Файловый менеджер - Редактировать - /opt/imh-python/lib/python3.9/site-packages/pyroute2/__pycache__/wiset.cpython-39.pyc
Ðазад
a ]�h�L � @ sz d Z ddlZddlZddlmZ ddlmZ ddlmZ ddl m Z ddl m Z ddl mZ dd lmZmZmZmZmZ dd lmZ d diZd d � ZG dd� dedg d���ZG dd� de�Zededdfdd��Z ed.dd��Z ed/dd��Z ed0dd��Z ed1d d ��Z ed2d d ��Z!ed3d d!��Z"ed4d"d#��Z#ed5d$d%��Z$ed6d&d'��Z%ed7d(d)��Z&ed8d*d+��Z'd,d-� Z(dS )9a� High level ipset support. When :doc:`ipset` is providing a direct netlink socket with low level functions, a :class:`WiSet` object is built to map ipset objects from kernel. It helps to add/remove entries, list content, etc. For example, adding an entry with :class:`pyroute2.ipset.IPSet` object implies to set a various number of parameters: .. doctest:: :skipif: True >>> ipset = IPSet() >>> ipset.add("foo", "1.2.3.4/24", etype="net") >>> ipset.close() When they are discovered by a :class:`WiSet`: .. doctest:: :skipif: True >>> wiset = load_ipset("foo") >>> wiset.add("1.2.3.4/24") Listing entries is also easier using :class:`WiSet`, since it parses for you netlink messages: .. doctest:: :skipif: True >>> wiset.content {'1.2.3.0/24': IPStats(packets=None, bytes=None, comment=None, timeout=None, skbmark=None, physdev=False)} � N)� namedtuple)� getcallargs)�AF_INET)� basestring��IPSet)� IPSetError)�IPSET_FLAG_IFACE_WILDCARD�IPSET_FLAG_PHYSDEV�IPSET_FLAG_WITH_COMMENT�IPSET_FLAG_WITH_COUNTERS�IPSET_FLAG_WITH_SKBINFO)� IP_PROTOCOLS�countc s � fdd�}|S )a� Decorator to create netlink socket if needed. In many of our helpers, we need to open a netlink socket. This can be expensive for someone using many times the functions: instead to have only one socket and use several requests, we will open it again and again. This helper allow our functions to be flexible: the caller can pass an optional socket, or do nothing. In this last case, this decorator will open a socket for the caller (and close it after call) It also help to mix helpers. One helper can call another one: the socket will be opened only once. We just have to pass the ipset variable. Note that all functions using this helper *must* use ipset as variable name for the socket. c s� t � g| �R i |��}|d d u r�td d7 < t� �>}||d< d|v rZ|�|�d�� � f i |��W d � S 1 s|0 Y � | i |��S )N�sockr � �kwargs)r �COUNTr �update�pop)�argsr Zcallargsr ��fun� �~/root/rpmbuild/BUILDROOT/imh-python39-modules-3.9.7-92.el8.x86_64/opt/imh-python/lib/python3.9/site-packages/pyroute2/wiset.py�wrapM s ,z need_ipset_socket.<locals>.wrapr )r r r r r �need_ipset_socket; s r c s" e Zd ZdZd� fdd� Z� ZS )�IPStatsr Fc s t t| �j| |||||||d�S )N)�physdev�wildcard)�superr �__new__)�cls�packets�bytes�comment�timeout�skbmarkr r �� __class__r r r! o s �zIPStats.__new__)FF)�__name__� __module__� __qualname__� __slots__r! � __classcell__r r r( r r _ s �r )r# r$ r% r& r' r r c @ s� e Zd ZdZddedddddddf dd�Zdd� Zd d � Zed d � �Z e j d d � �Z dd� Z dd� Z e d,dd��Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zed&d'� �Zd(d)� Zd*d+� ZdS )-�WiSeta� Main high level ipset manipulation class. Every high level ipset operation should be possible with this class, you probably don't need other helpers of this module, except tools to load data from kernel (:func:`load_all_ipsets` and :func:`load_ipset`) For example, you can create and an entry in a ipset just with: .. doctest:: :skipif: True >>> with WiSet(name="mysuperipset") as myset: >>> myset.create() # add the ipset in the kernel >>> myset.add("198.51.100.1") # add one IP to the set Netlink sockets are opened by __enter__ and __exit__ function, so you don't have to manage it manually if you use the "with" keyword. If you want to manage it manually (for example for long operation in a daemon), you can do the following: .. doctest:: :skipif: True >>> myset = WiSet(name="mysuperipset") >>> myset.open_netlink() >>> # do stuff >>> myset.close_netlink() You can also don't initiate at all any netlink socket, this code will work: .. doctest:: :skipif: True >>> myset = WiSet(name="mysuperipset") >>> myset.create() >>> myset.destroy() But do it very carefully. In that case, a netlink socket will be opened in background for any operation. No socket will be leaked, but that can consume resources. You can also instantiate WiSet objects with :func:`load_all_ipsets` and :func:`load_ipset`: .. doctest:: :skipif: True >>> all_sets_dict = load_all_ipsets() >>> one_set = load_ipset(name="myset") Have a look on content variable if you need list of entries in the Set. Nzhash:ipFc C sX || _ || _d | _d | _|| _|| _d | _|| _|| _|| _ || _ | | _ d | _ | | _ d S �N)�name�hashsize� _attr_type� entry_type� attr_type�family�_contentr r& �countersr% �revision�index�skbinfo) �selfr1 r5 r6 r r& r8 r% r2 r9 r; r r r �__init__� s zWiSet.__init__c C s | j du rt� | _ dS )zh Open manually a netlink socket. You can use "with WiSet()" statement instead. N)r r �r< r r r � open_netlink� s zWiSet.open_netlinkc C s | j dur| j �� d| _ dS )z Clone any opened netlink socketN)r �closer> r r r � close_netlink� s zWiSet.close_netlinkc C s | j S r0 )r3 r> r r r r5 � s zWiSet.attr_typec C s || _ |�dd�d | _d S )N�:r )r3 �splitr4 )r< �valuer r r r5 � s c C s | � � | S r0 )r? r> r r r � __enter__� s zWiSet.__enter__c C s | � � d S r0 )rA )r< �exc_type� exc_value� tracebackr r r �__exit__� s zWiSet.__exit__c C s� | � }|� d�|_|� d�|_|� d�|_|� d�|_|� d�|_|� d�|_|� d�}|� d�|_|� d �}|d ur�t|t @ �|_ t|t @ �|_ t|t @ �|_|r�|�|� |S ) a Create a ipset objects based on a parsed netlink message :param ndmsg: the netlink message to parse :param content: should we fill (and parse) entries info (can be slow on very large set) :type content: bool ZIPSET_ATTR_TYPENAME�IPSET_ATTR_SETNAMEZIPSET_ATTR_HASHSIZEZIPSET_ATTR_FAMILYZIPSET_ATTR_REVISIONZIPSET_ATTR_INDEX�IPSET_ATTR_DATA�IPSET_ATTR_TIMEOUT�IPSET_ATTR_CADT_FLAGSN)�get_attrr5 r1 r2 r6 r9 r: r& �boolr r8 r r% r r; �update_dict_content)r" �ndmsg�contentr< �data�flagsr r r � from_netlink� s" zWiSet.from_netlinkc C s\ d}d}| j du ri | _ d}|�d��d�}|D �]$}d}| j�d�D �]2}|dkrp|�|��|�} || 7 }�n|d kr�|�|��|�} || 7 }|�d �} | dur�|d �| �7 }n�|d kr�||�d �7 }n�|dkr�||�d�7 }n�|dk�r|tt|�d���7 }nn|dk�rZ|�d�} | du�rFt� | t| ��� � } |dj| d�7 }|t|�d��7 }n|dk�rr||�d�7 }|d7 }qF|� d�}| j du�r�|�d�}|�d�} | du�r�| d d k�r�d � d d � | D ��} ntt| d ��} d!d"i} |�d#�}|du�r t|t@ �| d!< t|t@ �| d$< tf |�d%�|�d&�|�d'�| |d(�| ��}|| j |< q0dS ))z�Update a dictionary statistics with values sent in netlink message :param ndmsg: the netlink message :type ndmsg: netlink message ZIPSET_ATTR_IPADDR_IPV4ZIPSET_ATTR_IP_FROMNZIPSET_ATTR_ADTrK � �,�ip�netZIPSET_ATTR_CIDRz/{0}ZifaceZIPSET_ATTR_IFACE�setZIPSET_ATTR_NAME�markZIPSET_ATTR_MARK�portZIPSET_ATTR_PROTOz{proto}:)�protoZIPSET_ATTR_PORT_FROM�macZIPSET_ATTR_ETHERrL ZIPSET_ATTR_SKBMARKr l �� �/c S s g | ]}t t|���qS r )�str�hex)�.0r[ r r r � <listcomp>I � z-WiSet.update_dict_content.<locals>.<listcomp>r r FrM r ZIPSET_ATTR_PACKETSZIPSET_ATTR_BYTESZIPSET_ATTR_COMMENT)r# r$ r% r' r& )r7 rN Z get_attrsr4 rC �formatr` ra r �get�lower�stripr& �joinrO r r r )r< rQ r6 Zip_attrr& �entries�entry�keyZ parse_typerX Zcidrr] r' Zentry_flag_parsedrT rD r r r rP st ���zWiSet.update_dict_contentc K s8 t | jf| j| j| j| j| j| j| j| j d�|�� dS )z�Insert this Set in the kernel Many options are set with python object attributes (like comments, counters, etc). For non-supported type, kwargs are provided. See :doc:`ipset` documentation for more information. )�styper6 r r& r% r8 r2 r; N) � create_ipsetr1 r5 r6 r r& r% r8 r2 r; )r< r r r r �create^ s �� �z WiSet.createc C s t | j| jd� dS )a Destroy this ipset in the kernel list. It does not delete this python object (any content or other stored values are keep in memory). This function will fail if the ipset is still referenced (by example in iptables rules), you have been warned. �r N)� destroy_ipsetr1 r r> r r r �destroyr s z WiSet.destroyc K s� t |t�r |�|� |�d�}| jrD|�dd�|d< |�dd�|d< |�d�}t |t�r�|�d�}t|d d�}zt|d d�}W n t y� td d�}Y n0 ||f|d< t | j |f| j | j d �|�� d S ) z�Add an entry in this ipset. If counters are enabled on the set, reset by default the value when we add the element. Without this reset, kernel sometimes store old values and can add very strange behavior on counters. rk r# r r$ r' r_ � r Z 0xffffffff��etyper N)� isinstance�dictr r r8 rf r rC �int� IndexError�add_ipset_entryr1 r4 r )r< rk r r' r[ �maskr r r �add{ s, ���z WiSet.addc K s" t | j|f| j| jd�|�� dS )z$Delete/remove an entry in this ipsetrt N)�delete_ipset_entryr1 r4 r �r< rk r r r r �delete� s ���z WiSet.deletec K s t | j|f| j| jd�|��S )z!Test if an entry is in this ipsetrt )�test_ipset_entryr1 r4 r r~ r r r �test� s ���z WiSet.testc K s t | j|f| j| jd�|��S )zpTest if a list of a set of entries is in this ipset Return a set of entries found in the IPSet rt )�test_ipset_entriesr1 r4 r )r< rj r r r r � test_list� s ���zWiSet.test_listc C s i | _ t| | jd� dS )z5Update the content dictionary with values from kernelrp N)r7 �update_wiset_contentr r> r r r �update_content� s zWiSet.update_contentc C s t | j| jd� dS )zFlush entries of the ipsetrp N)� flush_ipsetr1 r r> r r r �flush� s z WiSet.flushc C s | j du r| �� | j S )zqDictionary of entries in the set. Keys are IP addresses (as string), values are IPStats tuples. N)r7 r� r> r r r rR � s z WiSet.contentc C s |D ]}| � |� qdS )z?Just a small helper to reduce the number of loops in main code.N�r| )r< rj rk r r r � insert_list� s zWiSet.insert_listc C sb t t�� �dd� }t| j| jd�}||_| j|_|�� |�|� t| j|| jd� |� � dS )a} Replace the content of an ipset with a new list of entries. This operation is like a flush() and adding all entries one by one. But this call is atomic: it creates a temporary ipset and swap the content. :param new_list: list of entries to add :type new_list: list or :py:class:`set` of basestring or of keyword arguments dict r � rp N) r` �uuid�uuid4� load_ipsetr1 r ro r� � swap_ipsetsrr )r< Znew_listZ temp_name�tempr r r �replace_entries� s zWiSet.replace_entries)F)r* r+ r, �__doc__r r= r? rA �propertyr5 �setterrE rI � classmethodrU rP ro rr r| r r� r� r� r� rR r� r� r r r r r/ � sF 9� H r/ Fc K s |j | f|||d�|�� dS )zCreate an ipset.)rm r6 � exclusiveN)ro )r1 rm r6 r� r r r r r rn � s ���rn c C st i }|� � D ]b}|�d�}|dur.|�|�s.q ||vrZtj|| d�}|rN||_|||j< q | r ||j �|� q |S )aL List all ipset as WiSet objects. Get full ipset data from kernel and parse it in WiSet objects. Result is a dictionary with ipset names as keys, and WiSet objects as values. :param content: parse the list of entries and fill it in WiSet content dictionary :type content: bool :param inherit_sock: use the netlink sock passed in ipset arg to fill WiSets sock :type inherit_sock: bool :param prefix: filter out all ipset with a name not beginning by this prefix :type prefix: str or None rJ N�rR )�listrN � startswithr/ rU r r1 rP )rR r � inherit_sock�prefix�resZmysetr1 �wisetr r r �load_all_ipsets� s r� c C s� d}z|j | d�}W nB tyV } z*|jtjkr@|W Y d}~S � W Y d}~n d}~0 0 |D ]4}|du r�tj||d�}|r�||_q\|r\|�|� q\|S )a� Get one ipset as WiSet object Helper to get current WiSet object. More efficient that :func:`load_all_ipsets` since the kernel does the filtering itself. Return None if the ipset does not exist :param name: name of the ipset :type name: str :param content: parse or not content and statistics on entries :type content: bool :param inherit_sock: use the netlink sock passed in ipset arg to fill WiSet sock :type inherit_sock: bool N�r1 r� ) r� r �code�errno�ENOENTr/ rU r rP )r1 rR r r� r� �messages�e�msgr r r r� s r� c C s" |j | jd�D ]}| �|� qdS )z�Update content/statistics of a wiset. You should never call yourself this function. It is only a helper to use the :func:`need_ipset_socket` decorator out of WiSet object. r� N)r� r1 rP )r� r r� r r r r� % s r� c C s |� | � dS )z Remove an ipset in the kernel.N)rr �r1 r r r r rq 0 s rq c K s |j | |fi |�� dS )z Add an entryNr� �r1 rk r r r r r rz 6 s rz c K s |j | |fi |�� dS )zRemove one entryN)r r� r r r r} < s r} c C sV z|� | � W dS tyP } z(|jtjkr:W Y d}~dS � W Y d}~n d}~0 0 dS )z Test if the given ipset existTNF)�headersr r� r� r� )r1 r r� r r r �test_ipset_existB s r� c K s |j | |fi |��S )z Test if an entry is in one ipset)r� r� r r r r� N s r� c K s2 t � }|D ]"}|j| |fi |��r |�|� q |S )z"Test a list (or a set) of entries.)rZ r� r| )r1 rj r r r� rk r r r r� T s r� c C s |� | � dS )zFlush all ipset contentN)r� r� r r r r� ^ s r� c C s |� | |� dS )zQSwap the content of ipset a and b. ipsets must have compatible content. N)Zswap)Zname_aZname_br r r r r� d s r� c K s t f i | ��S )z7Get a socket that one can pass to several WiSet objectsr )r r r r �get_ipset_socketm s r� )FNFN)FNF)N)N)N)N)N)N)N)N)N))r� r� r� � collectionsr �inspectr �socketr Zpyroute2.commonr Zpyroute2.ipsetr Zpyroute2.netlink.exceptionsr Z pyroute2.netlink.nfnetlink.ipsetr r r r r Z%pyroute2.netlink.nfnetlink.nfctsocketr r r r �objectr/ rn r� r� r� rq rz r} r� r� r� r� r� r� r r r r �<module> s^ $ $ ��' T� !
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка