# -*- coding: utf-8 -*- import socket import binascii from hashlib import md5 from .core import BaseTransmitter, NasFailedResult, NasNetworkError from mydefs import ping from .structs import TariffStruct, IpStruct from . import settings class ApiRos: "Routeros api" def __init__(self, sk): self.sk = sk self.currenttag = 0 def login(self, username, pwd): for repl, attrs in self.talk(["/login"]): chal = binascii.unhexlify(attrs['=ret']) md = md5() md.update(b'\x00') md.update(bytes(pwd, 'utf-8')) md.update(chal) self.talk(["/login", "=name=" + username, "=response=00" + binascii.hexlify(md.digest()).decode('utf-8')]) def talk(self, words): if self.writeSentence(words) == 0: return r = [] while 1: i = self.readSentence() if len(i) == 0: continue reply = i[0] attrs = {} for w in i[1:]: j = w.find('=', 1) if (j == -1): attrs[w] = '' else: attrs[w[:j]] = w[j+1:] r.append((reply, attrs)) if reply == '!done': return r def writeSentence(self, words): ret = 0 for w in words: self.writeWord(w) ret += 1 self.writeWord('') return ret def readSentence(self): r = [] while 1: w = self.readWord() if w == '': return r r.append(w) def writeWord(self, w): print("<<< " + w) b = bytes(w, "utf-8") self.writeLen(len(b)) self.writeBytes(b) def readWord(self): ret = self.readBytes(self.readLen()).decode('utf-8') print(">>> " + ret) return ret def writeLen(self, l): if l < 0x80: self.writeBytes(bytes([l])) elif l < 0x4000: l |= 0x8000 self.writeBytes(bytes([(l >> 8) & 0xff, l & 0xff])) elif l < 0x200000: l |= 0xC00000 self.writeBytes(bytes([(l >> 16) & 0xff, (l >> 8) & 0xff, l & 0xff])) elif l < 0x10000000: l |= 0xE0000000 self.writeBytes(bytes([(l >> 24) & 0xff, (l >> 16) & 0xff, (l >> 8) & 0xff, l & 0xff])) else: self.writeBytes(bytes([0xf0, (l >> 24) & 0xff, (l >> 16) & 0xff, (l >> 8) & 0xff, l & 0xff])) def readLen(self): c = self.readBytes(1)[0] if (c & 0x80) == 0x00: pass elif (c & 0xC0) == 0x80: c &= ~0xC0 c <<= 8 c += self.readBytes(1)[0] elif (c & 0xE0) == 0xC0: c &= ~0xE0 c <<= 8 c += self.readBytes(1)[0] c <<= 8 c += self.readBytes(1)[0] elif (c & 0xF0) == 0xE0: c &= ~0xF0 c <<= 8 c += self.readBytes(1)[0] c <<= 8 c += self.readBytes(1)[0] c <<= 8 c += self.readBytes(1)[0] elif (c & 0xF8) == 0xF0: c = self.readBytes(1)[0] c <<= 8 c += self.readBytes(1)[0] c <<= 8 c += self.readBytes(1)[0] c <<= 8 c += self.readBytes(1)[0] return c def writeBytes(self, s): n = 0 while n < len(s): r = self.sk.send(s[n:]) if r == 0: raise RuntimeError("connection closed by remote end") n += r def readBytes(self, length): ret = b'' while len(ret) < length: s = self.sk.recv(length - len(ret)) if len(s) == 0: raise RuntimeError("connection closed by remote end") ret += s return ret # TODO: Реализовать передачу в шейпер срок действия тарифа class MikrotikTransmitter(BaseTransmitter): def __init__(self, login=None, password=None, ip=None, port=None): ip = ip or settings.NAS_IP if not ping(ip): raise NasNetworkError('NAS %s не пингуется' % ip) try: s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((ip, port or settings.NAS_PORT)) self.ar = ApiRos(s) self.ar.login(login or settings.NAS_LOGIN, password or settings.NAS_PASSW) except ConnectionRefusedError: raise NasNetworkError('Подключение к %s отклонено (Connection Refused)' % ip) def _exec_cmd(self, cmd): assert isinstance(cmd, list) result = self.ar.talk(cmd) for rt in result: if rt[0] == '!trap': raise NasFailedResult(rt[1]['=message']) return result # ищем правило по имени, и возвращаем всю инфу о найденном правиле def _find_queue(self, name): ret = self._exec_cmd(['/queue/simple/print', '?name=%s' % name]) return ret[0][1] def add_user_range(self, user_list): return list(map(self.add_user, user_list)) def remove_user_range(self, user_list): names = ['uid%d' % usr.uid for usr in user_list] return self._exec_cmd(['/queue/simple/remove', '=.id=%s' % ','.join(names)]) # добавляем правило шейпинга для указанного ip и со скоростью max-limit=Upload/Download # Мы уверены что user это инстанс класса agent.structs.AbonStruct def add_user(self, user): assert isinstance(user.tariff, TariffStruct) assert isinstance(user.ip, IpStruct) return self._exec_cmd(['/queue/simple/add', '=name=uid%d' % user.uid, '=target-addresses=%s/32' % user.ip.get_str(), '=limit-at=%fM/%fM' % (user.tariff.speedIn, user.tariff.speedOut), '=max-limit=%fM/%fM' % (user.tariff.speedIn + 1, user.tariff.speedOut + 1) ]) # удаляем правило шейпера по имени правила def remove_user(self, user): uid = user if type(user) is int else user.uid self._exec_cmd(['/queue/simple/remove', '=.id=uid%d' % uid]) # обновляем основную инфу абонента def update_user(self, user): assert isinstance(user.tariff, TariffStruct) assert isinstance(user.ip, IpStruct) self._exec_cmd(['/queue/simple/set', '=.id=uid%d' % user.uid, '=limit-at=%fM/%fM' % (user.tariff.speedIn, user.tariff.speedOut), '=max-limit=%fM/%fM' % (user.tariff.speedIn + 1, user.tariff.speedOut + 1), '=target-addresses=%s/32' % user.ip.get_str() ]) # приостановливаем обслуживание абонента def pause_user(self, user): self._exec_cmd(['/queue/simple/disable', '=.id=uid%d' % user.uid]) # продолжаем обслуживание абонента def start_user(self, user): self._exec_cmd(['/queue/simple/enable', '=.id=uid%d' % user.uid]) # Тарифы хранить нам не надо, так что методы тарифов ниже не реализуем def add_tariff_range(self, tariff_list): pass # todo: реальзовать def remove_tariff_range(self, tariff_list): pass # todo: реальзовать def add_tariff(self, tariff): pass # todo: реальзовать def update_tariff(self, tariff): pass # todo: реальзовать def remove_tariff(self, tid): pass