package routing import ( "bytes" "errors" "fmt" "net" "github.com/vishvananda/netlink" ) var ( ErrRouteReplace = errors.New("cannot replace route") ErrRouteDelete = errors.New("cannot delete route") ErrRuleAdd = errors.New("cannot add routing rule") ErrRuleDel = errors.New("cannot delete routing rule") ) func (r *routing) addRouteVia(destination net.IPNet, gateway net.IP, iface string, table int) error { destinationStr := destination.String() if r.verbose { r.logger.Info("adding route for %s", destinationStr) } if r.debug { fmt.Printf("ip route replace %s via %s dev %s table %d\n", destinationStr, gateway, iface, table) } link, err := netlink.LinkByName(iface) if err != nil { return fmt.Errorf("%w: interface %s: %s", ErrLinkByName, iface, err) } route := netlink.Route{ Dst: &destination, Gw: gateway, LinkIndex: link.Attrs().Index, Table: table, } if err := netlink.RouteReplace(&route); err != nil { return fmt.Errorf("%w: for subnet %s at interface %s: %s", ErrRouteReplace, destinationStr, iface, err) } return nil } func (r *routing) deleteRouteVia(destination net.IPNet, gateway net.IP, iface string, table int) (err error) { destinationStr := destination.String() if r.verbose { r.logger.Info("deleting route for %s", destinationStr) } if r.debug { fmt.Printf("ip route delete %s via %s dev %s table %d\n", destinationStr, gateway, iface, table) } link, err := netlink.LinkByName(iface) if err != nil { return fmt.Errorf("%w: for interface %s: %s", ErrLinkByName, iface, err) } route := netlink.Route{ Dst: &destination, Gw: gateway, LinkIndex: link.Attrs().Index, Table: table, } if err := netlink.RouteDel(&route); err != nil { return fmt.Errorf("%w: for subnet %s at interface %s: %s", ErrRouteDelete, destinationStr, iface, err) } return nil } func (r *routing) addIPRule(src net.IP, table, priority int) error { if r.debug { fmt.Printf("ip rule add from %s lookup %d pref %d\n", src, table, priority) } rule := netlink.NewRule() rule.Src = netlink.NewIPNet(src) rule.Priority = priority rule.Table = table rules, err := netlink.RuleList(netlink.FAMILY_ALL) if err != nil { return fmt.Errorf("%w: %s", ErrRulesList, err) } for _, existingRule := range rules { if existingRule.Src != nil && existingRule.Src.IP.Equal(rule.Src.IP) && bytes.Equal(existingRule.Src.Mask, rule.Src.Mask) && existingRule.Priority == rule.Priority && existingRule.Table == rule.Table { return nil // already exists } } if err := netlink.RuleAdd(rule); err != nil { return fmt.Errorf("%w: for rule %q: %s", ErrRuleAdd, rule, err) } return nil } func (r *routing) deleteIPRule(src net.IP, table, priority int) error { if r.debug { fmt.Printf("ip rule del from %s lookup %d pref %d\n", src, table, priority) } rule := netlink.NewRule() rule.Src = netlink.NewIPNet(src) rule.Priority = priority rule.Table = table rules, err := netlink.RuleList(netlink.FAMILY_ALL) if err != nil { return fmt.Errorf("%w: %s", ErrRulesList, err) } for _, existingRule := range rules { if existingRule.Src != nil && existingRule.Src.IP.Equal(rule.Src.IP) && bytes.Equal(existingRule.Src.Mask, rule.Src.Mask) && existingRule.Priority == rule.Priority && existingRule.Table == rule.Table { if err := netlink.RuleDel(rule); err != nil { return fmt.Errorf("%w: for rule %q: %s", ErrRuleDel, rule, err) } } } return nil }