mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-10-18 17:02:26 +03:00
21b866aeed
Cross-compute links can ride kernel VXLAN tunnels instead of the uBridge
UDP relay: each endpoint creates one VXLAN device (uBridge's rtnetlink
vxlan module) enslaved into the same per-link Linux bridge the same-host
datapath uses, so filters, markers, capture and suspend keep running on
the anchor unchanged. Opt-in (Server.enable_vxlan_cross_compute, default
off) because the tunnel caps the usable MTU at the underlay minus the
outer headers; the relay stays the default and the fallback.
The controller derives what the pair must agree on: one VNI per link
(upper VNI space, per-link random salt) and deterministic device names
(gvl{link}{node}) that make crashed-run leftovers claimable
(show -> delete -> create). Same-host compute pairs, switch endpoints
and serial/unix-socket containers stay on the relay.
A VNI the kernel refuses self-heals on every path it can surface:
interactive create retries a fresh salt then degrades to the relay;
project open re-dispatches refused batch entries the same way; node
start recognises the refused device, stops the half-started node,
re-wires both ends on a fresh VNI (or degrades the link) and retries
the start. The device MTU is derived from the lower device (dev=) and
the per-link bridge inherits it - no configuration. The capability
probe (ubridge_vxlan in /capabilities) runs one scratch create/delete
on a scratch port that never equals the configured dstport.
The e2e scenario runs two computes on one machine (a network namespace
joined by a veth pair as the fabric) and needs root.
102 lines
3.7 KiB
Python
102 lines
3.7 KiB
Python
#
|
|
# Copyright (C) 2020 GNS3 Technologies Inc.
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
"""
|
|
API routes for capabilities
|
|
"""
|
|
|
|
import sys
|
|
|
|
import psutil
|
|
from fastapi import APIRouter, Request
|
|
|
|
from gns3server import schemas
|
|
from gns3server.compute import MODULES
|
|
from gns3server.compute.ubridge.tc_probe import (
|
|
probe_bridge_tap_support,
|
|
probe_iol_tap_support,
|
|
probe_tap_support,
|
|
probe_tc_capabilities,
|
|
probe_vxlan_support,
|
|
)
|
|
from gns3server.compute.vpcs.vpcs_probe import probe_vpcs_tap
|
|
from gns3server.utils.path import get_default_project_directory
|
|
from gns3server.utils.tc_capabilities import usable_ebpf_modes
|
|
from gns3server.version import __version__
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get("/capabilities", response_model=schemas.Capabilities)
|
|
async def get_capabilities(request: Request) -> dict:
|
|
|
|
node_types = []
|
|
for module in MODULES:
|
|
node_types.extend(module.node_types())
|
|
|
|
# Kernel-datapath packet filters: what this host's uBridge can run,
|
|
# probed as the server's own user (None = unknown, old/missing uBridge).
|
|
ubridge_tc = None
|
|
caps = await probe_tc_capabilities()
|
|
if caps:
|
|
ubridge_tc = {
|
|
"netem": [keyword for keyword in caps.get("netem", "").split(",") if keyword],
|
|
"ebpf": caps.get("ebpf") == "1",
|
|
"ebpf_modes": list(usable_ebpf_modes(caps)),
|
|
"cbpf": caps.get("cbpf") == "1",
|
|
}
|
|
|
|
# Persistent TAP support: the anchor QEMU adapters need for the kernel
|
|
# datapath. None = unknown (probe failed or uBridge too old).
|
|
ubridge_tap = await probe_tap_support()
|
|
|
|
# IOL-port TAP termination (iol_bridge add_nio_tap): the anchor IOU's
|
|
# Ethernet ports need for the kernel datapath. None = unknown.
|
|
ubridge_iol_tap = await probe_iol_tap_support()
|
|
|
|
# Swappable TAP leg on the generic bridge module (bridge delete_nio_tap):
|
|
# what lets an IOL runner container's per-port bridge carry a kernel-link
|
|
# anchor. None = unknown (probe failed or uBridge too old).
|
|
ubridge_bridge_tap = await probe_bridge_tap_support()
|
|
|
|
# VPCS tap-mode anchoring (-e -d with -n): what lets a VPCS node carry a
|
|
# kernel link. None = unknown (probe failed or binary missing).
|
|
vpcs_tap = await probe_vpcs_tap()
|
|
|
|
# VXLAN device creation (the vxlan module): the tunnel a cross-compute
|
|
# kernel link rides. None = unknown (probe failed, uBridge too old, or
|
|
# the kernel refuses vxlan devices here).
|
|
ubridge_vxlan = await probe_vxlan_support()
|
|
|
|
# record the controller hostname or IP address
|
|
if request.client:
|
|
request.app.state.controller_host = request.client.host
|
|
|
|
return {
|
|
"version": __version__,
|
|
"platform": sys.platform,
|
|
"cpus": psutil.cpu_count(logical=True),
|
|
"memory": psutil.virtual_memory().total,
|
|
"disk_size": psutil.disk_usage(get_default_project_directory()).total,
|
|
"node_types": node_types,
|
|
"ubridge_tc": ubridge_tc,
|
|
"ubridge_tap": ubridge_tap,
|
|
"ubridge_iol_tap": ubridge_iol_tap,
|
|
"ubridge_bridge_tap": ubridge_bridge_tap,
|
|
"vpcs_tap": vpcs_tap,
|
|
"ubridge_vxlan": ubridge_vxlan,
|
|
}
|