Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/pyroute2/netlink/generic/__pycache__/wireguard.cpython-39.pyc
Ðазад
a ]�h�0 � @ s d Z ddlZddlZddlZddlmZmZ ddlmZ ddl m Z m Z m Z m Z ddlmZ ddlmZmZmZmZmZmZ ddlmZ d Zd Zd ZdZ d Z dZ d Z d Z d Z!dZ"dZ#dZ$dZ%dZ&d Z'dZ(d Z)d Z*d Z+dZ,d Z-d Z.dZ/dZ0G dd� de�Z1G dd� de�Z2dS )aJ Usage:: # Imports from pyroute2 import NDB, WireGuard IFNAME = 'wg1' # Create a WireGuard interface with NDB() as ndb: with ndb.interfaces.create(kind='wireguard', ifname=IFNAME) as link: link.add_ip('10.0.0.1/24') link.set(state='up') # Create WireGuard object wg = WireGuard() # Add a WireGuard configuration + first peer peer = {'public_key': 'TGFHcm9zc2VCaWNoZV9DJ2VzdExhUGx1c0JlbGxlPDM=', 'endpoint_addr': '8.8.8.8', 'endpoint_port': 8888, 'persistent_keepalive': 15, 'allowed_ips': ['10.0.0.0/24', '8.8.8.8/32']} wg.set(IFNAME, private_key='RCdhcHJlc0JpY2hlLEplU2VyYWlzTGFQbHVzQm9ubmU=', fwmark=0x1337, listen_port=2525, peer=peer) # Add second peer with preshared key peer = {'public_key': 'RCdBcHJlc0JpY2hlLFZpdmVMZXNQcm9iaW90aXF1ZXM=', 'preshared_key': 'Pz8/V2FudFRvVHJ5TXlBZXJvR3Jvc3NlQmljaGU/Pz8=', 'endpoint_addr': '8.8.8.8', 'endpoint_port': 9999, 'persistent_keepalive': 25, 'allowed_ips': ['::/0']} wg.set(IFNAME, peer=peer) # Delete second peer peer = {'public_key': 'RCdBcHJlc0JpY2hlLFZpdmVMZXNQcm9iaW90aXF1ZXM=', 'remove': True} wg.set(IFNAME, peer=peer) # Get information of the interface wg.info(IFNAME) # Get specific value from the interface wg.info(IFNAME)[0].get('WGDEVICE_A_PRIVATE_KEY') NOTES: * The `get()` method always returns iterable * Using `set()` method only requires an interface name * The `peer` structure is described as follow:: struct peer_s { public_key: # Base64 public key - required remove: # Boolean - optional preshared_key: # Base64 preshared key - optional endpoint_addr: # IPv4 or IPv6 endpoint - optional endpoint_port : # endpoint Port - required only if endpoint_addr persistent_keepalive: # time in seconds to send keep alive - optional allowed_ips: # list of CIDRs allowed - optional } � N)� b64decode� b64encode)�a2b_hex)�AF_INET�AF_INET6� inet_ntop� inet_pton)�ctime)� NLA_F_NESTED� NLM_F_ACK� NLM_F_DUMP� NLM_F_REQUEST�genlmsg�nla)�GenericNetlinkSocketZ wireguard� � � � � � � � � i� c @ s4 e Zd ZdZdZG dd� de�ZG dd� de�ZdS )�wgmsgZ WGDEVICE_A_) )�WGDEVICE_A_UNSPEC�none)�WGDEVICE_A_IFINDEX�uint32)�WGDEVICE_A_IFNAMEZasciiz)�WGDEVICE_A_PRIVATE_KEY� parse_wg_key)�WGDEVICE_A_PUBLIC_KEYr! )�WGDEVICE_A_FLAGSr )�WGDEVICE_A_LISTEN_PORT�uint16)�WGDEVICE_A_FWMARKr )�WGDEVICE_A_PEERSz*wgdevice_peerc @ st e Zd ZdZeZdZG dd� de�Ze dd� �Z G dd� de�Z G d d � d e�Z G d d � d e�Z G d d� de�ZdS )zwgmsg.wgdevice_peerZ WGPEER_A_) )ZWGPEER_A_UNSPECr )�WGPEER_A_PUBLIC_KEY�parse_peer_key)�WGPEER_A_PRESHARED_KEYr) )�WGPEER_A_FLAGSr )�WGPEER_A_ENDPOINT�parse_endpoint)�&WGPEER_A_PERSISTENT_KEEPALIVE_INTERVALr% )Z WGPEER_A_LAST_HANDSHAKE_TIME�parse_handshake_time)ZWGPEER_A_RX_BYTES�uint64)ZWGPEER_A_TX_BYTESr0 )�WGPEER_A_ALLOWEDIPSz*wgpeer_allowedip)ZWGPEER_A_PROTOCOL_VERSIONr c @ s e Zd ZdZdd� Zdd� ZdS )z"wgmsg.wgdevice_peer.parse_peer_key�)�keyZ32sc C s t �| � t| d �| d< d S �Nr3 �value�r �decoder ��self� r: ��/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/pyroute2/netlink/generic/wireguard.pyr7 � s z)wgmsg.wgdevice_peer.parse_peer_key.decodec C s t | d �| d< t�| � d S �Nr5 r3 �r r �encoder8 r: r: r; r> � s z)wgmsg.wgdevice_peer.parse_peer_key.encodeN��__name__� __module__� __qualname__�fieldsr7 r> r: r: r: r; r) � s r) c O sp t }d|v r>|d }|d }t�d||d |d � �d }n|d d �d �d krXt}|t krf| jS | jS d S ) N�data�offset�Hr r r r5 �addr�:���)r �struct�unpack�findr � endpoint_ipv4� endpoint_ipv6)r �argv�kwarg�familyrD rE r: r: r; r- � s "z"wgmsg.wgdevice_peer.parse_endpointc @ s e Zd ZdZdd� Zdd� ZdS )z!wgmsg.wgdevice_peer.endpoint_ipv4)�rQ rF ��portz>H)rG Z4s)Z__padZ8xc C s t �| � tt| d �| d< d S �NrG )r r7 r r r8 r: r: r; r7 � s z(wgmsg.wgdevice_peer.endpoint_ipv4.decodec C s( t | d< tt | d �| d< t�| � d S �NrQ rG )r r r r> r8 r: r: r; r> � s z(wgmsg.wgdevice_peer.endpoint_ipv4.encodeNr? r: r: r: r; rM � s rM c @ s e Zd ZdZdd� Zdd� ZdS )z!wgmsg.wgdevice_peer.endpoint_ipv6)rR rS )Zflowinfo�>I)rG Z16s)�scope_idrW c C s t �| � tt| d �| d< d S rU )r r7 r r r8 r: r: r; r7 � s z(wgmsg.wgdevice_peer.endpoint_ipv6.decodec C s( t | d< tt | d �| d< t�| � d S rV )r r r r> r8 r: r: r; r> � s z(wgmsg.wgdevice_peer.endpoint_ipv6.encodeNr? r: r: r: r; rN � s rN c @ s e Zd ZdZdd� ZdS )z(wgmsg.wgdevice_peer.parse_handshake_time))�tv_sec�Q)Ztv_nsecrZ c C s t �| � t| d �| d< d S )NrY zlatest handshake)r r7 r r8 r: r: r; r7 � s z/wgmsg.wgdevice_peer.parse_handshake_time.decodeN)r@ rA rB rC r7 r: r: r: r; r/ � s r/ c @ s e Zd ZdZeZdZdd� ZdS )z$wgmsg.wgdevice_peer.wgpeer_allowedipZWGALLOWEDIP_A_))�WGALLOWEDIP_A_UNSPECr )�WGALLOWEDIP_A_FAMILYr% )�WGALLOWEDIP_A_IPADDR�hex)�WGALLOWEDIP_A_CIDR_MASKZuint8c C s\ t �| � | �d�}|d u r d S | �d�}| �d�}djt|t|�dd���|d�| d< d S ) Nr\ r] r_ z{ipaddr}/{cidr}rH � )�ipaddr�cidrrG )r r7 Zget_attr�formatr r �replace)r9 rQ ra rb r: r: r; r7 � s �z+wgmsg.wgdevice_peer.wgpeer_allowedip.decodeN)r@ rA rB �prefixr � nla_flags�nla_mapr7 r: r: r: r; �wgpeer_allowedip� s rh N)r@ rA rB re r rf rg r r) � staticmethodr- rM rN r/ rh r: r: r: r; � wgdevice_peer� s rj c @ s e Zd ZdZdd� Zdd� ZdS )zwgmsg.parse_wg_keyr2 c C s t �| � t| d �| d< d S r4 r6 r8 r: r: r; r7 � s zwgmsg.parse_wg_key.decodec C s t | d �| d< t�| � d S r< r= r8 r: r: r; r> s zwgmsg.parse_wg_key.encodeNr? r: r: r: r; r! � s r! N)r@ rA rB re rg r rj r! r: r: r: r; r { s rr c @ s> e Zd Zdd� Zdd� Zddd�Zdd � Zd d � Zd d � ZdS )� WireGuardc O s( t j| g|�R i |�� | �tt� d S )N)r �__init__�bind� WG_GENL_NAMEr )r9 �args�kwargsr: r: r; rl s zWireGuard.__init__c C s6 t � }t|d< |d �d|g� | j|| jttB d�S )N�cmd�attrsr )�msg_typeZ msg_flags)r �WG_CMD_GET_DEVICE�appendZ nlm_request�pridr r )r9 � interface�msgr: r: r; �info s �zWireGuard.infoNc C s8 t � }|d �d|g� |d ur<| �|� |d �d|g� |d urV|d �d|g� |d urp|d �d|g� |d ur�| �||� t|d< t|d< | j|d d < ttB |d d < | j |d d < |� � | � |j d � | � � d }|d � dd �}|d u�r4t|d��r0|jtjk�r0t�d| j � t�d� |�|S )Nrr r r r$ r& rq �version�header�type�flags�pid)r r r �error�codez%Generic netlink protocol %s not foundz-Please check if the protocol module is loaded)r ru � _wg_test_key� _wg_set_peer�WG_CMD_SET_DEVICE�WG_GENL_VERSIONrv r r r~ r> �sendtorD �get�hasattrr� �errno�ENOENT�loggingr )r9 rw Z listen_portZfwmarkZ private_key�peerrx �errr: r: r; �set s8 � z WireGuard.setc C s< z t t|��tkrtd��W n ty6 td��Y n0 d S )Nz Invalid WireGuard key lengthzFailed to decode Base64 key)�lenr � WG_KEY_LEN� ValueError� TypeError)r9 r3 r: r: r; r� @ s zWireGuard._wg_test_keyc C s. g }d|ig}d|vr t d��|d }| �|� |�d|g� d|v rr|d rr|�dtg� |d �d|g� d S d|v r�d |v r�|�d |d |d d �g� d |v r�|d }| �|� |�d |g� d|v r�|d }|�d|g� |�dtg� d|v �r| �|d �}|�d|g� |d �d|g� d S )Nrr � public_keyzPeer Public key requiredr( �remover+ r' Z endpoint_addrZ endpoint_portr, )rG rT Z preshared_keyr* Zpersistent_keepaliver. � allowed_ipsr1 )r� r� ru �WGDEVICE_F_REPLACE_PEERS�WGPEER_F_UPDATE_ONLY�_wg_build_allowedips) r9 rx r� rr Zwg_peerr� �pkey� keepaliver� r: r: r; r� G s> ��� zWireGuard._wg_set_peerc C s� g }t |�D ]�\}}g }|�d|i� |�d�dkrBtd�|���|�d�\}}|�d�dkrbtnt}|�d|g� |�dt||�g� |�dt |�g� q |S ) Nrr �/rI z No CIDR set in allowed ip #{}rH r\ r] r_ ) � enumerateru rL r� rc �splitr r r �int) r9 r� �ret�index�ipZ allowed_iprG �maskrQ r: r: r; r� y s �z WireGuard._wg_build_allowedips)NNNN) r@ rA rB rl ry r� r� r� r� r: r: r: r; rk s � +2rk )3�__doc__r� r� rJ �base64r r �binasciir �socketr r r r �timer Zpyroute2.netlinkr r r r r r Zpyroute2.netlink.genericr rn r� r� rt r� r r r r r" r# r$ r& r' r� r[ r\ r] r_ ZWGPEER_F_REMOVE_MEZWGPEER_F_REPLACE_ALLOWEDIPSr� Z WG_MAX_PEERSZWG_MAX_ALLOWEDIPSr rk r: r: r: r; �<module> sH A
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка