bird-lg/lgproxy.py

# -*- coding: utf-8 -*-
# vim: ts=4
###
#
# Copyright (c) 2006 Mehdi Abaakouk
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 3 as
# published by the Free Software Foundation
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
#
###


import sys
import logging
from logging.handlers import TimedRotatingFileHandler
from logging import FileHandler
import subprocess
from urllib import unquote

from bird import BirdSocket

from flask import Flask, request, abort

app = Flask(__name__)
app.debug = app.config["DEBUG"]
app.config.from_pyfile('lgproxy.cfg')

file_handler = TimedRotatingFileHandler(filename=app.config["LOG_FILE"], when="midnight")
app.logger.setLevel(getattr(logging, app.config["LOG_LEVEL"].upper()))
app.logger.addHandler(file_handler)


@app.before_request
def access_log_before(*args, **kwargs):
    app.logger.info("[%s] request %s, %s", request.remote_addr, request.url, "|".join(["%s:%s" % (k, v) for k, v in request.headers.items()]))


@app.after_request
def access_log_after(response, *args, **kwargs):
    app.logger.info("[%s] reponse %s, %s", request.remote_addr, request.url, response.status_code)
    return response


def check_accesslist():
    if app.config["ACCESS_LIST"] and request.remote_addr not in app.config["ACCESS_LIST"]:
        abort(401)


def check_features():
    features = app.config.get('FEATURES', [])
    if request.endpoint not in features:
        abort(401)


@app.route("/traceroute")
@app.route("/traceroute6")
def traceroute():
    check_accesslist()
    check_features()

    if sys.platform.startswith('freebsd') or sys.platform.startswith('netbsd') or sys.platform.startswith('openbsd'):
        traceroute4 = ['traceroute']
        traceroute6 = ['traceroute6']
    else:  # For Linux
        traceroute4 = ['traceroute', '-4']
        traceroute6 = ['traceroute', '-6']

    src = []
    if request.path == '/traceroute6':
        traceroute = traceroute6
        if app.config.get("IPV6_SOURCE", ""):
            src = ["-s", app.config.get("IPV6_SOURCE")]
    else:
        traceroute = traceroute4
        if app.config.get("IPV4_SOURCE", ""):
            src = ["-s", app.config.get("IPV4_SOURCE")]

    query = request.args.get("q", "")
    query = unquote(query)

    if sys.platform.startswith('freebsd') or sys.platform.startswith('netbsd'):
        options = ['-a', '-q1', '-w1', '-m15']
    elif sys.platform.startswith('openbsd'):
        options = ['-A', '-q1', '-w1', '-m15']
    else:  # For Linux
        options = ['-A', '-q1', '-N32', '-w1', '-m15']
    command = traceroute + src + options + [query]
    result = subprocess.Popen(command, stdout=subprocess.PIPE).communicate()[0].decode('utf-8', 'ignore').replace("\n", "<br>")

    return result


@app.route("/bird")
@app.route("/bird6")
def bird():
    check_accesslist()
    check_features()

    if request.path == "/bird":
        b = BirdSocket(file=app.config.get('SOCKET_PATH').get(4))
    elif request.path == "/bird6":
        b = BirdSocket(file=app.config.get('SOCKET_PATH').get(6))
    else:
        return "No bird socket selected"

    query = request.args.get("q", "")
    query = unquote(query)

    status, result = b.cmd(query)
    b.close()
    # FIXME: use status
    return result


if __name__ == "__main__":
    app.logger.info("lgproxy start")
    app.run("0.0.0.0")