be.ems/features/firewall/service/service_firewall.go

package service

import (
	"fmt"
	"os"
	"strconv"
	"strings"

	"ems.agt/features/firewall/model"
	"ems.agt/lib/core/cmd"
	"ems.agt/lib/core/utils/firewall"
	fireClient "ems.agt/lib/core/utils/firewall/client"
	"ems.agt/lib/core/utils/scan"
)

// 实例化服务层 ServiceFirewall 结构体
var NewServiceFirewall = &ServiceFirewall{}

// ServiceFirewall 防火墙 服务层处理
type ServiceFirewall struct {
}

// LoadBaseInfo 获取防火墙基础信息
func (s *ServiceFirewall) LoadBaseInfo() (model.FirewallBaseInfo, error) {
	var baseInfo model.FirewallBaseInfo
	baseInfo.PingStatus = s.pingStatus()
	baseInfo.Status = "not running"
	baseInfo.Version = "-"
	baseInfo.Name = "-"
	client, err := firewall.NewFirewallClient()
	if err != nil {
		if err.Error() == "no such type" {
			return baseInfo, nil
		}
		return baseInfo, err
	}
	baseInfo.Name = client.Name()
	baseInfo.Status, err = client.Status()
	if err != nil {
		return baseInfo, err
	}
	if baseInfo.Status == "not running" {
		return baseInfo, err
	}
	baseInfo.Version, err = client.Version()
	if err != nil {
		return baseInfo, err
	}
	return baseInfo, nil
}

// LoadBaseInfo 获取防火墙基础信息
func (s *ServiceFirewall) RulePage(querys model.RuleQuerys) (map[string]any, error) {
	var (
		datas     []fireClient.FireInfo
		backDatas []fireClient.FireInfo
	)

	data := map[string]any{
		"total": 0,
		"rows":  backDatas,
	}

	client, err := firewall.NewFirewallClient()
	if err != nil {
		return data, err
	}
	if querys.Type == "port" {
		ports, err := client.ListPort()
		if err != nil {
			return data, err
		}
		if len(querys.Info) != 0 {
			for _, port := range ports {
				if strings.Contains(port.Port, querys.Info) {
					datas = append(datas, port)
				}
			}
		} else {
			datas = ports
		}
	} else {
		addrs, err := client.ListAddress()
		if err != nil {
			return data, err
		}
		if len(querys.Info) != 0 {
			for _, addr := range addrs {
				if strings.Contains(addr.Address, querys.Info) {
					datas = append(datas, addr)
				}
			}
		} else {
			datas = addrs
		}
	}

	var datasFilterStatus []fireClient.FireInfo
	if len(querys.Status) != 0 {
		for _, data := range datas {
			portItem, _ := strconv.Atoi(data.Port)
			if querys.Status == "free" && !scan.ScanPortWithProto(portItem, data.Protocol) {
				datasFilterStatus = append(datasFilterStatus, data)
			}
			if querys.Status == "used" && scan.ScanPortWithProto(portItem, data.Protocol) {
				datasFilterStatus = append(datasFilterStatus, data)
			}
		}
	} else {
		datasFilterStatus = datas
	}
	var datasFilterStrategy []fireClient.FireInfo
	if len(querys.Strategy) != 0 {
		for _, data := range datasFilterStatus {
			if querys.Strategy == data.Strategy {
				datasFilterStrategy = append(datasFilterStrategy, data)
			}
		}
	} else {
		datasFilterStrategy = datasFilterStatus
	}

	total, start, end := len(datasFilterStrategy), (querys.PageNum-1)*querys.PageSize, querys.PageNum*querys.PageSize
	if start > total {
		backDatas = make([]fireClient.FireInfo, 0)
	} else {
		if end >= total {
			end = total
		}
		backDatas = datasFilterStrategy[start:end]
	}

	// datasFromDB, _ := hostRepo.ListFirewallRecord()
	for i := 0; i < len(backDatas); i++ {
		// for _, des := range datasFromDB {
		// 	if querys.Type != des.Type {
		// 		continue
		// 	}
		// 	if backDatas[i].Port == des.Port && querys.Type == "port" &&
		// 		backDatas[i].Protocol == des.Protocol &&
		// 		backDatas[i].Strategy == des.Strategy &&
		// 		backDatas[i].Address == des.Address {
		// 		backDatas[i].Description = des.Description
		// 		break
		// 	}
		// 	if querys.Type == "address" && backDatas[i].Strategy == des.Strategy && backDatas[i].Address == des.Address {
		// 		backDatas[i].Description = des.Description
		// 		break
		// 	}
		// }
	}

	// if req.Type == "port" {
	// 	apps := u.loadPortByApp()
	// 	for i := 0; i < len(backDatas); i++ {
	// 		port, _ := strconv.Atoi(backDatas[i].Port)
	// 		backDatas[i].IsUsed = common.ScanPort(port)
	// 		if backDatas[i].Protocol == "udp" {
	// 			backDatas[i].IsUsed = common.ScanUDPPort(port)
	// 			continue
	// 		}
	// 		for _, app := range apps {
	// 			if app.HttpPort == backDatas[i].Port || app.HttpsPort == backDatas[i].Port {
	// 				backDatas[i].APPName = app.AppName
	// 				break
	// 			}
	// 		}
	// 	}
	// }
	// go u.cleanUnUsedData(client)

	return data, nil
}

func (s *ServiceFirewall) pingStatus() string {
	if _, err := os.Stat("/etc/sysctl.conf"); err != nil {
		return "None"
	}
	sudo := cmd.SudoHandleCmd()
	command := fmt.Sprintf("%s cat /etc/sysctl.conf | grep net/ipv4/icmp_echo_ignore_all= ", sudo)
	stdout, _ := cmd.Exec(command)
	if stdout == "net/ipv4/icmp_echo_ignore_all=1\n" {
		return "Enable"
	}
	return "Disable"
}