[PATCH pve-network v5 25/46] sdn: add route map module

[Stefan Hanreich <s.hanreich@proxmox.com>]

Defines helpers for common operations (reading / writing
configuration) as well as the required formats / schema definitions
for the route map API.

The Route Map ID format currently rejects all IDs that could be
auto-generated by PVE entities, to prevent accidental overrides of
built-in route maps. Instead of re-defining route maps, users can
create a new custom route map and select that in the EVPN / BGP
controller, if they want to override the auto-generated route map.

Signed-off-by: Stefan Hanreich <s.hanreich@proxmox.com>
---
 src/PVE/Network/SDN/Makefile     |   3 +-
 src/PVE/Network/SDN/RouteMaps.pm | 197 +++++++++++++++++++++++++++++++
 2 files changed, 199 insertions(+), 1 deletion(-)
 create mode 100644 src/PVE/Network/SDN/RouteMaps.pm

diff --git a/src/PVE/Network/SDN/Makefile b/src/PVE/Network/SDN/Makefile
index e8bed83..2a476ce 100644
--- a/src/PVE/Network/SDN/Makefile
+++ b/src/PVE/Network/SDN/Makefile
@@ -9,7 +9,8 @@ SOURCES=Vnets.pm\
 		Dhcp.pm\
 		Fabrics.pm\
 		Frr.pm\
-		PrefixLists.pm
+		PrefixLists.pm\
+		RouteMaps.pm
 
 
 PERL5DIR=${DESTDIR}/usr/share/perl5
diff --git a/src/PVE/Network/SDN/RouteMaps.pm b/src/PVE/Network/SDN/RouteMaps.pm
new file mode 100644
index 0000000..9e44546
--- /dev/null
+++ b/src/PVE/Network/SDN/RouteMaps.pm
@@ -0,0 +1,197 @@
+package PVE::Network::SDN::RouteMaps;
+
+use strict;
+use warnings;
+
+use PVE::Cluster qw(cfs_register_file cfs_read_file cfs_lock_file cfs_write_file);
+use PVE::JSONSchema qw(get_standard_option);
+use PVE::INotify;
+use PVE::Network::SDN;
+use PVE::RS::SDN::RouteMaps;
+
+PVE::JSONSchema::register_format(
+    'pve-sdn-route-map-id',
+    sub {
+        my ($id, $noerr) = @_;
+
+        if ($id =~ m/^(pve_.*|MAP_VTEP_IN|MAP_VTEP_OUT|correct_src)$/) {
+            return undef if $noerr;
+            die "route map ID '$id' is currently reserved and cannot be used\n";
+        }
+
+        if ($id !~ m/^[a-zA-Z0-9][a-zA-Z0-9-_]{0,30}[a-zA-Z0-9]?$/i) {
+            return undef if $noerr;
+            die "route map ID '$id' contains illegal characters\n";
+        }
+
+        return $id;
+    },
+);
+
+our $ROUTE_MAP_MATCH_FORMAT = {
+    key => {
+        type => 'string',
+        enum => [
+            'route-type',
+            'vni',
+            'ip-address-prefix-list',
+            'ip6-address-prefix-list',
+            'ip-next-hop-prefix-list',
+            'ip6-next-hop-prefix-list',
+            'ip-next-hop-address',
+            'ip6-next-hop-address',
+            'metric',
+            'local-preference',
+            'peer',
+        ],
+    },
+    value => {
+        type => 'string',
+        optional => 1,
+        description => 'value that should be matched on',
+    },
+};
+
+PVE::JSONSchema::register_standard_option(
+    'pve-sdn-route-map-id',
+    {
+        description => "The SDN route map identifier",
+        type => 'string',
+        format => 'pve-sdn-route-map-id',
+    },
+);
+
+PVE::JSONSchema::register_standard_option(
+    'pve-sdn-route-map-order',
+    {
+        description => 'The index of this route map entry',
+        type => 'integer',
+        minimum => 0,
+        maximum => 2**32 - 1,
+    },
+);
+
+cfs_register_file(
+    'sdn/route-maps.cfg', \&parse_route_maps_config, \&write_route_maps_config,
+);
+
+sub parse_route_maps_config {
+    my ($filename, $raw) = @_;
+    return $raw // '';
+}
+
+sub write_route_maps_config {
+    my ($filename, $config) = @_;
+    return $config // '';
+}
+
+sub config {
+    my ($running) = @_;
+
+    if ($running) {
+        my $running_config = PVE::Network::SDN::running_config();
+
+        # if the config hasn't yet been applied after the introduction of
+        # route maps then the key does not exist in the running config so we
+        # default to an empty hash
+        my $route_maps_config = $running_config->{'route-maps'}->{ids} // {};
+        return PVE::RS::SDN::RouteMaps->running_config($route_maps_config);
+    }
+
+    my $route_map_config = cfs_read_file("sdn/route-maps.cfg");
+    return PVE::RS::SDN::RouteMaps->config($route_map_config);
+}
+
+sub write_config {
+    my ($config) = @_;
+    cfs_write_file("sdn/route-maps.cfg", $config->to_raw(), 1);
+}
+
+sub route_map_properties {
+    my ($update) = @_;
+
+    my $properties = {
+        'route-map-id' => get_standard_option('pve-sdn-route-map-id'),
+        'order' => get_standard_option('pve-sdn-route-map-order'),
+        digest => get_standard_option('pve-config-digest'),
+        action => {
+            description => 'Matching policy of a route map entry.',
+            type => 'string',
+            enum => ['permit', 'deny'],
+            optional => $update,
+        },
+        set => {
+            type => 'array',
+            items => {
+                type => 'string',
+                format => {
+                    key => {
+                        type => 'string',
+                        enum => [
+                            'ip-next-hop-peer-address',
+                            'ip-next-hop',
+                            'ip-next-hop-unchanged',
+                            'ip6-next-hop-peer-address',
+                            'ip6-next-hop-prefer-global',
+                            'ip6-next-hop',
+                            'local-preference',
+                            'tag',
+                            'weight',
+                            'metric',
+                            'src',
+                        ],
+                    },
+                    value => {
+                        type => 'string',
+                        optional => 1,
+                        description => 'value that should be set to',
+                    },
+                },
+            },
+            optional => 1,
+        },
+        match => {
+            type => 'array',
+            items => {
+                type => 'string',
+                format => $ROUTE_MAP_MATCH_FORMAT,
+            },
+            optional => 1,
+        },
+        'exit-action' => {
+            type => 'string',
+            format => {
+                key => {
+                    type => 'string',
+                    enum => [
+                        'on-match-goto', 'on-match-next', 'continue',
+                    ],
+                },
+                value => {
+                    type => 'string',
+                    optional => 1,
+                    description => 'type of exit action',
+                },
+            },
+            optional => 1,
+        },
+        call => get_standard_option('pve-sdn-route-map-id', {
+                optional => 1,
+        }),
+    };
+
+    if ($update) {
+        $properties->{delete} = {
+            type => 'array',
+            optional => 1,
+            items => {
+                type => 'string',
+                enum => ['set', 'match', 'call', 'exit-action'],
+            },
+        };
+    }
+
+    return $properties;
+}
+
+1;
-- 
2.47.3