File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/bigip.cpython-310.pyc
Back
o ;jW � @ s� d Z ddlZddlZz ddlZddlZdZW n ey! dZY nw dZdd� Z dZ dOd d �Z d d � Z d d� Z dd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd � Zd d � ZdPd d �ZdOd!d"�Z dQd#d$�ZdOd%d&�ZdOd'd(�Z dRd)d*�Z dSd+d,�Z d-d.� Z d/d0� Z d1d2� Z dTd3d4�Z d5d6� Z!dOd7d8�Z" dUd9d:�Z# dVd;d<�Z$d=d>� Z% dOd?d@�Z&dAdB� Z'dCdD� Z(dEdF� Z) dOdGdH�Z*dIdJ� Z+dKdL� Z,dMdN� Z-dS )Wz� An execution module which can manipulate an f5 bigip via iControl REST :maturity: develop :platform: f5_bigip_11.6 � NTF�bigipc C s t rtS dS )z. Only return if requests is installed )FzSThe bigip execution module cannot be loaded: python requests library not available.)�HAS_LIBS�__virtualname__� r r �F/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/bigip.py� __virtual__ s r zhttps://{host}/mgmt/tmc C sj t �� }| |f|_d|_|j�ddi� |r3td d|� ��}|r+|j�d|i� |S |j�ddi� |S )zG Create a session to be used when connecting to iControl REST. Tz Content-Typezapplication/json� grains.get�bigip_f5_trans:zX-F5-REST-Coordination-IdN)�requests�sessionZauthZverify�headers�update�__salt__)�username�password� trans_labelr �trans_idr r r �_build_session' s �r c C s> z t jj�| j�}W n ty | j}Y nw | j|d�}|S )zM Load the response from json data, return the dictionary or raw text ��code�content)�salt�utils�json�loads�text� ValueErrorZ status_code)�response�data�retr r r �_load_response= s � r c C s ddj | |d�d�}|S )z. Format and Return a connection error Nz<Error: Unable to connect to the bigip device: {host} {error})�host�errorr )�format)�hostnamer" r r r r �_load_connection_errorL s �� r% c C s* i }| � � D ] \}}|dur|||< q|S )z� Pass in a dictionary of parameters, loop through them and build a payload containing, parameters who's values are not None. N��items)�params�payload�param�valuer r r � _loop_payload] s �r, c C sh | dur2g }| dkr |S t | t�s| �d�}n| }|D ]}|du r'|�|� q|�||d�� q|S dS )zy pass in an option to check for a list of items, create a list of dictionary of items to set for this option N�none�,)�kind�name)� isinstance�list�split�append)Z option_valueZ item_kindr' �valuesr+ r r r � _build_listn s r6 c C s� |� � D ]d\}}|d durh|d du s|d dkr%|d dkr%d| |< n|d du s1|d dkr;|d dkr;d| |< |d du sG|d dkrR|d d krRd| |< q|d du s^|d dkrh|d d krhd| |< q| S ) z� BigIP can't make up its mind if it likes yes / no or true or false. Figure out what it likes to hear without confusing the user. r+ NTZyes�type�yes_noF�no� true_falser& )r) �togglesZtoggleZ definitionr r r �_determine_toggles� s �r< c C s^ t | t�st | t�st | t�r| S | �d�r;| �d�r;| �dd�} | �dd�} ztjj � | �W S t y: tj j �w d| v rXd| vrX| �d�}g }|D ] } |�t| �� qL|S d| v r�d| vr�i }| �d �}|D ]}|�d�d }|�d�d }|||< qi|S d | v r�d | vr�| �d �}|S d| v r�| �dd�} d| v r�| �dd�} d | v r�| �d d �} | S ) z� A function to detect if user is trying to pass a dictionary or list. parse it and return a dictionary list or a string zj{z}j�{�}�|z\|�:z\:r. r � z\,)r1 �bool�dictr2 � startswith�endswith�replacer r r r � Exception� exceptions�CommandExecutionErrorr3 r4 � _set_value) r+ r5 r' �optionsZ key_pairsZkey_pair�k�vZ value_itemsr r r rJ � sD � rJ c C s� t ||�}i }z|jtj| d�d tjj�|�d�}W n tj j y4 } z t | |�W Y d}~S d}~ww t |�}|d dkrU|d d } t d d || i� d j| |d �S |S ) a� A function to connect to a bigip device and start a new transaction. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password label The name / alias for this transaction. The actual transaction id will be stored within a grain called ``bigip_f5_trans:<label>`` CLI Example: .. code-block:: bash salt '*' bigip.start_transaction bigip admin admin my_transaction �r! z /transaction�r Nr �� r ZtransIdz grains.setvalZbigip_f5_transz[Transaction: {trans_id} - has successfully been stored in the grain: bigip_f5_trans:{label})r �label)r �post�BIG_IP_URL_BASEr# r r r �dumpsr rH �ConnectionErrorr% r r ) r$ r r rQ � bigip_sessionr) r �er r r r r �start_transaction� s( ��� ��rX c C s� t ||�}td d|� ��}|r>z|�tj| d�d|� d� �}t|�W S tjjy= } z t | |�W Y d}~S d}~ww dS )a� A function to connect to a bigip device and list an existing transaction. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password label the label of this transaction stored within the grain: ``bigip_f5_trans:<label>`` CLI Example: .. code-block:: bash salt '*' bigip.list_transaction bigip admin admin my_transaction r r rN � /transaction/z /commandsN��Error: the label for this transaction was not defined as a grain. Begin a new transaction using the bigip.start_transaction function) r r �getrS r# r r rH rU r% �r$ r r rQ rV r r rW r r r �list_transaction s �� ���r] c C s� t ||�}td d|� ��}|rJi }d|d< z|jtj| d�d|� � tjj�|�d�}t |�W S t j j yI } z t | |�W Y d}~S d}~ww d S ) a� A function to connect to a bigip device and commit an existing transaction. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password label the label of this transaction stored within the grain: ``bigip_f5_trans:<label>`` CLI Example: .. code-block:: bash salt '*' bigip.commit_transaction bigip admin admin my_transaction r r Z VALIDATING�staterN rY rO NrZ )r r ZpatchrS r# r r r rT r r rH rU r% ) r$ r r rQ rV r r) r rW r r r �commit_transactionL s" � ���r_ c C s� t ||�}td d|� ��}|r=z|�tj| d�d|� � �}t|�W S tjjy< } z t | |�W Y d}~S d}~ww dS )a� A function to connect to a bigip device and delete an existing transaction. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password label The label of this transaction stored within the grain: ``bigip_f5_trans:<label>`` CLI Example: .. code-block:: bash salt '*' bigip.delete_transaction bigip admin admin my_transaction r r rN rY NrZ ) r r �deleterS r# r r rH rU r% r\ r r r �delete_transaction| s � ���ra c C s� t |||�}z&|r|�tj| d�d|� � �}n|�tj| d�d �}W t|�S W t|�S tjjyE } z t| |�W Y d}~S d}~ww )a; A function to connect to a bigip device and list all nodes or a specific node. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the node to list. If no name is specified than all nodes will be listed. trans_label The label of the transaction stored within the grain: ``bigip_f5_trans:<label>`` CLI Example: .. code-block:: bash salt '*' bigip.list_node bigip admin admin my-node rN � /ltm/node/� /ltm/nodeN� r r[ rS r# r rH rU r% r �r$ r r r0 r rV r rW r r r � list_node� s ��� ���rf c C s� t |||�}i }||d< ||d< z|jtj| d�d tjj�|�d�}W t |�S tj j y@ } z t | | �W Y d} ~ S d} ~ ww )a A function to connect to a bigip device and create a node. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the node address The address of the node trans_label The label of the transaction stored within the grain: ``bigip_f5_trans:<label>`` CLI Example: .. code-block:: bash salt '*' bigip.create_node bigip admin admin 10.1.1.2 r0 �addressrN rc rO N) r rR rS r# r r r rT r rH rU r% r ) r$ r r r0 rg r rV r) r rW r r r � create_node� s ����rh c C s� |||||| | | | d� }t ||| �}t|�}||d< z|jtj| d�d|� � tjj�|�d�}W t |�S t j j yM } z t | |�W Y d}~S d}~ww )ai A function to connect to a bigip device and modify an existing node. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the node to modify connection_limit [integer] description [string] dynamic_ratio [integer] logging [enabled | disabled] monitor [[name] | none | default] rate_limit [integer] ratio [integer] session [user-enabled | user-disabled] state [user-down | user-up ] trans_label The label of the transaction stored within the grain: ``bigip_f5_trans:<label>`` CLI Example: .. code-block:: bash salt '*' bigip.modify_node bigip admin admin 10.1.1.2 ratio=2 logging=enabled ) �connection-limit� description� dynamic-ratio�logging�monitor� rate-limit�ratior r^ r0 rN rb rO N�r r, �putrS r# r r r rT r rH rU r% r )r$ r r r0 �connection_limitrj � dynamic_ratiorl rm � rate_limitro r r^ r r( rV r) r rW r r r � modify_node s. 9� ����ru c C sx t |||�}z|�tj| d�d|� � �}W n tjjy/ } z t| |�W Y d}~S d}~ww t|�dkr8dS t|�S )a A function to connect to a bigip device and delete a specific node. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the node which will be deleted. trans_label The label of the transaction stored within the grain: ``bigip_f5_trans:<label>`` CLI Example: .. code-block:: bash salt '*' bigip.delete_node bigip admin admin my-node rN rb N� T� r r` rS r# r rH rU r% r re r r r � delete_nodeX s ��� rx c C � t ||�}z'|r|�tj| d�d|� d� �}n|�tj| d�d �}W t|�S W t|�S tjjyE } z t| |�W Y d}~S d}~ww )a� A function to connect to a bigip device and list all pools or a specific pool. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the pool to list. If no name is specified then all pools will be listed. CLI Example: .. code-block:: bash salt '*' bigip.list_pool bigip admin admin my-pool rN � /ltm/pool/�/?expandSubcollections=true� /ltm/poolNrd �r$ r r r0 rV r rW r r r � list_pool� �$ ���� ���r~ c ! C s( i d|�d|�d| �d| �d| �d| �d| �d|�d |�d |�d |�d |�d |�d|�d|�d|�d|�|||d��}d|d�d|d�d�} t |�} || d< t| | �} |dur^t|d�| d< t||�} z| jtj| d�d tjj � | �d �} W t| �S t j j y� } z t| | �W Y d} ~ S d} ~ ww ) a A function to connect to a bigip device and create a pool. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the pool to create. members List of comma delimited pool members to add to the pool. i.e. 10.1.1.1:80,10.1.1.2:80,10.1.1.3:80 allow_nat [yes | no] allow_snat [yes | no] description [string] gateway_failsafe_device [string] ignore_persisted_weight [enabled | disabled] ip_tos_to_client [pass-through | [integer]] ip_tos_to_server [pass-through | [integer]] link_qos_to_client [pass-through | [integer]] link_qos_to_server [pass-through | [integer]] load_balancing_mode [dynamic-ratio-member | dynamic-ratio-node | fastest-app-response | fastest-node | least-connections-members | least-connections-node | least-sessions | observed-member | observed-node | predictive-member | predictive-node | ratio-least-connections-member | ratio-least-connections-node | ratio-member | ratio-node | ratio-session | round-robin | weighted-least-connections-member | weighted-least-connections-node] min_active_members [integer] min_up_members [integer] min_up_members_action [failover | reboot | restart-all] min_up_members_checking [enabled | disabled] monitor [name] profiles [none | profile_name] queue_depth_limit [integer] queue_on_connection_limit [enabled | disabled] queue_time_limit [integer] reselect_tries [integer] service_down_action [drop | none | reselect | reset] slow_ramp_time [integer] CLI Example: .. code-block:: bash salt '*' bigip.create_pool bigip admin admin my-pool 10.1.1.1:80,10.1.1.2:80,10.1.1.3:80 monitor=http rj �gateway-failsafe-device�ignore-persisted-weight�ip-tos-to-client�ip-tos-to-server�link-qos-to-client�link-qos-to-server�load-balancing-mode�min-active-members�min-up-memberszmin-up-members-action�min-up-members-checkingrm �profiles�queue-on-connection-limit�queue-depth-limit�queue-time-limit�zreselect-trieszservice-down-actionzslow-ramp-timer8 �r7 r+ �z allow-natz allow-snatr0 Nzltm:pool:members�membersrN r| rO )r, r< r6 r rR rS r# r r r rT r rH rU r% r )!r$ r r r0 r� � allow_nat� allow_snatrj �gateway_failsafe_device�ignore_persisted_weight�ip_tos_to_client�ip_tos_to_server�link_qos_to_client�link_qos_to_server�load_balancing_mode�min_active_members�min_up_members�min_up_members_action�min_up_members_checkingrm r� �queue_depth_limit�queue_on_connection_limit�queue_time_limit�reselect_tries�service_down_action�slow_ramp_timer( r; r) rV r rW r r r � create_pool� st j�������� � � � � ������� ����r� c C s i d|�d|�d|�d| �d| �d| �d| �d| �d |�d |�d |�d |�d |�d|�d|�d|�d|�|||d��}d|d�d|d�d�}t |�} || d< t| |�} t||�} z| jtj| d�d|� � tjj� | �d�} W t| �S t j j y� } z t | | �W Y d} ~ S d} ~ ww )a� A function to connect to a bigip device and modify an existing pool. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the pool to modify. allow_nat [yes | no] allow_snat [yes | no] description [string] gateway_failsafe_device [string] ignore_persisted_weight [yes | no] ip_tos_to_client [pass-through | [integer]] ip_tos_to_server [pass-through | [integer]] link_qos_to_client [pass-through | [integer]] link_qos_to_server [pass-through | [integer]] load_balancing_mode [dynamic-ratio-member | dynamic-ratio-node | fastest-app-response | fastest-node | least-connections-members | least-connections-node | least-sessions | observed-member | observed-node | predictive-member | predictive-node | ratio-least-connections-member | ratio-least-connections-node | ratio-member | ratio-node | ratio-session | round-robin | weighted-least-connections-member | weighted-least-connections-node] min_active_members [integer] min_up_members [integer] min_up_members_action [failover | reboot | restart-all] min_up_members_checking [enabled | disabled] monitor [name] profiles [none | profile_name] queue_on_connection_limit [enabled | disabled] queue_depth_limit [integer] queue_time_limit [integer] reselect_tries [integer] service_down_action [drop | none | reselect | reset] slow_ramp_time [integer] CLI Example: .. code-block:: bash salt '*' bigip.modify_pool bigip admin admin my-pool 10.1.1.1:80,10.1.1.2:80,10.1.1.3:80 min_active_members=1 rj r� r� r� r� r� r� r� r� r� zmin-up_members-actionr� rm r� r� r� r� r� r8 r� r� r0 rN rz rO N)r, r< r rq rS r# r r r rT r rH rU r% r ) r$ r r r0 r� r� rj r� r� r� r� r� r� r� r� r� r� r� rm r� r� r� r� r� r� r� r( r; r) rV r rW r r r � modify_poolK sp f�������� � � � � ������� ����r� c C �v t ||�}z|�tj| d�d|� � �}W n tjjy. } z t| |�W Y d}~S d}~ww t|�dkr7dS t|�S )a� A function to connect to a bigip device and delete a specific pool. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the pool which will be deleted CLI Example .. code-block:: bash salt '*' bigip.delete_node bigip admin admin my-pool rN rz Nrv Trw r} r r r � delete_pool� � ��� r� c C s i }||d< |durVt |t�r|�d�}g }|D ]9}t |t�rDd|�� v r,|�d�|d< |D ]}|�dd�} |�|�|| < q.|�|� q|�||�d�d d �� q||d < t||�} z| j t j | d �d |� � t j j�|�d�} W t| �S tjjy� } z t| | �W Y d} ~ S d} ~ ww )aY A function to connect to a bigip device and replace members of an existing pool with new members. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the pool to modify members List of comma delimited pool members to replace existing members with. i.e. 10.1.1.1:80,10.1.1.2:80,10.1.1.3:80 CLI Example: .. code-block:: bash salt '*' bigip.replace_pool_members bigip admin admin my-pool 10.2.2.1:80,10.2.2.2:80,10.2.2.3:80 r0 Nr. � member_stater^ �_�-r@ r �r0 rg r� rN rz rO )r1 �strr3 rC �keys�poprF r4 r rq rS r# r r r rT r rH rU r% r ) r$ r r r0 r� r) Z pool_members�member�key�new_keyrV r rW r r r �replace_pool_members s6 ����r� c C s� t |t�r'd|�� v r|�d�|d< |D ]}|�dd�}|�|�||< q|}n ||�d�d d�}t||�}z|jtj | d�d |� d � t j j � |�d �} W t| �S tjjyj } z t| | �W Y d } ~ S d } ~ ww ) a� A function to connect to a bigip device and add a new member to an existing pool. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the pool to modify member The name of the member to add i.e. 10.1.1.2:80 CLI Example: .. code-block:: bash salt '*' bigip.add_pool_members bigip admin admin my-pool 10.2.2.1:80 r� r^ r� r� r@ r r� rN rz z/membersrO N)r1 rC r� r� rF r3 r rR rS r# r r r rT r rH rU r% r ) r$ r r r0 r� r� r� r) rV r rW r r r �add_pool_memberO s& ����r� c C s� ||||| | | | | |||d� }t ||�}t|�}z |jtj| d�d|� d|� � tjj�|�d�}W t |�S t j j yN } z t | |�W Y d}~S d}~ww )a� A function to connect to a bigip device and modify an existing member of a pool. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the pool to modify member The name of the member to modify i.e. 10.1.1.2:80 connection_limit [integer] description [string] dynamic_ratio [integer] inherit_profile [enabled | disabled] logging [enabled | disabled] monitor [name] priority_group [integer] profiles [none | profile_name] rate_limit [integer] ratio [integer] session [user-enabled | user-disabled] state [ user-up | user-down ] CLI Example: .. code-block:: bash salt '*' bigip.modify_pool_member bigip admin admin my-pool 10.2.2.1:80 state=use-down session=user-disabled ) ri rj rk zinherit-profilerl rm zpriority-groupr� rn ro r r^ rN rz � /members/rO Nrp )r$ r r r0 r� rr rj rs Zinherit_profilerl rm Zpriority_groupr� rt ro r r^ r( rV r) r rW r r r �modify_pool_member� s6 A� � ����r� c C �| t ||�}z|�tj| d�d|� d|� � �}W n tjjy1 } z t| |�W Y d}~S d}~ww t|�dkr:dS t|�S )a� A function to connect to a bigip device and delete a specific pool. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the pool to modify member The name of the pool member to delete CLI Example: .. code-block:: bash salt '*' bigip.delete_pool_member bigip admin admin my-pool 10.2.2.2:80 rN rz r� Nrv Trw )r$ r r r0 r� rV r rW r r r �delete_pool_member� s ��� r� c C ry )a� A function to connect to a bigip device and list all virtuals or a specific virtual. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the virtual to list. If no name is specified than all virtuals will be listed. CLI Example: .. code-block:: bash salt '*' bigip.list_virtual bigip admin admin my-virtual rN � /ltm/virtual/r{ � /ltm/virtualNrd r} r r r � list_virtual r r� c+ 3 C s� i d|�d|�d|�d| �d| �d| �d|�d|�d |�d |�d |�d |�d |�d|�d|�d| �d| �| | |#|%|(|)d��}+d|d�d| d�d| d�d|"d�d|d�d|d�d|d�d�},t ||�}-t|+�}.||.d< ||.d< t|.|,�}.|dur~t|d�|.d< |dur�t|d �|.d< |dur�t|d �|.d < | dur�t| d�|.d < |!dur�t|!d�|.d < |$dur�t|$t�r�|$|.d!< n7|$d"kr�d"d"d#�|.d!< n+|$d$kr�d"d$d#�|.d!< n |$d%kr�d"d%d#�|.d!< n|$�d&�r�|$�d'�d( }/|/d&d#�|.d!< |'dur�t|'d�|.d)< |*du�r�t|*t��r1z|*d* |.d+< |*d, �rd-|.d.< n |*d/ �r d-|.d0< W nq t�y0 d1j |*d2� Y S w |*d"k�r;d"|.d+< nW|*d3k�rEd3|.d+< nMt|*t ��r�|*�d,��sW|*�d/��r�z(|*�d'�d4 }0|*�d'�d( �d5�|.d+< |0d/k�rud-|.d0< n |0d,k�r~d-|.d.< W n t�y� d6j |*d2� Y S w d7S |&du�r�|&d,k�r�d-|.d,< n |&d/k�r�d-|.d/< z|-j t j | d8�d9 t jj�|.�d:�}1W t|1�S tjj�y� }2 z t| |2�W Y d}2~2S d}2~2ww );u= A function to connect to a bigip device and create a virtual server. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the virtual to create destination [ [virtual_address_name:port] | [ipv4:port] | [ipv6.port] ] pool [ [pool_name] | none] address_status [yes | no] auto_lasthop [default | enabled | disabled ] bwc_policy [none] | string] cmp_enabled [yes | no] dhcp_relay [yes | no] connection_limit [integer] description [string] state [disabled | enabled] fallback_persistence [none | [profile name] ] flow_eviction_policy [none | [eviction policy name] ] gtm_score [integer] ip_forward [yes | no] ip_protocol [any | protocol] internal [yes | no] twelve_forward (12-forward) [yes | no] last_hop-pool [ [pool_name] | none] mask { [ipv4] | [ipv6] } mirror { [disabled | enabled | none] } nat64 [enabled | disabled] persist [none | profile1,profile2,profile3 ... ] profiles [none | default | profile1,profile2,profile3 ... ] policies [none | default | policy1,policy2,policy3 ... ] rate_class [name] rate_limit [integer] rate_limit_mode [destination | object | object-destination | object-source | object-source-destination | source | source-destination] rate_limit_dst [integer] rate_limitçsrc [integer] rules [none | [rule_one,rule_two ...] ] related_rules [none | [rule_one,rule_two ...] ] reject [yes | no] source { [ipv4[/prefixlen]] | [ipv6[/prefixlen]] } source_address_translation [none | snat:pool_name | lsn | automap ] source_port [change | preserve | preserve-strict] state [enabled | disabled] traffic_classes [none | default | class_one,class_two ... ] translate_address [enabled | disabled] translate_port [enabled | disabled] vlans [none | default | [enabled|disabled]:vlan1,vlan2,vlan3 ... ] CLI Example: .. code-block:: bash salt '*' bigip.create_virtual bigip admin admin my-virtual-3 26.2.2.5:80 \ pool=my-http-pool-http profiles=http,tcp salt '*' bigip.create_virtual bigip admin admin my-virtual-3 43.2.2.5:80 \ pool=test-http-pool-http profiles=http,websecurity persist=cookie,hash \ policies=asm_auto_l7_policy__http-virtual \ rules=_sys_APM_ExchangeSupport_helper,_sys_https_redirect \ related_rules=_sys_APM_activesync,_sys_APM_ExchangeSupport_helper \ source_address_translation=snat:my-snat-pool \ translate_address=enabled translate_port=enabled \ traffic_classes=my-class,other-class \ vlans=enabled:external,internal �pool� auto-lasthop� bwc-policyri rj �fallback-persistence�flow-eviction-policy� gtm-score� ip-protocol� last-hop-pool�mask�mirror�nat64�persist� rate-classrn �rate-limit-mode)�rate-limit-dst�rate-limit-src�source� source-port�translate-address�translate-portr8 r� r: �zaddress-statusz cmp-enabledz dhcp-relay�rejectz 12-forward�internalz ip-forwardr0 � destinationN�ltm:virtual:profiler� �ltm:virtual:persist�ltm:virtual:policy�policies�rules� related-rules�source-address-translationr- �r� r7 �automap�lsn�snatr@ rA �traffic-classes�vlan_ids�vlans�enabledT� vlans-enabled�disabled�vlans-disabled�8Error: Unable to Parse vlans dictionary: vlans={vlans}�r� �defaultr r. �4Error: Unable to Parse vlans option: vlans={vlans}z,Error: vlans must be a dictionary or string.rN r� rO )r r, r< r6 r1 rC rD r3 rG r# r� rR rS r r r rT r rH rU r% r �3r$ r r r0 r� r� Zaddress_statusZ auto_lasthopZ bwc_policyZ cmp_enabledrr Z dhcp_relayrj Zfallback_persistenceZflow_eviction_policyZ gtm_scoreZ ip_forwardZ ip_protocolr� Ztwelve_forwardZ last_hop_poolr� r� r� r� r� r� Z rate_classrt Zrate_limit_modeZrate_limit_dstZrate_limit_srcr� Z related_rulesr� r� Zsource_address_translationZ source_portr^ Ztraffic_classesZtranslate_addressZtranslate_portr� r( r; rV r) Z snat_poolZ vlans_settingr rW r r r �create_virtual9 s �������� � � � � ������ � ���� �� � �� ����r� c+ 3 C s� i d|�d|�d|�d|�d| �d| �d| �d|�d |�d |�d |�d |�d |�d|�d|�d|�d| �| | | |#|%|(|)d��}+d|d�d| d�d| d�d|"d�d|d�d|d�d|d�d�},t ||�}-t|+�}.||.d< t|.|,�}.|dur{t|d�|.d< |dur�t|d�|.d< |dur�t|d �|.d < | dur�t| d�|.d < |!dur�t|!d�|.d < |$dur�|$d kr�d d d!�|.d"< n+|$d#kr�d d#d!�|.d"< n |$d$kr�d d$d!�|.d"< n|$�d%�r�|$�d&�d' }/|/d%d!�|.d"< |'dur�t|'d�|.d(< |*du�r}t|*t��r$z|*d) |.d*< |*d+ �r d,|.d-< n |*d. �rd,|.d/< W ni t�y# d0j |*d1� Y S w |*d k�r.d |.d*< nO|*d2k�r8d2|.d*< nE|*�d+��sD|*�d.��r}z(|*�d&�d3 }0|*�d&�d' �d4�|.d*< |0d.k�rbd,|.d/< n |0d+k�rkd,|.d-< W n t�y| d5j |*d1� Y S w |&du�r�|&d+k�r�d,|.d+< n |&d.k�r�d,|.d.< z|-j t j | d6�d7|� � t j j�|.�d8�}1W t|1�S tjj�y� }2 z t| |2�W Y d}2~2S d}2~2ww )9a- A function to connect to a bigip device and modify an existing virtual server. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the virtual to modify destination [ [virtual_address_name:port] | [ipv4:port] | [ipv6.port] ] pool [ [pool_name] | none] address_status [yes | no] auto_lasthop [default | enabled | disabled ] bwc_policy [none] | string] cmp_enabled [yes | no] dhcp_relay [yes | no} connection_limit [integer] description [string] state [disabled | enabled] fallback_persistence [none | [profile name] ] flow_eviction_policy [none | [eviction policy name] ] gtm_score [integer] ip_forward [yes | no] ip_protocol [any | protocol] internal [yes | no] twelve_forward (12-forward) [yes | no] last_hop-pool [ [pool_name] | none] mask { [ipv4] | [ipv6] } mirror { [disabled | enabled | none] } nat64 [enabled | disabled] persist [none | profile1,profile2,profile3 ... ] profiles [none | default | profile1,profile2,profile3 ... ] policies [none | default | policy1,policy2,policy3 ... ] rate_class [name] rate_limit [integer] rate_limitr_mode [destination | object | object-destination | object-source | object-source-destination | source | source-destination] rate_limit_dst [integer] rate_limit_src [integer] rules [none | [rule_one,rule_two ...] ] related_rules [none | [rule_one,rule_two ...] ] reject [yes | no] source { [ipv4[/prefixlen]] | [ipv6[/prefixlen]] } source_address_translation [none | snat:pool_name | lsn | automap ] source_port [change | preserve | preserve-strict] state [enabled | disable] traffic_classes [none | default | class_one,class_two ... ] translate_address [enabled | disabled] translate_port [enabled | disabled] vlans [none | default | [enabled|disabled]:vlan1,vlan2,vlan3 ... ] CLI Example: .. code-block:: bash salt '*' bigip.modify_virtual bigip admin admin my-virtual source_address_translation=none salt '*' bigip.modify_virtual bigip admin admin my-virtual rules=my-rule,my-other-rule r� r� r� r� ri rj r� r� r� r� r� r� r� r� r� r� rn )r� r� r� r� r� r� r� r8 r� r: r� r0 Nr� r� r� r� r� r� r� r- r� r� r� r� r� r@ rA r� r� r� r� Tr� r� r� r� r� r� r r. r� rN r� rO )r r, r< r6 rD r3 r1 rC rG r# rq rS r r r rT r rH rU r% r r� r r r �modify_virtualj s� �������� � � � � ������ � ���� � �� ����r� c C r� )a� A function to connect to a bigip device and delete a specific virtual. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password name The name of the virtual to delete CLI Example: .. code-block:: bash salt '*' bigip.delete_virtual bigip admin admin my-virtual rN r� Nrv Trw r} r r r �delete_virtual� r� r� c C � t ||�}z+|r|�tj| d�dj||d� �}n|�tj| d�d|� � �}W t|�S W t|�S tjjyI } z t| |�W Y d}~S d}~ww )a A function to connect to a bigip device and list an existing monitor. If no name is provided than all monitors of the specified type will be listed. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password monitor_type The type of monitor(s) to list name The name of the monitor to list CLI Example: .. code-block:: bash salt '*' bigip.list_monitor bigip admin admin http my-http-monitor rN z4/ltm/monitor/{type}/{name}?expandSubcollections=true�r7 r0 � /ltm/monitor/Nrd �r$ r r � monitor_typer0 rV r rW r r r � list_monitor� �( ����� ���r� c K s� t ||�}i }||d< |�� D ]\}} |�d�s&|dvr&|�dd�}| ||< qz|jtj| d�d|� � tjj � |�d�} W t| �S t j j yZ } z t| | �W Y d } ~ S d } ~ ww ) ac A function to connect to a bigip device and create a monitor. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password monitor_type The type of monitor to create name The name of the monitor to create kwargs Consult F5 BIGIP user guide for specific options for each monitor type. Typically, tmsh arg names are used. CLI Example: .. code-block:: bash salt '*' bigip.create_monitor bigip admin admin http my-http-monitor timeout=10 interval=5 r0 �__)r$ r r r7 r� r� rN r� rO N)r r' rD rF rR rS r# r r r rT r rH rU r% r � r$ r r r� r0 �kwargsrV r) r� r+ r rW r r r �create_monitor� s& � ����r� c K s� t ||�}i }|�� D ]\}} |�d�s"|dvr"|�dd�}| ||< q z |jtj| d�d|� d|� � tjj � |�d�} W t| �S t j j yY } z t| | �W Y d } ~ S d } ~ ww ) an A function to connect to a bigip device and modify an existing monitor. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password monitor_type The type of monitor to modify name The name of the monitor to modify kwargs Consult F5 BIGIP user guide for specific options for each monitor type. Typically, tmsh arg names are used. CLI Example: .. code-block:: bash salt '*' bigip.modify_monitor bigip admin admin http my-http-monitor timout=16 interval=6 r� )r$ r r r7 r0 r� r� rN r� �/rO N)r r' rD rF rq rS r# r r r rT r rH rU r% r r� r r r �modify_monitor s( � � ����r� c C r� )a� A function to connect to a bigip device and delete an existing monitor. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password monitor_type The type of monitor to delete name The name of the monitor to delete CLI Example: .. code-block:: bash salt '*' bigip.delete_monitor bigip admin admin http my-http-monitor rN r� r� Nrv Trw r� r r r �delete_monitorI � ���� r� c C r� )a A function to connect to a bigip device and list an existing profile. If no name is provided than all profiles of the specified type will be listed. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password profile_type The type of profile(s) to list name The name of the profile to list CLI Example: .. code-block:: bash salt '*' bigip.list_profile bigip admin admin http my-http-profile rN z4/ltm/profile/{type}/{name}?expandSubcollections=truer� � /ltm/profile/Nrd �r$ r r � profile_typer0 rV r rW r r r � list_profiler r� r c K s� t ||�}i }||d< |�� D ]0\}} |�d�s?|dvr?|�dd�}zt| �||< W q tjjy> dj|| d� Y S w qz|j t j| d�d |� � tj j � |�d �} W t| �S tjjys } z t| | �W Y d } ~ S d } ~ ww ) a A function to connect to a bigip device and create a profile. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password profile_type The type of profile to create name The name of the profile to create kwargs ``[ arg=val ] ... [arg=key1:val1,key2:val2] ...`` Consult F5 BIGIP user guide for specific options for each monitor type. Typically, tmsh arg names are used. Creating Complex Args Profiles can get pretty complicated in terms of the amount of possible config options. Use the following shorthand to create complex arguments such as lists, dictionaries, and lists of dictionaries. An option is also provided to pass raw json as well. lists ``[i,i,i]``: ``param='item1,item2,item3'`` Dictionary ``[k:v,k:v,k,v]``: ``param='key-1:val-1,key-2:val2,key-3:va-3'`` List of Dictionaries ``[k:v,k:v|k:v,k:v|k:v,k:v]``: ``param='key-1:val-1,key-2:val-2|key-1:val-1,key-2:val-2|key-1:val-1,key-2:val-2'`` JSON: ``'j{ ... }j'``: ``cert-key-chain='j{ "default": { "cert": "default.crt", "chain": "default.crt", "key": "default.key" } }j'`` Escaping Delimiters: Use ``\,`` or ``\:`` or ``\|`` to escape characters which shouldn't be treated as delimiters i.e. ``ciphers='DEFAULT\:!SSLv3'`` CLI Example: .. code-block:: bash salt '*' bigip.create_profile bigip admin admin http my-http-profile defaultsFrom='/Common/http' salt '*' bigip.create_profile bigip admin admin http my-http-profile defaultsFrom='/Common/http' \ enforcement=maxHeaderCount:3200,maxRequests:10 r0 r� �r$ r r r r� r� �=Error: Unable to Parse JSON data for parameter: {key} {value}�r� r+ rN r� rO N)r r' rD rF rJ r rH rI r# rR rS r r rT r rU r% r � r$ r r r r0 r� rV r) r� r+ r rW r r r �create_profile� s2 5 ��� ����r c K s� t ||�}i }||d< |�� D ]0\}} |�d�s?|dvr?|�dd�}zt| �||< W q tjjy> dj|| d� Y S w qz |j t j| d�d |� d |� � tj j � |�d �} W t| �S tjjyv } z t| | �W Y d } ~ S d } ~ ww ) ab A function to connect to a bigip device and create a profile. A function to connect to a bigip device and create a profile. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password profile_type The type of profile to create name The name of the profile to create kwargs ``[ arg=val ] ... [arg=key1:val1,key2:val2] ...`` Consult F5 BIGIP user guide for specific options for each monitor type. Typically, tmsh arg names are used. Creating Complex Args Profiles can get pretty complicated in terms of the amount of possible config options. Use the following shorthand to create complex arguments such as lists, dictionaries, and lists of dictionaries. An option is also provided to pass raw json as well. lists ``[i,i,i]``: ``param='item1,item2,item3'`` Dictionary ``[k:v,k:v,k,v]``: ``param='key-1:val-1,key-2:val2,key-3:va-3'`` List of Dictionaries ``[k:v,k:v|k:v,k:v|k:v,k:v]``: ``param='key-1:val-1,key-2:val-2|key-1:val-1,key-2:val-2|key-1:val-1,key-2:val-2'`` JSON: ``'j{ ... }j'``: ``cert-key-chain='j{ "default": { "cert": "default.crt", "chain": "default.crt", "key": "default.key" } }j'`` Escaping Delimiters: Use ``\,`` or ``\:`` or ``\|`` to escape characters which shouldn't be treated as delimiters i.e. ``ciphers='DEFAULT\:!SSLv3'`` CLI Example: .. code-block:: bash salt '*' bigip.modify_profile bigip admin admin http my-http-profile defaultsFrom='/Common/http' salt '*' bigip.modify_profile bigip admin admin http my-http-profile defaultsFrom='/Common/http' \ enforcement=maxHeaderCount:3200,maxRequests:10 salt '*' bigip.modify_profile bigip admin admin client-ssl my-client-ssl-1 retainCertificate=false \ ciphers='DEFAULT\:!SSLv3' cert_key_chain='j{ "default": { "cert": "default.crt", "chain": "default.crt", "key": "default.key" } }j' r0 r� r r� r� r r rN r� r� rO N)r r' rD rF rJ r rH rI r# rq rS r r rT r rU r% r r r r r �modify_profile� s6 < ��� � ����r c C r� )a� A function to connect to a bigip device and delete an existing profile. hostname The host/address of the bigip device username The iControl REST username password The iControl REST password profile_type The type of profile to delete name The name of the profile to delete CLI Example: .. code-block:: bash salt '*' bigip.delete_profile bigip admin admin http my-http-profile rN r� r� Nrv Trw r� r r r �delete_profileX r� r )N)NN) NNNNNNNNNN)NNNNNNNNNNNNNNNNNNNNNNN)NNNNNNNNNNNNNNNNNNNNNN) NNNNNNNNNNNN)&NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN)'NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN).�__doc__Zsalt.exceptionsr Zsalt.utils.jsonr Zrequests.exceptionsr � ImportErrorr r rS r r r% r, r6 r< rJ rX r] r_ ra rf rh ru rx r~ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r r �<module> s� � <5.0 , ,2 � W (. � ( � %E> �b '/ � 8 � * �445. �4U ]
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings