lab/mininet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add flush option to disable flushing iptables

Browse Source
This commit is contained in:
Bob Lantz
2015-06-10 20:09:29 -07:00
parent ef3c885630
commit c4a85ab1d1
1 changed files with 23 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mininet/nodelib.py
+23 -19
View File
@@ -74,15 +74,17 @@ class NAT( Node ):
"NAT: Provides connectivity to external network" "NAT: Provides connectivity to external network"
def __init__( self, name, inetIntf=None, subnet='10.0/8', def __init__( self, name, inetIntf=None, subnet='10.0/8',
localIntf=None, **params): localIntf=None, flush=False, **params):
"""Start NAT/forwarding between Mininet and external network """Start NAT/forwarding between Mininet and external network
inetIntf: interface for internet access inetIntf: interface for internet access
subnet: Mininet subnet (default 10.0/8)=""" subnet: Mininet subnet (default 10.0/8)
flush: flush iptables before installing NAT rules"""
super( NAT, self ).__init__( name, **params ) super( NAT, self ).__init__( name, **params )
self.inetIntf = inetIntf if inetIntf else self.getGatewayIntf() self.inetIntf = inetIntf if inetIntf else self.getGatewayIntf()
self.subnet = subnet self.subnet = subnet
self.localIntf = localIntf self.localIntf = localIntf
self.flush = flush
def config( self, **params ): def config( self, **params ):
"""Configure the NAT and iptables""" """Configure the NAT and iptables"""
@@ -93,17 +95,15 @@ class NAT( Node ):
self.cmd( 'sysctl net.ipv4.ip_forward=0' ) self.cmd( 'sysctl net.ipv4.ip_forward=0' )
# Flush any currently active rules if self.flush:
# TODO: is this safe? self.cmd( 'iptables -F' )
self.cmd( 'iptables -F' ) self.cmd( 'iptables -t nat -F' )
self.cmd( 'iptables -t nat -F' ) # Create default entries for unmatched traffic
self.cmd( 'iptables -P INPUT ACCEPT' )
self.cmd( 'iptables -P OUTPUT ACCEPT' )
self.cmd( 'iptables -P FORWARD DROP' )
# Create default entries for unmatched traffic # Install NAT rules
self.cmd( 'iptables -P INPUT ACCEPT' )
self.cmd( 'iptables -P OUTPUT ACCEPT' )
self.cmd( 'iptables -P FORWARD DROP' )
# Configure NAT
self.cmd( 'iptables -I FORWARD', self.cmd( 'iptables -I FORWARD',
'-i', self.localIntf, '-d', self.subnet, '-j DROP' ) '-i', self.localIntf, '-d', self.subnet, '-j DROP' )
self.cmd( 'iptables -A FORWARD', self.cmd( 'iptables -A FORWARD',
@@ -143,13 +143,17 @@ class NAT( Node ):
return fallback return fallback
def terminate( self ): def terminate( self ):
"""Stop NAT/forwarding between Mininet and external network""" "Stop NAT/forwarding between Mininet and external network"
# Flush any currently active rules print 'STOPPING', self
# TODO: is this safe? # Remote NAT rules
self.cmd( 'iptables -F' ) self.cmd( 'iptables -D FORWARD',
self.cmd( 'iptables -t nat -F' ) '-i', self.localIntf, '-d', self.subnet, '-j DROP' )
self.cmd( 'iptables -D FORWARD',
'-i', self.localIntf, '-s', self.subnet, '-j ACCEPT' )
self.cmd( 'iptables -D FORWARD',
'-i', self.inetIntf, '-d', self.subnet, '-j ACCEPT' )
self.cmd( 'iptables -t nat -D POSTROUTING',
'-o', self.inetIntf, '-s', self.subnet, '-j MASQUERADE' )
# Instruct the kernel to stop forwarding # Instruct the kernel to stop forwarding
self.cmd( 'sysctl net.ipv4.ip_forward=0' ) self.cmd( 'sysctl net.ipv4.ip_forward=0' )
super( NAT, self ).terminate() super( NAT, self ).terminate()