1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
|
/*
* This file is part of nftlb, nftables load balancer.
*
* Copyright (C) ZEVENET SL.
* Author: Laura Garcia <laura.garcia@zevenet.com>
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
*/
#ifndef _CONFIG_H_
#define _CONFIG_H_
#include "objects.h"
#define CONFIG_KEY_FARMS "farms"
#define CONFIG_KEY_NAME "name"
#define CONFIG_KEY_NEWNAME "newname"
#define CONFIG_KEY_FQDN "fqdn"
#define CONFIG_KEY_IFACE "iface"
#define CONFIG_KEY_OFACE "oface"
#define CONFIG_KEY_FAMILY "family"
#define CONFIG_KEY_ETHADDR "ether-addr"
#define CONFIG_KEY_IETHADDR "iether-addr"
#define CONFIG_KEY_OETHADDR "oether-addr"
#define CONFIG_KEY_VIRTADDR "virtual-addr"
#define CONFIG_KEY_VIRTPORTS "virtual-ports"
#define CONFIG_KEY_IPADDR "ip-addr"
#define CONFIG_KEY_SRCADDR "source-addr"
#define CONFIG_KEY_PORT "port"
#define CONFIG_KEY_PORTS "ports"
#define CONFIG_KEY_MODE "mode"
#define CONFIG_KEY_RESPONSETTL "responsettl"
#define CONFIG_KEY_PROTO "protocol"
#define CONFIG_KEY_SCHED "scheduler"
#define CONFIG_KEY_SCHEDPARAM "sched-param"
#define CONFIG_KEY_PERSIST "persistence"
#define CONFIG_KEY_PERSISTTM "persist-ttl"
#define CONFIG_KEY_HELPER "helper"
#define CONFIG_KEY_LOG "log"
#define CONFIG_KEY_LOGPREFIX "log-prefix"
#define CONFIG_KEY_LOG_RTLIMIT "log-rtlimit"
#define CONFIG_KEY_MARK "mark"
#define CONFIG_KEY_STATE "state"
#define CONFIG_KEY_BCKS "backends"
#define CONFIG_KEY_WEIGHT "weight"
#define CONFIG_KEY_PRIORITY "priority"
#define CONFIG_KEY_ACTION "action"
#define CONFIG_KEY_LIMITSTTL "limits-ttl"
#define CONFIG_KEY_NEWRTLIMIT "new-rtlimit"
#define CONFIG_KEY_NEWRTLIMITBURST "new-rtlimit-burst"
#define CONFIG_KEY_NEWRTLIMIT_LOGPREFIX "new-rtlimit-log-prefix"
#define CONFIG_KEY_RSTRTLIMIT "rst-rtlimit"
#define CONFIG_KEY_RSTRTLIMITBURST "rst-rtlimit-burst"
#define CONFIG_KEY_RSTRTLIMIT_LOGPREFIX "rst-rtlimit-log-prefix"
#define CONFIG_KEY_ESTCONNLIMIT "est-connlimit"
#define CONFIG_KEY_ESTCONNLIMIT_LOGPREFIX "est-connlimit-log-prefix"
#define CONFIG_KEY_TCPSTRICT "tcp-strict"
#define CONFIG_KEY_TCPSTRICT_LOGPREFIX "tcp-strict-log-prefix"
#define CONFIG_KEY_QUEUE "queue"
#define CONFIG_KEY_FLOWOFFLOAD "flow-offload"
#define CONFIG_KEY_POLICIES "policies"
#define CONFIG_KEY_TYPE "type"
#define CONFIG_KEY_TIMEOUT "timeout"
#define CONFIG_KEY_ELEMENTS "elements"
#define CONFIG_KEY_DATA "data"
#define CONFIG_KEY_TIME "time"
#define CONFIG_KEY_SESSIONS "sessions"
#define CONFIG_KEY_CLIENT "client"
#define CONFIG_KEY_BACKEND "backend"
#define CONFIG_KEY_INTRACONNECT "intra-connect"
#define CONFIG_KEY_USED "used"
#define CONFIG_KEY_EXPIRATION "expiration"
#define CONFIG_KEY_ADDRESSES "addresses"
#define CONFIG_KEY_ROUTE "route"
#define CONFIG_KEY_VERDICT "verdict"
#define CONFIG_KEY_COUNTER_PACKETS "counter-packets"
#define CONFIG_KEY_COUNTER_BYTES "counter-bytes"
#define CONFIG_VALUE_FAMILY_IPV4 "ipv4"
#define CONFIG_VALUE_FAMILY_IPV6 "ipv6"
#define CONFIG_VALUE_FAMILY_INET "inet"
#define CONFIG_VALUE_MODE_SNAT "snat"
#define CONFIG_VALUE_MODE_DNAT "dnat"
#define CONFIG_VALUE_MODE_DSR "dsr"
#define CONFIG_VALUE_MODE_STLSDNAT "stlsdnat"
#define CONFIG_VALUE_MODE_LOCAL "local"
#define CONFIG_VALUE_PROTO_TCP "tcp"
#define CONFIG_VALUE_PROTO_UDP "udp"
#define CONFIG_VALUE_PROTO_SCTP "sctp"
#define CONFIG_VALUE_PROTO_ALL "all"
#define CONFIG_VALUE_SCHED_RR "rr"
#define CONFIG_VALUE_SCHED_WEIGHT "weight"
#define CONFIG_VALUE_SCHED_HASH "hash"
#define CONFIG_VALUE_SCHED_SYMHASH "symhash"
#define CONFIG_VALUE_META_NONE "none"
#define CONFIG_VALUE_META_SRCIP "srcip"
#define CONFIG_VALUE_META_DSTIP "dstip"
#define CONFIG_VALUE_META_SRCPORT "srcport"
#define CONFIG_VALUE_META_DSTPORT "dstport"
#define CONFIG_VALUE_META_SRCMAC "srcmac"
#define CONFIG_VALUE_META_DSTMAC "dstmac"
#define CONFIG_VALUE_HELPER_NONE "none"
#define CONFIG_VALUE_HELPER_FTP "ftp"
#define CONFIG_VALUE_HELPER_PPTP "pptp"
#define CONFIG_VALUE_HELPER_SIP "sip"
#define CONFIG_VALUE_HELPER_SNMP "snmp"
#define CONFIG_VALUE_HELPER_TFTP "tftp"
#define CONFIG_VALUE_LOG_NONE "none"
#define CONFIG_VALUE_LOG_INPUT "input"
#define CONFIG_VALUE_LOG_FORWARD "forward"
#define CONFIG_VALUE_LOG_OUTPUT "output"
#define CONFIG_VALUE_STATE_UP "up"
#define CONFIG_VALUE_STATE_AVAIL "available"
#define CONFIG_VALUE_STATE_DOWN "down"
#define CONFIG_VALUE_STATE_OFF "off"
#define CONFIG_VALUE_STATE_CONFERR "config_error"
#define CONFIG_VALUE_ACTION_DELETE "delete"
#define CONFIG_VALUE_ACTION_STOP "stop"
#define CONFIG_VALUE_ACTION_START "start"
#define CONFIG_VALUE_ACTION_RELOAD "reload"
#define CONFIG_VALUE_ACTION_NONE "none"
#define CONFIG_VALUE_ACTION_FLUSH "flush"
#define CONFIG_VALUE_SWITCH_ON "on"
#define CONFIG_VALUE_SWITCH_OFF "off"
#define CONFIG_VALUE_POLICIES_TYPE_BL "blacklist"
#define CONFIG_VALUE_POLICIES_TYPE_WL "whitelist"
#define CONFIG_VALUE_ROUTE_IN "in"
#define CONFIG_VALUE_ROUTE_OUT "out"
#define CONFIG_VALUE_VERDICT_NONE "none"
#define CONFIG_VALUE_VERDICT_LOG "log"
#define CONFIG_VALUE_VERDICT_DROP "drop"
#define CONFIG_VALUE_VERDICT_ACCEPT "accept"
#define CONFIG_VALUE_UNIT_SECOND "second"
#define CONFIG_VALUE_UNIT_MINUTE "minute"
#define CONFIG_VALUE_UNIT_HOUR "hour"
#define CONFIG_VALUE_UNIT_DAY "day"
#define CONFIG_VALUE_UNIT_WEEK "week"
enum config_parser_output {
PARSER_OK,
PARSER_FAILED,
PARSER_IGNORE,
PARSER_STRUCT_FAILED,
PARSER_VALID_FAILED,
PARSER_IDEM_VALUE,
PARSER_OBJ_UNKNOWN,
};
enum config_src {
CONFIG_SRC_FILE,
CONFIG_SRC_BUFFER,
};
struct config_pair {
enum levels level;
enum keys key;
char *str_value;
int int_value;
int int_value2;
int action;
};
void config_pair_init(struct config_pair *c);
char *config_get_output(void);
void config_delete_output(void);
void config_set_output(char *fmt, ...);
int config_file(const char *file);
int config_buffer(const char *buf, int apply_action);
int config_print_farms(char **buf, char *name);
int config_print_farm_sessions(char **buf, char *name);
int config_print_policies(char **buf, char *name);
int config_set_farm_action(const char *name, const char *value);
int config_set_session_backend_action(const char *fname, const char *bname, const char *value);
int config_set_backend_action(const char *fname, const char *bname, const char *value);
int config_set_session_action(const char *fname, const char *sname, const char *value);
int config_set_fpolicy_action(const char *fname, const char *fpname, const char *value);
int config_set_policy_action(const char *name, const char *value);
int config_set_element_action(const char *pname, const char *edata, const char *value);
int config_get_elements(const char *pname);
int config_delete_elements(const char *pname);
void config_print_response(char **buf, char *fmt, ...);
int config_set_address_action(const char *name, const char *value);
int config_set_farmaddress_action(const char *fname, const char *faname, const char *value);
int config_print_addresses(char **buf, char *name);
int config_check_policy(const char *name);
#endif /* _CONFIG_H_ */
|
