wafoo 0.0.1 → 0.0.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.travis.yml +8 -0
- data/README.md +2 -2
- data/lib/wafoo/helper.rb +9 -0
- data/lib/wafoo/run.rb +52 -42
- data/lib/wafoo/version.rb +1 -1
- metadata +2 -1
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 97e1e0c5dc2c41f2401ee42d05cc463930528ef6fe5aaf2319784b1c1ce80408
|
4
|
+
data.tar.gz: dfcfaccc4bdc7a0bcab036c8fb42ef0cf186f02ca3194b3a2bd8819ce1728da7
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 5206bc7e5396b5b11fb2561c6167142d23e7fc229b82afeb8dd2027bc9a51fd2b6ec613d4b2f663728c33f1db917d9c8c010055906b30efe13b65579e8647aeb
|
7
|
+
data.tar.gz: 11e38af3dfa03a5c4da6785d7928560b1a3d719e952d7b35a584fa386e9c0e4d5449ffcad97122d0c536b23be086767cfcd3a28b88995a33f89c1bf6bc4a0a5b
|
data/.travis.yml
ADDED
data/README.md
CHANGED
@@ -1,4 +1,4 @@
|
|
1
|
-
# wafoo
|
1
|
+
# wafoo [![Build Status](https://travis-ci.org/inokappa/wafoo.svg?branch=master)](https://travis-ci.org/inokappa/wafoo) [![Gem Version](https://badge.fury.io/rb/wafoo.svg)](https://badge.fury.io/rb/wafoo)
|
2
2
|
|
3
3
|
## これなに
|
4
4
|
|
@@ -68,4 +68,4 @@ $ bundle exec wafoo apply --ip-set-id=${IPSet ID} --dry-run
|
|
68
68
|
|
69
69
|
```sh
|
70
70
|
$ bundle exec wafoo apply --ip-set-id=${IPSet ID}
|
71
|
-
```
|
71
|
+
```
|
data/lib/wafoo/helper.rb
CHANGED
@@ -6,10 +6,19 @@ module Wafoo
|
|
6
6
|
puts table
|
7
7
|
end
|
8
8
|
|
9
|
+
def split_cidr(ipset)
|
10
|
+
addr = NetAddr::CIDR.create(ipset)
|
11
|
+
addr.enumerate
|
12
|
+
end
|
13
|
+
|
9
14
|
def added_print(message)
|
10
15
|
"\e[32m" + message + "\e[0m"
|
11
16
|
end
|
12
17
|
|
18
|
+
def info_print(message)
|
19
|
+
"\e[36m" + message + "\e[0m"
|
20
|
+
end
|
21
|
+
|
13
22
|
def removed_print(message)
|
14
23
|
"\e[31m" + message + "\e[0m"
|
15
24
|
end
|
data/lib/wafoo/run.rb
CHANGED
@@ -57,29 +57,33 @@ module Wafoo
|
|
57
57
|
|
58
58
|
def export_ipsets(ip_set_id)
|
59
59
|
ipsets = read_ipsets_from_api(ip_set_id)
|
60
|
-
|
60
|
+
puts 'Exporting IP List...'
|
61
|
+
ipsets.sort.each { |ipset| puts info_print(ipset) }
|
61
62
|
File.open(ip_set_id, 'w') do |f|
|
62
63
|
ipsets.sort.each { |ipset| f.puts(ipset) }
|
63
64
|
end
|
65
|
+
puts 'Exported to ' + added_print(ip_set_id)
|
64
66
|
end
|
65
67
|
|
66
68
|
def apply_ipsets(ipsets, ip_set_id)
|
67
69
|
waf = @regional ? @waf_regional : @waf
|
70
|
+
puts 'Applying IP List...'
|
68
71
|
change_token = waf.get_change_token.change_token
|
69
|
-
|
70
|
-
|
71
|
-
|
72
|
-
|
73
|
-
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
|
78
|
-
|
72
|
+
begin
|
73
|
+
waf.update_ip_set(
|
74
|
+
ip_set_id: ip_set_id,
|
75
|
+
change_token: change_token,
|
76
|
+
updates: ipsets
|
77
|
+
)
|
78
|
+
puts 'Apply Finished.'
|
79
|
+
rescue => ex
|
80
|
+
puts 'Apply Error ' + ex.message
|
81
|
+
end
|
79
82
|
end
|
80
83
|
|
81
84
|
def generate_delete_hash(ipset)
|
82
85
|
ipset.slice!(0)
|
86
|
+
# p ipset
|
83
87
|
h = {
|
84
88
|
action: 'DELETE',
|
85
89
|
ip_set_descriptor: {
|
@@ -88,20 +92,20 @@ module Wafoo
|
|
88
92
|
}
|
89
93
|
}
|
90
94
|
|
91
|
-
unless %w(8 16 24 33).include?(ipset.split('/').last)
|
92
|
-
|
93
|
-
|
94
|
-
|
95
|
-
|
96
|
-
|
97
|
-
|
98
|
-
|
99
|
-
|
100
|
-
|
101
|
-
|
102
|
-
|
103
|
-
|
104
|
-
end
|
95
|
+
# unless %w(8 16 24 33).include?(ipset.split('/').last)
|
96
|
+
# ips = split_cidr(ipset)
|
97
|
+
# ipsets_array = []
|
98
|
+
# ips.each do |ip|
|
99
|
+
# ipsets_array << {
|
100
|
+
# action: 'DELETE',
|
101
|
+
# ip_set_descriptor: {
|
102
|
+
# type: 'IPV4',
|
103
|
+
# value: ip + '/32'
|
104
|
+
# }
|
105
|
+
# }
|
106
|
+
# end
|
107
|
+
# return ipsets_array
|
108
|
+
# end
|
105
109
|
|
106
110
|
ipsets_hash = {
|
107
111
|
action: 'DELETE',
|
@@ -115,20 +119,20 @@ module Wafoo
|
|
115
119
|
|
116
120
|
def generate_insert_hash(ipset)
|
117
121
|
ipset.slice!(0)
|
118
|
-
unless %w(8 16 24 33).include?(ipset.split('/').last)
|
119
|
-
|
120
|
-
|
121
|
-
|
122
|
-
|
123
|
-
|
124
|
-
|
125
|
-
|
126
|
-
|
127
|
-
|
128
|
-
|
129
|
-
|
130
|
-
|
131
|
-
end
|
122
|
+
# unless %w(8 16 24 33).include?(ipset.split('/').last)
|
123
|
+
# ips = split_cidr(ipset)
|
124
|
+
# ipsets_array = []
|
125
|
+
# ips.each do |ip|
|
126
|
+
# ipsets_array << {
|
127
|
+
# action: 'INSERT',
|
128
|
+
# ip_set_descriptor: {
|
129
|
+
# type: 'IPV4',
|
130
|
+
# value: ip + '/32'
|
131
|
+
# }
|
132
|
+
# }
|
133
|
+
# end
|
134
|
+
# return ipsets_array
|
135
|
+
# end
|
132
136
|
|
133
137
|
ipsets_hash = {
|
134
138
|
action: 'INSERT',
|
@@ -147,17 +151,23 @@ module Wafoo
|
|
147
151
|
Diffy::Diff.new(_old, _new).each do |line|
|
148
152
|
case line
|
149
153
|
when /^\+/ then
|
150
|
-
puts added_print(line.chomp)
|
154
|
+
puts 'Add Line: ' + added_print(line.chomp)
|
151
155
|
ipsets << generate_insert_hash(line.chomp)
|
152
156
|
when /^-/ then
|
153
|
-
puts removed_print(line.chomp)
|
157
|
+
puts 'Remove Line: ' + removed_print(line.chomp)
|
154
158
|
ipsets << generate_delete_hash(line.chomp)
|
155
159
|
end
|
156
160
|
end
|
157
161
|
|
158
|
-
if dry_run
|
162
|
+
if !dry_run and ipsets.length > 0 then
|
159
163
|
apply_ipsets(ipsets.flatten, ip_set_id)
|
160
164
|
export_ipsets(ip_set_id)
|
165
|
+
elsif dry_run and ipsets.length > 0 then
|
166
|
+
puts 'Above IP list will be changed.'
|
167
|
+
exit 0
|
168
|
+
else
|
169
|
+
puts 'No IP list changed.'
|
170
|
+
exit 0
|
161
171
|
end
|
162
172
|
end
|
163
173
|
end
|
data/lib/wafoo/version.rb
CHANGED
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: wafoo
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.0.
|
4
|
+
version: 0.0.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- inokappa
|
@@ -159,6 +159,7 @@ extensions: []
|
|
159
159
|
extra_rdoc_files: []
|
160
160
|
files:
|
161
161
|
- ".gitignore"
|
162
|
+
- ".travis.yml"
|
162
163
|
- Gemfile
|
163
164
|
- README.md
|
164
165
|
- Rakefile
|