chore: add test code in examples
Some checks failed
continuous-integration/drone/push Build is failing
Some checks failed
continuous-integration/drone/push Build is failing
This commit is contained in:
parent
c38834f18c
commit
cbb2f27f5c
65
examples/fw.rs
Normal file
65
examples/fw.rs
Normal file
@ -0,0 +1,65 @@
|
||||
use nftnl::{nft_expr, set::Set, Batch, Chain, FinalizedBatch, ProtoFamily, Rule, Table};
|
||||
use std::{ffi::CString, io::*, net::Ipv4Addr};
|
||||
|
||||
fn main() -> std::result::Result<(), Error> {
|
||||
let table_name = format!("ipblc4");
|
||||
let table = Table::new(
|
||||
&CString::new(format!("{table_name}")).unwrap(),
|
||||
ProtoFamily::Ipv4,
|
||||
);
|
||||
|
||||
let mut batch = Batch::new();
|
||||
|
||||
batch.add(&table, nftnl::MsgType::Add);
|
||||
batch.add(&table, nftnl::MsgType::Del);
|
||||
|
||||
batch.add(&table, nftnl::MsgType::Add);
|
||||
|
||||
let mut chain = Chain::new(&CString::new("test").unwrap(), &table);
|
||||
chain.set_hook(nftnl::Hook::In, 1);
|
||||
chain.set_policy(nftnl::Policy::Accept);
|
||||
|
||||
batch.add(&chain, nftnl::MsgType::Add);
|
||||
batch.add(&Rule::new(&chain), nftnl::MsgType::Del);
|
||||
|
||||
let mut rule = Rule::new(&chain);
|
||||
|
||||
rule.add_expr(&nft_expr!(ct state));
|
||||
rule.add_expr(&nft_expr!(bitwise mask 4u32, xor 0u32));
|
||||
rule.add_expr(&nft_expr!(cmp != 0u32));
|
||||
rule.add_expr(&nft_expr!(counter));
|
||||
rule.add_expr(&nft_expr!(verdict accept));
|
||||
|
||||
batch.add(&rule, nftnl::MsgType::Add);
|
||||
let finalized_batch = batch.finalize();
|
||||
send_and_process(&finalized_batch)?;
|
||||
Ok(())
|
||||
}
|
||||
|
||||
fn send_and_process(batch: &FinalizedBatch) -> std::result::Result<(), Error> {
|
||||
let seq: u32 = 2;
|
||||
let socket = mnl::Socket::new(mnl::Bus::Netfilter)?;
|
||||
socket.send_all(batch)?;
|
||||
let mut buffer = vec![0; nftnl::nft_nlmsg_maxsize() as usize];
|
||||
while let Some(message) = socket_recv(&socket, &mut buffer[..])? {
|
||||
match mnl::cb_run(message, seq, socket.portid())? {
|
||||
mnl::CbResult::Stop => {
|
||||
break;
|
||||
}
|
||||
mnl::CbResult::Ok => (),
|
||||
}
|
||||
}
|
||||
Ok(())
|
||||
}
|
||||
|
||||
fn socket_recv<'a>(
|
||||
socket: &mnl::Socket,
|
||||
buf: &'a mut [u8],
|
||||
) -> std::result::Result<Option<&'a [u8]>, Error> {
|
||||
let ret = socket.recv(buf)?;
|
||||
if ret > 0 {
|
||||
Ok(Some(&buf[..ret]))
|
||||
} else {
|
||||
Ok(None)
|
||||
}
|
||||
}
|
143
examples/fw2.rs
Normal file
143
examples/fw2.rs
Normal file
@ -0,0 +1,143 @@
|
||||
use rustables::*;
|
||||
use rustables::{expr::*, set::*, Batch, Chain, MsgType, ProtocolFamily, Rule, Table};
|
||||
use std::{ffi::*, io::*, net::*};
|
||||
|
||||
const TABLE_NAME: &str = "ipblc4";
|
||||
const CHAIN_NAME: &str = "ipblc";
|
||||
|
||||
fn main() -> Result<()> {
|
||||
/*let name = "blabla";
|
||||
let mut batch = Batch::new();
|
||||
let table = Table::new(ProtocolFamily::Ipv4).with_name(name);
|
||||
batch.add(&table, MsgType::Add);
|
||||
let mut chain = Chain::new(&table).with_name(name);
|
||||
batch.add(&chain, MsgType::Add);
|
||||
|
||||
let toadd1: Ipv4Addr = "9.9.9.8".parse().unwrap();
|
||||
let toadd2: Ipv4Addr = "9.9.9.1".parse().unwrap();
|
||||
|
||||
let mut setbuilder: SetBuilder<Ipv4Addr> = SetBuilder::new("s1", &table).unwrap();
|
||||
setbuilder.add(&toadd1);
|
||||
setbuilder.add(&toadd2);
|
||||
let (mut set, setelem) = setbuilder.finish();
|
||||
batch.add(&setelem, MsgType::Add);
|
||||
//batch.add(&set, MsgType::Add);
|
||||
set.family = ProtocolFamily::Ipv4;
|
||||
set.id = Some(5);
|
||||
set.flags = Some(0);
|
||||
set.userdata = Some("test".into());
|
||||
println!("{:?}", setelem);*/
|
||||
|
||||
let get_table = || -> Result<Option<Table>> {
|
||||
let tables = list_tables().unwrap();
|
||||
for table in tables {
|
||||
if let Some(name) = table.get_name() {
|
||||
println!("Found table {}", name);
|
||||
|
||||
if name == TABLE_NAME {
|
||||
return Ok(Some(table));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Ok(None)
|
||||
};
|
||||
|
||||
let get_chain = |table: &Table| -> Result<Option<Chain>> {
|
||||
let chains = list_chains_for_table(table).unwrap();
|
||||
for chain in chains {
|
||||
if let Some(name) = chain.get_name() {
|
||||
println!("Found chain {}", name);
|
||||
|
||||
if name == CHAIN_NAME {
|
||||
return Ok(Some(chain));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Ok(None)
|
||||
};
|
||||
|
||||
let table = get_table().unwrap().expect("no table?");
|
||||
let chain = get_chain(&table).unwrap().expect("no chain?");
|
||||
|
||||
let ip: IpAddr = "184.73.167.217".parse().unwrap();
|
||||
|
||||
let cmprule = Rule::new(&chain).unwrap().saddr(ip).drop();
|
||||
println!("{:?}", cmprule);
|
||||
|
||||
let mut gexpr = RawExpression::default();
|
||||
for e in cmprule.get_expressions().unwrap().iter() {
|
||||
if let Some(ExpressionVariant::Cmp(ip)) = e.get_data() {
|
||||
gexpr = e.clone();
|
||||
}
|
||||
}
|
||||
|
||||
let rules = list_rules_for_chain(&chain).unwrap();
|
||||
for mut rule in rules {
|
||||
let handle = rule.get_handle().unwrap();
|
||||
println!("handle {}", handle);
|
||||
let exprs = rule.get_expressions().unwrap();
|
||||
for expr in exprs.iter() {
|
||||
if let Some(ExpressionVariant::Cmp(ip)) = expr.get_data() {
|
||||
if expr.clone() == gexpr {
|
||||
println!("{:?}", expr.get_data());
|
||||
println!("test");
|
||||
break;
|
||||
}
|
||||
}
|
||||
//if expr.get_data()
|
||||
//if expr.
|
||||
}
|
||||
}
|
||||
|
||||
//let mut set: Set<Ipv4Addr> = nft_set!(
|
||||
// &CString::new("blabla").unwrap(),
|
||||
// 32,
|
||||
// &table,
|
||||
// ProtoFamily::Ipv4 //ProtoFamily::Ipv4;
|
||||
// //[&toadd1,&toadd2,]
|
||||
//);
|
||||
////println!("{:?}", set.0);
|
||||
//set.add(&toadd1);
|
||||
//set.add(&toadd2);
|
||||
//batch.add(&set, MsgType::Add);
|
||||
|
||||
//let mut rule = Rule::new(&chain)
|
||||
// .unwrap()
|
||||
// .with_expr(
|
||||
// HighLevelPayload::Network(NetworkHeaderField::IPv4(IPv4HeaderField::Saddr)).build(),
|
||||
// )
|
||||
// .with_expr(Lookup::new(&set).unwrap())
|
||||
// .with_expr(Immediate::new_verdict(VerdictKind::Accept));
|
||||
//println!("{:?}", rule);
|
||||
//batch.add(&rule, rustables::MsgType::Add);
|
||||
|
||||
//match batch.send() {
|
||||
// Ok(o) => {}
|
||||
// Err(e) => {
|
||||
// println!("{e}");
|
||||
// }
|
||||
//}
|
||||
|
||||
//rule.add_expr(&nft_expr!(payload ipv4 saddr));
|
||||
//#[rustfmt::skip]
|
||||
//rule.add_expr(&nft_expr!(lookup &set));
|
||||
//rule.add_expr(&nft_expr!(ct state));
|
||||
//rule.add_expr(&nft_expr!(verdict drop));
|
||||
//batch.add(&rule, MsgType::Add);
|
||||
//let finalized_batch = batch.finalize();
|
||||
//send_and_process(&finalized_batch)?;
|
||||
|
||||
Ok(())
|
||||
}
|
||||
|
||||
#[allow(dead_code)]
|
||||
#[derive(Debug)]
|
||||
struct Error(String);
|
||||
|
||||
impl<T: std::error::Error> From<T> for Error {
|
||||
fn from(error: T) -> Self {
|
||||
Error(error.to_string())
|
||||
}
|
||||
}
|
Loading…
Reference in New Issue
Block a user