blob: 2d02d0ea44f8ea7d667e35b916a62ef5af199498 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
#!/bin/bash
# This script applies configuration found in /etc/xen/openvswitch.conf to
# all running domains and removes orphan entries from openvswitch database.
# Written by Mario Preksavec <mario@slackware.hr>
if [ -f /etc/xen/openvswitch.conf ]; then
declare -A rate ipv4 ipv6
. /etc/xen/openvswitch.conf
for domid in $(xenstore-list /local/domain); do
# Skip dom0
if [ $domid -eq 0 ]; then continue; fi
# Take settings from config file
name=$(xenstore-read /local/domain/$domid/name)
if [ ! -z ${rate[$name]} ]; then
rate=${rate[$name]}
elif [ ! -z ${rate[::default]} ]; then
rate=${rate[::default]}
else
rate=0
fi
if [ ! -z ${ipv4[$name]} ]; then
ipv4=${ipv4[$name]}
elif [ ! -z ${ipv4[::default]} ]; then
ipv4=${ipv4[::default]}
fi
if [ ! -z ${ipv6[$name]} ]; then
ipv6=${ipv6[$name]}
elif [ ! -z ${ipv6[::default]} ]; then
ipv6=${ipv6[::default]}
fi
# Domain can have more then one vif
for vif in $(xenstore-list /local/domain/$domid/device/vif); do
dev=vif$domid.$vif
# Handle qemu device names
if [ -e /sys/class/net/${dev}-emu ]; then dev=${dev}-emu; fi
bridge=$(xenstore-read /local/domain/0/backend/vif/$domid/$vif/bridge)
port=$(ovs-vsctl get interface $dev ofport)
# Remove flows and qos
ovs-ofctl del-flows $bridge in_port=$port
ovs-vsctl --timeout=30 -- --if-exists clear port $dev qos
if [ $rate -gt 0 ]; then
echo "Domain $name -- added ${rate}MB/s rate restriction to dev $dev"
policing_rate=$((rate * 1000))
policing_burst=$((rate * 100))
min_rate=$((rate * 1000000))
max_rate=$((rate * 1000000))
qos_id="@qos_$dev"
que_id="@que_$dev"
ovs-vsctl -- set interface $dev \
ingress_policing_rate=$policing_rate \
ingress_policing_burst=$policing_burst \
-- set port $dev qos=$qos_id \
-- --id=$qos_id create qos type=linux-htb \
other-config:max-rate=$max_rate queues=0=$que_id \
-- --id=$que_id create queue other-config:min-rate=$min_rate \
other-config:max-rate=$max_rate >/dev/null 2>&1
fi
if [ ! -z "$ipv4" ] || [ ! -z "$ipv6" ]; then
mac=$(xenstore-read /local/domain/$domid/device/vif/$vif/mac)
if [ ! -z "$ipv4" ]; then
echo "Domain $name -- added IPv4 $ipv4 restriction to dev $dev"
ovs-ofctl add-flow $bridge "in_port=$port priority=39000 \
dl_type=0x0800 nw_src=$ipv4 dl_src=$mac idle_timeout=0 \
action=normal" >/dev/null 2>&1
fi
if [ ! -z "$ipv6" ]; then
echo "Domain $name -- added IPv6 $ipv6 restriction to dev $dev"
ovs-ofctl add-flow $bridge "in_port=$port priority=39000 \
dl_type=0x86dd ipv6_src=$ipv6 dl_src=$mac idle_timeout=0 \
action=normal" >/dev/null 2>&1
fi
echo "Domain $name -- added ARP $mac restriction to dev $dev"
ovs-ofctl add-flow $bridge "in_port=$port priority=38500 \
dl_type=0x0806 dl_src=$mac idle_timeout=0 action=normal" \
>/dev/null 2>&1
ovs-ofctl add-flow $bridge "in_port=$port priority=38000 \
idle_timeout=0 action=drop" >/dev/null 2>&1
fi
done
done
# Behold, the garbage collector!
for bridge in $(ovs-vsctl list-br); do
# Remove unused ports -- unexistent devices
for dev in $(ovs-vsctl list-ports $bridge); do
if [ ! -e /sys/class/net/$dev ]; then
ovs-vsctl -- del-port $bridge $dev
fi
done
# Remove unused flows -- unexistent ports
for port in $(ovs-ofctl dump-flows $bridge \
| awk 'match($0, /in_port=([0-9]+)/, a) {print a[1]}' \
| sort -n | uniq); do
dev=$(ovs-vsctl --bare -- --columns=name find interface ofport=$port)
if [ -z "$dev" ]; then
ovs-ofctl del-flows $bridge in_port=$port
fi
done
done
# Remove unused qos
for qos in $(ovs-vsctl list qos | awk '/^_uuid/ {print $NF}'); do
if [ $(ovs-vsctl list port | grep -cF $qos) -eq 0 ]; then
ovs-vsctl -- destroy qos $qos
fi
done
# Remove unused queues
for queue in $(ovs-vsctl list queue | awk '/^_uuid/ {print $NF}'); do
if [ $(ovs-vsctl list qos | grep -cF $queue) -eq 0 ]; then
ovs-vsctl -- destroy queue $queue
fi
done
fi
|
