infra/check_providers
0
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

flush conntrack and route cache when enable/disable of the provider which has openvpn running on it.

Browse Source
This commit is contained in:
htouvet
2015-03-04 12:56:42 +01:00
parent d6e9444ad7
commit 591badb383
1 changed files with 689 additions and 685 deletions
Download Patch File Download Diff File Expand all files Collapse all files
check_providers.py
+5 -1
View File
@@ -408,6 +408,8 @@ available == True if actual rtt and loss are below the max_rtt and max_loss
print run('/sbin/shorewall enable {}'.format(self.provider_name),dry_run=self.dry_run) print run('/sbin/shorewall enable {}'.format(self.provider_name),dry_run=self.dry_run)
if self.openvpn_master: if self.openvpn_master:
logger.info('Restarting openvpn') logger.info('Restarting openvpn')
print run('/usr/sbin/conntrack -F',dry_run=self.dry_run)
print run('ip route flush cache',dry_run=self.dry_run)
print run('/etc/init.d/openvpn restart',dry_run=self.dry_run) print run('/etc/init.d/openvpn restart',dry_run=self.dry_run)
# here check the connectivity.... else rollback # here check the connectivity.... else rollback
self.update_leds() self.update_leds()
@@ -422,7 +424,9 @@ available == True if actual rtt and loss are below the max_rtt and max_loss
# remove connections # remove connections
if self.last_ip: if self.last_ip:
logger.info('removing conntrack entries') logger.info('removing conntrack entries')
logger.debug(run('/usr/sbin/conntrack -D -s {src}'.format(src=self.last_ip))[1],dry_run=self.dry_run) print run('/sbin/ip route flush cache',dry_run=self.dry_run)
#print run('/usr/sbin/conntrack -D -s {src}'.format(src=self.last_ip),dry_run=self.dry_run)
print run('/usr/sbin/conntrack -F',dry_run=self.dry_run)
# be sure there is no default gw in main table so that fallback provider can be reached # be sure there is no default gw in main table so that fallback provider can be reached
self.remove_default_gw() self.remove_default_gw()
# restart openvpn if it was running on this provider # restart openvpn if it was running on this provider