forked from uncloud/uncloud
94 lines
2.3 KiB
Python
94 lines
2.3 KiB
Python
from django.db import transaction
|
|
|
|
from .models import *
|
|
from .selectors import *
|
|
|
|
@transaction.atomic
|
|
def create_wireguard_vpn(*,
|
|
public_key: str,
|
|
network_mask: int
|
|
) -> WireGuardVPN:
|
|
|
|
pool = get_suitable_pool(network_mask)[0]
|
|
|
|
# FIXME: exception - which?
|
|
if not pools:
|
|
return None
|
|
|
|
|
|
# last_net = ipaddress.ip_network(self.used_networks.last().address)
|
|
# last_net_ip = last_net[0]
|
|
|
|
# if last_net_ip.version == 6:
|
|
# offset_to_next = 2**(128 - self.subnetwork_size)
|
|
# elif last_net_ip.version == 4:
|
|
# offset_to_next = 2**(32 - self.subnetwork_size)
|
|
|
|
# next_net_ip = last_net_ip + offset_to_next
|
|
|
|
# return str(next_net_ip)
|
|
# else:
|
|
# # first network to be created
|
|
# return self.network
|
|
|
|
@property
|
|
def wireguard_config_filename(self):
|
|
return '/etc/wireguard/{}.conf'.format(self.network)
|
|
|
|
@property
|
|
def wireguard_config(self):
|
|
wireguard_config = [
|
|
"""
|
|
[Interface]
|
|
ListenPort = 51820
|
|
PrivateKey = {privatekey}
|
|
""".format(privatekey=self.wireguard_private_key) ]
|
|
|
|
peers = []
|
|
|
|
for reservation in self.vpnnetworkreservation_set.filter(status='used'):
|
|
public_key = reservation.vpnnetwork_set.first().wireguard_public_key
|
|
peer_network = "{}/{}".format(reservation.address, self.subnetwork_size)
|
|
owner = reservation.vpnnetwork_set.first().owner
|
|
|
|
peers.append("""
|
|
# Owner: {owner}
|
|
[Peer]
|
|
PublicKey = {public_key}
|
|
AllowedIPs = {peer_network}
|
|
""".format(
|
|
owner=owner,
|
|
public_key=public_key,
|
|
peer_network=peer_network))
|
|
|
|
wireguard_config.extend(peers)
|
|
|
|
return "\n".join(wireguard_config)
|
|
|
|
|
|
def configure_wireguard_vpnserver(self):
|
|
"""
|
|
This method is designed to run as a celery task and should
|
|
not be called directly from the web
|
|
"""
|
|
|
|
# subprocess, ssh
|
|
|
|
pass
|
|
|
|
|
|
|
|
def num_maximum_networks(self):
|
|
"""
|
|
sample:
|
|
network_size = 40
|
|
subnetwork_size = 48
|
|
maximum_networks = 2^(48-40)
|
|
|
|
2nd sample:
|
|
network_size = 8
|
|
subnetwork_size = 24
|
|
maximum_networks = 2^(24-8)
|
|
"""
|
|
|
|
return 2**(self.subnetwork_mask - self.network_mask)
|