n2n-server.sh

#!/bin/bash

## dependency: n2n-client.sh
## dependency: files/dhcpd_lease_to_slack.sh

cd `dirname $0`
. ./common.sh

usage="
Prepares peer-to-peer vpn 'n2n' server or node on


Usage:

$(basename $0) [--port <portnr>] [--no-dhcp] [--dhcp-range <ip-ip>] -- <options passed to n2n_client needed for dhcp server.>

where

 --port                   - UDP port to listen to. Defaults to 55355
                            E.g. 139.162.181.142:5000. Port must be the same as the supernode. 
 --no-dhcp                - Flag. If given, no DHCP server will be installed on the network. 
 --dhcp-range             - Range of the addresses to use in the network. 
                            Defaults to 'auto', which will randomly take 10.x.x.0/24 IP domain.
 --network-name           - Name of the n2n community. All edges within the same community 
                            appear on the same LAN (layer 2 network segment). 
                            Community name is 16 bytes in length. 
                            Defaults to 'My_n2n_network'
 --ifname                 - Name of the virtual network device. Defaults to 'edge0'.
 --mac                    - Sets the MAC address of the node. 
                            Without this, edge command will randomly generate a MAC address. 
                            In fact, hardcoding a static MAC address for a VPN interface is 
                            highly recommended. Otherwise, in case you restart edge 
                            daemon on a node, ARP cache of other peers will be polluted 
                            due to a newly generated MAC addess, and they will not send 
                            traffic to the node until the polluted ARP entry is evicted. 
                            Default 'auto', which will randomize MAC address.
 --client-service-name    - Name of the client service, needed if you intent to install more than one.
                            Defaults to edge.
 --server-service-name    - Name of the server service, needed if you intent to install more than one.
                            Defaults to supernode. THIS OPTION IS DISABLED. SERVICE IS ALWAYS \"supernode\".
 --password               - Password needed to join the network.  
 --ip                     - IP address in the private network of the node. Defaults to 
                            the first address in the dhcp range.
 --debug                  - Flag that sets debugging mode. 
 --log                    - Path to the log file that will log all meaningful commands
 <options to n2n_client>  - You must provide password. Server address will be put automatically. 
                            You can override --ip address of the dhcp server. 


Example2:

./$(basename $0) --password szakal --port 5536 --network-name SiecAdama

"
server_service_name="supernode"
our_ip="dhcp"
port=5535
while [[ $# > 0 ]]
do
key="$1"
shift

case $key in
	--debug)
	debug=1
	;;
	--log)
	log=$1
	shift
	;;
	--help)
	echo "$usage"
	exit 0
	;;
	--port)
	port="$1"
	shift
	;;
	--network-name)
	network_name="$1"
	shift
	;;
	--client-service-name)
	client_service_name="$1"
	shift
	;;
#	--server-service-name)
#	server_service_name="$1"
#	shift
#	;;
	--ifname)
	ifname="$1"
	shift
	;;
	--mac)
	mac="$1"
	shift
	;;
	--password)
	password="$1"
	shift
	;;
	--ip)
	our_ip="$1"
	shift
	;;
	--no-dhcp)
	no_dhcp="$1"
	;;
	--dhcp-range)
	dhcp_range="$1"
	shift
	;;
	--)
	break
	;;
	-*)
	echo "Error: Unknown option: $1" >&2
	echo "$usage" >&2
	exit 1
	;;
esac
done

if [ -n "$debug" ]; then
	opts="$opts --debug"
	if [ -z "$log" ]; then
		log=/dev/stdout
	else
		opts="$opts --log $log"
	fi
fi

if [ -z "$network_name" ]; then
	errcho "--network-name is an obligatory parameter"
	exit 1
fi
if [ -z "$password" ]; then
	errcho "--pasword is an obligatory parameter"
	exit 1
fi

set client_opts=

if [ -n "$client_service_name" ]; then
	client_opts="${client_opts} --name ${client_service_name}"
fi
if [ -n "$ifname" ]; then
	client_opts="${client_opts} --ifname ${ifname}"
fi
if [ -n "$mac" ]; then
	client_opts="${client_opts} --mac ${mac}"
fi

ubuntu_ver=$(get_ubuntu_version)
pattern='([[:digit:]]{2})([[:digit:]]{2})'
if [[ "${ubuntu_ver}" =~ $pattern ]]; then
	file_link="http://apt-stable.ntop.org/${BASH_REMATCH[1]}.${BASH_REMATCH[2]}/all/apt-ntop-stable.deb"
	file_name="n2n-$(get_ubuntu_codename)-repo.deb"
else
	errcho "Something wrong with get_ubuntu_version"
	exit 1
fi

install_apt_package_file "${file_name}" apt-ntop-stable "${file_link}" && flag_need_apt_update=1 do_update

install_apt_package n2n

if [ -z "$no_dhcp" ]; then
	#We need to create DHCP server. For that:
	#1. We need to generate dhcp range or get the existing one
	#2. We need to generate IP for the server
	#3. We need to install n2n client with the fixed ip for the dhcp server
	#4. We need to install the dhcp server itself

	if [ -z "$dhcp_range" ]; then
		ip_prefix=10.$((RANDOM%256)).$((RANDOM%256))
		dhcp_range="${ip_prefix}.10 ${ip_prefix}.199"
		server_ip=${ip_prefix}.1
	else
		pattern='([[:digit:]]+)\.([[:digit:]]+)\.([[:digit:]]+)\.([[:digit:]]+).([[:digit:]]+)\.([[:digit:]]+)\.([[:digit:]]+)\.([[:digit:]]+)'
		if [[ "$dhcp_range" =~ $pattern ]]; then
			new_ip_prefix1=${BASH_REMATCH[1]}.${BASH_REMATCH[2]}.${BASH_REMATCH[3]}
			new_ip_prefix2=${BASH_REMATCH[5]}.${BASH_REMATCH[6]}.${BASH_REMATCH[7]}
			if [ "$new_ip_prefix1" != "$new_ip_prefix2" ]; then
				errcho "Right now we support only /24 IP domains. (It can be easily changed in the future)"
				exit 1
			fi
			ip_prefix=$new_ip_prefix1
			server_ip=${ip_prefix}.1
			dhcp_range="${ip_prefix}.${BASH_REMATCH[4]} ${ip_prefix}.${BASH_REMATCH[8]}"
		else
			errcho "dhcp-range has improper format. You must provide two IP addresses separated by something (e.g. space)"
			exit 1
		fi
	fi

	client_opts="${client_opts} --ip ${server_ip}"
	if [ -z "${ip}" ]; then
		ip=${server_ip}
	fi
	
	if [ "$?" != "0" ] ; then
		errcho "Problems when installing n2n client. Exiting"
		exit 1
	fi
	config="--local-port ${port}"
	textfile /etc/n2n/${server_service_name}.conf "${config}" root
	logexec sudo systemctl enable supernode.service
	logexec sudo service supernode start

	bash -x ./n2n-client.sh localhost:$port --ip ${ip} --network-name ${network_name} --supernode-service ${server_service_name} --password ${password} ${client_opts} ${opts}

	if install_apt_package isc-dhcp-server; then
		restart_dhcp=1
		logexec sudo ln -s /etc/apparmor.d/usr.sbin.dhcpd /etc/apparmor.d/disable
		logexec sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.dhcpd
	fi 
	set -x
	linetextfile /etc/dhcp/dhcpd.conf "include \"/etc/dhcp/dhcpd_lease_to_slack.conf\";"
contents="on commit {
	set ClientIP = binary-to-ascii(10, 8, \".\", leased-address);
	set ClientMac = binary-to-ascii(16, 8, \":\", substring(hardware, 1, 6));
	set ClientName = pick-first-value ( option fqdn.hostname, option host-name );
	log(concat(\"Commit: IP: \", ClientIP, \" Mac: \", ClientMac));
	execute(\"/etc/dhcp/dhcpd_lease_to_slack.sh\", \"commit\", ClientIP, ClientMac, ClientName);
}"
	textfile /etc/dhcp/dhcpd_lease_to_slack.conf "$contents" root
	install_script ${DIR}/files/dhcpd_lease_to_slack.sh /etc/dhcp/dhcpd_lease_to_slack.sh root

	if add_dhcpd_entry "${ip_prefix}.0" 255.255.255.0 $dhcp_range; then
		restart_dhcp=1
	fi
	if add_dhcpd_entry "${ip_prefix}.0" 255.255.255.0 $dhcp_range; then
		restart_dhcp=1
	fi
	if edit_dhcpd authoritative "<ON>"; then
		restart_dhcp=1
	fi
	
	if [ "$restart_dhcp" == "1" ]; then
		logexec sudo service isc-dhcp-server restart #Make sure the dhcp starts AFTER supernode and its client
	fi
fi