12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976 |
- package libnetwork
- import (
- "encoding/json"
- "fmt"
- "net"
- "strings"
- "sync"
- "time"
- "github.com/Sirupsen/logrus"
- "github.com/docker/docker/pkg/stringid"
- "github.com/docker/libnetwork/config"
- "github.com/docker/libnetwork/datastore"
- "github.com/docker/libnetwork/driverapi"
- "github.com/docker/libnetwork/etchosts"
- "github.com/docker/libnetwork/ipamapi"
- "github.com/docker/libnetwork/netlabel"
- "github.com/docker/libnetwork/netutils"
- "github.com/docker/libnetwork/networkdb"
- "github.com/docker/libnetwork/options"
- "github.com/docker/libnetwork/types"
- )
- // A Network represents a logical connectivity zone that containers may
- // join using the Link method. A Network is managed by a specific driver.
- type Network interface {
- // A user chosen name for this network.
- Name() string
- // A system generated id for this network.
- ID() string
- // The type of network, which corresponds to its managing driver.
- Type() string
- // Create a new endpoint to this network symbolically identified by the
- // specified unique name. The options parameter carries driver specific options.
- CreateEndpoint(name string, options ...EndpointOption) (Endpoint, error)
- // Delete the network.
- Delete() error
- // Endpoints returns the list of Endpoint(s) in this network.
- Endpoints() []Endpoint
- // WalkEndpoints uses the provided function to walk the Endpoints
- WalkEndpoints(walker EndpointWalker)
- // EndpointByName returns the Endpoint which has the passed name. If not found, the error ErrNoSuchEndpoint is returned.
- EndpointByName(name string) (Endpoint, error)
- // EndpointByID returns the Endpoint which has the passed id. If not found, the error ErrNoSuchEndpoint is returned.
- EndpointByID(id string) (Endpoint, error)
- // Return certain operational data belonging to this network
- Info() NetworkInfo
- }
- // NetworkInfo returns some configuration and operational information about the network
- type NetworkInfo interface {
- IpamConfig() (string, map[string]string, []*IpamConf, []*IpamConf)
- IpamInfo() ([]*IpamInfo, []*IpamInfo)
- DriverOptions() map[string]string
- Scope() string
- IPv6Enabled() bool
- Internal() bool
- Attachable() bool
- Ingress() bool
- ConfigFrom() string
- ConfigOnly() bool
- Labels() map[string]string
- Dynamic() bool
- Created() time.Time
- // Peers returns a slice of PeerInfo structures which has the information about the peer
- // nodes participating in the same overlay network. This is currently the per-network
- // gossip cluster. For non-dynamic overlay networks and bridge networks it returns an
- // empty slice
- Peers() []networkdb.PeerInfo
- //Services returns a map of services keyed by the service name with the details
- //of all the tasks that belong to the service. Applicable only in swarm mode.
- Services() map[string]ServiceInfo
- }
- // EndpointWalker is a client provided function which will be used to walk the Endpoints.
- // When the function returns true, the walk will stop.
- type EndpointWalker func(ep Endpoint) bool
- // ipInfo is the reverse mapping from IP to service name to serve the PTR query.
- // extResolver is set if an externl server resolves a service name to this IP.
- // Its an indication to defer PTR queries also to that external server.
- type ipInfo struct {
- name string
- extResolver bool
- }
- type svcInfo struct {
- svcMap map[string][]net.IP
- svcIPv6Map map[string][]net.IP
- ipMap map[string]*ipInfo
- service map[string][]servicePorts
- }
- // backing container or host's info
- type serviceTarget struct {
- name string
- ip net.IP
- port uint16
- }
- type servicePorts struct {
- portName string
- proto string
- target []serviceTarget
- }
- type networkDBTable struct {
- name string
- objType driverapi.ObjectType
- }
- // IpamConf contains all the ipam related configurations for a network
- type IpamConf struct {
- // The master address pool for containers and network interfaces
- PreferredPool string
- // A subset of the master pool. If specified,
- // this becomes the container pool
- SubPool string
- // Preferred Network Gateway address (optional)
- Gateway string
- // Auxiliary addresses for network driver. Must be within the master pool.
- // libnetwork will reserve them if they fall into the container pool
- AuxAddresses map[string]string
- }
- // Validate checks whether the configuration is valid
- func (c *IpamConf) Validate() error {
- if c.Gateway != "" && nil == net.ParseIP(c.Gateway) {
- return types.BadRequestErrorf("invalid gateway address %s in Ipam configuration", c.Gateway)
- }
- return nil
- }
- // IpamInfo contains all the ipam related operational info for a network
- type IpamInfo struct {
- PoolID string
- Meta map[string]string
- driverapi.IPAMData
- }
- // MarshalJSON encodes IpamInfo into json message
- func (i *IpamInfo) MarshalJSON() ([]byte, error) {
- m := map[string]interface{}{
- "PoolID": i.PoolID,
- }
- v, err := json.Marshal(&i.IPAMData)
- if err != nil {
- return nil, err
- }
- m["IPAMData"] = string(v)
- if i.Meta != nil {
- m["Meta"] = i.Meta
- }
- return json.Marshal(m)
- }
- // UnmarshalJSON decodes json message into PoolData
- func (i *IpamInfo) UnmarshalJSON(data []byte) error {
- var (
- m map[string]interface{}
- err error
- )
- if err = json.Unmarshal(data, &m); err != nil {
- return err
- }
- i.PoolID = m["PoolID"].(string)
- if v, ok := m["Meta"]; ok {
- b, _ := json.Marshal(v)
- if err = json.Unmarshal(b, &i.Meta); err != nil {
- return err
- }
- }
- if v, ok := m["IPAMData"]; ok {
- if err = json.Unmarshal([]byte(v.(string)), &i.IPAMData); err != nil {
- return err
- }
- }
- return nil
- }
- type network struct {
- ctrlr *controller
- name string
- networkType string
- id string
- created time.Time
- scope string // network data scope
- labels map[string]string
- ipamType string
- ipamOptions map[string]string
- addrSpace string
- ipamV4Config []*IpamConf
- ipamV6Config []*IpamConf
- ipamV4Info []*IpamInfo
- ipamV6Info []*IpamInfo
- enableIPv6 bool
- postIPv6 bool
- epCnt *endpointCnt
- generic options.Generic
- dbIndex uint64
- dbExists bool
- persist bool
- stopWatchCh chan struct{}
- drvOnce *sync.Once
- resolverOnce sync.Once
- resolver []Resolver
- internal bool
- attachable bool
- inDelete bool
- ingress bool
- driverTables []networkDBTable
- dynamic bool
- configOnly bool
- configFrom string
- sync.Mutex
- }
- func (n *network) Name() string {
- n.Lock()
- defer n.Unlock()
- return n.name
- }
- func (n *network) ID() string {
- n.Lock()
- defer n.Unlock()
- return n.id
- }
- func (n *network) Created() time.Time {
- n.Lock()
- defer n.Unlock()
- return n.created
- }
- func (n *network) Type() string {
- n.Lock()
- defer n.Unlock()
- return n.networkType
- }
- func (n *network) Key() []string {
- n.Lock()
- defer n.Unlock()
- return []string{datastore.NetworkKeyPrefix, n.id}
- }
- func (n *network) KeyPrefix() []string {
- return []string{datastore.NetworkKeyPrefix}
- }
- func (n *network) Value() []byte {
- n.Lock()
- defer n.Unlock()
- b, err := json.Marshal(n)
- if err != nil {
- return nil
- }
- return b
- }
- func (n *network) SetValue(value []byte) error {
- return json.Unmarshal(value, n)
- }
- func (n *network) Index() uint64 {
- n.Lock()
- defer n.Unlock()
- return n.dbIndex
- }
- func (n *network) SetIndex(index uint64) {
- n.Lock()
- n.dbIndex = index
- n.dbExists = true
- n.Unlock()
- }
- func (n *network) Exists() bool {
- n.Lock()
- defer n.Unlock()
- return n.dbExists
- }
- func (n *network) Skip() bool {
- n.Lock()
- defer n.Unlock()
- return !n.persist
- }
- func (n *network) New() datastore.KVObject {
- n.Lock()
- defer n.Unlock()
- return &network{
- ctrlr: n.ctrlr,
- drvOnce: &sync.Once{},
- scope: n.scope,
- }
- }
- // CopyTo deep copies to the destination IpamConfig
- func (c *IpamConf) CopyTo(dstC *IpamConf) error {
- dstC.PreferredPool = c.PreferredPool
- dstC.SubPool = c.SubPool
- dstC.Gateway = c.Gateway
- if c.AuxAddresses != nil {
- dstC.AuxAddresses = make(map[string]string, len(c.AuxAddresses))
- for k, v := range c.AuxAddresses {
- dstC.AuxAddresses[k] = v
- }
- }
- return nil
- }
- // CopyTo deep copies to the destination IpamInfo
- func (i *IpamInfo) CopyTo(dstI *IpamInfo) error {
- dstI.PoolID = i.PoolID
- if i.Meta != nil {
- dstI.Meta = make(map[string]string)
- for k, v := range i.Meta {
- dstI.Meta[k] = v
- }
- }
- dstI.AddressSpace = i.AddressSpace
- dstI.Pool = types.GetIPNetCopy(i.Pool)
- dstI.Gateway = types.GetIPNetCopy(i.Gateway)
- if i.AuxAddresses != nil {
- dstI.AuxAddresses = make(map[string]*net.IPNet)
- for k, v := range i.AuxAddresses {
- dstI.AuxAddresses[k] = types.GetIPNetCopy(v)
- }
- }
- return nil
- }
- func (n *network) validateConfiguration() error {
- if n.configOnly {
- // Only supports network specific configurations.
- // Network operator configurations are not supported.
- if n.ingress || n.internal || n.attachable || n.scope != "" {
- return types.ForbiddenErrorf("configuration network can only contain network " +
- "specific fields. Network operator fields like " +
- "[ ingress | internal | attachable | scope ] are not supported.")
- }
- }
- if n.configFrom != "" {
- if n.configOnly {
- return types.ForbiddenErrorf("a configuration network cannot depend on another configuration network")
- }
- if n.ipamType != "" &&
- n.ipamType != defaultIpamForNetworkType(n.networkType) ||
- n.enableIPv6 ||
- len(n.labels) > 0 || len(n.ipamOptions) > 0 ||
- len(n.ipamV4Config) > 0 || len(n.ipamV6Config) > 0 {
- return types.ForbiddenErrorf("user specified configurations are not supported if the network depends on a configuration network")
- }
- if len(n.generic) > 0 {
- if data, ok := n.generic[netlabel.GenericData]; ok {
- var (
- driverOptions map[string]string
- opts interface{}
- )
- switch data.(type) {
- case map[string]interface{}:
- opts = data.(map[string]interface{})
- case map[string]string:
- opts = data.(map[string]string)
- }
- ba, err := json.Marshal(opts)
- if err != nil {
- return fmt.Errorf("failed to validate network configuration: %v", err)
- }
- if err := json.Unmarshal(ba, &driverOptions); err != nil {
- return fmt.Errorf("failed to validate network configuration: %v", err)
- }
- if len(driverOptions) > 0 {
- return types.ForbiddenErrorf("network driver options are not supported if the network depends on a configuration network")
- }
- }
- }
- }
- return nil
- }
- // Applies network specific configurations
- func (n *network) applyConfigurationTo(to *network) error {
- to.enableIPv6 = n.enableIPv6
- if len(n.labels) > 0 {
- to.labels = make(map[string]string, len(n.labels))
- for k, v := range n.labels {
- if _, ok := to.labels[k]; !ok {
- to.labels[k] = v
- }
- }
- }
- if len(n.ipamOptions) > 0 {
- to.ipamOptions = make(map[string]string, len(n.ipamOptions))
- for k, v := range n.ipamOptions {
- if _, ok := to.ipamOptions[k]; !ok {
- to.ipamOptions[k] = v
- }
- }
- }
- if len(n.ipamV4Config) > 0 {
- to.ipamV4Config = make([]*IpamConf, 0, len(n.ipamV4Config))
- for _, v4conf := range n.ipamV4Config {
- to.ipamV4Config = append(to.ipamV4Config, v4conf)
- }
- }
- if len(n.ipamV6Config) > 0 {
- to.ipamV6Config = make([]*IpamConf, 0, len(n.ipamV6Config))
- for _, v6conf := range n.ipamV6Config {
- to.ipamV6Config = append(to.ipamV6Config, v6conf)
- }
- }
- if len(n.generic) > 0 {
- to.generic = options.Generic{}
- for k, v := range n.generic {
- to.generic[k] = v
- }
- }
- return nil
- }
- func (n *network) CopyTo(o datastore.KVObject) error {
- n.Lock()
- defer n.Unlock()
- dstN := o.(*network)
- dstN.name = n.name
- dstN.id = n.id
- dstN.created = n.created
- dstN.networkType = n.networkType
- dstN.scope = n.scope
- dstN.dynamic = n.dynamic
- dstN.ipamType = n.ipamType
- dstN.enableIPv6 = n.enableIPv6
- dstN.persist = n.persist
- dstN.postIPv6 = n.postIPv6
- dstN.dbIndex = n.dbIndex
- dstN.dbExists = n.dbExists
- dstN.drvOnce = n.drvOnce
- dstN.internal = n.internal
- dstN.attachable = n.attachable
- dstN.inDelete = n.inDelete
- dstN.ingress = n.ingress
- dstN.configOnly = n.configOnly
- dstN.configFrom = n.configFrom
- // copy labels
- if dstN.labels == nil {
- dstN.labels = make(map[string]string, len(n.labels))
- }
- for k, v := range n.labels {
- dstN.labels[k] = v
- }
- if n.ipamOptions != nil {
- dstN.ipamOptions = make(map[string]string, len(n.ipamOptions))
- for k, v := range n.ipamOptions {
- dstN.ipamOptions[k] = v
- }
- }
- for _, v4conf := range n.ipamV4Config {
- dstV4Conf := &IpamConf{}
- v4conf.CopyTo(dstV4Conf)
- dstN.ipamV4Config = append(dstN.ipamV4Config, dstV4Conf)
- }
- for _, v4info := range n.ipamV4Info {
- dstV4Info := &IpamInfo{}
- v4info.CopyTo(dstV4Info)
- dstN.ipamV4Info = append(dstN.ipamV4Info, dstV4Info)
- }
- for _, v6conf := range n.ipamV6Config {
- dstV6Conf := &IpamConf{}
- v6conf.CopyTo(dstV6Conf)
- dstN.ipamV6Config = append(dstN.ipamV6Config, dstV6Conf)
- }
- for _, v6info := range n.ipamV6Info {
- dstV6Info := &IpamInfo{}
- v6info.CopyTo(dstV6Info)
- dstN.ipamV6Info = append(dstN.ipamV6Info, dstV6Info)
- }
- dstN.generic = options.Generic{}
- for k, v := range n.generic {
- dstN.generic[k] = v
- }
- return nil
- }
- func (n *network) DataScope() string {
- s := n.Scope()
- // All swarm scope networks have local datascope
- if s == datastore.SwarmScope {
- s = datastore.LocalScope
- }
- return s
- }
- func (n *network) getEpCnt() *endpointCnt {
- n.Lock()
- defer n.Unlock()
- return n.epCnt
- }
- // TODO : Can be made much more generic with the help of reflection (but has some golang limitations)
- func (n *network) MarshalJSON() ([]byte, error) {
- netMap := make(map[string]interface{})
- netMap["name"] = n.name
- netMap["id"] = n.id
- netMap["created"] = n.created
- netMap["networkType"] = n.networkType
- netMap["scope"] = n.scope
- netMap["labels"] = n.labels
- netMap["ipamType"] = n.ipamType
- netMap["ipamOptions"] = n.ipamOptions
- netMap["addrSpace"] = n.addrSpace
- netMap["enableIPv6"] = n.enableIPv6
- if n.generic != nil {
- netMap["generic"] = n.generic
- }
- netMap["persist"] = n.persist
- netMap["postIPv6"] = n.postIPv6
- if len(n.ipamV4Config) > 0 {
- ics, err := json.Marshal(n.ipamV4Config)
- if err != nil {
- return nil, err
- }
- netMap["ipamV4Config"] = string(ics)
- }
- if len(n.ipamV4Info) > 0 {
- iis, err := json.Marshal(n.ipamV4Info)
- if err != nil {
- return nil, err
- }
- netMap["ipamV4Info"] = string(iis)
- }
- if len(n.ipamV6Config) > 0 {
- ics, err := json.Marshal(n.ipamV6Config)
- if err != nil {
- return nil, err
- }
- netMap["ipamV6Config"] = string(ics)
- }
- if len(n.ipamV6Info) > 0 {
- iis, err := json.Marshal(n.ipamV6Info)
- if err != nil {
- return nil, err
- }
- netMap["ipamV6Info"] = string(iis)
- }
- netMap["internal"] = n.internal
- netMap["attachable"] = n.attachable
- netMap["inDelete"] = n.inDelete
- netMap["ingress"] = n.ingress
- netMap["configOnly"] = n.configOnly
- netMap["configFrom"] = n.configFrom
- return json.Marshal(netMap)
- }
- // TODO : Can be made much more generic with the help of reflection (but has some golang limitations)
- func (n *network) UnmarshalJSON(b []byte) (err error) {
- var netMap map[string]interface{}
- if err := json.Unmarshal(b, &netMap); err != nil {
- return err
- }
- n.name = netMap["name"].(string)
- n.id = netMap["id"].(string)
- // "created" is not available in older versions
- if v, ok := netMap["created"]; ok {
- // n.created is time.Time but marshalled as string
- if err = n.created.UnmarshalText([]byte(v.(string))); err != nil {
- logrus.Warnf("failed to unmarshal creation time %v: %v", v, err)
- n.created = time.Time{}
- }
- }
- n.networkType = netMap["networkType"].(string)
- n.enableIPv6 = netMap["enableIPv6"].(bool)
- // if we weren't unmarshaling to netMap we could simply set n.labels
- // unfortunately, we can't because map[string]interface{} != map[string]string
- if labels, ok := netMap["labels"].(map[string]interface{}); ok {
- n.labels = make(map[string]string, len(labels))
- for label, value := range labels {
- n.labels[label] = value.(string)
- }
- }
- if v, ok := netMap["ipamOptions"]; ok {
- if iOpts, ok := v.(map[string]interface{}); ok {
- n.ipamOptions = make(map[string]string, len(iOpts))
- for k, v := range iOpts {
- n.ipamOptions[k] = v.(string)
- }
- }
- }
- if v, ok := netMap["generic"]; ok {
- n.generic = v.(map[string]interface{})
- // Restore opts in their map[string]string form
- if v, ok := n.generic[netlabel.GenericData]; ok {
- var lmap map[string]string
- ba, err := json.Marshal(v)
- if err != nil {
- return err
- }
- if err := json.Unmarshal(ba, &lmap); err != nil {
- return err
- }
- n.generic[netlabel.GenericData] = lmap
- }
- }
- if v, ok := netMap["persist"]; ok {
- n.persist = v.(bool)
- }
- if v, ok := netMap["postIPv6"]; ok {
- n.postIPv6 = v.(bool)
- }
- if v, ok := netMap["ipamType"]; ok {
- n.ipamType = v.(string)
- } else {
- n.ipamType = ipamapi.DefaultIPAM
- }
- if v, ok := netMap["addrSpace"]; ok {
- n.addrSpace = v.(string)
- }
- if v, ok := netMap["ipamV4Config"]; ok {
- if err := json.Unmarshal([]byte(v.(string)), &n.ipamV4Config); err != nil {
- return err
- }
- }
- if v, ok := netMap["ipamV4Info"]; ok {
- if err := json.Unmarshal([]byte(v.(string)), &n.ipamV4Info); err != nil {
- return err
- }
- }
- if v, ok := netMap["ipamV6Config"]; ok {
- if err := json.Unmarshal([]byte(v.(string)), &n.ipamV6Config); err != nil {
- return err
- }
- }
- if v, ok := netMap["ipamV6Info"]; ok {
- if err := json.Unmarshal([]byte(v.(string)), &n.ipamV6Info); err != nil {
- return err
- }
- }
- if v, ok := netMap["internal"]; ok {
- n.internal = v.(bool)
- }
- if v, ok := netMap["attachable"]; ok {
- n.attachable = v.(bool)
- }
- if s, ok := netMap["scope"]; ok {
- n.scope = s.(string)
- }
- if v, ok := netMap["inDelete"]; ok {
- n.inDelete = v.(bool)
- }
- if v, ok := netMap["ingress"]; ok {
- n.ingress = v.(bool)
- }
- if v, ok := netMap["configOnly"]; ok {
- n.configOnly = v.(bool)
- }
- if v, ok := netMap["configFrom"]; ok {
- n.configFrom = v.(string)
- }
- // Reconcile old networks with the recently added `--ipv6` flag
- if !n.enableIPv6 {
- n.enableIPv6 = len(n.ipamV6Info) > 0
- }
- return nil
- }
- // NetworkOption is an option setter function type used to pass various options to
- // NewNetwork method. The various setter functions of type NetworkOption are
- // provided by libnetwork, they look like NetworkOptionXXXX(...)
- type NetworkOption func(n *network)
- // NetworkOptionGeneric function returns an option setter for a Generic option defined
- // in a Dictionary of Key-Value pair
- func NetworkOptionGeneric(generic map[string]interface{}) NetworkOption {
- return func(n *network) {
- if n.generic == nil {
- n.generic = make(map[string]interface{})
- }
- if val, ok := generic[netlabel.EnableIPv6]; ok {
- n.enableIPv6 = val.(bool)
- }
- if val, ok := generic[netlabel.Internal]; ok {
- n.internal = val.(bool)
- }
- for k, v := range generic {
- n.generic[k] = v
- }
- }
- }
- // NetworkOptionIngress returns an option setter to indicate if a network is
- // an ingress network.
- func NetworkOptionIngress(ingress bool) NetworkOption {
- return func(n *network) {
- n.ingress = ingress
- }
- }
- // NetworkOptionPersist returns an option setter to set persistence policy for a network
- func NetworkOptionPersist(persist bool) NetworkOption {
- return func(n *network) {
- n.persist = persist
- }
- }
- // NetworkOptionEnableIPv6 returns an option setter to explicitly configure IPv6
- func NetworkOptionEnableIPv6(enableIPv6 bool) NetworkOption {
- return func(n *network) {
- if n.generic == nil {
- n.generic = make(map[string]interface{})
- }
- n.enableIPv6 = enableIPv6
- n.generic[netlabel.EnableIPv6] = enableIPv6
- }
- }
- // NetworkOptionInternalNetwork returns an option setter to config the network
- // to be internal which disables default gateway service
- func NetworkOptionInternalNetwork() NetworkOption {
- return func(n *network) {
- if n.generic == nil {
- n.generic = make(map[string]interface{})
- }
- n.internal = true
- n.generic[netlabel.Internal] = true
- }
- }
- // NetworkOptionAttachable returns an option setter to set attachable for a network
- func NetworkOptionAttachable(attachable bool) NetworkOption {
- return func(n *network) {
- n.attachable = attachable
- }
- }
- // NetworkOptionScope returns an option setter to overwrite the network's scope.
- // By default the network's scope is set to the network driver's datascope.
- func NetworkOptionScope(scope string) NetworkOption {
- return func(n *network) {
- n.scope = scope
- }
- }
- // NetworkOptionIpam function returns an option setter for the ipam configuration for this network
- func NetworkOptionIpam(ipamDriver string, addrSpace string, ipV4 []*IpamConf, ipV6 []*IpamConf, opts map[string]string) NetworkOption {
- return func(n *network) {
- if ipamDriver != "" {
- n.ipamType = ipamDriver
- if ipamDriver == ipamapi.DefaultIPAM {
- n.ipamType = defaultIpamForNetworkType(n.Type())
- }
- }
- n.ipamOptions = opts
- n.addrSpace = addrSpace
- n.ipamV4Config = ipV4
- n.ipamV6Config = ipV6
- }
- }
- // NetworkOptionDriverOpts function returns an option setter for any driver parameter described by a map
- func NetworkOptionDriverOpts(opts map[string]string) NetworkOption {
- return func(n *network) {
- if n.generic == nil {
- n.generic = make(map[string]interface{})
- }
- if opts == nil {
- opts = make(map[string]string)
- }
- // Store the options
- n.generic[netlabel.GenericData] = opts
- }
- }
- // NetworkOptionLabels function returns an option setter for labels specific to a network
- func NetworkOptionLabels(labels map[string]string) NetworkOption {
- return func(n *network) {
- n.labels = labels
- }
- }
- // NetworkOptionDynamic function returns an option setter for dynamic option for a network
- func NetworkOptionDynamic() NetworkOption {
- return func(n *network) {
- n.dynamic = true
- }
- }
- // NetworkOptionDeferIPv6Alloc instructs the network to defer the IPV6 address allocation until after the endpoint has been created
- // It is being provided to support the specific docker daemon flags where user can deterministically assign an IPv6 address
- // to a container as combination of fixed-cidr-v6 + mac-address
- // TODO: Remove this option setter once we support endpoint ipam options
- func NetworkOptionDeferIPv6Alloc(enable bool) NetworkOption {
- return func(n *network) {
- n.postIPv6 = enable
- }
- }
- // NetworkOptionConfigOnly tells controller this network is
- // a configuration only network. It serves as a configuration
- // for other networks.
- func NetworkOptionConfigOnly() NetworkOption {
- return func(n *network) {
- n.configOnly = true
- }
- }
- // NetworkOptionConfigFrom tells controller to pick the
- // network configuration from a configuration only network
- func NetworkOptionConfigFrom(name string) NetworkOption {
- return func(n *network) {
- n.configFrom = name
- }
- }
- func (n *network) processOptions(options ...NetworkOption) {
- for _, opt := range options {
- if opt != nil {
- opt(n)
- }
- }
- }
- func (n *network) resolveDriver(name string, load bool) (driverapi.Driver, *driverapi.Capability, error) {
- c := n.getController()
- // Check if a driver for the specified network type is available
- d, cap := c.drvRegistry.Driver(name)
- if d == nil {
- if load {
- var err error
- err = c.loadDriver(name)
- if err != nil {
- return nil, nil, err
- }
- d, cap = c.drvRegistry.Driver(name)
- if d == nil {
- return nil, nil, fmt.Errorf("could not resolve driver %s in registry", name)
- }
- } else {
- // don't fail if driver loading is not required
- return nil, nil, nil
- }
- }
- return d, cap, nil
- }
- func (n *network) driverScope() string {
- _, cap, err := n.resolveDriver(n.networkType, true)
- if err != nil {
- // If driver could not be resolved simply return an empty string
- return ""
- }
- return cap.DataScope
- }
- func (n *network) driverIsMultihost() bool {
- _, cap, err := n.resolveDriver(n.networkType, true)
- if err != nil {
- return false
- }
- return cap.ConnectivityScope == datastore.GlobalScope
- }
- func (n *network) driver(load bool) (driverapi.Driver, error) {
- d, cap, err := n.resolveDriver(n.networkType, load)
- if err != nil {
- return nil, err
- }
- n.Lock()
- // If load is not required, driver, cap and err may all be nil
- if n.scope == "" && cap != nil {
- n.scope = cap.DataScope
- }
- if n.dynamic {
- // If the network is dynamic, then it is swarm
- // scoped regardless of the backing driver.
- n.scope = datastore.SwarmScope
- }
- n.Unlock()
- return d, nil
- }
- func (n *network) Delete() error {
- return n.delete(false)
- }
- func (n *network) delete(force bool) error {
- n.Lock()
- c := n.ctrlr
- name := n.name
- id := n.id
- n.Unlock()
- n, err := c.getNetworkFromStore(id)
- if err != nil {
- return &UnknownNetworkError{name: name, id: id}
- }
- if !force && n.getEpCnt().EndpointCnt() != 0 {
- if n.configOnly {
- return types.ForbiddenErrorf("configuration network %q is in use", n.Name())
- }
- return &ActiveEndpointsError{name: n.name, id: n.id}
- }
- // Mark the network for deletion
- n.inDelete = true
- if err = c.updateToStore(n); err != nil {
- return fmt.Errorf("error marking network %s (%s) for deletion: %v", n.Name(), n.ID(), err)
- }
- if n.ConfigFrom() != "" {
- if t, err := c.getConfigNetwork(n.ConfigFrom()); err == nil {
- if err := t.getEpCnt().DecEndpointCnt(); err != nil {
- logrus.Warnf("Failed to update reference count for configuration network %q on removal of network %q: %v",
- t.Name(), n.Name(), err)
- }
- } else {
- logrus.Warnf("Could not find configuration network %q during removal of network %q", n.configOnly, n.Name())
- }
- }
- if n.configOnly {
- goto removeFromStore
- }
- if err = n.deleteNetwork(); err != nil {
- if !force {
- return err
- }
- logrus.Debugf("driver failed to delete stale network %s (%s): %v", n.Name(), n.ID(), err)
- }
- n.ipamRelease()
- if err = c.updateToStore(n); err != nil {
- logrus.Warnf("Failed to update store after ipam release for network %s (%s): %v", n.Name(), n.ID(), err)
- }
- // We are about to delete the network. Leave the gossip
- // cluster for the network to stop all incoming network
- // specific gossip updates before cleaning up all the service
- // bindings for the network. But cleanup service binding
- // before deleting the network from the store since service
- // bindings cleanup requires the network in the store.
- n.cancelDriverWatches()
- if err = n.leaveCluster(); err != nil {
- logrus.Errorf("Failed leaving network %s from the agent cluster: %v", n.Name(), err)
- }
- c.cleanupServiceBindings(n.ID())
- removeFromStore:
- // deleteFromStore performs an atomic delete operation and the
- // network.epCnt will help prevent any possible
- // race between endpoint join and network delete
- if err = c.deleteFromStore(n.getEpCnt()); err != nil {
- if !force {
- return fmt.Errorf("error deleting network endpoint count from store: %v", err)
- }
- logrus.Debugf("Error deleting endpoint count from store for stale network %s (%s) for deletion: %v", n.Name(), n.ID(), err)
- }
- if err = c.deleteFromStore(n); err != nil {
- return fmt.Errorf("error deleting network from store: %v", err)
- }
- return nil
- }
- func (n *network) deleteNetwork() error {
- d, err := n.driver(true)
- if err != nil {
- return fmt.Errorf("failed deleting network: %v", err)
- }
- if err := d.DeleteNetwork(n.ID()); err != nil {
- // Forbidden Errors should be honored
- if _, ok := err.(types.ForbiddenError); ok {
- return err
- }
- if _, ok := err.(types.MaskableError); !ok {
- logrus.Warnf("driver error deleting network %s : %v", n.name, err)
- }
- }
- for _, resolver := range n.resolver {
- resolver.Stop()
- }
- return nil
- }
- func (n *network) addEndpoint(ep *endpoint) error {
- d, err := n.driver(true)
- if err != nil {
- return fmt.Errorf("failed to add endpoint: %v", err)
- }
- err = d.CreateEndpoint(n.id, ep.id, ep.Interface(), ep.generic)
- if err != nil {
- return types.InternalErrorf("failed to create endpoint %s on network %s: %v",
- ep.Name(), n.Name(), err)
- }
- return nil
- }
- func (n *network) CreateEndpoint(name string, options ...EndpointOption) (Endpoint, error) {
- var err error
- if !config.IsValidName(name) {
- return nil, ErrInvalidName(name)
- }
- if n.ConfigOnly() {
- return nil, types.ForbiddenErrorf("cannot create endpoint on configuration-only network")
- }
- if _, err = n.EndpointByName(name); err == nil {
- return nil, types.ForbiddenErrorf("endpoint with name %s already exists in network %s", name, n.Name())
- }
- ep := &endpoint{name: name, generic: make(map[string]interface{}), iface: &endpointInterface{}}
- ep.id = stringid.GenerateRandomID()
- // Initialize ep.network with a possibly stale copy of n. We need this to get network from
- // store. But once we get it from store we will have the most uptodate copy possibly.
- ep.network = n
- ep.locator = n.getController().clusterHostID()
- ep.network, err = ep.getNetworkFromStore()
- if err != nil {
- return nil, fmt.Errorf("failed to get network during CreateEndpoint: %v", err)
- }
- n = ep.network
- ep.processOptions(options...)
- for _, llIPNet := range ep.Iface().LinkLocalAddresses() {
- if !llIPNet.IP.IsLinkLocalUnicast() {
- return nil, types.BadRequestErrorf("invalid link local IP address: %v", llIPNet.IP)
- }
- }
- if opt, ok := ep.generic[netlabel.MacAddress]; ok {
- if mac, ok := opt.(net.HardwareAddr); ok {
- ep.iface.mac = mac
- }
- }
- ipam, cap, err := n.getController().getIPAMDriver(n.ipamType)
- if err != nil {
- return nil, err
- }
- if cap.RequiresMACAddress {
- if ep.iface.mac == nil {
- ep.iface.mac = netutils.GenerateRandomMAC()
- }
- if ep.ipamOptions == nil {
- ep.ipamOptions = make(map[string]string)
- }
- ep.ipamOptions[netlabel.MacAddress] = ep.iface.mac.String()
- }
- if err = ep.assignAddress(ipam, true, n.enableIPv6 && !n.postIPv6); err != nil {
- return nil, err
- }
- defer func() {
- if err != nil {
- ep.releaseAddress()
- }
- }()
- if err = n.addEndpoint(ep); err != nil {
- return nil, err
- }
- defer func() {
- if err != nil {
- if e := ep.deleteEndpoint(false); e != nil {
- logrus.Warnf("cleaning up endpoint failed %s : %v", name, e)
- }
- }
- }()
- if err = ep.assignAddress(ipam, false, n.enableIPv6 && n.postIPv6); err != nil {
- return nil, err
- }
- if err = n.getController().updateToStore(ep); err != nil {
- return nil, err
- }
- defer func() {
- if err != nil {
- if e := n.getController().deleteFromStore(ep); e != nil {
- logrus.Warnf("error rolling back endpoint %s from store: %v", name, e)
- }
- }
- }()
- // Watch for service records
- n.getController().watchSvcRecord(ep)
- defer func() {
- if err != nil {
- n.getController().unWatchSvcRecord(ep)
- }
- }()
- // Increment endpoint count to indicate completion of endpoint addition
- if err = n.getEpCnt().IncEndpointCnt(); err != nil {
- return nil, err
- }
- return ep, nil
- }
- func (n *network) Endpoints() []Endpoint {
- var list []Endpoint
- endpoints, err := n.getEndpointsFromStore()
- if err != nil {
- logrus.Error(err)
- }
- for _, ep := range endpoints {
- list = append(list, ep)
- }
- return list
- }
- func (n *network) WalkEndpoints(walker EndpointWalker) {
- for _, e := range n.Endpoints() {
- if walker(e) {
- return
- }
- }
- }
- func (n *network) EndpointByName(name string) (Endpoint, error) {
- if name == "" {
- return nil, ErrInvalidName(name)
- }
- var e Endpoint
- s := func(current Endpoint) bool {
- if current.Name() == name {
- e = current
- return true
- }
- return false
- }
- n.WalkEndpoints(s)
- if e == nil {
- return nil, ErrNoSuchEndpoint(name)
- }
- return e, nil
- }
- func (n *network) EndpointByID(id string) (Endpoint, error) {
- if id == "" {
- return nil, ErrInvalidID(id)
- }
- ep, err := n.getEndpointFromStore(id)
- if err != nil {
- return nil, ErrNoSuchEndpoint(id)
- }
- return ep, nil
- }
- func (n *network) updateSvcRecord(ep *endpoint, localEps []*endpoint, isAdd bool) {
- var ipv6 net.IP
- epName := ep.Name()
- if iface := ep.Iface(); iface.Address() != nil {
- myAliases := ep.MyAliases()
- if iface.AddressIPv6() != nil {
- ipv6 = iface.AddressIPv6().IP
- }
- if isAdd {
- // If anonymous endpoint has an alias use the first alias
- // for ip->name mapping. Not having the reverse mapping
- // breaks some apps
- if ep.isAnonymous() {
- if len(myAliases) > 0 {
- n.addSvcRecords(myAliases[0], iface.Address().IP, ipv6, true)
- }
- } else {
- n.addSvcRecords(epName, iface.Address().IP, ipv6, true)
- }
- for _, alias := range myAliases {
- n.addSvcRecords(alias, iface.Address().IP, ipv6, false)
- }
- } else {
- if ep.isAnonymous() {
- if len(myAliases) > 0 {
- n.deleteSvcRecords(myAliases[0], iface.Address().IP, ipv6, true)
- }
- } else {
- n.deleteSvcRecords(epName, iface.Address().IP, ipv6, true)
- }
- for _, alias := range myAliases {
- n.deleteSvcRecords(alias, iface.Address().IP, ipv6, false)
- }
- }
- }
- }
- func addIPToName(ipMap map[string]*ipInfo, name string, ip net.IP) {
- reverseIP := netutils.ReverseIP(ip.String())
- if _, ok := ipMap[reverseIP]; !ok {
- ipMap[reverseIP] = &ipInfo{
- name: name,
- }
- }
- }
- func addNameToIP(svcMap map[string][]net.IP, name string, epIP net.IP) {
- ipList := svcMap[name]
- for _, ip := range ipList {
- if ip.Equal(epIP) {
- return
- }
- }
- svcMap[name] = append(svcMap[name], epIP)
- }
- func delNameToIP(svcMap map[string][]net.IP, name string, epIP net.IP) {
- ipList := svcMap[name]
- for i, ip := range ipList {
- if ip.Equal(epIP) {
- ipList = append(ipList[:i], ipList[i+1:]...)
- break
- }
- }
- svcMap[name] = ipList
- if len(ipList) == 0 {
- delete(svcMap, name)
- }
- }
- func (n *network) addSvcRecords(name string, epIP net.IP, epIPv6 net.IP, ipMapUpdate bool) {
- // Do not add service names for ingress network as this is a
- // routing only network
- if n.ingress {
- return
- }
- logrus.Debugf("(%s).addSvcRecords(%s, %s, %s, %t)", n.ID()[0:7], name, epIP, epIPv6, ipMapUpdate)
- c := n.getController()
- c.Lock()
- defer c.Unlock()
- sr, ok := c.svcRecords[n.ID()]
- if !ok {
- sr = svcInfo{
- svcMap: make(map[string][]net.IP),
- svcIPv6Map: make(map[string][]net.IP),
- ipMap: make(map[string]*ipInfo),
- }
- c.svcRecords[n.ID()] = sr
- }
- if ipMapUpdate {
- addIPToName(sr.ipMap, name, epIP)
- if epIPv6 != nil {
- addIPToName(sr.ipMap, name, epIPv6)
- }
- }
- addNameToIP(sr.svcMap, name, epIP)
- if epIPv6 != nil {
- addNameToIP(sr.svcIPv6Map, name, epIPv6)
- }
- }
- func (n *network) deleteSvcRecords(name string, epIP net.IP, epIPv6 net.IP, ipMapUpdate bool) {
- // Do not delete service names from ingress network as this is a
- // routing only network
- if n.ingress {
- return
- }
- logrus.Debugf("(%s).deleteSvcRecords(%s, %s, %s, %t)", n.ID()[0:7], name, epIP, epIPv6, ipMapUpdate)
- c := n.getController()
- c.Lock()
- defer c.Unlock()
- sr, ok := c.svcRecords[n.ID()]
- if !ok {
- return
- }
- if ipMapUpdate {
- delete(sr.ipMap, netutils.ReverseIP(epIP.String()))
- if epIPv6 != nil {
- delete(sr.ipMap, netutils.ReverseIP(epIPv6.String()))
- }
- }
- delNameToIP(sr.svcMap, name, epIP)
- if epIPv6 != nil {
- delNameToIP(sr.svcIPv6Map, name, epIPv6)
- }
- }
- func (n *network) getSvcRecords(ep *endpoint) []etchosts.Record {
- n.Lock()
- defer n.Unlock()
- if ep == nil {
- return nil
- }
- var recs []etchosts.Record
- epName := ep.Name()
- n.ctrlr.Lock()
- defer n.ctrlr.Unlock()
- sr, _ := n.ctrlr.svcRecords[n.id]
- for h, ip := range sr.svcMap {
- if strings.Split(h, ".")[0] == epName {
- continue
- }
- if len(ip) == 0 {
- logrus.Warnf("Found empty list of IP addresses for service %s on network %s (%s)", h, n.name, n.id)
- continue
- }
- recs = append(recs, etchosts.Record{
- Hosts: h,
- IP: ip[0].String(),
- })
- }
- return recs
- }
- func (n *network) getController() *controller {
- n.Lock()
- defer n.Unlock()
- return n.ctrlr
- }
- func (n *network) ipamAllocate() error {
- if n.hasSpecialDriver() {
- return nil
- }
- ipam, _, err := n.getController().getIPAMDriver(n.ipamType)
- if err != nil {
- return err
- }
- if n.addrSpace == "" {
- if n.addrSpace, err = n.deriveAddressSpace(); err != nil {
- return err
- }
- }
- err = n.ipamAllocateVersion(4, ipam)
- if err != nil {
- return err
- }
- defer func() {
- if err != nil {
- n.ipamReleaseVersion(4, ipam)
- }
- }()
- if !n.enableIPv6 {
- return nil
- }
- err = n.ipamAllocateVersion(6, ipam)
- if err != nil {
- return err
- }
- return nil
- }
- func (n *network) requestPoolHelper(ipam ipamapi.Ipam, addressSpace, preferredPool, subPool string, options map[string]string, v6 bool) (string, *net.IPNet, map[string]string, error) {
- for {
- poolID, pool, meta, err := ipam.RequestPool(addressSpace, preferredPool, subPool, options, v6)
- if err != nil {
- return "", nil, nil, err
- }
- // If the network belongs to global scope or the pool was
- // explicitly chosen or it is invalid, do not perform the overlap check.
- if n.Scope() == datastore.GlobalScope || preferredPool != "" || !types.IsIPNetValid(pool) {
- return poolID, pool, meta, nil
- }
- // Check for overlap and if none found, we have found the right pool.
- if _, err := netutils.FindAvailableNetwork([]*net.IPNet{pool}); err == nil {
- return poolID, pool, meta, nil
- }
- // Pool obtained in this iteration is
- // overlapping. Hold onto the pool and don't release
- // it yet, because we don't want ipam to give us back
- // the same pool over again. But make sure we still do
- // a deferred release when we have either obtained a
- // non-overlapping pool or ran out of pre-defined
- // pools.
- defer func() {
- if err := ipam.ReleasePool(poolID); err != nil {
- logrus.Warnf("Failed to release overlapping pool %s while returning from pool request helper for network %s", pool, n.Name())
- }
- }()
- // If this is a preferred pool request and the network
- // is local scope and there is an overlap, we fail the
- // network creation right here. The pool will be
- // released in the defer.
- if preferredPool != "" {
- return "", nil, nil, fmt.Errorf("requested subnet %s overlaps in the host", preferredPool)
- }
- }
- }
- func (n *network) ipamAllocateVersion(ipVer int, ipam ipamapi.Ipam) error {
- var (
- cfgList *[]*IpamConf
- infoList *[]*IpamInfo
- err error
- )
- switch ipVer {
- case 4:
- cfgList = &n.ipamV4Config
- infoList = &n.ipamV4Info
- case 6:
- cfgList = &n.ipamV6Config
- infoList = &n.ipamV6Info
- default:
- return types.InternalErrorf("incorrect ip version passed to ipam allocate: %d", ipVer)
- }
- if len(*cfgList) == 0 {
- *cfgList = []*IpamConf{{}}
- }
- *infoList = make([]*IpamInfo, len(*cfgList))
- logrus.Debugf("Allocating IPv%d pools for network %s (%s)", ipVer, n.Name(), n.ID())
- for i, cfg := range *cfgList {
- if err = cfg.Validate(); err != nil {
- return err
- }
- d := &IpamInfo{}
- (*infoList)[i] = d
- d.AddressSpace = n.addrSpace
- d.PoolID, d.Pool, d.Meta, err = n.requestPoolHelper(ipam, n.addrSpace, cfg.PreferredPool, cfg.SubPool, n.ipamOptions, ipVer == 6)
- if err != nil {
- return err
- }
- defer func() {
- if err != nil {
- if err := ipam.ReleasePool(d.PoolID); err != nil {
- logrus.Warnf("Failed to release address pool %s after failure to create network %s (%s)", d.PoolID, n.Name(), n.ID())
- }
- }
- }()
- if gws, ok := d.Meta[netlabel.Gateway]; ok {
- if d.Gateway, err = types.ParseCIDR(gws); err != nil {
- return types.BadRequestErrorf("failed to parse gateway address (%v) returned by ipam driver: %v", gws, err)
- }
- }
- // If user requested a specific gateway, libnetwork will allocate it
- // irrespective of whether ipam driver returned a gateway already.
- // If none of the above is true, libnetwork will allocate one.
- if cfg.Gateway != "" || d.Gateway == nil {
- var gatewayOpts = map[string]string{
- ipamapi.RequestAddressType: netlabel.Gateway,
- }
- if d.Gateway, _, err = ipam.RequestAddress(d.PoolID, net.ParseIP(cfg.Gateway), gatewayOpts); err != nil {
- return types.InternalErrorf("failed to allocate gateway (%v): %v", cfg.Gateway, err)
- }
- }
- // Auxiliary addresses must be part of the master address pool
- // If they fall into the container addressable pool, libnetwork will reserve them
- if cfg.AuxAddresses != nil {
- var ip net.IP
- d.IPAMData.AuxAddresses = make(map[string]*net.IPNet, len(cfg.AuxAddresses))
- for k, v := range cfg.AuxAddresses {
- if ip = net.ParseIP(v); ip == nil {
- return types.BadRequestErrorf("non parsable secondary ip address (%s:%s) passed for network %s", k, v, n.Name())
- }
- if !d.Pool.Contains(ip) {
- return types.ForbiddenErrorf("auxilairy address: (%s:%s) must belong to the master pool: %s", k, v, d.Pool)
- }
- // Attempt reservation in the container addressable pool, silent the error if address does not belong to that pool
- if d.IPAMData.AuxAddresses[k], _, err = ipam.RequestAddress(d.PoolID, ip, nil); err != nil && err != ipamapi.ErrIPOutOfRange {
- return types.InternalErrorf("failed to allocate secondary ip address (%s:%s): %v", k, v, err)
- }
- }
- }
- }
- return nil
- }
- func (n *network) ipamRelease() {
- if n.hasSpecialDriver() {
- return
- }
- ipam, _, err := n.getController().getIPAMDriver(n.ipamType)
- if err != nil {
- logrus.Warnf("Failed to retrieve ipam driver to release address pool(s) on delete of network %s (%s): %v", n.Name(), n.ID(), err)
- return
- }
- n.ipamReleaseVersion(4, ipam)
- n.ipamReleaseVersion(6, ipam)
- }
- func (n *network) ipamReleaseVersion(ipVer int, ipam ipamapi.Ipam) {
- var infoList *[]*IpamInfo
- switch ipVer {
- case 4:
- infoList = &n.ipamV4Info
- case 6:
- infoList = &n.ipamV6Info
- default:
- logrus.Warnf("incorrect ip version passed to ipam release: %d", ipVer)
- return
- }
- if len(*infoList) == 0 {
- return
- }
- logrus.Debugf("releasing IPv%d pools from network %s (%s)", ipVer, n.Name(), n.ID())
- for _, d := range *infoList {
- if d.Gateway != nil {
- if err := ipam.ReleaseAddress(d.PoolID, d.Gateway.IP); err != nil {
- logrus.Warnf("Failed to release gateway ip address %s on delete of network %s (%s): %v", d.Gateway.IP, n.Name(), n.ID(), err)
- }
- }
- if d.IPAMData.AuxAddresses != nil {
- for k, nw := range d.IPAMData.AuxAddresses {
- if d.Pool.Contains(nw.IP) {
- if err := ipam.ReleaseAddress(d.PoolID, nw.IP); err != nil && err != ipamapi.ErrIPOutOfRange {
- logrus.Warnf("Failed to release secondary ip address %s (%v) on delete of network %s (%s): %v", k, nw.IP, n.Name(), n.ID(), err)
- }
- }
- }
- }
- if err := ipam.ReleasePool(d.PoolID); err != nil {
- logrus.Warnf("Failed to release address pool %s on delete of network %s (%s): %v", d.PoolID, n.Name(), n.ID(), err)
- }
- }
- *infoList = nil
- }
- func (n *network) getIPInfo(ipVer int) []*IpamInfo {
- var info []*IpamInfo
- switch ipVer {
- case 4:
- info = n.ipamV4Info
- case 6:
- info = n.ipamV6Info
- default:
- return nil
- }
- l := make([]*IpamInfo, 0, len(info))
- n.Lock()
- for _, d := range info {
- l = append(l, d)
- }
- n.Unlock()
- return l
- }
- func (n *network) getIPData(ipVer int) []driverapi.IPAMData {
- var info []*IpamInfo
- switch ipVer {
- case 4:
- info = n.ipamV4Info
- case 6:
- info = n.ipamV6Info
- default:
- return nil
- }
- l := make([]driverapi.IPAMData, 0, len(info))
- n.Lock()
- for _, d := range info {
- l = append(l, d.IPAMData)
- }
- n.Unlock()
- return l
- }
- func (n *network) deriveAddressSpace() (string, error) {
- local, global, err := n.getController().drvRegistry.IPAMDefaultAddressSpaces(n.ipamType)
- if err != nil {
- return "", types.NotFoundErrorf("failed to get default address space: %v", err)
- }
- if n.DataScope() == datastore.GlobalScope {
- return global, nil
- }
- return local, nil
- }
- func (n *network) Info() NetworkInfo {
- return n
- }
- func (n *network) Peers() []networkdb.PeerInfo {
- if !n.Dynamic() {
- return []networkdb.PeerInfo{}
- }
- agent := n.getController().getAgent()
- if agent == nil {
- return []networkdb.PeerInfo{}
- }
- return agent.networkDB.Peers(n.ID())
- }
- func (n *network) DriverOptions() map[string]string {
- n.Lock()
- defer n.Unlock()
- if n.generic != nil {
- if m, ok := n.generic[netlabel.GenericData]; ok {
- return m.(map[string]string)
- }
- }
- return map[string]string{}
- }
- func (n *network) Scope() string {
- n.Lock()
- defer n.Unlock()
- return n.scope
- }
- func (n *network) IpamConfig() (string, map[string]string, []*IpamConf, []*IpamConf) {
- n.Lock()
- defer n.Unlock()
- v4L := make([]*IpamConf, len(n.ipamV4Config))
- v6L := make([]*IpamConf, len(n.ipamV6Config))
- for i, c := range n.ipamV4Config {
- cc := &IpamConf{}
- c.CopyTo(cc)
- v4L[i] = cc
- }
- for i, c := range n.ipamV6Config {
- cc := &IpamConf{}
- c.CopyTo(cc)
- v6L[i] = cc
- }
- return n.ipamType, n.ipamOptions, v4L, v6L
- }
- func (n *network) IpamInfo() ([]*IpamInfo, []*IpamInfo) {
- n.Lock()
- defer n.Unlock()
- v4Info := make([]*IpamInfo, len(n.ipamV4Info))
- v6Info := make([]*IpamInfo, len(n.ipamV6Info))
- for i, info := range n.ipamV4Info {
- ic := &IpamInfo{}
- info.CopyTo(ic)
- v4Info[i] = ic
- }
- for i, info := range n.ipamV6Info {
- ic := &IpamInfo{}
- info.CopyTo(ic)
- v6Info[i] = ic
- }
- return v4Info, v6Info
- }
- func (n *network) Internal() bool {
- n.Lock()
- defer n.Unlock()
- return n.internal
- }
- func (n *network) Attachable() bool {
- n.Lock()
- defer n.Unlock()
- return n.attachable
- }
- func (n *network) Ingress() bool {
- n.Lock()
- defer n.Unlock()
- return n.ingress
- }
- func (n *network) Dynamic() bool {
- n.Lock()
- defer n.Unlock()
- return n.dynamic
- }
- func (n *network) IPv6Enabled() bool {
- n.Lock()
- defer n.Unlock()
- return n.enableIPv6
- }
- func (n *network) ConfigFrom() string {
- n.Lock()
- defer n.Unlock()
- return n.configFrom
- }
- func (n *network) ConfigOnly() bool {
- n.Lock()
- defer n.Unlock()
- return n.configOnly
- }
- func (n *network) Labels() map[string]string {
- n.Lock()
- defer n.Unlock()
- var lbls = make(map[string]string, len(n.labels))
- for k, v := range n.labels {
- lbls[k] = v
- }
- return lbls
- }
- func (n *network) TableEventRegister(tableName string, objType driverapi.ObjectType) error {
- if !driverapi.IsValidType(objType) {
- return fmt.Errorf("invalid object type %v in registering table, %s", objType, tableName)
- }
- t := networkDBTable{
- name: tableName,
- objType: objType,
- }
- n.Lock()
- defer n.Unlock()
- n.driverTables = append(n.driverTables, t)
- return nil
- }
- // Special drivers are ones which do not need to perform any network plumbing
- func (n *network) hasSpecialDriver() bool {
- return n.Type() == "host" || n.Type() == "null"
- }
- func (n *network) ResolveName(req string, ipType int) ([]net.IP, bool) {
- var ipv6Miss bool
- c := n.getController()
- c.Lock()
- defer c.Unlock()
- sr, ok := c.svcRecords[n.ID()]
- if !ok {
- return nil, false
- }
- req = strings.TrimSuffix(req, ".")
- var ip []net.IP
- ip, ok = sr.svcMap[req]
- if ipType == types.IPv6 {
- // If the name resolved to v4 address then its a valid name in
- // the docker network domain. If the network is not v6 enabled
- // set ipv6Miss to filter the DNS query from going to external
- // resolvers.
- if ok && n.enableIPv6 == false {
- ipv6Miss = true
- }
- ip = sr.svcIPv6Map[req]
- }
- if ip != nil {
- ipLocal := make([]net.IP, len(ip))
- copy(ipLocal, ip)
- return ipLocal, false
- }
- return nil, ipv6Miss
- }
- func (n *network) HandleQueryResp(name string, ip net.IP) {
- c := n.getController()
- c.Lock()
- defer c.Unlock()
- sr, ok := c.svcRecords[n.ID()]
- if !ok {
- return
- }
- ipStr := netutils.ReverseIP(ip.String())
- if ipInfo, ok := sr.ipMap[ipStr]; ok {
- ipInfo.extResolver = true
- }
- }
- func (n *network) ResolveIP(ip string) string {
- c := n.getController()
- c.Lock()
- defer c.Unlock()
- sr, ok := c.svcRecords[n.ID()]
- if !ok {
- return ""
- }
- nwName := n.Name()
- ipInfo, ok := sr.ipMap[ip]
- if !ok || ipInfo.extResolver {
- return ""
- }
- return ipInfo.name + "." + nwName
- }
- func (n *network) ResolveService(name string) ([]*net.SRV, []net.IP) {
- c := n.getController()
- srv := []*net.SRV{}
- ip := []net.IP{}
- logrus.Debugf("Service name To resolve: %v", name)
- // There are DNS implementaions that allow SRV queries for names not in
- // the format defined by RFC 2782. Hence specific validations checks are
- // not done
- parts := strings.Split(name, ".")
- if len(parts) < 3 {
- return nil, nil
- }
- portName := parts[0]
- proto := parts[1]
- svcName := strings.Join(parts[2:], ".")
- c.Lock()
- defer c.Unlock()
- sr, ok := c.svcRecords[n.ID()]
- if !ok {
- return nil, nil
- }
- svcs, ok := sr.service[svcName]
- if !ok {
- return nil, nil
- }
- for _, svc := range svcs {
- if svc.portName != portName {
- continue
- }
- if svc.proto != proto {
- continue
- }
- for _, t := range svc.target {
- srv = append(srv,
- &net.SRV{
- Target: t.name,
- Port: t.port,
- })
- ip = append(ip, t.ip)
- }
- }
- return srv, ip
- }
- func (n *network) ExecFunc(f func()) error {
- return types.NotImplementedErrorf("ExecFunc not supported by network")
- }
- func (n *network) NdotsSet() bool {
- return false
- }
- // config-only network is looked up by name
- func (c *controller) getConfigNetwork(name string) (*network, error) {
- var n Network
- s := func(current Network) bool {
- if current.Info().ConfigOnly() && current.Name() == name {
- n = current
- return true
- }
- return false
- }
- c.WalkNetworks(s)
- if n == nil {
- return nil, types.NotFoundErrorf("configuration network %q not found", name)
- }
- return n.(*network), nil
- }
|