Add helper scripts to repo
This commit is contained in:
graffen
parent
336e2618e4
commit
af0de1612a
96
scripts/mkroa.sh
Executable file
96
scripts/mkroa.sh
Executable file
|
|
@ -0,0 +1,96 @@
|
|||
#!/bin/bash
|
||||
|
||||
#
|
||||
# bird-mkroa
|
||||
# author: hexa-
|
||||
#
|
||||
# get updates from net.dn42.registry/utils/roa/
|
||||
#
|
||||
|
||||
<<EOF
|
||||
|
||||
Load the ROA-Table from BIRD4_ROA_CFG like this:
|
||||
|
||||
roa table dn42_roa {
|
||||
include "roa4.conf";
|
||||
};
|
||||
|
||||
Check in your filters like this:
|
||||
|
||||
if (roa_check(dn42_roa, net, bgp_path.last) = ROA_INVALID) then {
|
||||
print "[dn42] ROA check failed for ", net, " ASN ", bgp_path.last;
|
||||
reject;
|
||||
}
|
||||
|
||||
EOF
|
||||
|
||||
#
|
||||
# Configuration
|
||||
#
|
||||
|
||||
REGISTRY="/etc/bird/registry"
|
||||
|
||||
BIRD4C=birdc
|
||||
BIRD4_ROA_CFG="/var/lib/bird/bird_roa_dn42.conf"
|
||||
BIRD4_MAX_PREFIXLEN=28
|
||||
|
||||
BIRD6C=birdc6
|
||||
BIRD6_ROA_CFG="/var/lib/bird/bird6_roa_dn42.conf"
|
||||
BIRD6_MAX_PREFIXLEN=64
|
||||
|
||||
#
|
||||
# End of configuration
|
||||
#
|
||||
|
||||
# check if git repository exists
|
||||
if [ ! -d "$REGISTRY/.git" ]; then
|
||||
>&2 echo "registry directory does not exist;"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
pushd $REGISTRY
|
||||
git pull
|
||||
popd
|
||||
|
||||
function mkroa() {
|
||||
# based on utils/roa/genroa.sh by fritz@grimpen.net
|
||||
|
||||
for i in $*
|
||||
do
|
||||
route=$(grep -E "route[6]?:" $i | tr -d '[:blank:]' | cut -d':' -f2-)
|
||||
origin=$(grep "origin:" $i | tr -d '[:blank:][:alpha:]' | cut -d':' -f2)
|
||||
if [ -z "$origin" -o -z "$route" -o -n "$(echo $as | tr -d '[:digit:]')" ]
|
||||
then
|
||||
>&2 echo "$i is invalid"
|
||||
continue
|
||||
fi
|
||||
prefixlen=$(echo $route | cut -d'/' -f2)
|
||||
if [ $MAX_PREFIXLEN -gt $prefixlen ]; then
|
||||
prefixlen=$MAX_PREFIXLEN
|
||||
fi
|
||||
|
||||
while read -r asn
|
||||
do
|
||||
echo "roa $route max $prefixlen as $asn;"
|
||||
done <<< "$origin"
|
||||
done
|
||||
}
|
||||
|
||||
MAX_PREFIXLEN=$BIRD4_MAX_PREFIXLEN mkroa $REGISTRY/data/route/* > $BIRD4_ROA_CFG
|
||||
MAX_PREFIXLEN=$BIRD6_MAX_PREFIXLEN mkroa $REGISTRY/data/route6/* > $BIRD6_ROA_CFG
|
||||
|
||||
BIRD4_CHECK=$($BIRD4C configure check | grep error)
|
||||
if [[ -z $BIRD4_CHECK ]]; then
|
||||
$BIRD4C configure >/dev/null
|
||||
else
|
||||
>&2 echo $BIRD4_CHECK
|
||||
fi
|
||||
|
||||
BIRD6_CHECK=$($BIRD6C configure check | grep error)
|
||||
if [[ -z $BIRD6_CHECK ]]; then
|
||||
$BIRD6C configure >/dev/null
|
||||
else
|
||||
>&2 echo $BIRD6_CHECK
|
||||
fi
|
||||
|
||||
|
||||
5
scripts/nixmap.sh
Executable file
5
scripts/nixmap.sh
Executable file
|
|
@ -0,0 +1,5 @@
|
|||
#!/bin/bash
|
||||
|
||||
/usr/sbin/birdc 'show route table T_BGP all'|grep BGP\.as_path|egrep -o '[0-9]+ [0-9 ]+'|sort -n|uniq|curl --insecure -F 'pdata=<-' -F 'as=4242423934' https://nixnodes.net/dn42/routedump
|
||||
/usr/sbin/birdc6 'show route table T_BGP all'|grep BGP\.as_path|egrep -o '[0-9]+ [0-9 ]+'|sort -n|uniq|curl --insecure -F 'pdata=<-' -F 'as=4242423934' -F '6=1' https://nixnodes.net/dn42/routedump
|
||||
|
||||
148
scripts/peerfinder.sh
Executable file
148
scripts/peerfinder.sh
Executable file
|
|
@ -0,0 +1,148 @@
|
|||
#!/usr/bin/env bash
|
||||
#
|
||||
# Measurement script for the dn42 peer finder, see http://dn42.us/peers
|
||||
# Dependencies: curl, sed, ping
|
||||
#
|
||||
# This script is designed to be run in cron every 5 minutes, like this:
|
||||
#
|
||||
# UUID=<Your UUID goes here>
|
||||
# */5 * * * * /home/foo/cron.sh
|
||||
#
|
||||
|
||||
# Put your UUID here, and keep it secret!
|
||||
UUID=${UUID}
|
||||
PEERFINDER=${PEERFINDER:-"https://dn42.us/peers"}
|
||||
NB_PINGS=${NB_PINGS:-5}
|
||||
LOGFILE=${LOGFILE:-/dev/stdout} # Set to /dev/null to only receive errors.
|
||||
# Set to a file writable by the cron runner to record pings.
|
||||
# (Errors will be sent in cron mail)
|
||||
WARNLOCK=${WARNLOCK:-warn.lock} # Set this variable if you want a file written when the script updates.
|
||||
LOCKFILE=${LOCKFILE:-exec.lock} # Set this variable if you want the script to not run multiple instances at once.
|
||||
LOCKFD=${LOCKFD:-42}
|
||||
|
||||
# This avoids synchronisation (everybody fetching jobs and running
|
||||
# measurements simultaneously)
|
||||
RANDOM_DELAY=30
|
||||
|
||||
function die() {
|
||||
echo "## PEERFINDER ERROR $(date) ## " \
|
||||
"$*"
|
||||
exit 1
|
||||
}
|
||||
|
||||
if command -v flock >/dev/null 2>&1; then
|
||||
eval "exec $LOCKFD>$LOCKFILE"
|
||||
flock -n $LOCKFD || die "Unable to acquire lock."
|
||||
fi
|
||||
|
||||
VERSION=1.0.10
|
||||
ver() { printf "%03d%03d%03d%03d" $(echo "$1" | tr '.' ' '); }
|
||||
|
||||
[ -e $LOGFILE ] || touch $LOGFILE
|
||||
exec >> $LOGFILE
|
||||
|
||||
echo "STARTING PEERFINDER (v. $VERSION)"
|
||||
|
||||
SLEEP=$((RANDOM % RANDOM_DELAY))
|
||||
|
||||
# check for ping binary
|
||||
PING=$(which ping)
|
||||
if [ -z "$PING" ]; then
|
||||
die "Unable to find a suitable ping binary."
|
||||
fi
|
||||
|
||||
CURL=$(which curl)
|
||||
if [ -z "$CURL" ]; then
|
||||
die "Unable to find a suitable curl binary."
|
||||
fi
|
||||
CURL="$CURL -A PeerFinder -sf"
|
||||
|
||||
case $OSTYPE in
|
||||
solaris*)
|
||||
GREP=$(which ggrep)
|
||||
|
||||
function ping_cmd() {
|
||||
$PING -sn $3 56 $2
|
||||
}
|
||||
;;
|
||||
*-gnu|*)
|
||||
# check for IPv6 binary. if ping6 is missing assume 'ping -6'
|
||||
PING6=$(which ping6)
|
||||
[ -z "$PING6" -a -n "$PING" ] && PING6="$PING -6"
|
||||
|
||||
GREP=$(which grep)
|
||||
|
||||
function ping_cmd() {
|
||||
[ "$1" -eq "1" -a -n "$PING" ] && $PING -nqc $2 $3
|
||||
[ "$1" -eq "2" -a -n "$PING6" ] && $PING6 -nqc $2 $3
|
||||
}
|
||||
;;
|
||||
esac
|
||||
|
||||
while true ; do
|
||||
|
||||
JOB=$(mktemp)
|
||||
|
||||
$CURL -H 'accept: text/environment' "$PEERFINDER/pending/$UUID" | tee $JOB
|
||||
|
||||
REQ_ID=$($GREP REQ_ID $JOB|cut -d'=' -f2|tr -d '[$`;><{}%|&!()]"/\\')
|
||||
REQ_IP=$($GREP REQ_IP $JOB|cut -d'=' -f2|tr -d '[$`;><{}%|&!()]"/\\')
|
||||
REQ_FAMILY=$($GREP REQ_FAMILY $JOB|cut -d'=' -f2|tr -d '[$`;><{}%|&!()]"/\\')
|
||||
CUR_VERSION=$($GREP SCRIPT_VERSION $JOB|cut -d'=' -f2|tr -d '[$`;><{}%|&!()]"/\\')
|
||||
|
||||
rm "$JOB"
|
||||
|
||||
if [ $(ver "$VERSION") -lt $(ver "$CUR_VERSION") ]; then
|
||||
echo "## PEERFINDER WARN $(date) ## " \
|
||||
"Current script version is $CUR_VERSION. You are running $VERSION " \
|
||||
"Get it here: https://dn42.us/peers/script"
|
||||
|
||||
[ -z "$WARNLOCK" ] && touch $WARNLOCK
|
||||
else
|
||||
[ -z "$WARNLOCK" -o -f "$WARNLOCK" ] && rm $WARNLOCK
|
||||
fi
|
||||
|
||||
# Avoid empty fields
|
||||
[ -z "$REQ_ID" -a -z "$REQ_IP" ] && exit
|
||||
|
||||
echo "PINGING TO: $REQ_IP for $REQ_ID..."
|
||||
|
||||
# Parsing ping output, for Linux
|
||||
if ! output=$(ping_cmd "$REQ_FAMILY" "$NB_PINGS" "$REQ_IP" 2>&1 | $GREP -A1 "packets transmitted"); then
|
||||
sent=0
|
||||
received=0
|
||||
args="res_latency=NULL"
|
||||
echo "Target $REQ_ID ($REQ_IP) is unreachable"
|
||||
else
|
||||
pattern='([0-9]*) packets transmitted, ([0-9]*)( packets)? received'
|
||||
if [[ $output =~ $pattern ]]; then
|
||||
sent=${BASH_REMATCH[1]}
|
||||
received=${BASH_REMATCH[2]}
|
||||
if [ "$received" -eq 0 ]
|
||||
then
|
||||
args="res_latency=NULL"
|
||||
echo "Target $REQ_ID ($REQ_IP) is unreachable"
|
||||
else
|
||||
pattern='(rtt|round-trip).* min/avg/max.*= ([^/]*)/([^/]*)/([^/]*)(/(.*))?( ms)?'
|
||||
if [[ $output =~ $pattern ]]; then
|
||||
minrtt=${BASH_REMATCH[1]}
|
||||
avgrtt=${BASH_REMATCH[2]}
|
||||
maxrtt=${BASH_REMATCH[3]}
|
||||
jitter=${BASH_REMATCH[4]}
|
||||
[ -z "$avgrtt" ] && exit
|
||||
echo "RTT to target $REQ_ID ($REQ_IP) is $avgrtt"
|
||||
args="res_latency=${avgrtt}"
|
||||
else
|
||||
args="res_latency=NULL"
|
||||
fi
|
||||
fi
|
||||
else
|
||||
args="res_latency=NULL"
|
||||
fi
|
||||
fi
|
||||
|
||||
# Report results back to peerfinder
|
||||
$CURL -X POST "$PEERFINDER/req/$REQ_ID" -d "peer_id=$UUID&peer_version=$VERSION&$args" -H 'accept: text/environment'
|
||||
|
||||
done
|
||||
|
||||
Loading…
Reference in a new issue