blob: 14de16460f2de112d1f20ca4067dd3fdc315ebdc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
|
---
- hosts: vpgn
gather_facts: no
remote_user: ubuntu
tasks:
- include_vars: "{{ ConfigFileName }}"
register: json
- name: Install grepcidr library
shell: apt-get install grepcidr
become: true
- name: Read protected net CIDR
shell: cat /opt/config/protected_net_cidr.txt
register: protectedCidr
become: true
- name: Read unprotected net CIDR
shell: cat /opt/config/unprotected_private_net_cidr.txt
register: unprotectedCidr
become: true
- name: Read PKG IP
shell: cat /opt/config/vpg_private_ip_0.txt
register: pkgIp
become: true
- name: Read OLD FW IP
shell: cat /opt/config/fw_ipaddr.txt
register: oldFwIp
become: true
- name: Read OLD SINK IP
shell: cat /opt/config/sink_ipaddr.txt
register: oldSinkIp
become: true
- name: Get all Interfaces
set_fact:
interfaces: "{{destinations[0].vservers | map(attribute='l-interfaces') | list}}"
- name: print all Interfaces
debug: var=interfaces
- name: Interfaces vserver 1
set_fact:
vserver1_interfaces: "{{destinations[0].vservers[0]['l-interfaces'] | list}}"
- name: Interfaces vserver 2
set_fact:
vserver2_interfaces: "{{destinations[0].vservers[1]['l-interfaces'] | list}}"
- block:
- name: length interfaces vserver1
set_fact:
length1: "{{ vserver1_interfaces |length }}"
- name: length interfaces vserver2
set_fact:
length2: "{{ vserver2_interfaces |length }}"
- block:
- name: adress 1 vserver
set_fact:
sink_addresses:
- "{{destinations[0].vservers[0]['l-interfaces'][0]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[0]['l-interfaces'][1]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[0]['l-interfaces'][2]['ipv4-addresses'][0]}}"
- name: adress 2 vserver
set_fact:
fw_addresses:
- "{{destinations[0].vservers[1]['l-interfaces'][0]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[1]['l-interfaces'][1]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[1]['l-interfaces'][2]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[1]['l-interfaces'][3]['ipv4-addresses'][0]}}"
when:
- length1 == "3"
- length2 == "4"
- block:
- name: adress 1 vserver
set_fact:
fw_addresses:
- "{{destinations[0].vservers[0]['l-interfaces'][0]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[0]['l-interfaces'][1]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[0]['l-interfaces'][2]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[0]['l-interfaces'][3]['ipv4-addresses'][0]}}"
- name: adress 2 vserver
set_fact:
sink_addresses:
- "{{destinations[0].vservers[1]['l-interfaces'][0]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[1]['l-interfaces'][1]['ipv4-addresses'][0]}}"
- "{{destinations[0].vservers[1]['l-interfaces'][2]['ipv4-addresses'][0]}}"
when:
- length1 == "4"
- length2 == "3"
- block:
- name: Create file to store fw-addresses
shell: touch /home/fw.txt
become: true
- name: Create file to store sink-addresses
shell: touch /home/sink.txt
become: true
- name: Save sink-addresses to file
lineinfile:
path: /home/sink.txt
line: "{{item}}"
with_items:
- "{{sink_addresses[0]}}"
- "{{sink_addresses[1]}}"
- "{{sink_addresses[2]}}"
become: true
- name: Save fw-addresses to file
lineinfile:
path: /home/fw.txt
line: "{{item}}"
with_items:
- "{{fw_addresses[0]}}"
- "{{fw_addresses[1]}}"
- "{{fw_addresses[2]}}"
- "{{fw_addresses[3]}}"
become: true
- name: Filter SINK IPs
shell: grepcidr {{protectedCidr.stdout}} /home/sink.txt
register: sinkIp
become: true
- debug: var=sinkIp.stdout
- name: Filter FW IPs
shell: grepcidr {{unprotectedCidr.stdout}} /home/fw.txt
register: fwIp
become: true
- debug: var=fwIp.stdout
- name: Delete created files
shell: rm -f /home/sink.txt /home/fw.txt
become: true
- debug: var=fwIp
- debug: var=sinkIp
- block:
- name: get new FW IP
set_fact:
fwIp: "{{fwIp.stdout}}"
- name: get new SINK IP
set_fact:
sinkIp: "{{sinkIp.stdout}}"
- debug: var=pkgIp.stdout
- debug: var=oldFwIp.stdout
- debug: var=oldSinkIp.stdout
- debug: var=protectedCidr.stdout
- debug: var=unprotectedCidr.stdout
- debug: var=sinkIp
- debug: var=fwIp
- debug:
msg: "FW IP has not been changed"
when: oldFwIp.stdout == fwIp
- block:
- name: Remove OLD FW IP route
shell: vppctl ip route del {{ protectedCidr.stdout }} via {{ oldFwIp.stdout }}
- name: Add NEW FW IP route
shell: vppctl ip route add {{ protectedCidr.stdout }} via {{ fwIp }}
- name: Save NEW FW IP address
shell: echo {{ fwIp }} > /opt/config/fw_ipaddr.txt
- debug:
msg: "FW IP has been changed"
become: true
when: oldFwIp.stdout != fwIp
- debug:
msg: "SINK IP has not been changed"
when: oldSinkIp.stdout == sinkIp
- block:
- block:
- name: Modify packet stream files
debug:
msg: "Modify packet stream files"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp1"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp2"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp3"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp4"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp5"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp6"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp7"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp8"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp9"
- shell: "sed -i -e '0,/UDP/ s/UDP:.*/UDP: {{ pkgIp.stdout }} -> {{ sinkIp }}/' /opt/pg_streams/stream_fw_udp10"
- block:
- name: Delete old streams
debug:
msg: "Delete old streams"
- shell: vppctl packet-generator delete fw_udp1
- shell: vppctl packet-generator delete fw_udp2
- shell: vppctl packet-generator delete fw_udp3
- shell: vppctl packet-generator delete fw_udp4
- shell: vppctl packet-generator delete fw_udp5
- shell: vppctl packet-generator delete fw_udp6
- shell: vppctl packet-generator delete fw_udp7
- shell: vppctl packet-generator delete fw_udp8
- shell: vppctl packet-generator delete fw_udp9
- shell: vppctl packet-generator delete fw_udp10
- block:
- name: Install new streams
debug:
msg: "Install new streams"
- shell: vppctl exec /opt/pg_streams/stream_fw_udp1
- shell: vppctl exec /opt/pg_streams/stream_fw_udp2
- shell: vppctl exec /opt/pg_streams/stream_fw_udp3
- shell: vppctl exec /opt/pg_streams/stream_fw_udp4
- shell: vppctl exec /opt/pg_streams/stream_fw_udp5
- shell: vppctl exec /opt/pg_streams/stream_fw_udp6
- shell: vppctl exec /opt/pg_streams/stream_fw_udp7
- shell: vppctl exec /opt/pg_streams/stream_fw_udp8
- shell: vppctl exec /opt/pg_streams/stream_fw_udp9
- shell: vppctl exec /opt/pg_streams/stream_fw_udp10
- block:
- name: Enable new streams
debug:
msg: "Enable new streams"
- shell: vppctl packet-generator enable fw_udp1
- shell: vppctl packet-generator enable fw_udp2
- shell: vppctl packet-generator enable fw_udp3
- shell: vppctl packet-generator enable fw_udp4
- shell: vppctl packet-generator enable fw_udp5
- shell: vppctl packet-generator enable fw_udp6
- shell: vppctl packet-generator enable fw_udp7
- shell: vppctl packet-generator enable fw_udp8
- shell: vppctl packet-generator enable fw_udp9
- shell: vppctl packet-generator enable fw_udp10
- name: Save NEW SINK IP address
shell: echo {{ sinkIp }} > /opt/config/sink_ipaddr.txt
- debug:
msg: "SINK IP has been changed"
become: true
when: oldSinkIp.stdout != sinkIp
|
