初始化仓库
This commit is contained in:
310
main.py
Normal file
310
main.py
Normal file
@@ -0,0 +1,310 @@
|
||||
from librouteros import connect,Api
|
||||
import csv
|
||||
import ssl
|
||||
import threading
|
||||
|
||||
'''
|
||||
自动配置 ros 脚本，需要安装 librouteros 库：
|
||||
|
||||
pip install librouteros
|
||||
|
||||
配置文件格式为 CSV，包含以下字段：
|
||||
|
||||
- index: 配置索引，【重要】这个 index 用来生成对应 l2tp-out 用户名中的序号，每个节点都是唯一且固定的
|
||||
- name: 城市名
|
||||
- code: 城市代码
|
||||
- gateway: 网关地址
|
||||
- public: 公网 IP
|
||||
- mask: 公网子网掩码
|
||||
- private: 内网 IP
|
||||
|
||||
如果需要添加或修改配置项，在编辑前记得先备份 config.csv 文件
|
||||
|
||||
如果需要修改配置内容，在 start 函数里 “配置 ros” 部分添加或修改函数调用
|
||||
'''
|
||||
|
||||
threads = []
|
||||
failed = []
|
||||
|
||||
def main():
|
||||
# 加载配置文件
|
||||
config_data = []
|
||||
with open('config.csv', 'r', encoding='utf-8-sig') as file:
|
||||
reader = csv.DictReader(file)
|
||||
for row in reader:
|
||||
config_data.append(row)
|
||||
|
||||
# 多线程执行 ros 配置
|
||||
for _, config in enumerate(config_data):
|
||||
thread = threading.Thread(target=start, args=(config,))
|
||||
thread.start()
|
||||
threads.append(thread)
|
||||
|
||||
# 等待所有线程完成
|
||||
for thread in threads:
|
||||
thread.join()
|
||||
|
||||
# 输出结果
|
||||
print('=' * 20)
|
||||
print('配置完成统计({}/{}), 失败项：{}'.format(len(config_data)-len(failed), len(config_data), len(failed)))
|
||||
for _, (item, err) in enumerate(failed):
|
||||
print('{},{},{},{}'.format(item['public'], item['name'], item['code'], err))
|
||||
|
||||
def start(config):
|
||||
print('{}: 配置{}({})'.format(str(config['index']).zfill(3), config['name'], config['code']))
|
||||
|
||||
# 连接到 ros
|
||||
conn: Api
|
||||
try:
|
||||
ctx = ssl.create_default_context()
|
||||
ctx.check_hostname = False
|
||||
ctx.load_verify_locations('server.crt')
|
||||
conn = connect(
|
||||
username='admin',
|
||||
password='wyongk9815',
|
||||
host=config['public'],
|
||||
port=8729,
|
||||
ssl_wrapper=ctx.wrap_socket,
|
||||
)
|
||||
except Exception as err:
|
||||
failed.append((config, err))
|
||||
return
|
||||
|
||||
# 配置 ros
|
||||
try:
|
||||
configLogs(conn, config)
|
||||
except Exception as err:
|
||||
failed.append((config, err))
|
||||
|
||||
# 关闭连接
|
||||
conn.close()
|
||||
|
||||
|
||||
def configDefault(conn:Api,config):
|
||||
configNet(conn, config)
|
||||
configOuts(conn, config)
|
||||
configScripts(conn, config)
|
||||
configLogs(conn, config)
|
||||
|
||||
|
||||
def configNet(conn:Api,config):
|
||||
'''
|
||||
配置网络
|
||||
'''
|
||||
|
||||
# 配置路由
|
||||
routes = conn.path('ip', 'route')
|
||||
for route in routes:
|
||||
if route['routing-table'] == '1':
|
||||
try:
|
||||
routes.update(**{
|
||||
'.id': route['.id'],
|
||||
'gateway': config['gateway']
|
||||
})
|
||||
except Exception as e:
|
||||
print('更新默认路由失败: {}'.format(e))
|
||||
continue
|
||||
|
||||
# 配置地址
|
||||
addrs = conn.path('ip', 'address')
|
||||
for addr in addrs:
|
||||
if addr['interface'] == 'lan':
|
||||
try:
|
||||
addrs.update(**{
|
||||
'.id': addr['.id'],
|
||||
'address': config['private']
|
||||
})
|
||||
except Exception as e:
|
||||
print('更新 WAN 地址失败: {}'.format(e))
|
||||
continue
|
||||
|
||||
# 刷新 mac 地址
|
||||
eths = conn.path('interface', 'ethernet')
|
||||
for eth in eths:
|
||||
if eth['name'] == 'lan':
|
||||
tuple(eths('reset-mac-address', **{
|
||||
'.id': eth['.id']
|
||||
}))
|
||||
|
||||
def configOuts(conn:Api,config):
|
||||
'''
|
||||
配置 vpn 出口负载均衡
|
||||
'''
|
||||
count = 20
|
||||
|
||||
# 配置 ppp
|
||||
ppps = conn.path('interface', 'l2tp-client')
|
||||
|
||||
# 删除旧的 ppp
|
||||
for ppp in ppps:
|
||||
if ppp['name'].startswith('l2tp-out'):
|
||||
try:
|
||||
ppps.remove(ppp['.id'])
|
||||
except Exception as e:
|
||||
print('删除 PPP 失败: {}'.format(e))
|
||||
continue
|
||||
|
||||
# 添加新的 ppp
|
||||
for i in range(1, count+1):
|
||||
ppps.add(**{
|
||||
'name':'l2tp-out{}'.format(i),
|
||||
'connect-to':'192.168.25{}.25{}'.format((i-1)%3+1, (i-1)%3+1),
|
||||
'user':'jdzz{}dt{}'.format(i, config['index']),
|
||||
'password':'123231',
|
||||
'disabled':'no',
|
||||
})
|
||||
|
||||
|
||||
# 配置路由
|
||||
routes = conn.path('ip', 'route')
|
||||
|
||||
# 删除旧的路由表
|
||||
for route in routes:
|
||||
if str(route['routing-table']).startswith('r'):
|
||||
try:
|
||||
routes.remove(route['.id'])
|
||||
except Exception as e:
|
||||
print('删除路由表失败: {}'.format(e))
|
||||
continue
|
||||
|
||||
# 添加新的路由表
|
||||
for i in range(1,count+1):
|
||||
routeName = 'r{}'.format(i)
|
||||
routeOut = 'l2tp-out{}'.format(i)
|
||||
try:
|
||||
routes.add(**{
|
||||
'dst-address': '0.0.0.0/0',
|
||||
'gateway': routeOut,
|
||||
'routing-table': routeName,
|
||||
})
|
||||
except Exception as e:
|
||||
print('添加路由表失败: {}'.format(e))
|
||||
continue
|
||||
|
||||
def configScripts(conn:Api,config):
|
||||
'''
|
||||
配置脚本
|
||||
'''
|
||||
|
||||
scripts = conn.path('system', 'script')
|
||||
for script in scripts:
|
||||
if script['name'] == 'up':
|
||||
with open('scripts/up.rsc', 'rb') as file:
|
||||
upScript = str(file.read(), encoding='utf-8')
|
||||
scripts.update(**{
|
||||
'.id': script['.id'],
|
||||
'source': upScript
|
||||
})
|
||||
elif script['name'] == 'down':
|
||||
with open('scripts/down.rsc', 'rb') as file:
|
||||
downScript = str(file.read(), encoding='utf-8')
|
||||
scripts.update(**{
|
||||
'.id': script['.id'],
|
||||
'source': downScript
|
||||
})
|
||||
elif script['name'] == 'onlinestatus':
|
||||
with open('scripts/onlinestatus.rsc', 'rb') as file:
|
||||
onlineStatusScript = str(file.read(), encoding='utf-8')
|
||||
scripts.update(**{
|
||||
'.id': script['.id'],
|
||||
'source': onlineStatusScript.replace('<IP>', config['public'])
|
||||
})
|
||||
elif script['name'] == 'pppoestatus':
|
||||
with open('scripts/pppoestatus.rsc', 'rb') as file:
|
||||
pppoeStatusScript = str(file.read(), encoding='utf-8')
|
||||
scripts.update(**{
|
||||
'.id': script['.id'],
|
||||
'source': pppoeStatusScript.replace('<IP>', config['public'])
|
||||
})
|
||||
|
||||
def configLogs(conn:Api,config):
|
||||
'''
|
||||
配置日志处理
|
||||
'''
|
||||
|
||||
# 添加日志过滤器
|
||||
filters = conn.path('ip', 'firewall', 'filter')
|
||||
for filter in filters:
|
||||
if filter['comment'] == 'natlog':
|
||||
try:
|
||||
filters.remove(filter['.id'])
|
||||
except Exception as e:
|
||||
print('删除过滤器失败: {}'.format(e))
|
||||
continue
|
||||
|
||||
filters.add(**{
|
||||
'chain': 'forward',
|
||||
'action': 'log',
|
||||
'comment': 'natlog',
|
||||
'dst-address': '10.0.0.0/8',
|
||||
'protocol': 'tcp',
|
||||
'connection-nat-state': 'srcnat',
|
||||
'tcp-flags': 'syn',
|
||||
})
|
||||
|
||||
filters.add(**{
|
||||
'chain': 'forward',
|
||||
'action': 'log',
|
||||
'comment': 'natlog',
|
||||
'src-address': '10.0.0.0/8',
|
||||
'protocol': 'udp',
|
||||
'dst-port': '!53',
|
||||
'connection-nat-state': '!srcnat',
|
||||
})
|
||||
|
||||
# 添加日志动作
|
||||
actions = conn.path('system', 'logging', 'action')
|
||||
|
||||
for action in actions:
|
||||
if action['name'] in ['logremote', 'logremoteidc']:
|
||||
try:
|
||||
actions.remove(action['.id'])
|
||||
except Exception as e:
|
||||
print('删除日志动作失败: {}'.format(e))
|
||||
continue
|
||||
|
||||
actions.add(**{
|
||||
'name': 'logremote',
|
||||
'target': 'remote',
|
||||
'src-address': '0.0.0.0',
|
||||
'remote': '106.119.167.38',
|
||||
'remote-port': '5775',
|
||||
})
|
||||
|
||||
actions.add(**{
|
||||
'name': 'logremoteidc',
|
||||
'target': 'remote',
|
||||
'src-address': '0.0.0.0',
|
||||
'remote': '192.168.100.255',
|
||||
'remote-port': '5775',
|
||||
})
|
||||
|
||||
# 配置日志动作
|
||||
logs = conn.path('system', 'logging')
|
||||
|
||||
for log in logs:
|
||||
if 'firewall' in log['topics'] and 'info' in log['topics']:
|
||||
try:
|
||||
logs.remove(log['.id'])
|
||||
except Exception as e:
|
||||
print('删除日志配置失败: {}'.format(e))
|
||||
continue
|
||||
|
||||
logs.add(**{
|
||||
'topics': 'firewall,info',
|
||||
'prefix': config['code'],
|
||||
'action': 'logremote',
|
||||
})
|
||||
|
||||
logs.add(**{
|
||||
'topics': 'firewall,info',
|
||||
'prefix': config['code'],
|
||||
'action': 'logremoteidc',
|
||||
})
|
||||
|
||||
def configDebug(conn:Api,config):
|
||||
'''
|
||||
配置调试
|
||||
'''
|
||||
|
||||
main()
|
||||
Reference in New Issue
Block a user