Method Init

internal/iplibrary/action_ipset.go:42–232

(config *firewallconfigs.FirewallActionConfig)

}

func (this *IPSetAction) Init(config *firewallconfigs.FirewallActionConfig) error {
	this.config = &firewallconfigs.FirewallActionIPSetConfig{}
	err := this.convertParams(config.Params, this.config)
	if err != nil {
		return err
	}

	if len(this.config.WhiteName) == 0 {
		return NewFataError("white list name should not be empty")
	}
	if len(this.config.BlackName) == 0 {
		return NewFataError("black list name should not be empty")
	}

	// 创建ipset
	{
		path, err := executils.LookPath("ipset")
		if err != nil {
			return err
		}

		// ipv4
		for _, listName := range []string{this.config.WhiteName, this.config.BlackName} {
			if len(listName) == 0 {
				continue
			}
			var cmd = executils.NewTimeoutCmd(30*time.Second, path, "create", listName, "hash:ip", "timeout", "0", "maxelem", "1000000")
			cmd.WithStderr()
			err := cmd.Run()
			if err != nil {
				var output = cmd.Stderr()
				if !strings.Contains(output, "already exists") {
					return fmt.Errorf("create ipset '%s': %w, output: %s", listName, err, output)
				} else {
					err = nil
				}
			}
		}

		// ipv6
		for _, listName := range []string{this.config.WhiteNameIPv6, this.config.BlackNameIPv6} {
			if len(listName) == 0 {
				continue
			}
			var cmd = executils.NewTimeoutCmd(30*time.Second, path, "create", listName, "hash:ip", "family", "inet6", "timeout", "0", "maxelem", "1000000")
			cmd.WithStderr()
			err := cmd.Run()
			if err != nil {
				var output = cmd.Stderr()
				if !strings.Contains(output, "already exists") {
					return fmt.Errorf("create ipset '%s': %w, output: %s", listName, err, output)
				} else {
					err = nil
				}
			}
		}
	}