Teste de rede [RESOLVIDO]

LSSilva
(usa Outra)

Enviado em 20/05/2021 - 23:06h

echo "200   link1">>/etc/iproute2/rt_tables

echo "201   link2">>/etc/iproute2/rt_tables

echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf

sysctl -p

 

#!/bin/bash



#Vars

#link1

iflink1="ens3"

tablelink1="200"

gwlink1="192.168.10.1"

netlink1="192.168.10.0/24"

pesolink1=1



#link2

iflink2="enp5s5"

tablelink2="201"

gwlink2="192.168.2.1"

netlink2="192.168.2.0/24"

pesolink2=1





#Internal

ifinternal="ens2"

internalnet="192.168.0.0/24"



#Modulos

modprobe iptable_nat

modprobe ip_nat_ftp

modprobe ipt_MARK



#Ativar tcp_syncookies, ip_forward e ip_dynaddr (feitos sysctl)

#Deleta rota padrão

ip route del default



#limpa regras tabelas

ip route flush $tablelink1

ip route flush $tablelink2



#Define rotas

ip route add default dev $iflink1 via $gwlink1 table $tablelink1

ip route add default dev $iflink2 via $gwlink2 table $tablelink2



#Define roteamento links

cmd_link1=$(ip rule show | grep $netlink1)

if [ "$cmd_link1" = "" ]; then

ip rule add from $netlink1 lookup $tablelink1

fi

cmd_link2=$(ip rule show | grep $netlink2)

if [ "$cmd_link2" = "" ]; then

ip rule add from $netlink2 lookup $tablelink2

fi



#Define as regras para balanceamento

ip route add default scope global nexthop via $gwlink1 dev $iflink1 weight $pesolink1 nexthop via $gwlink2 dev $iflink2 weight $pesolink2



#Aplica as regras

ip route flush cache

 

#!/bin/bash



#Executar no rc.local nohup > /dev/null /etc/firewall/failover &



#Arquivo de Log

LOGFILE=/etc/firewall/log



#Tempo de espera para teste de conexão

tempo_espera=30



#Número de pacote do ping

numero_pacotes=2



#Internet ifaces

iflink1=ens3

iflink2=enp5s5



#Gw's

gwlink1=192.168.10.1

gwlink2=192.168.2.1



#Tables

tablelink1=200

tablelink2=201



#Ping destiny

endereco_ping_link1=8.8.8.8

endereco_ping_link2=8.8.4.4



#Arquivos balance

arquivo=/etc/firewall/loadbalance



#Não alterar

#Variáveis destinadas ao controle

i=0

link1=1

link2=1



#Ativação banlanceamento de links

sh $arquivo > /dev/null



while [ $i -le 10 ];

do



#Determining Routes

ip route add 8.8.8.8/32 via $gwlink1

ip route add 8.8.4.4/32 via $gwlink2



#Gets date

DATE=`date '+%d-%m-%Y %H:%M:%S'`



#########

#Link1###

#########

#Detecta se esta em link up antes de testar ping.

cmd_link1=$(ip addr show $iflink1 | grep state | awk '{print $9}')

if [ "$cmd_link1" != "DOWN" ]

then

cmd_link1_route=$(ip route show table $tablelink1 | awk '{print $2}')

if [ "$cmd_link1_route" != "via" ]

then

ip route add default dev $iflink1 via $gwlink1 table $tablelink1

fi

if (ping -I $iflink1 -c $numero_pacotes $endereco_ping_link1 > /dev/null)

then

link1="1"

else

link1="0"

fi

else

link1="0"

fi



#########

#Link2###

#########

#Detecta se esta em link up antes de testar ping.

cmd_link2=$(ip addr show $iflink2 | grep state | awk '{print $9}')

if [ "$cmd_link2" != "DOWN" ] 

then

cmd_link2_route=$(ip route show table $tablelink2 | awk '{print $2}')

if [ "$cmd_link2_route" != "via" ]

then

ip route add default dev $iflink2 via $gwlink2 table $tablelink2

fi

if (ping -I $iflink2 -c $numero_pacotes $endereco_ping_link2 > /dev/null)

then

link2="1"

else

link2="0"

fi

else

link2="0"

fi





#Testing comparations

if [ "$link1" = "1" ] && [ "$link2" = "1" ];then

sh $arquivo > /dev/null

elif [ "$link1" = "0" ] && [ "$link2" = "1" ];then

echo -e "------------------" >> $LOGFILE

echo -e "Evento de Queda..." >> $LOGFILE

echo -e "Link L1 Inativo!" >> $LOGFILE

echo -e $DATE >> $LOGFILE

echo -e "------------------" >> $LOGFILE

ip route del default

ip route add default via $gwlink2

ip route flush cache

elif [ "$link1" = "1" ] && [ "$link2" = "0" ];then

echo -e "------------------" >> $LOGFILE

echo -e "Evento de Queda..." >> $LOGFILE

echo -e "Link L2 Invativo!" >> $LOGFILE

echo -e $DATE >> $LOGFILE

echo -e "------------------" >> $LOGFILE

ip route del default

ip route add default via $gwlink1

ip route flush cache

elif [ "$link1" = "0" ] && [ "$link2" = "0" ];then

echo -e "------------------" >> $LOGFILE

echo -e "Evento de Queda..." >> $LOGFILE

echo -e "Link L1/L2 Invativos!" >> $LOGFILE

echo -e $DATE >> $LOGFILE

echo -e "------------------" >> $LOGFILE

fi



sleep $tempo_espera





done