mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-01-01 10:35:27 +00:00
bbaa4e1cba
Ensure that all APIs which list network objects filter them against the access control system. Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
431 lines
15 KiB
C
431 lines
15 KiB
C
/*
|
|
* network_conf.h: network XML handling
|
|
*
|
|
* Copyright (C) 2006-2013 Red Hat, Inc.
|
|
* Copyright (C) 2006-2008 Daniel P. Berrange
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library. If not, see
|
|
* <http://www.gnu.org/licenses/>.
|
|
*
|
|
* Author: Daniel P. Berrange <berrange@redhat.com>
|
|
*/
|
|
|
|
#ifndef __NETWORK_CONF_H__
|
|
# define __NETWORK_CONF_H__
|
|
|
|
# define DNS_RECORD_LENGTH_SRV (512 - 30) /* Limit minus overhead as mentioned in RFC-2782 */
|
|
|
|
# include <libxml/parser.h>
|
|
# include <libxml/tree.h>
|
|
# include <libxml/xpath.h>
|
|
|
|
# include "internal.h"
|
|
# include "virthread.h"
|
|
# include "virsocketaddr.h"
|
|
# include "virnetdevbandwidth.h"
|
|
# include "virnetdevvportprofile.h"
|
|
# include "virnetdevvlan.h"
|
|
# include "virmacaddr.h"
|
|
# include "device_conf.h"
|
|
# include "virbitmap.h"
|
|
|
|
enum virNetworkForwardType {
|
|
VIR_NETWORK_FORWARD_NONE = 0,
|
|
VIR_NETWORK_FORWARD_NAT,
|
|
VIR_NETWORK_FORWARD_ROUTE,
|
|
VIR_NETWORK_FORWARD_BRIDGE,
|
|
VIR_NETWORK_FORWARD_PRIVATE,
|
|
VIR_NETWORK_FORWARD_VEPA,
|
|
VIR_NETWORK_FORWARD_PASSTHROUGH,
|
|
VIR_NETWORK_FORWARD_HOSTDEV,
|
|
|
|
VIR_NETWORK_FORWARD_LAST,
|
|
};
|
|
|
|
enum virNetworkForwardHostdevDeviceType {
|
|
VIR_NETWORK_FORWARD_HOSTDEV_DEVICE_NONE = 0,
|
|
VIR_NETWORK_FORWARD_HOSTDEV_DEVICE_PCI,
|
|
VIR_NETWORK_FORWARD_HOSTDEV_DEVICE_NETDEV,
|
|
/* USB Device to be added here when supported */
|
|
|
|
VIR_NETWORK_FORWARD_HOSTDEV_DEVICE_LAST,
|
|
};
|
|
|
|
/* The backend driver used for devices from the pool. Currently used
|
|
* only for PCI devices (vfio vs. kvm), but could be used for other
|
|
* device types in the future.
|
|
*/
|
|
typedef enum {
|
|
VIR_NETWORK_FORWARD_DRIVER_NAME_DEFAULT, /* kvm now, could change */
|
|
VIR_NETWORK_FORWARD_DRIVER_NAME_KVM, /* force legacy kvm style */
|
|
VIR_NETWORK_FORWARD_DRIVER_NAME_VFIO, /* force vfio */
|
|
|
|
VIR_NETWORK_FORWARD_DRIVER_NAME_LAST
|
|
} virNetworkForwardDriverNameType;
|
|
|
|
VIR_ENUM_DECL(virNetworkForwardDriverName)
|
|
|
|
typedef struct _virNetworkDHCPHostDef virNetworkDHCPHostDef;
|
|
typedef virNetworkDHCPHostDef *virNetworkDHCPHostDefPtr;
|
|
struct _virNetworkDHCPHostDef {
|
|
char *mac;
|
|
char *id;
|
|
char *name;
|
|
virSocketAddr ip;
|
|
};
|
|
|
|
typedef struct _virNetworkDNSTxtDef virNetworkDNSTxtDef;
|
|
typedef virNetworkDNSTxtDef *virNetworkDNSTxtDefPtr;
|
|
struct _virNetworkDNSTxtDef {
|
|
char *name;
|
|
char *value;
|
|
};
|
|
|
|
typedef struct _virNetworkDNSSrvDef virNetworkDNSSrvDef;
|
|
typedef virNetworkDNSSrvDef *virNetworkDNSSrvDefPtr;
|
|
struct _virNetworkDNSSrvDef {
|
|
char *domain;
|
|
char *service;
|
|
char *protocol;
|
|
char *target;
|
|
unsigned int port;
|
|
unsigned int priority;
|
|
unsigned int weight;
|
|
};
|
|
|
|
typedef struct _virNetworkDNSHostDef virNetworkDNSHostDef;
|
|
typedef virNetworkDNSHostDef *virNetworkDNSHostDefPtr;
|
|
struct _virNetworkDNSHostDef {
|
|
virSocketAddr ip;
|
|
int nnames;
|
|
char **names;
|
|
};
|
|
|
|
typedef struct _virNetworkDNSDef virNetworkDNSDef;
|
|
typedef virNetworkDNSDef *virNetworkDNSDefPtr;
|
|
struct _virNetworkDNSDef {
|
|
size_t ntxts;
|
|
virNetworkDNSTxtDefPtr txts;
|
|
size_t nhosts;
|
|
virNetworkDNSHostDefPtr hosts;
|
|
size_t nsrvs;
|
|
virNetworkDNSSrvDefPtr srvs;
|
|
};
|
|
|
|
typedef struct _virNetworkIpDef virNetworkIpDef;
|
|
typedef virNetworkIpDef *virNetworkIpDefPtr;
|
|
struct _virNetworkIpDef {
|
|
char *family; /* ipv4 or ipv6 - default is ipv4 */
|
|
virSocketAddr address; /* Bridge IP address */
|
|
|
|
/* One or the other of the following two will be used for a given
|
|
* IP address, but never both. The parser guarantees this.
|
|
* Use virNetworkIpDefPrefix/virNetworkIpDefNetmask rather
|
|
* than accessing the data directly - these utility functions
|
|
* will convert one into the other as necessary.
|
|
*/
|
|
unsigned int prefix; /* ipv6 - only prefix allowed */
|
|
virSocketAddr netmask; /* ipv4 - either netmask or prefix specified */
|
|
|
|
size_t nranges; /* Zero or more dhcp ranges */
|
|
virSocketAddrRangePtr ranges;
|
|
|
|
size_t nhosts; /* Zero or more dhcp hosts */
|
|
virNetworkDHCPHostDefPtr hosts;
|
|
|
|
char *tftproot;
|
|
char *bootfile;
|
|
virSocketAddr bootserver;
|
|
};
|
|
|
|
typedef struct _virNetworkRouteDef virNetworkRouteDef;
|
|
typedef virNetworkRouteDef *virNetworkRouteDefPtr;
|
|
struct _virNetworkRouteDef {
|
|
char *family; /* ipv4 or ipv6 - default is ipv4 */
|
|
virSocketAddr address; /* Routed Network IP address */
|
|
|
|
/* One or the other of the following two will be used for a given
|
|
* Network address, but never both. The parser guarantees this.
|
|
* The virSocketAddrGetIpPrefix() can be used to get a
|
|
* valid prefix.
|
|
*/
|
|
virSocketAddr netmask; /* ipv4 - either netmask or prefix specified */
|
|
unsigned int prefix; /* ipv6 - only prefix allowed */
|
|
bool has_prefix; /* prefix= was specified */
|
|
unsigned int metric; /* value for metric (defaults to 1) */
|
|
bool has_metric; /* metric= was specified */
|
|
virSocketAddr gateway; /* gateway IP address for ip-route */
|
|
};
|
|
|
|
typedef struct _virNetworkForwardIfDef virNetworkForwardIfDef;
|
|
typedef virNetworkForwardIfDef *virNetworkForwardIfDefPtr;
|
|
struct _virNetworkForwardIfDef {
|
|
int type;
|
|
union {
|
|
virDevicePCIAddress pci; /*PCI Address of device */
|
|
/* when USB devices are supported a new variable to be added here */
|
|
char *dev; /* name of device */
|
|
}device;
|
|
int connections; /* how many guest interfaces are connected to this device? */
|
|
};
|
|
|
|
typedef struct _virNetworkForwardPfDef virNetworkForwardPfDef;
|
|
typedef virNetworkForwardPfDef *virNetworkForwardPfDefPtr;
|
|
struct _virNetworkForwardPfDef {
|
|
char *dev; /* name of device */
|
|
int connections; /* how many guest interfaces are connected to this device? */
|
|
};
|
|
|
|
typedef struct _virNetworkForwardDef virNetworkForwardDef;
|
|
typedef virNetworkForwardDef *virNetworkForwardDefPtr;
|
|
struct _virNetworkForwardDef {
|
|
int type; /* One of virNetworkForwardType constants */
|
|
bool managed; /* managed attribute for hostdev mode */
|
|
int driverName; /* enum virNetworkForwardDriverNameType */
|
|
|
|
/* If there are multiple forward devices (i.e. a pool of
|
|
* interfaces), they will be listed here.
|
|
*/
|
|
size_t npfs;
|
|
virNetworkForwardPfDefPtr pfs;
|
|
|
|
size_t nifs;
|
|
virNetworkForwardIfDefPtr ifs;
|
|
|
|
/* ranges for NAT */
|
|
virSocketAddrRange addr;
|
|
virPortRange port;
|
|
};
|
|
|
|
typedef struct _virPortGroupDef virPortGroupDef;
|
|
typedef virPortGroupDef *virPortGroupDefPtr;
|
|
struct _virPortGroupDef {
|
|
char *name;
|
|
bool isDefault;
|
|
virNetDevVPortProfilePtr virtPortProfile;
|
|
virNetDevBandwidthPtr bandwidth;
|
|
virNetDevVlan vlan;
|
|
};
|
|
|
|
typedef struct _virNetworkDef virNetworkDef;
|
|
typedef virNetworkDef *virNetworkDefPtr;
|
|
struct _virNetworkDef {
|
|
unsigned char uuid[VIR_UUID_BUFLEN];
|
|
bool uuid_specified;
|
|
char *name;
|
|
int connections; /* # of guest interfaces connected to this network */
|
|
|
|
char *bridge; /* Name of bridge device */
|
|
char *domain;
|
|
unsigned long delay; /* Bridge forward delay (ms) */
|
|
bool stp; /* Spanning tree protocol */
|
|
virMacAddr mac; /* mac address of bridge device */
|
|
bool mac_specified;
|
|
|
|
/* specified if ip6tables rules added
|
|
* when no ipv6 gateway addresses specified.
|
|
*/
|
|
bool ipv6nogw;
|
|
|
|
virNetworkForwardDef forward;
|
|
|
|
size_t nips;
|
|
virNetworkIpDefPtr ips; /* ptr to array of IP addresses on this network */
|
|
|
|
size_t nroutes;
|
|
virNetworkRouteDefPtr routes; /* ptr to array of static routes on this interface */
|
|
|
|
virNetworkDNSDef dns; /* dns related configuration */
|
|
virNetDevVPortProfilePtr virtPortProfile;
|
|
|
|
size_t nPortGroups;
|
|
virPortGroupDefPtr portGroups;
|
|
virNetDevBandwidthPtr bandwidth;
|
|
virNetDevVlan vlan;
|
|
};
|
|
|
|
typedef struct _virNetworkObj virNetworkObj;
|
|
typedef virNetworkObj *virNetworkObjPtr;
|
|
struct _virNetworkObj {
|
|
virMutex lock;
|
|
|
|
pid_t dnsmasqPid;
|
|
pid_t radvdPid;
|
|
unsigned int active : 1;
|
|
unsigned int autostart : 1;
|
|
unsigned int persistent : 1;
|
|
|
|
virNetworkDefPtr def; /* The current definition */
|
|
virNetworkDefPtr newDef; /* New definition to activate at shutdown */
|
|
|
|
virBitmapPtr class_id; /* bitmap of class IDs for QoS */
|
|
unsigned long long floor_sum; /* sum of all 'floor'-s of attached NICs */
|
|
};
|
|
|
|
typedef struct _virNetworkObjList virNetworkObjList;
|
|
typedef virNetworkObjList *virNetworkObjListPtr;
|
|
struct _virNetworkObjList {
|
|
unsigned int count;
|
|
virNetworkObjPtr *objs;
|
|
};
|
|
|
|
static inline int
|
|
virNetworkObjIsActive(const virNetworkObjPtr net)
|
|
{
|
|
return net->active;
|
|
}
|
|
|
|
virNetworkObjPtr virNetworkFindByUUID(const virNetworkObjListPtr nets,
|
|
const unsigned char *uuid);
|
|
virNetworkObjPtr virNetworkFindByName(const virNetworkObjListPtr nets,
|
|
const char *name);
|
|
|
|
|
|
void virNetworkDefFree(virNetworkDefPtr def);
|
|
void virNetworkObjFree(virNetworkObjPtr net);
|
|
void virNetworkObjListFree(virNetworkObjListPtr vms);
|
|
|
|
|
|
typedef bool (*virNetworkObjListFilter)(virConnectPtr conn,
|
|
virNetworkDefPtr def);
|
|
|
|
virNetworkObjPtr virNetworkAssignDef(virNetworkObjListPtr nets,
|
|
const virNetworkDefPtr def,
|
|
bool live);
|
|
int virNetworkObjAssignDef(virNetworkObjPtr network,
|
|
const virNetworkDefPtr def,
|
|
bool live);
|
|
int virNetworkObjSetDefTransient(virNetworkObjPtr network, bool live);
|
|
void virNetworkObjUnsetDefTransient(virNetworkObjPtr network);
|
|
virNetworkDefPtr virNetworkObjGetPersistentDef(virNetworkObjPtr network);
|
|
int virNetworkObjReplacePersistentDef(virNetworkObjPtr network,
|
|
virNetworkDefPtr def);
|
|
virNetworkDefPtr virNetworkDefCopy(virNetworkDefPtr def, unsigned int flags);
|
|
int virNetworkConfigChangeSetup(virNetworkObjPtr dom, unsigned int flags);
|
|
|
|
void virNetworkRemoveInactive(virNetworkObjListPtr nets,
|
|
const virNetworkObjPtr net);
|
|
|
|
virNetworkDefPtr virNetworkDefParseString(const char *xmlStr);
|
|
virNetworkDefPtr virNetworkDefParseFile(const char *filename);
|
|
virNetworkDefPtr virNetworkDefParseNode(xmlDocPtr xml,
|
|
xmlNodePtr root);
|
|
char *virNetworkDefFormat(const virNetworkDefPtr def, unsigned int flags);
|
|
|
|
static inline const char *
|
|
virNetworkDefForwardIf(const virNetworkDefPtr def, size_t n)
|
|
{
|
|
return ((def->forward.ifs && (def->forward.nifs > n) &&
|
|
def->forward.ifs[n].type == VIR_NETWORK_FORWARD_HOSTDEV_DEVICE_NETDEV)
|
|
? def->forward.ifs[n].device.dev : NULL);
|
|
}
|
|
|
|
virPortGroupDefPtr virPortGroupFindByName(virNetworkDefPtr net,
|
|
const char *portgroup);
|
|
|
|
virNetworkIpDefPtr
|
|
virNetworkDefGetIpByIndex(const virNetworkDefPtr def,
|
|
int family, size_t n);
|
|
int virNetworkIpDefPrefix(const virNetworkIpDefPtr def);
|
|
int virNetworkIpDefNetmask(const virNetworkIpDefPtr def,
|
|
virSocketAddrPtr netmask);
|
|
|
|
int virNetworkSaveXML(const char *configDir,
|
|
virNetworkDefPtr def,
|
|
const char *xml);
|
|
|
|
int virNetworkSaveConfig(const char *configDir,
|
|
virNetworkDefPtr def);
|
|
|
|
int virNetworkSaveStatus(const char *statusDir,
|
|
virNetworkObjPtr net) ATTRIBUTE_RETURN_CHECK;
|
|
|
|
virNetworkObjPtr virNetworkLoadConfig(virNetworkObjListPtr nets,
|
|
const char *configDir,
|
|
const char *autostartDir,
|
|
const char *file);
|
|
|
|
virNetworkObjPtr virNetworkLoadState(virNetworkObjListPtr nets,
|
|
const char *stateDir,
|
|
const char *name);
|
|
|
|
int virNetworkLoadAllConfigs(virNetworkObjListPtr nets,
|
|
const char *configDir,
|
|
const char *autostartDir);
|
|
|
|
int virNetworkLoadAllState(virNetworkObjListPtr nets,
|
|
const char *stateDir);
|
|
|
|
int virNetworkDeleteConfig(const char *configDir,
|
|
const char *autostartDir,
|
|
virNetworkObjPtr net);
|
|
|
|
char *virNetworkConfigFile(const char *dir,
|
|
const char *name);
|
|
|
|
int virNetworkBridgeInUse(const virNetworkObjListPtr nets,
|
|
const char *bridge,
|
|
const char *skipname);
|
|
|
|
char *virNetworkAllocateBridge(const virNetworkObjListPtr nets,
|
|
const char *template);
|
|
|
|
int virNetworkSetBridgeName(const virNetworkObjListPtr nets,
|
|
virNetworkDefPtr def,
|
|
int check_collision);
|
|
|
|
void virNetworkSetBridgeMacAddr(virNetworkDefPtr def);
|
|
|
|
int
|
|
virNetworkObjUpdate(virNetworkObjPtr obj,
|
|
unsigned int command, /* virNetworkUpdateCommand */
|
|
unsigned int section, /* virNetworkUpdateSection */
|
|
int parentIndex,
|
|
const char *xml,
|
|
unsigned int flags); /* virNetworkUpdateFlags */
|
|
|
|
int virNetworkObjIsDuplicate(virNetworkObjListPtr doms,
|
|
virNetworkDefPtr def,
|
|
bool check_active);
|
|
|
|
void virNetworkObjLock(virNetworkObjPtr obj);
|
|
void virNetworkObjUnlock(virNetworkObjPtr obj);
|
|
|
|
VIR_ENUM_DECL(virNetworkForward)
|
|
|
|
# define VIR_CONNECT_LIST_NETWORKS_FILTERS_ACTIVE \
|
|
(VIR_CONNECT_LIST_NETWORKS_ACTIVE | \
|
|
VIR_CONNECT_LIST_NETWORKS_INACTIVE)
|
|
|
|
# define VIR_CONNECT_LIST_NETWORKS_FILTERS_PERSISTENT \
|
|
(VIR_CONNECT_LIST_NETWORKS_PERSISTENT | \
|
|
VIR_CONNECT_LIST_NETWORKS_TRANSIENT)
|
|
|
|
# define VIR_CONNECT_LIST_NETWORKS_FILTERS_AUTOSTART \
|
|
(VIR_CONNECT_LIST_NETWORKS_AUTOSTART | \
|
|
VIR_CONNECT_LIST_NETWORKS_NO_AUTOSTART)
|
|
|
|
# define VIR_CONNECT_LIST_NETWORKS_FILTERS_ALL \
|
|
(VIR_CONNECT_LIST_NETWORKS_FILTERS_ACTIVE | \
|
|
VIR_CONNECT_LIST_NETWORKS_FILTERS_PERSISTENT | \
|
|
VIR_CONNECT_LIST_NETWORKS_FILTERS_AUTOSTART)
|
|
|
|
int virNetworkObjListExport(virConnectPtr conn,
|
|
virNetworkObjList netobjs,
|
|
virNetworkPtr **nets,
|
|
virNetworkObjListFilter filter,
|
|
unsigned int flags);
|
|
|
|
#endif /* __NETWORK_CONF_H__ */
|