mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-10-12 21:45:41 +03:00
Consume uBridge's ebpf_modes contract (feature/tc-window 40c36ae): a
stateful mode is usable iff ebpf=1 and its token is listed; builds
predating the field keep their shipped modes (nth/quota/flow), so the
pre-correction window semantics can never be installed silently.
- gns3server/utils/tc_capabilities.py: shared reply parser, mode
policy and filter-type mappings (compute and controller gate on the
same rules)
- gns3server/compute/ubridge/tc_probe.py: standalone probe spawning a
throwaway uBridge as the server's own user, cached by binary
identity (path/mtime/size - the version string cannot distinguish
rebuilds); failures cache as unknown
- GET /v3/compute/capabilities gains ubridge_tc {netem, ebpf,
ebpf_modes, cbpf}; the controller forwards it (Compute.capabilities)
and available_filters hides kernel-datapath filter types an endpoint
compute cannot run (both ends apply their own filters, so one
incapable compute hides the type); computes without a report keep
the full list and apply-time 409 stays the guard
- docker: _ubridge_apply_ebpf_drops gates per mode token; the cleanup
path only sends "off" for modes the build declares
- split DockerVM's kernel-datapath machinery (veth lifecycle, carrier,
marker primitives, tc filter translation, kernel NIO teardown) into
compute/docker/docker_kernel_datapath.py (DockerKernelDatapathMixin)
68 lines
2.2 KiB
Python
68 lines
2.2 KiB
Python
#
|
|
# Copyright (C) 2020 GNS3 Technologies Inc.
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
"""
|
|
API routes for capabilities
|
|
"""
|
|
|
|
import sys
|
|
|
|
import psutil
|
|
from fastapi import APIRouter, Request
|
|
|
|
from gns3server import schemas
|
|
from gns3server.compute import MODULES
|
|
from gns3server.compute.ubridge.tc_probe import probe_tc_capabilities
|
|
from gns3server.utils.path import get_default_project_directory
|
|
from gns3server.utils.tc_capabilities import usable_ebpf_modes
|
|
from gns3server.version import __version__
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get("/capabilities", response_model=schemas.Capabilities)
|
|
async def get_capabilities(request: Request) -> dict:
|
|
|
|
node_types = []
|
|
for module in MODULES:
|
|
node_types.extend(module.node_types())
|
|
|
|
# Kernel-datapath packet filters: what this host's uBridge can run,
|
|
# probed as the server's own user (None = unknown, old/missing uBridge).
|
|
ubridge_tc = None
|
|
caps = await probe_tc_capabilities()
|
|
if caps:
|
|
ubridge_tc = {
|
|
"netem": [keyword for keyword in caps.get("netem", "").split(",") if keyword],
|
|
"ebpf": caps.get("ebpf") == "1",
|
|
"ebpf_modes": list(usable_ebpf_modes(caps)),
|
|
"cbpf": caps.get("cbpf") == "1",
|
|
}
|
|
|
|
# record the controller hostname or IP address
|
|
if request.client:
|
|
request.app.state.controller_host = request.client.host
|
|
|
|
return {
|
|
"version": __version__,
|
|
"platform": sys.platform,
|
|
"cpus": psutil.cpu_count(logical=True),
|
|
"memory": psutil.virtual_memory().total,
|
|
"disk_size": psutil.disk_usage(get_default_project_directory()).total,
|
|
"node_types": node_types,
|
|
"ubridge_tc": ubridge_tc,
|
|
}
|