0000664 0000000 0000000 00000000027 14326712445 0024553 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/088_starting_backend_bck1_farm_dsr/ 0000775 0000000 0000000 00000000000 14326712445 0023225 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/088_starting_backend_bck1_farm_dsr/data.json 0000664 0000000 0000000 00000000175 14326712445 0025034 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/088_starting_backend_bck1_farm_dsr/nft.out 0000664 0000000 0000000 00000002363 14326712445 0024551 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
elements = { 192.168.44.8 . 80 : 02:02:02:02:02:02,
192.168.44.9 . 81 : 03:03:03:03:03:03,
192.168.44.10 . 82 : 02:02:02:02:02:02,
192.168.44.11 . 83 : 03:03:03:03:03:03,
192.168.44.12 . 84 : 02:02:02:02:02:02 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/088_starting_backend_bck1_farm_dsr/obj.out 0000664 0000000 0000000 00000007572 14326712445 0024543 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8 . 80",
"backend": "bck0"
},
{
"client": "192.168.44.9 . 81",
"backend": "bck1"
},
{
"client": "192.168.44.10 . 82",
"backend": "bck0"
},
{
"client": "192.168.44.11 . 83",
"backend": "bck1"
},
{
"client": "192.168.44.12 . 84",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/088_starting_backend_bck1_farm_dsr/req.api 0000775 0000000 0000000 00000000051 14326712445 0024506 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/088_starting_backend_bck1_farm_dsr/req.out 0000664 0000000 0000000 00000000027 14326712445 0024544 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/089_deleting_sessions_from_lb01_dsr/ 0000775 0000000 0000000 00000000000 14326712445 0023401 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/089_deleting_sessions_from_lb01_dsr/nft.out 0000664 0000000 0000000 00000001775 14326712445 0024733 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/089_deleting_sessions_from_lb01_dsr/obj.out 0000664 0000000 0000000 00000005531 14326712445 0024710 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/089_deleting_sessions_from_lb01_dsr/req.api 0000775 0000000 0000000 00000000071 14326712445 0024664 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01/sessions"
FILE="data.json"
nftlb-1.0.7/tests/api/089_deleting_sessions_from_lb01_dsr/req.out 0000664 0000000 0000000 00000000027 14326712445 0024720 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/090_adding_static_sessions_without_port_in_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0027672 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/090_adding_static_sessions_without_port_in_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000000220 14326712445 0031470 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.8 . 80",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/090_adding_static_sessions_without_port_in_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000002064 14326712445 0031214 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
elements = { 192.168.44.8 . 80 : 02:02:02:02:02:02 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/090_adding_static_sessions_without_port_in_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000006137 14326712445 0031204 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8 . 80",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/090_adding_static_sessions_without_port_in_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0031153 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/090_adding_static_sessions_without_port_in_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0031211 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/091_disable_persistence_in_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0024330 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/091_disable_persistence_in_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000000112 14326712445 0026126 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"persistence" : "none"
}
]
}
nftlb-1.0.7/tests/api/091_disable_persistence_in_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000000730 14326712445 0025650 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/091_disable_persistence_in_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000005517 14326712445 0025643 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/091_disable_persistence_in_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0025611 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/091_disable_persistence_in_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0025647 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/092_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020124 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/092_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021432 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/092_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021426 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/092_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021404 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/092_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021443 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/093_creating_farm_stlsdnat_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0022475 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/093_creating_farm_stlsdnat_lb01/data.json 0000664 0000000 0000000 00000001405 14326712445 0024301 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "stlsdnat",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip srcport",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"port" : "10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"port" : "20",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/api/093_creating_farm_stlsdnat_lb01/nft.out 0000664 0000000 0000000 00000004203 14326712445 0024014 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ipv4_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
meta protocol ip ip daddr set ip saddr . tcp sport map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } tcp dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
meta protocol ip ip daddr set ip saddr . tcp sport map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } tcp dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/093_creating_farm_stlsdnat_lb01/obj.out 0000664 0000000 0000000 00000005613 14326712445 0024005 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/093_creating_farm_stlsdnat_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0023756 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/093_creating_farm_stlsdnat_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0024014 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/094_adding_static_sessions_in_farm_stlsdnat_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0026113 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/094_adding_static_sessions_in_farm_stlsdnat_lb01/data.json 0000664 0000000 0000000 00000000444 14326712445 0027721 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.4 . 90",
"backend" : "bck0"
},
{
"client" : "192.168.44.5 . 91",
"backend" : "bck1"
},
{
"client" : "192.168.44.6 . 92",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/api/094_adding_static_sessions_in_farm_stlsdnat_lb01/nft.out 0000664 0000000 0000000 00000004411 14326712445 0027433 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ipv4_addr
elements = { 192.168.44.4 . 90 : 192.168.0.10,
192.168.44.5 . 91 : 192.168.0.11,
192.168.44.6 . 92 : 192.168.0.11 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
meta protocol ip ip daddr set ip saddr . tcp sport map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } tcp dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
meta protocol ip ip daddr set ip saddr . tcp sport map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } tcp dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/094_adding_static_sessions_in_farm_stlsdnat_lb01/obj.out 0000664 0000000 0000000 00000007035 14326712445 0027423 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.4 . 90",
"backend": "bck0"
},
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/094_adding_static_sessions_in_farm_stlsdnat_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0027374 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/094_adding_static_sessions_in_farm_stlsdnat_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0027432 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/095_deleting_session_from_lb01_stlsdnat/ 0000775 0000000 0000000 00000000000 14326712445 0024257 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/095_deleting_session_from_lb01_stlsdnat/nft.out 0000664 0000000 0000000 00000004337 14326712445 0025606 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ipv4_addr
elements = { 192.168.44.5 . 91 : 192.168.0.11,
192.168.44.6 . 92 : 192.168.0.11 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
meta protocol ip ip daddr set ip saddr . tcp sport map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } tcp dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
meta protocol ip ip daddr set ip saddr . tcp sport map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } tcp dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/095_deleting_session_from_lb01_stlsdnat/obj.out 0000664 0000000 0000000 00000006527 14326712445 0025574 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/095_deleting_session_from_lb01_stlsdnat/req.api 0000775 0000000 0000000 00000000113 14326712445 0025537 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01/sessions/192.168.44.4_._90"
FILE="data.json"
nftlb-1.0.7/tests/api/095_deleting_session_from_lb01_stlsdnat/req.out 0000664 0000000 0000000 00000000027 14326712445 0025576 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/096_adding_static_sessions_in_farm_stlsdnat_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0026115 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/096_adding_static_sessions_in_farm_stlsdnat_lb01/data.json 0000664 0000000 0000000 00000000220 14326712445 0027713 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.7 . 91",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/096_adding_static_sessions_in_farm_stlsdnat_lb01/nft.out 0000664 0000000 0000000 00000004411 14326712445 0027435 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ipv4_addr
elements = { 192.168.44.5 . 91 : 192.168.0.11,
192.168.44.7 . 91 : 192.168.0.10,
192.168.44.6 . 92 : 192.168.0.11 }
}
map persist-lb01 {
type ipv4_addr . inet_service : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
meta protocol ip ip daddr set ip saddr . tcp sport map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } tcp dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
meta protocol ip ip daddr set ip saddr . tcp sport map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } tcp dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/096_adding_static_sessions_in_farm_stlsdnat_lb01/obj.out 0000664 0000000 0000000 00000007035 14326712445 0027425 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.5 . 91",
"backend": "bck1"
},
{
"client": "192.168.44.6 . 92",
"backend": "bck1"
},
{
"client": "192.168.44.7 . 91",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/096_adding_static_sessions_in_farm_stlsdnat_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0027376 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/096_adding_static_sessions_in_farm_stlsdnat_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0027434 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/097_change_session_structure_for_farm_stlsdnat_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0026663 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/097_change_session_structure_for_farm_stlsdnat_lb01/data.json 0000664 0000000 0000000 00000000144 14326712445 0030466 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"persistence" : "srcip",
"persist-ttl" : "50"
}
]
}
nftlb-1.0.7/tests/api/097_change_session_structure_for_farm_stlsdnat_lb01/nft.out 0000664 0000000 0000000 00000004021 14326712445 0030200 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ipv4_addr
}
map persist-lb01 {
type ipv4_addr : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/097_change_session_structure_for_farm_stlsdnat_lb01/obj.out 0000664 0000000 0000000 00000005603 14326712445 0030172 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/097_change_session_structure_for_farm_stlsdnat_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0030144 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/097_change_session_structure_for_farm_stlsdnat_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0030202 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/098_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0030746 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/098_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/data.json 0000664 0000000 0000000 00000000213 14326712445 0032546 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.8",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/098_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/nft.out 0000664 0000000 0000000 00000004076 14326712445 0032275 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ipv4_addr
elements = { 192.168.44.8 : 192.168.0.10 }
}
map persist-lb01 {
type ipv4_addr : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/098_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/obj.out 0000664 0000000 0000000 00000006204 14326712445 0032253 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/098_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0032227 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/098_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0032265 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/099_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0030747 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/099_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/data.json 0000664 0000000 0000000 00000000536 14326712445 0032557 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.33",
"backend" : "bck1"
},
{
"client" : "192.168.44.34",
"backend" : "bck0"
},
{
"client" : "192.168.44.35",
"backend" : "bck1"
},
{
"client" : "192.168.44.36",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/099_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/nft.out 0000664 0000000 0000000 00000004306 14326712445 0032272 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ipv4_addr
elements = { 192.168.44.8 : 192.168.0.10, 192.168.44.33 : 192.168.0.11,
192.168.44.34 : 192.168.0.10, 192.168.44.35 : 192.168.0.11,
192.168.44.36 : 192.168.0.10 }
}
map persist-lb01 {
type ipv4_addr : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/099_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/obj.out 0000664 0000000 0000000 00000007614 14326712445 0032262 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
},
{
"client": "192.168.44.33",
"backend": "bck1"
},
{
"client": "192.168.44.34",
"backend": "bck0"
},
{
"client": "192.168.44.35",
"backend": "bck1"
},
{
"client": "192.168.44.36",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/099_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0032230 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/099_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0032266 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/100_stopping_backend_bck1_farm_stlsdnat/ 0000775 0000000 0000000 00000000000 14326712445 0024262 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/100_stopping_backend_bck1_farm_stlsdnat/data.json 0000664 0000000 0000000 00000000177 14326712445 0026073 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "down"
}
]
}
]
}
nftlb-1.0.7/tests/api/100_stopping_backend_bck1_farm_stlsdnat/nft.out 0000664 0000000 0000000 00000004003 14326712445 0025577 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ipv4_addr
elements = { 192.168.44.8 : 192.168.0.10, 192.168.44.33 : 192.168.0.11,
192.168.44.34 : 192.168.0.10, 192.168.44.35 : 192.168.0.11,
192.168.44.36 : 192.168.0.10 }
}
map persist-lb01 {
type ipv4_addr : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02 } th dport set ether daddr map { 02:02:02:02:02:02 : 10 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02 } th dport set ether daddr map { 02:02:02:02:02:02 : 10 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen random mod 5 map { 0-4 : 192.168.0.10 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02 } th dport set ether daddr map { 02:02:02:02:02:02 : 10 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/100_stopping_backend_bck1_farm_stlsdnat/obj.out 0000664 0000000 0000000 00000007616 14326712445 0025577 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "down"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
},
{
"client": "192.168.44.33",
"backend": "bck1"
},
{
"client": "192.168.44.34",
"backend": "bck0"
},
{
"client": "192.168.44.35",
"backend": "bck1"
},
{
"client": "192.168.44.36",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/100_stopping_backend_bck1_farm_stlsdnat/req.api 0000775 0000000 0000000 00000000051 14326712445 0025543 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/100_stopping_backend_bck1_farm_stlsdnat/req.out 0000664 0000000 0000000 00000000027 14326712445 0025601 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/101_starting_backend_bck1_farm_stlsdnat/ 0000775 0000000 0000000 00000000000 14326712445 0024253 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/101_starting_backend_bck1_farm_stlsdnat/data.json 0000664 0000000 0000000 00000000175 14326712445 0026062 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/101_starting_backend_bck1_farm_stlsdnat/nft.out 0000664 0000000 0000000 00000004306 14326712445 0025576 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ipv4_addr
elements = { 192.168.44.8 : 192.168.0.10, 192.168.44.33 : 192.168.0.11,
192.168.44.34 : 192.168.0.10, 192.168.44.35 : 192.168.0.11,
192.168.44.36 : 192.168.0.10 }
}
map persist-lb01 {
type ipv4_addr : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/101_starting_backend_bck1_farm_stlsdnat/obj.out 0000664 0000000 0000000 00000007614 14326712445 0025566 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
},
{
"client": "192.168.44.33",
"backend": "bck1"
},
{
"client": "192.168.44.34",
"backend": "bck0"
},
{
"client": "192.168.44.35",
"backend": "bck1"
},
{
"client": "192.168.44.36",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/101_starting_backend_bck1_farm_stlsdnat/req.api 0000775 0000000 0000000 00000000051 14326712445 0025534 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/101_starting_backend_bck1_farm_stlsdnat/req.out 0000664 0000000 0000000 00000000027 14326712445 0025572 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/102_deleting_sessions_from_lb01_stlsdnat/ 0000775 0000000 0000000 00000000000 14326712445 0024427 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/102_deleting_sessions_from_lb01_stlsdnat/nft.out 0000664 0000000 0000000 00000004021 14326712445 0025744 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ipv4_addr
}
map persist-lb01 {
type ipv4_addr : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/102_deleting_sessions_from_lb01_stlsdnat/obj.out 0000664 0000000 0000000 00000005603 14326712445 0025736 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/102_deleting_sessions_from_lb01_stlsdnat/req.api 0000775 0000000 0000000 00000000071 14326712445 0025712 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01/sessions"
FILE="data.json"
nftlb-1.0.7/tests/api/102_deleting_sessions_from_lb01_stlsdnat/req.out 0000664 0000000 0000000 00000000027 14326712445 0025746 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/103_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0030731 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/103_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/data.json 0000664 0000000 0000000 00000000213 14326712445 0032531 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.8",
"backend" : "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/103_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/nft.out 0000664 0000000 0000000 00000004076 14326712445 0032260 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ipv4_addr
elements = { 192.168.44.8 : 192.168.0.10 }
}
map persist-lb01 {
type ipv4_addr : ipv4_addr
size 65535
timeout 50s
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-lb01 ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/103_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/obj.out 0000664 0000000 0000000 00000006204 14326712445 0032236 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.8",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/103_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0032212 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/103_adding_static_sessions_without_port_in_farm_stlsdnat_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0032250 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/104_disable_persistence_in_farm_stlsdnat_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0025367 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/104_disable_persistence_in_farm_stlsdnat_lb01/data.json 0000664 0000000 0000000 00000000112 14326712445 0027165 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"persistence" : "none"
}
]
}
nftlb-1.0.7/tests/api/104_disable_persistence_in_farm_stlsdnat_lb01/nft.out 0000664 0000000 0000000 00000002412 14326712445 0026706 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.10 . 10 : goto lb01-back,
tcp . 192.168.0.11 . 20 : goto lb01-back }
}
map map-lb01-back {
type ipv4_addr : ether_addr
size 65535
timeout 50s
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb01-back {
ip saddr set 192.168.0.100 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-lb01-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
meta protocol ip update @map-lb01-back { ip saddr : ether saddr }
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.10, 5-9 : 192.168.0.11 } ether daddr set ip daddr map { 192.168.0.10 : 02:02:02:02:02:02, 192.168.0.11 : 03:03:03:03:03:03 } th dport set ether daddr map { 02:02:02:02:02:02 : 10, 03:03:03:03:03:03 : 20 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
}
}
nftlb-1.0.7/tests/api/104_disable_persistence_in_farm_stlsdnat_lb01/obj.out 0000664 0000000 0000000 00000005601 14326712445 0026674 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/104_disable_persistence_in_farm_stlsdnat_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0026650 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/104_disable_persistence_in_farm_stlsdnat_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0026706 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/105_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020117 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/105_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021425 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/105_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021421 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/105_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021377 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/105_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021436 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/106_apply_empty_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020670 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/106_apply_empty_farms/data.json 0000664 0000000 0000000 00000000021 14326712445 0022465 0 ustar 00root root 0000000 0000000 { "farms" : [] }
nftlb-1.0.7/tests/api/106_apply_empty_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022176 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/106_apply_empty_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0022172 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/106_apply_empty_farms/req.api 0000775 0000000 0000000 00000000051 14326712445 0022151 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/106_apply_empty_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0022207 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/107_creating_farm_lb01_wrong_family/ 0000775 0000000 0000000 00000000000 14326712445 0023332 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/107_creating_farm_lb01_wrong_family/data.json 0000664 0000000 0000000 00000001134 14326712445 0025135 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ip4",
"virtual-addr" : "200.1.1.1",
"virtual-ports" : "8080",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/107_creating_farm_lb01_wrong_family/nft.out 0000664 0000000 0000000 00000002304 14326712445 0024651 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/107_creating_farm_lb01_wrong_family/obj.out 0000664 0000000 0000000 00000005520 14326712445 0024637 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/107_creating_farm_lb01_wrong_family/req.api 0000775 0000000 0000000 00000000051 14326712445 0024613 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/107_creating_farm_lb01_wrong_family/req.out 0000664 0000000 0000000 00000000126 14326712445 0024651 0 ustar 00root root 0000000 0000000 {"response": "success. Parsing unknown value 'ip4' in 'family', using default 'ipv4'"} nftlb-1.0.7/tests/api/108_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020122 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/108_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021430 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/108_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021424 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/108_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021402 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/108_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021441 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/109_apply_empty_virtual-addr/ 0000775 0000000 0000000 00000000000 14326712445 0022161 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/109_apply_empty_virtual-addr/data.json 0000664 0000000 0000000 00000000335 14326712445 0023766 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "6595",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"state": "up",
"backends": []
}
]
}
nftlb-1.0.7/tests/api/109_apply_empty_virtual-addr/nft.out 0000664 0000000 0000000 00000001634 14326712445 0023505 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 6595 : goto filter-lb01 }
}
map nat-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 6595 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @filter-port-services
}
chain filter-lb01 {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @nat-port-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
}
}
nftlb-1.0.7/tests/api/109_apply_empty_virtual-addr/obj.out 0000664 0000000 0000000 00000003400 14326712445 0023461 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "6595",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "",
"ports": "6595",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/109_apply_empty_virtual-addr/req.api 0000775 0000000 0000000 00000000051 14326712445 0023442 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/109_apply_empty_virtual-addr/req.out 0000664 0000000 0000000 00000000027 14326712445 0023500 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/110_apply_filled_virtual-addr/ 0000775 0000000 0000000 00000000000 14326712445 0022252 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/110_apply_filled_virtual-addr/data.json 0000664 0000000 0000000 00000000322 14326712445 0024053 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "2.2.2.2",
"virtual-ports": "6595",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"backends": []
}
]
}
nftlb-1.0.7/tests/api/110_apply_filled_virtual-addr/nft.out 0000664 0000000 0000000 00000001742 14326712445 0023576 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
}
}
nftlb-1.0.7/tests/api/110_apply_filled_virtual-addr/obj.out 0000664 0000000 0000000 00000003416 14326712445 0023561 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "2.2.2.2",
"virtual-ports": "6595",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "2.2.2.2",
"ports": "6595",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/110_apply_filled_virtual-addr/req.api 0000775 0000000 0000000 00000000051 14326712445 0023533 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/110_apply_filled_virtual-addr/req.out 0000664 0000000 0000000 00000000027 14326712445 0023571 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/111_rename_farm/ 0000775 0000000 0000000 00000000000 14326712445 0017405 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/111_rename_farm/data.json 0000664 0000000 0000000 00000000104 14326712445 0021204 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"newname": "lb012"
}
]
}
nftlb-1.0.7/tests/api/111_rename_farm/nft.out 0000664 0000000 0000000 00000001746 14326712445 0020735 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto filter-lb012 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto nat-lb012 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb012 {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb012 {
}
}
nftlb-1.0.7/tests/api/111_rename_farm/obj.out 0000664 0000000 0000000 00000003420 14326712445 0020707 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb012",
"family": "ipv4",
"virtual-addr": "2.2.2.2",
"virtual-ports": "6595",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb012-addr",
"family": "ipv4",
"ip-addr": "2.2.2.2",
"ports": "6595",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/111_rename_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0020666 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/111_rename_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0020724 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/112_farm_up_status/ 0000775 0000000 0000000 00000000000 14326712445 0020166 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/112_farm_up_status/data.json 0000664 0000000 0000000 00000000100 14326712445 0021761 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb012",
"state": "up"
}
]
}
nftlb-1.0.7/tests/api/112_farm_up_status/nft.out 0000664 0000000 0000000 00000001746 14326712445 0021516 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto filter-lb012 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto nat-lb012 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb012 {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb012 {
}
}
nftlb-1.0.7/tests/api/112_farm_up_status/obj.out 0000664 0000000 0000000 00000003420 14326712445 0021470 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb012",
"family": "ipv4",
"virtual-addr": "2.2.2.2",
"virtual-ports": "6595",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb012-addr",
"family": "ipv4",
"ip-addr": "2.2.2.2",
"ports": "6595",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/112_farm_up_status/req.api 0000775 0000000 0000000 00000000051 14326712445 0021447 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/112_farm_up_status/req.out 0000664 0000000 0000000 00000000027 14326712445 0021505 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/113_rename_unknown_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021166 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/113_rename_unknown_farm/data.json 0000664 0000000 0000000 00000000104 14326712445 0022765 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"newname": "lb013"
}
]
}
nftlb-1.0.7/tests/api/113_rename_unknown_farm/nft.out 0000664 0000000 0000000 00000001746 14326712445 0022516 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto filter-lb012 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto nat-lb012 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb012 {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb012 {
}
}
nftlb-1.0.7/tests/api/113_rename_unknown_farm/obj.out 0000664 0000000 0000000 00000005611 14326712445 0022474 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb012",
"family": "ipv4",
"virtual-addr": "2.2.2.2",
"virtual-ports": "6595",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb012-addr",
"family": "ipv4",
"ip-addr": "2.2.2.2",
"ports": "6595",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
},
{
"name": "lb013",
"source-addr": "",
"mode": "snat",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/113_rename_unknown_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0022447 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/113_rename_unknown_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022505 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/114_add_backend_550/ 0000775 0000000 0000000 00000000000 14326712445 0017724 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/114_add_backend_550/data.json 0000664 0000000 0000000 00000000377 14326712445 0021537 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb012",
"backends" : [
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"priority" : "5",
"est-connlimit" : "500",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/114_add_backend_550/nft.out 0000664 0000000 0000000 00000001746 14326712445 0021254 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto filter-lb012 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 2.2.2.2 . 6595 : goto nat-lb012 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb012 {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb012 {
}
}
nftlb-1.0.7/tests/api/114_add_backend_550/obj.out 0000664 0000000 0000000 00000006675 14326712445 0021245 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb012",
"family": "ipv4",
"virtual-addr": "2.2.2.2",
"virtual-ports": "6595",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb012-addr",
"family": "ipv4",
"ip-addr": "2.2.2.2",
"ports": "6595",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "5",
"mark": "0x1",
"est-connlimit": "500",
"state": "available"
}
],
"policies": []
},
{
"name": "lb013",
"source-addr": "",
"mode": "snat",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/114_add_backend_550/req.api 0000775 0000000 0000000 00000000051 14326712445 0021205 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/114_add_backend_550/req.out 0000664 0000000 0000000 00000000027 14326712445 0021243 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/115_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/115_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021426 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/115_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021422 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/115_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021400 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/115_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/116_creating_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0020555 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/116_creating_farm_lb01/data.json 0000664 0000000 0000000 00000003675 14326712445 0022374 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"mark": "0x0",
"state": "up",
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"source-addr": "",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"source-addr": "",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/116_creating_farm_lb01/nft.out 0000664 0000000 0000000 00000002451 14326712445 0022077 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.20.10.50, 0x00000201 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000200, 5-9 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 10.20.10.25 . 25, 0x00000201 : 10.20.10.26 . 25 }
}
}
nftlb-1.0.7/tests/api/116_creating_farm_lb01/obj.out 0000664 0000000 0000000 00000005541 14326712445 0022065 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/116_creating_farm_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022036 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/116_creating_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022074 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/117_empty_source_addr/ 0000775 0000000 0000000 00000000000 14326712445 0020647 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/117_empty_source_addr/data.json 0000664 0000000 0000000 00000000142 14326712445 0022450 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "Ex-SMTP", "backends" : [ { "name" : "bck0", "source-addr" : "" } ] } ] }
nftlb-1.0.7/tests/api/117_empty_source_addr/nft.out 0000664 0000000 0000000 00000002451 14326712445 0022171 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.20.10.50, 0x00000201 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000200, 5-9 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 10.20.10.25 . 25, 0x00000201 : 10.20.10.26 . 25 }
}
}
nftlb-1.0.7/tests/api/117_empty_source_addr/obj.out 0000664 0000000 0000000 00000005541 14326712445 0022157 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/117_empty_source_addr/req.api 0000775 0000000 0000000 00000000051 14326712445 0022130 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/117_empty_source_addr/req.out 0000664 0000000 0000000 00000000027 14326712445 0022166 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/118_false_priority_backends/ 0000775 0000000 0000000 00000000000 14326712445 0022025 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/118_false_priority_backends/data.json 0000664 0000000 0000000 00000002127 14326712445 0023633 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x202",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/118_false_priority_backends/nft.out 0000664 0000000 0000000 00000002451 14326712445 0023347 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.20.10.50, 0x00000201 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000200, 5-9 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 10.20.10.25 . 25, 0x00000201 : 10.20.10.26 . 25 }
}
}
nftlb-1.0.7/tests/api/118_false_priority_backends/obj.out 0000664 0000000 0000000 00000007623 14326712445 0023340 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x202",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/118_false_priority_backends/req.api 0000775 0000000 0000000 00000000051 14326712445 0023306 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/118_false_priority_backends/req.out 0000664 0000000 0000000 00000000027 14326712445 0023344 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/119_maintenance_prioritiest_backends/ 0000775 0000000 0000000 00000000000 14326712445 0023712 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/119_maintenance_prioritiest_backends/data.json 0000664 0000000 0000000 00000001027 14326712445 0025516 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck0",
"state": "off"
},
{
"name": "bck1",
"state": "off"
}
]
}
]
}
nftlb-1.0.7/tests/api/119_maintenance_prioritiest_backends/nft.out 0000664 0000000 0000000 00000002273 14326712445 0025236 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.20.10.50, 0x00000201 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 10.20.10.25 . 25, 0x00000201 : 10.20.10.26 . 25 }
}
}
nftlb-1.0.7/tests/api/119_maintenance_prioritiest_backends/obj.out 0000664 0000000 0000000 00000007625 14326712445 0025227 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x202",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/119_maintenance_prioritiest_backends/req.api 0000775 0000000 0000000 00000000051 14326712445 0025173 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/119_maintenance_prioritiest_backends/req.out 0000664 0000000 0000000 00000000027 14326712445 0025231 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/120_updated_priority_backend/ 0000775 0000000 0000000 00000000000 14326712445 0022167 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/120_updated_priority_backend/data.json 0000664 0000000 0000000 00000000544 14326712445 0023776 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck2",
"priority": "3"
}
]
}
]
}
nftlb-1.0.7/tests/api/120_updated_priority_backend/nft.out 0000664 0000000 0000000 00000002517 14326712445 0023514 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.20.10.50, 0x00000201 : 10.20.10.50, 0x00000202 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x00000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 10.20.10.25 . 25, 0x00000201 : 10.20.10.26 . 25, 0x00000202 : 10.20.10.27 . 25 }
}
}
nftlb-1.0.7/tests/api/120_updated_priority_backend/obj.out 0000664 0000000 0000000 00000007616 14326712445 0023504 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "3",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/120_updated_priority_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0023450 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/120_updated_priority_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0023506 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/121_maintenance_priority_backend/ 0000775 0000000 0000000 00000000000 14326712445 0023024 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/121_maintenance_priority_backend/data.json 0000664 0000000 0000000 00000000543 14326712445 0024632 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck2",
"state": "off"
}
]
}
]
}
nftlb-1.0.7/tests/api/121_maintenance_priority_backend/nft.out 0000664 0000000 0000000 00000002610 14326712445 0024343 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.20.10.50, 0x00000201 : 10.20.10.50, 0x00000202 : 10.20.10.50, 0x00000203 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x00000203 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 10.20.10.25 . 25, 0x00000201 : 10.20.10.26 . 25, 0x00000202 : 10.20.10.27 . 25, 0x00000203 : 10.20.10.28 . 25 }
}
}
nftlb-1.0.7/tests/api/121_maintenance_priority_backend/obj.out 0000664 0000000 0000000 00000007610 14326712445 0024333 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "4",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "3",
"mark": "0x202",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/121_maintenance_priority_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0024305 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/121_maintenance_priority_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0024343 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/122_maintenance_priority_add/ 0000775 0000000 0000000 00000000000 14326712445 0022166 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/122_maintenance_priority_add/data.json 0000664 0000000 0000000 00000000544 14326712445 0023775 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck2",
"priority": "4"
}
]
}
]
}
nftlb-1.0.7/tests/api/122_maintenance_priority_add/nft.out 0000664 0000000 0000000 00000002273 14326712445 0023512 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.20.10.50, 0x00000201 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 10.20.10.25 . 25, 0x00000201 : 10.20.10.26 . 25 }
}
}
nftlb-1.0.7/tests/api/122_maintenance_priority_add/obj.out 0000664 0000000 0000000 00000007617 14326712445 0023504 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x202",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/122_maintenance_priority_add/req.api 0000775 0000000 0000000 00000000051 14326712445 0023447 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/122_maintenance_priority_add/req.out 0000664 0000000 0000000 00000000027 14326712445 0023505 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/123_up_prioritiest_backends/ 0000775 0000000 0000000 00000000000 14326712445 0022047 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/123_up_prioritiest_backends/data.json 0000664 0000000 0000000 00000001310 14326712445 0023646 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck0",
"state": "up"
},
{
"name": "bck1",
"state": "up"
},
{
"name": "bck2",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/123_up_prioritiest_backends/nft.out 0000664 0000000 0000000 00000002451 14326712445 0023371 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.20.10.50, 0x00000201 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000200, 5-9 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 10.20.10.25 . 25, 0x00000201 : 10.20.10.26 . 25 }
}
}
nftlb-1.0.7/tests/api/123_up_prioritiest_backends/obj.out 0000664 0000000 0000000 00000007623 14326712445 0023362 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x202",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/123_up_prioritiest_backends/req.api 0000775 0000000 0000000 00000000051 14326712445 0023330 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/123_up_prioritiest_backends/req.out 0000664 0000000 0000000 00000000027 14326712445 0023366 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/124_down_priority_backend/ 0000775 0000000 0000000 00000000000 14326712445 0021514 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/124_down_priority_backend/data.json 0000664 0000000 0000000 00000001031 14326712445 0023313 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck0",
"state": "down"
},
{
"name": "bck1",
"state": "down"
}
]
}
]
}
nftlb-1.0.7/tests/api/124_down_priority_backend/nft.out 0000664 0000000 0000000 00000001762 14326712445 0023042 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
}
}
nftlb-1.0.7/tests/api/124_down_priority_backend/obj.out 0000664 0000000 0000000 00000007627 14326712445 0023033 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x202",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/124_down_priority_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0022775 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/124_down_priority_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0023033 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/125_reduce_priority_backend/ 0000775 0000000 0000000 00000000000 14326712445 0022015 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/125_reduce_priority_backend/data.json 0000664 0000000 0000000 00000000544 14326712445 0023624 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck2",
"priority": "3"
}
]
}
]
}
nftlb-1.0.7/tests/api/125_reduce_priority_backend/nft.out 0000664 0000000 0000000 00000002335 14326712445 0023340 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x00000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 10.20.10.27 . 25 }
}
}
nftlb-1.0.7/tests/api/125_reduce_priority_backend/obj.out 0000664 0000000 0000000 00000007620 14326712445 0023325 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "3",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/125_reduce_priority_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0023276 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/125_reduce_priority_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0023334 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/126_down_active_backend/ 0000775 0000000 0000000 00000000000 14326712445 0021110 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/126_down_active_backend/data.json 0000664 0000000 0000000 00000000544 14326712445 0022717 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"backends": [
{
"name": "bck2",
"state": "down"
}
]
}
]
}
nftlb-1.0.7/tests/api/126_down_active_backend/nft.out 0000664 0000000 0000000 00000002335 14326712445 0022433 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 10.20.10.50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x00000203 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
log prefix "IN-Ex-SMTP "
ip protocol tcp dnat ip to ct mark map { 0x00000203 : 10.20.10.28 . 25 }
}
}
nftlb-1.0.7/tests/api/126_down_active_backend/obj.out 0000664 0000000 0000000 00000007613 14326712445 0022422 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "input ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "4",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "3",
"mark": "0x202",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/126_down_active_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0022371 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/126_down_active_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0022427 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/127_forward_log/ 0000775 0000000 0000000 00000000000 14326712445 0017445 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/127_forward_log/data.json 0000664 0000000 0000000 00000000204 14326712445 0021245 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"log": "forward"
}
]
}
nftlb-1.0.7/tests/api/127_forward_log/nft.out 0000664 0000000 0000000 00000002733 14326712445 0020772 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 10.20.10.50 }
}
map forward-proto-services {
type mark : verdict
elements = { 0x00000203 : goto forward-Ex-SMTP }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x00000203 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
ip protocol tcp dnat ip to ct mark map { 0x00000203 : 10.20.10.28 . 25 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-Ex-SMTP {
log prefix "FWD-Ex-SMTP "
}
}
nftlb-1.0.7/tests/api/127_forward_log/obj.out 0000664 0000000 0000000 00000007615 14326712445 0020761 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "4",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "3",
"mark": "0x202",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/127_forward_log/req.api 0000775 0000000 0000000 00000000051 14326712445 0020726 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/127_forward_log/req.out 0000664 0000000 0000000 00000000027 14326712445 0020764 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/128_forward_log_dup/ 0000775 0000000 0000000 00000000000 14326712445 0020316 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/128_forward_log_dup/data.json 0000664 0000000 0000000 00000000204 14326712445 0022116 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"log": "forward"
}
]
}
nftlb-1.0.7/tests/api/128_forward_log_dup/nft.out 0000664 0000000 0000000 00000002733 14326712445 0021643 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto filter-Ex-SMTP }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.20.10.50 . 25 : goto nat-Ex-SMTP }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 10.20.10.50 }
}
map forward-proto-services {
type mark : verdict
elements = { 0x00000203 : goto forward-Ex-SMTP }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Ex-SMTP {
ct state new ct mark 0x00000000 ct mark set numgen random mod 5 map { 0-4 : 0x00000203 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Ex-SMTP {
ip protocol tcp dnat ip to ct mark map { 0x00000203 : 10.20.10.28 . 25 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-Ex-SMTP {
log prefix "FWD-Ex-SMTP "
}
}
nftlb-1.0.7/tests/api/128_forward_log_dup/obj.out 0000664 0000000 0000000 00000007615 14326712445 0021632 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Ex-SMTP",
"family": "ipv4",
"virtual-addr": "10.20.10.50",
"virtual-ports": "25",
"source-addr": "10.20.10.50",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "4",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Ex-SMTP-addr",
"family": "ipv4",
"ip-addr": "10.20.10.50",
"ports": "25",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.20.10.25",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck1",
"ip-addr": "10.20.10.26",
"port": "25",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck2",
"ip-addr": "10.20.10.27",
"port": "25",
"weight": "5",
"priority": "3",
"mark": "0x202",
"est-connlimit": "0",
"state": "down"
},
{
"name": "bck3",
"ip-addr": "10.20.10.28",
"port": "25",
"weight": "5",
"priority": "4",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/128_forward_log_dup/req.api 0000775 0000000 0000000 00000000051 14326712445 0021577 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/128_forward_log_dup/req.out 0000664 0000000 0000000 00000000027 14326712445 0021635 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/129_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020125 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/129_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021433 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/129_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021427 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/129_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021405 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/129_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021444 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/130_creating_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0021452 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/130_creating_farm_newfarm/data.json 0000664 0000000 0000000 00000000311 14326712445 0023251 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "snat", "log" : "none", "persistence" : "srcip", "persist-ttl" : "120" } ] }
nftlb-1.0.7/tests/api/130_creating_farm_newfarm/nft.out 0000664 0000000 0000000 00000002256 14326712445 0022777 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/130_creating_farm_newfarm/obj.out 0000664 0000000 0000000 00000003437 14326712445 0022764 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/130_creating_farm_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0022733 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/130_creating_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022771 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/131_create_bck/ 0000775 0000000 0000000 00000000000 14326712445 0017215 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/131_create_bck/data.json 0000664 0000000 0000000 00000000256 14326712445 0021024 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "backends" : [ { "name" : "bck0", "priority" : "1", "ip-addr" : "192.168.0.151", "port" : "8080", "weight" : "1", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/131_create_bck/nft.out 0000664 0000000 0000000 00000002762 14326712445 0020544 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x80000001 }
ct mark != { 0x00000000, 0x80000000 } update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.151 . 8080 }
}
}
nftlb-1.0.7/tests/api/131_create_bck/obj.out 0000664 0000000 0000000 00000004513 14326712445 0020523 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.151",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/131_create_bck/req.api 0000775 0000000 0000000 00000000051 14326712445 0020476 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/131_create_bck/req.out 0000664 0000000 0000000 00000000027 14326712445 0020534 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/132_enable_ftp_helper/ 0000775 0000000 0000000 00000000000 14326712445 0020572 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/132_enable_ftp_helper/data.json 0000664 0000000 0000000 00000000072 14326712445 0022375 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "helper" : "ftp" } ] }
nftlb-1.0.7/tests/api/132_enable_ftp_helper/nft.out 0000664 0000000 0000000 00000003134 14326712445 0022113 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper ftp-tcp {
type "ftp" protocol tcp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ip protocol tcp ct helper set "ftp-tcp"
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x80000001 }
ct mark != { 0x00000000, 0x80000000 } update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 192.168.0.151 . 8080 }
}
}
nftlb-1.0.7/tests/api/132_enable_ftp_helper/obj.out 0000664 0000000 0000000 00000004512 14326712445 0022077 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "ftp",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.151",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/132_enable_ftp_helper/req.api 0000775 0000000 0000000 00000000051 14326712445 0022053 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/132_enable_ftp_helper/req.out 0000664 0000000 0000000 00000000027 14326712445 0022111 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/133_change_scheduler_dnat/ 0000775 0000000 0000000 00000000000 14326712445 0021426 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/133_change_scheduler_dnat/data.json 0000664 0000000 0000000 00000000071 14326712445 0023230 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "mode" : "dnat" } ] }
nftlb-1.0.7/tests/api/133_change_scheduler_dnat/nft.out 0000664 0000000 0000000 00000003114 14326712445 0022745 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper ftp-tcp {
type "ftp" protocol tcp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ip protocol tcp ct helper set "ftp-tcp"
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000001 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000001 : 192.168.0.151 . 8080 }
}
}
nftlb-1.0.7/tests/api/133_change_scheduler_dnat/obj.out 0000664 0000000 0000000 00000004512 14326712445 0022733 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "ftp",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.151",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/133_change_scheduler_dnat/req.api 0000775 0000000 0000000 00000000051 14326712445 0022707 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/133_change_scheduler_dnat/req.out 0000664 0000000 0000000 00000000027 14326712445 0022745 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/134_disable_ftp_helper/ 0000775 0000000 0000000 00000000000 14326712445 0020751 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/134_disable_ftp_helper/data.json 0000664 0000000 0000000 00000000073 14326712445 0022555 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "helper" : "none" } ] }
nftlb-1.0.7/tests/api/134_disable_ftp_helper/nft.out 0000664 0000000 0000000 00000002742 14326712445 0022276 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000001 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000001 : 192.168.0.151 . 8080 }
}
}
nftlb-1.0.7/tests/api/134_disable_ftp_helper/obj.out 0000664 0000000 0000000 00000004513 14326712445 0022257 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.151",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/134_disable_ftp_helper/req.api 0000775 0000000 0000000 00000000051 14326712445 0022232 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/134_disable_ftp_helper/req.out 0000664 0000000 0000000 00000000027 14326712445 0022270 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/135_enable_nfqueue/ 0000775 0000000 0000000 00000000000 14326712445 0020115 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/135_enable_nfqueue/data.json 0000664 0000000 0000000 00000000067 14326712445 0021724 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "queue" : "0" } ] }
nftlb-1.0.7/tests/api/135_enable_nfqueue/nft.out 0000664 0000000 0000000 00000003012 14326712445 0021431 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
tcp flags syn queue flags bypass to 0
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000001 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000001 : 192.168.0.151 . 8080 }
}
}
nftlb-1.0.7/tests/api/135_enable_nfqueue/obj.out 0000664 0000000 0000000 00000004512 14326712445 0021422 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "0",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.151",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/135_enable_nfqueue/req.api 0000775 0000000 0000000 00000000051 14326712445 0021376 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/135_enable_nfqueue/req.out 0000664 0000000 0000000 00000000027 14326712445 0021434 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/136_disable_nfqueue/ 0000775 0000000 0000000 00000000000 14326712445 0020273 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/136_disable_nfqueue/data.json 0000664 0000000 0000000 00000000070 14326712445 0022074 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "queue" : "-1" } ] }
nftlb-1.0.7/tests/api/136_disable_nfqueue/nft.out 0000664 0000000 0000000 00000002742 14326712445 0021620 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000001 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000001 : 192.168.0.151 . 8080 }
}
}
nftlb-1.0.7/tests/api/136_disable_nfqueue/obj.out 0000664 0000000 0000000 00000004513 14326712445 0021601 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.151",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/136_disable_nfqueue/req.api 0000775 0000000 0000000 00000000051 14326712445 0021554 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/136_disable_nfqueue/req.out 0000664 0000000 0000000 00000000027 14326712445 0021612 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/137_delete_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0021127 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/137_delete_farm_newfarm/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022435 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/137_delete_farm_newfarm/obj.out 0000664 0000000 0000000 00000000027 14326712445 0022431 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/137_delete_farm_newfarm/req.api 0000775 0000000 0000000 00000000042 14326712445 0022410 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/newfarm"
nftlb-1.0.7/tests/api/137_delete_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022446 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/138_creating_newfarm_nfqueue/ 0000775 0000000 0000000 00000000000 14326712445 0022205 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/138_creating_newfarm_nfqueue/data.json 0000664 0000000 0000000 00000000231 14326712445 0024005 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "queue" : "0" } ] }
nftlb-1.0.7/tests/api/138_creating_newfarm_nfqueue/nft.out 0000664 0000000 0000000 00000002042 14326712445 0023523 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
tcp flags syn queue flags bypass to 0
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/138_creating_newfarm_nfqueue/obj.out 0000664 0000000 0000000 00000003433 14326712445 0023513 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "0",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/138_creating_newfarm_nfqueue/req.api 0000775 0000000 0000000 00000000051 14326712445 0023466 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/138_creating_newfarm_nfqueue/req.out 0000664 0000000 0000000 00000000027 14326712445 0023524 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/139_creating_newfarm6_tcpstrict/ 0000775 0000000 0000000 00000000000 14326712445 0022643 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/139_creating_newfarm6_tcpstrict/data.json 0000664 0000000 0000000 00000000240 14326712445 0024443 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm6", "virtual-addr" : "192.168.105.189", "virtual-ports" : "53", "protocol" : "udp", "mode" : "snat", "tcp-strict" : "on" } ] }
nftlb-1.0.7/tests/api/139_creating_newfarm6_tcpstrict/nft.out 0000664 0000000 0000000 00000002477 14326712445 0024175 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 53 : goto filter-newfarm6,
tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 53 : goto nat-newfarm6,
tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
tcp flags syn queue flags bypass to 0
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
chain filter-newfarm6 {
ct state invalid log prefix "tcp-strict-newfarm6 " drop
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-newfarm6 {
}
}
nftlb-1.0.7/tests/api/139_creating_newfarm6_tcpstrict/obj.out 0000664 0000000 0000000 00000007031 14326712445 0024147 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "0",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
},
{
"name": "newfarm6",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "53",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "on",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm6-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "53",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/139_creating_newfarm6_tcpstrict/req.api 0000775 0000000 0000000 00000000051 14326712445 0024124 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/139_creating_newfarm6_tcpstrict/req.out 0000664 0000000 0000000 00000000027 14326712445 0024162 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/140_creating_newfarm6_rstrtlimit/ 0000775 0000000 0000000 00000000000 14326712445 0023031 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/140_creating_newfarm6_rstrtlimit/data.json 0000664 0000000 0000000 00000000100 14326712445 0024624 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm6", "rst-rtlimit" : "22" } ] }
nftlb-1.0.7/tests/api/140_creating_newfarm6_rstrtlimit/nft.out 0000664 0000000 0000000 00000003033 14326712445 0024350 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 53 : goto filter-newfarm6,
tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 53 : goto nat-newfarm6,
tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
set rst-rtlimit-newfarm6 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
tcp flags syn queue flags bypass to 0
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
chain filter-newfarm6 {
ct state invalid log prefix "tcp-strict-newfarm6 " drop
tcp flags rst add @rst-rtlimit-newfarm6 { ip saddr limit rate over 22/second } log prefix "rst-rtlimit-newfarm6 " drop
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-newfarm6 {
}
}
nftlb-1.0.7/tests/api/140_creating_newfarm6_rstrtlimit/obj.out 0000664 0000000 0000000 00000007032 14326712445 0024336 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "0",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
},
{
"name": "newfarm6",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "53",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "22/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "on",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm6-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "53",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/140_creating_newfarm6_rstrtlimit/req.api 0000775 0000000 0000000 00000000051 14326712445 0024312 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/140_creating_newfarm6_rstrtlimit/req.out 0000664 0000000 0000000 00000000027 14326712445 0024350 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/141_disable_newfarm_nfqueue/ 0000775 0000000 0000000 00000000000 14326712445 0022006 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/141_disable_newfarm_nfqueue/data.json 0000664 0000000 0000000 00000000232 14326712445 0023607 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "queue" : "-1" } ] }
nftlb-1.0.7/tests/api/141_disable_newfarm_nfqueue/nft.out 0000664 0000000 0000000 00000002763 14326712445 0023336 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 53 : goto filter-newfarm6,
tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 53 : goto nat-newfarm6,
tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
set rst-rtlimit-newfarm6 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
chain filter-newfarm6 {
ct state invalid log prefix "tcp-strict-newfarm6 " drop
tcp flags rst add @rst-rtlimit-newfarm6 { ip saddr limit rate over 22/second } log prefix "rst-rtlimit-newfarm6 " drop
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-newfarm6 {
}
}
nftlb-1.0.7/tests/api/141_disable_newfarm_nfqueue/obj.out 0000664 0000000 0000000 00000007033 14326712445 0023314 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
},
{
"name": "newfarm6",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "53",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "22/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "on",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm6-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "53",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/141_disable_newfarm_nfqueue/req.api 0000775 0000000 0000000 00000000051 14326712445 0023267 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/141_disable_newfarm_nfqueue/req.out 0000664 0000000 0000000 00000000027 14326712445 0023325 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/142_disable_newfarm6_tcpstrict/ 0000775 0000000 0000000 00000000000 14326712445 0022444 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/142_disable_newfarm6_tcpstrict/data.json 0000664 0000000 0000000 00000000241 14326712445 0024245 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm6", "virtual-addr" : "192.168.105.189", "virtual-ports" : "53", "protocol" : "udp", "mode" : "snat", "tcp-strict" : "off" } ] }
nftlb-1.0.7/tests/api/142_disable_newfarm6_tcpstrict/nft.out 0000664 0000000 0000000 00000002671 14326712445 0023772 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 53 : goto filter-newfarm6,
tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 192.168.105.189 . 53 : goto nat-newfarm6,
tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
set rst-rtlimit-newfarm6 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
chain filter-newfarm6 {
tcp flags rst add @rst-rtlimit-newfarm6 { ip saddr limit rate over 22/second } log prefix "rst-rtlimit-newfarm6 " drop
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-newfarm6 {
}
}
nftlb-1.0.7/tests/api/142_disable_newfarm6_tcpstrict/obj.out 0000664 0000000 0000000 00000007034 14326712445 0023753 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
},
{
"name": "newfarm6",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "53",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "22/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm6-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "53",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/142_disable_newfarm6_tcpstrict/req.api 0000775 0000000 0000000 00000000051 14326712445 0023725 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/142_disable_newfarm6_tcpstrict/req.out 0000664 0000000 0000000 00000000027 14326712445 0023763 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/143_delete_farm_newfarm6/ 0000775 0000000 0000000 00000000000 14326712445 0021212 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/143_delete_farm_newfarm6/nft.out 0000664 0000000 0000000 00000001772 14326712445 0022541 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/143_delete_farm_newfarm6/obj.out 0000664 0000000 0000000 00000003434 14326712445 0022521 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/143_delete_farm_newfarm6/req.api 0000775 0000000 0000000 00000000043 14326712445 0022474 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/newfarm6"
nftlb-1.0.7/tests/api/143_delete_farm_newfarm6/req.out 0000664 0000000 0000000 00000000027 14326712445 0022531 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/144_set_persistence_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0022055 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/144_set_persistence_newfarm/data.json 0000664 0000000 0000000 00000000246 14326712445 0023663 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "persistence" : "srcip", "backends" : [ { "name" : "bck0", "ip-addr" : "111.111.11.11", "mark" : "0x200", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/144_set_persistence_newfarm/nft.out 0000664 0000000 0000000 00000002730 14326712445 0023377 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x00000200 : 111.111.11.11 }
}
}
nftlb-1.0.7/tests/api/144_set_persistence_newfarm/obj.out 0000664 0000000 0000000 00000004510 14326712445 0023360 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "111.111.11.11",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/144_set_persistence_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0023336 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/144_set_persistence_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023374 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/145_create_and_delete_dynamic_session/ 0000775 0000000 0000000 00000000000 14326712445 0024016 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/145_create_and_delete_dynamic_session/nft.out 0000664 0000000 0000000 00000002730 14326712445 0025340 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x00000200 : 111.111.11.11 }
}
}
nftlb-1.0.7/tests/api/145_create_and_delete_dynamic_session/obj.out 0000664 0000000 0000000 00000004510 14326712445 0025321 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "111.111.11.11",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/145_create_and_delete_dynamic_session/pre.sh 0000775 0000000 0000000 00000000234 14326712445 0025142 0 ustar 00root root 0000000 0000000 #!/bin/bash
logger ">> PRE"
nft add element nftlb persist-newfarm { 222.222.222.222 : 0x200 }
nft list map nftlb persist-newfarm | logger
logger "PRE <<"
nftlb-1.0.7/tests/api/145_create_and_delete_dynamic_session/req.api 0000775 0000000 0000000 00000000114 14326712445 0025277 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/newfarm/sessions/222.222.222.222"
FILE="data.json"
nftlb-1.0.7/tests/api/145_create_and_delete_dynamic_session/req.out 0000664 0000000 0000000 00000000027 14326712445 0025335 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/146_set_stlsdnat_mode_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0022373 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/146_set_stlsdnat_mode_newfarm/data.json 0000664 0000000 0000000 00000000454 14326712445 0024202 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "127.0.0.1", "mode" : "stlsdnat", "backends" : [ { "name" : "bck0", "ip-addr" : "127.0.0.2", "ether-addr" : "03:03:03:03:03:03", "oface" : "lo", "state" : "up" } ],
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
} ] }
nftlb-1.0.7/tests/api/146_set_stlsdnat_mode_newfarm/nft.out 0000664 0000000 0000000 00000003175 14326712445 0023721 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.2 . 80 : goto newfarm-back }
}
map map-newfarm-back {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : ipv4_addr
}
map persist-newfarm {
type ipv4_addr : ipv4_addr
size 65535
timeout 1m
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain newfarm-back {
ip saddr set 127.0.0.1 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-newfarm-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain newfarm {
meta protocol ip update @map-newfarm-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-newfarm ether daddr set ip daddr map { 127.0.0.2 : 03:03:03:03:03:03 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-newfarm ether daddr set ip daddr map { 127.0.0.2 : 03:03:03:03:03:03 } ether saddr set 01:01:01:01:01:01 update @persist-newfarm { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen inc mod 1 map { 0 : 127.0.0.2 } ether daddr set ip daddr map { 127.0.0.2 : 03:03:03:03:03:03 } ether saddr set 01:01:01:01:01:01 update @persist-newfarm { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/146_set_stlsdnat_mode_newfarm/obj.out 0000664 0000000 0000000 00000004551 14326712445 0023703 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.2",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/146_set_stlsdnat_mode_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0023654 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/146_set_stlsdnat_mode_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023712 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/147_create_and_delete_dynamic_session/ 0000775 0000000 0000000 00000000000 14326712445 0024020 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/147_create_and_delete_dynamic_session/nft.out 0000664 0000000 0000000 00000003175 14326712445 0025346 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.2 . 80 : goto newfarm-back }
}
map map-newfarm-back {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : ipv4_addr
}
map persist-newfarm {
type ipv4_addr : ipv4_addr
size 65535
timeout 1m
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain newfarm-back {
ip saddr set 127.0.0.1 ether saddr set 01:01:01:01:01:01 ether daddr set ip daddr map @map-newfarm-back fwd to "lo"
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain newfarm {
meta protocol ip update @map-newfarm-back { ip saddr : ether saddr }
ip daddr set ip saddr map @static-sessions-newfarm ether daddr set ip daddr map { 127.0.0.2 : 03:03:03:03:03:03 } ether saddr set 01:01:01:01:01:01 fwd to "lo"
ip daddr set ip saddr map @persist-newfarm ether daddr set ip daddr map { 127.0.0.2 : 03:03:03:03:03:03 } ether saddr set 01:01:01:01:01:01 update @persist-newfarm { ip saddr : ip daddr } fwd to "lo"
ip daddr set numgen inc mod 1 map { 0 : 127.0.0.2 } ether daddr set ip daddr map { 127.0.0.2 : 03:03:03:03:03:03 } ether saddr set 01:01:01:01:01:01 update @persist-newfarm { ip saddr : ip daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/147_create_and_delete_dynamic_session/obj.out 0000664 0000000 0000000 00000004551 14326712445 0025330 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.2",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/147_create_and_delete_dynamic_session/pre.sh 0000775 0000000 0000000 00000000256 14326712445 0025150 0 ustar 00root root 0000000 0000000 #!/bin/bash
logger ">> PRE"
nft add element netdev nftlb persist-newfarm { 222.222.222.222 : 127.0.0.2 }
nft list map netdev nftlb persist-newfarm | logger
logger "PRE <<"
nftlb-1.0.7/tests/api/147_create_and_delete_dynamic_session/req.api 0000775 0000000 0000000 00000000114 14326712445 0025301 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/newfarm/sessions/222.222.222.222"
FILE="data.json"
nftlb-1.0.7/tests/api/147_create_and_delete_dynamic_session/req.out 0000664 0000000 0000000 00000000027 14326712445 0025337 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/148_set_snat_mode_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0021506 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/148_set_snat_mode_newfarm/data.json 0000664 0000000 0000000 00000000071 14326712445 0023310 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "mode" : "snat" } ] }
nftlb-1.0.7/tests/api/148_set_snat_mode_newfarm/nft.out 0000664 0000000 0000000 00000002730 14326712445 0023030 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x80000200 }
ct mark != { 0x00000000, 0x80000000 } update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x80000200 : 127.0.0.2 }
}
}
nftlb-1.0.7/tests/api/148_set_snat_mode_newfarm/obj.out 0000664 0000000 0000000 00000004470 14326712445 0023016 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.2",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/148_set_snat_mode_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0022767 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/148_set_snat_mode_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023025 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/149_enable_rtnewlimit_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0022367 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/149_enable_rtnewlimit_newfarm/data.json 0000664 0000000 0000000 00000000117 14326712445 0024172 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "mode" : "dnat", "new-rtlimit" : "22" } ] }
nftlb-1.0.7/tests/api/149_enable_rtnewlimit_newfarm/nft.out 0000664 0000000 0000000 00000003240 14326712445 0023706 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second } log prefix "new-rtlimit-newfarm " drop
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x00000200 : 127.0.0.2 }
}
}
nftlb-1.0.7/tests/api/149_enable_rtnewlimit_newfarm/obj.out 0000664 0000000 0000000 00000004471 14326712445 0023700 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.2",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/149_enable_rtnewlimit_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0023650 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/149_enable_rtnewlimit_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023706 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/150_enable_rtnewlimit_burst_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0023576 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/150_enable_rtnewlimit_burst_newfarm/data.json 0000664 0000000 0000000 00000000124 14326712445 0025377 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "mode" : "dnat", "new-rtlimit-burst" : "2" } ] }
nftlb-1.0.7/tests/api/150_enable_rtnewlimit_burst_newfarm/nft.out 0000664 0000000 0000000 00000003260 14326712445 0025117 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second burst 2 packets } log prefix "new-rtlimit-newfarm " drop
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x00000200 : 127.0.0.2 }
}
}
nftlb-1.0.7/tests/api/150_enable_rtnewlimit_burst_newfarm/obj.out 0000664 0000000 0000000 00000004471 14326712445 0025107 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "2",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.2",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/150_enable_rtnewlimit_burst_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0025057 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/150_enable_rtnewlimit_burst_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0025115 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/151_disable_rtnewlimit_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0022535 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/151_disable_rtnewlimit_newfarm/data.json 0000664 0000000 0000000 00000000116 14326712445 0024337 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "mode" : "dnat", "new-rtlimit" : "0" } ] }
nftlb-1.0.7/tests/api/151_disable_rtnewlimit_newfarm/nft.out 0000664 0000000 0000000 00000002710 14326712445 0024055 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x00000200 : 127.0.0.2 }
}
}
nftlb-1.0.7/tests/api/151_disable_rtnewlimit_newfarm/obj.out 0000664 0000000 0000000 00000004470 14326712445 0024045 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "2",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.2",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/151_disable_rtnewlimit_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0024016 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/151_disable_rtnewlimit_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0024054 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/152_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020121 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/152_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021427 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/152_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021423 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/152_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021401 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/152_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021440 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/153_enable_farm_newfarm_estconnlimit_nobck/ 0000775 0000000 0000000 00000000000 14326712445 0025055 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/153_enable_farm_newfarm_estconnlimit_nobck/data.json 0000664 0000000 0000000 00000000242 14326712445 0026657 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "est-connlimit" : "22" } ] }
nftlb-1.0.7/tests/api/153_enable_farm_newfarm_estconnlimit_nobck/nft.out 0000664 0000000 0000000 00000002272 14326712445 0026400 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set est-connlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @est-connlimit-newfarm { ip saddr ct count over 22 } log prefix "est-connlimit-newfarm " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/153_enable_farm_newfarm_estconnlimit_nobck/obj.out 0000664 0000000 0000000 00000003435 14326712445 0026365 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "22",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/153_enable_farm_newfarm_estconnlimit_nobck/req.api 0000775 0000000 0000000 00000000051 14326712445 0026336 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/153_enable_farm_newfarm_estconnlimit_nobck/req.out 0000664 0000000 0000000 00000000027 14326712445 0026374 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/154_disable_farm_newfarm_estconnlimit_nobck/ 0000775 0000000 0000000 00000000000 14326712445 0025233 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/154_disable_farm_newfarm_estconnlimit_nobck/data.json 0000664 0000000 0000000 00000000241 14326712445 0027034 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "est-connlimit" : "0" } ] }
nftlb-1.0.7/tests/api/154_disable_farm_newfarm_estconnlimit_nobck/nft.out 0000664 0000000 0000000 00000001772 14326712445 0026562 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/154_disable_farm_newfarm_estconnlimit_nobck/obj.out 0000664 0000000 0000000 00000003434 14326712445 0026542 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/154_disable_farm_newfarm_estconnlimit_nobck/req.api 0000775 0000000 0000000 00000000051 14326712445 0026514 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/154_disable_farm_newfarm_estconnlimit_nobck/req.out 0000664 0000000 0000000 00000000027 14326712445 0026552 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/155_delete_farm_newfarm_estconnlimit_nobck/ 0000775 0000000 0000000 00000000000 14326712445 0025073 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/155_delete_farm_newfarm_estconnlimit_nobck/nft.out 0000664 0000000 0000000 00000000000 14326712445 0026401 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/155_delete_farm_newfarm_estconnlimit_nobck/obj.out 0000664 0000000 0000000 00000000027 14326712445 0026375 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/155_delete_farm_newfarm_estconnlimit_nobck/req.api 0000775 0000000 0000000 00000000042 14326712445 0026354 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/newfarm"
nftlb-1.0.7/tests/api/155_delete_farm_newfarm_estconnlimit_nobck/req.out 0000664 0000000 0000000 00000000027 14326712445 0026412 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/156_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020125 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/156_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021433 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/156_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021427 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/156_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021405 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/156_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021444 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/157_create_farm_farm01/ 0000775 0000000 0000000 00000000000 14326712445 0020561 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/157_create_farm_farm01/data.json 0000664 0000000 0000000 00000000257 14326712445 0022371 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farm01", "virtual-addr" : "192.168.101.63", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "snat", "scheduler" : "weight", "state" : "up" } ] }
nftlb-1.0.7/tests/api/157_create_farm_farm01/nft.out 0000664 0000000 0000000 00000002055 14326712445 0022103 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto filter-farm01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto nat-farm01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farm01 {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-farm01 {
}
}
nftlb-1.0.7/tests/api/157_create_farm_farm01/obj.out 0000664 0000000 0000000 00000003434 14326712445 0022070 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farm01",
"family": "ipv4",
"virtual-addr": "192.168.101.63",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farm01-addr",
"family": "ipv4",
"ip-addr": "192.168.101.63",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/157_create_farm_farm01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022042 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/157_create_farm_farm01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022100 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/158_create_backend_farm01/ 0000775 0000000 0000000 00000000000 14326712445 0021224 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/158_create_backend_farm01/data.json 0000664 0000000 0000000 00000000327 14326712445 0023032 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farm01", "backends" : [ { "name" : "bck0", "ip-addr" : "192.168.101.254", "port" : "80", "mark" : "0x200", "weight" : "1", "priority" : "2", "est-connlimit" : "10", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/158_create_backend_farm01/nft.out 0000664 0000000 0000000 00000002055 14326712445 0022546 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto filter-farm01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto nat-farm01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farm01 {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-farm01 {
}
}
nftlb-1.0.7/tests/api/158_create_backend_farm01/obj.out 0000664 0000000 0000000 00000004522 14326712445 0022532 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farm01",
"family": "ipv4",
"virtual-addr": "192.168.101.63",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farm01-addr",
"family": "ipv4",
"ip-addr": "192.168.101.63",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.254",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x200",
"est-connlimit": "10",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/158_create_backend_farm01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022505 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/158_create_backend_farm01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022543 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/159_create_backend1_farm01/ 0000775 0000000 0000000 00000000000 14326712445 0021306 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/159_create_backend1_farm01/data.json 0000664 0000000 0000000 00000000327 14326712445 0023114 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farm01", "backends" : [ { "name" : "bck1", "ip-addr" : "192.168.101.253", "port" : "80", "mark" : "0x201", "weight" : "1", "priority" : "2", "est-connlimit" : "10", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/159_create_backend1_farm01/nft.out 0000664 0000000 0000000 00000002055 14326712445 0022630 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto filter-farm01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto nat-farm01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farm01 {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-farm01 {
}
}
nftlb-1.0.7/tests/api/159_create_backend1_farm01/obj.out 0000664 0000000 0000000 00000005560 14326712445 0022617 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farm01",
"family": "ipv4",
"virtual-addr": "192.168.101.63",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farm01-addr",
"family": "ipv4",
"ip-addr": "192.168.101.63",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.254",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x200",
"est-connlimit": "10",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x201",
"est-connlimit": "10",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/159_create_backend1_farm01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022567 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/159_create_backend1_farm01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022625 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/160_backend1_off/ 0000775 0000000 0000000 00000000000 14326712445 0017437 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/160_backend1_off/data.json 0000664 0000000 0000000 00000000136 14326712445 0021243 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farm01", "backends" : [ { "name" : "bck1", "state" : "off" } ] } ] }
nftlb-1.0.7/tests/api/160_backend1_off/nft.out 0000664 0000000 0000000 00000002055 14326712445 0020761 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto filter-farm01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto nat-farm01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farm01 {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-farm01 {
}
}
nftlb-1.0.7/tests/api/160_backend1_off/obj.out 0000664 0000000 0000000 00000005552 14326712445 0020751 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farm01",
"family": "ipv4",
"virtual-addr": "192.168.101.63",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farm01-addr",
"family": "ipv4",
"ip-addr": "192.168.101.63",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.254",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x200",
"est-connlimit": "10",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x201",
"est-connlimit": "10",
"state": "off"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/160_backend1_off/req.api 0000775 0000000 0000000 00000000051 14326712445 0020720 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/160_backend1_off/req.out 0000664 0000000 0000000 00000000027 14326712445 0020756 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/161_create_backend2/ 0000775 0000000 0000000 00000000000 14326712445 0020132 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/161_create_backend2/data.json 0000664 0000000 0000000 00000000327 14326712445 0021740 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farm01", "backends" : [ { "name" : "bck2", "ip-addr" : "192.168.102.254", "port" : "80", "mark" : "0x202", "weight" : "1", "priority" : "1", "est-connlimit" : "10", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/161_create_backend2/nft.out 0000664 0000000 0000000 00000002625 14326712445 0021457 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto filter-farm01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto nat-farm01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farm01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x80000202 }
ct mark 0x80000200 ct count over 10 log prefix "est-connlimit-farm01-bck0 " drop
ct mark 0x80000201 ct count over 10 log prefix "est-connlimit-farm01-bck1 " drop
ct mark 0x80000202 ct count over 10 log prefix "est-connlimit-farm01-bck2 " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-farm01 {
ip protocol tcp dnat ip to ct mark map { 0x80000202 : 192.168.102.254 . 80 }
}
}
nftlb-1.0.7/tests/api/161_create_backend2/obj.out 0000664 0000000 0000000 00000006601 14326712445 0021440 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farm01",
"family": "ipv4",
"virtual-addr": "192.168.101.63",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farm01-addr",
"family": "ipv4",
"ip-addr": "192.168.101.63",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.254",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x200",
"est-connlimit": "10",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x201",
"est-connlimit": "10",
"state": "off"
},
{
"name": "bck2",
"ip-addr": "192.168.102.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "10",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/161_create_backend2/req.api 0000775 0000000 0000000 00000000051 14326712445 0021413 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/161_create_backend2/req.out 0000664 0000000 0000000 00000000027 14326712445 0021451 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/162_maintenance_backend2/ 0000775 0000000 0000000 00000000000 14326712445 0021152 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/162_maintenance_backend2/data.json 0000664 0000000 0000000 00000000136 14326712445 0022756 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farm01", "backends" : [ { "name" : "bck2", "state" : "off" } ] } ] }
nftlb-1.0.7/tests/api/162_maintenance_backend2/nft.out 0000664 0000000 0000000 00000002733 14326712445 0022477 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto filter-farm01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.63 . 80 : goto nat-farm01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farm01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x80000200 }
ct mark 0x80000200 ct count over 10 log prefix "est-connlimit-farm01-bck0 " drop
ct mark 0x80000201 ct count over 10 log prefix "est-connlimit-farm01-bck1 " drop
ct mark 0x80000202 ct count over 10 log prefix "est-connlimit-farm01-bck2 " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-farm01 {
ip protocol tcp dnat ip to ct mark map { 0x80000200 : 192.168.101.254 . 80, 0x80000201 : 192.168.101.253 . 80, 0x80000202 : 192.168.102.254 . 80 }
}
}
nftlb-1.0.7/tests/api/162_maintenance_backend2/obj.out 0000664 0000000 0000000 00000006573 14326712445 0022470 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farm01",
"family": "ipv4",
"virtual-addr": "192.168.101.63",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farm01-addr",
"family": "ipv4",
"ip-addr": "192.168.101.63",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.254",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x200",
"est-connlimit": "10",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x201",
"est-connlimit": "10",
"state": "off"
},
{
"name": "bck2",
"ip-addr": "192.168.102.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "10",
"state": "off"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/162_maintenance_backend2/req.api 0000775 0000000 0000000 00000000051 14326712445 0022433 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/162_maintenance_backend2/req.out 0000664 0000000 0000000 00000000027 14326712445 0022471 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/163_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020123 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/163_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021431 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/163_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021425 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/163_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021403 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/163_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021442 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/164_enable_farm_newfarm_rtnewlimit_nobck/ 0000775 0000000 0000000 00000000000 14326712445 0024545 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/164_enable_farm_newfarm_rtnewlimit_nobck/data.json 0000664 0000000 0000000 00000000240 14326712445 0026345 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "new-rtlimit" : "22" } ] }
nftlb-1.0.7/tests/api/164_enable_farm_newfarm_rtnewlimit_nobck/nft.out 0000664 0000000 0000000 00000002322 14326712445 0026064 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second } log prefix "new-rtlimit-newfarm " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/164_enable_farm_newfarm_rtnewlimit_nobck/obj.out 0000664 0000000 0000000 00000003435 14326712445 0026055 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/164_enable_farm_newfarm_rtnewlimit_nobck/req.api 0000775 0000000 0000000 00000000051 14326712445 0026026 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/164_enable_farm_newfarm_rtnewlimit_nobck/req.out 0000664 0000000 0000000 00000000027 14326712445 0026064 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/165_enable_farm_newfarm_rtnewlimitbrst_nobck/ 0000775 0000000 0000000 00000000000 14326712445 0025441 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/165_enable_farm_newfarm_rtnewlimitbrst_nobck/data.json 0000664 0000000 0000000 00000000246 14326712445 0027247 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "new-rtlimit-burst" : "15" } ] }
nftlb-1.0.7/tests/api/165_enable_farm_newfarm_rtnewlimitbrst_nobck/nft.out 0000664 0000000 0000000 00000002343 14326712445 0026763 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second burst 15 packets } log prefix "new-rtlimit-newfarm " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/165_enable_farm_newfarm_rtnewlimitbrst_nobck/obj.out 0000664 0000000 0000000 00000003436 14326712445 0026752 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "15",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/165_enable_farm_newfarm_rtnewlimitbrst_nobck/req.api 0000775 0000000 0000000 00000000051 14326712445 0026722 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/165_enable_farm_newfarm_rtnewlimitbrst_nobck/req.out 0000664 0000000 0000000 00000000027 14326712445 0026760 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/166_enable_farm_newfarm_rtnewlimitlog_nobck/ 0000775 0000000 0000000 00000000000 14326712445 0025251 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/166_enable_farm_newfarm_rtnewlimitlog_nobck/data.json 0000664 0000000 0000000 00000000301 14326712445 0027047 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "new-rtlimit-log-prefix" : "[DOS,newdosrule,newfarm]" } ] }
nftlb-1.0.7/tests/api/166_enable_farm_newfarm_rtnewlimitlog_nobck/nft.out 0000664 0000000 0000000 00000002347 14326712445 0026577 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second burst 15 packets } log prefix "[DOS,newdosrule,newfarm]" drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/166_enable_farm_newfarm_rtnewlimitlog_nobck/obj.out 0000664 0000000 0000000 00000003554 14326712445 0026563 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "15",
"new-rtlimit-log-prefix": "[DOS,newdosrule,newfarm]",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/166_enable_farm_newfarm_rtnewlimitlog_nobck/req.api 0000775 0000000 0000000 00000000051 14326712445 0026532 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/166_enable_farm_newfarm_rtnewlimitlog_nobck/req.out 0000664 0000000 0000000 00000000027 14326712445 0026570 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/167_disable_farm_newfarm_rtnewlimit_nobck/ 0000775 0000000 0000000 00000000000 14326712445 0024725 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/167_disable_farm_newfarm_rtnewlimit_nobck/data.json 0000664 0000000 0000000 00000000237 14326712445 0026533 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "new-rtlimit" : "0" } ] }
nftlb-1.0.7/tests/api/167_disable_farm_newfarm_rtnewlimit_nobck/nft.out 0000664 0000000 0000000 00000001772 14326712445 0026254 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/167_disable_farm_newfarm_rtnewlimit_nobck/obj.out 0000664 0000000 0000000 00000003553 14326712445 0026236 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "15",
"new-rtlimit-log-prefix": "[DOS,newdosrule,newfarm]",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/167_disable_farm_newfarm_rtnewlimit_nobck/req.api 0000775 0000000 0000000 00000000051 14326712445 0026206 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/167_disable_farm_newfarm_rtnewlimit_nobck/req.out 0000664 0000000 0000000 00000000027 14326712445 0026244 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/168_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020130 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/168_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021436 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/168_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021432 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/168_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021410 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/168_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021447 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/169_enable_farm_newfarm_with_static_sessions/ 0000775 0000000 0000000 00000000000 14326712445 0025450 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/169_enable_farm_newfarm_with_static_sessions/data.json 0000664 0000000 0000000 00000004167 14326712445 0027264 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"mark": "0x0",
"priority": "1",
"state": "up",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"sessions": [
{
"client": "10.0.0.2",
"backend": "bck0"
}
]
}
]
}
nftlb-1.0.7/tests/api/169_enable_farm_newfarm_with_static_sessions/nft.out 0000664 0000000 0000000 00000003205 14326712445 0026770 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
elements = { 10.0.0.2 : 0x00000201 }
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000201 : 10.0.0.241, 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000201, 5-9 : 0x00000202 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.100.254 . 80, 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/169_enable_farm_newfarm_with_static_sessions/obj.out 0000664 0000000 0000000 00000006151 14326712445 0026756 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "10.0.0.2",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/169_enable_farm_newfarm_with_static_sessions/req.api 0000775 0000000 0000000 00000000051 14326712445 0026731 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/169_enable_farm_newfarm_with_static_sessions/req.out 0000664 0000000 0000000 00000000027 14326712445 0026767 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/170_stop_farm_newfarm_with_static_sessions/ 0000775 0000000 0000000 00000000000 14326712445 0025177 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/170_stop_farm_newfarm_with_static_sessions/data.json 0000664 0000000 0000000 00000000230 14326712445 0026776 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"state": "down"
}
]
}
nftlb-1.0.7/tests/api/170_stop_farm_newfarm_with_static_sessions/nft.out 0000664 0000000 0000000 00000000000 14326712445 0026505 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/170_stop_farm_newfarm_with_static_sessions/obj.out 0000664 0000000 0000000 00000006153 14326712445 0026507 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "down",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "10.0.0.2",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/170_stop_farm_newfarm_with_static_sessions/req.api 0000775 0000000 0000000 00000000051 14326712445 0026460 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/170_stop_farm_newfarm_with_static_sessions/req.out 0000664 0000000 0000000 00000000027 14326712445 0026516 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/171_start_farm_newfarm_with_static_sessions/ 0000775 0000000 0000000 00000000000 14326712445 0025350 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/171_start_farm_newfarm_with_static_sessions/data.json 0000664 0000000 0000000 00000000226 14326712445 0027154 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"state": "up"
}
]
}
nftlb-1.0.7/tests/api/171_start_farm_newfarm_with_static_sessions/nft.out 0000664 0000000 0000000 00000003205 14326712445 0026670 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
elements = { 10.0.0.2 : 0x00000201 }
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000201 : 10.0.0.241, 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000201, 5-9 : 0x00000202 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.100.254 . 80, 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/171_start_farm_newfarm_with_static_sessions/obj.out 0000664 0000000 0000000 00000006151 14326712445 0026656 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "10.0.0.2",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/171_start_farm_newfarm_with_static_sessions/req.api 0000775 0000000 0000000 00000000051 14326712445 0026631 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/171_start_farm_newfarm_with_static_sessions/req.out 0000664 0000000 0000000 00000000027 14326712445 0026667 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/172_change_priority_backend_with_static_session/ 0000775 0000000 0000000 00000000000 14326712445 0026142 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/172_change_priority_backend_with_static_session/data.json 0000664 0000000 0000000 00000000312 14326712445 0027742 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"backends": [ {
"name": "bck0",
"priority": "3"
}
]
}
]
}
nftlb-1.0.7/tests/api/172_change_priority_backend_with_static_session/nft.out 0000664 0000000 0000000 00000003066 14326712445 0027467 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
elements = { 10.0.0.2 : 0x00000201 }
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 5 map { 0-4 : 0x00000202 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/172_change_priority_backend_with_static_session/obj.out 0000664 0000000 0000000 00000006160 14326712445 0027450 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "5",
"priority": "3",
"mark": "0x201",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "10.0.0.2",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/172_change_priority_backend_with_static_session/req.api 0000775 0000000 0000000 00000000051 14326712445 0027423 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/172_change_priority_backend_with_static_session/req.out 0000664 0000000 0000000 00000000027 14326712445 0027461 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/173_active_priority_backend_with_static_session/ 0000775 0000000 0000000 00000000000 14326712445 0026171 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/173_active_priority_backend_with_static_session/data.json 0000664 0000000 0000000 00000000312 14326712445 0027771 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"backends": [ {
"name": "bck0",
"priority": "1"
}
]
}
]
}
nftlb-1.0.7/tests/api/173_active_priority_backend_with_static_session/nft.out 0000664 0000000 0000000 00000003205 14326712445 0027511 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
elements = { 10.0.0.2 : 0x00000201 }
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000201 : 10.0.0.241, 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000201, 5-9 : 0x00000202 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.100.254 . 80, 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/173_active_priority_backend_with_static_session/obj.out 0000664 0000000 0000000 00000006151 14326712445 0027477 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "10.0.0.2",
"backend": "bck0"
}
]
}
]
} nftlb-1.0.7/tests/api/173_active_priority_backend_with_static_session/req.api 0000775 0000000 0000000 00000000051 14326712445 0027452 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/173_active_priority_backend_with_static_session/req.out 0000664 0000000 0000000 00000000027 14326712445 0027510 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/174_delete_backend_with_static_sessions/ 0000775 0000000 0000000 00000000000 14326712445 0024403 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/174_delete_backend_with_static_sessions/nft.out 0000664 0000000 0000000 00000003017 14326712445 0025724 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 5 map { 0-4 : 0x00000202 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/174_delete_backend_with_static_sessions/obj.out 0000664 0000000 0000000 00000004526 14326712445 0025715 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/174_delete_backend_with_static_sessions/req.api 0000775 0000000 0000000 00000000101 14326712445 0025660 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/newfarm/backends/bck0"
nftlb-1.0.7/tests/api/174_delete_backend_with_static_sessions/req.out 0000664 0000000 0000000 00000000027 14326712445 0025722 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/175_create_backend_with_static_sessions/ 0000775 0000000 0000000 00000000000 14326712445 0024405 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/175_create_backend_with_static_sessions/data.json 0000664 0000000 0000000 00000000330 14326712445 0026205 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "persistence": "srcip", "backends" : [ { "name" : "bck0", "ip-addr" : "192.168.101.253", "port" : "80", "mark" : "0x200", "weight" : "5", "priority" : "1", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/175_create_backend_with_static_sessions/nft.out 0000664 0000000 0000000 00000003136 14326712445 0025730 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.0.0.241, 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000202, 5-9 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.101.253 . 80, 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/175_create_backend_with_static_sessions/obj.out 0000664 0000000 0000000 00000005554 14326712445 0025721 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/175_create_backend_with_static_sessions/req.api 0000775 0000000 0000000 00000000051 14326712445 0025666 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/175_create_backend_with_static_sessions/req.out 0000664 0000000 0000000 00000000027 14326712445 0025724 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/176_adding_static_sessions_in_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0024074 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/176_adding_static_sessions_in_newfarm/data.json 0000664 0000000 0000000 00000000430 14326712445 0025675 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "newfarm",
"sessions" : [
{
"client" : "192.168.44.4",
"backend" : "bck0"
},
{
"client" : "192.168.44.5",
"backend" : "bck0"
},
{
"client" : "192.168.44.6",
"backend" : "bck1"
}
]
}
]
}
nftlb-1.0.7/tests/api/176_adding_static_sessions_in_newfarm/nft.out 0000664 0000000 0000000 00000003307 14326712445 0025417 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
elements = { 192.168.44.4 : 0x00000200, 192.168.44.5 : 0x00000200,
192.168.44.6 : 0x00000202 }
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.0.0.241, 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000202, 5-9 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.101.253 . 80, 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/176_adding_static_sessions_in_newfarm/obj.out 0000664 0000000 0000000 00000006757 14326712445 0025416 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.4",
"backend": "bck0"
},
{
"client": "192.168.44.5",
"backend": "bck0"
},
{
"client": "192.168.44.6",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/176_adding_static_sessions_in_newfarm/req.api 0000775 0000000 0000000 00000000051 14326712445 0025355 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/176_adding_static_sessions_in_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0025413 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/177_change_priority_backend/ 0000775 0000000 0000000 00000000000 14326712445 0022002 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/177_change_priority_backend/data.json 0000664 0000000 0000000 00000000140 14326712445 0023601 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "backends" : [ { "name" : "bck0", "priority" : "2" } ] } ] }
nftlb-1.0.7/tests/api/177_change_priority_backend/nft.out 0000664 0000000 0000000 00000003170 14326712445 0023323 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
elements = { 192.168.44.4 : 0x00000200, 192.168.44.5 : 0x00000200,
192.168.44.6 : 0x00000202 }
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 5 map { 0-4 : 0x00000202 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/177_change_priority_backend/obj.out 0000664 0000000 0000000 00000006766 14326712445 0023324 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "5",
"priority": "2",
"mark": "0x200",
"est-connlimit": "0",
"state": "available"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.4",
"backend": "bck0"
},
{
"client": "192.168.44.5",
"backend": "bck0"
},
{
"client": "192.168.44.6",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/177_change_priority_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0023263 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/177_change_priority_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0023321 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/178_change_back_priority_backend/ 0000775 0000000 0000000 00000000000 14326712445 0022763 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/178_change_back_priority_backend/data.json 0000664 0000000 0000000 00000000140 14326712445 0024562 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "backends" : [ { "name" : "bck0", "priority" : "1" } ] } ] }
nftlb-1.0.7/tests/api/178_change_back_priority_backend/nft.out 0000664 0000000 0000000 00000003307 14326712445 0024306 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
elements = { 192.168.44.4 : 0x00000200, 192.168.44.5 : 0x00000200,
192.168.44.6 : 0x00000202 }
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 33m20s
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.0.0.241, 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000202, 5-9 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.101.253 . 80, 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/178_change_back_priority_backend/obj.out 0000664 0000000 0000000 00000006757 14326712445 0024305 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "2000",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.4",
"backend": "bck0"
},
{
"client": "192.168.44.5",
"backend": "bck0"
},
{
"client": "192.168.44.6",
"backend": "bck1"
}
]
}
]
} nftlb-1.0.7/tests/api/178_change_back_priority_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0024244 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/178_change_back_priority_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0024302 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/179_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020132 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/179_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021440 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/179_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021434 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/179_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021412 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/179_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021451 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/180_create_farm_with_backends/ 0000775 0000000 0000000 00000000000 14326712445 0022274 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/180_create_farm_with_backends/data.json 0000664 0000000 0000000 00000003427 14326712445 0024106 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"persistence": "srcip",
"helper": "none",
"log": "none",
"mark": "0x0",
"priority": "1",
"state": "up",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "2",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/180_create_farm_with_backends/nft.out 0000664 0000000 0000000 00000003005 14326712445 0023612 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000201 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000201 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.100.254 . 80 }
}
}
nftlb-1.0.7/tests/api/180_create_farm_with_backends/obj.out 0000664 0000000 0000000 00000005555 14326712445 0023611 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "2",
"mark": "0x202",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/180_create_farm_with_backends/req.api 0000775 0000000 0000000 00000000051 14326712445 0023555 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/180_create_farm_with_backends/req.out 0000664 0000000 0000000 00000000027 14326712445 0023613 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/181_backend_in_maintenance/ 0000775 0000000 0000000 00000000000 14326712445 0021557 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/181_backend_in_maintenance/data.json 0000664 0000000 0000000 00000000354 14326712445 0023365 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"backends": [
{
"name": "bck0",
"state": "off"
}
]
}
]
}
nftlb-1.0.7/tests/api/181_backend_in_maintenance/nft.out 0000664 0000000 0000000 00000003101 14326712445 0023072 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000201 : 10.0.0.241, 0x00000202 : 10.0.0.241 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x00000202 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.100.254 . 80, 0x00000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/181_backend_in_maintenance/obj.out 0000664 0000000 0000000 00000005547 14326712445 0023075 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "2",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/181_backend_in_maintenance/req.api 0000775 0000000 0000000 00000000051 14326712445 0023040 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/181_backend_in_maintenance/req.out 0000664 0000000 0000000 00000000027 14326712445 0023076 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/182_delete_backend_in_maintenance/ 0000775 0000000 0000000 00000000000 14326712445 0023102 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/182_delete_backend_in_maintenance/nft.out 0000664 0000000 0000000 00000002467 14326712445 0024433 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.0.0.241 . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/182_delete_backend_in_maintenance/obj.out 0000664 0000000 0000000 00000004527 14326712445 0024415 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "10.0.0.241",
"virtual-ports": "8080",
"source-addr": "10.0.0.241",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "10.0.0.241",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "2",
"mark": "0x202",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/182_delete_backend_in_maintenance/req.api 0000775 0000000 0000000 00000000101 14326712445 0024357 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/newfarm/backends/bck0"
nftlb-1.0.7/tests/api/182_delete_backend_in_maintenance/req.out 0000664 0000000 0000000 00000000027 14326712445 0024421 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/183_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020125 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/183_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021433 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/183_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021427 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/183_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021405 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/183_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021444 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/184_create_farm_without_virtaddr/ 0000775 0000000 0000000 00000000000 14326712445 0023075 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/184_create_farm_without_virtaddr/data.json 0000664 0000000 0000000 00000003323 14326712445 0024702 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"helper": "none",
"log": "none",
"mark": "0x0",
"priority": "1",
"state": "up",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/184_create_farm_without_virtaddr/nft.out 0000664 0000000 0000000 00000002200 14326712445 0024407 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto filter-newfarm }
}
map nat-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @filter-port-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @nat-port-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000201 : 192.168.100.254 . 80, 0x80000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/184_create_farm_without_virtaddr/obj.out 0000664 0000000 0000000 00000005506 14326712445 0024406 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/184_create_farm_without_virtaddr/req.api 0000775 0000000 0000000 00000000051 14326712445 0024356 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/184_create_farm_without_virtaddr/req.out 0000664 0000000 0000000 00000000027 14326712445 0024414 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/185_farm_intra_connect/ 0000775 0000000 0000000 00000000000 14326712445 0020777 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/185_farm_intra_connect/data.json 0000664 0000000 0000000 00000000236 14326712445 0022604 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"intra-connect": "on"
}
]
}
nftlb-1.0.7/tests/api/185_farm_intra_connect/nft.out 0000664 0000000 0000000 00000003227 14326712445 0022323 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto filter-newfarm }
}
map nat-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
map output-filter-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto filter-newfarm }
}
map output-nat-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto nat-newfarm }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @filter-port-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @nat-port-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000201 : 192.168.100.254 . 80, 0x80000202 : 192.168.101.254 . 32 }
}
chain output-filter {
type filter hook output priority mangle; policy accept;
ip protocol . th dport vmap @output-filter-port-services
}
chain output-nat {
type nat hook output priority -100; policy accept;
ip protocol . th dport vmap @output-nat-port-services
}
}
nftlb-1.0.7/tests/api/185_farm_intra_connect/obj.out 0000664 0000000 0000000 00000005565 14326712445 0022315 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"intra-connect": "on",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/185_farm_intra_connect/req.api 0000775 0000000 0000000 00000000051 14326712445 0022260 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/185_farm_intra_connect/req.out 0000664 0000000 0000000 00000000027 14326712445 0022316 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/186_farm_disable_intra_connect/ 0000775 0000000 0000000 00000000000 14326712445 0022463 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/186_farm_disable_intra_connect/data.json 0000664 0000000 0000000 00000000237 14326712445 0024271 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"intra-connect": "off"
}
]
}
nftlb-1.0.7/tests/api/186_farm_disable_intra_connect/nft.out 0000664 0000000 0000000 00000002200 14326712445 0023775 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto filter-newfarm }
}
map nat-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @filter-port-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @nat-port-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000201 : 192.168.100.254 . 80, 0x80000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/186_farm_disable_intra_connect/obj.out 0000664 0000000 0000000 00000005506 14326712445 0023774 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/186_farm_disable_intra_connect/req.api 0000775 0000000 0000000 00000000051 14326712445 0023744 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/186_farm_disable_intra_connect/req.out 0000664 0000000 0000000 00000000027 14326712445 0024002 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/187_backend_port_without_marks/ 0000775 0000000 0000000 00000000000 14326712445 0022561 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/187_backend_port_without_marks/data.json 0000664 0000000 0000000 00000001017 14326712445 0024364 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"backends": [
{
"name": "bck0",
"mark": ""
},
{
"name": "bck1",
"mark": ""
}
]
}
]
}
nftlb-1.0.7/tests/api/187_backend_port_without_marks/nft.out 0000664 0000000 0000000 00000002200 14326712445 0024073 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto filter-newfarm }
}
map nat-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @filter-port-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @nat-port-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000201 : 192.168.100.254 . 80, 0x80000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/187_backend_port_without_marks/obj.out 0000664 0000000 0000000 00000005506 14326712445 0024072 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/187_backend_port_without_marks/req.api 0000775 0000000 0000000 00000000051 14326712445 0024042 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/187_backend_port_without_marks/req.out 0000664 0000000 0000000 00000000027 14326712445 0024100 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/188_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020132 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/188_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021440 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/188_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021434 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/188_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021412 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/188_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021451 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/189_create_farm_with_backends/ 0000775 0000000 0000000 00000000000 14326712445 0022305 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/189_create_farm_with_backends/data.json 0000664 0000000 0000000 00000003403 14326712445 0024111 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"persistence": "srcip",
"helper": "none",
"log": "none",
"mark": "0x0",
"priority": "1",
"state": "up",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/189_create_farm_with_backends/nft.out 0000664 0000000 0000000 00000002723 14326712445 0023631 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @filter-port-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
ct mark != { 0x00000000, 0x80000000 } update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @nat-port-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000201 : 192.168.100.254 . 80, 0x80000202 : 192.168.101.254 . 32 }
}
}
nftlb-1.0.7/tests/api/189_create_farm_with_backends/obj.out 0000664 0000000 0000000 00000005510 14326712445 0023611 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "32",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/189_create_farm_with_backends/req.api 0000775 0000000 0000000 00000000051 14326712445 0023566 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/189_create_farm_with_backends/req.out 0000664 0000000 0000000 00000000027 14326712445 0023624 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/190_deleting_backend_with_dyn_session/ 0000775 0000000 0000000 00000000000 14326712445 0024052 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/190_deleting_backend_with_dyn_session/nft.out 0000664 0000000 0000000 00000002640 14326712445 0025374 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-port-services {
type inet_proto . inet_service : verdict
elements = { tcp . 8080 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @filter-port-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x80000201 }
ct mark != { 0x00000000, 0x80000000 } update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . th dport vmap @nat-port-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000201 : 192.168.100.254 . 80 }
}
}
nftlb-1.0.7/tests/api/190_deleting_backend_with_dyn_session/obj.out 0000664 0000000 0000000 00000004462 14326712445 0025363 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/190_deleting_backend_with_dyn_session/pos.sh 0000775 0000000 0000000 00000000227 14326712445 0025213 0 ustar 00root root 0000000 0000000 #!/bin/bash
logger ">> PRE"
nft delete element nftlb persist-newfarm { 222.222.222.223 }
nft list map nftlb persist-newfarm | logger
logger "PRE <<"
nftlb-1.0.7/tests/api/190_deleting_backend_with_dyn_session/pre.sh 0000775 0000000 0000000 00000000277 14326712445 0025205 0 ustar 00root root 0000000 0000000 #!/bin/bash
logger ">> PRE"
nft add element nftlb persist-newfarm { 222.222.222.222 : 0x80000202, 222.222.222.223 : 0x80000201 }
nft list map nftlb persist-newfarm | logger
logger "PRE <<"
nftlb-1.0.7/tests/api/190_deleting_backend_with_dyn_session/req.api 0000775 0000000 0000000 00000000060 14326712445 0025333 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/newfarm/backends/bck1"
nftlb-1.0.7/tests/api/190_deleting_backend_with_dyn_session/req.out 0000664 0000000 0000000 00000000027 14326712445 0025371 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/191_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020124 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/191_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021432 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/191_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021426 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/191_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021404 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/191_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021443 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/192_create_farm_with_multiport/ 0000775 0000000 0000000 00000000000 14326712445 0022564 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/192_create_farm_with_multiport/data.json 0000664 0000000 0000000 00000002232 14326712445 0024367 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"helper": "none",
"log": "none",
"mark": "0x0",
"priority": "1",
"state": "up",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/192_create_farm_with_multiport/nft.out 0000664 0000000 0000000 00000002414 14326712445 0024105 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto filter-newfarm,
tcp . 192.168.56.101 . 8081 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto nat-newfarm,
tcp . 192.168.56.101 . 8081 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 1 map { 0 : 0x80000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x80000201 : 192.168.100.254 }
}
}
nftlb-1.0.7/tests/api/192_create_farm_with_multiport/obj.out 0000664 0000000 0000000 00000004524 14326712445 0024074 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "8080,8081",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/192_create_farm_with_multiport/req.api 0000775 0000000 0000000 00000000051 14326712445 0024045 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/192_create_farm_with_multiport/req.out 0000664 0000000 0000000 00000000027 14326712445 0024103 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/193_backend_in_maintenance/ 0000775 0000000 0000000 00000000000 14326712445 0021562 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/193_backend_in_maintenance/data.json 0000664 0000000 0000000 00000000354 14326712445 0023370 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"backends": [
{
"name": "bck0",
"state": "off"
}
]
}
]
}
nftlb-1.0.7/tests/api/193_backend_in_maintenance/nft.out 0000664 0000000 0000000 00000002357 14326712445 0023111 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto filter-newfarm,
tcp . 192.168.56.101 . 8081 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto nat-newfarm,
tcp . 192.168.56.101 . 8081 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x80000201 : 192.168.100.254 }
}
}
nftlb-1.0.7/tests/api/193_backend_in_maintenance/obj.out 0000664 0000000 0000000 00000004525 14326712445 0023073 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "8080,8081",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "off"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/193_backend_in_maintenance/req.api 0000775 0000000 0000000 00000000051 14326712445 0023043 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/193_backend_in_maintenance/req.out 0000664 0000000 0000000 00000000027 14326712445 0023101 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/194_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020127 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/194_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021435 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/194_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021431 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/194_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021407 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/194_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021446 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/195_create_dsr_empty_farm_with_persistence/ 0000775 0000000 0000000 00000000000 14326712445 0025142 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/195_create_dsr_empty_farm_with_persistence/data.json 0000664 0000000 0000000 00000000500 14326712445 0026741 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "hash",
"persistence" : "srcip",
"state" : "up",
"ether-addr" : "0f:0f:0f:0f:0f:0f",
"iface" : "lo",
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/api/195_create_dsr_empty_farm_with_persistence/nft.out 0000664 0000000 0000000 00000000707 14326712445 0026466 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ether_addr
}
map persist-lb01 {
type ipv4_addr : ether_addr
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
}
}
nftlb-1.0.7/tests/api/195_create_dsr_empty_farm_with_persistence/obj.out 0000664 0000000 0000000 00000003417 14326712445 0026452 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/195_create_dsr_empty_farm_with_persistence/req.api 0000775 0000000 0000000 00000000051 14326712445 0026423 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/195_create_dsr_empty_farm_with_persistence/req.out 0000664 0000000 0000000 00000000027 14326712445 0026461 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/196_add_dsr_backend_with_persistence/ 0000775 0000000 0000000 00000000000 14326712445 0023654 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/196_add_dsr_backend_with_persistence/data.json 0000664 0000000 0000000 00000001025 14326712445 0025456 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "b1-64588d8b49-6r67p",
"ip-addr" : "172.17.0.4",
"ether-addr" : "01:01:01:01:01:01",
"state" : "up",
"port" : "80"
}
]
}
]
}
nftlb-1.0.7/tests/api/196_add_dsr_backend_with_persistence/nft.out 0000664 0000000 0000000 00000001545 14326712445 0025201 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ether_addr
}
map persist-lb01 {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether daddr set ip saddr map @static-sessions-lb01 ether saddr set 0f:0f:0f:0f:0f:0f fwd to "lo"
ether daddr set ip saddr map @persist-lb01 ether saddr set 0f:0f:0f:0f:0f:0f update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
ether saddr set 0f:0f:0f:0f:0f:0f ether daddr set jhash ip saddr mod 1 map { 0 : 01:01:01:01:01:01 } update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/196_add_dsr_backend_with_persistence/obj.out 0000664 0000000 0000000 00000004505 14326712445 0025163 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "b1-64588d8b49-6r67p",
"ip-addr": "172.17.0.4",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/196_add_dsr_backend_with_persistence/req.api 0000775 0000000 0000000 00000000051 14326712445 0025135 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/196_add_dsr_backend_with_persistence/req.out 0000664 0000000 0000000 00000000027 14326712445 0025173 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/197_adding_static_sessions_in_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0023176 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/197_adding_static_sessions_in_lb01/data.json 0000664 0000000 0000000 00000000502 14326712445 0024777 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"sessions" : [
{
"client" : "192.168.44.4",
"backend" : "b1-64588d8b49-6r67p"
},
{
"client" : "192.168.44.5",
"backend" : "b1-64588d8b49-6r67p"
},
{
"client" : "192.168.44.6",
"backend" : "b1-64588d8b49-6r67p"
}
]
}
]
}
nftlb-1.0.7/tests/api/197_adding_static_sessions_in_lb01/nft.out 0000664 0000000 0000000 00000001743 14326712445 0024523 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ether_addr
elements = { 192.168.44.4 : 01:01:01:01:01:01, 192.168.44.5 : 01:01:01:01:01:01,
192.168.44.6 : 01:01:01:01:01:01 }
}
map persist-lb01 {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether daddr set ip saddr map @static-sessions-lb01 ether saddr set 0f:0f:0f:0f:0f:0f fwd to "lo"
ether daddr set ip saddr map @persist-lb01 ether saddr set 0f:0f:0f:0f:0f:0f update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
ether saddr set 0f:0f:0f:0f:0f:0f ether daddr set jhash ip saddr mod 1 map { 0 : 01:01:01:01:01:01 } update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/197_adding_static_sessions_in_lb01/obj.out 0000664 0000000 0000000 00000005765 14326712445 0024516 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "b1-64588d8b49-6r67p",
"ip-addr": "172.17.0.4",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [],
"sessions": [
{
"client": "192.168.44.4",
"backend": "b1-64588d8b49-6r67p"
},
{
"client": "192.168.44.5",
"backend": "b1-64588d8b49-6r67p"
},
{
"client": "192.168.44.6",
"backend": "b1-64588d8b49-6r67p"
}
]
}
]
} nftlb-1.0.7/tests/api/197_adding_static_sessions_in_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0024457 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/197_adding_static_sessions_in_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0024515 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/198_delete_sessions_from_backend/ 0000775 0000000 0000000 00000000000 14326712445 0023032 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/198_delete_sessions_from_backend/nft.out 0000664 0000000 0000000 00000001545 14326712445 0024357 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr : ether_addr
}
map persist-lb01 {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether daddr set ip saddr map @static-sessions-lb01 ether saddr set 0f:0f:0f:0f:0f:0f fwd to "lo"
ether daddr set ip saddr map @persist-lb01 ether saddr set 0f:0f:0f:0f:0f:0f update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
ether saddr set 0f:0f:0f:0f:0f:0f ether daddr set jhash ip saddr mod 1 map { 0 : 01:01:01:01:01:01 } update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/198_delete_sessions_from_backend/obj.out 0000664 0000000 0000000 00000004505 14326712445 0024341 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "b1-64588d8b49-6r67p",
"ip-addr": "172.17.0.4",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/198_delete_sessions_from_backend/pre.sh 0000775 0000000 0000000 00000000260 14326712445 0024155 0 ustar 00root root 0000000 0000000 #!/bin/bash
logger ">> PRE"
nft add element netdev nftlb persist-lb01 { 222.222.222.222 : 01:01:01:01:01:01 }
nft list map netdev nftlb persist-lb01 | logger
logger "PRE <<"
nftlb-1.0.7/tests/api/198_delete_sessions_from_backend/req.api 0000775 0000000 0000000 00000000126 14326712445 0024316 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/lb01/backends/b1-64588d8b49-6r67p/sessions"
nftlb-1.0.7/tests/api/198_delete_sessions_from_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0024351 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/199_create_multiple_farms/ 0000775 0000000 0000000 00000000000 14326712445 0021517 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/199_create_multiple_farms/data.json 0000664 0000000 0000000 00000004012 14326712445 0023320 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb02",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80-88",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
},
{
"name" : "lb04",
"family" : "ipv4",
"virtual-addr" : "10.72.33.44",
"virtual-ports" : "80-99",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "hash",
"persistence" : "srcip",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "0f:0f:0f:0f:0f:0f",
"iface" : "lo",
"oface" : "lo"
},
{
"name" : "lb05",
"family" : "ipv4",
"virtual-addr" : "10.72.33.55",
"virtual-ports" : "2002",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "hash",
"persistence" : "srcip",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "0f:0f:0f:0f:0f:0f",
"iface" : "lo",
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/api/199_create_multiple_farms/nft.out 0000664 0000000 0000000 00000012635 14326712445 0023046 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01,
tcp . 192.168.0.100 . 80 : goto lb02,
tcp . 192.168.0.100 . 81 : goto lb02,
tcp . 192.168.0.100 . 82 : goto lb02,
tcp . 192.168.0.100 . 83 : goto lb02,
tcp . 192.168.0.100 . 84 : goto lb02,
tcp . 192.168.0.100 . 85 : goto lb02,
tcp . 192.168.0.100 . 86 : goto lb02,
tcp . 192.168.0.100 . 87 : goto lb02,
tcp . 192.168.0.100 . 88 : goto lb02 }
}
map static-sessions-lb01 {
type ipv4_addr : ether_addr
}
map persist-lb01 {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether daddr set ip saddr map @static-sessions-lb01 ether saddr set 0f:0f:0f:0f:0f:0f fwd to "lo"
ether daddr set ip saddr map @persist-lb01 ether saddr set 0f:0f:0f:0f:0f:0f update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
ether saddr set 0f:0f:0f:0f:0f:0f ether daddr set jhash ip saddr mod 1 map { 0 : 01:01:01:01:01:01 } update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
}
chain lb02 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto filter-lb04,
tcp . 10.72.33.44 . 81 : goto filter-lb04,
tcp . 10.72.33.44 . 82 : goto filter-lb04,
tcp . 10.72.33.44 . 83 : goto filter-lb04,
tcp . 10.72.33.44 . 84 : goto filter-lb04,
tcp . 10.72.33.44 . 85 : goto filter-lb04,
tcp . 10.72.33.44 . 86 : goto filter-lb04,
tcp . 10.72.33.44 . 87 : goto filter-lb04,
tcp . 10.72.33.44 . 88 : goto filter-lb04,
tcp . 10.72.33.44 . 89 : goto filter-lb04,
tcp . 10.72.33.44 . 90 : goto filter-lb04,
tcp . 10.72.33.44 . 91 : goto filter-lb04,
tcp . 10.72.33.44 . 92 : goto filter-lb04,
tcp . 10.72.33.44 . 93 : goto filter-lb04,
tcp . 10.72.33.44 . 94 : goto filter-lb04,
tcp . 10.72.33.44 . 95 : goto filter-lb04,
tcp . 10.72.33.44 . 96 : goto filter-lb04,
tcp . 10.72.33.44 . 97 : goto filter-lb04,
tcp . 10.72.33.44 . 98 : goto filter-lb04,
tcp . 10.72.33.44 . 99 : goto filter-lb04,
tcp . 10.72.33.55 . 2002 : goto filter-lb05 }
}
map static-sessions-lb04 {
type ipv4_addr : mark
}
map persist-lb04 {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto nat-lb04,
tcp . 10.72.33.44 . 81 : goto nat-lb04,
tcp . 10.72.33.44 . 82 : goto nat-lb04,
tcp . 10.72.33.44 . 83 : goto nat-lb04,
tcp . 10.72.33.44 . 84 : goto nat-lb04,
tcp . 10.72.33.44 . 85 : goto nat-lb04,
tcp . 10.72.33.44 . 86 : goto nat-lb04,
tcp . 10.72.33.44 . 87 : goto nat-lb04,
tcp . 10.72.33.44 . 88 : goto nat-lb04,
tcp . 10.72.33.44 . 89 : goto nat-lb04,
tcp . 10.72.33.44 . 90 : goto nat-lb04,
tcp . 10.72.33.44 . 91 : goto nat-lb04,
tcp . 10.72.33.44 . 92 : goto nat-lb04,
tcp . 10.72.33.44 . 93 : goto nat-lb04,
tcp . 10.72.33.44 . 94 : goto nat-lb04,
tcp . 10.72.33.44 . 95 : goto nat-lb04,
tcp . 10.72.33.44 . 96 : goto nat-lb04,
tcp . 10.72.33.44 . 97 : goto nat-lb04,
tcp . 10.72.33.44 . 98 : goto nat-lb04,
tcp . 10.72.33.44 . 99 : goto nat-lb04,
tcp . 10.72.33.55 . 2002 : goto nat-lb05 }
}
map services-back-m {
type mark : ipv4_addr
}
map static-sessions-lb05 {
type ipv4_addr : mark
}
map persist-lb05 {
type ipv4_addr : mark
size 65535
timeout 1m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb04 {
ct mark set ip saddr map @static-sessions-lb04 accept
ct state new ct mark set ip saddr map @persist-lb04
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x80000004, 5-9 : 0x80000005 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb04 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb04 {
ip protocol tcp dnat to ct mark map { 0x80000004 : 192.168.0.10, 0x80000005 : 192.168.0.11 }
}
chain filter-lb05 {
ct mark set ip saddr map @static-sessions-lb05 accept
ct state new ct mark set ip saddr map @persist-lb05
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x80000006, 5-9 : 0x80000007 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb05 { ip saddr : ct mark }
}
chain nat-lb05 {
ip protocol tcp dnat to ct mark map { 0x80000006 : 192.168.0.10, 0x80000007 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/199_create_multiple_farms/obj.out 0000664 0000000 0000000 00000025327 14326712445 0023033 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "b1-64588d8b49-6r67p",
"ip-addr": "172.17.0.4",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80-88",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80-88",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb04",
"family": "ipv4",
"virtual-addr": "10.72.33.44",
"virtual-ports": "80-99",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb04-addr",
"family": "ipv4",
"ip-addr": "10.72.33.44",
"ports": "80-99",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb05",
"family": "ipv4",
"virtual-addr": "10.72.33.55",
"virtual-ports": "2002",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb05-addr",
"family": "ipv4",
"ip-addr": "10.72.33.55",
"ports": "2002",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x6",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x7",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/199_create_multiple_farms/req.api 0000775 0000000 0000000 00000000051 14326712445 0023000 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/199_create_multiple_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0023036 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/200_delete_farm_lb05/ 0000775 0000000 0000000 00000000000 14326712445 0020221 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/200_delete_farm_lb05/nft.out 0000664 0000000 0000000 00000011365 14326712445 0021547 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01,
tcp . 192.168.0.100 . 80 : goto lb02,
tcp . 192.168.0.100 . 81 : goto lb02,
tcp . 192.168.0.100 . 82 : goto lb02,
tcp . 192.168.0.100 . 83 : goto lb02,
tcp . 192.168.0.100 . 84 : goto lb02,
tcp . 192.168.0.100 . 85 : goto lb02,
tcp . 192.168.0.100 . 86 : goto lb02,
tcp . 192.168.0.100 . 87 : goto lb02,
tcp . 192.168.0.100 . 88 : goto lb02 }
}
map static-sessions-lb01 {
type ipv4_addr : ether_addr
}
map persist-lb01 {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether daddr set ip saddr map @static-sessions-lb01 ether saddr set 0f:0f:0f:0f:0f:0f fwd to "lo"
ether daddr set ip saddr map @persist-lb01 ether saddr set 0f:0f:0f:0f:0f:0f update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
ether saddr set 0f:0f:0f:0f:0f:0f ether daddr set jhash ip saddr mod 1 map { 0 : 01:01:01:01:01:01 } update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
}
chain lb02 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto filter-lb04,
tcp . 10.72.33.44 . 81 : goto filter-lb04,
tcp . 10.72.33.44 . 82 : goto filter-lb04,
tcp . 10.72.33.44 . 83 : goto filter-lb04,
tcp . 10.72.33.44 . 84 : goto filter-lb04,
tcp . 10.72.33.44 . 85 : goto filter-lb04,
tcp . 10.72.33.44 . 86 : goto filter-lb04,
tcp . 10.72.33.44 . 87 : goto filter-lb04,
tcp . 10.72.33.44 . 88 : goto filter-lb04,
tcp . 10.72.33.44 . 89 : goto filter-lb04,
tcp . 10.72.33.44 . 90 : goto filter-lb04,
tcp . 10.72.33.44 . 91 : goto filter-lb04,
tcp . 10.72.33.44 . 92 : goto filter-lb04,
tcp . 10.72.33.44 . 93 : goto filter-lb04,
tcp . 10.72.33.44 . 94 : goto filter-lb04,
tcp . 10.72.33.44 . 95 : goto filter-lb04,
tcp . 10.72.33.44 . 96 : goto filter-lb04,
tcp . 10.72.33.44 . 97 : goto filter-lb04,
tcp . 10.72.33.44 . 98 : goto filter-lb04,
tcp . 10.72.33.44 . 99 : goto filter-lb04 }
}
map static-sessions-lb04 {
type ipv4_addr : mark
}
map persist-lb04 {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto nat-lb04,
tcp . 10.72.33.44 . 81 : goto nat-lb04,
tcp . 10.72.33.44 . 82 : goto nat-lb04,
tcp . 10.72.33.44 . 83 : goto nat-lb04,
tcp . 10.72.33.44 . 84 : goto nat-lb04,
tcp . 10.72.33.44 . 85 : goto nat-lb04,
tcp . 10.72.33.44 . 86 : goto nat-lb04,
tcp . 10.72.33.44 . 87 : goto nat-lb04,
tcp . 10.72.33.44 . 88 : goto nat-lb04,
tcp . 10.72.33.44 . 89 : goto nat-lb04,
tcp . 10.72.33.44 . 90 : goto nat-lb04,
tcp . 10.72.33.44 . 91 : goto nat-lb04,
tcp . 10.72.33.44 . 92 : goto nat-lb04,
tcp . 10.72.33.44 . 93 : goto nat-lb04,
tcp . 10.72.33.44 . 94 : goto nat-lb04,
tcp . 10.72.33.44 . 95 : goto nat-lb04,
tcp . 10.72.33.44 . 96 : goto nat-lb04,
tcp . 10.72.33.44 . 97 : goto nat-lb04,
tcp . 10.72.33.44 . 98 : goto nat-lb04,
tcp . 10.72.33.44 . 99 : goto nat-lb04 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb04 {
ct mark set ip saddr map @static-sessions-lb04 accept
ct state new ct mark set ip saddr map @persist-lb04
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x80000004, 5-9 : 0x80000005 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb04 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb04 {
ip protocol tcp dnat to ct mark map { 0x80000004 : 192.168.0.10, 0x80000005 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/200_delete_farm_lb05/obj.out 0000664 0000000 0000000 00000017650 14326712445 0021535 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "b1-64588d8b49-6r67p",
"ip-addr": "172.17.0.4",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80-88",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80-88",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb04",
"family": "ipv4",
"virtual-addr": "10.72.33.44",
"virtual-ports": "80-99",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb04-addr",
"family": "ipv4",
"ip-addr": "10.72.33.44",
"ports": "80-99",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/200_delete_farm_lb05/req.api 0000775 0000000 0000000 00000000037 14326712445 0021506 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb05"
nftlb-1.0.7/tests/api/200_delete_farm_lb05/req.out 0000664 0000000 0000000 00000000027 14326712445 0021540 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/201_delete_farm_lb04/ 0000775 0000000 0000000 00000000000 14326712445 0020221 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/201_delete_farm_lb04/nft.out 0000664 0000000 0000000 00000002644 14326712445 0021547 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01,
tcp . 192.168.0.100 . 80 : goto lb02,
tcp . 192.168.0.100 . 81 : goto lb02,
tcp . 192.168.0.100 . 82 : goto lb02,
tcp . 192.168.0.100 . 83 : goto lb02,
tcp . 192.168.0.100 . 84 : goto lb02,
tcp . 192.168.0.100 . 85 : goto lb02,
tcp . 192.168.0.100 . 86 : goto lb02,
tcp . 192.168.0.100 . 87 : goto lb02,
tcp . 192.168.0.100 . 88 : goto lb02 }
}
map static-sessions-lb01 {
type ipv4_addr : ether_addr
}
map persist-lb01 {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether daddr set ip saddr map @static-sessions-lb01 ether saddr set 0f:0f:0f:0f:0f:0f fwd to "lo"
ether daddr set ip saddr map @persist-lb01 ether saddr set 0f:0f:0f:0f:0f:0f update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
ether saddr set 0f:0f:0f:0f:0f:0f ether daddr set jhash ip saddr mod 1 map { 0 : 01:01:01:01:01:01 } update @persist-lb01 { ip saddr : ether daddr } fwd to "lo"
}
chain lb02 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/201_delete_farm_lb04/obj.out 0000664 0000000 0000000 00000012167 14326712445 0021533 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "b1-64588d8b49-6r67p",
"ip-addr": "172.17.0.4",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80-88",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80-88",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/201_delete_farm_lb04/req.api 0000775 0000000 0000000 00000000037 14326712445 0021506 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb04"
nftlb-1.0.7/tests/api/201_delete_farm_lb04/req.out 0000664 0000000 0000000 00000000027 14326712445 0021540 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/202_delete_farm_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0020217 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/202_delete_farm_lb01/nft.out 0000664 0000000 0000000 00000001511 14326712445 0021535 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb02,
tcp . 192.168.0.100 . 81 : goto lb02,
tcp . 192.168.0.100 . 82 : goto lb02,
tcp . 192.168.0.100 . 83 : goto lb02,
tcp . 192.168.0.100 . 84 : goto lb02,
tcp . 192.168.0.100 . 85 : goto lb02,
tcp . 192.168.0.100 . 86 : goto lb02,
tcp . 192.168.0.100 . 87 : goto lb02,
tcp . 192.168.0.100 . 88 : goto lb02 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb02 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/202_delete_farm_lb01/obj.out 0000664 0000000 0000000 00000005521 14326712445 0021525 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80-88",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80-88",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/202_delete_farm_lb01/req.api 0000775 0000000 0000000 00000000037 14326712445 0021504 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb01"
nftlb-1.0.7/tests/api/202_delete_farm_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0021536 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/203_delete_farm_lb02/ 0000775 0000000 0000000 00000000000 14326712445 0020221 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/203_delete_farm_lb02/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021527 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/203_delete_farm_lb02/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021523 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/203_delete_farm_lb02/req.api 0000775 0000000 0000000 00000000037 14326712445 0021506 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb02"
nftlb-1.0.7/tests/api/203_delete_farm_lb02/req.out 0000664 0000000 0000000 00000000027 14326712445 0021540 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/204_create_multiple_farms/ 0000775 0000000 0000000 00000000000 14326712445 0021502 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/204_create_multiple_farms/data.json 0000664 0000000 0000000 00000004012 14326712445 0023303 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb02",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80-88",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "hash",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "01:01:01:01:01:01",
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
},
{
"name" : "lb04",
"family" : "ipv4",
"virtual-addr" : "10.72.33.44",
"virtual-ports" : "80-99",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "hash",
"persistence" : "srcip",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "0f:0f:0f:0f:0f:0f",
"iface" : "lo",
"oface" : "lo"
},
{
"name" : "lb05",
"family" : "ipv4",
"virtual-addr" : "10.72.33.55",
"virtual-ports" : "2002",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "hash",
"persistence" : "srcip",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"ether-addr" : "0f:0f:0f:0f:0f:0f",
"iface" : "lo",
"oface" : "lo"
}
]
}
nftlb-1.0.7/tests/api/204_create_multiple_farms/nft.out 0000664 0000000 0000000 00000011502 14326712445 0023021 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb02,
tcp . 192.168.0.100 . 81 : goto lb02,
tcp . 192.168.0.100 . 82 : goto lb02,
tcp . 192.168.0.100 . 83 : goto lb02,
tcp . 192.168.0.100 . 84 : goto lb02,
tcp . 192.168.0.100 . 85 : goto lb02,
tcp . 192.168.0.100 . 86 : goto lb02,
tcp . 192.168.0.100 . 87 : goto lb02,
tcp . 192.168.0.100 . 88 : goto lb02 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb02 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto filter-lb04,
tcp . 10.72.33.44 . 81 : goto filter-lb04,
tcp . 10.72.33.44 . 82 : goto filter-lb04,
tcp . 10.72.33.44 . 83 : goto filter-lb04,
tcp . 10.72.33.44 . 84 : goto filter-lb04,
tcp . 10.72.33.44 . 85 : goto filter-lb04,
tcp . 10.72.33.44 . 86 : goto filter-lb04,
tcp . 10.72.33.44 . 87 : goto filter-lb04,
tcp . 10.72.33.44 . 88 : goto filter-lb04,
tcp . 10.72.33.44 . 89 : goto filter-lb04,
tcp . 10.72.33.44 . 90 : goto filter-lb04,
tcp . 10.72.33.44 . 91 : goto filter-lb04,
tcp . 10.72.33.44 . 92 : goto filter-lb04,
tcp . 10.72.33.44 . 93 : goto filter-lb04,
tcp . 10.72.33.44 . 94 : goto filter-lb04,
tcp . 10.72.33.44 . 95 : goto filter-lb04,
tcp . 10.72.33.44 . 96 : goto filter-lb04,
tcp . 10.72.33.44 . 97 : goto filter-lb04,
tcp . 10.72.33.44 . 98 : goto filter-lb04,
tcp . 10.72.33.44 . 99 : goto filter-lb04,
tcp . 10.72.33.55 . 2002 : goto filter-lb05 }
}
map static-sessions-lb04 {
type ipv4_addr : mark
}
map persist-lb04 {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto nat-lb04,
tcp . 10.72.33.44 . 81 : goto nat-lb04,
tcp . 10.72.33.44 . 82 : goto nat-lb04,
tcp . 10.72.33.44 . 83 : goto nat-lb04,
tcp . 10.72.33.44 . 84 : goto nat-lb04,
tcp . 10.72.33.44 . 85 : goto nat-lb04,
tcp . 10.72.33.44 . 86 : goto nat-lb04,
tcp . 10.72.33.44 . 87 : goto nat-lb04,
tcp . 10.72.33.44 . 88 : goto nat-lb04,
tcp . 10.72.33.44 . 89 : goto nat-lb04,
tcp . 10.72.33.44 . 90 : goto nat-lb04,
tcp . 10.72.33.44 . 91 : goto nat-lb04,
tcp . 10.72.33.44 . 92 : goto nat-lb04,
tcp . 10.72.33.44 . 93 : goto nat-lb04,
tcp . 10.72.33.44 . 94 : goto nat-lb04,
tcp . 10.72.33.44 . 95 : goto nat-lb04,
tcp . 10.72.33.44 . 96 : goto nat-lb04,
tcp . 10.72.33.44 . 97 : goto nat-lb04,
tcp . 10.72.33.44 . 98 : goto nat-lb04,
tcp . 10.72.33.44 . 99 : goto nat-lb04,
tcp . 10.72.33.55 . 2002 : goto nat-lb05 }
}
map services-back-m {
type mark : ipv4_addr
}
map static-sessions-lb05 {
type ipv4_addr : mark
}
map persist-lb05 {
type ipv4_addr : mark
size 65535
timeout 1m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb04 {
ct mark set ip saddr map @static-sessions-lb04 accept
ct state new ct mark set ip saddr map @persist-lb04
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x80000003, 5-9 : 0x80000004 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb04 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb04 {
ip protocol tcp dnat to ct mark map { 0x80000003 : 192.168.0.10, 0x80000004 : 192.168.0.11 }
}
chain filter-lb05 {
ct mark set ip saddr map @static-sessions-lb05 accept
ct state new ct mark set ip saddr map @persist-lb05
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x80000005, 5-9 : 0x80000006 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb05 { ip saddr : ct mark }
}
chain nat-lb05 {
ip protocol tcp dnat to ct mark map { 0x80000005 : 192.168.0.10, 0x80000006 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/204_create_multiple_farms/obj.out 0000664 0000000 0000000 00000020661 14326712445 0023012 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80-88",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80-88",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb04",
"family": "ipv4",
"virtual-addr": "10.72.33.44",
"virtual-ports": "80-99",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb04-addr",
"family": "ipv4",
"ip-addr": "10.72.33.44",
"ports": "80-99",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb05",
"family": "ipv4",
"virtual-addr": "10.72.33.55",
"virtual-ports": "2002",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb05-addr",
"family": "ipv4",
"ip-addr": "10.72.33.55",
"ports": "2002",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x5",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x6",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/204_create_multiple_farms/req.api 0000775 0000000 0000000 00000000051 14326712445 0022763 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/204_create_multiple_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0023021 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/205_delete_farm_lb05/ 0000775 0000000 0000000 00000000000 14326712445 0020226 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/205_delete_farm_lb05/nft.out 0000664 0000000 0000000 00000010232 14326712445 0021544 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb02,
tcp . 192.168.0.100 . 81 : goto lb02,
tcp . 192.168.0.100 . 82 : goto lb02,
tcp . 192.168.0.100 . 83 : goto lb02,
tcp . 192.168.0.100 . 84 : goto lb02,
tcp . 192.168.0.100 . 85 : goto lb02,
tcp . 192.168.0.100 . 86 : goto lb02,
tcp . 192.168.0.100 . 87 : goto lb02,
tcp . 192.168.0.100 . 88 : goto lb02 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb02 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto filter-lb04,
tcp . 10.72.33.44 . 81 : goto filter-lb04,
tcp . 10.72.33.44 . 82 : goto filter-lb04,
tcp . 10.72.33.44 . 83 : goto filter-lb04,
tcp . 10.72.33.44 . 84 : goto filter-lb04,
tcp . 10.72.33.44 . 85 : goto filter-lb04,
tcp . 10.72.33.44 . 86 : goto filter-lb04,
tcp . 10.72.33.44 . 87 : goto filter-lb04,
tcp . 10.72.33.44 . 88 : goto filter-lb04,
tcp . 10.72.33.44 . 89 : goto filter-lb04,
tcp . 10.72.33.44 . 90 : goto filter-lb04,
tcp . 10.72.33.44 . 91 : goto filter-lb04,
tcp . 10.72.33.44 . 92 : goto filter-lb04,
tcp . 10.72.33.44 . 93 : goto filter-lb04,
tcp . 10.72.33.44 . 94 : goto filter-lb04,
tcp . 10.72.33.44 . 95 : goto filter-lb04,
tcp . 10.72.33.44 . 96 : goto filter-lb04,
tcp . 10.72.33.44 . 97 : goto filter-lb04,
tcp . 10.72.33.44 . 98 : goto filter-lb04,
tcp . 10.72.33.44 . 99 : goto filter-lb04 }
}
map static-sessions-lb04 {
type ipv4_addr : mark
}
map persist-lb04 {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto nat-lb04,
tcp . 10.72.33.44 . 81 : goto nat-lb04,
tcp . 10.72.33.44 . 82 : goto nat-lb04,
tcp . 10.72.33.44 . 83 : goto nat-lb04,
tcp . 10.72.33.44 . 84 : goto nat-lb04,
tcp . 10.72.33.44 . 85 : goto nat-lb04,
tcp . 10.72.33.44 . 86 : goto nat-lb04,
tcp . 10.72.33.44 . 87 : goto nat-lb04,
tcp . 10.72.33.44 . 88 : goto nat-lb04,
tcp . 10.72.33.44 . 89 : goto nat-lb04,
tcp . 10.72.33.44 . 90 : goto nat-lb04,
tcp . 10.72.33.44 . 91 : goto nat-lb04,
tcp . 10.72.33.44 . 92 : goto nat-lb04,
tcp . 10.72.33.44 . 93 : goto nat-lb04,
tcp . 10.72.33.44 . 94 : goto nat-lb04,
tcp . 10.72.33.44 . 95 : goto nat-lb04,
tcp . 10.72.33.44 . 96 : goto nat-lb04,
tcp . 10.72.33.44 . 97 : goto nat-lb04,
tcp . 10.72.33.44 . 98 : goto nat-lb04,
tcp . 10.72.33.44 . 99 : goto nat-lb04 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb04 {
ct mark set ip saddr map @static-sessions-lb04 accept
ct state new ct mark set ip saddr map @persist-lb04
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x80000003, 5-9 : 0x80000004 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb04 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb04 {
ip protocol tcp dnat to ct mark map { 0x80000003 : 192.168.0.10, 0x80000004 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/205_delete_farm_lb05/obj.out 0000664 0000000 0000000 00000013202 14326712445 0021527 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80-88",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80-88",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb04",
"family": "ipv4",
"virtual-addr": "10.72.33.44",
"virtual-ports": "80-99",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb04-addr",
"family": "ipv4",
"ip-addr": "10.72.33.44",
"ports": "80-99",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/205_delete_farm_lb05/req.api 0000775 0000000 0000000 00000000037 14326712445 0021513 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb05"
nftlb-1.0.7/tests/api/205_delete_farm_lb05/req.out 0000664 0000000 0000000 00000000027 14326712445 0021545 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/206_delete_farm_lb04/ 0000775 0000000 0000000 00000000000 14326712445 0020226 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/206_delete_farm_lb04/nft.out 0000664 0000000 0000000 00000001511 14326712445 0021544 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb02,
tcp . 192.168.0.100 . 81 : goto lb02,
tcp . 192.168.0.100 . 82 : goto lb02,
tcp . 192.168.0.100 . 83 : goto lb02,
tcp . 192.168.0.100 . 84 : goto lb02,
tcp . 192.168.0.100 . 85 : goto lb02,
tcp . 192.168.0.100 . 86 : goto lb02,
tcp . 192.168.0.100 . 87 : goto lb02,
tcp . 192.168.0.100 . 88 : goto lb02 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb02 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/206_delete_farm_lb04/obj.out 0000664 0000000 0000000 00000005521 14326712445 0021534 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80-88",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80-88",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/206_delete_farm_lb04/req.api 0000775 0000000 0000000 00000000037 14326712445 0021513 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb04"
nftlb-1.0.7/tests/api/206_delete_farm_lb04/req.out 0000664 0000000 0000000 00000000027 14326712445 0021545 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/207_delete_farm_lb02/ 0000775 0000000 0000000 00000000000 14326712445 0020225 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/207_delete_farm_lb02/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021533 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/207_delete_farm_lb02/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021527 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/207_delete_farm_lb02/req.api 0000775 0000000 0000000 00000000037 14326712445 0021512 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb02"
nftlb-1.0.7/tests/api/207_delete_farm_lb02/req.out 0000664 0000000 0000000 00000000027 14326712445 0021544 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/208_create_multiple_farms/ 0000775 0000000 0000000 00000000000 14326712445 0021506 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/208_create_multiple_farms/data.json 0000664 0000000 0000000 00000002133 14326712445 0023311 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb04",
"family" : "ipv4",
"virtual-addr" : "10.72.33.44",
"virtual-ports" : "80-99",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "hash",
"persistence" : "srcip",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"mark" : "0x200",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"mark" : "0x201",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
},
{
"name" : "lb50",
"family" : "ipv4",
"virtual-addr" : "10.72.33.55",
"mode" : "dnat",
"protocol" : "tcp",
"scheduler" : "hash",
"persistence" : "srcip",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"mark" : "0x202",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"mark" : "0x203",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/208_create_multiple_farms/nft.out 0000664 0000000 0000000 00000010311 14326712445 0023022 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto filter-lb04,
tcp . 10.72.33.44 . 81 : goto filter-lb04,
tcp . 10.72.33.44 . 82 : goto filter-lb04,
tcp . 10.72.33.44 . 83 : goto filter-lb04,
tcp . 10.72.33.44 . 84 : goto filter-lb04,
tcp . 10.72.33.44 . 85 : goto filter-lb04,
tcp . 10.72.33.44 . 86 : goto filter-lb04,
tcp . 10.72.33.44 . 87 : goto filter-lb04,
tcp . 10.72.33.44 . 88 : goto filter-lb04,
tcp . 10.72.33.44 . 89 : goto filter-lb04,
tcp . 10.72.33.44 . 90 : goto filter-lb04,
tcp . 10.72.33.44 . 91 : goto filter-lb04,
tcp . 10.72.33.44 . 92 : goto filter-lb04,
tcp . 10.72.33.44 . 93 : goto filter-lb04,
tcp . 10.72.33.44 . 94 : goto filter-lb04,
tcp . 10.72.33.44 . 95 : goto filter-lb04,
tcp . 10.72.33.44 . 96 : goto filter-lb04,
tcp . 10.72.33.44 . 97 : goto filter-lb04,
tcp . 10.72.33.44 . 98 : goto filter-lb04,
tcp . 10.72.33.44 . 99 : goto filter-lb04 }
}
map static-sessions-lb04 {
type ipv4_addr : mark
}
map persist-lb04 {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto nat-lb04,
tcp . 10.72.33.44 . 81 : goto nat-lb04,
tcp . 10.72.33.44 . 82 : goto nat-lb04,
tcp . 10.72.33.44 . 83 : goto nat-lb04,
tcp . 10.72.33.44 . 84 : goto nat-lb04,
tcp . 10.72.33.44 . 85 : goto nat-lb04,
tcp . 10.72.33.44 . 86 : goto nat-lb04,
tcp . 10.72.33.44 . 87 : goto nat-lb04,
tcp . 10.72.33.44 . 88 : goto nat-lb04,
tcp . 10.72.33.44 . 89 : goto nat-lb04,
tcp . 10.72.33.44 . 90 : goto nat-lb04,
tcp . 10.72.33.44 . 91 : goto nat-lb04,
tcp . 10.72.33.44 . 92 : goto nat-lb04,
tcp . 10.72.33.44 . 93 : goto nat-lb04,
tcp . 10.72.33.44 . 94 : goto nat-lb04,
tcp . 10.72.33.44 . 95 : goto nat-lb04,
tcp . 10.72.33.44 . 96 : goto nat-lb04,
tcp . 10.72.33.44 . 97 : goto nat-lb04,
tcp . 10.72.33.44 . 98 : goto nat-lb04,
tcp . 10.72.33.44 . 99 : goto nat-lb04 }
}
map services-back-m {
type mark : ipv4_addr
}
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 10.72.33.55 : goto filter-lb50 }
}
map static-sessions-lb50 {
type ipv4_addr : mark
}
map persist-lb50 {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 10.72.33.55 : goto nat-lb50 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
ip protocol . ip daddr vmap @filter-services
}
chain filter-lb04 {
ct mark set ip saddr map @static-sessions-lb04 accept
ct state new ct mark set ip saddr map @persist-lb04
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x80000200, 5-9 : 0x80000201 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb04 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb04 {
ip protocol tcp dnat to ct mark map { 0x80000200 : 192.168.0.10, 0x80000201 : 192.168.0.11 }
}
chain filter-lb50 {
ct mark set ip saddr map @static-sessions-lb50 accept
ct state new ct mark set ip saddr map @persist-lb50
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000202, 5-9 : 0x00000203 }
ct mark != 0x00000000 update @persist-lb50 { ip saddr : ct mark }
}
chain nat-lb50 {
ip protocol tcp dnat to ct mark map { 0x00000202 : 192.168.0.10, 0x00000203 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/208_create_multiple_farms/obj.out 0000664 0000000 0000000 00000013177 14326712445 0023022 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb04",
"family": "ipv4",
"virtual-addr": "10.72.33.44",
"virtual-ports": "80-99",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb04-addr",
"family": "ipv4",
"ip-addr": "10.72.33.44",
"ports": "80-99",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb50",
"family": "ipv4",
"virtual-addr": "10.72.33.55",
"virtual-ports": "",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb50-addr",
"family": "ipv4",
"ip-addr": "10.72.33.55",
"ports": "",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/208_create_multiple_farms/req.api 0000775 0000000 0000000 00000000051 14326712445 0022767 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/208_create_multiple_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0023025 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/209_modify_farm_dnat/ 0000775 0000000 0000000 00000000000 14326712445 0020443 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/209_modify_farm_dnat/data.json 0000664 0000000 0000000 00000000117 14326712445 0022246 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb50",
"virtual-ports" : "100,101"
}
]
}
nftlb-1.0.7/tests/api/209_modify_farm_dnat/nft.out 0000664 0000000 0000000 00000010114 14326712445 0021760 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto filter-lb04,
tcp . 10.72.33.44 . 81 : goto filter-lb04,
tcp . 10.72.33.44 . 82 : goto filter-lb04,
tcp . 10.72.33.44 . 83 : goto filter-lb04,
tcp . 10.72.33.44 . 84 : goto filter-lb04,
tcp . 10.72.33.44 . 85 : goto filter-lb04,
tcp . 10.72.33.44 . 86 : goto filter-lb04,
tcp . 10.72.33.44 . 87 : goto filter-lb04,
tcp . 10.72.33.44 . 88 : goto filter-lb04,
tcp . 10.72.33.44 . 89 : goto filter-lb04,
tcp . 10.72.33.44 . 90 : goto filter-lb04,
tcp . 10.72.33.44 . 91 : goto filter-lb04,
tcp . 10.72.33.44 . 92 : goto filter-lb04,
tcp . 10.72.33.44 . 93 : goto filter-lb04,
tcp . 10.72.33.44 . 94 : goto filter-lb04,
tcp . 10.72.33.44 . 95 : goto filter-lb04,
tcp . 10.72.33.44 . 96 : goto filter-lb04,
tcp . 10.72.33.44 . 97 : goto filter-lb04,
tcp . 10.72.33.44 . 98 : goto filter-lb04,
tcp . 10.72.33.44 . 99 : goto filter-lb04,
tcp . 10.72.33.55 . 100 : goto filter-lb50,
tcp . 10.72.33.55 . 101 : goto filter-lb50 }
}
map static-sessions-lb04 {
type ipv4_addr : mark
}
map persist-lb04 {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto nat-lb04,
tcp . 10.72.33.44 . 81 : goto nat-lb04,
tcp . 10.72.33.44 . 82 : goto nat-lb04,
tcp . 10.72.33.44 . 83 : goto nat-lb04,
tcp . 10.72.33.44 . 84 : goto nat-lb04,
tcp . 10.72.33.44 . 85 : goto nat-lb04,
tcp . 10.72.33.44 . 86 : goto nat-lb04,
tcp . 10.72.33.44 . 87 : goto nat-lb04,
tcp . 10.72.33.44 . 88 : goto nat-lb04,
tcp . 10.72.33.44 . 89 : goto nat-lb04,
tcp . 10.72.33.44 . 90 : goto nat-lb04,
tcp . 10.72.33.44 . 91 : goto nat-lb04,
tcp . 10.72.33.44 . 92 : goto nat-lb04,
tcp . 10.72.33.44 . 93 : goto nat-lb04,
tcp . 10.72.33.44 . 94 : goto nat-lb04,
tcp . 10.72.33.44 . 95 : goto nat-lb04,
tcp . 10.72.33.44 . 96 : goto nat-lb04,
tcp . 10.72.33.44 . 97 : goto nat-lb04,
tcp . 10.72.33.44 . 98 : goto nat-lb04,
tcp . 10.72.33.44 . 99 : goto nat-lb04,
tcp . 10.72.33.55 . 100 : goto nat-lb50,
tcp . 10.72.33.55 . 101 : goto nat-lb50 }
}
map services-back-m {
type mark : ipv4_addr
}
map static-sessions-lb50 {
type ipv4_addr : mark
}
map persist-lb50 {
type ipv4_addr : mark
size 65535
timeout 1m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb04 {
ct mark set ip saddr map @static-sessions-lb04 accept
ct state new ct mark set ip saddr map @persist-lb04
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x80000200, 5-9 : 0x80000201 }
ct mark != { 0x00000000, 0x80000000 } update @persist-lb04 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb04 {
ip protocol tcp dnat to ct mark map { 0x80000200 : 192.168.0.10, 0x80000201 : 192.168.0.11 }
}
chain filter-lb50 {
ct mark set ip saddr map @static-sessions-lb50 accept
ct state new ct mark set ip saddr map @persist-lb50
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000202, 5-9 : 0x00000203 }
ct mark != 0x00000000 update @persist-lb50 { ip saddr : ct mark }
}
chain nat-lb50 {
ip protocol tcp dnat to ct mark map { 0x00000202 : 192.168.0.10, 0x00000203 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/209_modify_farm_dnat/obj.out 0000664 0000000 0000000 00000013215 14326712445 0021750 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb04",
"family": "ipv4",
"virtual-addr": "10.72.33.44",
"virtual-ports": "80-99",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb04-addr",
"family": "ipv4",
"ip-addr": "10.72.33.44",
"ports": "80-99",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb50",
"family": "ipv4",
"virtual-addr": "10.72.33.55",
"virtual-ports": "100,101",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb50-addr",
"family": "ipv4",
"ip-addr": "10.72.33.55",
"ports": "100,101",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/209_modify_farm_dnat/req.api 0000775 0000000 0000000 00000000051 14326712445 0021724 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/209_modify_farm_dnat/req.out 0000664 0000000 0000000 00000000027 14326712445 0021762 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/210_modify_farm_source_addr/ 0000775 0000000 0000000 00000000000 14326712445 0021777 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/210_modify_farm_source_addr/data.json 0000664 0000000 0000000 00000000120 14326712445 0023574 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb04",
"source-addr" : "10.72.33.2"
}
]
}
nftlb-1.0.7/tests/api/210_modify_farm_source_addr/nft.out 0000664 0000000 0000000 00000010176 14326712445 0023324 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto filter-lb04,
tcp . 10.72.33.44 . 81 : goto filter-lb04,
tcp . 10.72.33.44 . 82 : goto filter-lb04,
tcp . 10.72.33.44 . 83 : goto filter-lb04,
tcp . 10.72.33.44 . 84 : goto filter-lb04,
tcp . 10.72.33.44 . 85 : goto filter-lb04,
tcp . 10.72.33.44 . 86 : goto filter-lb04,
tcp . 10.72.33.44 . 87 : goto filter-lb04,
tcp . 10.72.33.44 . 88 : goto filter-lb04,
tcp . 10.72.33.44 . 89 : goto filter-lb04,
tcp . 10.72.33.44 . 90 : goto filter-lb04,
tcp . 10.72.33.44 . 91 : goto filter-lb04,
tcp . 10.72.33.44 . 92 : goto filter-lb04,
tcp . 10.72.33.44 . 93 : goto filter-lb04,
tcp . 10.72.33.44 . 94 : goto filter-lb04,
tcp . 10.72.33.44 . 95 : goto filter-lb04,
tcp . 10.72.33.44 . 96 : goto filter-lb04,
tcp . 10.72.33.44 . 97 : goto filter-lb04,
tcp . 10.72.33.44 . 98 : goto filter-lb04,
tcp . 10.72.33.44 . 99 : goto filter-lb04,
tcp . 10.72.33.55 . 100 : goto filter-lb50,
tcp . 10.72.33.55 . 101 : goto filter-lb50 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.44 . 80 : goto nat-lb04,
tcp . 10.72.33.44 . 81 : goto nat-lb04,
tcp . 10.72.33.44 . 82 : goto nat-lb04,
tcp . 10.72.33.44 . 83 : goto nat-lb04,
tcp . 10.72.33.44 . 84 : goto nat-lb04,
tcp . 10.72.33.44 . 85 : goto nat-lb04,
tcp . 10.72.33.44 . 86 : goto nat-lb04,
tcp . 10.72.33.44 . 87 : goto nat-lb04,
tcp . 10.72.33.44 . 88 : goto nat-lb04,
tcp . 10.72.33.44 . 89 : goto nat-lb04,
tcp . 10.72.33.44 . 90 : goto nat-lb04,
tcp . 10.72.33.44 . 91 : goto nat-lb04,
tcp . 10.72.33.44 . 92 : goto nat-lb04,
tcp . 10.72.33.44 . 93 : goto nat-lb04,
tcp . 10.72.33.44 . 94 : goto nat-lb04,
tcp . 10.72.33.44 . 95 : goto nat-lb04,
tcp . 10.72.33.44 . 96 : goto nat-lb04,
tcp . 10.72.33.44 . 97 : goto nat-lb04,
tcp . 10.72.33.44 . 98 : goto nat-lb04,
tcp . 10.72.33.44 . 99 : goto nat-lb04,
tcp . 10.72.33.55 . 100 : goto nat-lb50,
tcp . 10.72.33.55 . 101 : goto nat-lb50 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 10.72.33.2, 0x00000201 : 10.72.33.2 }
}
map static-sessions-lb50 {
type ipv4_addr : mark
}
map persist-lb50 {
type ipv4_addr : mark
size 65535
timeout 1m
}
map static-sessions-lb04 {
type ipv4_addr : mark
}
map persist-lb04 {
type ipv4_addr : mark
size 65535
timeout 1m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter-lb50 {
ct mark set ip saddr map @static-sessions-lb50 accept
ct state new ct mark set ip saddr map @persist-lb50
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000202, 5-9 : 0x00000203 }
ct mark != 0x00000000 update @persist-lb50 { ip saddr : ct mark }
}
chain nat-lb50 {
ip protocol tcp dnat to ct mark map { 0x00000202 : 192.168.0.10, 0x00000203 : 192.168.0.11 }
}
chain filter-lb04 {
ct mark set ip saddr map @static-sessions-lb04 accept
ct state new ct mark set ip saddr map @persist-lb04
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000200, 5-9 : 0x00000201 }
ct mark != 0x00000000 update @persist-lb04 { ip saddr : ct mark }
}
chain nat-lb04 {
ip protocol tcp dnat to ct mark map { 0x00000200 : 192.168.0.10, 0x00000201 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/210_modify_farm_source_addr/obj.out 0000664 0000000 0000000 00000013227 14326712445 0023307 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb04",
"family": "ipv4",
"virtual-addr": "10.72.33.44",
"virtual-ports": "80-99",
"source-addr": "10.72.33.2",
"mode": "snat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb04-addr",
"family": "ipv4",
"ip-addr": "10.72.33.44",
"ports": "80-99",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb50",
"family": "ipv4",
"virtual-addr": "10.72.33.55",
"virtual-ports": "100,101",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb50-addr",
"family": "ipv4",
"ip-addr": "10.72.33.55",
"ports": "100,101",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/210_modify_farm_source_addr/req.api 0000775 0000000 0000000 00000000051 14326712445 0023260 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/210_modify_farm_source_addr/req.out 0000664 0000000 0000000 00000000027 14326712445 0023316 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/211_delete_farm_lb04/ 0000775 0000000 0000000 00000000000 14326712445 0020222 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/211_delete_farm_lb04/nft.out 0000664 0000000 0000000 00000003117 14326712445 0021544 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.55 . 100 : goto filter-lb50,
tcp . 10.72.33.55 . 101 : goto filter-lb50 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.72.33.55 . 100 : goto nat-lb50,
tcp . 10.72.33.55 . 101 : goto nat-lb50 }
}
map services-back-m {
type mark : ipv4_addr
}
map static-sessions-lb50 {
type ipv4_addr : mark
}
map persist-lb50 {
type ipv4_addr : mark
size 65535
timeout 1m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter-lb50 {
ct mark set ip saddr map @static-sessions-lb50 accept
ct state new ct mark set ip saddr map @persist-lb50
ct state new ct mark 0x00000000 ct mark set jhash ip saddr mod 10 map { 0-4 : 0x00000202, 5-9 : 0x00000203 }
ct mark != 0x00000000 update @persist-lb50 { ip saddr : ct mark }
}
chain nat-lb50 {
ip protocol tcp dnat to ct mark map { 0x00000202 : 192.168.0.10, 0x00000203 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/211_delete_farm_lb04/obj.out 0000664 0000000 0000000 00000005530 14326712445 0021530 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb50",
"family": "ipv4",
"virtual-addr": "10.72.33.55",
"virtual-ports": "100,101",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb50-addr",
"family": "ipv4",
"ip-addr": "10.72.33.55",
"ports": "100,101",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/211_delete_farm_lb04/req.api 0000775 0000000 0000000 00000000037 14326712445 0021507 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb04"
nftlb-1.0.7/tests/api/211_delete_farm_lb04/req.out 0000664 0000000 0000000 00000000027 14326712445 0021541 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/212_delete_farm_lb05/ 0000775 0000000 0000000 00000000000 14326712445 0020224 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/212_delete_farm_lb05/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021532 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/212_delete_farm_lb05/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021526 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/212_delete_farm_lb05/req.api 0000775 0000000 0000000 00000000037 14326712445 0021511 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/lb50"
nftlb-1.0.7/tests/api/212_delete_farm_lb05/req.out 0000664 0000000 0000000 00000000027 14326712445 0021543 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/213_creating_farm_forward_chain/ 0000775 0000000 0000000 00000000000 14326712445 0022623 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/213_creating_farm_forward_chain/data.json 0000664 0000000 0000000 00000003630 14326712445 0024431 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "Internal-Web-Server-FARM-HTTPS", "family": "ipv4", "virtual-addr": "172.18.15.94", "virtual-ports": "443", "source-addr": "172.18.15.97", "mode": "snat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "srcip ", "persist-ttl": "60", "helper": "none", "log": "none", "log-prefix": "l4:Internal-Web-Server-FARM-HTTP ", "mark": "0x0", "priority": "1", "state": "up", "backends": [ { "name": "bck0", "ip-addr": "172.18.15.95", "port": "80", "weight": "10", "priority": "1", "mark": "0x202", "est-connlimit": "0", "state": "up" }, { "name": "bck1", "ip-addr": "172.18.15.96", "port": "80", "weight": "10", "priority": "1", "mark": "0x203", "est-connlimit": "0", "state": "up" } ] } ]}
nftlb-1.0.7/tests/api/213_creating_farm_forward_chain/nft.out 0000664 0000000 0000000 00000003452 14326712445 0024147 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto filter-Internal-Web-Server-FARM-HTTPS }
}
map static-sessions-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
}
map persist-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto nat-Internal-Web-Server-FARM-HTTPS }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 172.18.15.97, 0x00000203 : 172.18.15.97 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Internal-Web-Server-FARM-HTTPS {
ct mark set ip saddr map @static-sessions-Internal-Web-Server-FARM-HTTPS accept
ct state new ct mark set ip saddr map @persist-Internal-Web-Server-FARM-HTTPS
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-9 : 0x00000202, 10-19 : 0x00000203 }
ct mark != 0x00000000 update @persist-Internal-Web-Server-FARM-HTTPS { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Internal-Web-Server-FARM-HTTPS {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 172.18.15.95 . 80, 0x00000203 : 172.18.15.96 . 80 }
}
}
nftlb-1.0.7/tests/api/213_creating_farm_forward_chain/obj.out 0000664 0000000 0000000 00000005743 14326712445 0024137 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Internal-Web-Server-FARM-HTTPS",
"family": "ipv4",
"virtual-addr": "172.18.15.94",
"virtual-ports": "443",
"source-addr": "172.18.15.97",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-prefix": "l4:Internal-Web-Server-FARM-HTTP ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Internal-Web-Server-FARM-HTTPS-addr",
"family": "ipv4",
"ip-addr": "172.18.15.94",
"ports": "443",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.18.15.95",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.18.15.96",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/213_creating_farm_forward_chain/req.api 0000775 0000000 0000000 00000000051 14326712445 0024104 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/213_creating_farm_forward_chain/req.out 0000664 0000000 0000000 00000000027 14326712445 0024142 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/214_creating_farm_forward_up/ 0000775 0000000 0000000 00000000000 14326712445 0022166 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/214_creating_farm_forward_up/data.json 0000664 0000000 0000000 00000000143 14326712445 0023770 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "Internal-Web-Server-FARM-HTTPS", "state": "up" }]}
nftlb-1.0.7/tests/api/214_creating_farm_forward_up/nft.out 0000664 0000000 0000000 00000003452 14326712445 0023512 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto filter-Internal-Web-Server-FARM-HTTPS }
}
map static-sessions-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
}
map persist-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto nat-Internal-Web-Server-FARM-HTTPS }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 172.18.15.97, 0x00000203 : 172.18.15.97 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Internal-Web-Server-FARM-HTTPS {
ct mark set ip saddr map @static-sessions-Internal-Web-Server-FARM-HTTPS accept
ct state new ct mark set ip saddr map @persist-Internal-Web-Server-FARM-HTTPS
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-9 : 0x00000202, 10-19 : 0x00000203 }
ct mark != 0x00000000 update @persist-Internal-Web-Server-FARM-HTTPS { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Internal-Web-Server-FARM-HTTPS {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 172.18.15.95 . 80, 0x00000203 : 172.18.15.96 . 80 }
}
}
nftlb-1.0.7/tests/api/214_creating_farm_forward_up/obj.out 0000664 0000000 0000000 00000005743 14326712445 0023502 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Internal-Web-Server-FARM-HTTPS",
"family": "ipv4",
"virtual-addr": "172.18.15.94",
"virtual-ports": "443",
"source-addr": "172.18.15.97",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-prefix": "l4:Internal-Web-Server-FARM-HTTP ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Internal-Web-Server-FARM-HTTPS-addr",
"family": "ipv4",
"ip-addr": "172.18.15.94",
"ports": "443",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.18.15.95",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.18.15.96",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/214_creating_farm_forward_up/req.api 0000775 0000000 0000000 00000000051 14326712445 0023447 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/214_creating_farm_forward_up/req.out 0000664 0000000 0000000 00000000027 14326712445 0023505 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/215_set_log_forward_chain/ 0000775 0000000 0000000 00000000000 14326712445 0021460 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/215_set_log_forward_chain/data.json 0000664 0000000 0000000 00000000122 14326712445 0023257 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "Internal-Web-Server-FARM-HTTPS", "log" : "forward" } ] }
nftlb-1.0.7/tests/api/215_set_log_forward_chain/nft.out 0000664 0000000 0000000 00000004300 14326712445 0022775 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto filter-Internal-Web-Server-FARM-HTTPS }
}
map static-sessions-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
}
map persist-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto nat-Internal-Web-Server-FARM-HTTPS }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 172.18.15.97, 0x00000203 : 172.18.15.97 }
}
map forward-proto-services {
type mark : verdict
elements = { 0x00000202 : goto forward-Internal-Web-Server-FARM-HTTPS, 0x00000203 : goto forward-Internal-Web-Server-FARM-HTTPS }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Internal-Web-Server-FARM-HTTPS {
ct mark set ip saddr map @static-sessions-Internal-Web-Server-FARM-HTTPS accept
ct state new ct mark set ip saddr map @persist-Internal-Web-Server-FARM-HTTPS
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-9 : 0x00000202, 10-19 : 0x00000203 }
ct mark != 0x00000000 update @persist-Internal-Web-Server-FARM-HTTPS { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Internal-Web-Server-FARM-HTTPS {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 172.18.15.95 . 80, 0x00000203 : 172.18.15.96 . 80 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-Internal-Web-Server-FARM-HTTPS {
log prefix "l4:Internal-Web-Server-FARM-HTTP "
}
}
nftlb-1.0.7/tests/api/215_set_log_forward_chain/obj.out 0000664 0000000 0000000 00000005747 14326712445 0023000 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Internal-Web-Server-FARM-HTTPS",
"family": "ipv4",
"virtual-addr": "172.18.15.94",
"virtual-ports": "443",
"source-addr": "172.18.15.97",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:Internal-Web-Server-FARM-HTTP ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Internal-Web-Server-FARM-HTTPS-addr",
"family": "ipv4",
"ip-addr": "172.18.15.94",
"ports": "443",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.18.15.95",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.18.15.96",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/215_set_log_forward_chain/req.api 0000775 0000000 0000000 00000000051 14326712445 0022741 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/215_set_log_forward_chain/req.out 0000664 0000000 0000000 00000000027 14326712445 0022777 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/216_set_log_prefix_forward_chain/ 0000775 0000000 0000000 00000000000 14326712445 0023036 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/216_set_log_prefix_forward_chain/data.json 0000664 0000000 0000000 00000000126 14326712445 0024641 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "Internal-Web-Server-FARM-HTTPS", "log-prefix" : "HOLA" } ] }
nftlb-1.0.7/tests/api/216_set_log_prefix_forward_chain/nft.out 0000664 0000000 0000000 00000004243 14326712445 0024361 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto filter-Internal-Web-Server-FARM-HTTPS }
}
map static-sessions-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
}
map persist-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto nat-Internal-Web-Server-FARM-HTTPS }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 172.18.15.97, 0x00000203 : 172.18.15.97 }
}
map forward-proto-services {
type mark : verdict
elements = { 0x00000202 : goto forward-Internal-Web-Server-FARM-HTTPS, 0x00000203 : goto forward-Internal-Web-Server-FARM-HTTPS }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Internal-Web-Server-FARM-HTTPS {
ct mark set ip saddr map @static-sessions-Internal-Web-Server-FARM-HTTPS accept
ct state new ct mark set ip saddr map @persist-Internal-Web-Server-FARM-HTTPS
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-9 : 0x00000202, 10-19 : 0x00000203 }
ct mark != 0x00000000 update @persist-Internal-Web-Server-FARM-HTTPS { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Internal-Web-Server-FARM-HTTPS {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 172.18.15.95 . 80, 0x00000203 : 172.18.15.96 . 80 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-Internal-Web-Server-FARM-HTTPS {
log prefix "HOLA"
}
}
nftlb-1.0.7/tests/api/216_set_log_prefix_forward_chain/obj.out 0000664 0000000 0000000 00000005712 14326712445 0024346 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Internal-Web-Server-FARM-HTTPS",
"family": "ipv4",
"virtual-addr": "172.18.15.94",
"virtual-ports": "443",
"source-addr": "172.18.15.97",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "HOLA",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Internal-Web-Server-FARM-HTTPS-addr",
"family": "ipv4",
"ip-addr": "172.18.15.94",
"ports": "443",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.18.15.95",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.18.15.96",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/216_set_log_prefix_forward_chain/req.api 0000775 0000000 0000000 00000000051 14326712445 0024317 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/216_set_log_prefix_forward_chain/req.out 0000664 0000000 0000000 00000000027 14326712445 0024355 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/217_set_log_forward_chain/ 0000775 0000000 0000000 00000000000 14326712445 0021462 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/217_set_log_forward_chain/data.json 0000664 0000000 0000000 00000000117 14326712445 0023265 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "Internal-Web-Server-FARM-HTTPS", "log" : "none" } ] }
nftlb-1.0.7/tests/api/217_set_log_forward_chain/nft.out 0000664 0000000 0000000 00000003452 14326712445 0023006 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto filter-Internal-Web-Server-FARM-HTTPS }
}
map static-sessions-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
}
map persist-Internal-Web-Server-FARM-HTTPS {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 172.18.15.94 . 443 : goto nat-Internal-Web-Server-FARM-HTTPS }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 172.18.15.97, 0x00000203 : 172.18.15.97 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-Internal-Web-Server-FARM-HTTPS {
ct mark set ip saddr map @static-sessions-Internal-Web-Server-FARM-HTTPS accept
ct state new ct mark set ip saddr map @persist-Internal-Web-Server-FARM-HTTPS
ct state new ct mark 0x00000000 ct mark set numgen random mod 20 map { 0-9 : 0x00000202, 10-19 : 0x00000203 }
ct mark != 0x00000000 update @persist-Internal-Web-Server-FARM-HTTPS { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-Internal-Web-Server-FARM-HTTPS {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 172.18.15.95 . 80, 0x00000203 : 172.18.15.96 . 80 }
}
}
nftlb-1.0.7/tests/api/217_set_log_forward_chain/obj.out 0000664 0000000 0000000 00000005706 14326712445 0022775 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "Internal-Web-Server-FARM-HTTPS",
"family": "ipv4",
"virtual-addr": "172.18.15.94",
"virtual-ports": "443",
"source-addr": "172.18.15.97",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-prefix": "HOLA",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "Internal-Web-Server-FARM-HTTPS-addr",
"family": "ipv4",
"ip-addr": "172.18.15.94",
"ports": "443",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.18.15.95",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.18.15.96",
"port": "80",
"weight": "10",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/217_set_log_forward_chain/req.api 0000775 0000000 0000000 00000000051 14326712445 0022743 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/217_set_log_forward_chain/req.out 0000664 0000000 0000000 00000000027 14326712445 0023001 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/218_delete_farm/ 0000775 0000000 0000000 00000000000 14326712445 0017410 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/218_delete_farm/nft.out 0000664 0000000 0000000 00000000000 14326712445 0020716 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/218_delete_farm/obj.out 0000664 0000000 0000000 00000000027 14326712445 0020712 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/218_delete_farm/req.api 0000775 0000000 0000000 00000000071 14326712445 0020673 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/Internal-Web-Server-FARM-HTTPS"
nftlb-1.0.7/tests/api/218_delete_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0020727 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/219_create_policy_with_elements/ 0000775 0000000 0000000 00000000000 14326712445 0022713 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/219_create_policy_with_elements/data.json 0000664 0000000 0000000 00000000724 14326712445 0024522 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "mylist",
"type" : "blacklist",
"elements" : [ {
"data" : "135.195.60.76"
},
{
"data" : "235.195.60.77"
},
{
"data" : "120.195.60.78"
},
{
"data" : "44.195.60.79"
},
{
"data" : "55.195.60.80"
},
{
"data" : "65.195.60.81"
},
{
"data" : "75.195.60.82"
},
{
"data" : "85.195.60.83"
},
{
"data" : "95.195.60.84"
}
]
}
]
}
nftlb-1.0.7/tests/api/219_create_policy_with_elements/nft.out 0000664 0000000 0000000 00000000774 14326712445 0024243 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 44.195.60.79 counter packets 0 bytes 0, 55.195.60.80 counter packets 0 bytes 0,
65.195.60.81 counter packets 0 bytes 0, 75.195.60.82 counter packets 0 bytes 0,
85.195.60.83 counter packets 0 bytes 0, 95.195.60.84 counter packets 0 bytes 0,
120.195.60.78 counter packets 0 bytes 0, 135.195.60.76 counter packets 0 bytes 0,
235.195.60.77 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/219_create_policy_with_elements/obj.out 0000664 0000000 0000000 00000005220 14326712445 0024215 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "mylist",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "44.195.60.79",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "55.195.60.80",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "65.195.60.81",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "75.195.60.82",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "85.195.60.83",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "95.195.60.84",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "120.195.60.78",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "135.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "235.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/219_create_policy_with_elements/req.api 0000775 0000000 0000000 00000000054 14326712445 0024177 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="policies"
FILE="data.json"
nftlb-1.0.7/tests/api/219_create_policy_with_elements/req.out 0000664 0000000 0000000 00000000027 14326712445 0024232 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/220_delete_batched_policy_elements/ 0000775 0000000 0000000 00000000000 14326712445 0023321 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/220_delete_batched_policy_elements/data.json 0000664 0000000 0000000 00000000653 14326712445 0025131 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "mylist",
"type" : "blacklist",
"elements" : [ {
"data" : "135.195.60.76"
},
{
"data" : "235.195.60.77"
},
{
"data" : "120.195.60.78"
},
{
"data" : "44.195.60.79"
},
{
"data" : "55.195.60.80"
},
{
"data" : "65.195.60.81"
},
{
"data" : "85.195.60.83"
},
{
"data" : "95.195.60.84"
}
]
}
]
}
nftlb-1.0.7/tests/api/220_delete_batched_policy_elements/nft.out 0000664 0000000 0000000 00000000231 14326712445 0024635 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 75.195.60.82 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/220_delete_batched_policy_elements/obj.out 0000664 0000000 0000000 00000001175 14326712445 0024630 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "mylist",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "75.195.60.82",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/220_delete_batched_policy_elements/req.api 0000775 0000000 0000000 00000000056 14326712445 0024607 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
FILE="data.json"
nftlb-1.0.7/tests/api/220_delete_batched_policy_elements/req.out 0000664 0000000 0000000 00000000027 14326712445 0024640 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/221_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020615 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/221_deleting_policies/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022123 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/221_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022113 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/221_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022100 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/221_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022134 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/222_creating_farm_dsr_iface/ 0000775 0000000 0000000 00000000000 14326712445 0021734 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/222_creating_farm_dsr_iface/data.json 0000664 0000000 0000000 00000001400 14326712445 0023533 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip srcport",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"port" : "10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"port" : "20",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/api/222_creating_farm_dsr_iface/nft.out 0000664 0000000 0000000 00000001775 14326712445 0023266 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/222_creating_farm_dsr_iface/obj.out 0000664 0000000 0000000 00000005531 14326712445 0023243 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/222_creating_farm_dsr_iface/req.api 0000775 0000000 0000000 00000000051 14326712445 0023215 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/222_creating_farm_dsr_iface/req.out 0000664 0000000 0000000 00000000027 14326712445 0023253 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/223_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/223_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021426 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/223_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021422 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/223_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021400 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/223_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/224_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020766 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/224_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022274 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/224_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022265 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/224_deleting_addresses/req.api 0000775 0000000 0000000 00000000036 14326712445 0022252 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/224_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022305 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/225_creating_address_myaddr/ 0000775 0000000 0000000 00000000000 14326712445 0022000 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/225_creating_address_myaddr/data.json 0000664 0000000 0000000 00000000223 14326712445 0023601 0 ustar 00root root 0000000 0000000 {
"addresses" : [
{
"name" : "myaddr",
"family" : "ipv4",
"ip-addr" : "200.1.1.1",
"ports" : "8080",
"protocol" : "tcp"
}
]
}
nftlb-1.0.7/tests/api/225_creating_address_myaddr/nft.out 0000664 0000000 0000000 00000000000 14326712445 0023306 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/225_creating_address_myaddr/obj.out 0000664 0000000 0000000 00000000725 14326712445 0023307 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "0",
"policies": []
}
]
} nftlb-1.0.7/tests/api/225_creating_address_myaddr/req.api 0000775 0000000 0000000 00000000055 14326712445 0023265 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="addresses"
nftlb-1.0.7/tests/api/225_creating_address_myaddr/req.out 0000664 0000000 0000000 00000000027 14326712445 0023317 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/226_creating_address_myaddr2/ 0000775 0000000 0000000 00000000000 14326712445 0022063 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/226_creating_address_myaddr2/data.json 0000664 0000000 0000000 00000000223 14326712445 0023664 0 ustar 00root root 0000000 0000000 {
"addresses" : [
{
"name" : "myaddr2",
"family" : "ipv4",
"ip-addr" : "200.2.2.2",
"ports" : "888",
"protocol" : "udp"
}
]
}
nftlb-1.0.7/tests/api/226_creating_address_myaddr2/nft.out 0000664 0000000 0000000 00000000000 14326712445 0023371 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/226_creating_address_myaddr2/obj.out 0000664 0000000 0000000 00000001607 14326712445 0023372 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "0",
"policies": []
},
{
"name": "myaddr2",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "0",
"policies": []
}
]
} nftlb-1.0.7/tests/api/226_creating_address_myaddr2/req.api 0000775 0000000 0000000 00000000055 14326712445 0023350 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="addresses"
nftlb-1.0.7/tests/api/226_creating_address_myaddr2/req.out 0000664 0000000 0000000 00000000027 14326712445 0023402 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/227_creating_farm_with_unknown_address/ 0000775 0000000 0000000 00000000000 14326712445 0024261 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/227_creating_farm_with_unknown_address/data.json 0000664 0000000 0000000 00000000323 14326712445 0026063 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "myfarm",
"addresses" : [
{
"name" : "myaddr3",
"family" : "ipv4",
"ip-addr" : "200.2.2.2",
"ports" : "888",
"protocol" : "udp"
}
]
}
]
}
nftlb-1.0.7/tests/api/227_creating_farm_with_unknown_address/nft.out 0000664 0000000 0000000 00000002045 14326712445 0025602 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
}
}
nftlb-1.0.7/tests/api/227_creating_farm_with_unknown_address/obj.out 0000664 0000000 0000000 00000003414 14326712445 0025566 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.2.2.2",
"virtual-ports": "888",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/227_creating_farm_with_unknown_address/req.api 0000775 0000000 0000000 00000000051 14326712445 0025542 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/227_creating_farm_with_unknown_address/req.out 0000664 0000000 0000000 00000000027 14326712445 0025600 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/228_creating_farm_with_created_address/ 0000775 0000000 0000000 00000000000 14326712445 0024172 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/228_creating_farm_with_created_address/data.json 0000664 0000000 0000000 00000000155 14326712445 0025777 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "myfarm",
"addresses" : [
{
"name" : "myaddr"
}
]
}
]
}
nftlb-1.0.7/tests/api/228_creating_farm_with_created_address/nft.out 0000664 0000000 0000000 00000002214 14326712445 0025511 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto filter-myfarm,
tcp . 200.1.1.1 . 8080 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto nat-myfarm,
tcp . 200.1.1.1 . 8080 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
}
}
nftlb-1.0.7/tests/api/228_creating_farm_with_created_address/obj.out 0000664 0000000 0000000 00000004255 14326712445 0025503 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.2.2.2",
"virtual-ports": "888",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"used": "1"
},
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/228_creating_farm_with_created_address/req.api 0000775 0000000 0000000 00000000051 14326712445 0025453 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/228_creating_farm_with_created_address/req.out 0000664 0000000 0000000 00000000027 14326712445 0025511 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/229_deleting_address_myaddr2/ 0000775 0000000 0000000 00000000000 14326712445 0022065 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/229_deleting_address_myaddr2/nft.out 0000664 0000000 0000000 00000002214 14326712445 0023404 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto filter-myfarm,
tcp . 200.1.1.1 . 8080 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto nat-myfarm,
tcp . 200.1.1.1 . 8080 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
}
}
nftlb-1.0.7/tests/api/229_deleting_address_myaddr2/obj.out 0000664 0000000 0000000 00000001607 14326712445 0023374 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
}
]
} nftlb-1.0.7/tests/api/229_deleting_address_myaddr2/req.api 0000775 0000000 0000000 00000000067 14326712445 0023355 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/myaddr2"
nftlb-1.0.7/tests/api/229_deleting_address_myaddr2/req.out 0000664 0000000 0000000 00000000027 14326712445 0023404 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/230_deleting_farm_address_myaddr3/ 0000775 0000000 0000000 00000000000 14326712445 0023063 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/230_deleting_farm_address_myaddr3/nft.out 0000664 0000000 0000000 00000002047 14326712445 0024406 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
}
}
nftlb-1.0.7/tests/api/230_deleting_farm_address_myaddr3/obj.out 0000664 0000000 0000000 00000003415 14326712445 0024371 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/230_deleting_farm_address_myaddr3/req.api 0000775 0000000 0000000 00000000104 14326712445 0024343 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/myfarm/addresses/myaddr3"
nftlb-1.0.7/tests/api/230_deleting_farm_address_myaddr3/req.out 0000664 0000000 0000000 00000000027 14326712445 0024402 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/231_deleting_address_myaddr/ 0000775 0000000 0000000 00000000000 14326712445 0021774 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/231_deleting_address_myaddr/nft.out 0000664 0000000 0000000 00000000000 14326712445 0023302 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/231_deleting_address_myaddr/obj.out 0000664 0000000 0000000 00000000033 14326712445 0023273 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/231_deleting_address_myaddr/req.api 0000775 0000000 0000000 00000000066 14326712445 0023263 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/myaddr"
nftlb-1.0.7/tests/api/231_deleting_address_myaddr/req.out 0000664 0000000 0000000 00000000027 14326712445 0023313 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/232_deleting_address_myaddr3/ 0000775 0000000 0000000 00000000000 14326712445 0022060 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/232_deleting_address_myaddr3/nft.out 0000664 0000000 0000000 00000000000 14326712445 0023366 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/232_deleting_address_myaddr3/obj.out 0000664 0000000 0000000 00000000033 14326712445 0023357 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/232_deleting_address_myaddr3/req.api 0000775 0000000 0000000 00000000067 14326712445 0023350 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/myaddr3"
nftlb-1.0.7/tests/api/232_deleting_address_myaddr3/req.out 0000664 0000000 0000000 00000000101 14326712445 0023370 0 ustar 00root root 0000000 0000000 {"response": "error stopping address. Unknown address 'myaddr3'"} nftlb-1.0.7/tests/api/233_creating_farm_with_unknown_address_and_bcks/ 0000775 0000000 0000000 00000000000 14326712445 0026102 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/233_creating_farm_with_unknown_address_and_bcks/data.json 0000664 0000000 0000000 00000001270 14326712445 0027706 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "myfarm",
"addresses" : [
{
"name" : "myaddr3",
"family" : "ipv4",
"ip-addr" : "200.2.2.2",
"ports" : "888",
"protocol" : "udp"
}
],
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "172.16.138.204",
"port" : "80",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/233_creating_farm_with_unknown_address_and_bcks/nft.out 0000664 0000000 0000000 00000002375 14326712445 0027431 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 15 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
ip protocol udp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80 }
}
}
nftlb-1.0.7/tests/api/233_creating_farm_with_unknown_address_and_bcks/obj.out 0000664 0000000 0000000 00000006535 14326712445 0027416 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.2.2.2",
"virtual-ports": "888",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/233_creating_farm_with_unknown_address_and_bcks/req.api 0000775 0000000 0000000 00000000051 14326712445 0027363 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/233_creating_farm_with_unknown_address_and_bcks/req.out 0000664 0000000 0000000 00000000027 14326712445 0027421 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/234_add_address_to_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021103 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/234_add_address_to_farm/data.json 0000664 0000000 0000000 00000000322 14326712445 0022704 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "myfarm",
"addresses" : [
{
"name" : "myaddr4",
"family" : "ipv4",
"ip-addr" : "200.1.1.1",
"ports" : "80",
"protocol" : "tcp"
}
]
}
]
}
nftlb-1.0.7/tests/api/234_add_address_to_farm/nft.out 0000664 0000000 0000000 00000002540 14326712445 0022424 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 80 : goto filter-myfarm,
udp . 200.2.2.2 . 888 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 80 : goto nat-myfarm,
udp . 200.2.2.2 . 888 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 15 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80 }
}
}
nftlb-1.0.7/tests/api/234_add_address_to_farm/obj.out 0000664 0000000 0000000 00000007375 14326712445 0022422 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.2.2.2",
"virtual-ports": "888",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"used": "1"
},
{
"name": "myaddr4",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/234_add_address_to_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0022364 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/234_add_address_to_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022422 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/235_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020123 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/235_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021431 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/235_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021425 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/235_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021403 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/235_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021442 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/236_creating_farm_dsr_lb01/ 0000775 0000000 0000000 00000000000 14326712445 0021430 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/236_creating_farm_dsr_lb01/data.json 0000664 0000000 0000000 00000001450 14326712445 0023234 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"mode" : "dsr",
"scheduler" : "weight",
"state" : "up",
"oface" : "lo",
"addresses" : [
{
"name" : "lb01-addr",
"family" : "ipv4",
"ip-addr" : "192.168.0.100",
"ports" : "80",
"protocol" : "tcp",
"iface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
],
"ether-addr" : "01:01:01:01:01:01",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"port" : "10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"port" : "20",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/236_creating_farm_dsr_lb01/nft.out 0000664 0000000 0000000 00000000730 14326712445 0022750 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/236_creating_farm_dsr_lb01/obj.out 0000664 0000000 0000000 00000005517 14326712445 0022743 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/236_creating_farm_dsr_lb01/req.api 0000775 0000000 0000000 00000000051 14326712445 0022711 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/236_creating_farm_dsr_lb01/req.out 0000664 0000000 0000000 00000000027 14326712445 0022747 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/237_setting_farm_persistence/ 0000775 0000000 0000000 00000000000 14326712445 0022230 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/237_setting_farm_persistence/data.json 0000664 0000000 0000000 00000000123 14326712445 0024030 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"persistence" : "srcip srcport"
}
]
}
nftlb-1.0.7/tests/api/237_setting_farm_persistence/nft.out 0000664 0000000 0000000 00000001774 14326712445 0023561 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/237_setting_farm_persistence/obj.out 0000664 0000000 0000000 00000005531 14326712445 0023537 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/237_setting_farm_persistence/req.api 0000775 0000000 0000000 00000000051 14326712445 0023511 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/237_setting_farm_persistence/req.out 0000664 0000000 0000000 00000000027 14326712445 0023547 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/238_farm_stop/ 0000775 0000000 0000000 00000000000 14326712445 0017135 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/238_farm_stop/data.json 0000664 0000000 0000000 00000000104 14326712445 0020734 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"state" : "down"
}
]
}
nftlb-1.0.7/tests/api/238_farm_stop/nft.out 0000664 0000000 0000000 00000000000 14326712445 0020443 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/238_farm_stop/obj.out 0000664 0000000 0000000 00000005533 14326712445 0020446 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "down",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/238_farm_stop/req.api 0000775 0000000 0000000 00000000051 14326712445 0020416 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/238_farm_stop/req.out 0000664 0000000 0000000 00000000027 14326712445 0020454 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/239_farm_start/ 0000775 0000000 0000000 00000000000 14326712445 0017306 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/239_farm_start/data.json 0000664 0000000 0000000 00000000102 14326712445 0021103 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"state" : "up"
}
]
}
nftlb-1.0.7/tests/api/239_farm_start/nft.out 0000664 0000000 0000000 00000001774 14326712445 0020637 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/239_farm_start/obj.out 0000664 0000000 0000000 00000005531 14326712445 0020615 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/239_farm_start/req.api 0000775 0000000 0000000 00000000051 14326712445 0020567 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/239_farm_start/req.out 0000664 0000000 0000000 00000000027 14326712445 0020625 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/240_creating_farm_dsr_lb02/ 0000775 0000000 0000000 00000000000 14326712445 0021424 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/240_creating_farm_dsr_lb02/data.json 0000664 0000000 0000000 00000001450 14326712445 0023230 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb02",
"mode" : "dsr",
"scheduler" : "weight",
"state" : "up",
"oface" : "lo",
"addresses" : [
{
"name" : "lb02-addr",
"family" : "ipv4",
"ip-addr" : "192.168.0.200",
"ports" : "80",
"protocol" : "tcp",
"iface" : "lo",
"ether-addr" : "0f:0f:0f:0f:0f:0f"
}
],
"ether-addr" : "0f:0f:0f:0f:0f:0f",
"backends" : [
{
"name" : "bck2",
"ip-addr" : "192.168.0.20",
"ether-addr" : "04:04:04:04:04:04",
"port" : "10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck3",
"ip-addr" : "192.168.0.21",
"ether-addr" : "05:05:05:05:05:05",
"port" : "20",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/240_creating_farm_dsr_lb02/nft.out 0000664 0000000 0000000 00000002312 14326712445 0022742 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01,
tcp . 192.168.0.200 . 80 : goto lb02 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
chain lb02 {
ether saddr set 0f:0f:0f:0f:0f:0f ether daddr set numgen random mod 10 map { 0-4 : 04:04:04:04:04:04, 5-9 : 05:05:05:05:05:05 } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/240_creating_farm_dsr_lb02/obj.out 0000664 0000000 0000000 00000013211 14326712445 0022725 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.200",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.200",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck2",
"ip-addr": "192.168.0.20",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "192.168.0.21",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/240_creating_farm_dsr_lb02/req.api 0000775 0000000 0000000 00000000051 14326712445 0022705 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/240_creating_farm_dsr_lb02/req.out 0000664 0000000 0000000 00000000027 14326712445 0022743 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/241_change_farm_stlessdnat_lb02/ 0000775 0000000 0000000 00000000000 14326712445 0022452 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/241_change_farm_stlessdnat_lb02/data.json 0000664 0000000 0000000 00000000107 14326712445 0024254 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb02",
"mode" : "stlsdnat"
}
]
}
nftlb-1.0.7/tests/api/241_change_farm_stlessdnat_lb02/nft.out 0000664 0000000 0000000 00000003773 14326712445 0024004 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01,
tcp . 192.168.0.200 . 80 : goto lb02 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 1m
}
map proto-services-dnat-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.20 . 10 : goto lb02-back,
tcp . 192.168.0.21 . 20 : goto lb02-back }
}
map map-lb02-back {
type ipv4_addr : ether_addr
size 65535
timeout 1m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
chain ingress-dnat-lo {
type filter hook ingress device "lo" priority 100; policy accept;
ip protocol . ip saddr . th sport vmap @proto-services-dnat-lo
}
chain lb02-back {
ip saddr set 192.168.0.200 ether saddr set 0f:0f:0f:0f:0f:0f ether daddr set ip daddr map @map-lb02-back fwd to "lo"
}
chain lb02 {
meta protocol ip update @map-lb02-back { ip saddr : ether saddr }
ip daddr set numgen random mod 10 map { 0-4 : 192.168.0.20, 5-9 : 192.168.0.21 } ether daddr set ip daddr map { 192.168.0.20 : 04:04:04:04:04:04, 192.168.0.21 : 05:05:05:05:05:05 } th dport set ether daddr map { 04:04:04:04:04:04 : 10, 05:05:05:05:05:05 : 20 } ether saddr set 0f:0f:0f:0f:0f:0f fwd to "lo"
}
}
nftlb-1.0.7/tests/api/241_change_farm_stlessdnat_lb02/obj.out 0000664 0000000 0000000 00000013273 14326712445 0023763 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "lb02",
"family": "ipv4",
"virtual-addr": "192.168.0.200",
"virtual-ports": "80",
"source-addr": "",
"mode": "stlsdnat",
"responsettl": "60",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb02-addr",
"family": "ipv4",
"ip-addr": "192.168.0.200",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck2",
"ip-addr": "192.168.0.20",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck3",
"ip-addr": "192.168.0.21",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x4",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/241_change_farm_stlessdnat_lb02/req.api 0000775 0000000 0000000 00000000051 14326712445 0023733 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/241_change_farm_stlessdnat_lb02/req.out 0000664 0000000 0000000 00000000027 14326712445 0023771 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/242_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020121 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/242_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021427 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/242_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021423 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/242_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021401 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/242_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021440 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/243_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020767 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/243_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022275 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/243_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022266 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/243_deleting_addresses/req.api 0000775 0000000 0000000 00000000036 14326712445 0022253 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/243_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022306 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/244_creating_policy_black001/ 0000775 0000000 0000000 00000000000 14326712445 0021670 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/244_creating_policy_black001/data.json 0000664 0000000 0000000 00000000167 14326712445 0023500 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"elements" : [
{
"data" : "35.195.60.76"
}
]
}
]
}
nftlb-1.0.7/tests/api/244_creating_policy_black001/nft.out 0000664 0000000 0000000 00000000233 14326712445 0023206 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/244_creating_policy_black001/obj.out 0000664 0000000 0000000 00000001177 14326712445 0023201 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/244_creating_policy_black001/req.api 0000775 0000000 0000000 00000000055 14326712445 0023155 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/244_creating_policy_black001/req.out 0000664 0000000 0000000 00000000027 14326712445 0023207 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/245_creating_farm_lb01_with_policy/ 0000775 0000000 0000000 00000000000 14326712445 0023172 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/245_creating_farm_lb01_with_policy/data.json 0000664 0000000 0000000 00000001575 14326712445 0025006 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"mode" : "dnat",
"scheduler" : "weight",
"state" : "up",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp"
}
],
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"policies" : [
{
"name" : "black001"
}
]
}
]
}
nftlb-1.0.7/tests/api/245_creating_farm_lb01_with_policy/nft.out 0000664 0000000 0000000 00000003516 14326712445 0024517 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set black001-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @black001 add @black001-lb01-cnt { ip saddr } log prefix "policy-BL-black001-lb01 " drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/245_creating_farm_lb01_with_policy/obj.out 0000664 0000000 0000000 00000005740 14326712445 0024503 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "black001"
}
]
}
]
} nftlb-1.0.7/tests/api/245_creating_farm_lb01_with_policy/req.api 0000775 0000000 0000000 00000000051 14326712445 0024453 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/245_creating_farm_lb01_with_policy/req.out 0000664 0000000 0000000 00000000027 14326712445 0024511 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/246_add_address_to_farm_with_policies/ 0000775 0000000 0000000 00000000000 14326712445 0024030 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/246_add_address_to_farm_with_policies/data.json 0000664 0000000 0000000 00000000321 14326712445 0025630 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"addresses" : [
{
"name" : "myaddr3",
"family" : "ipv4",
"ip-addr" : "127.0.0.1",
"ports" : "888",
"protocol" : "udp"
}
]
}
]
}
nftlb-1.0.7/tests/api/246_add_address_to_farm_with_policies/nft.out 0000664 0000000 0000000 00000003732 14326712445 0025355 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 127.0.0.1 . 888 : goto lb01,
tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set black001-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @black001 add @black001-lb01-cnt { ip saddr } log prefix "policy-BL-black001-lb01 " drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 127.0.0.1 . 888 : goto filter-lb01,
tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 127.0.0.1 . 888 : goto nat-lb01,
tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol udp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/246_add_address_to_farm_with_policies/obj.out 0000664 0000000 0000000 00000006601 14326712445 0025336 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
},
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "888",
"protocol": "udp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "black001"
}
]
}
]
} nftlb-1.0.7/tests/api/246_add_address_to_farm_with_policies/req.api 0000775 0000000 0000000 00000000051 14326712445 0025311 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/246_add_address_to_farm_with_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0025347 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/247_delete_address_to_farm_with_policies/ 0000775 0000000 0000000 00000000000 14326712445 0024543 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/247_delete_address_to_farm_with_policies/nft.out 0000664 0000000 0000000 00000003516 14326712445 0026070 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set black001-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @black001 add @black001-lb01-cnt { ip saddr } log prefix "policy-BL-black001-lb01 " drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/247_delete_address_to_farm_with_policies/obj.out 0000664 0000000 0000000 00000005740 14326712445 0026054 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "black001"
}
]
}
]
} nftlb-1.0.7/tests/api/247_delete_address_to_farm_with_policies/req.api 0000775 0000000 0000000 00000000102 14326712445 0026021 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/lb01/addresses/myaddr3"
nftlb-1.0.7/tests/api/247_delete_address_to_farm_with_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0026062 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/248_delete_policy_in_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021460 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/248_delete_policy_in_farm/nft.out 0000664 0000000 0000000 00000002516 14326712445 0023004 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/248_delete_policy_in_farm/obj.out 0000664 0000000 0000000 00000005510 14326712445 0022764 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/248_delete_policy_in_farm/req.api 0000775 0000000 0000000 00000000102 14326712445 0022736 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/lb01/policies/black001"
nftlb-1.0.7/tests/api/248_delete_policy_in_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022777 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/249_add_lonely_address/ 0000775 0000000 0000000 00000000000 14326712445 0020764 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/249_add_lonely_address/data.json 0000664 0000000 0000000 00000000323 14326712445 0022566 0 ustar 00root root 0000000 0000000 {
"addresses" : [
{
"name" : "lonelyaddr",
"family" : "ipv4",
"ip-addr" : "127.0.0.1",
"ports" : "777",
"protocol" : "udp",
"policies" : [
{
"name" : "black001"
}
]
}
]
}
nftlb-1.0.7/tests/api/249_add_lonely_address/nft.out 0000664 0000000 0000000 00000003301 14326712445 0022301 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 127.0.0.1 . 777 : goto lonelyaddr }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lonelyaddr {
ip saddr @black001 log prefix "IN-lonelyaddr " drop
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x00000001, 5-9 : 0x00000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat to ct mark map { 0x00000001 : 192.168.0.10, 0x00000002 : 192.168.0.11 }
}
}
nftlb-1.0.7/tests/api/249_add_lonely_address/obj.out 0000664 0000000 0000000 00000002045 14326712445 0022270 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "lonelyaddr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "777",
"protocol": "udp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "0",
"policies": [
{
"name": "black001"
}
]
}
]
} nftlb-1.0.7/tests/api/249_add_lonely_address/req.api 0000775 0000000 0000000 00000000055 14326712445 0022251 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="addresses"
nftlb-1.0.7/tests/api/249_add_lonely_address/req.out 0000664 0000000 0000000 00000000027 14326712445 0022303 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/250_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/250_deleting_farms/nft.out 0000664 0000000 0000000 00000001016 14326712445 0021436 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 127.0.0.1 . 777 : goto lonelyaddr }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lonelyaddr {
ip saddr @black001 log prefix "IN-lonelyaddr " drop
}
}
nftlb-1.0.7/tests/api/250_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021422 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/250_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021400 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/250_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/251_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020620 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/251_deleting_policies/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022126 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/251_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022116 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/251_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022103 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/251_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022137 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/252_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020767 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/252_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022275 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/252_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022266 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/252_deleting_addresses/req.api 0000775 0000000 0000000 00000000036 14326712445 0022253 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/252_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022306 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/253_creating_address_myaddr/ 0000775 0000000 0000000 00000000000 14326712445 0022001 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/253_creating_address_myaddr/data.json 0000664 0000000 0000000 00000000223 14326712445 0023602 0 ustar 00root root 0000000 0000000 {
"addresses" : [
{
"name" : "myaddr",
"family" : "ipv4",
"ip-addr" : "200.1.1.1",
"ports" : "8080",
"protocol" : "tcp"
}
]
}
nftlb-1.0.7/tests/api/253_creating_address_myaddr/nft.out 0000664 0000000 0000000 00000000000 14326712445 0023307 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/253_creating_address_myaddr/obj.out 0000664 0000000 0000000 00000000725 14326712445 0023310 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "0",
"policies": []
}
]
} nftlb-1.0.7/tests/api/253_creating_address_myaddr/req.api 0000775 0000000 0000000 00000000055 14326712445 0023266 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="addresses"
nftlb-1.0.7/tests/api/253_creating_address_myaddr/req.out 0000664 0000000 0000000 00000000027 14326712445 0023320 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/254_creating_address_myaddr2/ 0000775 0000000 0000000 00000000000 14326712445 0022064 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/254_creating_address_myaddr2/data.json 0000664 0000000 0000000 00000000223 14326712445 0023665 0 ustar 00root root 0000000 0000000 {
"addresses" : [
{
"name" : "myaddr2",
"family" : "ipv4",
"ip-addr" : "200.2.2.2",
"ports" : "888",
"protocol" : "udp"
}
]
}
nftlb-1.0.7/tests/api/254_creating_address_myaddr2/nft.out 0000664 0000000 0000000 00000000000 14326712445 0023372 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/254_creating_address_myaddr2/obj.out 0000664 0000000 0000000 00000001607 14326712445 0023373 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "0",
"policies": []
},
{
"name": "myaddr2",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "0",
"policies": []
}
]
} nftlb-1.0.7/tests/api/254_creating_address_myaddr2/req.api 0000775 0000000 0000000 00000000055 14326712445 0023351 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="addresses"
nftlb-1.0.7/tests/api/254_creating_address_myaddr2/req.out 0000664 0000000 0000000 00000000027 14326712445 0023403 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/255_creating_farm_with_unknown_address/ 0000775 0000000 0000000 00000000000 14326712445 0024262 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/255_creating_farm_with_unknown_address/data.json 0000664 0000000 0000000 00000000323 14326712445 0026064 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "myfarm",
"addresses" : [
{
"name" : "myaddr3",
"family" : "ipv4",
"ip-addr" : "200.2.2.2",
"ports" : "888",
"protocol" : "udp"
}
]
}
]
}
nftlb-1.0.7/tests/api/255_creating_farm_with_unknown_address/nft.out 0000664 0000000 0000000 00000002045 14326712445 0025603 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
}
}
nftlb-1.0.7/tests/api/255_creating_farm_with_unknown_address/obj.out 0000664 0000000 0000000 00000003414 14326712445 0025567 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.2.2.2",
"virtual-ports": "888",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/255_creating_farm_with_unknown_address/req.api 0000775 0000000 0000000 00000000051 14326712445 0025543 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/255_creating_farm_with_unknown_address/req.out 0000664 0000000 0000000 00000000027 14326712445 0025601 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/256_creating_farm_with_created_address/ 0000775 0000000 0000000 00000000000 14326712445 0024173 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/256_creating_farm_with_created_address/data.json 0000664 0000000 0000000 00000000155 14326712445 0026000 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "myfarm",
"addresses" : [
{
"name" : "myaddr"
}
]
}
]
}
nftlb-1.0.7/tests/api/256_creating_farm_with_created_address/nft.out 0000664 0000000 0000000 00000002214 14326712445 0025512 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto filter-myfarm,
tcp . 200.1.1.1 . 8080 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto nat-myfarm,
tcp . 200.1.1.1 . 8080 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
}
}
nftlb-1.0.7/tests/api/256_creating_farm_with_created_address/obj.out 0000664 0000000 0000000 00000004255 14326712445 0025504 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.2.2.2",
"virtual-ports": "888",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"used": "1"
},
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/256_creating_farm_with_created_address/req.api 0000775 0000000 0000000 00000000051 14326712445 0025454 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/256_creating_farm_with_created_address/req.out 0000664 0000000 0000000 00000000027 14326712445 0025512 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/257_deleting_address_myaddr2/ 0000775 0000000 0000000 00000000000 14326712445 0022066 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/257_deleting_address_myaddr2/nft.out 0000664 0000000 0000000 00000002214 14326712445 0023405 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto filter-myfarm,
tcp . 200.1.1.1 . 8080 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto nat-myfarm,
tcp . 200.1.1.1 . 8080 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
}
}
nftlb-1.0.7/tests/api/257_deleting_address_myaddr2/obj.out 0000664 0000000 0000000 00000001607 14326712445 0023375 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
}
]
} nftlb-1.0.7/tests/api/257_deleting_address_myaddr2/req.api 0000775 0000000 0000000 00000000067 14326712445 0023356 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/myaddr2"
nftlb-1.0.7/tests/api/257_deleting_address_myaddr2/req.out 0000664 0000000 0000000 00000000027 14326712445 0023405 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/258_deleting_farm_address_myaddr3/ 0000775 0000000 0000000 00000000000 14326712445 0023075 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/258_deleting_farm_address_myaddr3/nft.out 0000664 0000000 0000000 00000002047 14326712445 0024420 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
}
}
nftlb-1.0.7/tests/api/258_deleting_farm_address_myaddr3/obj.out 0000664 0000000 0000000 00000003415 14326712445 0024403 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/258_deleting_farm_address_myaddr3/req.api 0000775 0000000 0000000 00000000104 14326712445 0024355 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/myfarm/addresses/myaddr3"
nftlb-1.0.7/tests/api/258_deleting_farm_address_myaddr3/req.out 0000664 0000000 0000000 00000000027 14326712445 0024414 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/259_deleting_address_myaddr/ 0000775 0000000 0000000 00000000000 14326712445 0022006 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/259_deleting_address_myaddr/nft.out 0000664 0000000 0000000 00000000000 14326712445 0023314 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/259_deleting_address_myaddr/obj.out 0000664 0000000 0000000 00000000033 14326712445 0023305 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/259_deleting_address_myaddr/req.api 0000775 0000000 0000000 00000000066 14326712445 0023275 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/myaddr"
nftlb-1.0.7/tests/api/259_deleting_address_myaddr/req.out 0000664 0000000 0000000 00000000027 14326712445 0023325 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/260_deleting_address_myaddr3/ 0000775 0000000 0000000 00000000000 14326712445 0022061 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/260_deleting_address_myaddr3/nft.out 0000664 0000000 0000000 00000000000 14326712445 0023367 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/260_deleting_address_myaddr3/obj.out 0000664 0000000 0000000 00000000033 14326712445 0023360 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/260_deleting_address_myaddr3/req.api 0000775 0000000 0000000 00000000067 14326712445 0023351 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/myaddr3"
nftlb-1.0.7/tests/api/260_deleting_address_myaddr3/req.out 0000664 0000000 0000000 00000000101 14326712445 0023371 0 ustar 00root root 0000000 0000000 {"response": "error stopping address. Unknown address 'myaddr3'"} nftlb-1.0.7/tests/api/261_creating_farm_with_unknown_address_and_bcks/ 0000775 0000000 0000000 00000000000 14326712445 0026103 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/261_creating_farm_with_unknown_address_and_bcks/data.json 0000664 0000000 0000000 00000001270 14326712445 0027707 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "myfarm",
"addresses" : [
{
"name" : "myaddr3",
"family" : "ipv4",
"ip-addr" : "200.2.2.2",
"ports" : "888",
"protocol" : "udp"
}
],
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck2",
"ip-addr" : "172.16.138.204",
"port" : "80",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/261_creating_farm_with_unknown_address_and_bcks/nft.out 0000664 0000000 0000000 00000002375 14326712445 0027432 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.2.2.2 . 888 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 15 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
ip protocol udp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80 }
}
}
nftlb-1.0.7/tests/api/261_creating_farm_with_unknown_address_and_bcks/obj.out 0000664 0000000 0000000 00000006535 14326712445 0027417 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.2.2.2",
"virtual-ports": "888",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/261_creating_farm_with_unknown_address_and_bcks/req.api 0000775 0000000 0000000 00000000051 14326712445 0027364 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/261_creating_farm_with_unknown_address_and_bcks/req.out 0000664 0000000 0000000 00000000027 14326712445 0027422 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/262_add_address_to_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021104 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/262_add_address_to_farm/data.json 0000664 0000000 0000000 00000000322 14326712445 0022705 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "myfarm",
"addresses" : [
{
"name" : "myaddr4",
"family" : "ipv4",
"ip-addr" : "200.1.1.1",
"ports" : "80",
"protocol" : "tcp"
}
]
}
]
}
nftlb-1.0.7/tests/api/262_add_address_to_farm/nft.out 0000664 0000000 0000000 00000002540 14326712445 0022425 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 80 : goto filter-myfarm,
udp . 200.2.2.2 . 888 : goto filter-myfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 80 : goto nat-myfarm,
udp . 200.2.2.2 . 888 : goto nat-myfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-myfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 15 map { 0-4 : 0x80000001, 5-9 : 0x80000002, 10-14 : 0x80000003 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-myfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80, 0x80000003 : 172.16.138.204 . 80 }
}
}
nftlb-1.0.7/tests/api/262_add_address_to_farm/obj.out 0000664 0000000 0000000 00000007375 14326712445 0022423 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "myfarm",
"family": "ipv4",
"virtual-addr": "200.2.2.2",
"virtual-ports": "888",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "myaddr3",
"family": "ipv4",
"ip-addr": "200.2.2.2",
"ports": "888",
"protocol": "udp",
"used": "1"
},
{
"name": "myaddr4",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "172.16.138.204",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x3",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/262_add_address_to_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0022365 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/262_add_address_to_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022423 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/263_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020124 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/263_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021432 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/263_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021426 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/263_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021404 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/263_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021443 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/264_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020772 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/264_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022300 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/264_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022271 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/264_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022261 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/264_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022311 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/265_creating_farm_multiple_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0023714 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/265_creating_farm_multiple_addresses/data.json 0000664 0000000 0000000 00000002007 14326712445 0025517 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "configure-external-ips--http",
"mode" : "snat",
"scheduler" : "rr",
"sched-param" : "none",
"helper" : "none",
"log" : "none",
"state" : "up",
"intra-connect" : "on",
"persistence" : "none",
"persist-ttl" : "60",
"est-connlimit" : "0",
"addresses" : [
{
"name" : "configure-external-ips--http-0",
"family" : "ipv4",
"ip-addr" : "10.106.180.207",
"ports" : "8080",
"protocol" : "tcp"
},
{
"name" : "configure-external-ips--http--externalIP-1",
"family" : "ipv4",
"ip-addr" : "192.168.10.89",
"ports" : "8080",
"protocol" : "tcp"
},
{
"name" : "configure-external-ips--http--externalIP-2",
"family" : "ipv4",
"ip-addr" : "192.168.10.90",
"ports" : "8080",
"protocol" : "tcp"
},
{
"name" : "configure-external-ips--http--externalIP-3",
"family" : "ipv4",
"ip-addr" : "192.168.10.91",
"ports" : "8080",
"protocol" : "tcp"
}
]
}
]
}
nftlb-1.0.7/tests/api/265_creating_farm_multiple_addresses/nft.out 0000664 0000000 0000000 00000005300 14326712445 0025232 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.10.89 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.90 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.10.89 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.90 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http }
}
map services-back-m {
type mark : ipv4_addr
}
map output-filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.10.89 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.90 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http }
}
map output-nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.10.89 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.90 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-configure-external-ips--http {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-configure-external-ips--http {
}
chain output-filter {
type filter hook output priority mangle; policy accept;
ip protocol . ip daddr . th dport vmap @output-filter-proto-services
}
chain output-nat {
type nat hook output priority -100; policy accept;
ip protocol . ip daddr . th dport vmap @output-nat-proto-services
}
}
nftlb-1.0.7/tests/api/265_creating_farm_multiple_addresses/obj.out 0000664 0000000 0000000 00000006317 14326712445 0025226 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "configure-external-ips--http",
"family": "ipv4",
"virtual-addr": "10.106.180.207",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"intra-connect": "on",
"addresses": [
{
"name": "configure-external-ips--http-0",
"family": "ipv4",
"ip-addr": "10.106.180.207",
"ports": "8080",
"protocol": "tcp",
"used": "1"
},
{
"name": "configure-external-ips--http--externalIP-1",
"family": "ipv4",
"ip-addr": "192.168.10.89",
"ports": "8080",
"protocol": "tcp",
"used": "1"
},
{
"name": "configure-external-ips--http--externalIP-2",
"family": "ipv4",
"ip-addr": "192.168.10.90",
"ports": "8080",
"protocol": "tcp",
"used": "1"
},
{
"name": "configure-external-ips--http--externalIP-3",
"family": "ipv4",
"ip-addr": "192.168.10.91",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/265_creating_farm_multiple_addresses/req.api 0000775 0000000 0000000 00000000051 14326712445 0025175 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/265_creating_farm_multiple_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0025233 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/266_deleting_farm/ 0000775 0000000 0000000 00000000000 14326712445 0017744 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/266_deleting_farm/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021252 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/266_deleting_farm/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021246 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/266_deleting_farm/req.api 0000775 0000000 0000000 00000000067 14326712445 0021234 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/configure-external-ips--http"
nftlb-1.0.7/tests/api/266_deleting_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0021263 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/267_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020775 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/267_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022303 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/267_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022274 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/267_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022264 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/267_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022314 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/268_creating_multiple_farms_with_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0025135 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/268_creating_multiple_farms_with_addresses/data.json 0000664 0000000 0000000 00000004501 14326712445 0026741 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "configure-external-ips--http",
"mode" : "snat",
"scheduler" : "rr",
"sched-param" : "none",
"helper" : "none",
"log" : "none",
"state" : "up",
"intra-connect" : "on",
"persistence" : "none",
"persist-ttl" : "60",
"est-connlimit" : "0",
"addresses" : [
{
"name" : "configure-external-ips--http-0",
"family" : "ipv4",
"ip-addr" : "10.106.180.207",
"ports" : "8080",
"protocol" : "tcp"
},
{
"name" : "configure-external-ips--http--externalIP-1",
"family" : "ipv4",
"ip-addr" : "192.168.10.89",
"ports" : "8080",
"protocol" : "tcp"
},
{
"name" : "configure-external-ips--http--externalIP-2",
"family" : "ipv4",
"ip-addr" : "192.168.10.90",
"ports" : "8080",
"protocol" : "tcp"
},
{
"name" : "configure-external-ips--http--externalIP-3",
"family" : "ipv4",
"ip-addr" : "192.168.10.91",
"ports" : "8080",
"protocol" : "tcp"
}
]
},
{
"name" : "kube-dns--dns",
"mode" : "snat",
"scheduler" : "rr",
"sched-param" : "none",
"helper" : "none",
"log" : "none",
"state" : "up",
"intra-connect" : "on",
"persistence" : "none",
"persist-ttl" : "60",
"est-connlimit" : "0",
"addresses" : [
{
"name" : "kube-dns--dns",
"family" : "ipv4",
"ip-addr" : "10.96.0.10",
"ports" : "53",
"protocol" : "udp"
}
]
},
{
"name" : "kube-dns--dns-tcp",
"mode" : "snat",
"scheduler" : "rr",
"sched-param" : "none",
"helper" : "none",
"log" : "none",
"state" : "up",
"intra-connect" : "on",
"persistence" : "none",
"persist-ttl" : "60",
"est-connlimit" : "0",
"addresses" : [
{
"name" : "kube-dns--dns-tcp",
"family" : "ipv4",
"ip-addr" : "10.96.0.10",
"ports" : "53",
"protocol" : "tcp"
}
]
},
{
"name" : "kube-dns--metrics",
"mode" : "snat",
"scheduler" : "rr",
"sched-param" : "none",
"helper" : "none",
"log" : "none",
"state" : "up",
"intra-connect" : "on",
"persistence" : "none",
"persist-ttl" : "60",
"est-connlimit" : "0",
"addresses" : [
{
"name" : "kube-dns--metrics",
"family" : "ipv4",
"ip-addr" : "10.96.0.10",
"ports" : "9153",
"protocol" : "tcp"
}
]
}
]
}
nftlb-1.0.7/tests/api/268_creating_multiple_farms_with_addresses/nft.out 0000664 0000000 0000000 00000007430 14326712445 0026461 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto filter-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto filter-kube-dns--dns,
tcp . 192.168.10.89 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.90 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto filter-kube-dns--metrics }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto nat-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto nat-kube-dns--dns,
tcp . 192.168.10.89 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.90 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto nat-kube-dns--metrics }
}
map services-back-m {
type mark : ipv4_addr
}
map output-filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto filter-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto filter-kube-dns--dns,
tcp . 192.168.10.89 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.90 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto filter-kube-dns--metrics }
}
map output-nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto nat-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto nat-kube-dns--dns,
tcp . 192.168.10.89 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.90 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto nat-kube-dns--metrics }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-configure-external-ips--http {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-configure-external-ips--http {
}
chain output-filter {
type filter hook output priority mangle; policy accept;
ip protocol . ip daddr . th dport vmap @output-filter-proto-services
}
chain output-nat {
type nat hook output priority -100; policy accept;
ip protocol . ip daddr . th dport vmap @output-nat-proto-services
}
chain filter-kube-dns--dns {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--dns {
}
chain filter-kube-dns--dns-tcp {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--dns-tcp {
}
chain filter-kube-dns--metrics {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--metrics {
}
}
nftlb-1.0.7/tests/api/268_creating_multiple_farms_with_addresses/obj.out 0000664 0000000 0000000 00000021136 14326712445 0026443 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "configure-external-ips--http",
"family": "ipv4",
"virtual-addr": "10.106.180.207",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"intra-connect": "on",
"addresses": [
{
"name": "configure-external-ips--http-0",
"family": "ipv4",
"ip-addr": "10.106.180.207",
"ports": "8080",
"protocol": "tcp",
"used": "1"
},
{
"name": "configure-external-ips--http--externalIP-1",
"family": "ipv4",
"ip-addr": "192.168.10.89",
"ports": "8080",
"protocol": "tcp",
"used": "1"
},
{
"name": "configure-external-ips--http--externalIP-2",
"family": "ipv4",
"ip-addr": "192.168.10.90",
"ports": "8080",
"protocol": "tcp",
"used": "1"
},
{
"name": "configure-external-ips--http--externalIP-3",
"family": "ipv4",
"ip-addr": "192.168.10.91",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
},
{
"name": "kube-dns--dns",
"family": "ipv4",
"virtual-addr": "10.96.0.10",
"virtual-ports": "53",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"intra-connect": "on",
"addresses": [
{
"name": "kube-dns--dns",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "53",
"protocol": "udp",
"used": "1"
}
],
"backends": [],
"policies": []
},
{
"name": "kube-dns--dns-tcp",
"family": "ipv4",
"virtual-addr": "10.96.0.10",
"virtual-ports": "53",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"intra-connect": "on",
"addresses": [
{
"name": "kube-dns--dns-tcp",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "53",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
},
{
"name": "kube-dns--metrics",
"family": "ipv4",
"virtual-addr": "10.96.0.10",
"virtual-ports": "9153",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"intra-connect": "on",
"addresses": [
{
"name": "kube-dns--metrics",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "9153",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/268_creating_multiple_farms_with_addresses/req.api 0000775 0000000 0000000 00000000051 14326712445 0026416 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/268_creating_multiple_farms_with_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0026454 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/269_deleting_address_ip1/ 0000775 0000000 0000000 00000000000 14326712445 0021220 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/269_deleting_address_ip1/nft.out 0000664 0000000 0000000 00000006742 14326712445 0022551 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto filter-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto filter-kube-dns--dns,
tcp . 192.168.10.90 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto filter-kube-dns--metrics }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto nat-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto nat-kube-dns--dns,
tcp . 192.168.10.90 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto nat-kube-dns--metrics }
}
map services-back-m {
type mark : ipv4_addr
}
map output-filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto filter-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto filter-kube-dns--dns,
tcp . 192.168.10.90 . 8080 : goto filter-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto filter-kube-dns--metrics }
}
map output-nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto nat-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto nat-kube-dns--dns,
tcp . 192.168.10.90 . 8080 : goto nat-configure-external-ips--http,
tcp . 192.168.10.91 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto nat-kube-dns--metrics }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-configure-external-ips--http {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-configure-external-ips--http {
}
chain output-filter {
type filter hook output priority mangle; policy accept;
ip protocol . ip daddr . th dport vmap @output-filter-proto-services
}
chain output-nat {
type nat hook output priority -100; policy accept;
ip protocol . ip daddr . th dport vmap @output-nat-proto-services
}
chain filter-kube-dns--dns {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--dns {
}
chain filter-kube-dns--dns-tcp {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--dns-tcp {
}
chain filter-kube-dns--metrics {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--metrics {
}
}
nftlb-1.0.7/tests/api/269_deleting_address_ip1/obj.out 0000664 0000000 0000000 00000005330 14326712445 0022524 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "configure-external-ips--http-0",
"family": "ipv4",
"ip-addr": "10.106.180.207",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "configure-external-ips--http--externalIP-2",
"family": "ipv4",
"ip-addr": "192.168.10.90",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "configure-external-ips--http--externalIP-3",
"family": "ipv4",
"ip-addr": "192.168.10.91",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--dns",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "53",
"protocol": "udp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--dns-tcp",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "53",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--metrics",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "9153",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
}
]
} nftlb-1.0.7/tests/api/269_deleting_address_ip1/req.api 0000775 0000000 0000000 00000000132 14326712445 0022501 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/configure-external-ips--http--externalIP-1"
nftlb-1.0.7/tests/api/269_deleting_address_ip1/req.out 0000664 0000000 0000000 00000000027 14326712445 0022537 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/270_deleting_address_ip2/ 0000775 0000000 0000000 00000000000 14326712445 0021211 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/270_deleting_address_ip2/nft.out 0000664 0000000 0000000 00000006254 14326712445 0022540 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto filter-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto filter-kube-dns--dns,
tcp . 192.168.10.91 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto filter-kube-dns--metrics }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto nat-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto nat-kube-dns--dns,
tcp . 192.168.10.91 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto nat-kube-dns--metrics }
}
map services-back-m {
type mark : ipv4_addr
}
map output-filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto filter-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto filter-kube-dns--dns,
tcp . 192.168.10.91 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto filter-kube-dns--metrics }
}
map output-nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto nat-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto nat-kube-dns--dns,
tcp . 192.168.10.91 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto nat-kube-dns--metrics }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-configure-external-ips--http {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-configure-external-ips--http {
}
chain output-filter {
type filter hook output priority mangle; policy accept;
ip protocol . ip daddr . th dport vmap @output-filter-proto-services
}
chain output-nat {
type nat hook output priority -100; policy accept;
ip protocol . ip daddr . th dport vmap @output-nat-proto-services
}
chain filter-kube-dns--dns {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--dns {
}
chain filter-kube-dns--dns-tcp {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--dns-tcp {
}
chain filter-kube-dns--metrics {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--metrics {
}
}
nftlb-1.0.7/tests/api/270_deleting_address_ip2/obj.out 0000664 0000000 0000000 00000004376 14326712445 0022526 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "configure-external-ips--http-0",
"family": "ipv4",
"ip-addr": "10.106.180.207",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "configure-external-ips--http--externalIP-3",
"family": "ipv4",
"ip-addr": "192.168.10.91",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--dns",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "53",
"protocol": "udp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--dns-tcp",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "53",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--metrics",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "9153",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
}
]
} nftlb-1.0.7/tests/api/270_deleting_address_ip2/req.api 0000775 0000000 0000000 00000000132 14326712445 0022472 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/configure-external-ips--http--externalIP-2"
nftlb-1.0.7/tests/api/270_deleting_address_ip2/req.out 0000664 0000000 0000000 00000000027 14326712445 0022530 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/271_deleting_address_ip3/ 0000775 0000000 0000000 00000000000 14326712445 0021213 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/271_deleting_address_ip3/nft.out 0000664 0000000 0000000 00000005566 14326712445 0022547 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto filter-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto filter-kube-dns--dns,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto filter-kube-dns--metrics }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto nat-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto nat-kube-dns--dns,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto nat-kube-dns--metrics }
}
map services-back-m {
type mark : ipv4_addr
}
map output-filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto filter-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto filter-kube-dns--dns,
tcp . 10.106.180.207 . 8080 : goto filter-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto filter-kube-dns--metrics }
}
map output-nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.96.0.10 . 53 : goto nat-kube-dns--dns-tcp,
udp . 10.96.0.10 . 53 : goto nat-kube-dns--dns,
tcp . 10.106.180.207 . 8080 : goto nat-configure-external-ips--http,
tcp . 10.96.0.10 . 9153 : goto nat-kube-dns--metrics }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-configure-external-ips--http {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-configure-external-ips--http {
}
chain output-filter {
type filter hook output priority mangle; policy accept;
ip protocol . ip daddr . th dport vmap @output-filter-proto-services
}
chain output-nat {
type nat hook output priority -100; policy accept;
ip protocol . ip daddr . th dport vmap @output-nat-proto-services
}
chain filter-kube-dns--dns {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--dns {
}
chain filter-kube-dns--dns-tcp {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--dns-tcp {
}
chain filter-kube-dns--metrics {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-kube-dns--metrics {
}
}
nftlb-1.0.7/tests/api/271_deleting_address_ip3/obj.out 0000664 0000000 0000000 00000003444 14326712445 0022523 0 ustar 00root root 0000000 0000000 {
"addresses": [
{
"name": "configure-external-ips--http-0",
"family": "ipv4",
"ip-addr": "10.106.180.207",
"ports": "8080",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--dns",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "53",
"protocol": "udp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--dns-tcp",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "53",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
},
{
"name": "kube-dns--metrics",
"family": "ipv4",
"ip-addr": "10.96.0.10",
"ports": "9153",
"protocol": "tcp",
"verdict": "log drop accept",
"log-rtlimit": "0/second",
"used": "1",
"policies": []
}
]
} nftlb-1.0.7/tests/api/271_deleting_address_ip3/req.api 0000775 0000000 0000000 00000000132 14326712445 0022474 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses/configure-external-ips--http--externalIP-3"
nftlb-1.0.7/tests/api/271_deleting_address_ip3/req.out 0000664 0000000 0000000 00000000027 14326712445 0022532 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/272_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020124 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/272_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021432 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/272_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021426 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/272_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021404 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/272_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021443 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/273_creating_farm_newfarm_with_addr/ 0000775 0000000 0000000 00000000000 14326712445 0023507 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/273_creating_farm_newfarm_with_addr/data.json 0000664 0000000 0000000 00000003126 14326712445 0025315 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.101.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"mark": "0x0",
"priority": "1",
"state": "up",
"new-rtlimit": "0",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.101.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
}
nftlb-1.0.7/tests/api/273_creating_farm_newfarm_with_addr/nft.out 0000664 0000000 0000000 00000002063 14326712445 0025030 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/273_creating_farm_newfarm_with_addr/obj.out 0000664 0000000 0000000 00000003440 14326712445 0025013 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.101.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.101.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/273_creating_farm_newfarm_with_addr/req.api 0000775 0000000 0000000 00000000051 14326712445 0024770 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/273_creating_farm_newfarm_with_addr/req.out 0000664 0000000 0000000 00000000027 14326712445 0025026 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/274_modify_farm_newfarm_with_addr/ 0000775 0000000 0000000 00000000000 14326712445 0023203 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/274_modify_farm_newfarm_with_addr/data.json 0000664 0000000 0000000 00000002370 14326712445 0025011 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.101.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"mark": "0x0",
"priority": "1",
"state": "up",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.101.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": []
}
]
}
nftlb-1.0.7/tests/api/274_modify_farm_newfarm_with_addr/nft.out 0000664 0000000 0000000 00000002063 14326712445 0024524 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.189 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/274_modify_farm_newfarm_with_addr/obj.out 0000664 0000000 0000000 00000003440 14326712445 0024507 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.101.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.101.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/274_modify_farm_newfarm_with_addr/req.api 0000775 0000000 0000000 00000000051 14326712445 0024464 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/274_modify_farm_newfarm_with_addr/req.out 0000664 0000000 0000000 00000000027 14326712445 0024522 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/275_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020127 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/275_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021435 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/275_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021431 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/275_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021407 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/275_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021446 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/276_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020775 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/276_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022303 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/276_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022274 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/276_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022264 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/276_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022314 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/277_creating_farm/ 0000775 0000000 0000000 00000000000 14326712445 0017747 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/277_creating_farm/data.json 0000664 0000000 0000000 00000003452 14326712445 0021557 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.108.189",
"virtual-ports": "666,667",
"source-addr": "192.168.108.189",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-prefix": "l4:newfarm ",
"mark": "0x0",
"priority": "1",
"state": "up",
"new-rtlimit": "0",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.107.254",
"port": "80",
"source-addr": "192.168.107.20",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
}
nftlb-1.0.7/tests/api/277_creating_farm/nft.out 0000664 0000000 0000000 00000003207 14326712445 0021271 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.108.189 . 666 : goto filter-newfarm,
tcp . 192.168.108.189 . 667 : goto filter-newfarm }
}
map static-sessions-newfarm {
type ipv4_addr : mark
}
map persist-newfarm {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.108.189 . 666 : goto nat-newfarm,
tcp . 192.168.108.189 . 667 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.107.20 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct mark set ip saddr map @static-sessions-newfarm accept
ct state new ct mark set ip saddr map @persist-newfarm
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.107.254 . 80 }
}
}
nftlb-1.0.7/tests/api/277_creating_farm/obj.out 0000664 0000000 0000000 00000004750 14326712445 0021260 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.108.189",
"virtual-ports": "666,667",
"source-addr": "192.168.108.189",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-prefix": "l4:newfarm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.108.189",
"ports": "666,667",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.107.254",
"port": "80",
"source-addr": "192.168.107.20",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/277_creating_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0021230 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/277_creating_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0021266 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/278_stop_farm/ 0000775 0000000 0000000 00000000000 14326712445 0017141 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/278_stop_farm/data.json 0000664 0000000 0000000 00000000107 14326712445 0020743 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "newfarm",
"state" : "down"
}
]
}
nftlb-1.0.7/tests/api/278_stop_farm/nft.out 0000664 0000000 0000000 00000000000 14326712445 0020447 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/278_stop_farm/obj.out 0000664 0000000 0000000 00000004752 14326712445 0020454 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.108.189",
"virtual-ports": "666,667",
"source-addr": "192.168.108.189",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-prefix": "l4:newfarm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "down",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.108.189",
"ports": "666,667",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.107.254",
"port": "80",
"source-addr": "192.168.107.20",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/278_stop_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0020422 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/278_stop_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0020460 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/279_rename_farm/ 0000775 0000000 0000000 00000000000 14326712445 0017424 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/279_rename_farm/data.json 0000664 0000000 0000000 00000000112 14326712445 0021222 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"newname": "newfarm2"
}
]
}
nftlb-1.0.7/tests/api/279_rename_farm/nft.out 0000664 0000000 0000000 00000000000 14326712445 0020732 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/279_rename_farm/obj.out 0000664 0000000 0000000 00000004754 14326712445 0020741 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm2",
"family": "ipv4",
"virtual-addr": "192.168.108.189",
"virtual-ports": "666,667",
"source-addr": "192.168.108.189",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-prefix": "l4:newfarm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "down",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm2-addr",
"family": "ipv4",
"ip-addr": "192.168.108.189",
"ports": "666,667",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.107.254",
"port": "80",
"source-addr": "192.168.107.20",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/279_rename_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0020705 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/279_rename_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0020743 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/280_up_farm/ 0000775 0000000 0000000 00000000000 14326712445 0016571 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/280_up_farm/data.json 0000664 0000000 0000000 00000000106 14326712445 0020372 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "newfarm2",
"state" : "up"
}
]
}
nftlb-1.0.7/tests/api/280_up_farm/nft.out 0000664 0000000 0000000 00000003222 14326712445 0020110 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.108.189 . 666 : goto filter-newfarm2,
tcp . 192.168.108.189 . 667 : goto filter-newfarm2 }
}
map static-sessions-newfarm2 {
type ipv4_addr : mark
}
map persist-newfarm2 {
type ipv4_addr : mark
size 65535
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.108.189 . 666 : goto nat-newfarm2,
tcp . 192.168.108.189 . 667 : goto nat-newfarm2 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.107.20 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm2 {
ct mark set ip saddr map @static-sessions-newfarm2 accept
ct state new ct mark set ip saddr map @persist-newfarm2
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
ct mark != 0x00000000 update @persist-newfarm2 { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm2 {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.107.254 . 80 }
}
}
nftlb-1.0.7/tests/api/280_up_farm/obj.out 0000664 0000000 0000000 00000004752 14326712445 0020104 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm2",
"family": "ipv4",
"virtual-addr": "192.168.108.189",
"virtual-ports": "666,667",
"source-addr": "192.168.108.189",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-prefix": "l4:newfarm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm2-addr",
"family": "ipv4",
"ip-addr": "192.168.108.189",
"ports": "666,667",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.107.254",
"port": "80",
"source-addr": "192.168.107.20",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/280_up_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0020052 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/280_up_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0020110 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/281_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020124 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/281_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021432 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/281_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021426 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/281_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021404 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/281_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021443 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/282_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020772 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/282_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022300 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/282_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022271 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/282_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022261 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/282_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022311 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/283_creating_farm_tcp_ftp/ 0000775 0000000 0000000 00000000000 14326712445 0021463 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/283_creating_farm_tcp_ftp/data.json 0000664 0000000 0000000 00000001162 14326712445 0023267 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "200.1.1.1",
"virtual-ports" : "8080",
"mode" : "snat",
"protocol" : "tcp",
"helper" : "ftp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/283_creating_farm_tcp_ftp/nft.out 0000664 0000000 0000000 00000002456 14326712445 0023012 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper ftp-tcp {
type "ftp" protocol tcp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ip protocol tcp ct helper set "ftp-tcp"
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/283_creating_farm_tcp_ftp/obj.out 0000664 0000000 0000000 00000005517 14326712445 0022776 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "ftp",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/283_creating_farm_tcp_ftp/req.api 0000775 0000000 0000000 00000000051 14326712445 0022744 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/283_creating_farm_tcp_ftp/req.out 0000664 0000000 0000000 00000000027 14326712445 0023002 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/284_modify_farm_udp_tftp/ 0000775 0000000 0000000 00000000000 14326712445 0021345 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/284_modify_farm_udp_tftp/data.json 0000664 0000000 0000000 00000000117 14326712445 0023150 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "lb01", "protocol" : "udp" , "helper" : "tftp" } ] }
nftlb-1.0.7/tests/api/284_modify_farm_udp_tftp/nft.out 0000664 0000000 0000000 00000002461 14326712445 0022670 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper tftp-udp {
type "tftp" protocol udp
l3proto ip
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.1.1.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { udp . 200.1.1.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ip protocol udp ct helper set "tftp-udp"
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol udp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/284_modify_farm_udp_tftp/obj.out 0000664 0000000 0000000 00000005520 14326712445 0022652 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "udp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "tftp",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "udp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/284_modify_farm_udp_tftp/req.api 0000775 0000000 0000000 00000000051 14326712445 0022626 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/284_modify_farm_udp_tftp/req.out 0000664 0000000 0000000 00000000027 14326712445 0022664 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/285_modify_farm_tcp_tftp/ 0000775 0000000 0000000 00000000000 14326712445 0021344 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/285_modify_farm_tcp_tftp/data.json 0000664 0000000 0000000 00000000071 14326712445 0023146 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "lb01", "protocol" : "tcp" } ] }
nftlb-1.0.7/tests/api/285_modify_farm_tcp_tftp/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022652 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/285_modify_farm_tcp_tftp/obj.out 0000664 0000000 0000000 00000005532 14326712445 0022654 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "tftp",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "config_error",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/285_modify_farm_tcp_tftp/req.api 0000775 0000000 0000000 00000000051 14326712445 0022625 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/285_modify_farm_tcp_tftp/req.out 0000664 0000000 0000000 00000000105 14326712445 0022660 0 ustar 00root root 0000000 0000000 {"response": "success. Farm 'lb01' doesn't validate helper protocol"} nftlb-1.0.7/tests/api/286_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020131 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/286_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021437 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/286_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021433 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/286_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021411 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/286_deleting_farms/req.out 0000664 0000000 0000000 00000000105 14326712445 0021445 0 ustar 00root root 0000000 0000000 {"response": "success. Farm 'lb01' doesn't validate helper protocol"} nftlb-1.0.7/tests/api/287_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020777 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/287_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022305 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/287_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022276 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/287_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022266 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/287_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022316 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/288_farm_with_new-rtlimit_default_ttl/ 0000775 0000000 0000000 00000000000 14326712445 0024052 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/288_farm_with_new-rtlimit_default_ttl/data.json 0000664 0000000 0000000 00000000240 14326712445 0025652 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.105.189", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "dnat", "new-rtlimit" : "22" } ] }
nftlb-1.0.7/tests/api/288_farm_with_new-rtlimit_default_ttl/nft.out 0000664 0000000 0000000 00000002322 14326712445 0025371 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second } log prefix "new-rtlimit-newfarm " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/288_farm_with_new-rtlimit_default_ttl/obj.out 0000664 0000000 0000000 00000003435 14326712445 0025362 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/288_farm_with_new-rtlimit_default_ttl/req.api 0000775 0000000 0000000 00000000051 14326712445 0025333 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/288_farm_with_new-rtlimit_default_ttl/req.out 0000664 0000000 0000000 00000000027 14326712445 0025371 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/289_farm_without_limits_ttl/ 0000775 0000000 0000000 00000000000 14326712445 0022125 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/289_farm_without_limits_ttl/data.json 0000664 0000000 0000000 00000000075 14326712445 0023733 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "limits-ttl" : "0" } ] }
nftlb-1.0.7/tests/api/289_farm_without_limits_ttl/nft.out 0000664 0000000 0000000 00000002275 14326712445 0023453 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second } log prefix "new-rtlimit-newfarm " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/289_farm_without_limits_ttl/obj.out 0000664 0000000 0000000 00000003433 14326712445 0023433 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "0",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/289_farm_without_limits_ttl/req.api 0000775 0000000 0000000 00000000051 14326712445 0023406 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/289_farm_without_limits_ttl/req.out 0000664 0000000 0000000 00000000027 14326712445 0023444 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/290_farm_with_limits_ttl/ 0000775 0000000 0000000 00000000000 14326712445 0021365 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/290_farm_with_limits_ttl/data.json 0000664 0000000 0000000 00000000076 14326712445 0023174 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "limits-ttl" : "60" } ] }
nftlb-1.0.7/tests/api/290_farm_with_limits_ttl/nft.out 0000664 0000000 0000000 00000002322 14326712445 0022704 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second } log prefix "new-rtlimit-newfarm " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/290_farm_with_limits_ttl/obj.out 0000664 0000000 0000000 00000003434 14326712445 0022674 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "60",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/290_farm_with_limits_ttl/req.api 0000775 0000000 0000000 00000000051 14326712445 0022646 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/290_farm_with_limits_ttl/req.out 0000664 0000000 0000000 00000000027 14326712445 0022704 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/291_farm_with_est-connlimit/ 0000775 0000000 0000000 00000000000 14326712445 0021767 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/291_farm_with_est-connlimit/data.json 0000664 0000000 0000000 00000000101 14326712445 0023563 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "est-connlimit" : "20" } ] }
nftlb-1.0.7/tests/api/291_farm_with_est-connlimit/nft.out 0000664 0000000 0000000 00000002622 14326712445 0023311 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
set est-connlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second } log prefix "new-rtlimit-newfarm " drop
ct state new add @est-connlimit-newfarm { ip saddr ct count over 20 } log prefix "est-connlimit-newfarm " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/291_farm_with_est-connlimit/obj.out 0000664 0000000 0000000 00000003435 14326712445 0023277 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "60",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "20",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/291_farm_with_est-connlimit/req.api 0000775 0000000 0000000 00000000051 14326712445 0023250 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/291_farm_with_est-connlimit/req.out 0000664 0000000 0000000 00000000027 14326712445 0023306 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/292_farm_without_limits_ttl/ 0000775 0000000 0000000 00000000000 14326712445 0022117 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/292_farm_without_limits_ttl/data.json 0000664 0000000 0000000 00000000075 14326712445 0023725 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "limits-ttl" : "0" } ] }
nftlb-1.0.7/tests/api/292_farm_without_limits_ttl/nft.out 0000664 0000000 0000000 00000002575 14326712445 0023450 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto filter-newfarm }
}
set new-rtlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic
}
set est-connlimit-newfarm {
type ipv4_addr
size 65535
flags dynamic
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.105.189 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new add @new-rtlimit-newfarm { ip saddr limit rate over 22/second } log prefix "new-rtlimit-newfarm " drop
ct state new add @est-connlimit-newfarm { ip saddr ct count over 20 } log prefix "est-connlimit-newfarm " drop
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
}
}
nftlb-1.0.7/tests/api/292_farm_without_limits_ttl/obj.out 0000664 0000000 0000000 00000003434 14326712445 0023426 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.105.189",
"virtual-ports": "80",
"source-addr": "",
"mode": "dnat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "0",
"new-rtlimit": "22/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "20",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.105.189",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/292_farm_without_limits_ttl/req.api 0000775 0000000 0000000 00000000051 14326712445 0023400 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/292_farm_without_limits_ttl/req.out 0000664 0000000 0000000 00000000027 14326712445 0023436 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/293_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020127 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/293_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021435 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/293_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021431 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/293_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021407 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/293_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021446 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/294_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020775 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/294_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022303 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/294_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022274 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/294_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022264 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/294_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022314 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/295_create_farm_with_overlapping_ports/ 0000775 0000000 0000000 00000000000 14326712445 0024306 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/295_create_farm_with_overlapping_ports/data.json 0000664 0000000 0000000 00000001147 14326712445 0026115 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "200.1.1.1",
"virtual-ports" : "8889,8889-8890",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/295_create_farm_with_overlapping_ports/nft.out 0000664 0000000 0000000 00000002447 14326712445 0025635 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8889 : goto filter-lb01,
tcp . 200.1.1.1 . 8890 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8889 : goto nat-lb01,
tcp . 200.1.1.1 . 8890 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/295_create_farm_with_overlapping_ports/obj.out 0000664 0000000 0000000 00000005544 14326712445 0025621 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8889,8889-8890",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8889,8889-8890",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/295_create_farm_with_overlapping_ports/req.api 0000775 0000000 0000000 00000000051 14326712445 0025567 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/295_create_farm_with_overlapping_ports/req.out 0000664 0000000 0000000 00000000027 14326712445 0025625 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/296_change_overlapping_ports/ 0000775 0000000 0000000 00000000000 14326712445 0022231 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/296_change_overlapping_ports/data.json 0000664 0000000 0000000 00000001135 14326712445 0024035 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "200.1.1.1",
"virtual-ports" : "8888",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/296_change_overlapping_ports/nft.out 0000664 0000000 0000000 00000002304 14326712445 0023550 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8888 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 200.1.1.1 . 8888 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/296_change_overlapping_ports/obj.out 0000664 0000000 0000000 00000005520 14326712445 0023536 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "200.1.1.1",
"virtual-ports": "8888",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "200.1.1.1",
"ports": "8888",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/296_change_overlapping_ports/req.api 0000775 0000000 0000000 00000000051 14326712445 0023512 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/296_change_overlapping_ports/req.out 0000664 0000000 0000000 00000000027 14326712445 0023550 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/297_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020133 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/297_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021441 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/297_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021435 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/297_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021413 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/297_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021452 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/298_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0021001 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/298_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022307 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/298_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022300 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/298_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022270 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/298_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022320 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/299_setting_policy_only_log/ 0000775 0000000 0000000 00000000000 14326712445 0022110 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/299_setting_policy_only_log/data.json 0000664 0000000 0000000 00000000211 14326712445 0023706 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "mylist",
"type" : "blacklist",
"elements" : [ {
"data" : "35.195.60.76"
}
]
}
]
}
nftlb-1.0.7/tests/api/299_setting_policy_only_log/nft.out 0000664 0000000 0000000 00000000231 14326712445 0023424 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/299_setting_policy_only_log/obj.out 0000664 0000000 0000000 00000001175 14326712445 0023417 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "mylist",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/299_setting_policy_only_log/req.api 0000775 0000000 0000000 00000000054 14326712445 0023374 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="policies"
FILE="data.json"
nftlb-1.0.7/tests/api/299_setting_policy_only_log/req.out 0000664 0000000 0000000 00000000027 14326712445 0023427 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/300_creating_farm_with_policy_only_log/ 0000775 0000000 0000000 00000000000 14326712445 0024246 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/300_creating_farm_with_policy_only_log/data.json 0000664 0000000 0000000 00000001256 14326712445 0026056 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "8080",
"mode" : "snat",
"protocol" : "tcp",
"scheduler" : "weight",
"verdict" : "log",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "172.16.138.202",
"port" : "80",
"weight" : "5",
"mark" : "0x0000001",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "172.16.138.203",
"port" : "80",
"weight" : "5",
"mark" : "0x0000002",
"priority" : "1",
"state" : "up"
}
],
"policies" : [
{
"name" : "mylist"
}
]
}
]
}
nftlb-1.0.7/tests/api/300_creating_farm_with_policy_only_log/nft.out 0000664 0000000 0000000 00000003520 14326712445 0025566 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } log prefix "policy-BL-mylist-lb01 "
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/300_creating_farm_with_policy_only_log/obj.out 0000664 0000000 0000000 00000005733 14326712445 0025561 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log ",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/300_creating_farm_with_policy_only_log/req.api 0000775 0000000 0000000 00000000051 14326712445 0025527 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/300_creating_farm_with_policy_only_log/req.out 0000664 0000000 0000000 00000000027 14326712445 0025565 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/301_creating_farm_with_policy_log_and_drop/ 0000775 0000000 0000000 00000000000 14326712445 0025054 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/301_creating_farm_with_policy_log_and_drop/data.json 0000664 0000000 0000000 00000000112 14326712445 0026652 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"verdict" : "log drop"
}
]
}
nftlb-1.0.7/tests/api/301_creating_farm_with_policy_log_and_drop/nft.out 0000664 0000000 0000000 00000003525 14326712445 0026401 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } log prefix "policy-BL-mylist-lb01 " drop
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/301_creating_farm_with_policy_log_and_drop/obj.out 0000664 0000000 0000000 00000005740 14326712445 0026365 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop ",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/301_creating_farm_with_policy_log_and_drop/req.api 0000775 0000000 0000000 00000000051 14326712445 0026335 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/301_creating_farm_with_policy_log_and_drop/req.out 0000664 0000000 0000000 00000000027 14326712445 0026373 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/302_farm_with_limit_and_verdict/ 0000775 0000000 0000000 00000000000 14326712445 0022653 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/302_farm_with_limit_and_verdict/data.json 0000664 0000000 0000000 00000000110 14326712445 0024447 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"new-rtlimit" : "20"
}
]
}
nftlb-1.0.7/tests/api/302_farm_with_limit_and_verdict/nft.out 0000664 0000000 0000000 00000004044 14326712445 0024175 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } log prefix "policy-BL-mylist-lb01 " drop
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
set new-rtlimit-lb01 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new add @new-rtlimit-lb01 { ip saddr limit rate over 20/second } log prefix "new-rtlimit-lb01 " drop
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/302_farm_with_limit_and_verdict/obj.out 0000664 0000000 0000000 00000005741 14326712445 0024165 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "20/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop ",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/302_farm_with_limit_and_verdict/req.api 0000775 0000000 0000000 00000000051 14326712445 0024134 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/302_farm_with_limit_and_verdict/req.out 0000664 0000000 0000000 00000000027 14326712445 0024172 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/303_setting_farm_with_verdict_only_log/ 0000775 0000000 0000000 00000000000 14326712445 0024273 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/303_setting_farm_with_verdict_only_log/data.json 0000664 0000000 0000000 00000000105 14326712445 0026073 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"verdict" : "log"
}
]
}
nftlb-1.0.7/tests/api/303_setting_farm_with_verdict_only_log/nft.out 0000664 0000000 0000000 00000004032 14326712445 0025612 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto lb01 }
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } log prefix "policy-BL-mylist-lb01 "
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
}
table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto filter-lb01 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 8080 : goto nat-lb01 }
}
map services-back-m {
type mark : ipv4_addr
}
set new-rtlimit-lb01 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-lb01 {
ct state new add @new-rtlimit-lb01 { ip saddr limit rate over 20/second } log prefix "new-rtlimit-lb01 "
ct state new ct mark 0x00000000 ct mark set numgen random mod 10 map { 0-4 : 0x80000001, 5-9 : 0x80000002 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-lb01 {
ip protocol tcp dnat ip to ct mark map { 0x80000001 : 172.16.138.202 . 80, 0x80000002 : 172.16.138.203 . 80 }
}
}
nftlb-1.0.7/tests/api/303_setting_farm_with_verdict_only_log/obj.out 0000664 0000000 0000000 00000005734 14326712445 0025607 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "8080",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "20/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log ",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "8080",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "172.16.138.202",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "172.16.138.203",
"port": "80",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/303_setting_farm_with_verdict_only_log/req.api 0000775 0000000 0000000 00000000051 14326712445 0025554 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/303_setting_farm_with_verdict_only_log/req.out 0000664 0000000 0000000 00000000027 14326712445 0025612 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/304_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/304_deleting_farms/nft.out 0000664 0000000 0000000 00000000231 14326712445 0021434 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/304_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021422 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/304_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021400 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/304_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/305_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020766 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/305_deleting_addresses/nft.out 0000664 0000000 0000000 00000000231 14326712445 0022302 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/305_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022265 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/305_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022255 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/305_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022305 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/306_create_farm/ 0000775 0000000 0000000 00000000000 14326712445 0017407 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/306_create_farm/data.json 0000664 0000000 0000000 00000001400 14326712445 0021206 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"family" : "ipv4",
"virtual-addr" : "192.168.0.100",
"virtual-ports" : "80",
"mode" : "dsr",
"protocol" : "tcp",
"scheduler" : "weight",
"persistence" : "srcip srcport",
"persist-ttl" : "50",
"state" : "up",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "192.168.0.10",
"ether-addr" : "02:02:02:02:02:02",
"port" : "10",
"weight" : "5",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "192.168.0.11",
"ether-addr" : "03:03:03:03:03:03",
"port" : "20",
"weight" : "5",
"priority" : "1",
"state" : "up"
}
],
"iface" : "lo",
"oface" : "lo",
"ether-addr" : "01:01:01:01:01:01"
}
]
}
nftlb-1.0.7/tests/api/306_create_farm/nft.out 0000664 0000000 0000000 00000002200 14326712445 0020721 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/306_create_farm/obj.out 0000664 0000000 0000000 00000005531 14326712445 0020716 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/306_create_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0020670 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/306_create_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0020726 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/307_set_blacklist/ 0000775 0000000 0000000 00000000000 14326712445 0017763 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/307_set_blacklist/data.json 0000664 0000000 0000000 00000000152 14326712445 0021565 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"policies" : [
{
"name" : "mylist"
}
]
}
]
}
nftlb-1.0.7/tests/api/307_set_blacklist/nft.out 0000664 0000000 0000000 00000002506 14326712445 0021306 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } log prefix "policy-BL-mylist-lb01 " drop
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/307_set_blacklist/obj.out 0000664 0000000 0000000 00000005757 14326712445 0021304 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/307_set_blacklist/req.api 0000775 0000000 0000000 00000000051 14326712445 0021244 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/307_set_blacklist/req.out 0000664 0000000 0000000 00000000027 14326712445 0021302 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/308_set_farm_limit/ 0000775 0000000 0000000 00000000000 14326712445 0020137 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/308_set_farm_limit/data.json 0000664 0000000 0000000 00000000075 14326712445 0021745 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "lb01", "new-rtlimit" : "10" } ] }
nftlb-1.0.7/tests/api/308_set_farm_limit/nft.out 0000664 0000000 0000000 00000002506 14326712445 0021462 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } log prefix "policy-BL-mylist-lb01 " drop
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/308_set_farm_limit/obj.out 0000664 0000000 0000000 00000005760 14326712445 0021452 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "10/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/308_set_farm_limit/req.api 0000775 0000000 0000000 00000000051 14326712445 0021420 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/308_set_farm_limit/req.out 0000664 0000000 0000000 00000000027 14326712445 0021456 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/309_set_farm_log_rtlimit_minute/ 0000775 0000000 0000000 00000000000 14326712445 0022730 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/309_set_farm_log_rtlimit_minute/data.json 0000664 0000000 0000000 00000000104 14326712445 0024527 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "lb01", "log-rtlimit" : "10/minute" } ] }
nftlb-1.0.7/tests/api/309_set_farm_log_rtlimit_minute/nft.out 0000664 0000000 0000000 00000002554 14326712445 0024256 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } jump {
limit rate 10/minute log prefix "policy-BL-mylist-lb01 "
drop
}
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/309_set_farm_log_rtlimit_minute/obj.out 0000664 0000000 0000000 00000005761 14326712445 0024244 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "10/minute",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "10/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/309_set_farm_log_rtlimit_minute/req.api 0000775 0000000 0000000 00000000051 14326712445 0024211 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/309_set_farm_log_rtlimit_minute/req.out 0000664 0000000 0000000 00000000027 14326712445 0024247 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/310_set_farm_log_rtlimit_hour_error/ 0000775 0000000 0000000 00000000000 14326712445 0023605 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/310_set_farm_log_rtlimit_hour_error/data.json 0000664 0000000 0000000 00000000103 14326712445 0025403 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "lb01", "log-rtlimit" : "10/hours" } ] }
nftlb-1.0.7/tests/api/310_set_farm_log_rtlimit_hour_error/nft.out 0000664 0000000 0000000 00000002554 14326712445 0025133 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } jump {
limit rate 10/minute log prefix "policy-BL-mylist-lb01 "
drop
}
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/310_set_farm_log_rtlimit_hour_error/obj.out 0000664 0000000 0000000 00000005761 14326712445 0025121 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "10/minute",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "10/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/310_set_farm_log_rtlimit_hour_error/req.api 0000775 0000000 0000000 00000000051 14326712445 0025066 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/310_set_farm_log_rtlimit_hour_error/req.out 0000664 0000000 0000000 00000000127 14326712445 0025125 0 ustar 00root root 0000000 0000000 {"response": "error parsing buffer. Parsing unknown value '10/hours' in 'log-rtlimit'"} nftlb-1.0.7/tests/api/311_set_farm_log_rtlimit_without_slash/ 0000775 0000000 0000000 00000000000 14326712445 0024315 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/311_set_farm_log_rtlimit_without_slash/data.json 0000664 0000000 0000000 00000000075 14326712445 0026123 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "lb01", "log-rtlimit" : "20" } ] }
nftlb-1.0.7/tests/api/311_set_farm_log_rtlimit_without_slash/nft.out 0000664 0000000 0000000 00000002554 14326712445 0025643 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set mylist {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
set mylist-lb01-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ip saddr @mylist add @mylist-lb01-cnt { ip saddr } jump {
limit rate 20/second log prefix "policy-BL-mylist-lb01 "
drop
}
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/311_set_farm_log_rtlimit_without_slash/obj.out 0000664 0000000 0000000 00000005761 14326712445 0025631 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "192.168.0.100",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip srcport ",
"persist-ttl": "50",
"helper": "none",
"log": "none",
"log-rtlimit": "20/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "10/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "192.168.0.100",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.0.10",
"port": "10",
"weight": "5",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.0.11",
"port": "20",
"weight": "5",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": [
{
"name": "mylist"
}
]
}
]
} nftlb-1.0.7/tests/api/311_set_farm_log_rtlimit_without_slash/req.api 0000775 0000000 0000000 00000000051 14326712445 0025576 0 ustar 00root root 0000000 0000000 VERB="POST"
URI="farms"
FILE="data.json"
nftlb-1.0.7/tests/api/311_set_farm_log_rtlimit_without_slash/req.out 0000664 0000000 0000000 00000000027 14326712445 0025634 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/312_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020616 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/312_deleting_policies/nft.out 0000664 0000000 0000000 00000001775 14326712445 0022150 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.0.100 . 80 : goto lb01 }
}
map static-sessions-lb01 {
type ipv4_addr . inet_service : ether_addr
}
map persist-lb01 {
type ipv4_addr . inet_service : ether_addr
size 65535
timeout 50s
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether type ip ether daddr set ip saddr . tcp sport map @static-sessions-lb01 ether saddr set 01:01:01:01:01:01 fwd to "lo"
ether type ip ether daddr set ip saddr . tcp sport map @persist-lb01 ether saddr set 01:01:01:01:01:01 update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
ether saddr set 01:01:01:01:01:01 ether daddr set numgen random mod 10 map { 0-4 : 02:02:02:02:02:02, 5-9 : 03:03:03:03:03:03 } ether type ip update @persist-lb01 { ip saddr . tcp sport : ether daddr } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/312_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022114 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/312_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022101 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/312_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022135 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/313_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/313_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021426 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/313_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021422 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/313_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021400 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/313_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/314_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020766 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/314_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022274 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/314_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022265 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/314_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022255 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/314_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022305 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/315_create_farm_local/ 0000775 0000000 0000000 00000000000 14326712445 0020561 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/315_create_farm_local/data.json 0000664 0000000 0000000 00000002343 14326712445 0022367 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "192.168.100.211",
"virtual-ports": "10",
"source-addr": "192.168.100.212",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept"
}
]
}
nftlb-1.0.7/tests/api/315_create_farm_local/nft.out 0000664 0000000 0000000 00000001640 14326712445 0022102 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.211 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/315_create_farm_local/obj.out 0000664 0000000 0000000 00000003452 14326712445 0022070 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "192.168.100.211",
"virtual-ports": "10",
"source-addr": "192.168.100.212",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "192.168.100.211",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/315_create_farm_local/req.api 0000775 0000000 0000000 00000000051 14326712445 0022042 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/315_create_farm_local/req.out 0000664 0000000 0000000 00000000027 14326712445 0022100 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/316_add_backend_local_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021516 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/316_add_backend_local_farm/data.json 0000664 0000000 0000000 00000001417 14326712445 0023325 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"source-addr": "192.168.100.212",
"weight": "1",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/316_add_backend_local_farm/nft.out 0000664 0000000 0000000 00000001716 14326712445 0023043 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.211 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/316_add_backend_local_farm/obj.out 0000664 0000000 0000000 00000004642 14326712445 0023027 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "192.168.100.211",
"virtual-ports": "10",
"source-addr": "192.168.100.212",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "192.168.100.211",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"source-addr": "192.168.100.212",
"weight": "1",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/316_add_backend_local_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0022777 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/316_add_backend_local_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023035 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/317_apply_farm_local/ 0000775 0000000 0000000 00000000000 14326712445 0020445 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/317_apply_farm_local/data.json 0000664 0000000 0000000 00000000250 14326712445 0022246 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farml7", "virtual-addr" : "192.168.100.211", "virtual-ports" : "10", "source-addr" : "192.168.100.212", "state" : "up", "mode" : "local" } ] }
nftlb-1.0.7/tests/api/317_apply_farm_local/nft.out 0000664 0000000 0000000 00000001716 14326712445 0021772 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.211 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/317_apply_farm_local/obj.out 0000664 0000000 0000000 00000004642 14326712445 0021756 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "192.168.100.211",
"virtual-ports": "10",
"source-addr": "192.168.100.212",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "192.168.100.211",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"source-addr": "192.168.100.212",
"weight": "1",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/317_apply_farm_local/req.api 0000775 0000000 0000000 00000000051 14326712445 0021726 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/317_apply_farm_local/req.out 0000664 0000000 0000000 00000000027 14326712445 0021764 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/318_apply_local_farm_limit/ 0000775 0000000 0000000 00000000000 14326712445 0021644 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/318_apply_local_farm_limit/data.json 0000664 0000000 0000000 00000000075 14326712445 0023452 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farml7", "new-rtlimit" : "10" } ] }
nftlb-1.0.7/tests/api/318_apply_local_farm_limit/nft.out 0000664 0000000 0000000 00000002243 14326712445 0023165 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.211 . 10 : goto filter-farml7 }
}
set new-rtlimit-farml7 {
type ipv4_addr
size 65535
flags dynamic,timeout
timeout 2m
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
ct state new add @new-rtlimit-farml7 { ip saddr limit rate over 10/second } log prefix "new-rtlimit-farml7 " drop
}
}
nftlb-1.0.7/tests/api/318_apply_local_farm_limit/obj.out 0000664 0000000 0000000 00000004643 14326712445 0023156 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "192.168.100.211",
"virtual-ports": "10",
"source-addr": "192.168.100.212",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "10/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "192.168.100.211",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"source-addr": "192.168.100.212",
"weight": "1",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/318_apply_local_farm_limit/req.api 0000775 0000000 0000000 00000000051 14326712445 0023125 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/318_apply_local_farm_limit/req.out 0000664 0000000 0000000 00000000027 14326712445 0023163 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/319_apply_local_farm_with_bcks/ 0000775 0000000 0000000 00000000000 14326712445 0022504 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/319_apply_local_farm_with_bcks/data.json 0000664 0000000 0000000 00000005555 14326712445 0024322 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "192.168.100.212",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.100.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x512",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck513",
"ip-addr": "192.168.100.252",
"port": "",
"source-addr": "",
"weight": "1",
"priority": "1",
"mark": "0x513",
"est-connlimit": "0",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/319_apply_local_farm_with_bcks/nft.out 0000664 0000000 0000000 00000001776 14326712445 0024037 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.212 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/319_apply_local_farm_with_bcks/obj.out 0000664 0000000 0000000 00000006710 14326712445 0024013 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "192.168.100.212",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "192.168.100.212",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"source-addr": "192.168.100.212",
"weight": "1",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck512",
"ip-addr": "192.168.100.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x512",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck513",
"ip-addr": "192.168.100.252",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x513",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/319_apply_local_farm_with_bcks/req.api 0000775 0000000 0000000 00000000051 14326712445 0023765 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/319_apply_local_farm_with_bcks/req.out 0000664 0000000 0000000 00000000027 14326712445 0024023 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/320_change_srcaddr_bck_local_farm/ 0000775 0000000 0000000 00000000000 14326712445 0023060 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/320_change_srcaddr_bck_local_farm/data.json 0000664 0000000 0000000 00000000260 14326712445 0024662 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farml7", "backends" : [ { "name" : "bck513", "ip-addr" : "192.168.101.252", "mark" : "513", "source-addr" : "192.168.101.210", "state": "up" } ] } ] }
nftlb-1.0.7/tests/api/320_change_srcaddr_bck_local_farm/nft.out 0000664 0000000 0000000 00000002004 14326712445 0024374 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.212 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/320_change_srcaddr_bck_local_farm/obj.out 0000664 0000000 0000000 00000007022 14326712445 0024364 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "192.168.100.212",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "192.168.100.212",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.253",
"port": "80",
"source-addr": "192.168.100.212",
"weight": "1",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck512",
"ip-addr": "192.168.100.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x512",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck513",
"ip-addr": "192.168.101.252",
"port": "",
"source-addr": "192.168.101.210",
"weight": "1",
"priority": "1",
"mark": "0x513",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/320_change_srcaddr_bck_local_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0024341 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/320_change_srcaddr_bck_local_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0024377 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/321_create_blacklist/ 0000775 0000000 0000000 00000000000 14326712445 0020427 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/321_create_blacklist/data.json 0000664 0000000 0000000 00000000167 14326712445 0022237 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"elements" : [
{
"data" : "35.195.60.76"
}
]
}
]
}
nftlb-1.0.7/tests/api/321_create_blacklist/nft.out 0000664 0000000 0000000 00000002237 14326712445 0021753 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.212 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/321_create_blacklist/obj.out 0000664 0000000 0000000 00000001177 14326712445 0021740 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/321_create_blacklist/req.api 0000775 0000000 0000000 00000000055 14326712445 0021714 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/321_create_blacklist/req.out 0000664 0000000 0000000 00000000027 14326712445 0021746 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/322_add_element/ 0000775 0000000 0000000 00000000000 14326712445 0017376 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/322_add_element/data.json 0000664 0000000 0000000 00000000167 14326712445 0021206 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"elements" : [
{
"data" : "35.195.60.77"
}
]
}
]
}
nftlb-1.0.7/tests/api/322_add_element/nft.out 0000664 0000000 0000000 00000002307 14326712445 0020720 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.212 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0, 35.195.60.77 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/322_add_element/obj.out 0000664 0000000 0000000 00000001601 14326712445 0020677 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/322_add_element/req.api 0000775 0000000 0000000 00000000055 14326712445 0020663 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/322_add_element/req.out 0000664 0000000 0000000 00000000027 14326712445 0020715 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/323_add_other_element/ 0000775 0000000 0000000 00000000000 14326712445 0020600 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/323_add_other_element/data.json 0000664 0000000 0000000 00000000167 14326712445 0022410 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"elements" : [
{
"data" : "35.195.60.78"
}
]
}
]
}
nftlb-1.0.7/tests/api/323_add_other_element/nft.out 0000664 0000000 0000000 00000002367 14326712445 0022130 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.212 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0, 35.195.60.77 counter packets 0 bytes 0,
35.195.60.78 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/323_add_other_element/obj.out 0000664 0000000 0000000 00000002203 14326712445 0022100 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.78",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/323_add_other_element/req.api 0000775 0000000 0000000 00000000055 14326712445 0022065 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/323_add_other_element/req.out 0000664 0000000 0000000 00000000027 14326712445 0022117 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/324_add_element_localhost/ 0000775 0000000 0000000 00000000000 14326712445 0021450 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/324_add_element_localhost/data.json 0000664 0000000 0000000 00000000164 14326712445 0023255 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "black001",
"elements" : [
{
"data" : "127.0.0.1"
}
]
}
]
}
nftlb-1.0.7/tests/api/324_add_element_localhost/nft.out 0000664 0000000 0000000 00000002434 14326712445 0022773 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.100.212 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0, 35.195.60.77 counter packets 0 bytes 0,
35.195.60.78 counter packets 0 bytes 0, 127.0.0.1 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/324_add_element_localhost/obj.out 0000664 0000000 0000000 00000002602 14326712445 0022753 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.78",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "127.0.0.1",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/324_add_element_localhost/req.api 0000775 0000000 0000000 00000000055 14326712445 0022735 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/324_add_element_localhost/req.out 0000664 0000000 0000000 00000000027 14326712445 0022767 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/325_assign_policy_farm_localhost/ 0000775 0000000 0000000 00000000000 14326712445 0023060 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/325_assign_policy_farm_localhost/data.json 0000664 0000000 0000000 00000000240 14326712445 0024660 0 ustar 00root root 0000000 0000000 {
"farms" : [ {
"name" : "farml7",
"virtual-addr" : "127.0.0.1",
"virtual-ports" : "80",
"policies" : [
{
"name" : "black001"
}
]
}
]
}
nftlb-1.0.7/tests/api/325_assign_policy_farm_localhost/nft.out 0000664 0000000 0000000 00000003436 14326712445 0024406 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0, 35.195.60.77 counter packets 0 bytes 0,
35.195.60.78 counter packets 0 bytes 0, 127.0.0.1 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto farml7 }
}
set black001-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain farml7 {
ip saddr @black001 add @black001-farml7-cnt { ip saddr } log prefix "policy-BL-black001-farml7 " drop
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/325_assign_policy_farm_localhost/obj.out 0000664 0000000 0000000 00000002602 14326712445 0024363 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "1",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.78",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "127.0.0.1",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/325_assign_policy_farm_localhost/req.api 0000775 0000000 0000000 00000000055 14326712445 0024345 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/325_assign_policy_farm_localhost/req.out 0000664 0000000 0000000 00000000027 14326712445 0024377 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/326_get_policy_counter/ 0000775 0000000 0000000 00000000000 14326712445 0021036 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/326_get_policy_counter/nft.out 0000664 0000000 0000000 00000003565 14326712445 0022367 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0, 35.195.60.77 counter packets 0 bytes 0,
35.195.60.78 counter packets 0 bytes 0, 127.0.0.1 counter packets 2 bytes 120 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto farml7 }
}
set black001-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
elements = { 127.0.0.1 counter packets 2 bytes 120 timeout 2m expires 1m57s956ms }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain farml7 {
ip saddr @black001 add @black001-farml7-cnt { ip saddr } log prefix "policy-BL-black001-farml7 " drop
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/326_get_policy_counter/obj.out 0000664 0000000 0000000 00000002604 14326712445 0022343 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "1",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.78",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "127.0.0.1",
"counter-packets": "2",
"counter-bytes": "120"
}
]
}
]
} nftlb-1.0.7/tests/api/326_get_policy_counter/pre.sh 0000775 0000000 0000000 00000000165 14326712445 0022165 0 ustar 00root root 0000000 0000000 #!/bin/bash
logger ">> PRE"
timeout 2s nc 127.0.0.1 80
nft list set netdev nftlb black001 | logger
logger "PRE <<"
nftlb-1.0.7/tests/api/326_get_policy_counter/req.api 0000775 0000000 0000000 00000000033 14326712445 0022317 0 ustar 00root root 0000000 0000000 VERB="GET"
URI="policies"
nftlb-1.0.7/tests/api/326_get_policy_counter/req.out 0000664 0000000 0000000 00000002604 14326712445 0022360 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "1",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "35.195.60.78",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "127.0.0.1",
"counter-packets": "2",
"counter-bytes": "120"
}
]
}
]
} nftlb-1.0.7/tests/api/327_policy_delete_elements/ 0000775 0000000 0000000 00000000000 14326712445 0021657 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/327_policy_delete_elements/nft.out 0000664 0000000 0000000 00000003151 14326712445 0023177 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto farml7 }
}
set black001-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain farml7 {
ip saddr @black001 add @black001-farml7-cnt { ip saddr } log prefix "policy-BL-black001-farml7 " drop
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/327_policy_delete_elements/obj.out 0000664 0000000 0000000 00000000545 14326712445 0023166 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "1",
"elements": []
}
]
} nftlb-1.0.7/tests/api/327_policy_delete_elements/req.api 0000775 0000000 0000000 00000000060 14326712445 0023140 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies/black001/elements"
nftlb-1.0.7/tests/api/327_policy_delete_elements/req.out 0000664 0000000 0000000 00000000027 14326712445 0023176 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/328_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020625 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/328_deleting_policies/nft.out 0000664 0000000 0000000 00000001776 14326712445 0022160 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000203 : 192.168.100.212, 0x00000512 : 127.0.0.1, 0x00000513 : 192.168.101.210 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/328_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022123 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/328_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022110 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/328_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022144 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/329_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020127 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/329_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021435 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/329_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021431 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/329_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021407 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/329_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021446 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/330_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020764 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/330_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022272 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/330_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022263 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/330_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022253 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/330_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022303 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/331_create_farm_service_back/ 0000775 0000000 0000000 00000000000 14326712445 0022105 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/331_create_farm_service_back/data.json 0000664 0000000 0000000 00000003776 14326712445 0023726 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "dragonspeech-poc", "family": "ipv4", "virtual-addr": "10.248.18.52", "virtual-ports": "443", "source-addr": "10.248.18.152", "mode": "snat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "srcip ", "persist-ttl": "60", "helper": "none", "log": "forward ", "log-prefix": "l4:dragonspeech-poc ", "mark": "0x0", "priority": "1", "state": "up", "limits-ttl": "120", "verdict": "forward log drop accept", "backends": [ { "name": "bck0", "ip-addr": "10.222.1.52", "port": "443", "weight": "1", "priority": "1", "mark": "0x202", "est-connlimit": "0", "state": "up" }, { "name": "bck1", "ip-addr": "10.222.1.53", "port": "443", "weight": "1", "priority": "1", "mark": "0x203", "est-connlimit": "0", "state": "up" } ] } ]}
nftlb-1.0.7/tests/api/331_create_farm_service_back/nft.out 0000664 0000000 0000000 00000004006 14326712445 0023425 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.248.18.52 . 443 : goto filter-dragonspeech-poc }
}
map static-sessions-dragonspeech-poc {
type ipv4_addr : mark
}
map persist-dragonspeech-poc {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.248.18.52 . 443 : goto nat-dragonspeech-poc }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 10.248.18.152, 0x00000203 : 10.248.18.152 }
}
map forward-proto-services {
type mark : verdict
elements = { 0x00000202 : goto forward-dragonspeech-poc, 0x00000203 : goto forward-dragonspeech-poc }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-dragonspeech-poc {
ct mark set ip saddr map @static-sessions-dragonspeech-poc accept
ct state new ct mark set ip saddr map @persist-dragonspeech-poc
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x00000202, 1 : 0x00000203 }
ct mark != 0x00000000 update @persist-dragonspeech-poc { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-dragonspeech-poc {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 10.222.1.52 . 443, 0x00000203 : 10.222.1.53 . 443 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
}
chain forward-dragonspeech-poc {
log prefix "l4:dragonspeech-poc "
}
}
nftlb-1.0.7/tests/api/331_create_farm_service_back/obj.out 0000664 0000000 0000000 00000005675 14326712445 0023425 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "dragonspeech-poc",
"family": "ipv4",
"virtual-addr": "10.248.18.52",
"virtual-ports": "443",
"source-addr": "10.248.18.152",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:dragonspeech-poc ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "dragonspeech-poc-addr",
"family": "ipv4",
"ip-addr": "10.248.18.52",
"ports": "443",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.222.1.52",
"port": "443",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.222.1.53",
"port": "443",
"weight": "1",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/331_create_farm_service_back/req.api 0000775 0000000 0000000 00000000051 14326712445 0023366 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/331_create_farm_service_back/req.out 0000664 0000000 0000000 00000000027 14326712445 0023424 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/332_create_farm_no_port_service_back/ 0000775 0000000 0000000 00000000000 14326712445 0023646 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/332_create_farm_no_port_service_back/data.json 0000664 0000000 0000000 00000003757 14326712445 0025466 0 ustar 00root root 0000000 0000000 { "farms": [ {
"name": "tsthcmapp",
"family": "ipv4",
"virtual-addr": "10.248.18.59",
"virtual-ports": "",
"source-addr": "10.248.18.152",
"mode": "snat",
"protocol": "all", "scheduler": "weight", "sched-param": "none", "persistence": "srcip ", "persist-ttl": "60", "helper": "none", "log": "forward ", "log-prefix": "l4:tsthcmapp ", "mark": "0x0", "priority": "1", "state": "up", "limits-ttl": "120", "verdict": "forward log drop accept", "backends": [ { "name": "bck0", "ip-addr": "10.222.1.75", "port": "", "weight": "1", "priority": "1", "mark": "0x205", "est-connlimit": "0", "state": "up" }, { "name": "bck1", "ip-addr": "10.222.1.76", "port": "", "weight": "10", "priority": "1", "mark": "0x206", "est-connlimit": "0", "state": "up" } ] } ]}
nftlb-1.0.7/tests/api/332_create_farm_no_port_service_back/nft.out 0000664 0000000 0000000 00000006606 14326712445 0025176 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.248.18.52 . 443 : goto filter-dragonspeech-poc }
}
map static-sessions-dragonspeech-poc {
type ipv4_addr : mark
}
map persist-dragonspeech-poc {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 10.248.18.52 . 443 : goto nat-dragonspeech-poc }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000202 : 10.248.18.152, 0x00000203 : 10.248.18.152, 0x00000205 : 10.248.18.152, 0x00000206 : 10.248.18.152 }
}
map forward-proto-services {
type mark : verdict
elements = { 0x00000202 : goto forward-dragonspeech-poc, 0x00000203 : goto forward-dragonspeech-poc }
}
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 10.248.18.59 : goto filter-tsthcmapp,
udp . 10.248.18.59 : goto filter-tsthcmapp,
sctp . 10.248.18.59 : goto filter-tsthcmapp }
}
map static-sessions-tsthcmapp {
type ipv4_addr : mark
}
map persist-tsthcmapp {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 10.248.18.59 : goto nat-tsthcmapp,
udp . 10.248.18.59 : goto nat-tsthcmapp,
sctp . 10.248.18.59 : goto nat-tsthcmapp }
}
map forward-services {
type mark : verdict
elements = { 0x00000205 : goto forward-tsthcmapp, 0x00000206 : goto forward-tsthcmapp }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
ip protocol . ip daddr vmap @filter-services
}
chain filter-dragonspeech-poc {
ct mark set ip saddr map @static-sessions-dragonspeech-poc accept
ct state new ct mark set ip saddr map @persist-dragonspeech-poc
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x00000202, 1 : 0x00000203 }
ct mark != 0x00000000 update @persist-dragonspeech-poc { ip saddr : ct mark }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-dragonspeech-poc {
ip protocol tcp dnat ip to ct mark map { 0x00000202 : 10.222.1.52 . 443, 0x00000203 : 10.222.1.53 . 443 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-proto-services
ct mark vmap @forward-services
}
chain forward-dragonspeech-poc {
log prefix "l4:dragonspeech-poc "
}
chain filter-tsthcmapp {
ct mark set ip saddr map @static-sessions-tsthcmapp accept
ct state new ct mark set ip saddr map @persist-tsthcmapp
ct state new ct mark 0x00000000 ct mark set numgen random mod 11 map { 0 : 0x00000205, 1-10 : 0x00000206 }
ct mark != 0x00000000 update @persist-tsthcmapp { ip saddr : ct mark }
}
chain nat-tsthcmapp {
dnat to ct mark map { 0x00000205 : 10.222.1.75, 0x00000206 : 10.222.1.76 }
}
chain forward-tsthcmapp {
log prefix "l4:tsthcmapp "
}
}
nftlb-1.0.7/tests/api/332_create_farm_no_port_service_back/obj.out 0000664 0000000 0000000 00000013473 14326712445 0025161 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "dragonspeech-poc",
"family": "ipv4",
"virtual-addr": "10.248.18.52",
"virtual-ports": "443",
"source-addr": "10.248.18.152",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:dragonspeech-poc ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "dragonspeech-poc-addr",
"family": "ipv4",
"ip-addr": "10.248.18.52",
"ports": "443",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.222.1.52",
"port": "443",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.222.1.53",
"port": "443",
"weight": "1",
"priority": "1",
"mark": "0x203",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "tsthcmapp",
"family": "ipv4",
"virtual-addr": "10.248.18.59",
"virtual-ports": "",
"source-addr": "10.248.18.152",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:tsthcmapp ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "tsthcmapp-addr",
"family": "ipv4",
"ip-addr": "10.248.18.59",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.222.1.75",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x205",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.222.1.76",
"port": "",
"weight": "10",
"priority": "1",
"mark": "0x206",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/332_create_farm_no_port_service_back/req.api 0000775 0000000 0000000 00000000051 14326712445 0025127 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/332_create_farm_no_port_service_back/req.out 0000664 0000000 0000000 00000000027 14326712445 0025165 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/333_deleting_farm_different_proto/ 0000775 0000000 0000000 00000000000 14326712445 0023210 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/333_deleting_farm_different_proto/nft.out 0000664 0000000 0000000 00000003770 14326712445 0024537 0 ustar 00root root 0000000 0000000 table ip nftlb {
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000205 : 10.248.18.152, 0x00000206 : 10.248.18.152 }
}
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 10.248.18.59 : goto filter-tsthcmapp,
udp . 10.248.18.59 : goto filter-tsthcmapp,
sctp . 10.248.18.59 : goto filter-tsthcmapp }
}
map static-sessions-tsthcmapp {
type ipv4_addr : mark
}
map persist-tsthcmapp {
type ipv4_addr : mark
size 65535
timeout 1m
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 10.248.18.59 : goto nat-tsthcmapp,
udp . 10.248.18.59 : goto nat-tsthcmapp,
sctp . 10.248.18.59 : goto nat-tsthcmapp }
}
map forward-services {
type mark : verdict
elements = { 0x00000205 : goto forward-tsthcmapp, 0x00000206 : goto forward-tsthcmapp }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-services
}
chain filter-tsthcmapp {
ct mark set ip saddr map @static-sessions-tsthcmapp accept
ct state new ct mark set ip saddr map @persist-tsthcmapp
ct state new ct mark 0x00000000 ct mark set numgen random mod 11 map { 0 : 0x00000205, 1-10 : 0x00000206 }
ct mark != 0x00000000 update @persist-tsthcmapp { ip saddr : ct mark }
}
chain nat-tsthcmapp {
dnat to ct mark map { 0x00000205 : 10.222.1.75, 0x00000206 : 10.222.1.76 }
}
chain forward-tsthcmapp {
log prefix "l4:tsthcmapp "
}
}
nftlb-1.0.7/tests/api/333_deleting_farm_different_proto/obj.out 0000664 0000000 0000000 00000005635 14326712445 0024524 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "tsthcmapp",
"family": "ipv4",
"virtual-addr": "10.248.18.59",
"virtual-ports": "",
"source-addr": "10.248.18.152",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:tsthcmapp ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "tsthcmapp-addr",
"family": "ipv4",
"ip-addr": "10.248.18.59",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "10.222.1.75",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x205",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "10.222.1.76",
"port": "",
"weight": "10",
"priority": "1",
"mark": "0x206",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/333_deleting_farm_different_proto/req.api 0000775 0000000 0000000 00000000053 14326712445 0024473 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms/dragonspeech-poc"
nftlb-1.0.7/tests/api/333_deleting_farm_different_proto/req.out 0000664 0000000 0000000 00000000027 14326712445 0024527 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/334_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020123 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/334_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021431 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/334_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021425 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/334_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021403 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/334_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021442 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/335_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020623 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/335_deleting_policies/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022131 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/335_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022121 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/335_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022106 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/335_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022142 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/336_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020772 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/336_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022300 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/336_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022271 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/336_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022261 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/336_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022311 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/337_create_whitelists/ 0000775 0000000 0000000 00000000000 14326712445 0020665 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/337_create_whitelists/data.json 0000664 0000000 0000000 00000000776 14326712445 0022503 0 ustar 00root root 0000000 0000000 {
"policies" : [
{
"name" : "white001",
"type" : "whitelist",
"elements" : [
{
"data" : "35.195.60.76"
}
]
},
{
"name" : "black001",
"type" : "blacklist",
"elements" : [
{
"data" : "35.195.60.77"
}
]
},
{
"name" : "black002",
"type" : "blacklist",
"elements" : [
{
"data" : "35.195.60.79"
}
]
},
{
"name" : "white002",
"type" : "whitelist",
"elements" : [
{
"data" : "35.195.60.78"
}
]
}
]
}
nftlb-1.0.7/tests/api/337_create_whitelists/nft.out 0000664 0000000 0000000 00000001052 14326712445 0022203 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set white001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.77 counter packets 0 bytes 0 }
}
set black002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.79 counter packets 0 bytes 0 }
}
set white002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.78 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/337_create_whitelists/obj.out 0000664 0000000 0000000 00000004626 14326712445 0022200 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "white001",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
}
]
},
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
}
]
},
{
"name": "black002",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.79",
"counter-packets": "0",
"counter-bytes": "0"
}
]
},
{
"name": "white002",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.78",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/337_create_whitelists/req.api 0000775 0000000 0000000 00000000055 14326712445 0022152 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/337_create_whitelists/req.out 0000664 0000000 0000000 00000000027 14326712445 0022204 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/338_assign_whitelists_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021714 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/338_assign_whitelists_farm/data.json 0000664 0000000 0000000 00000002601 14326712445 0023517 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "10",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"policies": [
{
"name": "white001"
},
{
"name": "black001"
},
{
"name": "black002"
},
{
"name": "white002"
}
]
}
]
}
nftlb-1.0.7/tests/api/338_assign_whitelists_farm/nft.out 0000664 0000000 0000000 00000005114 14326712445 0023235 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set white001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.77 counter packets 0 bytes 0 }
}
set black002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.79 counter packets 0 bytes 0 }
}
set white002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.78 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto farml7 }
}
set white001-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
set black001-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
set black002-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
set white002-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain farml7 {
ip saddr @white001 add @white001-farml7-cnt { ip saddr } log prefix "policy-WL-white001-farml7 " accept
ip saddr @black001 add @black001-farml7-cnt { ip saddr } log prefix "policy-BL-black001-farml7 " drop
ip saddr @black002 add @black002-farml7-cnt { ip saddr } log prefix "policy-BL-black002-farml7 " drop
ip saddr @white002 add @white002-farml7-cnt { ip saddr } log prefix "policy-WL-white002-farml7 " accept
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/338_assign_whitelists_farm/obj.out 0000664 0000000 0000000 00000004460 14326712445 0023223 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "10",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": [
{
"name": "white001"
},
{
"name": "black001"
},
{
"name": "black002"
},
{
"name": "white002"
}
]
}
]
} nftlb-1.0.7/tests/api/338_assign_whitelists_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0023175 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/338_assign_whitelists_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023233 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/339_delete_white_from_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021637 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/339_delete_white_from_farm/nft.out 0000664 0000000 0000000 00000004566 14326712445 0023172 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set white001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.77 counter packets 0 bytes 0 }
}
set black002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.79 counter packets 0 bytes 0 }
}
set white002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.78 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto farml7 }
}
set black001-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
set black002-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
set white002-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain farml7 {
ip saddr @black001 add @black001-farml7-cnt { ip saddr } log prefix "policy-BL-black001-farml7 " drop
ip saddr @black002 add @black002-farml7-cnt { ip saddr } log prefix "policy-BL-black002-farml7 " drop
ip saddr @white002 add @white002-farml7-cnt { ip saddr } log prefix "policy-WL-white002-farml7 " accept
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/339_delete_white_from_farm/obj.out 0000664 0000000 0000000 00000004260 14326712445 0023144 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "10",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": [
{
"name": "black001"
},
{
"name": "black002"
},
{
"name": "white002"
}
]
}
]
} nftlb-1.0.7/tests/api/339_delete_white_from_farm/req.api 0000775 0000000 0000000 00000000104 14326712445 0023117 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/farml7/policies/white001"
nftlb-1.0.7/tests/api/339_delete_white_from_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023156 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/340_delete_second_white_from_farm/ 0000775 0000000 0000000 00000000000 14326712445 0023162 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/340_delete_second_white_from_farm/nft.out 0000664 0000000 0000000 00000004240 14326712445 0024502 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set white001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.77 counter packets 0 bytes 0 }
}
set black002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.79 counter packets 0 bytes 0 }
}
set white002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.78 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto farml7 }
}
set black001-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
set black002-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain farml7 {
ip saddr @black001 add @black001-farml7-cnt { ip saddr } log prefix "policy-BL-black001-farml7 " drop
ip saddr @black002 add @black002-farml7-cnt { ip saddr } log prefix "policy-BL-black002-farml7 " drop
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/340_delete_second_white_from_farm/obj.out 0000664 0000000 0000000 00000004060 14326712445 0024465 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "10",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": [
{
"name": "black001"
},
{
"name": "black002"
}
]
}
]
} nftlb-1.0.7/tests/api/340_delete_second_white_from_farm/req.api 0000775 0000000 0000000 00000000104 14326712445 0024442 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/farml7/policies/white002"
nftlb-1.0.7/tests/api/340_delete_second_white_from_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0024501 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/341_delete_black_from_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021564 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/341_delete_black_from_farm/nft.out 0000664 0000000 0000000 00000003714 14326712445 0023111 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set white001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.77 counter packets 0 bytes 0 }
}
set black002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.79 counter packets 0 bytes 0 }
}
set white002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.78 counter packets 0 bytes 0 }
}
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto farml7 }
}
set black002-farml7-cnt {
type ipv4_addr
size 65535
flags dynamic,timeout
counter
timeout 2m
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain farml7 {
ip saddr @black002 add @black002-farml7-cnt { ip saddr } log prefix "policy-BL-black002-farml7 " drop
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/341_delete_black_from_farm/obj.out 0000664 0000000 0000000 00000003660 14326712445 0023074 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "10",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": [
{
"name": "black002"
}
]
}
]
} nftlb-1.0.7/tests/api/341_delete_black_from_farm/req.api 0000775 0000000 0000000 00000000104 14326712445 0023044 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/farml7/policies/black001"
nftlb-1.0.7/tests/api/341_delete_black_from_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023103 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/342_delete_second_black_from_farm/ 0000775 0000000 0000000 00000000000 14326712445 0023120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/342_delete_second_black_from_farm/nft.out 0000664 0000000 0000000 00000002704 14326712445 0024443 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set white001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.77 counter packets 0 bytes 0 }
}
set black002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.79 counter packets 0 bytes 0 }
}
set white002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.78 counter packets 0 bytes 0 }
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/342_delete_second_black_from_farm/obj.out 0000664 0000000 0000000 00000003430 14326712445 0024423 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farml7",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "10",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farml7-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "10",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/342_delete_second_black_from_farm/req.api 0000775 0000000 0000000 00000000104 14326712445 0024400 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/farml7/policies/black002"
nftlb-1.0.7/tests/api/342_delete_second_black_from_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0024437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/343_delete_whitelist_policy/ 0000775 0000000 0000000 00000000000 14326712445 0022055 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/343_delete_whitelist_policy/nft.out 0000664 0000000 0000000 00000002477 14326712445 0023407 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set white001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.76 counter packets 0 bytes 0 }
}
set black001 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.77 counter packets 0 bytes 0 }
}
set black002 {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 35.195.60.79 counter packets 0 bytes 0 }
}
}
table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/343_delete_whitelist_policy/obj.out 0000664 0000000 0000000 00000003471 14326712445 0023365 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "white001",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.76",
"counter-packets": "0",
"counter-bytes": "0"
}
]
},
{
"name": "black001",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.77",
"counter-packets": "0",
"counter-bytes": "0"
}
]
},
{
"name": "black002",
"family": "ipv4",
"type": "blacklist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": [
{
"data": "35.195.60.79",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/343_delete_whitelist_policy/req.api 0000775 0000000 0000000 00000000067 14326712445 0023345 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="policies/white002"
nftlb-1.0.7/tests/api/343_delete_whitelist_policy/req.out 0000664 0000000 0000000 00000000027 14326712445 0023374 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/344_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020623 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/344_deleting_policies/nft.out 0000664 0000000 0000000 00000001632 14326712445 0022145 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 10 : goto filter-farml7 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-farml7 {
}
}
nftlb-1.0.7/tests/api/344_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022121 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/344_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022106 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/344_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022142 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/345_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020125 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/345_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021433 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/345_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021427 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/345_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021405 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/345_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021444 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/346_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020773 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/346_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022301 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/346_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022272 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/346_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022262 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/346_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022312 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/347_create_farm_local/ 0000775 0000000 0000000 00000000000 14326712445 0020566 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/347_create_farm_local/data.json 0000664 0000000 0000000 00000000411 14326712445 0022366 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "127.0.0.1", "virtual-ports" : "80", "source-addr" : "127.0.0.1", "mode" : "local", "backends" : [ { "name" : "bck512", "ip-addr" : "192.168.104.254", "mark" : "0x200", "source-addr" : "", "state": "up" } ] } ] }
nftlb-1.0.7/tests/api/347_create_farm_local/nft.out 0000664 0000000 0000000 00000001704 14326712445 0022110 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
}
nftlb-1.0.7/tests/api/347_create_farm_local/obj.out 0000664 0000000 0000000 00000004510 14326712445 0022071 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/347_create_farm_local/req.api 0000775 0000000 0000000 00000000051 14326712445 0022047 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/347_create_farm_local/req.out 0000664 0000000 0000000 00000000027 14326712445 0022105 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/348_create_farm_l4/ 0000775 0000000 0000000 00000000000 14326712445 0020014 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/348_create_farm_l4/data.json 0000664 0000000 0000000 00000000255 14326712445 0021622 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "virtual-addr" : "127.0.0.1", "virtual-ports" : "90", "protocol" : "tcp", "mode" : "snat", "scheduler" : "weight", "state" : "up" } ] }
nftlb-1.0.7/tests/api/348_create_farm_l4/nft.out 0000664 0000000 0000000 00000002247 14326712445 0021341 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm,
tcp . 127.0.0.1 . 90 : goto filter-newl4farm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-newl4farm {
}
}
nftlb-1.0.7/tests/api/348_create_farm_l4/obj.out 0000664 0000000 0000000 00000010101 14326712445 0021310 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "90",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/348_create_farm_l4/req.api 0000775 0000000 0000000 00000000051 14326712445 0021275 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/348_create_farm_l4/req.out 0000664 0000000 0000000 00000000027 14326712445 0021333 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/349_load_address_farm_l4/ 0000775 0000000 0000000 00000000000 14326712445 0021176 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/349_load_address_farm_l4/data.json 0000664 0000000 0000000 00000002602 14326712445 0023002 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "newl4farm", "family": "ipv4", "virtual-addr": "127.0.0.1", "virtual-ports": "90", "source-addr": "", "mode": "snat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "none", "persist-ttl": "60", "helper": "none", "log": "none", "log-rtlimit": "0/second", "mark": "0x0", "priority": "1", "state": "up", "limits-ttl": "120", "verdict": "log drop accept", "addresses": [ { "name": "newl4farm-addr", "family": "ipv4", "ip-addr": "127.0.0.1", "ports": "90", "protocol": "tcp", "used": "1" } ], "backends": [] } ]}
nftlb-1.0.7/tests/api/349_load_address_farm_l4/nft.out 0000664 0000000 0000000 00000002247 14326712445 0022523 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm,
tcp . 127.0.0.1 . 90 : goto filter-newl4farm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-newl4farm {
}
}
nftlb-1.0.7/tests/api/349_load_address_farm_l4/obj.out 0000664 0000000 0000000 00000010101 14326712445 0022472 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "90",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/349_load_address_farm_l4/req.api 0000775 0000000 0000000 00000000051 14326712445 0022457 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/349_load_address_farm_l4/req.out 0000664 0000000 0000000 00000000027 14326712445 0022515 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/350_up_farm_l4/ 0000775 0000000 0000000 00000000000 14326712445 0017166 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/350_up_farm_l4/data.json 0000664 0000000 0000000 00000000073 14326712445 0020772 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "state" : "up" } ] }
nftlb-1.0.7/tests/api/350_up_farm_l4/nft.out 0000664 0000000 0000000 00000002247 14326712445 0020513 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm,
tcp . 127.0.0.1 . 90 : goto filter-newl4farm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-newl4farm {
}
}
nftlb-1.0.7/tests/api/350_up_farm_l4/obj.out 0000664 0000000 0000000 00000010101 14326712445 0020462 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "90",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/350_up_farm_l4/req.api 0000775 0000000 0000000 00000000051 14326712445 0020447 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/350_up_farm_l4/req.out 0000664 0000000 0000000 00000000027 14326712445 0020505 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/351_source_address_farm_l4/ 0000775 0000000 0000000 00000000000 14326712445 0021550 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/351_source_address_farm_l4/data.json 0000664 0000000 0000000 00000000107 14326712445 0023352 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "source-addr" : "127.0.0.1" } ] }
nftlb-1.0.7/tests/api/351_source_address_farm_l4/nft.out 0000664 0000000 0000000 00000002156 14326712445 0023074 0 ustar 00root root 0000000 0000000 table ip nftlb {
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm,
tcp . 127.0.0.1 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 90 : goto nat-newl4farm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newl4farm {
}
chain nat-newl4farm {
}
}
nftlb-1.0.7/tests/api/351_source_address_farm_l4/obj.out 0000664 0000000 0000000 00000010112 14326712445 0023046 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "90",
"source-addr": "127.0.0.1",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/351_source_address_farm_l4/req.api 0000775 0000000 0000000 00000000051 14326712445 0023031 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/351_source_address_farm_l4/req.out 0000664 0000000 0000000 00000000027 14326712445 0023067 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/352_add_backend_farm_l4/ 0000775 0000000 0000000 00000000000 14326712445 0020743 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/352_add_backend_farm_l4/data.json 0000664 0000000 0000000 00000000240 14326712445 0022543 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "backends" : [ { "name" : "bck0", "ip-addr" : "192.168.104.254", "port" : "80", "mark" : "0x201", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/352_add_backend_farm_l4/nft.out 0000664 0000000 0000000 00000002456 14326712445 0022272 0 ustar 00root root 0000000 0000000 table ip nftlb {
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1, 0x00000201 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm,
tcp . 127.0.0.1 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 90 : goto nat-newl4farm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000201 }
}
chain nat-newl4farm {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/352_add_backend_farm_l4/obj.out 0000664 0000000 0000000 00000011170 14326712445 0022246 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "90",
"source-addr": "127.0.0.1",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/352_add_backend_farm_l4/req.api 0000775 0000000 0000000 00000000051 14326712445 0022224 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/352_add_backend_farm_l4/req.out 0000664 0000000 0000000 00000000027 14326712445 0022262 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/353_add_backend_farm_local/ 0000775 0000000 0000000 00000000000 14326712445 0021517 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/353_add_backend_farm_local/data.json 0000664 0000000 0000000 00000000411 14326712445 0023317 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "127.0.0.1", "virtual-ports" : "80", "source-addr" : "127.0.0.1", "mode" : "local", "backends" : [ { "name" : "bck512", "ip-addr" : "192.168.104.254", "mark" : "0x200", "source-addr" : "", "state": "up" } ] } ] }
nftlb-1.0.7/tests/api/353_add_backend_farm_local/nft.out 0000664 0000000 0000000 00000002456 14326712445 0023046 0 ustar 00root root 0000000 0000000 table ip nftlb {
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1, 0x00000201 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm,
tcp . 127.0.0.1 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 90 : goto nat-newl4farm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000201 }
}
chain nat-newl4farm {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/353_add_backend_farm_local/obj.out 0000664 0000000 0000000 00000011170 14326712445 0023022 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "127.0.0.1",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "90",
"source-addr": "127.0.0.1",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/353_add_backend_farm_local/req.api 0000775 0000000 0000000 00000000051 14326712445 0023000 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/353_add_backend_farm_local/req.out 0000664 0000000 0000000 00000000027 14326712445 0023036 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/354_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020624 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/354_deleting_policies/nft.out 0000664 0000000 0000000 00000002456 14326712445 0022153 0 ustar 00root root 0000000 0000000 table ip nftlb {
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 127.0.0.1, 0x00000201 : 127.0.0.1 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-newfarm,
tcp . 127.0.0.1 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 90 : goto nat-newl4farm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000201 }
}
chain nat-newl4farm {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/354_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022122 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/354_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022107 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/354_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022143 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/355_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020126 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/355_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021434 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/355_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021430 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/355_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021406 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/355_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021445 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/356_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020774 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/356_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022302 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/356_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022273 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/356_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022263 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/356_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022313 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/357_create_l4_farm/ 0000775 0000000 0000000 00000000000 14326712445 0020014 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/357_create_l4_farm/data.json 0000664 0000000 0000000 00000000254 14326712445 0021621 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "l4-port0", "virtual-addr" : "127.0.0.1", "virtual-ports" : "80", "protocol" : "tcp", "mode" : "snat", "scheduler" : "weight", "state" : "up" } ] }
nftlb-1.0.7/tests/api/357_create_l4_farm/nft.out 0000664 0000000 0000000 00000002053 14326712445 0021334 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-l4-port0 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-l4-port0 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4-port0 {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4-port0 {
}
}
nftlb-1.0.7/tests/api/357_create_l4_farm/obj.out 0000664 0000000 0000000 00000003426 14326712445 0021324 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4-port0",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4-port0-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/357_create_l4_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0021275 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/357_create_l4_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0021333 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/358_create_bck_without_port/ 0000775 0000000 0000000 00000000000 14326712445 0022057 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/358_create_bck_without_port/data.json 0000664 0000000 0000000 00000000235 14326712445 0023663 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "l4-port0", "backends" : [ { "name" : "bck0", "ip-addr" : "192.168.101.254", "port" : "", "mark" : "0x206", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/358_create_bck_without_port/nft.out 0000664 0000000 0000000 00000002222 14326712445 0023375 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-l4-port0 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-l4-port0 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4-port0 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x80000206 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4-port0 {
ip protocol tcp dnat to ct mark map { 0x80000206 : 192.168.101.254 }
}
}
nftlb-1.0.7/tests/api/358_create_bck_without_port/obj.out 0000664 0000000 0000000 00000004502 14326712445 0023363 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4-port0",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4-port0-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x206",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/358_create_bck_without_port/req.api 0000775 0000000 0000000 00000000051 14326712445 0023340 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/358_create_bck_without_port/req.out 0000664 0000000 0000000 00000000027 14326712445 0023376 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/359_create_bck_with_port/ 0000775 0000000 0000000 00000000000 14326712445 0021330 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/359_create_bck_with_port/data.json 0000664 0000000 0000000 00000000237 14326712445 0023136 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "l4-port0", "backends" : [ { "name" : "bck1", "ip-addr" : "192.168.101.253", "port" : "80", "mark" : "0x205", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/359_create_bck_with_port/nft.out 0000664 0000000 0000000 00000002300 14326712445 0022643 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-l4-port0 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-l4-port0 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4-port0 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x80000206, 1 : 0x80000205 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4-port0 {
ip protocol tcp dnat to ct mark map { 0x80000205 : 192.168.101.253, 0x80000206 : 192.168.101.254 }
}
}
nftlb-1.0.7/tests/api/359_create_bck_with_port/obj.out 0000664 0000000 0000000 00000005530 14326712445 0022636 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4-port0",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4-port0-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x206",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.101.253",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x205",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/359_create_bck_with_port/req.api 0000775 0000000 0000000 00000000051 14326712445 0022611 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/359_create_bck_with_port/req.out 0000664 0000000 0000000 00000000027 14326712445 0022647 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/360_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020621 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/360_deleting_policies/nft.out 0000664 0000000 0000000 00000002300 14326712445 0022134 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-l4-port0 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-l4-port0 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4-port0 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x80000206, 1 : 0x80000205 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4-port0 {
ip protocol tcp dnat to ct mark map { 0x80000205 : 192.168.101.253, 0x80000206 : 192.168.101.254 }
}
}
nftlb-1.0.7/tests/api/360_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022117 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/360_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022104 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/360_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022140 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/361_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020123 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/361_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021431 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/361_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021425 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/361_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021403 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/361_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021442 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/362_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0020771 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/362_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022277 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/362_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022270 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/362_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022260 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/362_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022310 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/363_create_whitelist/ 0000775 0000000 0000000 00000000000 14326712445 0020501 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/363_create_whitelist/data.json 0000664 0000000 0000000 00000000105 14326712445 0022301 0 ustar 00root root 0000000 0000000 {"policies" : [ { "name" : "blacklist1", "type" : "whitelist" } ] }
nftlb-1.0.7/tests/api/363_create_whitelist/nft.out 0000664 0000000 0000000 00000000145 14326712445 0022021 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set blacklist1 {
type ipv4_addr
flags interval
counter
auto-merge
}
}
nftlb-1.0.7/tests/api/363_create_whitelist/obj.out 0000664 0000000 0000000 00000000547 14326712445 0022012 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "blacklist1",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": []
}
]
} nftlb-1.0.7/tests/api/363_create_whitelist/req.api 0000775 0000000 0000000 00000000054 14326712445 0021765 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/363_create_whitelist/req.out 0000664 0000000 0000000 00000000027 14326712445 0022020 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/364_add_logprefix_whitelist/ 0000775 0000000 0000000 00000000000 14326712445 0022046 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/364_add_logprefix_whitelist/data.json 0000664 0000000 0000000 00000000127 14326712445 0023652 0 ustar 00root root 0000000 0000000 {"policies" : [ { "name" : "blacklist1", "log-prefix" : "[WL,blacklist1,FNAME]" } ] }
nftlb-1.0.7/tests/api/364_add_logprefix_whitelist/nft.out 0000664 0000000 0000000 00000000145 14326712445 0023366 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set blacklist1 {
type ipv4_addr
flags interval
counter
auto-merge
}
}
nftlb-1.0.7/tests/api/364_add_logprefix_whitelist/obj.out 0000664 0000000 0000000 00000000646 14326712445 0023357 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "blacklist1",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"log-prefix": "[WL,blacklist1,FNAME]",
"used": "0",
"elements": []
}
]
} nftlb-1.0.7/tests/api/364_add_logprefix_whitelist/req.api 0000775 0000000 0000000 00000000054 14326712445 0023332 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/364_add_logprefix_whitelist/req.out 0000664 0000000 0000000 00000000027 14326712445 0023365 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/ 0000775 0000000 0000000 00000000000 14326712445 0026767 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/002/ 0000775 0000000 0000000 00000000000 14326712445 0027270 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/002/data.json 0000664 0000000 0000000 00000000127 14326712445 0031074 0 ustar 00root root 0000000 0000000 {"policies" : [ { "name" : "blacklist1", "log-prefix" : "[WL,blacklist1,FNAME]" } ] }
nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/002/nft.out 0000664 0000000 0000000 00000002103 14326712445 0030604 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto filter-l4-port0 }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto nat-l4-port0 }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4-port0 {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x80000206 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4-port0 {
ip protocol tcp dnat to ct mark map { 0x80000206 : 192.168.101.254 }
}
}
nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/002/obj.out 0000664 0000000 0000000 00000004464 14326712445 0030603 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4-port0",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4-port0-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.101.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x206",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/002/req.api 0000775 0000000 0000000 00000000051 14326712445 0030551 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/002/req.out 0000664 0000000 0000000 00000000027 14326712445 0030607 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/data.json 0000664 0000000 0000000 00000000266 14326712445 0030577 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "farmdslb", "virtual-addr" : "222.222.222.222", "virtual-ports" : "", "protocol" : "all", "mode" : "local", "policies" : [ { "name" : "blacklist1" } ] } ] }
nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/nft.out 0000664 0000000 0000000 00000001060 14326712445 0030304 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set blacklist1 {
type ipv4_addr
flags interval
counter
auto-merge
}
}
table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 222.222.222.222 : goto filter-farmdslb,
udp . 222.222.222.222 : goto filter-farmdslb,
sctp . 222.222.222.222 : goto filter-farmdslb }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-farmdslb {
}
}
nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/obj.out 0000664 0000000 0000000 00000003677 14326712445 0030307 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "farmdslb",
"family": "ipv4",
"virtual-addr": "222.222.222.222",
"virtual-ports": "",
"source-addr": "",
"mode": "local",
"protocol": "all",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "config_error",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "farmdslb-addr",
"family": "ipv4",
"ip-addr": "222.222.222.222",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [],
"policies": [
{
"name": "blacklist1"
}
]
}
]
} nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/req.api 0000775 0000000 0000000 00000000051 14326712445 0030250 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/365_create_farm_with_whitelist_no_configured_ipaddr/req.out 0000664 0000000 0000000 00000000027 14326712445 0030306 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/366_create_new_whitelist/ 0000775 0000000 0000000 00000000000 14326712445 0021355 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/366_create_new_whitelist/data.json 0000664 0000000 0000000 00000000105 14326712445 0023155 0 ustar 00root root 0000000 0000000 {"policies" : [ { "name" : "blacklist2", "type" : "whitelist" } ] }
nftlb-1.0.7/tests/api/366_create_new_whitelist/nft.out 0000664 0000000 0000000 00000001177 14326712445 0022703 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set blacklist1 {
type ipv4_addr
flags interval
counter
auto-merge
}
set blacklist2 {
type ipv4_addr
flags interval
counter
auto-merge
}
}
table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 222.222.222.222 : goto filter-farmdslb,
udp . 222.222.222.222 : goto filter-farmdslb,
sctp . 222.222.222.222 : goto filter-farmdslb }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-farmdslb {
}
}
nftlb-1.0.7/tests/api/366_create_new_whitelist/obj.out 0000664 0000000 0000000 00000001353 14326712445 0022662 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "blacklist1",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"log-prefix": "[WL,blacklist1,FNAME]",
"used": "1",
"elements": []
},
{
"name": "blacklist2",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"used": "0",
"elements": []
}
]
} nftlb-1.0.7/tests/api/366_create_new_whitelist/req.api 0000775 0000000 0000000 00000000054 14326712445 0022641 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/366_create_new_whitelist/req.out 0000664 0000000 0000000 00000000027 14326712445 0022674 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/367_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020630 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/367_deleting_policies/nft.out 0000664 0000000 0000000 00000000713 14326712445 0022151 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 222.222.222.222 : goto filter-farmdslb,
udp . 222.222.222.222 : goto filter-farmdslb,
sctp . 222.222.222.222 : goto filter-farmdslb }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-farmdslb {
}
}
nftlb-1.0.7/tests/api/367_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022126 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/367_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022113 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/367_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022147 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/368_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020132 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/368_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021440 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/368_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021434 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/368_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021412 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/368_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021451 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/369_deleting_addresses/ 0000775 0000000 0000000 00000000000 14326712445 0021000 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/369_deleting_addresses/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022306 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/369_deleting_addresses/obj.out 0000664 0000000 0000000 00000000033 14326712445 0022277 0 ustar 00root root 0000000 0000000 {
"addresses": []
} nftlb-1.0.7/tests/api/369_deleting_addresses/req.api 0000775 0000000 0000000 00000000057 14326712445 0022267 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="addresses"
nftlb-1.0.7/tests/api/369_deleting_addresses/req.out 0000664 0000000 0000000 00000000027 14326712445 0022317 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/370_create_farm_proto_all/ 0000775 0000000 0000000 00000000000 14326712445 0021463 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/370_create_farm_proto_all/data.json 0000664 0000000 0000000 00000001723 14326712445 0023272 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "l4farm", "family": "ipv4", "virtual-addr": "192.168.102.242", "virtual-ports": "", "source-addr": "192.168.102.242", "mode": "snat", "protocol": "all", "scheduler": "weight", "sched-param": "none", "persistence": "none", "persist-ttl": "60", "helper": "none", "log": "forward ", "log-prefix": "l4:l4farm ", "log-rtlimit": "0/second", "mark": "0x0", "priority": "1", "state": "up", "limits-ttl": "120", "verdict": "log drop accept", "addresses": [ { "name": "l4farm-addr", "family": "ipv4", "ip-addr": "192.168.102.242", "ports": "", "protocol": "all", "used": "1" } ], "backends": [ { "name": "bck0", "ip-addr": "192.168.100.254", "port": "80", "source-addr": "192.168.100.242", "weight": "1", "priority": "2", "mark": "0x207", "est-connlimit": "0", "state": "up" }, { "name": "bck1", "ip-addr": "192.168.101.254", "port": "", "source-addr": "192.168.101.242", "weight": "3", "priority": "1", "mark": "0x208", "est-connlimit": "0", "state": "up" } ] } ]}
nftlb-1.0.7/tests/api/370_create_farm_proto_all/nft.out 0000664 0000000 0000000 00000003065 14326712445 0023007 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto filter-l4farm,
udp . 192.168.102.242 : goto filter-l4farm,
sctp . 192.168.102.242 : goto filter-l4farm }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto nat-l4farm,
udp . 192.168.102.242 : goto nat-l4farm,
sctp . 192.168.102.242 : goto nat-l4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000208 : 192.168.101.242 }
}
map forward-services {
type mark : verdict
elements = { 0x00000208 : goto forward-l4farm }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-l4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 3 map { 0-2 : 0x00000208 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4farm {
dnat to ct mark map { 0x00000208 : 192.168.101.254 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-services
}
chain forward-l4farm {
log prefix "l4:l4farm "
}
}
nftlb-1.0.7/tests/api/370_create_farm_proto_all/obj.out 0000664 0000000 0000000 00000006076 14326712445 0022777 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4farm",
"family": "ipv4",
"virtual-addr": "192.168.102.242",
"virtual-ports": "",
"source-addr": "192.168.102.242",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:l4farm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.102.242",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"source-addr": "192.168.100.242",
"weight": "1",
"priority": "2",
"mark": "0x207",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "",
"source-addr": "192.168.101.242",
"weight": "3",
"priority": "1",
"mark": "0x208",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/370_create_farm_proto_all/req.api 0000775 0000000 0000000 00000000051 14326712445 0022744 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/370_create_farm_proto_all/req.out 0000664 0000000 0000000 00000000027 14326712445 0023002 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/371_create_farm_tcp_with_port/ 0000775 0000000 0000000 00000000000 14326712445 0022356 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/371_create_farm_tcp_with_port/data.json 0000664 0000000 0000000 00000000256 14326712445 0024165 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "asdf", "virtual-addr" : "192.168.101.242", "virtual-ports" : "31", "protocol" : "tcp", "mode" : "snat", "scheduler" : "weight", "state" : "up" } ] }
nftlb-1.0.7/tests/api/371_create_farm_tcp_with_port/nft.out 0000664 0000000 0000000 00000004102 14326712445 0023673 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto filter-l4farm,
udp . 192.168.102.242 : goto filter-l4farm,
sctp . 192.168.102.242 : goto filter-l4farm }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto nat-l4farm,
udp . 192.168.102.242 : goto nat-l4farm,
sctp . 192.168.102.242 : goto nat-l4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000208 : 192.168.101.242 }
}
map forward-services {
type mark : verdict
elements = { 0x00000208 : goto forward-l4farm }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.242 . 31 : goto filter-asdf }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.242 . 31 : goto nat-asdf }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 3 map { 0-2 : 0x00000208 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4farm {
dnat to ct mark map { 0x00000208 : 192.168.101.254 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-services
}
chain forward-l4farm {
log prefix "l4:l4farm "
}
chain filter-asdf {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-asdf {
}
}
nftlb-1.0.7/tests/api/371_create_farm_tcp_with_port/obj.out 0000664 0000000 0000000 00000011471 14326712445 0023665 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4farm",
"family": "ipv4",
"virtual-addr": "192.168.102.242",
"virtual-ports": "",
"source-addr": "192.168.102.242",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:l4farm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.102.242",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"source-addr": "192.168.100.242",
"weight": "1",
"priority": "2",
"mark": "0x207",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "",
"source-addr": "192.168.101.242",
"weight": "3",
"priority": "1",
"mark": "0x208",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "asdf",
"family": "ipv4",
"virtual-addr": "192.168.101.242",
"virtual-ports": "31",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "asdf-addr",
"family": "ipv4",
"ip-addr": "192.168.101.242",
"ports": "31",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/371_create_farm_tcp_with_port/req.api 0000775 0000000 0000000 00000000051 14326712445 0023637 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/371_create_farm_tcp_with_port/req.out 0000664 0000000 0000000 00000000027 14326712445 0023675 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/372_farm_with_port_down/ 0000775 0000000 0000000 00000000000 14326712445 0021215 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/372_farm_with_port_down/data.json 0000664 0000000 0000000 00000000064 14326712445 0023021 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "asdf", "state": "down" } ]}
nftlb-1.0.7/tests/api/372_farm_with_port_down/nft.out 0000664 0000000 0000000 00000003065 14326712445 0022541 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto filter-l4farm,
udp . 192.168.102.242 : goto filter-l4farm,
sctp . 192.168.102.242 : goto filter-l4farm }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto nat-l4farm,
udp . 192.168.102.242 : goto nat-l4farm,
sctp . 192.168.102.242 : goto nat-l4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000208 : 192.168.101.242 }
}
map forward-services {
type mark : verdict
elements = { 0x00000208 : goto forward-l4farm }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-l4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 3 map { 0-2 : 0x00000208 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4farm {
dnat to ct mark map { 0x00000208 : 192.168.101.254 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-services
}
chain forward-l4farm {
log prefix "l4:l4farm "
}
}
nftlb-1.0.7/tests/api/372_farm_with_port_down/obj.out 0000664 0000000 0000000 00000011473 14326712445 0022526 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4farm",
"family": "ipv4",
"virtual-addr": "192.168.102.242",
"virtual-ports": "",
"source-addr": "192.168.102.242",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:l4farm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.102.242",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"source-addr": "192.168.100.242",
"weight": "1",
"priority": "2",
"mark": "0x207",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "",
"source-addr": "192.168.101.242",
"weight": "3",
"priority": "1",
"mark": "0x208",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "asdf",
"family": "ipv4",
"virtual-addr": "192.168.101.242",
"virtual-ports": "31",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "down",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "asdf-addr",
"family": "ipv4",
"ip-addr": "192.168.101.242",
"ports": "31",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/372_farm_with_port_down/req.api 0000775 0000000 0000000 00000000051 14326712445 0022476 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/372_farm_with_port_down/req.out 0000664 0000000 0000000 00000000027 14326712445 0022534 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/373_farm_with_port_up/ 0000775 0000000 0000000 00000000000 14326712445 0020673 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/373_farm_with_port_up/data.json 0000664 0000000 0000000 00000001066 14326712445 0022502 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "asdf", "family": "ipv4", "virtual-addr": "192.168.101.242", "virtual-ports": "31", "source-addr": "", "mode": "snat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "none", "persist-ttl": "60", "helper": "none", "log": "none", "log-rtlimit": "0/second", "mark": "0x0", "priority": "1", "state": "up", "limits-ttl": "120", "verdict": "log drop accept", "addresses": [ { "name": "asdf-addr", "family": "ipv4", "ip-addr": "192.168.101.242", "ports": "31", "protocol": "tcp", "used": "1" } ], "backends": [] } ]}
nftlb-1.0.7/tests/api/373_farm_with_port_up/nft.out 0000664 0000000 0000000 00000004102 14326712445 0022210 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto filter-l4farm,
udp . 192.168.102.242 : goto filter-l4farm,
sctp . 192.168.102.242 : goto filter-l4farm }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto nat-l4farm,
udp . 192.168.102.242 : goto nat-l4farm,
sctp . 192.168.102.242 : goto nat-l4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000208 : 192.168.101.242 }
}
map forward-services {
type mark : verdict
elements = { 0x00000208 : goto forward-l4farm }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.242 . 31 : goto filter-asdf }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.242 . 31 : goto nat-asdf }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 3 map { 0-2 : 0x00000208 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4farm {
dnat to ct mark map { 0x00000208 : 192.168.101.254 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-services
}
chain forward-l4farm {
log prefix "l4:l4farm "
}
chain filter-asdf {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-asdf {
}
}
nftlb-1.0.7/tests/api/373_farm_with_port_up/obj.out 0000664 0000000 0000000 00000011471 14326712445 0022202 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4farm",
"family": "ipv4",
"virtual-addr": "192.168.102.242",
"virtual-ports": "",
"source-addr": "192.168.102.242",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:l4farm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.102.242",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"source-addr": "192.168.100.242",
"weight": "1",
"priority": "2",
"mark": "0x207",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "",
"source-addr": "192.168.101.242",
"weight": "3",
"priority": "1",
"mark": "0x208",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "asdf",
"family": "ipv4",
"virtual-addr": "192.168.101.242",
"virtual-ports": "31",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "asdf-addr",
"family": "ipv4",
"ip-addr": "192.168.101.242",
"ports": "31",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/373_farm_with_port_up/req.api 0000775 0000000 0000000 00000000051 14326712445 0022154 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/373_farm_with_port_up/req.out 0000664 0000000 0000000 00000000027 14326712445 0022212 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/374_change_virtaddr_farm_with_port/ 0000775 0000000 0000000 00000000000 14326712445 0023374 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/374_change_virtaddr_farm_with_port/data.json 0000664 0000000 0000000 00000000106 14326712445 0025175 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "asdf", "virtual-addr": "192.168.101.243" } ]}
nftlb-1.0.7/tests/api/374_change_virtaddr_farm_with_port/nft.out 0000664 0000000 0000000 00000004102 14326712445 0024711 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto filter-l4farm,
udp . 192.168.102.242 : goto filter-l4farm,
sctp . 192.168.102.242 : goto filter-l4farm }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto nat-l4farm,
udp . 192.168.102.242 : goto nat-l4farm,
sctp . 192.168.102.242 : goto nat-l4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000208 : 192.168.101.242 }
}
map forward-services {
type mark : verdict
elements = { 0x00000208 : goto forward-l4farm }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.243 . 31 : goto filter-asdf }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.243 . 31 : goto nat-asdf }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 3 map { 0-2 : 0x00000208 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4farm {
dnat to ct mark map { 0x00000208 : 192.168.101.254 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-services
}
chain forward-l4farm {
log prefix "l4:l4farm "
}
chain filter-asdf {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-asdf {
}
}
nftlb-1.0.7/tests/api/374_change_virtaddr_farm_with_port/obj.out 0000664 0000000 0000000 00000011471 14326712445 0024703 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4farm",
"family": "ipv4",
"virtual-addr": "192.168.102.242",
"virtual-ports": "",
"source-addr": "192.168.102.242",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:l4farm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.102.242",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"source-addr": "192.168.100.242",
"weight": "1",
"priority": "2",
"mark": "0x207",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "",
"source-addr": "192.168.101.242",
"weight": "3",
"priority": "1",
"mark": "0x208",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "asdf",
"family": "ipv4",
"virtual-addr": "192.168.101.243",
"virtual-ports": "31",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "asdf-addr",
"family": "ipv4",
"ip-addr": "192.168.101.243",
"ports": "31",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/374_change_virtaddr_farm_with_port/req.api 0000775 0000000 0000000 00000000051 14326712445 0024655 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/374_change_virtaddr_farm_with_port/req.out 0000664 0000000 0000000 00000000027 14326712445 0024713 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/375_add_backend_with_forward/ 0000775 0000000 0000000 00000000000 14326712445 0022123 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/375_add_backend_with_forward/data.json 0000664 0000000 0000000 00000001407 14326712445 0023731 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4farm",
"backends": [
{
"name": "bck2",
"ip-addr": "192.168.102.254",
"port": "80",
"source-addr": "192.168.102.242",
"weight": "1",
"priority": "1",
"mark": "0x209",
"est-connlimit": "0",
"state": "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/375_add_backend_with_forward/nft.out 0000664 0000000 0000000 00000004260 14326712445 0023445 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto filter-l4farm,
udp . 192.168.102.242 : goto filter-l4farm,
sctp . 192.168.102.242 : goto filter-l4farm }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.102.242 : goto nat-l4farm,
udp . 192.168.102.242 : goto nat-l4farm,
sctp . 192.168.102.242 : goto nat-l4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000208 : 192.168.101.242, 0x00000209 : 192.168.102.242 }
}
map forward-services {
type mark : verdict
elements = { 0x00000208 : goto forward-l4farm, 0x00000209 : goto forward-l4farm }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.243 . 31 : goto filter-asdf }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.101.243 . 31 : goto nat-asdf }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-l4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 4 map { 0-2 : 0x00000208, 3 : 0x00000209 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-l4farm {
dnat to ct mark map { 0x00000208 : 192.168.101.254, 0x00000209 : 192.168.102.254 }
}
chain forward {
type filter hook forward priority -100; policy accept;
ct mark vmap @forward-services
}
chain forward-l4farm {
log prefix "l4:l4farm "
}
chain filter-asdf {
ct state new ct mark 0x00000000 ct mark set 0x80000000
}
chain nat-asdf {
}
}
nftlb-1.0.7/tests/api/375_add_backend_with_forward/obj.out 0000664 0000000 0000000 00000012631 14326712445 0023431 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "l4farm",
"family": "ipv4",
"virtual-addr": "192.168.102.242",
"virtual-ports": "",
"source-addr": "192.168.102.242",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "forward ",
"log-prefix": "l4:l4farm ",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "l4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.102.242",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"source-addr": "192.168.100.242",
"weight": "1",
"priority": "2",
"mark": "0x207",
"est-connlimit": "0",
"state": "available"
},
{
"name": "bck1",
"ip-addr": "192.168.101.254",
"port": "",
"source-addr": "192.168.101.242",
"weight": "3",
"priority": "1",
"mark": "0x208",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck2",
"ip-addr": "192.168.102.254",
"port": "80",
"source-addr": "192.168.102.242",
"weight": "1",
"priority": "1",
"mark": "0x209",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "asdf",
"family": "ipv4",
"virtual-addr": "192.168.101.243",
"virtual-ports": "31",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "asdf-addr",
"family": "ipv4",
"ip-addr": "192.168.101.243",
"ports": "31",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/375_add_backend_with_forward/req.api 0000775 0000000 0000000 00000000051 14326712445 0023404 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/375_add_backend_with_forward/req.out 0000664 0000000 0000000 00000000027 14326712445 0023442 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/376_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020131 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/376_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021437 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/376_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021433 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/376_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021411 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/376_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021450 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/377_create_farm_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0021136 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/377_create_farm_newfarm/data.json 0000664 0000000 0000000 00000000417 14326712445 0022744 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "virtual-addr" : "192.168.1.73", "virtual-ports" : "80", "source-addr" : "192.168.1.73", "mode" : "local", "backends" : [ { "name" : "bck512", "ip-addr" : "192.168.104.254", "mark" : "0x200", "source-addr" : "", "state": "up" } ] } ] }
nftlb-1.0.7/tests/api/377_create_farm_newfarm/nft.out 0000664 0000000 0000000 00000001712 14326712445 0022457 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.1.73 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.73 . 80 : goto filter-newfarm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
}
nftlb-1.0.7/tests/api/377_create_farm_newfarm/obj.out 0000664 0000000 0000000 00000004521 14326712445 0022443 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.1.73",
"virtual-ports": "80",
"source-addr": "192.168.1.73",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.1.73",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/377_create_farm_newfarm/req.api 0000775 0000000 0000000 00000000052 14326712445 0022420 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/377_create_farm_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0022455 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/378_create_farm_newfarm4/ 0000775 0000000 0000000 00000000000 14326712445 0021223 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/378_create_farm_newfarm4/data.json 0000664 0000000 0000000 00000003674 14326712445 0023041 0 ustar 00root root 0000000 0000000 { "farms": [ { "name": "newfarm4", "family": "ipv4", "virtual-addr": "192.168.1.73", "virtual-ports": "9898", "source-addr": "192.168.1.73", "mode": "snat", "protocol": "tcp", "scheduler": "weight", "sched-param": "none", "persistence": "srcip ", "persist-ttl": "120", "helper": "none", "log": "none", "log-rtlimit": "0/second", "mark": "0x0", "priority": "1", "state": "up", "limits-ttl": "120", "verdict": "log drop accept", "addresses": [ { "name": "newfarm4-addr", "family": "ipv4", "ip-addr": "192.168.1.73", "ports": "9898", "protocol": "tcp", "used": "1" } ], "backends": [ { "name": "bck0", "ip-addr": "192.168.104.254", "port": "80", "weight": "1", "priority": "1", "mark": "0x201", "est-connlimit": "0", "state": "up" } ] } ]}
nftlb-1.0.7/tests/api/378_create_farm_newfarm4/nft.out 0000664 0000000 0000000 00000003205 14326712445 0022543 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.73 . 9898 : goto nat-newfarm4 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.1.73, 0x00000201 : 192.168.1.73 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.73 . 80 : goto filter-newfarm,
tcp . 192.168.1.73 . 9898 : goto filter-newfarm4 }
}
map static-sessions-newfarm4 {
type ipv4_addr : mark
}
map persist-newfarm4 {
type ipv4_addr : mark
size 65535
timeout 2m
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newfarm4 {
ct mark set ip saddr map @static-sessions-newfarm4 accept
ct state new ct mark set ip saddr map @persist-newfarm4
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000201 }
ct mark != 0x00000000 update @persist-newfarm4 { ip saddr : ct mark }
}
chain nat-newfarm4 {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/378_create_farm_newfarm4/obj.out 0000664 0000000 0000000 00000011217 14326712445 0022530 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.1.73",
"virtual-ports": "80",
"source-addr": "192.168.1.73",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.1.73",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newfarm4",
"family": "ipv4",
"virtual-addr": "192.168.1.73",
"virtual-ports": "9898",
"source-addr": "192.168.1.73",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm4-addr",
"family": "ipv4",
"ip-addr": "192.168.1.73",
"ports": "9898",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/378_create_farm_newfarm4/req.api 0000775 0000000 0000000 00000000051 14326712445 0022504 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/378_create_farm_newfarm4/req.out 0000664 0000000 0000000 00000000027 14326712445 0022542 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/379_newfarm4_bck_up/ 0000775 0000000 0000000 00000000000 14326712445 0020217 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/379_newfarm4_bck_up/data.json 0000664 0000000 0000000 00000000137 14326712445 0022024 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm4", "backends" : [ { "name" : "bck0", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/379_newfarm4_bck_up/nft.out 0000664 0000000 0000000 00000003205 14326712445 0021537 0 ustar 00root root 0000000 0000000 table ip nftlb {
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.73 . 9898 : goto nat-newfarm4 }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.1.73, 0x00000201 : 192.168.1.73 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.73 . 80 : goto filter-newfarm,
tcp . 192.168.1.73 . 9898 : goto filter-newfarm4 }
}
map static-sessions-newfarm4 {
type ipv4_addr : mark
}
map persist-newfarm4 {
type ipv4_addr : mark
size 65535
timeout 2m
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
chain filter-newfarm4 {
ct mark set ip saddr map @static-sessions-newfarm4 accept
ct state new ct mark set ip saddr map @persist-newfarm4
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000201 }
ct mark != 0x00000000 update @persist-newfarm4 { ip saddr : ct mark }
}
chain nat-newfarm4 {
ip protocol tcp dnat ip to ct mark map { 0x00000201 : 192.168.104.254 . 80 }
}
}
nftlb-1.0.7/tests/api/379_newfarm4_bck_up/obj.out 0000664 0000000 0000000 00000011217 14326712445 0021524 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.1.73",
"virtual-ports": "80",
"source-addr": "192.168.1.73",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.1.73",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newfarm4",
"family": "ipv4",
"virtual-addr": "192.168.1.73",
"virtual-ports": "9898",
"source-addr": "192.168.1.73",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm4-addr",
"family": "ipv4",
"ip-addr": "192.168.1.73",
"ports": "9898",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/379_newfarm4_bck_up/req.api 0000775 0000000 0000000 00000000051 14326712445 0021500 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/379_newfarm4_bck_up/req.out 0000664 0000000 0000000 00000000027 14326712445 0021536 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/380_newfarm4_state_down/ 0000775 0000000 0000000 00000000000 14326712445 0021113 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/380_newfarm4_state_down/data.json 0000664 0000000 0000000 00000000074 14326712445 0022720 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm4", "state" : "down" } ] }
nftlb-1.0.7/tests/api/380_newfarm4_state_down/nft.out 0000664 0000000 0000000 00000001470 14326712445 0022435 0 ustar 00root root 0000000 0000000 table ip nftlb {
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.1.73 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.73 . 80 : goto filter-newfarm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
}
nftlb-1.0.7/tests/api/380_newfarm4_state_down/obj.out 0000664 0000000 0000000 00000011221 14326712445 0022413 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.1.73",
"virtual-ports": "80",
"source-addr": "192.168.1.73",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.1.73",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
},
{
"name": "newfarm4",
"family": "ipv4",
"virtual-addr": "192.168.1.73",
"virtual-ports": "9898",
"source-addr": "192.168.1.73",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "srcip ",
"persist-ttl": "120",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "down",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm4-addr",
"family": "ipv4",
"ip-addr": "192.168.1.73",
"ports": "9898",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.104.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/380_newfarm4_state_down/req.api 0000775 0000000 0000000 00000000051 14326712445 0022374 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/380_newfarm4_state_down/req.out 0000664 0000000 0000000 00000000027 14326712445 0022432 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/381_delete_newfarm4/ 0000775 0000000 0000000 00000000000 14326712445 0020207 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/381_delete_newfarm4/data.json 0000664 0000000 0000000 00000000000 14326712445 0022001 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/381_delete_newfarm4/nft.out 0000664 0000000 0000000 00000001470 14326712445 0021531 0 ustar 00root root 0000000 0000000 table ip nftlb {
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.1.73 }
}
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.1.73 . 80 : goto filter-newfarm }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
}
}
nftlb-1.0.7/tests/api/381_delete_newfarm4/obj.out 0000664 0000000 0000000 00000004521 14326712445 0021514 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.1.73",
"virtual-ports": "80",
"source-addr": "192.168.1.73",
"mode": "local",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.1.73",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck512",
"ip-addr": "192.168.104.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/381_delete_newfarm4/req.api 0000775 0000000 0000000 00000000064 14326712445 0021474 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/newfarm4"
nftlb-1.0.7/tests/api/381_delete_newfarm4/req.out 0000664 0000000 0000000 00000000027 14326712445 0021526 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/382_delete_newfarm/ 0000775 0000000 0000000 00000000000 14326712445 0020124 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/382_delete_newfarm/data.json 0000664 0000000 0000000 00000000000 14326712445 0021716 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/382_delete_newfarm/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021432 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/382_delete_newfarm/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021426 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/382_delete_newfarm/req.api 0000775 0000000 0000000 00000000063 14326712445 0021410 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="DELETE"
URI="farms/newfarm"
nftlb-1.0.7/tests/api/382_delete_newfarm/req.out 0000664 0000000 0000000 00000000027 14326712445 0021443 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/383_create_farm_dsr_with_bcks/ 0000775 0000000 0000000 00000000000 14326712445 0022321 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/383_create_farm_dsr_with_bcks/data.json 0000664 0000000 0000000 00000001151 14326712445 0024123 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"state" : "up",
"mode" : "dsr",
"family" : "ipv4",
"virtual-addr" : "127.0.0.1",
"ether-addr" : "01:01:01:01:01:01",
"virtual-ports" : "80",
"protocol" : "tcp",
"scheduler" : "hash",
"backends" : [
{
"name" : "bck0",
"ip-addr" : "127.0.0.1",
"ether-addr" : "01:01:01:01:01:01",
"weight" : "1",
"priority" : "1",
"state" : "up"
},
{
"name" : "bck1",
"ip-addr" : "127.0.0.1",
"ether-addr" : "01:01:01:01:01:01",
"weight" : "1",
"priority" : "1",
"state" : "up"
}
]
}
]
}
nftlb-1.0.7/tests/api/383_create_farm_dsr_with_bcks/nft.out 0000664 0000000 0000000 00000000720 14326712445 0023640 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 2 map { 0 : 01:01:01:01:01:01, 1 : 01:01:01:01:01:01 } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/383_create_farm_dsr_with_bcks/obj.out 0000664 0000000 0000000 00000005475 14326712445 0023637 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.1",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "127.0.0.1",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/383_create_farm_dsr_with_bcks/req.api 0000775 0000000 0000000 00000000051 14326712445 0023602 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/383_create_farm_dsr_with_bcks/req.out 0000664 0000000 0000000 00000000027 14326712445 0023640 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/384_set_bck0_maintenance/ 0000775 0000000 0000000 00000000000 14326712445 0021201 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/384_set_bck0_maintenance/data.json 0000664 0000000 0000000 00000000176 14326712445 0023011 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck0",
"state" : "off"
}
]
}
]
}
nftlb-1.0.7/tests/api/384_set_bck0_maintenance/nft.out 0000664 0000000 0000000 00000000671 14326712445 0022525 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
ether saddr set 01:01:01:01:01:01 ether daddr set jhash ip saddr mod 1 map { 0 : 01:01:01:01:01:01 } fwd to "lo"
}
}
nftlb-1.0.7/tests/api/384_set_bck0_maintenance/obj.out 0000664 0000000 0000000 00000005476 14326712445 0022520 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.1",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck1",
"ip-addr": "127.0.0.1",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/384_set_bck0_maintenance/req.api 0000775 0000000 0000000 00000000051 14326712445 0022462 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/384_set_bck0_maintenance/req.out 0000664 0000000 0000000 00000000027 14326712445 0022520 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/385_set_bck1_maintenance/ 0000775 0000000 0000000 00000000000 14326712445 0021203 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/385_set_bck1_maintenance/data.json 0000664 0000000 0000000 00000000176 14326712445 0023013 0 ustar 00root root 0000000 0000000 {
"farms" : [
{
"name" : "lb01",
"backends" : [
{
"name" : "bck1",
"state" : "off"
}
]
}
]
}
nftlb-1.0.7/tests/api/385_set_bck1_maintenance/nft.out 0000664 0000000 0000000 00000000506 14326712445 0022524 0 ustar 00root root 0000000 0000000 table netdev nftlb {
map proto-services-lo {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 127.0.0.1 . 80 : goto lb01 }
}
chain ingress-lo {
type filter hook ingress device "lo" priority 101; policy accept;
ip protocol . ip daddr . th dport vmap @proto-services-lo
}
chain lb01 {
}
}
nftlb-1.0.7/tests/api/385_set_bck1_maintenance/obj.out 0000664 0000000 0000000 00000005477 14326712445 0022523 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "lb01",
"family": "ipv4",
"virtual-addr": "127.0.0.1",
"virtual-ports": "80",
"source-addr": "",
"mode": "dsr",
"protocol": "tcp",
"scheduler": "hash",
"sched-param": "srcip ",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "3",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "lb01-addr",
"family": "ipv4",
"ip-addr": "127.0.0.1",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "127.0.0.1",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x1",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck1",
"ip-addr": "127.0.0.1",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x2",
"est-connlimit": "0",
"state": "off"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/385_set_bck1_maintenance/req.api 0000775 0000000 0000000 00000000051 14326712445 0022464 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/385_set_bck1_maintenance/req.out 0000664 0000000 0000000 00000000027 14326712445 0022522 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/386_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020132 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/386_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021440 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/386_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021434 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/386_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021412 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/386_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021451 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/387_create_farm_tcp/ 0000775 0000000 0000000 00000000000 14326712445 0020266 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/387_create_farm_tcp/data.json 0000664 0000000 0000000 00000000324 14326712445 0022071 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "virtual-addr" : "192.168.56.101", "source-addr" : "192.168.56.101", "virtual-ports" : "90", "protocol" : "tcp", "mode" : "snat", "scheduler" : "weight", "state" : "up" } ] }
nftlb-1.0.7/tests/api/387_create_farm_tcp/nft.out 0000664 0000000 0000000 00000002000 14326712445 0021576 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newl4farm {
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newl4farm {
}
}
nftlb-1.0.7/tests/api/387_create_farm_tcp/obj.out 0000664 0000000 0000000 00000003460 14326712445 0021574 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "90",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [],
"policies": []
}
]
} nftlb-1.0.7/tests/api/387_create_farm_tcp/req.api 0000775 0000000 0000000 00000000051 14326712445 0021547 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/387_create_farm_tcp/req.out 0000664 0000000 0000000 00000000027 14326712445 0021605 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/388_create_backend_in_farm/ 0000775 0000000 0000000 00000000000 14326712445 0021556 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/388_create_backend_in_farm/data.json 0000664 0000000 0000000 00000000331 14326712445 0023357 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "backends" : [ { "name" : "bck0", "ip-addr" : "192.168.116.254", "port" : "80", "mark" : "0x200", "weight" : "1", "priority" : "1", "est-connlimit" : "0", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/388_create_backend_in_farm/nft.out 0000664 0000000 0000000 00000002325 14326712445 0023100 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.56.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newl4farm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.116.254 . 80 }
}
}
nftlb-1.0.7/tests/api/388_create_backend_in_farm/obj.out 0000664 0000000 0000000 00000004536 14326712445 0023071 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "90",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.116.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/388_create_backend_in_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0023037 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/388_create_backend_in_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0023075 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/389_create_another_backend_in_farm/ 0000775 0000000 0000000 00000000000 14326712445 0023277 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/389_create_another_backend_in_farm/data.json 0000664 0000000 0000000 00000000331 14326712445 0025100 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "backends" : [ { "name" : "bck1", "ip-addr" : "192.168.116.253", "port" : "80", "mark" : "0x201", "weight" : "1", "priority" : "1", "est-connlimit" : "0", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/389_create_another_backend_in_farm/nft.out 0000664 0000000 0000000 00000002445 14326712445 0024624 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.56.101, 0x00000201 : 192.168.56.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x00000200, 1 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newl4farm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.116.254 . 80, 0x00000201 : 192.168.116.253 . 80 }
}
}
nftlb-1.0.7/tests/api/389_create_another_backend_in_farm/obj.out 0000664 0000000 0000000 00000005564 14326712445 0024614 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "90",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.116.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.116.253",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/389_create_another_backend_in_farm/req.api 0000775 0000000 0000000 00000000051 14326712445 0024560 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/389_create_another_backend_in_farm/req.out 0000664 0000000 0000000 00000000027 14326712445 0024616 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/390_modify_backend_priority/ 0000775 0000000 0000000 00000000000 14326712445 0022041 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/390_modify_backend_priority/data.json 0000664 0000000 0000000 00000000142 14326712445 0023642 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "backends" : [ { "name" : "bck1", "priority" : "2" } ] } ] }
nftlb-1.0.7/tests/api/390_modify_backend_priority/nft.out 0000664 0000000 0000000 00000002325 14326712445 0023363 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.56.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newl4farm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.116.254 . 80 }
}
}
nftlb-1.0.7/tests/api/390_modify_backend_priority/obj.out 0000664 0000000 0000000 00000005573 14326712445 0023356 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "90",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.116.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.116.253",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x201",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/390_modify_backend_priority/req.api 0000775 0000000 0000000 00000000051 14326712445 0023322 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/390_modify_backend_priority/req.out 0000664 0000000 0000000 00000000027 14326712445 0023360 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/391_deactivate_active_backend/ 0000775 0000000 0000000 00000000000 14326712445 0022256 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/391_deactivate_active_backend/data.json 0000664 0000000 0000000 00000000141 14326712445 0024056 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "backends" : [ { "name" : "bck0", "state" : "off" } ] } ] }
nftlb-1.0.7/tests/api/391_deactivate_active_backend/nft.out 0000664 0000000 0000000 00000002425 14326712445 0023601 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.56.101, 0x00000201 : 192.168.56.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newl4farm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.116.254 . 80, 0x00000201 : 192.168.116.253 . 80 }
}
}
nftlb-1.0.7/tests/api/391_deactivate_active_backend/obj.out 0000664 0000000 0000000 00000005565 14326712445 0023574 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "90",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.116.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "off"
},
{
"name": "bck1",
"ip-addr": "192.168.116.253",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/391_deactivate_active_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0023537 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/391_deactivate_active_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0023575 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/392_enable_deactivated_backend/ 0000775 0000000 0000000 00000000000 14326712445 0022376 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/392_enable_deactivated_backend/data.json 0000664 0000000 0000000 00000000140 14326712445 0024175 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newl4farm", "backends" : [ { "name" : "bck0", "state" : "up" } ] } ] }
nftlb-1.0.7/tests/api/392_enable_deactivated_backend/nft.out 0000664 0000000 0000000 00000002325 14326712445 0023720 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto filter-newl4farm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 90 : goto nat-newl4farm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.56.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newl4farm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 1 map { 0 : 0x00000200 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newl4farm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.116.254 . 80 }
}
}
nftlb-1.0.7/tests/api/392_enable_deactivated_backend/obj.out 0000664 0000000 0000000 00000005573 14326712445 0023713 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newl4farm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "90",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newl4farm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "90",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.116.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.116.253",
"port": "80",
"weight": "1",
"priority": "2",
"mark": "0x201",
"est-connlimit": "0",
"state": "available"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/392_enable_deactivated_backend/req.api 0000775 0000000 0000000 00000000051 14326712445 0023657 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/392_enable_deactivated_backend/req.out 0000664 0000000 0000000 00000000027 14326712445 0023715 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/393_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020130 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/393_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021436 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/393_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021432 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/393_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021410 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/393_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021447 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/394_create_farm_with_port_and_proto/ 0000775 0000000 0000000 00000000000 14326712445 0023562 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/394_create_farm_with_port_and_proto/data.json 0000664 0000000 0000000 00000004607 14326712445 0025375 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "80",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.56.102",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.56.103",
"port": "444",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
}
nftlb-1.0.7/tests/api/394_create_farm_with_port_and_proto/nft.out 0000664 0000000 0000000 00000002436 14326712445 0025107 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 80 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 80 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.56.101, 0x00000201 : 192.168.56.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x00000200, 1 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x00000200 : 192.168.56.102 . 8080, 0x00000201 : 192.168.56.103 . 444 }
}
}
nftlb-1.0.7/tests/api/394_create_farm_with_port_and_proto/obj.out 0000664 0000000 0000000 00000005561 14326712445 0025074 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "80",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "tcp",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "80",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.56.102",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.56.103",
"port": "444",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/394_create_farm_with_port_and_proto/req.api 0000775 0000000 0000000 00000000051 14326712445 0025043 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/394_create_farm_with_port_and_proto/req.out 0000664 0000000 0000000 00000000027 14326712445 0025101 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/395_modify_farm_with_multiple_proto_and_no_port/ 0000775 0000000 0000000 00000000000 14326712445 0026216 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/395_modify_farm_with_multiple_proto_and_no_port/data.json 0000664 0000000 0000000 00000000151 14326712445 0030017 0 ustar 00root root 0000000 0000000 {"farms" : [ { "name" : "newfarm", "protocol" : "all" , "helper" : "sip" , "virtual-ports" : "" } ] }
nftlb-1.0.7/tests/api/395_modify_farm_with_multiple_proto_and_no_port/nft.out 0000664 0000000 0000000 00000003110 14326712445 0027531 0 ustar 00root root 0000000 0000000 table ip nftlb {
ct helper sip-tcp {
type "sip" protocol tcp
l3proto ip
}
ct helper sip-udp {
type "sip" protocol udp
l3proto ip
}
map filter-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.56.101 : goto filter-newfarm,
udp . 192.168.56.101 : goto filter-newfarm,
sctp . 192.168.56.101 : goto filter-newfarm }
}
map nat-services {
type inet_proto . ipv4_addr : verdict
elements = { tcp . 192.168.56.101 : goto nat-newfarm,
udp . 192.168.56.101 : goto nat-newfarm,
sctp . 192.168.56.101 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
elements = { 0x00000200 : 192.168.56.101, 0x00000201 : 192.168.56.101 }
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @filter-services
}
chain filter-newfarm {
ip protocol tcp ct helper set "sip-tcp"
ip protocol udp ct helper set "sip-udp"
ct state new ct mark 0x00000000 ct mark set numgen random mod 2 map { 0 : 0x00000200, 1 : 0x00000201 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr vmap @nat-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
dnat to ct mark map { 0x00000200 : 192.168.56.102, 0x00000201 : 192.168.56.103 }
}
}
nftlb-1.0.7/tests/api/395_modify_farm_with_multiple_proto_and_no_port/obj.out 0000664 0000000 0000000 00000005554 14326712445 0027532 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "",
"source-addr": "192.168.56.101",
"mode": "snat",
"protocol": "all",
"scheduler": "weight",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "sip",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "",
"protocol": "all",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.56.102",
"port": "8080",
"weight": "1",
"priority": "1",
"mark": "0x200",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.56.103",
"port": "444",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/395_modify_farm_with_multiple_proto_and_no_port/req.api 0000775 0000000 0000000 00000000051 14326712445 0027477 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/395_modify_farm_with_multiple_proto_and_no_port/req.out 0000664 0000000 0000000 00000000027 14326712445 0027535 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/396_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020133 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/396_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021441 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/396_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021435 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/396_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021413 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/396_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021452 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/397_create_big_policy_list/ 0000775 0000000 0000000 00000000000 14326712445 0021647 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/397_create_big_policy_list/data.json 0000664 0000000 0000000 00000002717 14326712445 0023462 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "testBL",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"log-prefix": "[WL,testBL,FNAME]",
"used": "1",
"elements": [
{
"data": "192.168.15.0/24",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.168.16.1-192.168.16.3",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.168.17.1",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.168.17.4",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
}
nftlb-1.0.7/tests/api/397_create_big_policy_list/nft.out 0000664 0000000 0000000 00000000451 14326712445 0023167 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set testBL {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 192.168.15.0/24 counter packets 0 bytes 0, 192.168.16.1-192.168.16.3 counter packets 0 bytes 0,
192.168.17.1 counter packets 0 bytes 0, 192.168.17.4 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/397_create_big_policy_list/obj.out 0000664 0000000 0000000 00000002716 14326712445 0023160 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "testBL",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"log-prefix": "[WL,testBL,FNAME]",
"used": "0",
"elements": [
{
"data": "192.168.15.0/24",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.168.16.1-192.168.16.3",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.168.17.1",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.168.17.4",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/397_create_big_policy_list/req.api 0000775 0000000 0000000 00000000054 14326712445 0023133 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="policies"
nftlb-1.0.7/tests/api/397_create_big_policy_list/req.out 0000664 0000000 0000000 00000000027 14326712445 0023166 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/398_update_policy_elements_atomic_patch/ 0000775 0000000 0000000 00000000000 14326712445 0024422 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/398_update_policy_elements_atomic_patch/data.json 0000664 0000000 0000000 00000002717 14326712445 0026235 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "testBL",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"log-prefix": "[WL,testBL,FNAME]",
"used": "1",
"elements": [
{
"data": "192.169.15.0/24",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.169.16.1-192.169.16.3",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.169.17.1",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.169.17.4",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
}
nftlb-1.0.7/tests/api/398_update_policy_elements_atomic_patch/nft.out 0000664 0000000 0000000 00000000451 14326712445 0025742 0 ustar 00root root 0000000 0000000 table netdev nftlb {
set testBL {
type ipv4_addr
flags interval
counter
auto-merge
elements = { 192.169.15.0/24 counter packets 0 bytes 0, 192.169.16.1-192.169.16.3 counter packets 0 bytes 0,
192.169.17.1 counter packets 0 bytes 0, 192.169.17.4 counter packets 0 bytes 0 }
}
}
nftlb-1.0.7/tests/api/398_update_policy_elements_atomic_patch/obj.out 0000664 0000000 0000000 00000002716 14326712445 0025733 0 ustar 00root root 0000000 0000000 {
"policies": [
{
"name": "testBL",
"family": "ipv4",
"type": "whitelist",
"route": "in",
"timeout": "0",
"log-prefix": "[WL,testBL,FNAME]",
"used": "0",
"elements": [
{
"data": "192.169.15.0/24",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.169.16.1-192.169.16.3",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.169.17.1",
"counter-packets": "0",
"counter-bytes": "0"
},
{
"data": "192.169.17.4",
"counter-packets": "0",
"counter-bytes": "0"
}
]
}
]
} nftlb-1.0.7/tests/api/398_update_policy_elements_atomic_patch/req.api 0000775 0000000 0000000 00000000075 14326712445 0025711 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="PATCH"
URI="policies/testBL/elements"
nftlb-1.0.7/tests/api/398_update_policy_elements_atomic_patch/req.out 0000664 0000000 0000000 00000000027 14326712445 0025741 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/399_deleting_policies/ 0000775 0000000 0000000 00000000000 14326712445 0020635 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/399_deleting_policies/nft.out 0000664 0000000 0000000 00000000000 14326712445 0022143 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/399_deleting_policies/obj.out 0000664 0000000 0000000 00000000032 14326712445 0022133 0 ustar 00root root 0000000 0000000 {
"policies": []
} nftlb-1.0.7/tests/api/399_deleting_policies/req.api 0000775 0000000 0000000 00000000035 14326712445 0022120 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="policies"
nftlb-1.0.7/tests/api/399_deleting_policies/req.out 0000664 0000000 0000000 00000000027 14326712445 0022154 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/400_multiport_backend_set/ 0000775 0000000 0000000 00000000000 14326712445 0021513 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/400_multiport_backend_set/data.json 0000664 0000000 0000000 00000004567 14326712445 0023333 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.100.253",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
}
nftlb-1.0.7/tests/api/400_multiport_backend_set/nft.out 0000664 0000000 0000000 00000002472 14326712445 0023040 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto filter-newfarm,
tcp . 192.168.56.101 . 8081 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto nat-newfarm,
tcp . 192.168.56.101 . 8081 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x80000201 : 192.168.100.254, 0x80000202 : 192.168.100.253 }
}
}
nftlb-1.0.7/tests/api/400_multiport_backend_set/obj.out 0000664 0000000 0000000 00000005550 14326712445 0023023 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "8080,8081",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.100.253",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/400_multiport_backend_set/req.api 0000775 0000000 0000000 00000000051 14326712445 0022774 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/400_multiport_backend_set/req.out 0000664 0000000 0000000 00000000027 14326712445 0023032 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/401_multiport_backend_set_with_one_port/ 0000775 0000000 0000000 00000000000 14326712445 0024454 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/401_multiport_backend_set_with_one_port/data.json 0000664 0000000 0000000 00000004571 14326712445 0026267 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.100.253",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
}
nftlb-1.0.7/tests/api/401_multiport_backend_set_with_one_port/nft.out 0000664 0000000 0000000 00000002472 14326712445 0026001 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto filter-newfarm,
tcp . 192.168.56.101 . 8081 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto nat-newfarm,
tcp . 192.168.56.101 . 8081 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x80000201 : 192.168.100.254, 0x80000202 : 192.168.100.253 }
}
}
nftlb-1.0.7/tests/api/401_multiport_backend_set_with_one_port/obj.out 0000664 0000000 0000000 00000005552 14326712445 0025766 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "8080,8081",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.100.253",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/401_multiport_backend_set_with_one_port/req.api 0000775 0000000 0000000 00000000051 14326712445 0025735 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/401_multiport_backend_set_with_one_port/req.out 0000664 0000000 0000000 00000000027 14326712445 0025773 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/402_multiport_backend_set_with_ports/ 0000775 0000000 0000000 00000000000 14326712445 0023777 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/402_multiport_backend_set_with_ports/data.json 0000664 0000000 0000000 00000004573 14326712445 0025614 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.100.253",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
}
nftlb-1.0.7/tests/api/402_multiport_backend_set_with_ports/nft.out 0000664 0000000 0000000 00000002507 14326712445 0025323 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto filter-newfarm,
tcp . 192.168.56.101 . 8081 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto nat-newfarm,
tcp . 192.168.56.101 . 8081 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat ip to ct mark map { 0x80000201 : 192.168.100.254 . 80, 0x80000202 : 192.168.100.253 . 80 }
}
}
nftlb-1.0.7/tests/api/402_multiport_backend_set_with_ports/obj.out 0000664 0000000 0000000 00000005554 14326712445 0025313 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "8080,8081",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.100.253",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/402_multiport_backend_set_with_ports/req.api 0000775 0000000 0000000 00000000051 14326712445 0025260 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/402_multiport_backend_set_with_ports/req.out 0000664 0000000 0000000 00000000027 14326712445 0025316 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/403_deleting_farms/ 0000775 0000000 0000000 00000000000 14326712445 0020120 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/403_deleting_farms/nft.out 0000664 0000000 0000000 00000000000 14326712445 0021426 0 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/403_deleting_farms/obj.out 0000664 0000000 0000000 00000000027 14326712445 0021422 0 ustar 00root root 0000000 0000000 {
"farms": []
} nftlb-1.0.7/tests/api/403_deleting_farms/req.api 0000775 0000000 0000000 00000000032 14326712445 0021400 0 ustar 00root root 0000000 0000000 VERB="DELETE"
URI="farms"
nftlb-1.0.7/tests/api/403_deleting_farms/req.out 0000664 0000000 0000000 00000000027 14326712445 0021437 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/404_multiport_backend_set_with_one_port/ 0000775 0000000 0000000 00000000000 14326712445 0024457 5 ustar 00root root 0000000 0000000 nftlb-1.0.7/tests/api/404_multiport_backend_set_with_one_port/data.json 0000664 0000000 0000000 00000004505 14326712445 0026267 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "2",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.100.253",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
}
nftlb-1.0.7/tests/api/404_multiport_backend_set_with_one_port/nft.out 0000664 0000000 0000000 00000002472 14326712445 0026004 0 ustar 00root root 0000000 0000000 table ip nftlb {
map filter-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto filter-newfarm,
tcp . 192.168.56.101 . 8081 : goto filter-newfarm }
}
map nat-proto-services {
type inet_proto . ipv4_addr . inet_service : verdict
elements = { tcp . 192.168.56.101 . 8080 : goto nat-newfarm,
tcp . 192.168.56.101 . 8081 : goto nat-newfarm }
}
map services-back-m {
type mark : ipv4_addr
}
chain filter {
type filter hook prerouting priority mangle; policy accept;
meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @filter-proto-services
}
chain filter-newfarm {
ct state new ct mark 0x00000000 ct mark set numgen inc mod 2 map { 0 : 0x80000201, 1 : 0x80000202 }
}
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
ct state new meta mark 0x00000000 meta mark set ct mark
ip protocol . ip daddr . th dport vmap @nat-proto-services
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
ct mark 0x00000000 ct mark set meta mark
ct mark 0x80000000/1 masquerade
snat to ct mark map @services-back-m
}
chain nat-newfarm {
ip protocol tcp dnat to ct mark map { 0x80000201 : 192.168.100.254, 0x80000202 : 192.168.100.253 }
}
}
nftlb-1.0.7/tests/api/404_multiport_backend_set_with_one_port/obj.out 0000664 0000000 0000000 00000005552 14326712445 0025771 0 ustar 00root root 0000000 0000000 {
"farms": [
{
"name": "newfarm",
"family": "ipv4",
"virtual-addr": "192.168.56.101",
"virtual-ports": "8080,8081",
"source-addr": "",
"mode": "snat",
"protocol": "tcp",
"scheduler": "rr",
"sched-param": "none",
"persistence": "none",
"persist-ttl": "60",
"helper": "none",
"log": "none",
"log-rtlimit": "0/second",
"mark": "0x0",
"priority": "1",
"state": "up",
"limits-ttl": "120",
"new-rtlimit": "0/second",
"new-rtlimit-burst": "0",
"rst-rtlimit": "0/second",
"rst-rtlimit-burst": "0",
"est-connlimit": "0",
"tcp-strict": "off",
"queue": "-1",
"verdict": "log drop accept",
"addresses": [
{
"name": "newfarm-addr",
"family": "ipv4",
"ip-addr": "192.168.56.101",
"ports": "8080,8081",
"protocol": "tcp",
"used": "1"
}
],
"backends": [
{
"name": "bck0",
"ip-addr": "192.168.100.254",
"port": "80",
"weight": "1",
"priority": "1",
"mark": "0x201",
"est-connlimit": "0",
"state": "up"
},
{
"name": "bck1",
"ip-addr": "192.168.100.253",
"port": "",
"weight": "1",
"priority": "1",
"mark": "0x202",
"est-connlimit": "0",
"state": "up"
}
],
"policies": []
}
]
} nftlb-1.0.7/tests/api/404_multiport_backend_set_with_one_port/req.api 0000775 0000000 0000000 00000000051 14326712445 0025740 0 ustar 00root root 0000000 0000000 FILE="data.json"
VERB="POST"
URI="farms"
nftlb-1.0.7/tests/api/404_multiport_backend_set_with_one_port/req.out 0000664 0000000 0000000 00000000027 14326712445 0025776 0 ustar 00root root 0000000 0000000 {"response": "success"} nftlb-1.0.7/tests/api/api_tests.sh 0000775 0000000 0000000 00000006404 14326712445 0017105 0 ustar 00root root 0000000 0000000 #!/bin/bash
ARG="$1"
ARG2="$2"
NFTBIN="nft"
NFTLBIN="../../src/nftlb"
DEBUG="7"
NFTLB_ARGS=""
APISRV_ADDR=localhost
APISRV_PORT=5555
APISRV_KEY="hola"
CURL=`which curl`
CURL_ARGS=""
INDEX=1
STOPPED=0
APPLY_REPORTS=0
if [ "$1" == "-apply-reports" ] || [ "$3" == "-apply-reports" ]; then
APPLY_REPORTS=1
fi
echo "" > /var/log/syslog
kill -9 `pidof nftlb` 2> /dev/null
$NFTBIN flush ruleset
$NFTLBIN $NFTLB_ARGS -d -k "$APISRV_KEY" -H $APISRV_ADDR -P $APISRV_PORT -l $DEBUG > /dev/null
sleep 1s
for DIRTEST in `ls -d */`; do
cd ${DIRTEST}
TESTCASE=`ls *.api`
source $TESTCASE
INDEX_OUT=`printf %03d $INDEX`
echo -nE "$DIRTEST... "
logger NFTLB API TESTING $INDEX_OUT - $DESC
FEXEC="pre.sh"
if [ -x $FEXEC ]; then
./$FEXEC
fi
if [ "$VERB" = "POST" ] || [ "$VERB" = "PUT" ] || [ "$VERB" = "DELETE" ] || [ "$VERB" = "PATCH" ]; then
if [ -e "${FILE}" ]; then
CURL_ARGS="-d @${FILE}"
fi
fi
CURL_OUTPUT="report-${INDEX_OUT}-req.out"
rm -f report-*-req.out
$CURL -H "Key: $APISRV_KEY" -X $VERB $CURL_ARGS http://$APISRV_ADDR:$APISRV_PORT/$URI -o "$CURL_OUTPUT" 2> /dev/null
FEXEC="pos.sh"
if [ -x $FEXEC ]; then
./$FEXEC
fi
# checking curl output
CHECK_OUTPUT="req.out"
echo -n "(request:"
if [ -f "$CHECK_OUTPUT" ] && [ -f "$CURL_OUTPUT" ]; then
if [ "`diff -Nru $CHECK_OUTPUT $CURL_OUTPUT`" != "" ]; then
echo -en "\e[31mFAILURE\e[0m) "
diff -Nru $CHECK_OUTPUT $CURL_OUTPUT
if [ $APPLY_REPORTS -eq 1 ]; then
cat $CURL_OUTPUT > $CHECK_OUTPUT
echo -en "APPLIED "
fi
else
echo -en "\e[32mOK\e[0m) "
rm -f report-*-req.out
fi
else
echo -en "\e[33mUNKNOWN\e[0m) "
fi
# check nft output
CHECK_OUTPUT="nft.out"
NFT_OUTPUT="report-${INDEX_OUT}-nft.out"
rm -f report-*-nft.out
echo -n "(nft:"
$NFTBIN list ruleset > $NFT_OUTPUT
if [ -f "$CHECK_OUTPUT" ] && [ -f "$NFT_OUTPUT" ]; then
if [ "`diff -Nru $CHECK_OUTPUT $NFT_OUTPUT`" != "" ]; then
echo -en "\e[31mFAILURE\e[0m) "
diff -Nru $CHECK_OUTPUT $NFT_OUTPUT
if [ $APPLY_REPORTS -eq 1 ]; then
cat $NFT_OUTPUT > $CHECK_OUTPUT
echo -en "APPLIED "
fi
else
echo -en "\e[32mOK\e[0m) "
rm -f report-*-nft.out
fi
else
echo -en "\e[33mUNKNOWN\e[0m) "
fi
# check nftlb objects
CURL_OUTPUT="report-${INDEX_OUT}-obj.out"
OBJ=`echo $URI | awk -F'/' '{ printf $1 }'`
rm -f report-*-obj.out
$CURL -H "Key: $APISRV_KEY" -X GET http://$APISRV_ADDR:$APISRV_PORT/$OBJ -o "$CURL_OUTPUT" 2> /dev/null
CHECK_OUTPUT="obj.out"
echo -n "(objects:"
if [ -f "$CHECK_OUTPUT" ] && [ -f "$CURL_OUTPUT" ]; then
if [ "`diff -Nru $CHECK_OUTPUT $CURL_OUTPUT`" != "" ]; then
echo -en "\e[31mFAILURE\e[0m) "
diff -Nru $CHECK_OUTPUT $CURL_OUTPUT
if [ $APPLY_REPORTS -eq 1 ]; then
cat $CURL_OUTPUT > $CHECK_OUTPUT
echo -en "APPLIED "
fi
else
echo -en "\e[32mOK\e[0m) "
rm -f report-*-obj.out
fi
else
echo -en "\e[33mUNKNOWN\e[0m) "
fi
echo ""
CURL_ARGS=
INDEX=$(($INDEX+1));
cd ../
if [[ "$ARG" = "-stop" ]]; then
if [[ "${DIRTEST}" == "${ARG2}"* ]]; then
echo "Stopped."
STOPPED=1;
break;
fi
fi
done
if [ $STOPPED -eq 0 ]; then
$NFTBIN flush ruleset
kill `pidof nftlb`
fi
ERRORS="`grep 'nft command error' /var/log/syslog`"
if [ "$ERRORS" != "" ]; then
echo -e "\e[33m* command errors found, please check syslog\e[0m"
echo "$ERRORS"
fi
nftlb-1.0.7/tests/exec_tests.sh 0000775 0000000 0000000 00000003473 14326712445 0016512 0 ustar 00root root 0000000 0000000 #!/bin/bash
ARG="$1"
ARG2="$2"
NFTBIN="nft"
NFTLBIN="../src/nftlb"
NFTLB_ARGS=""
APISERVER=0
APISRV_PORT=5555
APISRV_KEY="hola"
CURL=`which curl`
TESTS=""
APPLY_REPORTS=0
if [ "${ARG}" == "-s" -a -e "$CURL" ]; then
APISERVER=1
elif [ "${ARG}" == "-apply-reports" ]; then
APPLY_REPORTS=1
TESTS="${ARG2}"
elif [[ -d ${ARG} ]]; then
TESTS="${ARG}"
elif [ "${ARG}" == "" ]; then
TESTS="*/"
fi
if [ "$TESTS" == "" -a "${ARG2}" == "" ]; then
TESTS="*/"
fi
echo "" > /var/log/syslog
if [ $APISERVER -eq 1 ]; then
$NFTLBIN $NFTLB_ARGS -d -k "$APISRV_KEY" -l 7 > /dev/null
fi
echo "-- Executing configuration tests"
for test in `ls -d ${TESTS}`; do
if [[ ! ${test} =~ ^..._ ]]; then
continue;
fi
echo -n "Executing test: ${test}... "
inputfile="${test}/input.json"
outputfile="${test}/output.nft"
reportfile="${test}/report-output.nft"
if [ $APISERVER -eq 1 ]; then
$CURL -H "Expect:" -H "Key: $APISRV_KEY" -X DELETE http://localhost:$APISRV_PORT/farms
$CURL -H "Expect:" -H "Key: $APISRV_KEY" -X POST http://localhost:$APISRV_PORT/farms -d "@${inputfile}"
statusexec=$?
else
$NFTLBIN $NFTLB_ARGS -e -l 7 -c ${inputfile}
statusexec=$?
fi
if [ $statusexec -ne 0 ]; then
echo -e "\e[31mNFT EXEC ERROR\e[0m"
continue;
fi
$NFTBIN list ruleset > ${reportfile}
if [ ! -f ${outputfile} ]; then
echo "Dump file doesn't exist"
continue;
fi
diff -Nru ${outputfile} ${reportfile}
statusnft=$?
if [ $statusnft -eq 0 ]; then
echo -e "\e[32mOK\e[0m"
rm -f ${reportfile}
else
echo -e "\e[31mNFT DUMP ERROR\e[0m"
if [ $APPLY_REPORTS -eq 1 ]; then
cat ${reportfile} > ${outputfile}
echo -e "APPLIED"
fi
fi
done
if [ $APISERVER -eq 1 ]; then
kill `pidof nftlb`
fi
if [ "`grep 'nft command error' /var/log/syslog`" != "" ]; then
echo -e "\e[33m* command errors found, please check syslog\e[0m"
fi